Avast scanner not working on Jotti

Discussion in 'other anti-virus software' started by aigle, Jan 31, 2007.

Thread Status:
Not open for further replies.
  1. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Each time I go to Jotti, I see Avast not detecting any malware, even the one detected by all other AVs. An example pic is here. I think Avast is no more working on Jotti. I noted it since many weeks. Any ideas?

    Thanks.
     

    Attached Files:

    • 1.jpg
      1.jpg
      File size:
      44.3 KB
      Views:
      356
  2. Londonbeat

    Londonbeat Registered Member

    Joined:
    Sep 21, 2006
    Posts:
    350
    Have you tried them on virustotal, does it detect them on there?
    To be honest Avast! misses a lot of new malware I find that I submit on virustotal too, so there may be nothing wrong with jotti.

    Regards,
    Londonbeat
     
  3. rothko

    rothko Registered Member

    Joined:
    Jan 12, 2005
    Posts:
    579
    Location:
    UK
    strange...i noticed the exact same thing today. Avast! wasn't detecting any of the samples that had been uploaded (not by me, i was suggest seeing how AVs were doing on detections...sad, I know).
     
  4. IBK

    IBK AV Expert

    Joined:
    Dec 22, 2003
    Posts:
    1,819
    Location:
    Innsbruck (Austria)
    try with EICAR to find out if Jotti works.
     
  5. Londonbeat

    Londonbeat Registered Member

    Joined:
    Sep 21, 2006
    Posts:
    350
    Jotti's working fine for me (tried with a virus detected by all, including avast), so I guess avast just hasn't added detection for your samples yet.
     

    Attached Files:

  6. rothko

    rothko Registered Member

    Joined:
    Jan 12, 2005
    Posts:
    579
    Location:
    UK
    EICAR was missed by Avast!...and by AVG, oddly.
     

    Attached Files:

  7. rothko

    rothko Registered Member

    Joined:
    Jan 12, 2005
    Posts:
    579
    Location:
    UK
    but I remember there was an issue with NOD32 where samples were wrongly being shown as not detected at Jotti's. I can't remember if this was fixed or not.
     
  8. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Since many weeks I hardly saw any detection by Avast on Jotti. It can,t be so poor after all.
     
  9. Londonbeat

    Londonbeat Registered Member

    Joined:
    Sep 21, 2006
    Posts:
    350
    Jotti's working fine, for me anyway - it's detecting everything that avast! on virustotal detects.

    Londonbeat
     
  10. dan_maran

    dan_maran Registered Member

    Joined:
    Aug 30, 2004
    Posts:
    1,053
    Location:
    Stamford, CT
    I know that if VBA32 takes to much time scanning a file on Jotti and VT, it is not completely scanned and red "X" will be displayed, at Jotti's that is.

    So maybe something similiar has happened with the samples you uploaded...
     
  11. ggf31416

    ggf31416 Registered Member

    Joined:
    Aug 20, 2006
    Posts:
    314
    Location:
    Uruguay

    Attached Files:

    • VT.png
      VT.png
      File size:
      7 KB
      Views:
      315
  12. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    So it,s confirmed Avast not working on Jotti.
     
  13. ASpace

    ASpace Guest

    which means that as always VirusTotal is the preferred scanner ;) = always correct results :thumb:
     
  14. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
  15. Londonbeat

    Londonbeat Registered Member

    Joined:
    Sep 21, 2006
    Posts:
    350
    Strange, it is working if I submit virus malware (see my post #5), but when I submit eicar it doesn't work. o_O
     

    Attached Files:

  16. dan_maran

    dan_maran Registered Member

    Joined:
    Aug 30, 2004
    Posts:
    1,053
    Location:
    Stamford, CT
    Looks like the defs are just old, this a old piece of malware.

    Code:
     File:  	 2d747c2bac72a1e87f4da7f8e7c1e985.exe
    Status: 	
    INFECTED/MALWARE
    MD5 	2d747c2bac72a1e87f4da7f8e7c1e985
    Packers detected: 	
    -
    Scanner results
    Scan taken on 31 Jan 2007 21:05:42 (GMT)
    AntiVir 	
    Found BDS/Hupigon.DP backdoor
    ArcaVir 	
    Found Trojan.Downloader.Small.Czl
    Avast 	
    Found Win32:Small-DJU
    AVG Antivirus 	
    Found Downloader.Generic3.JHM
    BitDefender 	
    Found Trojan.Downloader.Small.CZL
    ClamAV 	
    Found Trojan.Downloader-486
    Dr.Web 	
    Found Trojan.PWS.Legmir.812
    F-Prot Antivirus 	
    Found W32/Backdoor.ABBP
    F-Secure Anti-Virus 	
    Found Trojan-Downloader.Win32.Small.czl
    Fortinet 	
    Found W32/Small.BOB!tr.dldr
    Kaspersky Anti-Virus 	
    Found Trojan-Downloader.Win32.Small.czl
    NOD32 	
    Found Win32/PSW.Legendmir.NEF
    Norman Virus Control 	
    Found W32/DLoader.BPTM
    VirusBuster 	
    Found Trojan.PWS.Lmir.AYG
    VBA32 	
    Found MalwareScope.Backdoor.Hupigon.17
     
  17. ggf31416

    ggf31416 Registered Member

    Joined:
    Aug 20, 2006
    Posts:
    314
    Location:
    Uruguay
    I received a reply to the e-mail that I sent to their feedback e-mail.

     

    Attached Files:

    Last edited: Jan 31, 2007
  18. lucas1985

    lucas1985 Retired Moderator

    Joined:
    Nov 9, 2006
    Posts:
    4,047
    Location:
    France, May 1968
    I think that Marcos (and/or IC) has said that Jotti suffers from "memory exhaustion" (?)
     
  19. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    So problem is avast updater.
     
  20. Firefighter

    Firefighter Registered Member

    Joined:
    Oct 28, 2002
    Posts:
    1,670
    Location:
    Finland
    Or, maybe almost correct results. At least DrWeb in VirusTotal is configured so that it doesn't detect those riskware samples that my own DrWeb is capable to detect.

    Best regards,
    Firefighter!
     
  21. vlk

    vlk AV Expert

    Joined:
    Dec 26, 2002
    Posts:
    618
    Not really the updater - rather the URL from where the service was downloading the updates...

    Anyway, all should be OK now (at least that's what Jotti told me).

    Cheers
    Vlk
     
  22. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Thanks for that.
     
  23. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    virustotal is better than jotti by farrrrrrr.

    but its not even close to 'always the correct results', countless (ive actually lost count) times its been wrong with my dr.web, so its not to be trusted, but its always good compare.
     
  24. JerryM

    JerryM Registered Member

    Joined:
    Aug 31, 2003
    Posts:
    4,221
    I couldn't prove it in court, but I recall seeing indications that Avast is one of the slower AVs to update its signatures for the latest threat.

    Jerry
     
Loading...
Thread Status:
Not open for further replies.