NOD misses what Norton gets

Hi All,

I have a file here that's *definitely* a worm - looking at its behavior is **very** suspect. I've tried it on an isolated network, and it edits the "hosts" file, tries opening multiple ports to external servers and tries to get into shares on other machines.

NAV (now) detects it as a Win32.Gaobot variant. NOD32 misses it entirely.

Any thoughts?

(Oh, I submitted this to Eset a few hours back, no response whatsoever so far.)

 

Nod32 will also detect it very shortly no doubt, they are quick off the mark

Cheers

 

Quick, maybe, but not as quick as they once were. NOD32 was ALWAYS faster than Norton. Looks like old age or something else is slowing NOD32 down now. A shame - Norton is usually crappo, but its beating NOD32 in this instance at present.