Slow reaction

Discussion in 'NOD32 version 2 Forum' started by METhAMORPH, Feb 27, 2007.

Thread Status:
Not open for further replies.
  1. METhAMORPH

    METhAMORPH Registered Member

    Joined:
    May 12, 2005
    Posts:
    2
    Found this virus yesterday on a PC of a customer.
    It had oppened thousends of connections clogging the internet connection with upload.
    The PC has NOD32 that is up to date.
    At that time I scanned the file on virus total and none of the AV was recognizing it. Some of them said it was suspisious (nothing specific). NOD32 said the file was OK.
    I scanned the file again just now. NOD32 still doesnt recognize it as a virus.
    I know ESET has a policy to rate some malicious files as "not so dangerous" and add them to the signatures later on but I can't understand how a file that would open thousends of connections and clog the internet connection is not considered dangerous and worth adding it to the signatures immidiately.

    ~Online scan removed. See this post. https://www.wilderssecurity.com/showpost.php?p=818225&postcount=2~
     
    Last edited by a moderator: Feb 27, 2007
  2. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Please send a sample to samples @ eset.com with a link to this thread.

    Cheers :D
     
Thread Status:
Not open for further replies.