vb script virus

[yotta]

hi
i noted that i get a new virus in my pc, and kaspersky can't recognize it.

[kps]

Why do you think that you have a virus ?
Did you follow the recommendation 2 of the rules (CureIt!)? If not, please do so.

[Rene-gad]

hi
i noted that i get a new virus in my pc, and kaspersky can't recognize it.
it's remarkable, that your system runs yet at all: please choose only 1 antivirus program and remove the second one.
What a virus? By which program? Where (path/file) was it recognized?
Pls. repeat the logs after letting one AV, scanning with CureIt and updating of database of AVZ.

database released 06.04.2008 17:09

[yotta]

the virus are composed from 02 files ,one autorun and script file.
the virus was detected BY AVG antivirus, in C:\ and c:\windows\system32.
i tried the cureit antivirus but they didn't detected anything.

[kps]

Did AVG deleted the infected files it found?
Can you send us these files in a zip-container with the password virus here: http://virusinfo.info/upload_virus_eng.php?tid=21790 ?

[yotta]

yes AVG delete it but it back again.
i uploaded the zip file and its name is :.vbe.zip
the password is :scriptvb

[kps]

We need the password to be virus . Otherwise it cant be checked by the VirLab.

[Rene-gad]

the password is :scriptvb
__________________________________________________ __________

Please resend the file in archive with password "infected" (without quotas).

[yotta]

the password of the zip file that contain rhe virus is : scriptvb.

[Rene-gad]

the password of the zip file that contain rhe virus is : scriptvb.
we don't have any possibility to inform KL about it. Pls. reload the quarantine as requested or the topic will be closed >:(

[yotta]

sorry,i upload it now with password "infected"

[Rene-gad]

I think, AVZ has just removed this virus. Pls. make the 3 new logs, don't forget to update the database of AVZ.

[yotta]

ok,i will do.
but whats the contain of the script file, it seem encrypted.

[Rene-gad]

but whats the contain of the script file, it seem encrypted.Yes, but we haven't received an answer from KL. By Norman it's VBS/Autorun.G
EDIT: .vbe - Trojan.VBS.Agent.bt
Now we're missing your new logs.

[yotta]

thats the new logs

[Rene-gad]

Clapper board the 2nd
pls. Update the bases of AVZ
pls. Switch System Recovery off
Thank you.

[yotta]

hope that will help.
thank you

[Rene-gad]

hope that will help.
thank you
Do you understand English sufficiently? ;)

Attention !!! Database was last updated 06/04/2008 it is necessary to update the bases using automatic updates (File/Database update)