PUP Locky not block by Avast!

Viruses and worms
1

They will be sent to virus@avast.com and also submit@virus.avast.com

Result of analysis

index.html.vir

https://www.virustotal.com/en/file/56ea343bc033de76abc1dd47701a7385bca1b7af898b64d21661d183d4125c0b/analysis/1457826389/

xagainit.js.vir

https://www.virustotal.com/en/file/7fa8424d776dd3e538ac8dc52d29ad2256e5bbcfc4238be27f0a1d82dbba5f69/analysis/1457826419/
Got this from https://forum.avast.com/index.php?topic=184212.0 @jefferson sant Posted it about 3 days ago and no blocking :o

2

Hello,

these files are not malicious, detections from others Avs are potentially unwanted programs which is really hard to specify for each AV

3

So why not Avast! NOT specify it as a PUPS even it PUP Mode on? Ransomwares can spread via PUP aswell as Macro.So Avast! should block them :slight_smile:

4

it will in next stream update. When some programs allows to spread ransomware then it is not a PUP but malware it is not a case of these two files. Macro and PUP are something completely different, macro is specific format and PUP is name for Potentially Unwanted Programs which can by any format

5

Thanks for the information :slight_smile: