MSIL.Gastropod anyone?

Symantec Antivirus deleted a zip file containing a .NET assembly today during my weekly scan.  It identified it as a “MSIL.Gastropod“ virus.  For now, I will omit the name of the file, since I feel that it comes from a reputable source. 

Does anyone have the 411 on this “MSIL.Gastropod“ virus?

Google is no help in this case... :(

 

 

3 Comments

  • congratulations. next time the spider comes around, this post will probably rank #1 for MSIL.Gastropod

  • No idea.. But Symantec indicates that it was added on May 14th and is a Category 1. They don't specify what type it is (trojan, worm, virus, ect) or when is was discovered. They also have "MSIL.Impanate" listed as well.



    The only thing that I can think of is that it is something that someone released as a "Terrarium" creature but did something weird.

  • Yes, I had a similar issue and MSIL.Gastropod was reported as a false positive on one of my files (that didn't contain the virus). Maybe they are just checking for some byte signature that boils down to regular .NET API call. You should sent them mail about this.

Comments have been disabled for this content.