IMON fooling me? *confused*

Discussion in 'NOD32 version 2 Forum' started by Marco_CH, Apr 10, 2006.

Thread Status:
Not open for further replies.
  1. Marco_CH

    Marco_CH Registered Member

    Joined:
    Jan 7, 2006
    Posts:
    57
    Hello all :)

    IMON is giving me a little headache.
    It gives me a warning for an .exe file which is

    - probably unknown NewHeur_PE virus [7]

    I ran 2 online scanners plus avast and all of them finished with no warning. Seems the file is save.

    I cannot copy the file on my computer because NOD32 deletes it automatically. Should I make an Exclusion for that file in IMON Setup?

    Or what else wouuld you do in my situation?


    Many thanks

    Marco
     
  2. SSK

    SSK Registered Member

    Joined:
    Nov 28, 2004
    Posts:
    976
    Location:
    Amsterdam
    This is a Heuristic detection. Send it to ESET so they can check if it is harmless or not! :)
     
  3. Ardian

    Ardian Registered Member

    Joined:
    Apr 10, 2006
    Posts:
    15
    the .exe file is it a game file, or a program file?
    what are you using that file for?

    its probably a FP from nod, send it to them so they can analyze it.
     
  4. Marco_CH

    Marco_CH Registered Member

    Joined:
    Jan 7, 2006
    Posts:
    57
    its a synchronization program

    Does the file get sent to ESET automatically or do I need to do something? And how do I get an answer from them?
     
  5. Marco_CH

    Marco_CH Registered Member

    Joined:
    Jan 7, 2006
    Posts:
    57
    I found another online scanner and this is the test result :) looks as if NOD32 is just unbeatable in detection or its a false positiv.

    AntiVir6.34.0.2404.10.2006no virus found
    Avast4.6.695.004.03.2006no virus found
    AVG38604.10.2006no virus found
    Avira6.34.0.5604.10.2006no virus found
    BitDefender7.204.10.2006no virus found
    CAT-QuickHeal8.0004.06.2006no virus found
    ClamAVdevel-2006020204.10.2006no virus found
    DrWeb4.3304.10.2006no virus found
    eTrust-InoculateIT23.71.12504.09.2006no virus found
    eTrust-Vet12.4.215604.10.2006no virus found
    Ewido3.504.10.2006no virus found
    Fortinet2.71.0.0 04.10.2006suspicious
    F-Prot3.16c04.07.2006no virus found
    Ikarus0.2.59.004.10.2006no virus found
    Kaspersky4.0.2.2404.10.2006no virus found
    McAfee473704.10.2006no virus found
    NOD32v21.148104.10.2006probably unknown NewHeur_PE virus
    Norman5.90.1504.10.2006no virus found
    Panda9.0.0.404.10.2006no virus found
    Sophos4.04.004.10.2006no virus found
    Symantec8.004.10.2006no virus found
    TheHacker5.9.7.12704.10.2006no virus found
    UNA1.8304.07.2006no virus found
    VBA323.10.504.10.2006no virus found
     
  6. SSK

    SSK Registered Member

    Joined:
    Nov 28, 2004
    Posts:
    976
    Location:
    Amsterdam
    NOD32 System Tools - Quarantine - Submit for analysis is one way of sending them the file.
     
  7. Marco_CH

    Marco_CH Registered Member

    Joined:
    Jan 7, 2006
    Posts:
    57
    many thanks - ill do as suggested
     
  8. SSK

    SSK Registered Member

    Joined:
    Nov 28, 2004
    Posts:
    976
    Location:
    Amsterdam
    Or mail it to samples AT eset DOT com :)
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.