Nod32 detects unknown virus in mcafee superdat

Discussion in 'NOD32 version 2 Forum' started by apm, Oct 31, 2006.

Thread Status:
Not open for further replies.
  1. apm

    apm Registered Member

    Joined:
    Mar 15, 2006
    Posts:
    164
    Nod32 with latest update flags unknown virus in scan.dat of mcafee superdat 4884 while extracting by sdat4884.exe /e, but shows clean after extraction, should be FP.
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456

    Attached Files:

  3. attila4000

    attila4000 Registered Member

    Joined:
    Feb 7, 2005
    Posts:
    51
    Location:
    Rahway, NJ, USA
    i got the same results.
     
  4. i_kenefick

    i_kenefick Registered Member

    Joined:
    Nov 29, 2005
    Posts:
    135
    Location:
    Cork, Ireland.
    Is it possible that this is a detection for a probably unknown SCRIPT virus?
     
  5. apm

    apm Registered Member

    Joined:
    Mar 15, 2006
    Posts:
    164
    Yes, something like that, unknown..., don't remember exactly the name.
    The files after extraction are clean when scan with nod32, but it is during the manual extraction, when extracting scan.dat, nod32 flags and extraction cannot continue.
     
  6. i_kenefick

    i_kenefick Registered Member

    Joined:
    Nov 29, 2005
    Posts:
    135
    Location:
    Cork, Ireland.
  7. i_kenefick

    i_kenefick Registered Member

    Joined:
    Nov 29, 2005
    Posts:
    135
    Location:
    Cork, Ireland.
    I can confirm also a false detection. I've submitted this quite a number of times and just gave up.

    Detection in my case is caused when 'get'ing the files usign WGET which is wrapped in KIXTART scripting language.

    The subroutine involves extracing to the contents to a hardcoded location.

    Code:
    shell '"c:\McAfee\$SuperDAT" /e "c:\McAfee"'
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.