Protecting over 200 million PCs, Macs, & Mobiles – more than any other antivirus

March 1st, 2010

Get avast! Free Antivirus or a „free“ upgrade with the Alureon rootkit

avast! Free Antivirus can be downloaded for free from our servers or from other download servers such as download.com, 01.fr and others.  But why limit yourself to avast! Free Antivirus if there are other products available with additional functionality that can be downloaded for free?

At least, that is what some people are thinking.

Last week when I was checking files submitted as false positive alerts, l was looking to verify accurate, 100%  detections. There were a few files named AIS (Avast Internet suite)  from  megaupload and uploading.com servers. Bad guys take our product, add an Alureon rootkit file (typically under the name codec.exe) and make new setup file with Nullsoft installer.

avast! detected this and put the infected files in the Virus Chest.

But, the story is not over. Some thieves are so cheeky, they reported this to us as a false positive. They should really be sending us a thank you note.

One advice to thieves: Be careful with what you are stealing. An active rootkit in your  system is a hard task for any newly installed antivirus solution.

::29CECD094DBB93CBE4D08D03F2170C2EE0A34FBBA43D63D8791D65BA7C798E40:
  Detected by 10021700
  fp_desc.000=NAM: avast VER:5.0 PUB:alwil software all right.
  oripath.0000=http://fs74.uploading.com/get_file/...\avast! - pack\avast! Internet Security\setup_ais.exe\nsis.hdr
* Scan name: aswcmd.exe
* Started on: 1. březen 2010 12:39:52
* VPS: 100301-0, 01.03.2010
*
D:\False\work\29CECD09.dat.out\$EXEDIR\codec.exe [L] Win32:Alureon-FN [Rtk] (0)
D:\False\work\29CECD09.dat.out\$EXEDIR\setup_ais.exe [+] is OK
D:\False\work\29CECD09.dat.out\nsis.hdr [L] NSIS:Fasec-CB [Trj] (0)
Infected files: 2
Total files: 3
Categories: Virus Lab Tags: , , ,
  1. March 1st, 2010 at 17:30 | #1

    Great work! Looks like this is the way that malicious people are going. I was able to shut down a site that was wrapping up Firefox with malware galore.
    http://www.404techsupport.com/2010/01/30/is-your-firefox-genuine-phishing-at-its-phinest/

    I’m currently investigating how to do the same to an organization that’s wrapping up VLC with malware.

  2. Cahya
    March 1st, 2010 at 22:25 | #2

    Hmm…, just lets put more cautions in future. There is a lot of bad guys out there :D

  3. Didov
    March 2nd, 2010 at 20:12 | #3

    Does someone know what does it mean

    404 Page not foundThe server has not found anything matching the Request-URI.

    Request-URI: eng/faq-red-circle.html.

    Page generated in 0.0108s

    It looks like my Avast is not runing any longer

  4. Anderson Passamani
    March 2nd, 2010 at 20:56 | #4

    Gostaria de Receber uma versão gratuita não avast

  5. spg SCOTT
    March 3rd, 2010 at 02:22 | #5
  6. Andy
    March 3rd, 2010 at 02:32 | #6

    A side note, will avast ever be able to remove TDL3/TDSS/Alureon? avast’s anti-rootkit doesn’t appear to be very strong, avast is also unable to remove the max++ rootkit :(

  7. March 3rd, 2010 at 03:30 | #7

    try to check your c: for rootkit

  8. March 3rd, 2010 at 05:54 | #8

    A side note, will avast ever be able to remove TDL3/TDSS/Alureon? avast’s anti-rootkit doesn’t appear to be very strong, avast is also unable to remove the max++ rootkit

  9. March 3rd, 2010 at 08:49 | #9

    Hmmm nice but updating more best and useful messages.

  10. March 3rd, 2010 at 09:29 | #10

    free upgrade

  11. preben
    March 3rd, 2010 at 13:10 | #11

    VERY GOOD

  12. Persico
    March 3rd, 2010 at 16:18 | #12

    Bonjour,
    Voici 3 semaines que ce qui suit, ont envahi mon écran, et qui plus est, c’est un défilement sans intéruption:

    (Avast ! scan à l’accès etc… Que faire, Merci

  13. Persico
    March 3rd, 2010 at 16:33 | #13

    BONJOUR,

    Des ennuis sur mon écran en continue . Un défilement sans intéruption :

    ( AVAST! SCANNE à L’accès etc..! que faire ? )
    Merci

  14. Dad
    March 3rd, 2010 at 20:14 | #14

    @Persico
    cette option s´appelle “Affiche infos detaillees sur l´action en cours”, et peut etre eteinte la ou vous l´avez allume, dans les reglages avances du Bouclier Web et Bouclier Standard.
    D´ailleurs ce genre de question est mieux a poser au support d´avast!, ou encore mieux trouver la reponse dans l´Aide du logiciel.

  15. March 4th, 2010 at 05:42 | #15

    Hi Michal,

    Nice article,

    just additional advice,
    If you know the legal website to get AV Free, why you should download from others site?
    Unless you got referenced from legitimate site to download from referenced site, that is more safety.

    So beware, Internet analogy it is same like our live which is need to take care if we need to eat something, to say something, or to react something.

