Reply to thread

Message

<blockquote data-quote="SeriousHoax" data-source="post: 1095473" data-attributes="member: 78686">A few days ago, I sent Bitdefender a not-so-important malware (embedded redirector script in a HTML) that was only being detected by ESET.BD analyst created a bad sha1/sha256/similar hash based signature (So did Avast). I sent them the same sample with a different hash and asked them to create a proper signature. But again they created a hash-based signature.Two days later I saw that they finally created a proper signature but they previous two hash-based signature were still present in their database.Yesterday, sent an email to their support asking their analysts to remove those two useless signatures and today in the morning, received a reply that the signatures will be removed and just now checked that they have indeed removed them&nbsp; <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" />[ATTACH=full]284642[/ATTACH][ATTACH=full]284641[/ATTACH]BTW, many products create basic hash-based signatures for not-so-prevalent samples. Very common for McAfee (mostly cloud based), Norton and some Chinese and other low-quality copy-cat VT detection products, moderately common for Avast, Avira, Microsoft Defender, less common for Bitdefender, very rare for Kaspersky, extremely rare for ESET (All based on my experience only).</blockquote>

[QUOTE="SeriousHoax, post: 1095473, member: 78686"] A few days ago, I sent Bitdefender a not-so-important malware (embedded redirector script in a HTML) that was only being detected by ESET. BD analyst created a bad sha1/sha256/similar hash based signature (So did Avast). I sent them the same sample with a different hash and asked them to create a proper signature. But again they created a hash-based signature. Two days later I saw that they finally created a proper signature but they previous two hash-based signature were still present in their database. Yesterday, sent an email to their support asking their analysts to remove those two useless signatures and today in the morning, received a reply that the signatures will be removed and just now checked that they have indeed removed them (y) [ATTACH type="full" width="430px"]284642[/ATTACH] [ATTACH type="full" width="430px"]284641[/ATTACH] BTW, many products create basic hash-based signatures for not-so-prevalent samples. Very common for McAfee (mostly cloud based), Norton and some Chinese and other low-quality copy-cat VT detection products, moderately common for Avast, Avira, Microsoft Defender, less common for Bitdefender, very rare for Kaspersky, extremely rare for ESET (All based on my experience only). [/QUOTE]

Verification