probably a variant of Perl/Exploit.Generic.S trojan

Discussion in 'NOD32 version 2 Forum' started by Megachip, Aug 20, 2007.

Thread Status:
Not open for further replies.
  1. Megachip

    Megachip Registered Member

    Joined:
    Dec 4, 2006
    Posts:
    243
    Hello Eset,

    possible a false positive in climate data in a .txt file.

    Send a sample to support(at)eset.sk at friday, no reation till now. File is still detected.

    Can anyone confirm?

    Thanks
     
  2. ugly

    ugly Registered Member

    Joined:
    Mar 21, 2005
    Posts:
    276
    Location:
    Romania
    Scan it on virustotal.
    See what you get.:ninja:
     
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    I couldn't find any false positive sent to samples on Friday. Please re-send it to support[at]eset.com
     
  4. Megachip

    Megachip Registered Member

    Joined:
    Dec 4, 2006
    Posts:
    243
    Resend it to eset.com

    Get nothing ;), expect nod
     
  5. Megachip

    Megachip Registered Member

    Joined:
    Dec 4, 2006
    Posts:
    243
    Some new false positives...


    Quote of an employee
    All Viruses are "probably variant of"...

    IMHO these are all textfiles of aprox. 20 MB... possible the sizes makes problems?

    Regards...

    P.S. Should i submit a sample of each file?
     
  6. Megachip

    Megachip Registered Member

    Joined:
    Dec 4, 2006
    Posts:
    243
    Seems the the perl file problem is solved, but the other "false positives" are still detected
     
    Last edited: Aug 23, 2007
  7. Megachip

    Megachip Registered Member

    Joined:
    Dec 4, 2006
    Posts:
    243
    Your mailserver rejected the the mail, try to send each file seperatly...

    Seems that nod have much fp in last time!? (see other threads here)

    Regards
     
  8. Megachip

    Megachip Registered Member

    Joined:
    Dec 4, 2006
    Posts:
    243
    Nothing new...

    almost impossible to work for the user with the climate data...

    Macros, did u received the emails?


    Regards
     
  9. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    You should still submit to virustotal or jotti's as sugested earlier.
     
  10. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    When and where did you send it to?
     
  11. Megachip

    Megachip Registered Member

    Joined:
    Dec 4, 2006
    Posts:
    243
    one big file (44MB) at 24.08.07 14:40 UTC+1 to samples and support... rejected by your mailserver

    five mails (aprox. 9 mb) at 28.08.07 8:50 UTC+1 to samples...


    BTW, it freeze the PC some minutes, when accessing the folder, where the files ware (amon scan)

    Regards
     
  12. Megachip

    Megachip Registered Member

    Joined:
    Dec 4, 2006
    Posts:
    243
    problem seems fixed... thx to eset
     
Thread Status:
Not open for further replies.