Win32:Burper Joke ( VirusTotal engine VS my avast! )

Avast Free Antivirus / Premium Security
1

Check Below !

http://img715.imageshack.us/img715/8002/avastscan.png

Virus total report → http://www.virustotal.com/file-scan/report.html?id=76079a7565b3c8fcd72fd5b2175dd60fc4a6be865431aeb67b6edfe3e25f50fd-1325306482

Avast 6.0.1289.0 2011.12.30 Win32:Burper [Joke]

I am updated !!

http://img210.imageshack.us/img210/8880/versionp.png

WTF ???

Am I wrong at something ???

2

You have to enable PUP detection for it to be detected.

3

In custom scan settings or what ?? can u guide ??
Cause i left it on default settings only while installing …
Now i even have the enable PUP “on” under custom scan options … ???

4

I have PUP enabled in all shields and all scans.

5

Didn’t work !!
After enabling PUP “on” in all shields avast! blocks it while Downloading through web shield …
But fails to clear the Downloaded File … says it has no threat …

6

This is the file : xoomer.virgilio.it/g_leone4/burp.exe

7

Here when pup is enabled then its detected.

Mostly I have seen if the detection is a pup then its mentioned with the detection like win32Trojan(PUP)but this detection doesn’t shows PUP with the detection name as usually Avast shows.

Thanx
Naren

8

Besides the File System Shield PUP, have you tried setting higher sensitivity and enabling PUP also in the “scan from windows explorer” manual scan?

Please report back.

9

Here select folder to scan configured to detect PUP & sensitivity set to high detects it.

Which scan should I congigure for context menu scan?

10

My "select folder to scan settings "

http://img17.imageshack.us/img17/4293/configc.jpg

Didn’t help !! Scan ended with no findings …

But While opening it blocked it – Which it did not do b4 with heur “factory settings”
But how can VT find that ?? Does VT try to open the file ?

11

That would be the scan from windows explorer ::slight_smile:

12
But how can VT find that ?? Does VT try to open the file ?

quote VirusTotal

*VirusTotal AV engines are commandline versions, so depending on the product, they will not behave exactly the same as the desktop versions: for instance, desktop solutions may use techniques based on behavioral analysis and count with personal firewalls that may decrease entry points and mitigate propagation, etc. *In VirusTotal desktop-oriented solutions coexist with perimeter-oriented solutions; heuristics in this latter group may be more aggressive and paranoid, since the impact of false positives is less visible in the perimeter. It is simply not fair to compare both groups.
13

I understand how this avast! works … :frowning:
Thanks for the response …

14

I am running the latest version on XP SP3. Under Scan category I dont have the scan you have shown in the screenshot i.e Scan with Windows Explorer?? I have 4 scans i.e Quick, Full, Removable Media & Select folder scan.

Thanx
Naren

15

below the scan type say below quick scan there is more details button… . its in the bottom to the right… click on it and it will show scan for pup…from there u can switch it to on or off…i have it on in all my scans and in all my real time shields…

16

Go to avast main GUI → settings → basic → “show special scans in avast user interface”. Then review again the scan types available.

17

On the main window of AvastUI, at the top is Settings. Click on that, and on the Basic Settings is “Show special scans in the avast! user interface”. Checkmark it and then it will appear.

18

We enable PUP on everything!

And set Web Shiels sensitivity to HIGH!