JS/Minor.A trojan

Discussion in 'NOD32 version 2 Forum' started by rothko, Apr 22, 2005.

Thread Status:
Not open for further replies.
  1. rothko

    rothko Registered Member

    Joined:
    Jan 12, 2005
    Posts:
    579
    Location:
    UK
    i have a file in my temp internet files which is a JScript file that claims (on the website i appear to have picked it up from) to scan internet explorer for parasites.

    NOD32 picks it up as a variant of JS/Minor.A trojan but only with signatures, heuristics doesnt detect it. The strange thing is, if i submit the file to Jotti online scanner no AV detects is as anything suspicious - not even NOD32! However, according to NOD32 updates http://www.nod32.com/support/info.htm#CurVersion the JS/Minor.A signature was added on 19th April...so jotti doesnt seem to be updating nod32 signatures every hour as is claimed

    anyway, have submitted file to eset but just thought i'd share!

    cheers. lee
     
  2. DonKid

    DonKid Registered Member

    Joined:
    Jun 27, 2004
    Posts:
    566
    Location:
    S?o Paulo, Brazil
  3. rothko

    rothko Registered Member

    Joined:
    Jan 12, 2005
    Posts:
    579
    Location:
    UK
    thanks DonKid, i didn't know about that one - every day is a school day!

    only nod32 detected the file as probably modified trojan JS/Minor.A, no other scanners picked it up.

    eset should have the file by now to deal with it

    cheers, lee
     
Thread Status:
Not open for further replies.