A free online file verdict service “Valkyrie” is formally released today!

siketa · August 18, 2011, 12:13pm

Fanny, are you talking about weeks or months?

Fanny · August 18, 2011, 12:28pm

(2) We are now developing much stronger and more effective dynamic emulators/detectors in our server side, expect for current CAMAS. Once our hardware deployment is ready, we will “invite” those detectors to make contributions to you guys’ submitted files.

Hi, dear Siketa,

Your proposed question needs to be replied by our dear Melih. I am applying the hardware now and still waiting the approval.

BTW, I am “she”, not “he”.

Love your guys.

                                                                          Your sincerely,

                                                                               Fanny

siketa · August 18, 2011, 12:32pm

Dear Fanny,
thank you for this info!

(:LOV)

arjunpa · August 18, 2011, 1:26pm

Thanks for the info…eagerly waiting for the new detectors

miloszcz · August 18, 2011, 5:09pm

Valkyrie is not working right now or only I have problems with getting files analyzed?

siketa · August 18, 2011, 7:34pm

Morph, Valkyrie is working fine with my account…

miloszcz · August 18, 2011, 7:41pm

Yes, now it’s working for me as well.

wasgij6 · August 18, 2011, 8:14pm

idk if valkyrie is just overloaded but i keep getting a runtime error when uploading with the upload tool and using opera or dragon

[attachment deleted by admin]

miloszcz · August 18, 2011, 8:19pm

And I cannot get results again now.

Advenced Heuristics is not working now.

BTW Can you say us a little how it works? (AdHeuristics).

siketa · August 19, 2011, 12:48pm

Maybe Fanny is applying new hardware… ;D

trscsaeg · August 19, 2011, 7:15pm

what’s the benefits of having a valk account

miloszcz · August 19, 2011, 7:34pm

You can leave feedback, comment, pass sample to be analyzed by AV experts.

wasgij6 · August 21, 2011, 10:48pm

i did another pretty big test with valkyrie and the new av bytehero which only uses heuristics to detect malware

wasgij6:

i just tested bytehero vs. valkyrie

i download a zip file with 294 malware dating from the 16 and 17 of this month. i downloaded bytehero’s heuristic detection engine from here. i scanned the folder of malware and it found 102/294 which is a 34.69% detection rate. then i uploaded all the files to valkyrie (this took a while since i had to do about 15 at a time but i got it done) and it found 244/294 which is a 82.99% detection rate. Valkyrie seems more advanced and it uses AI, i think bytehero only uses heurisitics

“The engine can support (32-bit/64-bit)Windows, Linux, FreeBSD, and other mainstream operating systems, as well as x86, PowerPC, ARM and other hardware architecture. The new technology of code dynamic and static heuristic analysis applied in ByteHero heuristic engine automatically realizes detection of malicious files like Trojan, Virus, Worm, Spyware, etc. BDV can deeply analyzes encrypted、packed and deformed malicious code, accurately locates malicious behavior of program and reports virus family and variants according to current virus naming rules(as illustrated in Figure 2.1). This is better than simple analysis or shell reports of general heuristic scan and maintains at a low false positives rate.”
http://www.bytehero.com/pages/products_solutionsen.html

Valkyrie still has room for improvement and Fanny has said in another topic that they are working on the dynamic detectors so this should increase the detection rate.
There were 50 pieces of malware that got marked as normal. i would post them all here but to makes things easier ill just post a txt file with all the virustotal links to the samples.
i would also like to say that i ignored signatures so if a file is found by a sig i still went by what valkyrie said not signatures
if anyone wants the samples i used just let me know

siketa · August 22, 2011, 9:31am

https://forums.comodo.com/av-false-positivenegative-detection-reporting/submit-malware-here-to-be-blacklisted-2011-no-live-malware-t66780.0.html;msg541143#msg541143

_0M0D0 · August 22, 2011, 2:00pm

Maybe thats CAV version 100.0 :o

kail · August 22, 2011, 2:18pm

!ot!

Now that is either spamming, cross-posting or perhaps… campaigning even. Take your pick. :-X Either way please stop it. Thanks.

_0M0D0 · August 22, 2011, 2:34pm

Ok, no sense of humor? :-\

Sorry for that too.

wasgij6 · August 23, 2011, 1:12am

i have an update in my previous test. it seemed that the advanced heuristics were having problems cuz on a lot of files the little wheel just kept spinning when i click on the tab. so i reuploaded the files it marked as safe previously and it marked a lot of them as malware now. the new detection rate is 97.62 (287/294)
here are the new 7 links that it marked as safe
http://www.virustotal.com/file-scan/report.html?id=fb05eb636f79fa14cabab632e2c5a25d125b170c73b1522fd5a75ad2b9f875c7-1314017815

http://www.virustotal.com/file-scan/report.html?id=838be24e858f70559b3742ed03a056848c90c099ef7f0b161d2e28a8f2073bc0-1313671749

http://www.virustotal.com/file-scan/report.html?id=5567d4cfb04eae2eedd66a2d0670439f9ccbdfa79abc4d56fadc390da9c201e9-1313502371

http://www.virustotal.com/file-scan/report.html?id=5423b4aa17211c8fd88ea2fa6e45eb07dc5253e4ed8d6e5b6b3ba397cd5870f8-1313744602

http://www.virustotal.com/file-scan/report.html?id=0edb2564ad9e3ebbf9d35e7fd12b69d081b90e86415b8d79c246f1597b0a3ea2-1313758864

http://www.virustotal.com/file-scan/report.html?id=89ec2a03311a7b97d03e16189c055569d77f37bbb1eb816d2c58435ea04b529a-1314019128

http://www.virustotal.com/file-scan/report.html?id=ce8a2e4952f472ce3ed11d97ccfb2c9b638936ea870a5b7035c4fc9946871a10-1313917931

Peter5 · August 23, 2011, 1:24am

The thing that i am more eager to see in CIS V.6 is the AS with virtualizattion, but i have to admit Valkyrie is growing on me. Fantastic application.
Let´s just hope that integration into the FLS will be fast and problem free.

:-TU :-TU wasgij6.

wasgij6 · August 23, 2011, 1:25am

it is amazing and its only going to improve with the new and improve dynamic detectors

Fanny post:381:

Hi, our lovely guys,

At first, thank you guys for all the time’s supports of our Valkyrie!

Appreciate for your continuous feedback and efforts, which encourage us to further improve our product:

(1) For the proposed bugs, we will gather them this week and arrange to make them fixed next week;

b We are now developing much stronger and more effective dynamic emulators/detectors in our server side, expect for current CAMAS. Once our hardware deployment is ready, we will “invite” those detectors to make contributions to you guys’ submitted files.[/b]

Again, thank you so much!
                                                                                               Your sincerely,

                                                                                                      Fanny