New msn worm - No Heuristic detection

[jg88swe]

Hey
NEW MSN WORM

Message looks like this:

*** URGENT *** Download the latest patch from http://msnupdate.***.com/ to prevent getting infected by W32.Bropia.C.


No Heuristic detection :(

[r3l4x]

IM-Worm.Win32.Kelvir.a

Added in the next updates of KAV ;)

[Blackspear]

-{ Quote: "No Heuristic detection :(" }-Can you please forward this to samples@eset.com

Cheers ;D

[r3l4x]

done ;)

[jg88swe]

i dont thinks its any use to send something to ESET!
All my emails have been ignored for the last half-year with no replys so i dont do that anymore ;)

If not anyone can supply me with a WORKNIG adress, or a direct adress to a virus anylizer...

got about 10 common trojans in my virussample that NOD32 dont detect, but they just ignore it ;)

[Marcos]

Guys,
the sample is going to be added to the next update. It's beyond us to reply to every single email given that we are being deluged with samples. The samples are added on a per-need basis which means ITW samples are added instantly whereas the rest will be added at a later time.

[jg88swe]

Well, i think you should hire someone that only replys on emails then :P Kaspersky semse to manage it pritty well...

And if i mail Support i get no awnser there either, like that TrojanDownloader.⓴汫8৹Ỡϛ with the weird name... it havent been fixed and it havent been replyed...
When AMON scans that file the computer will shutdown without a warning first time. Thats a major bug i think, but just ignored as the rest

[sir_carew]

Added in 1.1008 as Win32/Kelvir.A.

[Defenestration]

-{ Quote: "No Heuristic detection :(" }-Can you also send it to submit@diamondcs.com.au

[ronjor]

bpm3k

Since this was a duplicate post, it has been removed.
Your other post is at the link below.

http://www.wilderssecurity.com/showthread.php?t=68717

[ASSNeeded]

The as needed addition is really stupid.
I wonder how many people got infected with a trojan that was not detected by NOD32 but it was at the hands of the Malware analyzer for weeks.
I guess the person that got infected does not really like the idea that NOD32 deemed the detection of that strain as "not yet needed".


We need to produce more Smalpox Vaccine!!!
No it's NOT NEEDED yet.

(Huge smallpox outbreak, 50000 people die).

HEY we got the vaccine now since it's needed, but the 50K people that could have been saved and weren't well I guess "bad luck".



P.S.
How about all the people who had their Identity stolen because that specific strain was not thought to be ITW so it "wasn't needed"?
Maybe the reason why it wasn't ITW since it was a lab only thing that a specific hacker decided to use as a pet project in order to infect a specific system (but somehow NOD32 tech got the strain...but decided that since it's not ITW then it's not needed).