If I’m not wrong, it should be generic signature for Trojan-like malware, I’ve noticed avast! now detects some malware samples I sent to Alwil a few weeks a go as Win32:Trojan-gen. xxx.
But that brings up a question. If 25,000 new detections were just added and we now have a total of 55,899 did we really just increase are detections by almost 70% !?
Not at all…
I mean, look e.g. at the latest AV-comparatives.org on-demand test (since it’s so popular quoting it here) - February 2006.
The test consisted of (unique) 474,759 samples, of which avast detected 444,293.
So, even in February, avast detected at least 444,293 “viruses” - even though in reality, it is much more, actually… (IBK’s archives, while comprehensive, are by no means “complete” - they can’t really be).
Let’s hope that there are many new generic signatures for Trojan-like malware because that is really the only area in which avast! is lacking at this time. If it can improve in detecting trojans than that will be incredible.
Keep pumping 'em out (signatures that is) avast! Team. It is becoming very obvious just how much avast! has been improving it’s overall detections over the last year or so. Keep up the good work.
I’m hoping to see more signatures like Win32:Ardamax-gen, Win32:Swizzor-gen, Win32:SpyBot-gen and Win32SdBot-gen4 (and etc with numbers).
McAfee is making generic signatures for nearly every family and they’re pretty good in general because of this.
And so… is this? When an VPS update does not show in Avast web page (happens with certain frequency) is it because of soooooo many virus detected that makes it virtually “impossible” to be written in the home page?
Well, not exactly - when the VPS update is not listed on the history page, this is because there were not new samples names(witch is the case with the last VPS update, the update contained 25000 new detections, but these detections are so-called generic detections, like the others in this topic mentioned) added or just the VPS update fixes some False positive.
Yes, this is very interesting question :
Or won’t it be better to fully remove the virus encyclopedia from the program (I know that this should be in the WishList topic, but…) - I mean when an ordinary user opens the encyclopedia and see only 56000 sample names, and after that compare avast! with other AV, in many cases the user will choose the AV with more virus signatures showed in the program. So this is a bit confusing or let it say missleading for some users, in my opinion. For example if I am not wrong for the same reason VBA32 removed their Virus list from their product.
BTW: Vlk, have you already added the missed samples from the February AV-comparatives test ? :
Rather than hearing from all the wannabee business managers of avast and the numbers they think avast should be advertising … not one of which will do one d*mned thing to keep my system safe tomorrow and all the tomorrows to come perhaps we can hear a bit more about Dwarden’s concern about missing information provided to avast.
How does the avast team respond to a report that it is missing infections that were reported to it some time ago?
However, if a user says that there are infections still undetected that were reported “a long time ago” I have to guess they are speaking of more than a few weeks.
How would you want Dwarden to deal with specific longstanding issues that have not been addressed?