NOD misses what Norton gets

Discussion in 'NOD32 version 2 Forum' started by HiltonT, Nov 26, 2004.

Thread Status:
Not open for further replies.
  1. HiltonT

    HiltonT Registered Member

    Joined:
    Jan 5, 2003
    Posts:
    17
    Location:
    Brisbane, Australia
    Hi All,

    I have a file here that's *definitely* a worm - looking at its behavior is **very** suspect. I've tried it on an isolated network, and it edits the "hosts" file, tries opening multiple ports to external servers and tries to get into shares on other machines.

    NAV (now) detects it as a Win32.Gaobot variant. NOD32 misses it entirely.

    Any thoughts?

    (Oh, I submitted this to Eset a few hours back, no response whatsoever so far.)
     
  2. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Nod32 will also detect it very shortly no doubt, they are quick off the mark ;) :D

    Cheers :D
     
  3. HiltonT

    HiltonT Registered Member

    Joined:
    Jan 5, 2003
    Posts:
    17
    Location:
    Brisbane, Australia
    Quick, maybe, but not as quick as they once were. NOD32 was ALWAYS faster than Norton. Looks like old age or something else is slowing NOD32 down now. A shame - Norton is usually crappo, but its beating NOD32 in this instance at present. :(
     
Thread Status:
Not open for further replies.