topic Re: Norton Retail Submissions Tracker in Norton Internet Security / Norton AntiVirus

Norton Retail Submissions Tracker

silverhawk — Fri, 11 Sep 2009 08:12:45 GMT

the link is given below...i submitted to virustotal and then deleted the file from my HDD..when norton did not detected it with all protection set to high and latest update..till now..i have not submitted to symantec..bcoz i immediately deleted the file..

http://www.virustotal.com/analisis/c4febb1b26536df7cb9405a67fe3fa45

Message Edited by silverhawk on 03-13-2009 12:35 AM

<<Edit: Subject edited for clarity>>

Message Edited by TomV on 09-11-2009 01:12 AM

Re: Another threat not detected!

Shridhar — Fri, 13 Mar 2009 12:49:45 GMT

Here is another one...............undetected !!!

http://www.virustotal.com/analisis/b0f6c12a6e07a5eceffb11ac972aa8b7

Threat Expert report : http://www.threatexpert.com/report.aspx?md5=1051cd4134462a1c78ca5230a18213c8

Re: Another threat not detected!

ConorM — Fri, 13 Mar 2009 13:06:55 GMT

Hi guys,

Could you submit the samples to

https://submit.symantec.com/websubmit/retail.cgi

and send me the submission number please.

Thanks

Re: Another threat not detected!

Shridhar — Fri, 13 Mar 2009 13:17:27 GMT

Thanks ConorM for the quick response...I sent it to SSR......I'm giving you the tracking no: #10438744

But I think Threat Expert submission is equivalent to sending it to SSR ,isn't it ? I already submitted it to Threat Expert.

Re: Another threat not detected!

TomiRed — Fri, 13 Mar 2009 13:26:46 GMT

It is not the same, this way you're sending it directly to Symantec, and they develop a detection then.

I usually do it through the product itself, by manually adding it to quarantine and submitting it. If you don't have the time to do it on that webpage, this procedure will take care of the suspicious file even quicker. And get it detected within a day or two.

This is a heavy weight of fake-antivirus

Serekantum — Fri, 13 Mar 2009 14:21:01 GMT

This is the report of threatexpert for a Heavy Weight of fake-antivirus that i sent, only four engines in virustotal detect it (Symantec don´´t detect it) :

http://www.threatexpert.com/report.aspx?md5=f35144147bfd9a7e47e4ae7d79d9b2d1

Greetings

Re: This is a heavy weight of fake-antivirus

Shridhar — Sun, 15 Mar 2009 11:31:56 GMT

It's been 3 days since I submitted the sample to SSR and to ThreatExpert................still no detection !!!!!!!!!!!

I think with threatexpert , it should been detected within at the most 1 day , but.....................

Re: Another threat not detected!

silverhawk — Sun, 15 Mar 2009 12:15:01 GMT

yeah i have also felt this thing...

Re: Another threat not detected!

Rohit1gupta — Sun, 15 Mar 2009 12:50:07 GMT

nope its 12 days since my submission to threatexpert and no definitions yet.

So, symantec is still as sloppy as before.

Re: Another threat not detected!

Serekantum — Sun, 15 Mar 2009 15:35:13 GMT

And... other malicious not detected file to the list, put together with other...

http://www.threatexpert.com/report.aspx?md5=8cb8a7ffd7405b305ed2bc89f4f57b20

PD: I'm thinking of sending my contact-data to Symantec to hire me as Malware-Hunter, each two days shipping new samples of malware not detected by NIS09 :smileyvery-happy:

Re: This is a heavy weight of fake-antivirus

huwyngr — Sun, 15 Mar 2009 20:58:47 GMT

With threatexpert that is unusual -- for me it took 7 minutes ....

They tell you to make sure that it does not go into your spam folder -- have you checked, especially if you use a system at your ISP?

Apart from a visual search of your spam folder if you have not deleted the contents you could set the URL as an exclusion.

It could be a good idea to do this and submit again?

See what the Symantec Staffers say after the weekend when there will be more about.

Re: Another threat not detected!

huwyngr — Sun, 15 Mar 2009 21:00:05 GMT

Rohit1gupta wrote:
nope its 12 days since my submission to threatexpert and no definitions yet.
[ ... ]

But you did get a report from threatexpert?

Re: Another threat not detected!

huwyngr — Sun, 15 Mar 2009 21:02:07 GMT

The threat level reported on that link was hardly startling?

Re: Another threat not detected!

silverhawk — Sun, 15 Mar 2009 23:18:17 GMT

here is one more.........

http://www.virustotal.com/analisis/8771b74df4d1e8150637b71eac4e3b21

Re: Another threat not detected!

Rohit1gupta — Mon, 16 Mar 2009 02:52:29 GMT

huwyngr wrote:
Rohit1gupta wrote:
nope its 12 days since my submission to threatexpert and no definitions yet.
[ ... ]
But you did get a report from threatexpert?

Yup i got the report within 7 min, 13 days ao but they do not bother to add its definition into norton's signature.

Re: This is a heavy weight of fake-antivirus

Shridhar — Mon, 16 Mar 2009 09:28:04 GMT

To huwyngr :

1.There are currently no exclusions added in my NIS.......it is empty.

2. I did get a report from ThreatExpert in 10 min. and it was not in the spam folder.

3.But where is the detection ???

4. symantec still (16 th Mar. evening) does not detect it......(submitted 12 th Mar evening)

Improvement in detection rate desparately needed !!!

Re: This is a heavy weight of fake-antivirus

Rohit1gupta — Mon, 16 Mar 2009 09:49:20 GMT

Actually symantec aquired pc tools but when they come on threatexpert, they couldn't able to understand their hi-fi coding.

So, thats the reason they can't convert it into norton's signature.

Well it will take 2-3 years for them to understand threatexpert's coding and mechanism and then definitions will be added. :P

Re: Another threat not detected!

silverhawk — Mon, 16 Mar 2009 11:20:55 GMT

severe threat are immediately taken into consideration whenever i have submitted threats to Symantec..i got detection in less then 5 hours..symatec understands and do work in right way and in right manner to avoid any mistake..

-------------------------------------------------------------------
Norton Internet Security 2009

Genuine Windows Vista Home Premium SP1 x86

Intel Core 2 Quad Q6600 2.40 Ghz

8 GB RAM

Intel G35 Motherboard

Re: Another threat not detected!

huwyngr — Mon, 16 Mar 2009 14:50:21 GMT

Rohit1gupta wrote:

Yup i got the report within 7 min, 13 days ao but they do not bother to add its definition into norton's signature.

Well if the report on it is like the one I looked up that someone linked to in this thread where the Security Risk slider was on the first notch and yellow then perhaps Norton thinks it is not a real threat.

If you are being analytical in your statements I would not use terms like "do not bother to add" when we don't know their reasons.

Re: This is a heavy weight of fake-antivirus

huwyngr — Mon, 16 Mar 2009 15:11:10 GMT

If this is the file you linked to then the security threat seemed to be minimal so perhaps that is why Norton has not flagged it as malware.