See: https://www.virustotal.com/nl/url/3f74f93715f9220e419b1266bd60b3907fe836c2812609996e291bf5adc55389/analysis/
and https://www.virustotal.com/nl/file/0cd38e5f34e2c77809f3673d764336f3c2b6d3d93c67ad4bfdad09a048d9167c/analysis/1381441585/
IDS alerts here: http://urlquery.net/report.php?id=6608112
polonus
Adware detection must get better not only avast has issues there.
well…it is new
First submission 2013-10-08 02:05:16 UTC ( 3 days, 11 hours ago )
is detected
what is the problem ?
Well avast! Shield detections are not (always) incorporated in the VT results.
Good we have protection against it.
The download (D989.tmp) was blocked actually before it could be downloaded and as a second option can be excluded from the scan list
when the user does not consider it as suspicious or dangerous,
polonus
That is true, Evo-gen is dynamical detection, and is not therefore incorporated in Virustotal, as it only contains static detections.
when the detection through the cloud
This is not the same. URL blocks are also streamed via cloud services, yet are static, and are visible in VT. Evo-gens, on the other hand, are only on-exec/on-move, and not on-demand.
Thank HonzaZ.