Serious Discussion AVAST is letting this malware run even with Hard Mode enabled.

[Pilot777]

AVAST is letting this malware (VirusTotal) run freely despite Hardened Mode being enabled. I find it difficult to believe that this sample is on the Avast safe software list. Other samples do get blocked by Hardened Mode just fine.

Spoiler

 

[TuxTalk]

Norton instant detects it.

 

[Jonny Quest]

Norton instant detects it.
View attachment 280982

I like the information they include, easy to follow and read.

 

[BigWrench]

I like the information they include, easy to follow and read.

Much, MUCH easier than most.

 

[Ink]

Send Avast the file.

Report malicious file

www.avast.com

 

[Andy Ful]

AVAST is letting this malware (VirusTotal) run freely despite Hardened Mode being enabled. I find it difficult to believe that this sample is on the Avast safe software list. Other samples do get blocked by Hardened Mode just fine.

It is the MHDDoS_Proxy (a tool used in DDoS attacks on Russian targets). The info can be found via Google. I think we should not talk too much about it.

 

[Pilot777]

It is the MHDDoS_Proxy (a tool used in DDoS attacks on Russian targets). The info can be found via Google. I think we should not talk too much about it.

Oh, ok. So, AVAST, unlike Bitdefender, Norton, Microsoft, Emsisoft, Symantec, and others, allows it's users to engage in malicious DDoS attacks. And AVAST considers the DDoS attack tool to be safe...

 

[Xeno1234]

I noticed this in the comments. Are these bots trying to convince people its not malware? I've never seen this before on VirusTotal.

 

[flaubert1971]

Also neutralized by KES

 

[TuxTalk]

I reported this to Avast / AVG

 

[Xjoker]

I reported this to Avast / AVG

View attachment 281180

Still no detection from Avast/AVG, he probably meant that "The file has been whitelisted".

 

[TuxTalk]

Still no detection from Avast/AVG, he probably meant that "The file has been whitelisted".

You sure you use the same file or a different hash ?

 

[TuxTalk]

I can not check since i switched to Norton360 Premium

 

[SeriousHoax]

I remember finding this tool in a malware collection a while back. Probably more than a year ago. At that time only Kaspersky was detecting it. Then I submitted to a few vendors and remember Bitdefender creating a signatures very soon as usual. I think I also sent to Avast. Since even hard mode is not blocking it, it should mean that it is whitelisted by Avast on purpose.
Are they allowing it only because it is/can be used by Ukraine against Russian targets? That would be awful if that's the case. I'm just speculating of course and probably should stop talking anymore about it

 

[Xjoker]

You sure you use the same file or a different hash ?

I just visited the Virustoal link from the first post. Still Avast does not detect it.

 

[TuxTalk]

I just visited the Virustoal link from the first post. Still Avast does not detect it.

View attachment 281195

This means nothing, you should test live.

 

[brambedkar59]

I remember finding this tool in a malware collection a while back. Probably more than a year ago. At that time only Kaspersky was detecting it. Then I submitted to a few vendors and remember Bitdefender creating a signatures very soon as usual. I think I also sent to Avast. Since even hard mode is not blocking it, it should mean that it is whitelisted by Avast on purpose.
Are they allowing it only because it is/can be used by Ukraine against Russian targets? That would be awful if that's the case. I'm just speculating of course and probably should stop talking anymore about it

If that is true i.e. they are whitelisting a confirmed malware then it erodes all some of the confidence in Gen Digital (Avast/AVG/Norton) for me.

There is no such thing as good malware: David Liff

Edit: replaced "all" with "some of"

 

[TuxTalk]

If that is true i.e. they are whitelisting a confirmed malware then it erodes all the confidence in Gen Digital (Avast/AVG/Norton) for me.

Not quite true, Norton detects it. Avast and Norton are 2 different companies inside GEN.

 

[brambedkar59]

Not quite true, Norton detects it. Avast and Norton are 2 different companies inside GEN.

GEN is the parent company though. That being said I don't know how much autonomy these subsidiary companies have over stuff like this.

 

[TuxTalk]

GEN is the parent company though. That being said I don't know how much autonomy these subsidiary companies have over stuff like this.

Avast is on its own.