Ignored samples...

Discussion in 'NOD32 version 2 Forum' started by tiagozt, Feb 21, 2006.

Thread Status:
Not open for further replies.
  1. tiagozt

    tiagozt Registered Member

    Joined:
    Feb 28, 2004
    Posts:
    331
    It's a sample that I sent to ESET last week...
    Any people that executed the file is infected now.
    It's what I say about updates from ESET.
    It's a nonsense

    AntiVir
    Found nothing
    ArcaVir
    Found nothing
    Avast
    Found Win32:Banker-EL
    AVG Antivirus
    Found nothing
    BitDefender
    Found nothing
    ClamAV
    Found nothing
    Dr.Web
    Found Trojan.PWS.Banker.1517
    F-Prot Antivirus
    Found nothing
    Fortinet
    Found Spy/Banker
    Kaspersky Anti-Virus
    Found Trojan-Spy.Win32.Banker.anv
    *NOD32
    Found nothing
    Norman Virus Control
    Found nothing
    UNA
    Found nothing
    VBA32
    Found Trojan-Spy.Banbra.25 (probable variant)

    *results confirmed by MY NOD32 (not detected!)
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    It's been said numerous times here that Eset picks up signatures on a per-need basis. There are hundreds of SpyBanker trojan variants hitting the streets every day, NOD32 detects most of them generically while it's very common to find out that no other AV detects them (no bashing here, just want to say that no AV detects all 100% of threats). We are aware of this and thus improving NOD32 every day.
     
  3. DonKid

    DonKid Registered Member

    Joined:
    Jun 27, 2004
    Posts:
    566
    Location:
    S?o Paulo, Brazil
    Hi Marcos
    Sorry my English. That's life.:D
    Can you explain what is per-need basis ?


    Tiago,

    I understand your worries, but I have seen a lot of reports from Virus Total when only NOD detects a virus, trojan with heuristics and others AV companies don't even get close of it. :)

    Best Regards,

    DonKid.
     
  4. tiagozt

    tiagozt Registered Member

    Joined:
    Feb 28, 2004
    Posts:
    331
    I understand NOD32 policy, but I need to say that for brazilian people (receives trojan variations every day) NOD32 is insuficient. With the policy that select to add to database is poor for us. That's all.
     
  5. webyourbusiness

    webyourbusiness Registered Member

    Joined:
    Nov 16, 2004
    Posts:
    2,640
    Location:
    Throughout the USA and Canada
    I'm truly sorry that you feel NOD32 is not appropriate to your need - however, you will surely appreciate that no solution can fit 100% of the needs of 100% of the POTENTIAL user base - that's why there is choice in the marketplace.

    Eset IS improving the product, as are competitors. I hope ONE of them fits your needs... although I can't think of a specific solution for you off-hand.
     
  6. DonKid

    DonKid Registered Member

    Joined:
    Jun 27, 2004
    Posts:
    566
    Location:
    S?o Paulo, Brazil
    I respect your opinion, but I think there are others countries that receive more trojan than our country.I know what you mean about these bandits stealing our bank account using these trojans. I get a lot of e-mail with them.
    When I'm at my job, I test all of them.Those NOD can't detect in that moment, I send to Eset, notifying in the same time Marcos and Cool Daddy.
    And believe me, they work a lot.:D

    Best Regards,

    DonKid.
     
  7. tiagozt

    tiagozt Registered Member

    Joined:
    Feb 28, 2004
    Posts:
    331
    I send samples to Marcos too and I know that he work a lot. It's not the discussion... but when ESET find an infected file and opt to don't add it do database, I think (and it's ONLY my opinion) it's an error, serious error.
     
  8. pykko

    pykko Registered Member

    Joined:
    Apr 27, 2005
    Posts:
    2,236
    Location:
    Romania...and walking to heaven
    well, tiagozt I must agree with you even if some can say it's been discussed here a lot about this problem, but if ESET analyze a sample find a threat and doesn't added it it's not so nice. :( Instead of making enourmous updates (2000 or 7000 samples) it's better to add them in time. :)
     
Thread Status:
Not open for further replies.