topic Re: Why NIS 2009 can't detect Adware.Lop? in Norton Internet Security / Norton AntiVirus

Why NIS 2009 can't detect Adware.Lop?

ONE — Wed, 17 Sep 2008 17:56:05 GMT

I have a series of Adware.Lop samples (two pack, 239MB and 324MB), and I had uploaded some (about 300MB) in the past three months.
I check the Detections Added everyday, I saw the Adware.Lop detection updated many times, but NIS 2009 still can't detect them.
Why NIS 2009 still can't detect them? And how can I do?

It also called Trojan.Win32.Obfuscated.gen (Kaspersky), or Trojan.Swizzor.1 (BitDefender).

Message Edited by ONE on 09-17-2008 10:56 AM

Re: Why NIS 2009 can't detect Adware.Lop?

SaLaDiN — Wed, 17 Sep 2008 18:14:48 GMT

submit it to Symantec...again...

here

and write the tracking numbers of samples...

Message Edited by SaLaDiN on 09-17-2008 11:14 AM

Re: Why NIS 2009 can't detect Adware.Lop?

Stu — Wed, 17 Sep 2008 18:22:20 GMT

SaLaDiN wrote:
submit it to Symantec...again...

here

and write the tracking numbers of samples...

Message Edited by SaLaDiN on 09-17-2008 11:14 AM

This is indeed the best solution.

Please send them to Symantec so they can examin and test them

Re: Why NIS 2009 can't detect Adware.Lop?

ONE — Wed, 17 Sep 2008 19:22:15 GMT

SaLaDiN wrote:
submit it to Symantec...again...

here

and write the tracking numbers of samples...

Message Edited by SaLaDiN on 09-17-2008 11:14 AM

I had used that page.
I had said, I already uploaded the samples (about 300MB) in the past three months.

Re: Why NIS 2009 can't detect Adware.Lop?

SaLaDiN — Wed, 17 Sep 2008 19:29:42 GMT

i can read....i wrote submit AGAIN...and write the tracking numbers....

or write the tracking numbers of the old samples here and wait for a reaction from a symantec employee

Re: Why NIS 2009 can't detect Adware.Lop?

ONE — Wed, 17 Sep 2008 19:48:14 GMT

SaLaDiN wrote:
i can read....i wrote submit AGAIN...and write the tracking numbers....

or write the tracking numbers of the old samples here and wait for a reaction from a symantec employee

I had submitted them many times, and the tracking number counts are more than 200..

Re: Why NIS 2009 can't detect Adware.Lop?

SaLaDiN — Wed, 17 Sep 2008 19:58:59 GMT

unfortunately, i dont see another solution...

try to write the latest tracking numbers and wait for a reaction...

Message Edited by SaLaDiN on 09-17-2008 12:58 PM

Re: Why NIS 2009 can't detect Adware.Lop?

johna — Thu, 18 Sep 2008 05:29:11 GMT

Hi ONE

I once had the same problem of not receiving a reply from the Security Team, but I kept a record of the tracking numbers, and posted them on here. One of the moderators checked it out for me, and I received a reply with the results almost immediately.

I suggest you try this method. Remember when you submit samples here, they must be in a zipped file, and be NO LARGER than 10MB.

Let us know how you get on, thanks.

PS You can supply the tracking numbers in this thread.

Message Edited by johna on 09-18-2008 03:29 PM

Re: Why NIS 2009 can't detect Adware.Lop?

ONE — Fri, 19 Sep 2008 02:41:58 GMT

Thanks, johna and SaLaDiN, I uploaded some of them again.

[TRACKING]: Symantec Security Response Automation: Tracking #9929986‎ -

[TRACKING]: Symantec Security Response Automation: Tracking #9929983‎ -

[TRACKING]: Symantec Security Response Automation: Tracking #9929977‎ -

[TRACKING]: Symantec Security Response Automation: Tracking #9929974‎ -

[TRACKING]: Symantec Security Response Automation: Tracking #9929971‎ -

[TRACKING]: Symantec Security Response Automation: Tracking #9929968‎ -

[TRACKING]: Symantec Security Response Automation: Tracking #9929963‎ -

If Symantec Staff need those all samples (324MB), please give me a way to submit them.

Message Edited by ONE on 09-18-2008 07:38 PM

Message Edited by ONE on 09-18-2008 07:41 PM

Re: Why NIS 2009 can't detect Adware.Lop?

johna — Fri, 19 Sep 2008 03:18:38 GMT

Thanks ONE

You should receive a reply within 48 hours, can you keep us informed of the progress, thanks.

Re: Why NIS 2009 can't detect Adware.Lop?

Stu — Fri, 19 Sep 2008 04:34:48 GMT

Well done ONE.

That's really the only way to do it.

Re: Why NIS 2009 can't detect Adware.Lop?

ONE — Fri, 19 Sep 2008 08:36:56 GMT

Now, after the latest update, some samples can be detected now, but still a lot samples can't be detected.

(Before the two pack are 239MB and 324MB, now are 235MB and 321MB)

I will try to submit other samples recently.

Thank you all.

Re: Why NIS 2009 can't detect Adware.Lop?

ONE — Sat, 20 Sep 2008 03:13:41 GMT

After I submitted again, now they are 189MB and 280MB.
Although still many samples can't be detected, I still want to thank Symantec Staffs to care this problem.

Re: Why NIS 2009 can't detect Adware.Lop?

johna — Sat, 20 Sep 2008 05:47:10 GMT

Did you hear back re those samples you submitted?

Re: Why NIS 2009 can't detect Adware.Lop?

Stu — Sat, 20 Sep 2008 05:51:18 GMT

Thanx ONE

Please keep in mind that in almost 300MB of samples there are lot's of samples. So lot's of work for the employees to test and make signatures. please give them some time.

Re: Why NIS 2009 can't detect Adware.Lop?

ONE — Wed, 24 Sep 2008 12:10:52 GMT

Stu wrote:
Thanx ONE
Please keep in mind that in almost 300MB of samples there are lot's of samples. So lot's of work for the employees to test and make signatures. please give them some time.

I know that, I had uploaded all the threats I have.
And now they are 103MB and 201MB now.

Re: Why NIS 2009 can't detect Adware.Lop?

ONE — Sun, 12 Oct 2008 15:57:39 GMT

Now it only left 4 files..

A lot of them detected as "Packed.Generic.189"

Message Edited by ONE on 10-12-2008 08:57 AM