IS this new?

Discussion in 'NOD32 version 2 Forum' started by The Hammer, Jun 9, 2005.

Thread Status:
Not open for further replies.
  1. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    Imon intercepted the following:
    a variant of Win32/PSW.LdPinch trojan. Yet when I search the Eset site I can find no Info. File was submitted for analysis.
     
  2. sir_carew

    sir_carew Registered Member

    Joined:
    Sep 2, 2003
    Posts:
    884
    Location:
    Santiago, Chile
    LdPinch is a family of PSW trojan that contains many and many variants like Agobot and Rbot families. The important is that NOD32 detected this using heuristic/generic detection.
    As you submited them, Eset can add an specific detection to this new variant to its database ;)

     
  3. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    Sorry If I'm not understanding correctly. But doesn't the word "variant" mean a version is already contained in Esets database and this is a modification? Yet when I checked Esets site I could not find any info on Win32./PSW.L Thanks for the reply by the way.
     
  4. sir_carew

    sir_carew Registered Member

    Joined:
    Sep 2, 2003
    Posts:
    884
    Location:
    Santiago, Chile
    No, this specific trojan isn't contained in database yet. NOD32 is telling you that it's probably a new variant of a known variant, but such variant isn't know at all.

     
Thread Status:
Not open for further replies.