Submitting a file for analysis

Discussion in 'NOD32 version 2 Forum' started by msanto, Jan 31, 2006.

Thread Status:
Not open for further replies.
  1. msanto

    msanto Registered Member

    I submitted a file that both Avast Home and a-squared free said had the ZapChast trojan, but that NOD32 said was OK.

    I noticed when I submitted that it said I wouldn't get a response unless more info is needed. From past experience, will I get a response telling me if the file was indeed OK or just a FP (though since it's two other scanners, I dunno about that)?
     
  2. Brian N

    Brian N Registered Member

    Usually you'll get no response. Only if you submit a password protected file and forgot to include the password or something ;)
    And sometimes a few guys from Eset will respond on these forums about the file you submitted.
     
  3. msanto

    msanto Registered Member

    Not too comforting. It looks like NOD32 was missing it, since I just tried Panda ActiveScan online and it found the same trojan. What's interesting is that BOClean doesn't see anything either when I use its file scanner by dragging the file over to the menu.
     
  4. The Hammer

    The Hammer Registered Member

    Corrupted non functional sample perhaps? o_O Submit it here http://www.virustotal.com/flash/index_en.html or here http://virusscan.jotti.org/
     
  5. NOD32 user

    NOD32 user Registered Member

  6. Marcos

    Marcos Eset Staff Account

    Recently I received some non-functional Zapchat trojans, maybe it was one of them. Send it to support[at]eset.com so that I can have a look at it.
     
  7. msanto

    msanto Registered Member

  8. msanto

    msanto Registered Member

    OK, will do.
     
  9. msanto

    msanto Registered Member

    OK, I don't understand what you mean by non-functional ...
     
  10. Brian N

    Brian N Registered Member

    Non-functional .. There is no threat because the trojan is not working and can't harm your system. Other AV's will still report it as a threat though, even if it really isn't.

    But let's see what it is after the guys at Eset has analyzed it :)
     
  11. webyourbusiness

    webyourbusiness Registered Member

    usually it means that the threat was broken, or disabled in some way...
     
  12. msanto

    msanto Registered Member

    So this DLL was in a ZIP. That mean if it was installed as it was supposed to be it would be detected?
     
  13. msanto

    msanto Registered Member

    Still no answer from Eset?
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice