View Full Version : Nod32 not detecting viruses
Sweetie(*)(*)
August 10th, 2004, 05:02 AM
I have a question about nod32 beta,
i am running the latest ver with deep scan and adv heur, my system was acting funny so i ran online scan from Norton av, it picked up "backdoor.domwis" ,"w32.spybot.worm" and "backdoor.berbewI" six times.
other security software i use;
adaware
zonealarm pro
spybot
my question is, Is the norton scan for real or are they just trying to get me to buy their software, because Nod32 should have picked them up right?
also i had an unknown new heur virus with an extension .iiv
it was attached to an mpeg file from winmx, nod32 got this one straight away.
i realise that i should have sent a sample in to eset, but im only new to this sort of stuff, any help would be great, as im noy sure if i should continue to use nod32.
kjempen
August 10th, 2004, 09:20 AM
Virii which is not detected by NOD32 you can send in an archive (.zip) to samples@eset.com or samples@nod32.com (I would suggest the first e-mail address).
But, the strange thing is, I just checked with VGrep http://www.virusbtn.com/resources/vgrep/
According to VGrep, NOD32 already detects Backdoor.Domwis as Win32/Wisdoor.H
As for W32.Spybot.Worm, NOD32 should detect most of these variants using the advanced heuristics (isn't this enabled by default in new beta?)
About Backdoor.Berbewl, I couldn't find any info on this...
Just to be sure, you could send in all three of them if you still have them somewhere on your hard disk (having them in a zipped archive is perfectly harmless).
EDIT: I forgot, this place http://www.virustotal.com/ is a good reference when checking files if they really are viruses or not. It has several different scanning engines there, including NOD32 (with advanced heuristics enabled).
Blackspear
August 10th, 2004, 09:31 AM
I think it is named here:
http://www.virusbtn.com/resources/vgrep/vgrep.cgi?terms=Berbew&product=0
as Win32/Padodor.NAA
I made a search under the name Berbew
Cheers ;D
Sweetie(*)(*)
August 10th, 2004, 07:13 PM
Thank you for your help so far.
i went to the virus bullletin page and it seems nod32 does not detect the "backdoor.berbew family" of viruses as most of the av's also dont.
Could i just ask for some advice, is Nod32 a worth while AV, because i dont want to continue to use it if it cannot detect viruses which are quite old.
i do really like nod32 though, but i would rather keep my system protected.
i hope that ESET can pick up its game.
flyrfan111
August 10th, 2004, 10:31 PM
{QUOTE-> Thank you for your help so far.
i went to the virus bullletin page and it seems nod32 does not detect the "backdoor.berbew family" of viruses as most of the av's also dont.
<-QUOTE}
I think most AV's DO detect these, NOD as Padodor as Blackspear told you and Panda detects them as Webber
Blackspear
August 11th, 2004, 03:43 AM
{QUOTE-> ...is Nod32 a worth while AV, because i dont want to continue to use it if it cannot detect viruses which are quite old.
i do really like nod32 though, but i would rather keep my system protected.
i hope that ESET can pick up its game. <-QUOTE}
Nod32 is excellant anti-virus software and their trojan detection will vastly improve in the up and coming new release (in Beta at the moment).
Cheers ;D
tazdevl
August 11th, 2004, 01:48 PM
{QUOTE-> Thank you for your help so far.
i went to the virus bullletin page and it seems nod32 does not detect the "backdoor.berbew family" of viruses as most of the av's also dont.
Could i just ask for some advice, is Nod32 a worth while AV, because i dont want to continue to use it if it cannot detect viruses which are quite old.
i do really like nod32 though, but i would rather keep my system protected.
i hope that ESET can pick up its game. <-QUOTE}
It's one of the better AVs out there. Currently though, non-viral (trojan/worm) detection is not as good as others on the market. You do have to take a minute or two to configure the application after you install it.
Sweetie(*)(*)
August 12th, 2004, 06:04 AM
thank u all very much, i have decided to stick with nod32.
can anyone recommend a good program to pick up the worms/trojans?
kjempen
August 12th, 2004, 08:18 AM
Troian Defence Suite (http://tds.diamondcs.com.au/) + NOD32 gives very good, layered protection against virii, trojans and worms (+ some exploits and adware).
vBulletin® Copyright ©2000-2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums