Last VPS Update (0550-0)

Avast Free Antivirus / Premium Security
1

Hi all, the latest virus database update (0550-0) is bigger than usual (almost 300K). This is because it has an improved bits of malware detection engine in it that will enable us to detect more viruses in the near future. It should also bring increased scanning speed (although that depends on many other factors).

I’d be glad if you could comment any scanning speed changes you notice with the new VPS (if any).

Thanks
Vlk

2

Thanks for explanation, as I’ve noticed it was unusual big. And maybe it’s the reason of interesting version number. As far as I remember version ****-0 was on Mondays all the time (I mean at the start of a new week). :wink:

3

Thats good to hear. I mean improvements on detection. GUI and other interface stuff along with features and tweaks are already in ADVANCED+ level. Just keep on working on detection. Thats the most important thing! I’m just heading to test avast! for some anti-termination thing and i’ll also test this :slight_smile:

4

That is a great news :smiley:

Hope you continue to improve the detection of this great AV…

Thanks :wink:

5

Great news ;D
Thanks for the info!
Now scanning to see the results :slight_smile:

6

OK, I think that I found a problem :-\

While I was doing the scan(Normal scan with enabled scanning archives files) avast! found a virus(Win32:Trojan-Gen. {VC}) in file called Uninstal.exe( BTW this is a false positive), and pressed the Repair button and the scanning proceed.In the end the report said that the file was successful repaired. After that I made a manual scan only on that file with ashQuick and avast! found that virus again, I pressed the repair button again and avast! said that the file was repaired again, but actually the file wasn’t repaired, because thats a false positive. :-\

EDIT: I forgot to say that this file was detected as false positive and before, but it was fixed, and now again…

7

Generally Trojans can’t be repaired as it isn’t an infected file and I wouldn’t have thought that the Repair button would be live (allow the option).
So it would appear that the FP on an existing exe file that may possibly have been scanned by the VRDB (?) may allow the repair option to be attempted. That would explain why it would appear the repair completed with success as it hadn’t changed (been infected).

Being an FP detection could also explain why it would be detected again even after repair.

I guess you will have to send it to virus @ avast.com again.

8

I’ve already send the file to virus[at]avast[dot]com :slight_smile:

BTW the full system scan took faster that usual ;D

9

I think the Repair buttom is always live (not greyed), but it works only when it’s possible to use the VRDB

A false positive, a real virus or any other unrepairable virus. I think Repair will be always there. Works only when it’s possible.

This is the strange part… I mean, the repair being completed…

Again, my opinion is that this is not related with a false positive or real infection. Being detected again is due to the virus behavior (mutating, changing, appearing in other files, reinfecting, etc.) and the avast! detection but not with being a false positive.
A false positive could be detected just once… repaired, deleted, etc. and does not appear anymore.
The strange, again, is a sucesfull repair…

10

I thought that avast were making changes to only offers options that are relevant to the infected file. Even if it may not be one that the VRDB would usually assist in the repair.

I did a test with eicar.com and ashQuick.exe and tried a repair (note the mention of the VRDB) which failed.

So I don’t understand how it could complete with success yet still detect an infection on the repaired file.
To me that indicates if the repair was a success then detected again the detection (initial or second) may be suspect. Especially when you consider that this file was previously classed as an FP and resolved only to come back.

11

Maybe you’re right and I’m wrong… I’m not sure this was changed is last versions ::slight_smile: ???

12

No, that was my assumption that this was to change but obviously it hasn’t, otherwise I shouldn’t have been able to select repair.

By being able to run a repair on eicar.com which isn’t in a system or program files folder I wouldn’t have thought that it would be in the VRDB, so it would appear that Repair is live and hasn’t changed from before.

13

Oh I see…
So, something still strange in the ‘repair’ behavior… or it is just a replicant virus coming, being cleaned, coming back again?

14

hmm still no detection of anything i sent to avast at Thursday … well let’s hope it will be soon …

15

@ Vlk
No difference in scan speed for me on a Standard Scan without archives, time: 7:37 minutes for total of 5.3GB of scanned files, exactly the same as my last scan to the second.

16

Does this improvement enable faster speed in real-time scanner (standard shield)?

It’s quite strange that I’ve noticed AVG’s on-demand scanning speed usually slower than avast! but AVG is a bit faster than avast! in real-time scanner, at least on my machine.

17

Didnt really notice any speed change. Dont know really.

Did a Through scan without archives:

Number of scannned files and folders: 158711/13616
Run-Time: 01:22:57
Total size of scanned files: 29.3GB

18

I know, most Trojans now have the “can-be-repaired” flag set (incorrectly). This will be fixed soon but shouldn’t really be a problem…

19

I think it’s a problem when the repair buttom is AVAILABLE, you click it and the system answer it has been processed CORRECTLY.
After that you realise NOTHING was done or repaired. This is a problem: the user is not corrected informed and don’t know he/she could be infected yet :stuck_out_tongue:

20

Strange, for me, speed is much better now ::slight_smile:
(http://forum.avast.com/index.php?topic=18004.0)