New MSN worm - Nod32 detects it

Discussion in 'NOD32 version 2 Forum' started by jg88swe, Feb 15, 2005.

Thread Status:
Not open for further replies.
  1. jg88swe

    jg88swe Registered Member

    Joined:
    Jul 1, 2004
    Posts:
    181
    Hey, ive just got the new msn worm 3 times in the last 1 minute, and no other AV detects it. But NOD32 does using AH :)

    Now im trusting NOD32 again, Great work Eset!
     

    Attached Files:

  2. Matt_Smi

    Matt_Smi Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    359
    cool, what exactly is this MSN worm?
     
  3. jg88swe

    jg88swe Registered Member

    Joined:
    Jul 1, 2004
    Posts:
    181
    I sent this worm to Kaspersky and Eset and got a awnser from KAV after 15 minutes:


    Code:
    Hello.
    
    This is IM-Worm.Win32.Bropia.g.
    Urgent update released.
    Please, update your antivirus bases.
    
    Sincerely yours,
    Pavel Zelensky
    Virus analyst
    
    Kaspersky Lab Ltd
    Moscow, Russia
    Tel/Fax: +7 (095) 797-8700
    E-mail:  newvirus@kaspersky.com 
    Internet: http://www.kaspersky.com, http://www.viruslist.com 
    
     
  4. Capp

    Capp Registered Member

    Joined:
    Oct 16, 2004
    Posts:
    2,125
    Location:
    United States
    Good 'ol NOD32 to the rescue. What a great program!
     
  5. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,719
    Location:
    Texas
    And will be getting better. ;)
     
  6. sir_carew

    sir_carew Registered Member

    Joined:
    Sep 2, 2003
    Posts:
    884
    Location:
    Santiago, Chile
    Here's a clear example of why heuristic is most important thing.
    KAV need an urgent update, NOD not.
    Excellent work, ESET :D
     
  7. Down_Under

    Down_Under Registered Member

    Joined:
    Jan 18, 2005
    Posts:
    56
    Location:
    Brisbane,Qld,Australia
  8. fishbone

    fishbone Registered Member

    Joined:
    Feb 9, 2005
    Posts:
    10
    What is the source of this screenshot plz
     
  9. NAMOR

    NAMOR Registered Member

    Joined:
    May 19, 2004
    Posts:
    1,526
    Location:
    Arkham Asylum
  10. ShunterAlhena

    ShunterAlhena Registered Member

    Joined:
    Aug 1, 2004
    Posts:
    134
    Location:
    Szigethalom, Hungary
    I don't know if we are talking about the same worm, most probably we do!
    I got it and AH immediately shut it down, I sent sample to Eset and it is included in today's 1.999! Way to go! :D
     
  11. fishbone

    fishbone Registered Member

    Joined:
    Feb 9, 2005
    Posts:
    10
Thread Status:
Not open for further replies.