MRG Flash Test 4/12/2011

[Dieselman]

Threat Names: Zeus, TDSS , FakeAlert, FakeAV


Infection Vector: HTTP

Operating System: Windows 7 32-bit Ultimate

Standalone Anti-Malware Applications

http://malwareresearchgroup.com/2011/04/mrg-flash-test-4122011/

All failures for MSE. Avast looking good. Orange means it was detected by the sandbox.

 

[LoftedAphid86]

I guess Avast's sandbox is improving.

 

[jamescv7]

Well on Mcafee seems to have a correction there, Hiloti and Fakealert were marked "Passed" in red marks.

 

[LoftedAphid86]

Well on Mcafee seems to have a correction there, Hiloti and Fakealert were marked "Passed" in red marks.

I noticed that as well.
I presumed that it was similar to Avast's passed.

 

[jamescv7]

Detections:

Hiloti:

Avast - Potentially unsafe application/Sandboxed
Emsisoft - Behavior Blocker
Norton - Sonar
Prevx - Detected
Malwarebytes - Signature



TDSS:

Avira - Generic
Avast - Potentially unsafe application/Sandboxed
BitDefender - Generic
G Data - Generic (BD)
Immunet - Generic (BD)
Kaspersky - Signature
Panda - Generic
Malwarebytes - Generic

FakeAlert:

Avast - Generic
AVG - Generic
Emsisoft - Generic (Ikarus)
Eset - Heuristic
Immunet - Cloud
Norton - Sonar
Panda - Heuristic
Prevx - Detected
Malwarebytes - IP Blocking


FakeAV:

Avast - Generic
AVG - Generic
BitDefender - Generic
Emsisoft - Generic (Ikarus)
Eset - Heuristic
Norton - Generic
Prevx - Detected
VIPRE - Generic
Malwarebytes - IP Blocking

Source

Detailed information from the detections of the sample.

 

[LoftedAphid86]

So McAfee failed all around then.

 

[Dieselman]

I just might have to go back to Avast.