topic Re: Trojan dropper.bxzq detected and not in Threath Database in General Topics

Trojan dropper.bxzq detected and not in Threath Database

a.cadarso — Tue, 07 Sep 2010 11:25:35 GMT

Hi, our Palo Alto has detected the threat:

Name:	Trojan/Win32.dropper.bxzq
ID:	2723653

Description:	This signature detected Trojan/Win32.dropper.bxzq
Severity:

But if I try to find this threath by name or ID in Threat Database it doesn't exist, how is it possible?

At the same time the Palo Alto has detected

MAIL: User Login Brute-force Attempt
ID:	40007
Description:	This event indicates that someone is using a brute force attack to gain access to mail server through smtp/pop3/imap authentication request.
Severity:

But in Threat Reports, vulnerability it doesn't exist even though in Logs, Threat it appears like "vulnerability".

Could you explain this??

Thank you in advance

Samuel

Re: Trojan dropper.bxzq detected and not in Threath Database

migration — Tue, 07 Sep 2010 17:46:00 GMT

Hi Samuel,

As to your first question, it appears you are running 3.1 software release... the viruses for this release are not yet uploaded on our support site and as such you are not able to find that information. We are working on this and would post a note on knowledge point when this is done. Thanks for your patience,

As to your second question, the ID may not have been included in the "vulnerabilities" threat report as the report contains top 50 vulns only and depending upon whether the particular vulnerability made to the top 50 vulns, it may not have been included in the report. Did you have 50 vulnerabilities reported in the vulnerability threat report?

Thanks,
Sandeep