Virus Hashes

Viruses and worms
1

Heloo Guys,

I want to ask, whether there is to know about type virus hashes?
I’ve read virus hashes almost like ransomware, so the virus is encrypted file
using md5,sha1, dan sha256.
Whether avast antivirus can detect virus hashes?

Thanks & Best Regard,
Dominic

2

Virus hashes don’t exist.
There are only file hashes and yes they can be for a malicious file.

avast is using many detections/protection methods and hash is just one of them.

3

Hello Eddy,

Thanks for the response to my question,
Whether avast can detect virus hashes?
If Eddy to know more about virus hashes please inform me.

Thanks & Best Regard,
Dominic

4

I think this method is more for filerep where avast labs use malware similarity search to find files with similar behaviour/hashes/metadata.

Rest assured avast is one of the better antiviruses against ransomware.Behav. shield is very good too.

5

Dominic, see reply #1

6

Hello TI199,

I believe avast antivirus is one of the best to face ransomware is currently underway.
but one of our customers who use avast ask me about avast, whether antivirus avast can handle virus hashes.
If friends forum avast have already tried scan virus hashes please tell me.

Thanks & Best Regard,
Dominic

7

I already answered that question.

8

Hellp Eddy,

Based on the opinion Eddy (virus hashes do not exist)
So on avast antivirus can’t detect virus hashes.
really like that Eddy? :-[

Thanks & Best Regard,
Dominic

9

See the second line in reply #4

10

Okey Eddy,

thanks for the explanation,
but I need an answer to or not to detect virus hashes on antivirus avast

Thanks & Best Regard,
Dominic

11

Files have a unique # hash, viruses (virus is probably the wrong word as malware is much more common) don’t specifically have a # hash as it is generally contained within a file. Change the file the # changes but the malware inside may not.

Avast like many other AVs detects malware by ‘its malware signature’ this isn’t the same as a # hash as such but can uniquely identify a virus/malware. The trick is to get that signature/definition as small as possible to make scanning quicker, but retain accuracy of detection.

Avast, as mentioned also uses a file rep check which is reputation based, it checks a ‘files’ # hash against a cloud database if that isn’t found, then it come in for more detailed inspection.