Why don't you add definitions for undetected viruses?

Viruses and worms
21

avast added the detection of the other 2 trojans in the following updates:

VPS 0403-22, 31.03.2004
JS:Exploit-Bytverify-7, JS:Exploit-Bytverify-8, JS:OpenConnection-B, JS:Shinwow
VPS 0404-3, 06.04.2004
JS:Beyond-B, JS:Gummy [Trj]

why didn’t alwil send me an e-mail to tell me that instead of adding the silently? ::slight_smile: ???
I sent them to CA and they sent me an email the next day to inform me that they added the detection of these trojans to thier virus db:

Dear Mina Guindy,

This is to notify you of the results of your submission, issue number
314388.

With regards to the file “Beyond.class” submitted by you on 05 Apr
02:39:42 (Australian Eastern Standard Time), we have added detection
for Java/ByteVerify.Trojan to the signature files for the InoculateIT
engine.

The Compiled JAVA Class file “Beyond.class” has been determined to be
malicious. The file has been identified as Java.Shinwow.N trojan.

Aliases reported by other AV products are listed here:
(TrojanDownloader.Java.OpenConnection.e) (Exploit-ByteVerify)

CA antivirus products address this malware as follows:

eTrust Antivirus 6.x/v7 (Vet Engine)
Engine Update version Last Update
11.4.0 11.4.8257 05 Apr

eTrust Antivirus 6.x/v7 (InoculateIT Engine)
Engine Update version Last Update
23.64.0 23.64.61 06 Apr

22

Hi minacross, you found that Avast detects your files when I was checking your files from the mail and searching for when the signatures were added.

We usually don’t answer on virus submissions if not required explicitelly. As Pavel wrote, the number of contributed files is high.

23

I understand this,but still there were added only two undetected viruses from my archive. Whats with the rest?

24

I also recently sent in a “prorat” trojan that the Avast authors have not added. That was over a week ago. Several other virus scanners did detect it, but Avast didn’t.

In fact when I first emailed it my ISP sent Avast an email stating the file was infected with a trojan… Avast then sent me another email asking me to password protect it which I did and re-email it.

This is very discouraging to me, as how can I have faith in using your virus scanner when you won’t add legitimate trojan detection when people send them in? Some virus program have it listed as medium to high for severity also.

Although Avast is not alone, I also emailed a different trojan to Etrust that their software didn’t pick up, and they too replied stating that it was a trojan, yet never added it to their updates either.

Funny thing is that the free AVG virus scanner picked up both of those two trojans.

25

Yeah i got the same thinking. You must understand that Alwil guys are working really hard,but i want to improve detection even more,because you get trust with this. Peoples will say wow avast! picked viruses that Pc-cillin or Panda missed (even if its some non important virus/worm) and they’ll probably switch to avast!. Its very simple and i see this every day.