• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Norton Retail Submissions Tracker

the link is given below...i submitted to virustotal and then deleted the file from my HDD..when norton did not detected it with all protection set to high and latest update..till now..i have not submitted to symantec..bcoz i immediately deleted the file..

http://www.virustotal.com/analisis/c4febb1b26536df7cb9405a67fe3fa45

Message Edited by silverhawk on 03-13-2009 12:35 AM<<Edit: Subject edited for clarity>>
Message Edited by TomV on 09-11-2009 01:12 AM
Genuine Windows 8.1 x64 Pro; NIS 2014; HP Pavallion G6 Notebook with AMD Core 2 Quad A10; 6 GB RAM; ; 1TB Western Digital HDD, AMD Radeon 2.5 GB Graphics Card

Replies

Kudos0

Re: Norton Retail Submissions Tracker

Kudos0

Re: Norton Retail Submissions Tracker

Hi guys,

Could you submit the samples to 

https://submit.symantec.com/websubmit/retail.cgi

and send me the submission number please.

Thanks

Conor Security Response
Kudos0

Re: Norton Retail Submissions Tracker

Thanks ConorM for the quick response...I sent it to SSR......I'm giving you the tracking no: #10438744

But I think Threat Expert submission is equivalent to sending it to SSR ,isn't it ? I already submitted it to Threat Expert.

Kudos0

Re: Norton Retail Submissions Tracker

It is not the same, this way you're sending it directly to Symantec, and they develop a detection then.

I usually do it through the product itself, by manually adding it to quarantine and submitting it. If you don't have the time to do it on that webpage, this procedure will take care of the suspicious file even quicker. And get it detected within a day or two.

Windows 7 Ultimate x64 SP1 -- NIS 21
Kudos0

Re: Norton Retail Submissions Tracker

This is the report of threatexpert for a Heavy Weight of fake-antivirus that i sent, only four engines in virustotal detect it (Symantec don´´t detect it) :

http://www.threatexpert.com/report.aspx?md5=f35144147bfd9a7e47e4ae7d79d9b2d1

Greetings

You cannot pass! I am a servant of the Secret Fire, wielder of the Flame of Anor. The dark fire will not avail you, Flame of Udûn! You... cannot pass!!!
Kudos0

Re: Norton Retail Submissions Tracker

It's been 3 days since I submitted the sample to SSR and to ThreatExpert................still no detection !!!!!!!!!!!

I think with threatexpert , it should been detected within at the most 1 day , but.....................
Kudos0

Re: Norton Retail Submissions Tracker

yeah i have also felt this thing...
Genuine Windows 8.1 x64 Pro; NIS 2014; HP Pavallion G6 Notebook with AMD Core 2 Quad A10; 6 GB RAM; ; 1TB Western Digital HDD, AMD Radeon 2.5 GB Graphics Card
Kudos0

Re: Norton Retail Submissions Tracker

nope its 12 days since my submission to threatexpert and no definitions yet.

So, symantec is still as sloppy as before. 

----------------------------------------------------------------NIS 2011 beta 18.0.0.107 Win 7 7600 RTM 32-bit
Kudos0

Re: Norton Retail Submissions Tracker

And... other malicious not detected file to the list, put together with other...

 http://www.threatexpert.com/report.aspx?md5=8cb8a7ffd7405b305ed2bc89f4f57b20

PD:  I'm thinking of sending my contact-data to Symantec to hire me as Malware-Hunter, each two days shipping new samples of malware not detected by NIS09 

You cannot pass! I am a servant of the Secret Fire, wielder of the Flame of Anor. The dark fire will not avail you, Flame of Udûn! You... cannot pass!!!
Kudos0

Re: Norton Retail Submissions Tracker

With threatexpert that is unusual -- for me it took 7 minutes ....

They tell you to make sure that it does not go into your spam folder -- have you checked, especially if you use a system at your ISP?

Apart from a visual search of your spam folder if you have not deleted the contents you could set the URL as an exclusion.

It could be a good idea to do this and submit again?

See what the Symantec Staffers say after the weekend when there will be more about.

Hugh
Kudos0

Re: Norton Retail Submissions Tracker


Rohit1gupta wrote:

nope its 12 days since my submission to threatexpert and no definitions yet.

[ ... ]


But you did get a report from threatexpert?

