IMON fooling me? *confused*

Discussion in 'NOD32 version 2 Forum' started by Marco_CH, Apr 10, 2006.

Thread Status:
Not open for further replies.
  1. Marco_CH

    Marco_CH Registered Member

    Joined:
    Jan 7, 2006
    Posts:
    57
    Hello all :)

    IMON is giving me a little headache.
    It gives me a warning for an .exe file which is

    - probably unknown NewHeur_PE virus [7]

    I ran 2 online scanners plus avast and all of them finished with no warning. Seems the file is save.

    I cannot copy the file on my computer because NOD32 deletes it automatically. Should I make an Exclusion for that file in IMON Setup?

    Or what else wouuld you do in my situation?


    Many thanks

    Marco
     
  2. SSK

    SSK Registered Member

    Joined:
    Nov 28, 2004
    Posts:
    976
    Location:
    Amsterdam
    This is a Heuristic detection. Send it to ESET so they can check if it is harmless or not! :)
     
  3. Ardian

    Ardian Registered Member

    Joined:
    Apr 10, 2006
    Posts:
    15
    the .exe file is it a game file, or a program file?
    what are you using that file for?

    its probably a FP from nod, send it to them so they can analyze it.
     
  4. Marco_CH

    Marco_CH Registered Member

    Joined:
    Jan 7, 2006
    Posts:
    57
    its a synchronization program

    Does the file get sent to ESET automatically or do I need to do something? And how do I get an answer from them?
     
  5. Marco_CH

    Marco_CH Registered Member

    Joined:
    Jan 7, 2006
    Posts:
    57
    I found another online scanner and this is the test result :) looks as if NOD32 is just unbeatable in detection or its a false positiv.

    AntiVir6.34.0.2404.10.2006no virus found
    Avast4.6.695.004.03.2006no virus found
    AVG38604.10.2006no virus found
    Avira6.34.0.5604.10.2006no virus found
    BitDefender7.204.10.2006no virus found
    CAT-QuickHeal8.0004.06.2006no virus found
    ClamAVdevel-2006020204.10.2006no virus found
    DrWeb4.3304.10.2006no virus found
    eTrust-InoculateIT23.71.12504.09.2006no virus found
    eTrust-Vet12.4.215604.10.2006no virus found
    Ewido3.504.10.2006no virus found
    Fortinet2.71.0.0 04.10.2006suspicious
    F-Prot3.16c04.07.2006no virus found
    Ikarus0.2.59.004.10.2006no virus found
    Kaspersky4.0.2.2404.10.2006no virus found
    McAfee473704.10.2006no virus found
    NOD32v21.148104.10.2006probably unknown NewHeur_PE virus
    Norman5.90.1504.10.2006no virus found
    Panda9.0.0.404.10.2006no virus found
    Sophos4.04.004.10.2006no virus found
    Symantec8.004.10.2006no virus found
    TheHacker5.9.7.12704.10.2006no virus found
    UNA1.8304.07.2006no virus found
    VBA323.10.504.10.2006no virus found
     
  6. SSK

    SSK Registered Member

    Joined:
    Nov 28, 2004
    Posts:
    976
    Location:
    Amsterdam
    NOD32 System Tools - Quarantine - Submit for analysis is one way of sending them the file.
     
  7. Marco_CH

    Marco_CH Registered Member

    Joined:
    Jan 7, 2006
    Posts:
    57
    many thanks - ill do as suggested
     
  8. SSK

    SSK Registered Member

    Joined:
    Nov 28, 2004
    Posts:
    976
    Location:
    Amsterdam
    Or mail it to samples AT eset DOT com :)
     
Thread Status:
Not open for further replies.