Author Topic: ws.viral.1  (Read 5570 times)

0 Members and 1 Guest are viewing this topic.

g35xfun

  • Guest
ws.viral.1
« on: January 11, 2012, 11:25:42 PM »
Hello All,

It seems that Avast is unable to detect ws.viral.1 that Symantec NAV2012 is picking up. Has anyone else seen this? Or could this be that Norton is getting false positives? I AVAST on my personal machines at home but get NAV at work. And this makes wondering if I got less protection at home.

Thanks.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: ws.viral.1
« Reply #1 on: January 11, 2012, 11:38:44 PM »
Quote
WS.Viral.1 is a cloud based detection for files that are unclassified threats.
What file does it reference ?


g35xfun

  • Guest
Re: ws.viral.1
« Reply #2 on: January 11, 2012, 11:47:22 PM »
What on earth does "cloud based detection" mean? The file it reference is an old .exe for file that hasn't been touched or used since 2003.

SafeSurf

  • Guest
Re: ws.viral.1
« Reply #3 on: January 12, 2012, 11:18:57 AM »
Cloud based detection uses a different type of AV: https://secure.wikimedia.org/wikipedia/en/wiki/Antivirus_software.

Have you updated your Avast definitions and run scans with Avast?  If so, what scans did you run and what is it reporting? 

Do you have any on-demand scanners like Malwarebytes Anti-malware (MBAM) http://www.malwarebytes.org/ on your machine?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37509
  • Not a avast user
Re: ws.viral.1
« Reply #4 on: January 12, 2012, 11:57:47 AM »
WS.Viral.1

http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2010-052608-1836-99

Quote
WS.Viral.1 is a cloud based detection for files that are unclassified threats.

A file flagged by this detection name is deemed by Symantec to be an unclassified malicious threat and is therefore blocked from accessing the computer.

g35xfun

  • Guest
Re: ws.viral.1
« Reply #5 on: January 12, 2012, 04:48:41 PM »
I updated to the latest Avast 6 free edition and got the latest updates and definitions and it still doesn't pick it up. MBAM doesn't find anything wrong with that file either.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37509
  • Not a avast user
Re: ws.viral.1
« Reply #6 on: January 12, 2012, 04:56:56 PM »
as norton say  "an unclassified malicious threat"  so it may not be a threat ?




upload suspicious file(s) to https://new.virustotal.com/ and test with 40+ malware scanners
when you have the result, copy the url in the address bar and post it here for us to see


alternative
Jotti     http://virusscan.jotti.org/en
VirSCAN   http://virscan.org/
Metascan   http://www.metascan-online.com/






g35xfun

  • Guest
Re: ws.viral.1
« Reply #7 on: January 13, 2012, 08:25:26 PM »
I tried those websites on scanning those files. It seems that a majority of supposed anti-virus scanners including Avast and Symantec did not detect a problem nonetheless there were a handful that did. Are these a handful of false positives? Or are these the handful of anti-virus that is better than both Avast or Symantec?

Offline Left123

  • There Is No Patch For Human Stupidity.
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1048
  • Proud Community Member&Helper.
Re: ws.viral.1
« Reply #8 on: January 13, 2012, 08:32:13 PM »
It could be repacked by someone else,everything is possible.Are you comparing Avast to Norton?I mean,really? :o
AMD Athlon(tm) X2 Dual-Core Processor 4200+ - 2.20 GHz,3,00 GB RAM -
Browser:Mozilla Firefox +WOT - SoftWare:CCleaner - Windows 7 32 bit
No Anti-Virus

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37509
  • Not a avast user
Re: ws.viral.1
« Reply #9 on: January 13, 2012, 09:54:37 PM »
I tried those websites on scanning those files. It seems that a majority of supposed anti-virus scanners including Avast and Symantec did not detect a problem nonetheless there were a handful that did. Are these a handful of false positives? Or are these the handful of anti-virus that is better than both Avast or Symantec?
It is difficult to answer your questions since give us no info!
What file(s) are you scanning.......name and location in the computer?
Where are the links to the scan results so we can see?