Submitting a file for analysis

Discussion in 'NOD32 version 2 Forum' started by msanto, Jan 31, 2006.

Thread Status:
Not open for further replies.
  1. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    I submitted a file that both Avast Home and a-squared free said had the ZapChast trojan, but that NOD32 said was OK.

    I noticed when I submitted that it said I wouldn't get a response unless more info is needed. From past experience, will I get a response telling me if the file was indeed OK or just a FP (though since it's two other scanners, I dunno about that)?
     
  2. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    Usually you'll get no response. Only if you submit a password protected file and forgot to include the password or something ;)
    And sometimes a few guys from Eset will respond on these forums about the file you submitted.
     
  3. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    Not too comforting. It looks like NOD32 was missing it, since I just tried Panda ActiveScan online and it found the same trojan. What's interesting is that BOClean doesn't see anything either when I use its file scanner by dragging the file over to the menu.
     
  4. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    Corrupted non functional sample perhaps? o_O Submit it here http://www.virustotal.com/flash/index_en.html or here http://virusscan.jotti.org/
     
  5. NOD32 user

    NOD32 user Registered Member

    Joined:
    Jan 23, 2005
    Posts:
    1,766
    Location:
    Australia
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Recently I received some non-functional Zapchat trojans, maybe it was one of them. Send it to support[at]eset.com so that I can have a look at it.
     
  7. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
  8. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    OK, will do.
     
  9. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    OK, I don't understand what you mean by non-functional ...
     
  10. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    Non-functional .. There is no threat because the trojan is not working and can't harm your system. Other AV's will still report it as a threat though, even if it really isn't.

    But let's see what it is after the guys at Eset has analyzed it :)
     
  11. webyourbusiness

    webyourbusiness Registered Member

    Joined:
    Nov 16, 2004
    Posts:
    2,640
    Location:
    Throughout the USA and Canada
    usually it means that the threat was broken, or disabled in some way...
     
  12. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    So this DLL was in a ZIP. That mean if it was installed as it was supposed to be it would be detected?
     
  13. msanto

    msanto Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    214
    Still no answer from Eset?
     
Thread Status:
Not open for further replies.