Reply to thread

Message

<blockquote data-quote="Pilot777" data-source="post: 1073385" data-attributes="member: 94948">Anyways, the malware, or &quot;cyberweapon&quot; in question, is not the only case of Avast Premium Security not blocking malicious executables with Hardened Mode enabled. For instance, it&#039;s not blocking this <a href="https://www.virustotal.com/gui/file/3e8e1eae92427c05d36bbc665721382af5972780e0a7cd44e33f63684b1cf3e2" target="_blank">VirusTotal</a>, and this <a href="https://www.virustotal.com/gui/file/4e6015f1e7c8790a2907de407d2ea9e14ccc04e925c81607fb815bd73c372389" target="_blank">VirusTotal</a>, and this <a href="https://www.virustotal.com/gui/file/86923321a014c2080d4492a75702aa040aec7b5b5fe9e71252e9b6598c5ef005" target="_blank">VirusTotal</a>. This list could go on... But, what&#039;s even funnier, is this one <a href="https://www.virustotal.com/gui/file/85d6eeb46f4f808ab01a7af7e736cecb2e0d68baa4a60c1fa579a42558746de3" target="_blank">VirusTotal</a>. It&#039;s not detected via Avast explorer scan, nor is it blocked by Hardened Mode. However, as soon as the executable is launched, Avast somehow detects it as malware and says it&#039;s been moved to Quarantine. But, the funny part is that this malware actually stays right where it&#039;s been, and it can be launched over and over again, with the same notification window from Avast popping up. And it just never ends up in Quarantine. I&#039;m not sure what&#039;s been going on at Avast lately, but I definitely do not like what I&#039;m seeing in terms of some pretty serious malware samples being able to be executed just like that, despite the Hardended Mode.&nbsp; &nbsp; &nbsp; [ATTACH=full]281200[/ATTACH]</blockquote>

[QUOTE="Pilot777, post: 1073385, member: 94948"] Anyways, the malware, or "cyberweapon" in question, is not the only case of Avast Premium Security not blocking malicious executables with Hardened Mode enabled. For instance, it's not blocking this [URL="https://www.virustotal.com/gui/file/3e8e1eae92427c05d36bbc665721382af5972780e0a7cd44e33f63684b1cf3e2"]VirusTotal[/URL], and this [URL="https://www.virustotal.com/gui/file/4e6015f1e7c8790a2907de407d2ea9e14ccc04e925c81607fb815bd73c372389"]VirusTotal[/URL], and this [URL="https://www.virustotal.com/gui/file/86923321a014c2080d4492a75702aa040aec7b5b5fe9e71252e9b6598c5ef005"]VirusTotal[/URL]. This list could go on... But, what's even funnier, is this one [URL="https://www.virustotal.com/gui/file/85d6eeb46f4f808ab01a7af7e736cecb2e0d68baa4a60c1fa579a42558746de3"]VirusTotal[/URL]. It's not detected via Avast explorer scan, nor is it blocked by Hardened Mode. However, as soon as the executable is launched, Avast somehow detects it as malware and says it's been moved to Quarantine. But, the funny part is that this malware actually stays right where it's been, and it can be launched over and over again, with the same notification window from Avast popping up. And it just never ends up in Quarantine. I'm not sure what's been going on at Avast lately, but I definitely do not like what I'm seeing in terms of some pretty serious malware samples being able to be executed just like that, despite the Hardended Mode. [ATTACH type="full"]281200[/ATTACH] [/QUOTE]

Verification