PDA

View Full Version : [Probably Minor Bug] Quarantine


jg88swe
September 5th, 2005, 02:13 PM
Well hello,
I think i found a minor bug in NOD32...

When you go to "Quarantine" and want to add a file because you know it's infected but NOD32 dosn't detect it but you want to send it for analyze via ThreatSense.

Quarantine -> Add -> and choose a ".rar" file type.

Nothing will happens!
I don't know but it could probably be because NOD32 dosent accept .rar files to be submitted or something but then shouldn't there be a message telling that?

This is what i get in the Threath Log:
Time Module Object Name Threat Action User Information
2005-08-14 20:02:54 Kernel file C:\Documents and Settings\Joacim\Skrivbord\Free_sms_sender.rar Error quarantining the object -

"Error quarantining the object - " No reason?

and btw, why not accept .rar? I use .rar insted of .zip ;)


( btw, I sent the Keylogger manually to samples@eset.com two weeks ago, nothing has happend ;) )

Brian N
September 5th, 2005, 02:18 PM
No problem adding .rar files here.

jg88swe
September 5th, 2005, 02:19 PM
hmm... ???

Why can't i Add .rars :( ::)

Brian N
September 5th, 2005, 02:34 PM
Maybe the archive is corrupt or something? Tried extracting the content?

jg88swe
September 5th, 2005, 03:59 PM
yeah the archive is intact and works...

Windows XP Pro SP2 (Swedish)

Well glad i'm the only one that have bugs on Nod32 ::) ::)

Firecat
September 6th, 2005, 06:55 AM
No problem with adding RAR files to quarantine here.

For the time being, maybe you may convert the archive to ZIP or something else and place it in quarantine...