Submitting a file for analysis

Discussion in 'NOD32 version 2 Forum' started by msanto, Jan 31, 2006.

Thread Status:
Not open for further replies.
  1. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    I submitted a file that both Avast Home and a-squared free said had the ZapChast trojan, but that NOD32 said was OK.

    I noticed when I submitted that it said I wouldn't get a response unless more info is needed. From past experience, will I get a response telling me if the file was indeed OK or just a FP (though since it's two other scanners, I dunno about that)?
     
  2. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,174
    Location:
    Denmark
    Usually you'll get no response. Only if you submit a password protected file and forgot to include the password or something ;)
    And sometimes a few guys from Eset will respond on these forums about the file you submitted.
     
  3. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    Not too comforting. It looks like NOD32 was missing it, since I just tried Panda ActiveScan online and it found the same trojan. What's interesting is that BOClean doesn't see anything either when I use its file scanner by dragging the file over to the menu.
     
  4. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,752
    Location:
    Toronto Canada
    Corrupted non functional sample perhaps? o_O Submit it here http://www.virustotal.com/flash/index_en.html or here http://virusscan.jotti.org/
     
  5. NOD32 user

    NOD32 user Registered Member

    Joined:
    Jan 23, 2005
    Posts:
    1,766
    Location:
    Australia
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    Recently I received some non-functional Zapchat trojans, maybe it was one of them. Send it to support[at]eset.com so that I can have a look at it.
     
  7. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
  8. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    OK, will do.
     
  9. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    OK, I don't understand what you mean by non-functional ...
     
  10. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,174
    Location:
    Denmark
    Non-functional .. There is no threat because the trojan is not working and can't harm your system. Other AV's will still report it as a threat though, even if it really isn't.

    But let's see what it is after the guys at Eset has analyzed it :)
     
  11. webyourbusiness

    webyourbusiness Registered Member

    Joined:
    Nov 16, 2004
    Posts:
    2,662
    Location:
    Throughout the USA and Canada
    usually it means that the threat was broken, or disabled in some way...
     
  12. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    So this DLL was in a ZIP. That mean if it was installed as it was supposed to be it would be detected?
     
  13. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    Still no answer from Eset?
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.