Reply
Tony_Weiss
Posts: 7,361
Topics: 499
Kudos: 1,522
Solutions: 280
Registered: ‎04-07-2008

Re: This file is a virus, but NIS 2008 can't detect it.


ONE wrote:
I tried, but machine think it's not virus.
But in fact it's a virus.

With the Malware Submission link provided by Stu, you can submit files that may not be detected by Norton Internet Security at this time. This is one way that we can gather information about upcoming threats. Are you saying that your machine does not detect it as malware, or the reply from your submission states that it is not malware? If you can provide the submission reference number, that would also help. Thanks!

Tony Weiss
Norton Forums Global Community Manager
Symantec Corporation
Stu Rootkit Eradicator
Rootkit Eradicator
Stu
Posts: 5,210
Registered: ‎04-08-2008

Re: This file is a virus, but NIS 2008 can't detect it.

I received the same result from Symantec. I'll send the reference number
"All that we are is the result of what we have thought"
Symantec Employee
bewell
Posts: 30
Registered: ‎04-08-2008

Re: This file is a virus, but NIS 2008 can't detect it.

[ Edited ]
Security Response has taken another look at the file in question and a Trojan Horse detection has been added.  This detection will be contained in Rapid Release definitions, available on our FTP site, within sequence folder 83590 or greater.  Please allow approximately 30-60 minutes for this folder to appear in the following location: ftp://ftp.symantec.com/AVDEFS/norton_antivirus/rapidrelease/sequence/
Message Edited by bewell on 07-15-2008 04:26 PM
huwyngr
Posts: 18,960
Topics: 906
Kudos: 2,329
Solutions: 337
Registered: ‎04-13-2008

Re: This file is a virus, but NIS 2008 can't detect it.


bewell wrote:
Security Response has taken another look at the file in question and a Trojan Horse detection has been added.  This detection will be contained in Rapid Release definitions, available on our FTP site, within sequence folder 83590 or greater.  Please allow approximately 30-60 minutes for this folder to appear in the following location: ftp://ftp.symantec.com/AVDEFS/norton_antivirus/rapidrelease/sequence/
Message Edited by bewell on 07-15-2008 04:26 PM

 

I just tried to open one of those folders numbers and got this message:

 

To view this FTP site in Windows Explorer, click Page, and then click Open FTP Site in Windows Explorer.

 

Note that there is no such thing on IE7 as click Page it should be click View .... and then you do get Open FTP site ....



Hugh
Stu Rootkit Eradicator
Rootkit Eradicator
Stu
Posts: 5,210
Registered: ‎04-08-2008

Re: This file is a virus, but NIS 2008 can't detect it.

Hi Tony

 

This is the number I received from Symantec. 

#9752326

I also sent these files to Kaspersky and they believe it is malware and they added it to the sigs

"All that we are is the result of what we have thought"
ONE
Spam Squasher
ONE
Posts: 319
Registered: ‎05-05-2008

Re: This file is a virus, but NIS 2008 can't detect it.


Tony_Weiss wrote:

With the Malware Submission link provided by Stu, you can submit files that may not be detected by Norton Internet Security at this time. This is one way that we can gather information about upcoming threats. Are you saying that your machine does not detect it as malware, or the reply from your submission states that it is not malware? If you can provide the submission reference number, that would also help. Thanks!


 

My number is #9716245

 

It said: 

We have analyzed your submission.  The following is a report of our
findings for each file you have submitted:

filename:  kd.exe
machine: Machine
result: See the developer notes

Developer notes:
 F:\Virus\Report\0626\kd.exe contains no malicious code.

Stu Rootkit Eradicator
Rootkit Eradicator
Stu
Posts: 5,210
Registered: ‎04-08-2008

Re: This file is a virus, but NIS 2008 can't detect it.

I sent it to two other vendors as well. Just for a second opinion. Oner added it and the other did not
"All that we are is the result of what we have thought"