Virus norton cant see, but avast does

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

Hi AntiViral

 

If you still have the file Avast detected you and submit it to Symantec via

 

https://submit.symantec.com/websubmit/retail.cgi

 

Cheers

 

Quads 

3 Likes

Hi antiviral,

 

Could you provide information about the malware you've seen? With which name does the other product classify it? If you submit it to the site recommended by Quads, please post the tracking/reference number you receive in email. That way, we can track the progress of it, and update the forum on the status of this issue. Thanks!

avast states it is :

 

win32:trojan-gen

 

it is a file within a .zip

 

even when i take the .exe out of the .zip container and scan it, norton doesn't detect it...  :(

 

tracking #9945338

3 Likes

PM me the file and I will see it for myself. Have you tried right clicking on the file and scanning it:?

did you read this entire post? 

 

funny, but norton AV 08 doeesnt have the right click context menu..

 

anyone know what the tracking number is good for? where do i use it?

Message Edited by AntiViral on 09-29-2008 12:11 AM

You can't do a thing with the number but Tony can. He can track things down and see what happend.

You still have the sample stored on your computer? What you could do is upgrading to v2009 and seeif that catches it

I got an auto response from Symantec:

 

"Developer notes:
 

E:\virus.exe

 

Our automation was unable to identify any malicious content in this submission.
 The file will be stored for further human analysis"

 

You'd think Norton '08 and '09 would have the same virus definitions...why ugrade when I just bought this a week or so ago...if 08 cant see it, why would i pay to upgrade to 09? is the upgrade free?

 

oh well..

 

 



 

Message Edited by AntiViral on 09-29-2008 09:16 AM
3 Likes

AntiViral wrote:
...Our automation was unable to identify any malicious content in this submission.

 The file will be stored for further human analysis"

 

...why ugrade when I just bought this a week or so ago...if 08 cant see it, why would i pay to upgrade to 09? is the upgrade free?


Our team is currently reviewing the submission in greater detail. Thank you for your patience while we evaluate the file.

 

You can update to the 2009 version for free with a current subscription to the 2008 version: Update Center

I think, that he was talking about the same file....as i sent to Symantec...i sent this file for analyse two times and still is "clear" !

 

my tracking numbers are #9947345

                                         #9939645

 

check this...i have tested it on virustotal.com and Result: 22/36 (61.12%)

 

http://www.virustotal.com/analisis/9928bc17ab9d72f88c64ac3402de62da

 

 

Message Edited by SaLaDiN on 09-29-2008 01:25 PM

Seems like a generic trojan. How did you get this on your system anyways?

I cant help but notice that symantec's virus engine on virustotal is 10...

 

NIS/NAV is on version 16.0.25

Norton 360 is on version 2.4.04

Symantec Endpoint is on 11. huh?

 

1 Like

norton av 09 doesnt detect it either…

1 Like

Antiviral,

 

Detection has been added for tracking #9945338 as Downloader and should be available in latest streaming definitions. Note streaming definitions are only available in the 2009 version, which you should be able to upgrade to for free. I recommend you do this, as there are several significant improvements over the 2008 version (as you would expect).

 

Unfortunately the other two submissions you made - #9947345 and #9939645 - are corrupted and cannot function. That's why your reply email comes back stating they are not detected - because they are effectively harmless and there is no point adding detection for them.

 

On a brighter note, we are expecting to receive a working version very soon and will add detection immediately. Please accept my apologies for our product not detecting this sooner. What a perfect world it would be if every antivirus product detected every virus and trojan immediately they are released into the wild :)  It seems we are not quite there yet...

 

JohnM

Symantec Security Response

 


JohnM wrote:

Antiviral,

 

Detection has been added for tracking #9945338 as Downloader and should be available in latest streaming definitions. Note streaming definitions are only available in the 2009 version, which you should be able to upgrade to for free. I recommend you do this, as there are several significant improvements over the 2008 version (as you would expect).

 

 

JohnM

Symantec Security Response

 


Hi John

 

Does this mean that there really is made a difference between 2008 and 2009?

 

Hi Stu,

 

There should always be differences with new versions of a product, or the company selling it shouldn't be marketing it as "new" or an "upgrade".

 

Some of the most significant improvements are the very light footprint, faster scanning and the new streaming definitions (= faster protection). Anyway, I'm not a salesman :) so you can read about the 2009 products here (or just use your favorite search engine):

http://www.symantec.com/norton/new/welcome/index.jsp

http://www.symantec.com/norton/products/latestproducts.jsp

 

Note that all Symantec antivirus products use the same virus definitions database.

 

JohnM

1 Like

Hi,

 

Thanks for the update.  I only uploaded the first one you mentioned.  The other two were someone else in this post. As for detecting, being a norton user for a decade at least, I expect you guys to be better than the others.  :)

 

Thanks

1 Like