Sober.N

Discussion in 'NOD32 version 2 Forum' started by jlo, Apr 21, 2005.

Thread Status:
Not open for further replies.
  1. jlo

    jlo Registered Member

    Joined:
    Nov 29, 2004
    Posts:
    475
    Location:
    UK
    Hi,

    Just wondered was Sober N detected by Advanced Heuristics? It does not mention that fact on your website but does say Sober.L was detected by AH.

    Just wondered? I know you added defs pretty darn quick anyway :)

    Kind Regards

    Jlo
     
  2. Security Freak

    Security Freak Registered Member

    Joined:
    Apr 14, 2005
    Posts:
    83
    this issue is maybe a new variant of Sober worms
     
  3. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    Sober.N is the latest variant of the Sober worms. Symantec was the first to add detection to its database. BitDefender was quite late, adding a signature only a day later. NOD did add detection quite quickly.
     
  4. Happy Bytes

    Happy Bytes Guest

    yes and symantec does not even know how sober works, cause it was analysed again by a junior virus analyst.

    read here:
    https://www.wilderssecurity.com/showthread.php?t=76243

    This threat was also detected via heuristics.
     
  5. Security Freak

    Security Freak Registered Member

    Joined:
    Apr 14, 2005
    Posts:
    83
    ja,ja,ja lol......the basic point here is the following....we(NOD32 owners,stay protected against this stupid worm) pretty AV...yessssss :D
     
  6. jlo

    jlo Registered Member

    Joined:
    Nov 29, 2004
    Posts:
    475
    Location:
    UK
    Thanks Happy Bytes,

    That was what I wanted to know. It may be a good idea in the virus write ups on the websites to mark it (Detected by AH) as you used to. the last few entryies in virus news don't say this. (although it wold probaly say AH against most viruses LOL) http://www.nod32.com/home/home.htm

    Thanks for the great program!

    Jlo
     
  7. Happy Bytes

    Happy Bytes Guest

    Yes, normally i write this in my virusdescriptions, for some strange reason i forgot it this time :D
     
Thread Status:
Not open for further replies.