This file is a virus, but NIS 2008 can't detect it

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

This file is a virus, but NIS 2008 can't detect it.
If you run it and reboot, your pc will crash.

 

[edit: URL removed from post, but still available through Administrator] 

Message Edited by Tony_Weiss on 07-15-2008 01:06 PM

Stu wrote:

Please send the file to Symantec

Malware Submission


I tried, but machine think it's not virus.

But in fact it's a virus.

Why are you so sure it is a virus?

 


Stu wrote:

Why are you so sure it is a virus?

 


 

Coz someone run it, and his pc can't run after reboot.
Message Edited by ONE on 07-15-2008 06:22 AM

That doesn't have to be a malware.

I'll have a look

Ok

I see. thanx

http://www.virustotal.com/nl/analisis/6fc837088d1b3a44bbeff4690039d316

Stu wrote:

That doesn't have to be a malware.

I'll have a look


 

I think let the ppl of symantec test it is better.

The problem happens after reboot.


Stu wrote:

Ok

I see. thanx


Yeah, almost all antivirus detected it as virus, but NIS 2008 not now.

Message Edited by ONE on 07-15-2008 06:33 AM
Message Edited by Tony_Weiss on 07-15-2008 05:30 PM

I sent it again.


ONE wrote:
I tried, but machine think it's not virus.
But in fact it's a virus.

With the Malware Submission link provided by Stu, you can submit files that may not be detected by Norton Internet Security at this time. This is one way that we can gather information about upcoming threats. Are you saying that your machine does not detect it as malware, or the reply from your submission states that it is not malware? If you can provide the submission reference number, that would also help. Thanks!

I received the same result from Symantec. I’ll send the reference number

Security Response has taken another look at the file in question and a Trojan Horse detection has been added.  This detection will be contained in Rapid Release definitions, available on our FTP site, within sequence folder 83590 or greater.  Please allow approximately 30-60 minutes for this folder to appear in the following location: ftp://ftp.symantec.com/AVDEFS/norton_antivirus/rapidrelease/sequence/

Message Edited by bewell on 07-15-2008 04:26 PM


bewell wrote:
Security Response has taken another look at the file in question and a Trojan Horse detection has been added.  This detection will be contained in Rapid Release definitions, available on our FTP site, within sequence folder 83590 or greater.  Please allow approximately 30-60 minutes for this folder to appear in the following location: ftp://ftp.symantec.com/AVDEFS/norton_antivirus/rapidrelease/sequence/
Message Edited by bewell on 07-15-2008 04:26 PM

 

I just tried to open one of those folders numbers and got this message:

 

To view this FTP site in Windows Explorer, click Page, and then click Open FTP Site in Windows Explorer.

 

Note that there is no such thing on IE7 as click Page it should be click View .... and then you do get Open FTP site ....

Hi Tony

 

This is the number I received from Symantec. 

#9752326

I also sent these files to Kaspersky and they believe it is malware and they added it to the sigs


Tony_Weiss wrote:

With the Malware Submission link provided by Stu, you can submit files that may not be detected by Norton Internet Security at this time. This is one way that we can gather information about upcoming threats. Are you saying that your machine does not detect it as malware, or the reply from your submission states that it is not malware? If you can provide the submission reference number, that would also help. Thanks!


 

My number is #9716245

 

It said: 

We have analyzed your submission.  The following is a report of our
findings for each file you have submitted:

filename:  kd.exe
machine: Machine
result: See the developer notes

Developer notes:
 F:\Virus\Report\0626\kd.exe contains no malicious code.

I sent it to two other vendors as well. Just for a second opinion. Oner added it and the other did not

Please send the file to Symantec

Malware Submission