AVAST! response (or it's absence)

Hi ,
I found several days ago 3 !!! trojans that not detected by Avast! while detected by Kaspersky , AVG and AntVir (one of them also detected by Symantec) .

Send then to Avast! - no reply , yestuday resent them again … still no response.
Is it always like this ? What is usual time to respond to new threat ?

Hi Lord KiRon,

Just for the record what were the names of these three trojans? what is your OS?
So our forum members can get the technical info on these trojans.

polonus

You will not usually receive a response unless they require more information. The virus[at]avast.com receives in excess of 4000 emails per day, which have to be checked, prioritised and actioned.

If you zipped and password protected the sample/s you sent (so email server AVs en route don’t delete the sample), then it should have got through, if you didn’t receive a bounce.

This has been a going on issue but the thing like Tech said that they can not check all the received files in one day but when there is an emergency they said that an update can be out within 10 minutes which is pretty good.

However I was wondering how many people actually check the viruses is it only one person ?
Because as some of you might have noticed Avast is getting more popular so the more time goes by the more samples will be received so maybe there should be a second person checking that email adress.

And lastly I remember that igor mentioned that most of the emails they get is junk so maybe there could be a program for experienced users to send viruses with the user specifying wheather they are possitive that its a virus or that they just think itsa suspicious. I think that it would priorize the emails and so help the avast staff get the possitives first.

Hope this helps.

Al968

Tech said ?

There is more than one team member checking the emails and samples.

The emails send via the chest submission function (although they are sent to the same email address) are filtered into another mailbox and handled differently.

OK , first I have to say that the trojan droppers detected were NOT detected by AVAST so they were not in chest (They were detected by two other antiviruses).

But the story had happy ending - today’s update detect all 3 of them.
If anyone interested they detected as :

Win32:Agent-CJJ [Trj]

Win32:Adloader-FE [Trj]

Win32:Tibs-VY [Trj]

Good job avast team but I really would like to be able to recieve at least some kind of automatic responce at least to know my mail got thru next time.

Well, I can’t speak for Alwil team.
Karel is doing the best for our updates.
But for sure, I can’t speak that they don’t analyse all files.
I can say, by experience, that they don’t answer all the emails that they receive. They make focus on the virus database update and not answering the emails. Which seems to be the best policy. First security and work than good relationship 8)

I would agree with that, an auto responder is so easy to set-up just to acknowledge receipt of the sample I don’t know why they don’t have it. I know some don’t like auto responders and a personal reply for over 4000 emails per day isn’t practical. But, any form of acknowledgement would have my vote, I have suggested it before, not knowing if the sample has been received could make you send it again adding to the load.

sorry DavidR, for some reason I thogh that Tech had said it :-
Well anyway I do agreee that an email saying that the virus was received would be nice :wink:

Thanks

Al968

I agree…
It would be nice if the user can choose about receiving or not an email answer by a setting in the forum profile, for instance.
The submition process is not as fast neither as good as we want.
But, anyway, when an user submit a lot of files maybe he/she doesn’t want to receive an automated answer for each submition. Could be boring…

yes thats also true.
Can we have the alwil word on this ?

Thanks

Al968

Hmmm… maybe… but there are tons of posts here last days… they will have a priority and discussing submition process is a ‘long’ story…

I have to repeat - we’re aware of the virus submission system currently being a weak spot in avast, and are working on it. A new system is in preparation. It’s taking some time but I believe it will be well worth the effort (and wait).

Cheers
Vlk

Today e-mailed to Avast! rpcc.dll thing detected ONLY (from ~20 antiviruses and anti-adwares I tried) by Privx1 and CastleCops ( http://fileinfo.prevx.com/spyware/qq455745092789-RPCC25941822/RPCC.DLL.html , http://www.castlecops.com/o20list-310.html ).

A nasty thing - constantly downloads other trojan viruses …

Let’s see how long it will take for Avast! to analize and update :wink:

Sounds great, keep up the good work!

I don;t know if its in place now but I can tell that there seems to be updates more frequently :wink:
Keep Up the good Work :slight_smile:

Al968

On one hand it’s good , on another … week passed and Avast!still does not recognize the virus I sent …