Kelvir/SDBot variants

Discussion in 'NOD32 version 2 Forum' started by selector, Jul 14, 2005.

Thread Status:
Not open for further replies.
  1. selector

    selector Registered Member

    Joined:
    Apr 24, 2005
    Posts:
    10
    What is Eset's position on SDBot/Kelvir variants?

    I caught one via MSN Messenger which in fact was a self extracting RAR with a Kelvir and SDBot variant within it. NOD32 picked up the SDBot but still does not detect the Kelvir (1.exe) and RAR package (unknown@hotmail.com)

    I have submitted both to Eset over a week ago but am concerned that given there are so many SDBot/Kelvir variants that each specific variant is never going to make the high prevalence level.

    Looking at VirusTotal several other vendors are detecting the samples I have sent.
     
  2. webyourbusiness

    webyourbusiness Registered Member

    Joined:
    Nov 16, 2004
    Posts:
    2,640
    Location:
    Throughout the USA and Canada
    They are adding them...

    Can't comment on a specific variant, but I would recommend losing the messenger - but that's my preference... ;)
     
Thread Status:
Not open for further replies.