Jump to content

What happened to Win32/Danger.DoubleExtension


Recommended Posts

Hi Guys,

 

what happened to this awesome signature? It took out 95% of the mails - so i would love to see get it back. :wub:

 

Was it removed from data base because of larger numbers of false positives?

 

Best Regards :)

 

 

 

 

Link to post
Share on other sites

I was just asking, because it was leading our dashboard statistics over weeks. Now, we "only" have suspicious objects detections (just made a short review over the last two weeks - nearly all those suspicious objects were .scr-malware).

 

So if the detection is still there, please ignore my question. I would really miss this detection.

 

Maybe 'the bad guys' should write some more doc.exe / pdf.exe or anything else ... :)

Link to post
Share on other sites
  • Administrators

The "suspicious object" detection is not bound to file extensions and works generally for any files. The detection is triggered if a file is recognized as blacklisted in cloud provided that Live Grid is enabled.

Link to post
Share on other sites

... and that's not a "normal" detection.

@guarana

If you think this is the same or a similar malware. Or the same malware "family" please submit the samples to ESET.

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...