PDA

View Full Version : Will NOD32 detect this?

Tannor
September 1st, 2005, 06:44 AM
I saw this on Blizzard page and concercened. I do run Outpost as well as Full version of NOD32, so if NOD32 misses it hopefully Outpost will get it just in case


http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.wowcraft.html



But I cannot find any mention of this trojan in NOD32 database. I would hope they know about it?
GuruGuy
September 1st, 2005, 06:49 AM
It's over a month old...........sure hope they would have added it by now!
Brian N
September 1st, 2005, 06:49 AM
It could be one of these just with a different name, found in the 1.1185 update:
Win32/PSW.PWSteal.A, Win32/PSW.PWSteal.C

Zotob is also called Mytob in NOD sigs, so you never know ;)
Firecat
September 1st, 2005, 03:40 PM
Vgrep says that only Symantec and Norman (through Sandbox) detect this. :-\
Tannor
September 1st, 2005, 08:30 PM
What is vgrep?


since i paid for NOD32, can I send an email to support asking if they can detect it and if not can they add it?

How hard can it be to add?
The Hammer
September 1st, 2005, 09:00 PM
{QUOTE-> What is vgrep?


since i paid for NOD32, can I send an email to support asking if they can detect it and if not can they add it?

How hard can it be to add? <-QUOTE}What is vgrep? I googled the term see here: http://www.virusbtn.com/news/vb_news/2005/02_10.xml
webyourbusiness
September 2nd, 2005, 12:28 AM
I thought vgrep was VirusBulletin's virus database comparison .. ??? If so, it required login/password via free registration - which I can never remember mine...
Chewbacca42
September 2nd, 2005, 01:46 AM
Do we have a definite answer ?

Bit hard to be sure from this discussion :) :)

I think they would detect it.. being that old ?
Tannor
September 2nd, 2005, 06:22 AM
I havent sent anything to support, havent had a chance.


I relaly thought NOD32 would detect it, and just call it a different name. Since I thought NOD32 was one of the best at detecting viruses and unknowns.

At this point since I am running Outpost, and I dont download anything extra for WoW like custom UI's, or visit any bad sites, I am probably pretty safe. I just wanted to cover all my bases,
Bandicoot
September 2nd, 2005, 05:26 PM
Antivirus companies do not all use the same naming for malware. NOD32 has Win32/PWSteal.A and Win32/PWSteal.C which may well cover this malware. Our lab added them to the database on 1st August 2005.

This malware targets the passwords for cracked versions of "World of Warcraft" game. If you are using a legal version of this game, you should have nothing to worry about.

Bandicoot.