Nod32 Unable to detetect this spyware

Hi, i'm italian and i'm using NOD32 antivirus: i've a problem: i've download a self-extracting archive and i scan this file with NOD32, but it detects anything.

My question is why?

And i've another question: why nod32 doesn't detect the virus contained in my thunderbird inbox that Kaspersky detects as "Win32.Bagle.eb"?

sorry for my english...;-)

 

No AV is perfect, and no av will detect 100% of all malwares... thats why

You should submit the files to eset: samples@eset.com

 

I'll check it tomorrow, maybe it's corrupted and non-functional as this TD is normally detected generically.

 

Thanks for the reply, i've submitted the file(run.exe 66Kb) and i post the image of the scan of the thunderbird's mail backup: NOD32 doesn't manage to find the Win32.Bagle.eb that Kaspersky find(i made an on-line scan). NOD32 seems to not manage to reach the last level of the archive (.pcv is a simple zip renamed by mozbackup). Kaspersky scan a total of 288 file, NOD32 only 72, why?

I scan all file extensions

thanks

 

There's no reason to detect malware within a mailbox file. The malware can be dangerous when you try to run the file.
IMON will detect the malware before it reach your mail inbox. Maybe you're using an account that use SSL and that's the reason IMON didn't detected it.
Anyway, if you try to run de worm, AMON will detect this and your system will not be infected.

 

NOD32 has detected all Bagle variants heuristically. Only Outlook Express' dbx files and MS Outlook's pst files can be scanned on demand.

 

Ok, thanks for the reply!

 

I see that the build 1.1305 detects the virus in run.exe file: thanks eset for the good job!

 

Kaspersky Online File Scanner detected 'Trojan.Win32.StartPage.afb' in a patch executable but NOD32 did not react to it.

NOD32 v2.5 (1.1305)

Have submitted the file to Eset for analysis...

 

Eset have added 'Win32/StartPage.ABP' trojan to the virus signature database: 1.1307 [20051128]

Fast work!