Nod32 and it's great Heuristics Module

i think nod32 is a very small antivirus with small signature and bad Heuristik Module

 

Re: where is nod32 great Heuristik Module

Do you prefer any special feeding times?

 

Re: where is nod32 great Heuristik Module

oh no part1

 

Re: where is nod32 great Heuristik Module

@shanijee

So where's your Problem ? In that moment you are posting this, you could send samples to ESET for adding or fixing.

 

Re: where is nod32 great Heuristik Module

ok i am sending sample
no problem man
sorry i make you angry
i want to make angry nod32 Heuristik Module
sorry

 

Re: where is nod32 great Heuristik Module

should i try to unterstand this?

 

Re: where is nod32 great Heuristik Module

Is it allowed to feed the Trolls?

 

Re: where is nod32 great Heuristik Module

Depends whom you mean with troll

 

Re: where is nod32 great Heuristik Module

It's a compliment I think. shanijee's saying Nod is sentient.

 

Re: where is nod32 great Heuristik Module

Should i try to understand that too?

 

Re: where is nod32 great Heuristik Module

It means to be self aware. To be able to think for its self.

 

Re: where is nod32 great Heuristik Module

Ok, maybe i'm somehow overworked, but i still don't get it

 

Re: where is nod32 great Heuristik Module

You are overworked.

 

Re: where is nod32 great Heuristik Module

Did we have a shower together in morning or do i miss something else

 

Re: where is nod32 great Heuristik Module

I was trying to say NOD is intelligent software. I'm not sure where your going with this other stuff.

 

Re: where is nod32 great Heuristik Module

I should get some sleep

 

Re: where is nod32 great Heuristik Module

If it is uploaded to jotti's it's also submitted to Eset, is it not?

I have a couple of hundred samples that NOD failed to detect that I uploaded there, and about 50 or so have been added recently (which probably means ESET got the samples from jotti's or VirusTotal). It's mostly "harmless" stuff like trojan clients and trojan plugins and adware. NOD does its job very good The undetected server backdoors like in shanijee's examples are a bit more dangerous. Hope to see these samples added to NOD's defs.

 

Re: where is nod32 great Heuristik Module

I think he means that he wants the NOD32 heuristics to be more "aggressive".

NOD's heuristics are the very best IMO. The variant detection has also helped me dozens of times while surfing the internet.

By the way, should I send samples that were detected as variants (of something) to Eset for analysis?

 

Re: where is nod32 great Heuristik Module

You cannot have heuristics too aggresive, or it will detect every other file as suspicious.

As for the samples detected by AH, have them submit via ThreatSense and that's it. However, if you suspect a file to be a false positive, submit it to samples[at]eset.com

 

Re: where is nod32 great Heuristik Module

But what about the files that were detected by variant detection ("a variant of Win32/TrojanDownloader.INService Trojan", for example)? Should we still submit those files?

 

Re: where is nod32 great Heuristics Module

Only if Submit checkbox is checked by default (when sample is detected).
Otherwise there is no need unless you suspect false positive of course.

 

Re: where is nod32 great Heuristics Module

RejZoR hit the nail right on the head

 

Re: where is nod32 great Heuristics Module

ok boys it nod32 sleeping time do not disterb him
when nod32 get up from sleep i tell you

 

Re: where is nod32 great Heuristics Module

What?

 

Re: where is nod32 great Heuristics Module

nod32 is very cleaver
he's sleep like a little child i don't want to disterb him
sleep nodi sleep
when nodi wake up i tell you