Confused....Is this a virus or not...

Discussion in 'NOD32 version 2 Forum' started by omegac, Dec 30, 2006.

Thread Status:
Not open for further replies.
  1. omegac

    omegac Registered Member

    Joined:
    Dec 2, 2006
    Posts:
    7
    Got a file attachment this morning, greeting card.exe, which I knew would be a virus, but just to double check that NOD is working, I saved it to my desktop....no alert, so I then right clicked and scanned it from the context menu, no virus found.

    I then ran an online scan at Kapersky and got this:

    Scanned file: greeting card.exe - Infected
    greeting card.exe - infected by Trojan-Downloader.Win32.Tibs.jy

    As far as I can see just about every option is ticked in NOD, so why didn't it detect it?

    TIA
     
    omegac, Dec 30, 2006
    #1
  2. Londonbeat

    Londonbeat Registered Member

    Joined:
    Sep 21, 2006
    Posts:
    350
    Hi omegac

    There are lots of new variants of Tibs being released at the minute this must be a new one, best thing to do is put it in a .zip file, password protect it with password 'infected' and send it to samples @ eset.com

    Londonbeat
     
    Londonbeat, Dec 30, 2006
    #2
  3. omegac

    omegac Registered Member

    Joined:
    Dec 2, 2006
    Posts:
    7
    thanks mate, just sent it off to them....
     
    omegac, Dec 30, 2006
    #3
  4. DevilFrank

    DevilFrank Registered Member

    Joined:
    Jul 20, 2003
    Posts:
    108
    This morning a mail with this worm is coming and NOD did catch it.
     

    Attached Files:

    DevilFrank, Dec 31, 2006
    #4
  5. ASpace

    ASpace Guest

    Yes , this is a new worm . See Virus Radar
     

    Attached Files:

    ASpace, Dec 31, 2006
    #5
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...