• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Why NIS 2009 can't detect Adware.Lop?

I have a series of Adware.Lop samples (two pack, 239MB and 324MB), and I had uploaded some (about 300MB) in the past three months.
I check the Detections Added everyday, I saw the Adware.Lop detection updated many times, but NIS 2009 still can't detect them.
Why NIS 2009 still can't detect them? And how can I do? 

It also called Trojan.Win32.Obfuscated.gen (Kaspersky), or Trojan.Swizzor.1 (BitDefender).

Message Edited by ONE on 09-17-2008 10:56 AM

Replies

Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

I have a series of Adware.Lop samples (two pack, 239MB and 324MB), and I had uploaded some (about 300MB) in the past three months.
I check the Detections Added everyday, I saw the Adware.Lop detection updated many times, but NIS 2009 still can't detect them.
Why NIS 2009 still can't detect them? And how can I do? 

It also called Trojan.Win32.Obfuscated.gen (Kaspersky), or Trojan.Swizzor.1 (BitDefender).

Message Edited by ONE on 09-17-2008 10:56 AM
Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

submit it to Symantec...again...

here

and write the tracking numbers of samples...


Message Edited by SaLaDiN on 09-17-2008 11:14 AM
Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?


SaLaDiN wrote:

submit it to Symantec...again...

here

and write the tracking numbers of samples...


Message Edited by SaLaDiN on 09-17-2008 11:14 AM

This is indeed the best solution.

Please send them to Symantec so they can examin and test them

"All that we are is the result of what we have thought"
Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?


SaLaDiN wrote:

submit it to Symantec...again...

here

and write the tracking numbers of samples...


Message Edited by SaLaDiN on 09-17-2008 11:14 AM

I had used that page.
I had said, I already uploaded the samples (about 300MB) in the past three months.

Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

i can read....i wrote submit AGAIN...and write the tracking numbers....

or write the tracking numbers of the old samples here and wait for a reaction from a symantec employee

Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?


SaLaDiN wrote:

i can read....i wrote submit AGAIN...and write the tracking numbers....

or write the tracking numbers of the old samples here and wait for a reaction from a symantec employee


I had submitted them many times, and the tracking number counts are more than 200..

Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

unfortunately, i dont see another solution...

try to write the latest tracking numbers and wait for a reaction...


Message Edited by SaLaDiN on 09-17-2008 12:58 PM
Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

Hi ONE

I once had the same problem of not receiving a reply from the Security Team, but I kept a record of the tracking numbers, and posted them on here. One of the moderators checked it out for me, and I received a reply with the results almost immediately.

I suggest you try this method. Remember when you submit samples here, they must be in a zipped file, and be NO LARGER than 10MB.

Let us know how you get on, thanks.

PS You can supply the tracking numbers in this thread.

Message Edited by johna on 09-18-2008 03:29 PM
Kudos1 Stats

Re: Why NIS 2009 can't detect Adware.Lop?

Thanks,  johna and SaLaDiN, I uploaded some of them again.

  
[TRACKING]: Symantec Security Response Automation: Tracking #9929986‎ -     
  
[TRACKING]: Symantec Security Response Automation: Tracking #9929983‎ -  

  
[TRACKING]: Symantec Security Response Automation: Tracking #9929977‎ -   

  
[TRACKING]: Symantec Security Response Automation: Tracking #9929974‎ -   

  
[TRACKING]: Symantec Security Response Automation: Tracking #9929971‎ -   

  
[TRACKING]: Symantec Security Response Automation: Tracking #9929968‎ -   

  
[TRACKING]: Symantec Security Response Automation: Tracking #9929963‎ -
   

If Symantec Staff need those all samples (324MB), please give me a way to submit them.

Message Edited by ONE on 09-18-2008 07:38 PMMessage Edited by ONE on 09-18-2008 07:41 PMMessage Edited by ONE on 09-18-2008 07:41 PM
Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

Thanks ONE

You should receive a reply within 48 hours, can you keep us informed of the progress, thanks.

Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

Well done ONE.

That's really the only way to do it. 

"All that we are is the result of what we have thought"
Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

Now, after the latest update, some samples can be detected now, but still a lot samples can't be detected.

(Before the two pack are 239MB and 324MB, now are 235MB and 321MB)

I will try to submit other samples recently.

Thank you all.

Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

After I submitted again, now they are 189MB and 280MB.
Although still many samples can't be detected, I still want to thank Symantec Staffs to care this problem.
Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

Did you hear back re those samples you submitted?
Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

Thanx ONE

Please keep in mind that in almost 300MB of samples there are lot's of samples. So lot's of work for the employees to test and make signatures. please give them some time.

"All that we are is the result of what we have thought"
Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?


Stu wrote:

Thanx ONE

Please keep in mind that in almost 300MB of samples there are lot's of samples. So lot's of work for the employees to test and make signatures. please give them some time.


I know that, I had uploaded all the threats I have.
And now they are 103MB and 201MB now.

Kudos0

Re: Why NIS 2009 can't detect Adware.Lop?

Now it only left 4 files..

A lot of them detected as "Packed.Generic.189"

Message Edited by ONE on 10-12-2008 08:57 AM

This thread is closed from further comment. Please visit the forum to start a new thread.