Hugh
Kudos0

Re: Norton Retail Submissions Tracker

The threat level reported on that link was hardly startling?

Hugh
Kudos0

Re: Norton Retail Submissions Tracker

Genuine Windows 8.1 x64 Pro; NIS 2014; HP Pavallion G6 Notebook with AMD Core 2 Quad A10; 6 GB RAM; ; 1TB Western Digital HDD, AMD Radeon 2.5 GB Graphics Card
Kudos0

Re: Norton Retail Submissions Tracker


huwyngr wrote:

Rohit1gupta wrote:

nope its 12 days since my submission to threatexpert and no definitions yet.

[ ... ]


But you did get a report from threatexpert?


 
 Yup i got the report within 7 min, 13 days ao but they do not bother to add its definition into norton's signature.
----------------------------------------------------------------NIS 2011 beta 18.0.0.107 Win 7 7600 RTM 32-bit
Kudos0

Re: Norton Retail Submissions Tracker

To huwyngr :

1.There are currently no exclusions added in my NIS.......it is empty.

2. I did get a report from ThreatExpert in 10 min. and it was not in the spam folder.

3.But where is the detection ???

4. symantec still (16 th Mar. evening) does not detect it......(submitted 12 th Mar evening)

Improvement in detection rate desparately needed !!!

Kudos0

Re: Norton Retail Submissions Tracker

Actually symantec aquired pc tools but when they come on threatexpert, they couldn't able to understand their hi-fi coding.

So, thats the reason they can't convert it into norton's signature.

Well it will take 2-3 years for them to understand threatexpert's coding and mechanism and then definitions will be added. :P 

----------------------------------------------------------------NIS 2011 beta 18.0.0.107 Win 7 7600 RTM 32-bit
Kudos1 Stats

Re: Norton Retail Submissions Tracker

severe threat are immediately taken into consideration whenever i have submitted threats to Symantec..i got detection in less then 5 hours..symatec understands and do work in right way and in right manner to avoid any mistake..

-------------------------------------------------------------------
Norton Internet Security 2009

Genuine Windows Vista Home Premium SP1 x86

Intel Core 2 Quad Q6600 2.40 Ghz

8 GB RAM

Intel G35 Motherboard

Genuine Windows 8.1 x64 Pro; NIS 2014; HP Pavallion G6 Notebook with AMD Core 2 Quad A10; 6 GB RAM; ; 1TB Western Digital HDD, AMD Radeon 2.5 GB Graphics Card
Kudos0

Re: Norton Retail Submissions Tracker


Rohit1gupta wrote: 

 Yup i got the report within 7 min, 13 days ao but they do not bother to add its definition into norton's signature.


Well if the report on it is like the one I looked up that someone linked to in this thread where the Security Risk slider was on the first notch and yellow then perhaps Norton thinks it is not a real threat.

If you are being analytical in your statements I would not use terms like "do not bother to add" when we don't know their reasons.

Hugh
Kudos0

Re: Norton Retail Submissions Tracker

If this is the file you linked to then the security threat seemed to be minimal so perhaps that is why Norton has not flagged it as malware.
Hugh
Kudos0

Re: Norton Retail Submissions Tracker


silverhawk wrote:

 severe threat are immediately taken into consideration whenever i have submitted threats to Symantec..i got detection in less then 5 hours..symatec understands and do work in right way and in right manner to avoid any mistake..


Indeed very correct. I completely agree with you.............but what we need is improvement in detection rate ,that's all
Kudos0

Re: Norton Retail Submissions Tracker

huwyngr :

can you please have a look at the link submitted by me..........I have given virus total report , threatexpert report , Tracking no. 

 also.

Kudos0

Re: Norton Retail Submissions Tracker

And again, other TrojanFakeAlert/BHOagent/Backdoor  that is not detected for NIS09 fully updated:

http://www.threatexpert.com/report.aspx?md5=6b24e317af43e1d3dfac41f3ddd64290

 The list never stops growing, and the response is too slow adding Symantec virus definitions...

Greetings

You cannot pass! I am a servant of the Secret Fire, wielder of the Flame of Anor. The dark fire will not avail you, Flame of Udûn! You... cannot pass!!!
Kudos0

Re: Norton Retail Submissions Tracker


huwyngr wrote:

Rohit1gupta wrote: 

 Yup i got the report within 7 min, 13 days ao but they do not bother to add its definition into norton's signature.


