Re: NAV2000 Bloodhound technology -- really good!

Article View: alt.comp.virus

Article #495

#495

From: Baba
Date: Sat, 22 Apr 2000 00:00

20 lines
1947 bytes

> Maybe not. Objects detected by the Bloodhound heurisitics are normally
> identified with "Bloodhound" in the name. Did you also pack some
> innocent program with elitewrap and see what NAV had to say about
> that? It may be alarming on elitewrap itself.

You're right.  I packed a batch file which contained "echo hello" (pretty
harmless, eh?) with elitewrap, and the alert window came up saying the file
I had created was infected with "Backdoor.Trojan".

I scanned the elitewrap app itself, and NAV said that no viruses were
detected.  Strange.  I'll send elitewrap to SARC just in case it really is
creating a trojan (but if it is, why didn't NAV detect anything in the
elitewrap program?)

Thanks,

--
Baba the Cat
"I have studied many philosophers and many cats. The wisdom of cats is
infinitely superior." - Hippolyte Taine

Technical Details

Message-ID: <8dta68$pr2$1@quince.news.easynet.net>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <8dpt4t$17gb$1@quince.news.easynet.net> <390080e7.265093801@news.mindspring.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fcd68,81218f6baaa6f6f4
X-Google-Attributes: gidfcd68,public
X-Google-Thread: f88ac,81218f6baaa6f6f4
X-Google-Attributes: gidf88ac,public
X-Google-Thread: 104ea8,81218f6baaa6f6f4
X-Google-Attributes: gid104ea8,public
X-Google-Thread: 1127ec,81218f6baaa6f6f4
X-Google-Attributes: gid1127ec,public
From: "Baba" <spammers@pleasedie.com>
Subject: Re: NAV2000 Bloodhound technology -- really good!
Date: 2000/04/22
Message-ID: <8dta68$pr2$1@quince.news.easynet.net>
X-Deja-AN: 614447147
References: <8dpt4t$17gb$1@quince.news.easynet.net> <390080e7.265093801@news.mindspring.com>
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600
X-Complaints-To: abuse@easynet.net
X-Trace: quince.news.easynet.net 956443656 26466 195.40.214.223 (22 Apr 2000 22:47:36 GMT)
Organization: [posted via Easynet Ltd]
X-MSMail-Priority: Normal
NNTP-Posting-Date: 22 Apr 2000 22:47:36 GMT
Newsgroups: alt.comp.virus,easynet.talk,symantec.support.win95.nortonantivirus.general,symantec.support.winnt.nortonantivirus.general

Reply to Parent Message