How do I scan a file with Adv Heuristics

I have a file that I'd like to scan with the command line advanced heurisitcs....how do I do it?

Also, what is the email address to submit a virus to ESET? There is a current thread at DSL reports about a virus being detected by several AV's......I ran NOD on it and it went undetected, but want to try running the command line advanced heuristics on it.........

http://www.dslreports.com/forum/remark,8577737~root=security,1~mode=flat

Added URL tags

 

Hi GuruGuy,

Advanced heuristics:
http://www.wilderssecurity.com/showthread.php?t=9776;start=msg99855#msg99855

Submissions: samples @ nod32.com

HTH,

Pieter

 

Thanks Pieter.

 

NOD didn't detect it using the command line advanced heuristics. Virus submitted to ESET.

 

GuruGuy, from what I read at DSL-Reports, this is 'just' a dialer.
So no surprise, that NOD32 doesn't detect it (even with AH), because those programs are not the target of Nod32.

That's why I also doubt, that they will include it their sig-database...

 

Sorry, but I disagree. From the Eset website:
http://www.nod32.com/products/products.htm


Our Antivirus Products

Introducing NOD32
NOD32 Antivirus System provides well balanced, state-of-the-art protection against threats endangering your PC and enterprise systems running various platforms from Microsoft Windows 95 / 98 / ME / NT / 2000 / 2003 / XP, through a number of UNIX/Linux, Novell, MS DOS operating systems to Microsoft Exchange Server, Lotus Domino and other mail servers.
Viruses, worms, trojans and other malware are kept out of striking distance of your valuable data. Advanced detection methods implemented in the software even provide protection against the future threats from most of the new worms and viruses.
The fourth generation of the NOD32 Antivirus System features a fully integrated software suite characterized by an unprecedented detection track record, the fastest scanning rates and extremely low utilization of system resources.

 

My NAV 2004 detects it... My KAV on my desktop detects it. McAFee on my brother's computer detects it.. LOL.. I think ESET should start "rethinking" it's malware policy... Or at least change it's advertising...

 

I purchased Nod32 a week or so ago, and was under the impression it does protect my PC from identified threats

If not, isn't that false advertising? Would they offer a refund or would I have to charge it back from my cc company?

I don't mean every unimaginable virus, just ones that are identified and submitted, and conspicuously excluded, such as _anvil and Straight Shooter suggested GuruGuy's file would be.

 

It's a dialer though, not a virus. Whilst not exactly desirable, it won't physically cause any damage to your machine.

The information on the specific dialer included in the DSLreports link even says it will ask the user before installing itself on your machine. It even puts an icon on the desktop.

It might cost you a large telephone bill if you still didn't realise it was there, and you didn't realise your modem was dialling out without being asked, but it won't in itself damage your machine or your data.

There are arguments both ways, but I'm happy for Virus software to find virii, and Spyware checkers to find spyware etc. I think trying to be master of all trades is what causes certain software to become bloated and not necessarily the best at any specific task.

 

Straight Shooter,

have you investigated this claim of Norton's for their AV 2004? Does the product detect everything Ad-Aware, Spybot and Spycop does? I seriously doubt it, so that would be false advertising, would it not? Why are you always so quick to complain about a competitor's product and never apply the same criteria to the same product you use? If you were seriously interested in constructive criticism, you'd be fair to everyone, and not just come across as a one sided, one trick pony.

"Expanded threat detection alerts you to certain non-virus threats such as spyware and keystroke logging programs"

Would you like me to get started about Norton's unpacking claims as well? Or their customer support claims?

 

Deleted by author because I simply don't care anyway...

 

I think it would serve Eset best for the topic of customer support to not get dragged into this discussion!