And 45 days after I sent the worm to AVAST - Page 2

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View

Re: And 45 days after I sent the worm to AVAST




| On Wed, 26 Aug 2009 19:49:46 -0400, "David H. Lipman"



Quoted text here. Click to load it



| Your file has expired or does not exists.

I'll have VT admins look into it.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: And 45 days after I sent the worm to AVAST



[...]

Quoted text here. Click to load it

Why?

The one on your computer and one on their's may not be configured the
same - even if the engine versions are the same.



Re: And 45 days after I sent the worm to AVAST





FromTheRafters wrote:
Quoted text here. Click to load it
WTF?



Re: And 45 days after I sent the worm to AVAST






| FromTheRafters wrote:
Quoted text here. Click to load it




| WTF?


Different signature revisions albeit VT should get multiple updates.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: And 45 days after I sent the worm to AVAST



Quoted text here. Click to load it

What heuristic level does VT use with the Avast! scanning engine as
opposed to what a desktop machine might use?

Besides, VT doesn't have the luxury of possible (ancillary) context
scanning.




Re: And 45 days after I sent the worm to AVAST



Quoted text here. Click to load it

Differences in definitions, the "engine" doesn't exist in a vacuum - it
is more like a "engine/definitions" set that may contain disparity
despite the engines being the same.

A submitted file scanner wouldn't have the luxury of context. I wouldn't
expect identical results from an installation of Avast! against an
Avast!  file submission scanner.

Okay, so I don't know how Avast! works, but it would be possible that
the "program" does some preparatory work (such as unpacking archives )
prior to giving the "engine" a go at the results. If this is the case,
even more reason to expect variance.

Sometimes, a file's contents changes subtly during transmission - maybe
not that often anymore...




Re: And 45 days after I sent the worm to AVAST




Quoted text here. Click to load it

The malware submission at Avast is being upgraded and will be finished  
soon.
--
This post was created using Opera's revolutionary e-mail client:  
http://www.opera.com/mail /

Site Timeline