What kind of animal is "unix_coco.c" ?

[ronny]

That's my question.I searched a little on the internet but didn't found much information.
The strange thing is that only Housecall found it, and e-Trust + Norton online didn't detected it at all.

[Paul Wilders]

Ronny,

I can't provide the specs, but I can say this is an oldie - ITW from about December 10th 2002, covered by for example NOD32 up from December 12th 2002 (database update v1.211). If my memory serves me well, Norton covered this one at aprox. the same time, as most others.

regards.

paul

[ronny]

Okidoki, thank you very much Paul for the information.Perhaps because it is an oldie that Nortononline or e-Trust didn't detect it anymore now
Who knows...

[Paul Wilders]

Ronny,

This nastie has been databased - so it would be detected by all resident running and updated major Antiviruses

regards.

paul

[ronny]

Originally Posted by Paul Wilders

This nastie has been databased - so it would be detected by all resident running and updated major Antiviruses

Well then it is a mystery to me why e-Trust & Norton didn't found it.Perhaps because it was in a zipped not yet complete file (it was in a emule\temp\2.part , not completed downloaded file, some zipped books or movieclip i think).
I was unable to see it, and the file was too big to submit (750mega).Housecall couldn't delete only the virus, it had to delete the complete file.
Or perhaps it was a false positive?
Luckily it is gone now, and perhaps i better go to the library...much safer.

in this case it would be possible that since different scanners are using different fingerprints (small strings of the vir file) of the viral file and since the file was not downloaded fully, it could mean that norton did not detect it because the "right bits" of the file were not downloaded yet and oposite for trent phuu this explenation is a bit tricky ) it is also possible that norton is not scaning this file types

[ronny]

Sounds interesting Saso, but i am not a specialist at all, so don't know if this is possible.

Gavin-Diamonds DCS gave the following also interesting information:"Since its a UNIX virus, there is no danger to a Windows PC

This leads me to believe it could be a false alarm.."
And i am quite sure he IS a real specialist , so the opposite of me.