Win32/Agobot.damaged

[4345]

Does this mean that NOD32 is adding garbage files or???

Also does NOD32 have special cleaning tool for Vundo trojan?

Thanks

[webyourbusiness]

not wishing to speculate, but any trojan not able to deliver it's FULL payload might be considered "damaged" - and delivery of only a partial payload would be just as undesirable...

[Bubba]

Hmmm....it is part of their latest signature database (http://www.nod32.com/support/info.htm).

[Brian N]

-{ Quote: "Hmmm....it is part of their latest signature database (http://www.nod32.com/support/info.htm)." }-
And another 36 since 2002 ;)

[54453245]

Is there Vundo removal tool from NOD32 and what name does Eset use for this trojan?

[webyourbusiness]

-{ Quote: "Is there Vundo removal tool from NOD32 and what name does Eset use for this trojan?" }-


vundo = agent.cs

See the google translation of the pedia from nod32.it:

Google translation (http://translate.google.com/translate?hl=en&sl=it&u=http://www.nod32.it/pedia/a/agent-cs.htm&prev=/search%3Fq%3Dnod32%2Bvundo%26hl%3Den%26hs%3DE0Z%26lr%3D%26client%3Dfirefox-a%26rls%3Dorg.mozilla:en-US:official)

and there is a cleaner for it:

http://www.nod32usa.com/virus_database/free_virus_cleaners.shtml

[RejZoR]

From my point of view they're ading these to avoid false positives and to identify possibly damaged files (which are indeed malware,just damaged).
Their engine appears to be very flexible (especially with variants matching),so this probably helps i guess.