topic This file is a virus, but NIS 2008 can't detect it. in Norton Internet Security / Norton AntiVirus

This file is a virus, but NIS 2008 can't detect it.

ONE — Tue, 15 Jul 2008 17:06:12 GMT

This file is a virus, but NIS 2008 can't detect it.
If you run it and reboot, your pc will crash.

[edit: URL removed from post, but still available through Administrator]

Message Edited by Tony_Weiss on 07-15-2008 01:06 PM

Re: This file is a virus, but NIS 2008 can't detect it.

Stu — Tue, 15 Jul 2008 13:14:14 GMT

Please send the file to Symantec

Malware Submission

Re: This file is a virus, but NIS 2008 can't detect it.

ONE — Tue, 15 Jul 2008 13:16:35 GMT

Stu wrote:
Please send the file to Symantec
Malware Submission

I tried, but machine think it's not virus.

But in fact it's a virus.

Re: This file is a virus, but NIS 2008 can't detect it.

Stu — Tue, 15 Jul 2008 13:20:42 GMT

Why are you so sure it is a virus?

Re: This file is a virus, but NIS 2008 can't detect it.

ONE — Tue, 15 Jul 2008 13:22:51 GMT

Stu wrote:
Why are you so sure it is a virus?

Coz someone run it, and his pc can't run after reboot.

Message Edited by ONE on 07-15-2008 06:22 AM

Re: This file is a virus, but NIS 2008 can't detect it.

Stu — Tue, 15 Jul 2008 13:27:37 GMT

That doesn't have to be a malware.

I'll have a look

Re: This file is a virus, but NIS 2008 can't detect it.

Stu — Tue, 15 Jul 2008 13:29:09 GMT

I see. thanx

http://www.virustotal.com/nl/analisis/6fc837088d1b3a44bbeff4690039d316

Re: This file is a virus, but NIS 2008 can't detect it.

ONE — Tue, 15 Jul 2008 13:29:57 GMT

Stu wrote:
That doesn't have to be a malware.
I'll have a look

I think let the ppl of symantec test it is better.
The problem happens after reboot.

Re: This file is a virus, but NIS 2008 can't detect it.

ONE — Tue, 15 Jul 2008 21:30:14 GMT

Stu wrote:
Ok
I see. thanx

Yeah, almost all antivirus detected it as virus, but NIS 2008 not now.

Message Edited by ONE on 07-15-2008 06:33 AM

Message Edited by Tony_Weiss on 07-15-2008 05:30 PM

Re: This file is a virus, but NIS 2008 can't detect it.

Stu — Tue, 15 Jul 2008 13:34:04 GMT

I sent it again.

Re: This file is a virus, but NIS 2008 can't detect it.

Tony_Weiss — Tue, 15 Jul 2008 17:09:03 GMT

ONE wrote:

I tried, but machine think it's not virus.

But in fact it's a virus.

With the Malware Submission link provided by Stu, you can submit files that may not be detected by Norton Internet Security at this time. This is one way that we can gather information about upcoming threats. Are you saying that your machine does not detect it as malware, or the reply from your submission states that it is not malware? If you can provide the submission reference number, that would also help. Thanks!

Re: This file is a virus, but NIS 2008 can't detect it.

Stu — Tue, 15 Jul 2008 17:44:10 GMT

I received the same result from Symantec. I'll send the reference number

Re: This file is a virus, but NIS 2008 can't detect it.

bewell — Tue, 15 Jul 2008 23:26:27 GMT

Security Response has taken another look at the file in question and a Trojan Horse detection has been added. This detection will be contained in Rapid Release definitions, available on our FTP site, within sequence folder 83590 or greater. Please allow approximately 30-60 minutes for this folder to appear in the following location: ftp://ftp.symantec.com/AVDEFS/norton_antivirus/rapidrelease/sequence/

Message Edited by bewell on 07-15-2008 04:26 PM

Re: This file is a virus, but NIS 2008 can't detect it.

huwyngr — Wed, 16 Jul 2008 01:59:51 GMT

bewell wrote:
Security Response has taken another look at the file in question and a Trojan Horse detection has been added. This detection will be contained in Rapid Release definitions, available on our FTP site, within sequence folder 83590 or greater. Please allow approximately 30-60 minutes for this folder to appear in the following location: ftp://ftp.symantec.com/AVDEFS/norton_antivirus/rapidrelease/sequence/
Message Edited by bewell on 07-15-2008 04:26 PM

I just tried to open one of those folders numbers and got this message:

To view this FTP site in Windows Explorer, click Page, and then click Open FTP Site in Windows Explorer.

Note that there is no such thing on IE7 as click Page it should be click View .... and then you do get Open FTP site ....

Re: This file is a virus, but NIS 2008 can't detect it.

Stu — Wed, 16 Jul 2008 04:56:55 GMT

Hi Tony

This is the number I received from Symantec.

#9752326

I also sent these files to Kaspersky and they believe it is malware and they added it to the sigs

Re: This file is a virus, but NIS 2008 can't detect it.

ONE — Wed, 16 Jul 2008 12:18:12 GMT

Tony_Weiss wrote:
With the Malware Submission link provided by Stu, you can submit files that may not be detected by Norton Internet Security at this time. This is one way that we can gather information about upcoming threats. Are you saying that your machine does not detect it as malware, or the reply from your submission states that it is not malware? If you can provide the submission reference number, that would also help. Thanks!

My number is #9716245

It said:

We have analyzed your submission. The following is a report of our
findings for each file you have submitted:

filename: kd.exe
machine: Machine
result: See the developer notes

Developer notes:
F:\Virus\Report\0626\kd.exe contains no malicious code.

Re: This file is a virus, but NIS 2008 can't detect it.

Stu — Wed, 16 Jul 2008 18:18:30 GMT

I sent it to two other vendors as well. Just for a second opinion. Oner added it and the other did not