Endpoint Protection

 View Only
  • 1.  SAV10 - "Unknown"

    Posted Nov 17, 2009 12:49 PM
    I am getting messages from SAV 10.x saying that a virus was found, but it reports the risk discovered by "Unknown" (not prefixed by Heuristic, etc.).
    So who did indeed catch this one?


  • 2.  RE: SAV10 - "Unknown"

    Posted Nov 17, 2009 01:33 PM

    Bloodhound is the name of the Norton AntiVirus heuristic scanning technology for detecting new and unknown viruses.


    Title: 'Explanation of Bloodhound alerts'
    Document ID: 1998100109260548
    > Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/1998100109260548?Open&seg=ent
     



  • 3.  RE: SAV10 - "Unknown"

    Posted Nov 17, 2009 01:41 PM
    There's no mention of Bloodhound - just not "not specified <threat type> (File)" "Unknown". Is heuristic implied?


  • 4.  RE: SAV10 - "Unknown"
    Best Answer

    Posted Nov 17, 2009 01:44 PM
    Sometimes the client detects an unknown virus that cannot be eliminated with the current set of virus definitions. You might have a file that you believe is infected but scans do not detect an infection. The Quarantine safely isolates potentially infected files on your computer. When you quarantine a virus, the virus cannot spread on your computer or to other computers in your network

    since it does not know what kind of virus / category it belongs to you get the name as Unknown.

    The whole techonology which does is Bloodhound.

    Bloodhound technology dramatically increases the protection against new and unknown viruses.

    Bloodhound isolates and locates the various logical regions of a file, and then analyzes the program logic for virus-like behavior. Bloodhound detects a very high percentage of unknown viruses. In addition, the client detects unknown viruses by monitoring activity on your computer for the behaviors that viruses typically perform. When a suspicious activity is detected, the client prevents the action from continuing

    Hope I answered your question...;) 



  • 5.  RE: SAV10 - "Unknown"

    Posted Nov 18, 2009 09:58 AM
    I believe so. "Unknown" implies the Heuristic engine found the cuplrit.