    Cheers,
    yanto chiang

  16. March 4th, 2010 at 12:54 | #16

    @Yanto Chiang
    Thank you. I absolutly agree with you…

  17. Doreen
    March 4th, 2010 at 17:43 | #17

    I am really upset that AVAST is no longer supporting win98. I was notified that my subscription was expiring, downloaded the update 3 times –still got the expiry message. I finally checked your website –win98 has been dropped. Any suggestions for other antivirus control for win98? Thanks

  18. JAVIER
    March 4th, 2010 at 18:41 | #18

    COMO OBTENGO AVAST GRATIS

  19. Abadie
    March 5th, 2010 at 06:42 | #19

    Avast is the best…..

    kalo ingin aman,pasang Avast di komputer you…!!!!

  20. jhun
    March 5th, 2010 at 15:04 | #20

    thanks avast.. your the best..

  21. Yagya
    March 5th, 2010 at 17:24 | #21

    It’s useful

  22. hamza
    March 5th, 2010 at 20:43 | #22

    I UPGRADE MY AVAST ANTIVIRUS 4.8

  23. TUKUR LAWAL SHA-ISKAWA
    March 6th, 2010 at 02:15 | #23

    I WANTS ANOTHER FREE LICENCE FOR HOME-EDITION AVAST ANTIVIRUS, BECAUSE THE ONE YOU SENT TO ME HAS BEEN EXPIRED.
    THANKS FOR YOUR ASSISTANCE.
    YOURS FAITHFULLY
    TUKUR LAWAL SHA-ISKAWA
    KATSINA STATE, NIGERIA.

  24. TUKUR LAWAL SHA-ISKAWA
    March 6th, 2010 at 02:23 | #24

    I WANTS A NEW VERSION HOME-EDTION ANTIVIRUS.
    THANKS,

  25. Innocent Mpulubusi
    March 6th, 2010 at 12:23 | #25

    i want the new version home edition and the link to the update..thank you

  26. chandru
    March 6th, 2010 at 14:11 | #26

    hai i wants a newer version….

  27. March 6th, 2010 at 14:47 | #27

    I want a new free version please

  28. March 6th, 2010 at 15:23 | #28

    i need new vps server updated

  29. March 6th, 2010 at 17:12 | #29

    I love AVAS. It’s very dahsyat brother.

  30. March 6th, 2010 at 22:08 | #30

    sank

  31. March 7th, 2010 at 11:18 | #31

    Thank you for this good informations

  32. March 7th, 2010 at 11:20 | #32

    Τηανκ υοθ

  33. Transformer
    March 7th, 2010 at 20:59 | #33

    then why to download from other websites if bad guys are there?
    just download from avast.com

  34. March 7th, 2010 at 23:51 | #34
  35. March 7th, 2010 at 23:54 | #35

    I love AVAS

  36. abu raihan
    March 8th, 2010 at 09:23 | #36

    Avast is best in my life security

  37. Mangilio
    March 8th, 2010 at 18:49 | #37

    Wow!You cought them again!Keep up the good work.You must protect the people who think you are the best around…on this planet!Ok?

  38. eugene
    March 9th, 2010 at 04:40 | #38

    give me a license code

  39. March 9th, 2010 at 09:21 | #39

    Dear All avast user,

    Regarding some of you have request for Free avast! home edition, you may download it from : http://www.avast.com/free-antivirus-download

    Then if you already have existing of avast 4.8, then you my switch your existing license become the new version through : http://www.avast.com/resend-license-free-antivirus.php

    Then if you would like to register your avast Free edition, you may visit : http://www.avast.com/registration-free-antivirus.php

    If you would like to download VPS update manually, you may visit : http://www.avast.com/download-update

    If you have any further inquiry related with avast! product, all of you may join with : http://forum.avast.com/index.php#2

    Cheers,

    yanto chiang

  40. feras
    March 9th, 2010 at 14:37 | #40

    Wow!You cought them again!Keep up the good work.You must protect the people who think you are the best around…on this planet!Ok?

  41. momo
    March 9th, 2010 at 19:04 | #41

    free avast

  42. March 10th, 2010 at 09:54 | #42

    thanks avast

  43. Martha
    March 10th, 2010 at 10:58 | #43

    Cioa, per favore ho bisogno di sapere come fare per avere Avast security free, grazie a presto

  44. soni
    March 10th, 2010 at 11:06 | #44

    nice free anti virus….

  45. david peter
    March 10th, 2010 at 11:18 | #45

    thanks avast .and free avast

  46. Vojta_qa
    March 10th, 2010 at 14:48 | #46

    @TUKUR LAWAL SHA-ISKAWA
    Hello, just go to the avast license center and request another free license please.

    for further communication and Avast issues please use support.avast.com, you can always update your ticket with additional information and this will help us to answer you better and faster. Thank you.

  47. Vojta_qa
    March 10th, 2010 at 14:50 | #47

    alexandre raphael :
    I want a new free version please

    Avast Free Antivirus is available here http://files.avast.com/iavs5x/setup_av_free_eng.exe

    for further communication and Avast issues please use support.avast.com, you can always update your ticket with additional information and this will help us to answer you better and faster. Thank you.

  48. Vojta_qa
    March 10th, 2010 at 14:52 | #48

    rejaul :
    i need new vps server updated

    Hello,
    just click on the orange Avast icon and click Update

    for further communication and Avast issues please use support.avast.com, you can always update your ticket with additional information and this will help us to answer you better and faster. Thank you.

  49. Vojta_qa
    March 10th, 2010 at 14:53 | #49

    eugene :
    give me a license code

    http://www.avast.com/license-center

    for further communication and Avast issues please use support.avast.com, you can always update your ticket with additional information and this will help us to answer you better and faster. Thank you.

  50. luis gonzalez
    March 10th, 2010 at 20:04 | #50

    thannk you

Comment pages
1 2 3 4 905
Comments are closed.