Reply to thread

Message

<blockquote data-quote="Anthony Qian" data-source="post: 997692" data-attributes="member: 91446">1. Kaspersky, ESET, and Bitdefender also process malware submission by virus experts. But they can typically respond within hours. IMO, manual virus analysis does not equal long (&gt;24 hrs) processing time.2. According to my observations of the detection names, I noticed that almost all of the submitted malware samples were detected by the Avira engine (TR/[Family].xxxxx) in the end.(I received the above reply after I requested F-Secure to update their DeepGuard/Heuristic detection system to tackle Magniber ransomware. As shown in the reply, F-Secure just asks Avira to add the corresponding detection, which cannot detect future variants of this ransomware. Avira&#039;s engine is really bad at detecting Magniber, btw.)I was expected to see that F-Secure’s engine can detect these samples. However, it seems that F-Secure, after receiving sample submissions, first submits these samples to Avira for analysis, which results in a long processing time.3. FP (safe apps incorrectly blocked by DeepGuard) submissions also take a long time for F-Secure to resolve.4. [USER=86910]@struppigel[/USER], I know you are a researcher of G-Data and maybe not so familiar with F-Secure&#039;s sample submission and processing. I encourage you and other interested MT members to submit a sample/website to F-Secure via <a href="https://www.f-secure.com/en/home/support/submit-a-sample" target="_blank">Submit a sample | F-Secure</a>, using your private email. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink&nbsp; &nbsp; ;)" loading="lazy" data-shortname=";)" /></blockquote>

[QUOTE="Anthony Qian, post: 997692, member: 91446"] 1. Kaspersky, ESET, and Bitdefender also process malware submission by virus experts. But they can typically respond within hours. IMO, manual virus analysis does not equal long (>24 hrs) processing time. 2. According to my observations of the detection names, I noticed that almost all of the submitted malware samples were detected by the Avira engine (TR/[Family].xxxxx) in the end. (I received the above reply after I requested F-Secure to update their DeepGuard/Heuristic detection system to tackle Magniber ransomware. As shown in the reply, F-Secure just asks Avira to add the corresponding detection, which cannot detect future variants of this ransomware. Avira's engine is really bad at detecting Magniber, btw.) I was expected to see that F-Secure’s engine can detect these samples. However, it seems that F-Secure, after receiving sample submissions, first submits these samples to Avira for analysis, which results in a long processing time. 3. FP (safe apps incorrectly blocked by DeepGuard) submissions also take a long time for F-Secure to resolve. 4. [USER=86910]@struppigel[/USER], I know you are a researcher of G-Data and maybe not so familiar with F-Secure's sample submission and processing. I encourage you and other interested MT members to submit a sample/website to F-Secure via [URL='https://www.f-secure.com/en/home/support/submit-a-sample']Submit a sample | F-Secure[/URL], using your private email. ;) [/QUOTE]

Verification