Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I tried checking the Norman antivirus page, Virus-descriptions, but sadly it seems Norman has intentionally obfuscated their search results (I tried clicking on W, and it seems they just list viruses with a W somewhere in the description, instead of more typical, all viruses with a name starting with a W.)

Is there a common virus-list somewhere, or is it as I suspect, every antivirus manufacturer is free to come up with their own identification tags for each virus?

Several "vshost32.exe" files, related to Microsoft Visual Studio 2008, has been quarantined on our server today, probably related to a test-deployment of some internal software. Some developer machines that have grabbed that latest version of our program has also had the same files quarantined. Now, these files should not have been deployed in the first case, so I'll be looking into that, but whenever any developer now builds a program locally and attempts to debug, the same file is placed in the build output directory, and promptly quarantined.

Does anyone have any clues as to how I can go about verifying this before I pointedly ask the antivirus software to go take a hike on this particular virus?

Edit: I've copied one of the quarantined files manually to a machine over the network that doesn't have antivirus installed, and compared the file on that machine with a local copy (on that machine) of the vshost32.exe template file, and they're bit-for-bit identical. I guess this is a false positive.

I still would like to know if it would be possible for me to verify this in any other way though, since next time such a trojan might be reported in a compiled file that we won't have a pristine copy of.

share|improve this question
3  
I suggest you look at this and get a new antivirus superuser.com/questions/2/free-antivirus-solutions-for-windows Avira Antivir, Microsoft Security Essentials, Avast are all better than Norman and free. –  Nifle Mar 25 '10 at 12:02
    
I would if I could, unfortunately the choice in antivirus software is not mine to take. –  Lasse V. Karlsen Mar 29 '10 at 10:40
add comment

1 Answer

up vote 1 down vote accepted

Most antivirus manufacturers have their own databases including their own naming rules for the viruses they know are out there. Instead of trying to find out what Norman antivirus thinks the file is, try installing a different antivirus (Microsoft Security Essentials comes to mind, it's really good and free) with a good track record instead of Norman antivirus.

Odds are you'll also find more information about the virus (if it really is that) if you look up the name it's been given by Microsoft, Symantec or Kaspersky.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.