Confused....Is this a virus or not...

Discussion in 'NOD32 version 2 Forum' started by omegac, Dec 30, 2006.

Thread Status:
Not open for further replies.
  1. omegac

    omegac Registered Member

    Joined:
    Dec 2, 2006
    Posts:
    7
    Got a file attachment this morning, greeting card.exe, which I knew would be a virus, but just to double check that NOD is working, I saved it to my desktop....no alert, so I then right clicked and scanned it from the context menu, no virus found.

    I then ran an online scan at Kapersky and got this:

    Scanned file: greeting card.exe - Infected
    greeting card.exe - infected by Trojan-Downloader.Win32.Tibs.jy


    As far as I can see just about every option is ticked in NOD, so why didn't it detect it?

    TIA
     
  2. Londonbeat

    Londonbeat Registered Member

    Joined:
    Sep 21, 2006
    Posts:
    350
    Hi omegac

    There are lots of new variants of Tibs being released at the minute this must be a new one, best thing to do is put it in a .zip file, password protect it with password 'infected' and send it to samples @ eset.com

    Londonbeat
     
  3. omegac

    omegac Registered Member

    Joined:
    Dec 2, 2006
    Posts:
    7
    thanks mate, just sent it off to them....
     
  4. DevilFrank

    DevilFrank Registered Member

    Joined:
    Jul 20, 2003
    Posts:
    108
    This morning a mail with this worm is coming and NOD did catch it.
     

    Attached Files:

  5. ASpace

    ASpace Guest

    Yes , this is a new worm . See Virus Radar
     

    Attached Files:

Thread Status:
Not open for further replies.