Author Topic: ws.viral.1  (Read 3041 times)

Offline g35xfun

  • Newbie
  • *
  • Posts: 4
    • Personal Message (Offline)
ws.viral.1
« on: January 11, 2012, 09:25:42 PM »
Hello All,

It seems that Avast is unable to detect ws.viral.1 that Symantec NAV2012 is picking up. Has anyone else seen this? Or could this be that Norton is getting false positives? I AVAST on my personal machines at home but get NAV at work. And this makes wondering if I got less protection at home.

Thanks.

Offline essexboy

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 28953
  • Gender: Male
  • Dragons by Sasha
    • Malware fixes
    • Personal Message (Offline)
Re: ws.viral.1
« Reply #1 on: January 11, 2012, 09:38:44 PM »
Quote
WS.Viral.1 is a cloud based detection for files that are unclassified threats.
What file does it reference ?


Offline g35xfun

  • Newbie
  • *
  • Posts: 4
    • Personal Message (Offline)
Re: ws.viral.1
« Reply #2 on: January 11, 2012, 09:47:22 PM »
What on earth does "cloud based detection" mean? The file it reference is an old .exe for file that hasn't been touched or used since 2003.

Offline SafeSurf

  • avast! Evangelist
  • Ultra Poster
  • ***
  • Posts: 4926
    • Personal Message (Offline)
Re: ws.viral.1
« Reply #3 on: January 12, 2012, 09:18:57 AM »
Cloud based detection uses a different type of AV: https://secure.wikimedia.org/wikipedia/en/wiki/Antivirus_software.

Have you updated your Avast definitions and run scans with Avast?  If so, what scans did you run and what is it reporting? 

Do you have any on-demand scanners like Malwarebytes Anti-malware (MBAM) http://www.malwarebytes.org/ on your machine?
iMac (Mavericks)/Safari and Firefox (NoScript/AdBlockPlus/BetterPrivacy/Ghostey)/
Vista Home Prem (same add-on's)/Avast Free/Online Armor Premium Firewall/MBAM Prem)/ Avast Mobile Security with MBAM Pro/ iPad 4th gen.

Offline Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21661
  • Gender: Male
    • Personal Message (Offline)
Re: ws.viral.1
« Reply #4 on: January 12, 2012, 09:57:47 AM »
WS.Viral.1

http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2010-052608-1836-99

Quote
WS.Viral.1 is a cloud based detection for files that are unclassified threats.

A file flagged by this detection name is deemed by Symantec to be an unclassified malicious threat and is therefore blocked from accessing the computer.
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline g35xfun

  • Newbie
  • *
  • Posts: 4
    • Personal Message (Offline)
Re: ws.viral.1
« Reply #5 on: January 12, 2012, 02:48:41 PM »
I updated to the latest Avast 6 free edition and got the latest updates and definitions and it still doesn't pick it up. MBAM doesn't find anything wrong with that file either.

Offline Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21661
  • Gender: Male
    • Personal Message (Offline)
Re: ws.viral.1
« Reply #6 on: January 12, 2012, 02:56:56 PM »
as norton say  "an unclassified malicious threat"  so it may not be a threat ?




upload suspicious file(s) to https://new.virustotal.com/ and test with 40+ malware scanners
when you have the result, copy the url in the address bar and post it here for us to see


alternative
Jotti     http://virusscan.jotti.org/en
VirSCAN   http://virscan.org/
Metascan   http://www.metascan-online.com/





Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline g35xfun

  • Newbie
  • *
  • Posts: 4
    • Personal Message (Offline)
Re: ws.viral.1
« Reply #7 on: January 13, 2012, 06:25:26 PM »
I tried those websites on scanning those files. It seems that a majority of supposed anti-virus scanners including Avast and Symantec did not detect a problem nonetheless there were a handful that did. Are these a handful of false positives? Or are these the handful of anti-virus that is better than both Avast or Symantec?

Offline Left123

  • There Is No Patch For Human Stupidity.
  • avast! Evangelist
  • Advanced Poster
  • ***
  • Posts: 1052
  • Gender: Male
  • Proud Community Member&Helper.
    • Personal Message (Offline)
Re: ws.viral.1
« Reply #8 on: January 13, 2012, 06:32:13 PM »
It could be repacked by someone else,everything is possible.Are you comparing Avast to Norton?I mean,really? :o
AMD Athlon(tm) X2 Dual-Core Processor 4200+ - 2.20 GHz,3,00 GB RAM -
Browser:Mozilla Firefox +WOT - SoftWare:CCleaner - Windows 7 32 bit
No Anti-Virus

Offline Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21661
  • Gender: Male
    • Personal Message (Offline)
Re: ws.viral.1
« Reply #9 on: January 13, 2012, 07:54:37 PM »
I tried those websites on scanning those files. It seems that a majority of supposed anti-virus scanners including Avast and Symantec did not detect a problem nonetheless there were a handful that did. Are these a handful of false positives? Or are these the handful of anti-virus that is better than both Avast or Symantec?
It is difficult to answer your questions since give us no info!
What file(s) are you scanning.......name and location in the computer?
Where are the links to the scan results so we can see?
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now