Win32/Korvar.A.

[Mele20]

I wish NOD32 would have more comments on its site about new virus/trojan threats. Of course, a few are mentioned, but if you go to the Virus Descriptions page, there is very little there and it hasn't been updated since October 8! My friends over at my home security forum have been excited about Korvar / Winevar/ Seoul / Bride.c for several days now since one member first reported its discovery on November 21. They have posted what all the other major anti-virus vendors have to say about this particularly nasty trojan. Now they want to know what NOD32 has to say, but all I can find is the name NOD32 gives to it in today's definitions (same name McAfee uses and one poster is wondering if McAfee and NOD32 are in bed together on this one! :) Anyhow, any comments I can pass on to these folks? (I don't like NOD32 getting left out of the party)! :)

[jan]

Hey Mele20,

OK, we know our virus descriptions should be better and they will be. We are improving it together with the new NOD version. We'll put some coments.

rgds

jan :)

[JacK]

{QUOTE-> quoting: jan link=board=35;threadid=5130;start=0#33530 date=1038305638]
Hey Mele20,

OK, we know our virus descriptions should be better and they will be. We are improving it together with the new NOD version. We'll put some coments.

rgds

jan :)

Hi Jan,

I think a Great effort has already be done since a few months :
before ESET use aliases from its own nobody else used :)

Rgds,


<-QUOTE}

[Mele20]

>I think a Great effort has already be done since a few months :
before ESET use aliases from its own nobody else used

I agree that is a huge improvement on the part of Eset....at least I could tell from the update list that this worm/trojan had been added.:) If Eset had still been using those aliases that no one else used...I would not have been able to figure it out. I also realize that Eset has put their effort into getting version 2 ready to launch and thus has not had a lot of time for other things. I am glad to hear though that there will be more effort made to describe these threats on the NOD32 website .

May I also inquire why the NOD32 USA site has no link to this forum?????

[Paul Wilders]

Hi Mele20,

{QUOTE-> May I also inquire why the NOD32 USA site has no link to this forum <-QUOTE}

Sure. It's up to all Eset homepages wether or not to refer to this forum. Although many are represented here from all over the world as moderators, many rely on personal customer care as available on their websites.

regards.

paul

[Primrose]

I have a friend who is helping out in a forum over in Italy..he asked me how he could help them get rid of Opaserv..stating also that "half of Italy was infected with that bad boy", and they can not seem to shake it.

I gave him this information I got from Wilders Forum...Now everyone in that forum is headed to the Future Time/NOD32 Italy Site and they are happy campers.

It sure is a small world ;D Thank you Paolo and thanks to all of you.

John

_______________


Free Opaserv and Bugbear cleaners



Hi all,

as you know, these two worms are quite ITW. NOD32 intercepts them without any problem, anyway some people in the Eset team worlwide released dedicated cleaners to handle these two beasts on infected computers. Here you are the URL useful to download an up-to-date version of the cleaners (in English):

Author : Eset Team Bratislava
Program: Bugbear Cleaner
URL : http://www.nod32.com/bb_cln_en.exe

Author : Anders Nilsson - Eurosecure/NOD32 Sweden
Program: Bugbear cleaner
URL : http://www.eurosecure.com/download/tools/RemoveBugbear.exe

Program: Opaserv cleaner
URL : http://www.eurosecure.com/download/tools/RemoveOpaserv.exe

Author : Paolo Monti - Future Time/NOD32 Italy
Program: Bugbear cleaner
URL : http://www.nod32.it/tools/BBCLEAN.ZIP

Program: Opaserv cleaner
URL : http://www.nod32.it/tools/OPACLEAN.ZIP

ciao,
Paolo.

http://www.wilderssecurity.com/showthread.php?t=4443

[Paul Wilders]

John,

Don't be shy: kudoos to you as well for helping all those others out ;).

regards,

paul

[Primrose]

Not shy at all..just trying to keep moving all over the Internet to hide from John Ashcroft until I have my full encryption kit installed. 8)

Is it safe in here today..icksnay futtsnay
;D

ROTF, AFAIK TPTB RTFM WRT FYI AFK IYKWIM !

Be Well,

OHNJNAY