Well if the report on it is like the one I looked up that someone linked to in this thread where the Security Risk slider was on the first notch and yellow then perhaps Norton thinks it is not a real threat.

If you are being analytical in your statements I would not use terms like "do not bother to add" when we don't know their reasons.


 
Whatever the level it say yellow or red, it did a nasty attack on my comp, when i opened my start button and clicked all programs i could find around 10 programs but previous to the infection list had 60-70 programs
If its not nasty and high alert threat than what is?
Only those which coz ur comp to not to boot?
I dunno wat has happened but symantec is unable to incorporate threatexpert's detection into its signature.
Well if it can then y not add all of them, everything software does for them , so just link all of detections to it. 
----------------------------------------------------------------NIS 2011 beta 18.0.0.107 Win 7 7600 RTM 32-bit
Kudos0

Re: Norton Retail Submissions Tracker

I'm sorry to hear the details of your experience.
Hugh
Kudos0

Re: Norton Retail Submissions Tracker


Shridhar wrote:

huwyngr :

can you please have a look at the link submitted by me..........I have given virus total report , threatexpert report , Tracking no. 

 also.


I thought I had done so and commented on it.

If you gave a link to the message so I could find it I'd look again although I doubt I'd add anything useful.

Hugh
Kudos0

Re: Norton Retail Submissions Tracker

Here is another one...............undetected !!!

Virus Total :http://www.virustotal.com/analisis/a139acb69e39824b833ab8e37e73264c

ThreatExpert :http://www.threatexpert.com/report.aspx?md5=6970897c8db6bff30d7e2c03016f667a

I submitted file to SSR.....Tracking No. : #10454209

Improvement in the detection rate Desparately needed !!!

Message Edited by Shridhar on 03-17-2009 05:15 PM
Kudos0

Re: Norton Retail Submissions Tracker

Genuine Windows 8.1 x64 Pro; NIS 2014; HP Pavallion G6 Notebook with AMD Core 2 Quad A10; 6 GB RAM; ; 1TB Western Digital HDD, AMD Radeon 2.5 GB Graphics Card
Kudos0

Re: Norton Retail Submissions Tracker


Shridhar wrote:

Here is another one...............undetected !!!

Virus Total :http://www.virustotal.com/analisis/a139acb69e39824b833ab8e37e73264c

ThreatExpert :http://www.threatexpert.com/report.aspx?md5=6970897c8db6bff30d7e2c03016f667a

I submitted file to SSR.....Tracking No. : #10454209

Improvement in the detection rate Desparately needed !!!

Message Edited by Shridhar on 03-17-2009 05:15 PM

NOD32, Sophos and Trend Micro misses it as well. No software can detect everything - that simply doesn't exist. Don't get too heated and use a layered approach instead if you're not already - it's the only solution. I myself use Secunia PSI, Prevx EDGE and ThreatFire to name a few. I'm not saying they shouldn't fix it - it's great that you're reporting, but don't expect a single security product to catch it all.

Kudos0

Re: Norton Retail Submissions Tracker


RavenMacDaddy wrote:
NOD32, Sophos and Trend Micro misses it as well. No software can detect everything - that simply doesn't exist. Don't get too heated and use a layered approach instead if you're not already - it's the only solution. I myself use Secunia PSI, Prevx EDGE and ThreatFire to name a few. I'm not saying they shouldn't fix it - it's great that you're reporting, but don't expect a single security product to catch it all.

Since I can't edit messages after a certain amount of time (pretty darn awkward IMO): "I'm not saying they - Symantec - shouldn't fix it [...]"

Kudos0

Re: Norton Retail Submissions Tracker

This high risk malware isn´t detected  for NIS09 fully updated. I sent to Symantec Security Response the infected file few minits ago.

Virustotal results:

http://www.virustotal.com/es/analisis/08b3d5d61ec3f658cca39e8768d50d56

Greetings

You cannot pass! I am a servant of the Secret Fire, wielder of the Flame of Anor. The dark fire will not avail you, Flame of Udûn! You... cannot pass!!!
Kudos1 Stats

Re: Norton Retail Submissions Tracker

Ok people , let's stop submitting the samples for now (only for some time) and let's wait for the symantec employees to respond or till we

 

ourself get response from SSR through email.......

 

It becomes tough on Symantec people also to respond to these many threats in a single post / threat !!!

 

So let's be patient .......It's a wait and watch game !!!

Kudos0

Re: Norton Retail Submissions Tracker

The latest threat that i sent to Symantec Security Response, is now detected:

We have analyzed your submission.  The following is a report of our
findings for each file you have submitted:

filename:  C:\Users\-----------\Documents\viewtubesoftware.40003.exe
machine: Machine
result: This file is detected as Downloader. http://www.symantec.com/avcenter/venc/data/downloader.html

Customer notes:
trojan-downloader please added to virus database


Developer notes:
C:\Users\-------------\Documents\viewtubesoftware.40003.exe is a non-repairable threat. Please delete this file and replace it if necessary. Please follow the instruction at the end of this email message to install the latest available definitions.

You cannot pass! I am a servant of the Secret Fire, wielder of the Flame of Anor. The dark fire will not avail you, Flame of Udûn! You... cannot pass!!!
Kudos1 Stats

Re: Norton Retail Submissions Tracker

Here is the response what I got through SSR :

" bittorrent.exe Our automation was unable to identify any malicious content in this submission.
 The file will be stored for further human analysis"

But the important thing is that with the reception 16.5 update ,NIS ,during idle time scanning picked up those viruses 

 

as Downloader .

 

So job done ........good job Symantec !!!

Message Edited by Shridhar on 03-20-2009 09:29 AM
Kudos0

Re: Norton Retail Submissions Tracker

Perhaps you should start a thread Another threat detected!  .... <s>
Hugh
Kudos0

Re: Norton Retail Submissions Tracker

Here are more two...............undetected !!!

1.

Virus Total :http://www.virustotal.com/analisis/371968469c154fce52e944ad9a1586b7

I submitted file to SSR.....Tracking No. : #10481921



2.

Virus Total :http://www.virustotal.com/analisis/3180e397b135b83e812f433ea62a286e

I submitted file to SSR.....Tracking No. : #10482399

Improvement in the detection rate Desparately needed !!!

Kudos0

Re: Norton Retail Submissions Tracker

As I stated in another thread, I notice that McAfee is doing a great job at least in the detection rate department...

Kudos0

Re: Norton Retail Submissions Tracker

one more threat not detected!!!

http://www.virustotal.com/analisis/bb136441b980f4f6dfda354ca9881c9a

Tracking #10489693
Genuine Windows 8.1 x64 Pro; NIS 2014; HP Pavallion G6 Notebook with AMD Core 2 Quad A10; 6 GB RAM; ; 1TB Western Digital HDD, AMD Radeon 2.5 GB Graphics Card
Kudos0

Re: Norton Retail Submissions Tracker

Here is one more...............undetected !!!

1.

Virus Total :http://www.virustotal.com/analisis/74ba9b0e4890f3d185046034573bbee0

I submitted file to SSR.....Tracking No. : #10498619

Kudos0

Re: Norton Retail Submissions Tracker

The file was submitted ------28th Mar.-10.00 pm

 

Detection added --------------29th Mar.- 4.45 am

 

Detection time required------ 6.45 Hrs

 

Conclusion----------------------Solid response rate.

 

Good job Symantec , keep it up !!!

Kudos0

Re: Norton Retail Submissions Tracker

Here is one more...............undetected !!!

1.

Virus Total :http://www.virustotal.com/analisis/e2c5cc24fd2d7912a0e1f74d10500fa6

ThreatExpert : http://www.threatexpert.com/report.aspx?md5=3fb032b85cdfa346a0620d3d14e405da

I submitted file to SSR.....Tracking No. : #10501149

Kudos0

Re: Norton Retail Submissions Tracker

Another threat not detected by Symantec..........This time it is a fake Antivirus

Virus total :http://www.virustotal.com/analisis/5983df0b3965752ea55776c2035885dc

Tracking no. : #10589113 

 

Improvement in detection rate desparately needed !!!

Kudos0

Re: Norton Retail Submissions Tracker

why norton does not detect all these threat..and these avast and avg detect them easiy..and hatsoff to avira..!! symantec people plzz increase detection rates...
Genuine Windows 8.1 x64 Pro; NIS 2014; HP Pavallion G6 Notebook with AMD Core 2 Quad A10; 6 GB RAM; ; 1TB Western Digital HDD, AMD Radeon 2.5 GB Graphics Card
Kudos0

Re: Norton Retail Submissions Tracker

I'm sure all this is very interesting but I note that VirusTotal reports on using a Symantec application not dealt with here!

 Symantec     1.4.4.12  20      09.04.21  -

Fewer such users are likely to click on a popup offering to remove malware that is not there than here with the Norton consumer products and indeed most such users would be protected by the IT management by much more rigid controls on what they are allowed to access.

Just my personal 2¢ ....

If it were Norton 16.5.0.135 I might be more alarmed!

The greatest danger to your computer lies between the left ear and the right ear .....

Hugh
Kudos0

Re: Norton Retail Submissions Tracker

Hello................ what's happening ?

1.I submitted a fake antivirus(Tracking #10589113) 4-5 days back and Symantec cannot add the detections for it ....that's amazing !!!!!!

During the time 6 more AVs added the detection 

http://www.virustotal.com/analisis/110e14280421f8774093cc066d850660

I just don't understand why can't they add detection (people talking about ThreatExpert ....now answer my question)

It was alright that Symantec could not detect it on their own but when people like me and many others submit a file 

 

with full evidence that the file is some type of virus then is it not their responsibility to add detection immediately or in 1-2 days ?

If they cannot then it is a shame.

2.More frustration comes when a file submitted almost a month back is yet to be detected !!!

   This is 3rd time i'm posting tracking no.  #10497874.

3. 2 files submitted on 2nd April................no detection yet : #10521261 , #10521257

Message Edited by Shridhar on 04-25-2009 10:19 AM
Kudos0

Re: Norton Retail Submissions Tracker

Shridhar, your submissions have been processed. It's entirely up to you of course, but you might find that your files get processed faster if you use the same email address to submit them.

 

JohnM

Kudos0

Re: Norton Retail Submissions Tracker

Thanks John :

I was out of station for 2 days hence couldn't post the results.

Here they go..........

One of the files was corrupt and the other two are finally detected as Downloader.Misleadapp 

And I always use the same email id for the submissions .

Thanks once again John 

Kudos0

Re: Norton Retail Submissions Tracker

good to hear that all threats are detecting..dude you are doing great job in subbmitting threats to symantec...atleast somewhere and somewhat is adding or improving..
Genuine Windows 8.1 x64 Pro; NIS 2014; HP Pavallion G6 Notebook with AMD Core 2 Quad A10; 6 GB RAM; ; 1TB Western Digital HDD, AMD Radeon 2.5 GB Graphics Card
Kudos0

Re: Norton Retail Submissions Tracker

norton has increased it's detection power..i am happy..Message Edited by silverhawk on 05-09-2009 11:24 AM
Genuine Windows 8.1 x64 Pro; NIS 2014; HP Pavallion G6 Notebook with AMD Core 2 Quad A10; 6 GB RAM; ; 1TB Western Digital HDD, AMD Radeon 2.5 GB Graphics Card
Kudos0

Re: Norton Retail Submissions Tracker

Symantec is working very hard on these submissions. I prefer them to do it very good instead of doing it fast and we get a lot of fp's
&quot;All that we are is the result of what we have thought&quot;
Kudos0

Re: Norton Retail Submissions Tracker

Submitting again to Symantec.. submitted to McAfee and Kaspersky..McAfee artemis immediately detected it when i tried to run on my father's dell laptop...but in my desktop it is not getting detected...i sent this file to kaspersky..they responded my another day and told the threat will be getting detected now...
Tracking #10869426

 virustotal link:

first:

http://www.virustotal.com/analisis/1bd406f7a91ec013b2f8b690668acdb3

and now today's:

http://www.virustotal.com/analisis/cda09498a6941fb51565219f826b8efe

Message Edited by silverhawk on 05-10-2009 10:17 PMMessage Edited by silverhawk on 05-10-2009 10:18 PM
Genuine Windows 8.1 x64 Pro; NIS 2014; HP Pavallion G6 Notebook with AMD Core 2 Quad A10; 6 GB RAM; ; 1TB Western Digital HDD, AMD Radeon 2.5 GB Graphics Card

This thread is closed from further comment. Please visit the forum to start a new thread.