View Full Version : NOD32 does not fiond Hackarmy.gen
Jaska
July 25th, 2004, 03:42 AM
It is like the Osama is death-file, You find the links to it from usenet. It says Arnold Schwartzzegger committed suicide. In the zip-file there is a .scr -file which Nod32 beta says is clean (so do many other AV-programs). But the tough ones like Kaspersky, F-secure, McAfee and Panda report immediately that it is infected with Hackarmy.gen-virus. I am very diasappointed to NOD with this.
Jaska
Marcos
July 25th, 2004, 03:44 AM
Hello,
Please take a look at http://www.nod32.com/support/info.htm#CurVersion and search for Hackarmy. There are 7 variants of this trojan detected by NOD32. The one you have was detected as a generic sample - if you have the most current version installed (1.820) and NOD didn't pick it up though, please submit the file to samples@eset.com for analysis.
garyrh
July 25th, 2004, 08:41 AM
It did not detect it for me either with the latest definitions and I submitted the virus to ESET.
garyrh
July 25th, 2004, 08:52 AM
I also thought that NOD32 was suppose to detect viruses with it's advanced herusitic even without a vrus definition for it. This is what I thought made NOD32 one of the best Antivirus programs.
tazdevl
July 25th, 2004, 10:01 AM
Did you have the AV tweaked out fully or were you using it in its default configuration?
garyrh
July 25th, 2004, 10:10 AM
Tweaked out fully.
Jaska
July 25th, 2004, 12:53 PM
I had also my options to scan everything as deep as possible. This one seems to be a hard bite for AV-proggies as many big players like Norton does not find it. And Nod didn't find anything even after it had infected my machine (did it with purpose, restored then a clean image...)
Jaska :'(
Jaska
July 26th, 2004, 05:39 AM
Eset sent me a aconfirmation today that it is a new variant of Hackarmy and they will add detection for it as soon as possible. :D
Blackspear
July 26th, 2004, 05:49 AM
{QUOTE-> Eset sent me a aconfirmation today that it is a new variant of Hackarmy and they will add detection for it as soon as possible. :D <-QUOTE}
Thanks for keeping us in the loop...
Cheers ;D
Mack Jones
July 26th, 2004, 06:02 AM
{QUOTE-> I also thought that NOD32 was suppose to detect viruses with it's advanced herusitic even without a vrus definition for it. This is what I thought made NOD32 one of the best Antivirus programs. <-QUOTE}
Yes this problem has been reported here too.
http://www.wilderssecurity.com/showthread.php?t=42782
Only Norman detects it heuristically.
Marcos
July 26th, 2004, 08:39 AM
The latest version of NOD32 (1.821) already detects it.
vBulletin® Copyright ©2000-2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums