Avast WEBforum

Other => Viruses and worms => Topic started by: g35xfun on January 11, 2012, 11:25:42 PM

Title: ws.viral.1
Post by: g35xfun on January 11, 2012, 11:25:42 PM
Hello All,

It seems that Avast is unable to detect ws.viral.1 that Symantec NAV2012 is picking up. Has anyone else seen this? Or could this be that Norton is getting false positives? I AVAST on my personal machines at home but get NAV at work. And this makes wondering if I got less protection at home.

Thanks.
Title: Re: ws.viral.1
Post by: essexboy on January 11, 2012, 11:38:44 PM
Quote
WS.Viral.1 is a cloud based detection for files that are unclassified threats.
What file does it reference ?

Title: Re: ws.viral.1
Post by: g35xfun on January 11, 2012, 11:47:22 PM
What on earth does "cloud based detection" mean? The file it reference is an old .exe for file that hasn't been touched or used since 2003.
Title: Re: ws.viral.1
Post by: SafeSurf on January 12, 2012, 11:18:57 AM
Cloud based detection uses a different type of AV: https://secure.wikimedia.org/wikipedia/en/wiki/Antivirus_software (https://secure.wikimedia.org/wikipedia/en/wiki/Antivirus_software).

Have you updated your Avast definitions and run scans with Avast?  If so, what scans did you run and what is it reporting? 

Do you have any on-demand scanners like Malwarebytes Anti-malware (MBAM) http://www.malwarebytes.org/ (http://www.malwarebytes.org/) on your machine?
Title: Re: ws.viral.1
Post by: Pondus on January 12, 2012, 11:57:47 AM
WS.Viral.1

http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2010-052608-1836-99

Quote
WS.Viral.1 is a cloud based detection for files that are unclassified threats.

A file flagged by this detection name is deemed by Symantec to be an unclassified malicious threat and is therefore blocked from accessing the computer.
Title: Re: ws.viral.1
Post by: g35xfun on January 12, 2012, 04:48:41 PM
I updated to the latest Avast 6 free edition and got the latest updates and definitions and it still doesn't pick it up. MBAM doesn't find anything wrong with that file either.
Title: Re: ws.viral.1
Post by: Pondus on January 12, 2012, 04:56:56 PM
as norton say  "an unclassified malicious threat"  so it may not be a threat ?




upload suspicious file(s) to https://new.virustotal.com/ and test with 40+ malware scanners
when you have the result, copy the url in the address bar and post it here for us to see


alternative
Jotti     http://virusscan.jotti.org/en
VirSCAN   http://virscan.org/
Metascan   http://www.metascan-online.com/





Title: Re: ws.viral.1
Post by: g35xfun on January 13, 2012, 08:25:26 PM
I tried those websites on scanning those files. It seems that a majority of supposed anti-virus scanners including Avast and Symantec did not detect a problem nonetheless there were a handful that did. Are these a handful of false positives? Or are these the handful of anti-virus that is better than both Avast or Symantec?
Title: Re: ws.viral.1
Post by: Left123 on January 13, 2012, 08:32:13 PM
It could be repacked by someone else,everything is possible.Are you comparing Avast to Norton?I mean,really? :o
Title: Re: ws.viral.1
Post by: Pondus on January 13, 2012, 09:54:37 PM
I tried those websites on scanning those files. It seems that a majority of supposed anti-virus scanners including Avast and Symantec did not detect a problem nonetheless there were a handful that did. Are these a handful of false positives? Or are these the handful of anti-virus that is better than both Avast or Symantec?
It is difficult to answer your questions since give us no info!
What file(s) are you scanning.......name and location in the computer?
Where are the links to the scan results so we can see?