PDA

Просмотр полной версии : vb script virus



yotta
20.04.2008, 13:26
hi
i noted that i get a new virus in my pc, and kaspersky can't recognize it.

kps
20.04.2008, 13:58
Why do you think that you have a virus ?
Did you follow the recommendation 2 of the rules (CureIt!)? If not, please do so.

Rene-gad
20.04.2008, 14:22
hi
i noted that i get a new virus in my pc, and kaspersky can't recognize it.
it's remarkable, that your system runs yet at all: please choose only 1 antivirus program and remove the second one.
What a virus? By which program? Where (path/file) was it recognized?
Pls. repeat the logs after letting one AV, scanning with CureIt and updating of database of AVZ.

database released 06.04.2008 17:09

yotta
21.04.2008, 10:02
the virus are composed from 02 files ,one autorun and script file.
the virus was detected BY AVG antivirus, in C:\ and c:\windows\system32.
i tried the cureit antivirus but they didn't detected anything.

kps
21.04.2008, 10:05
Did AVG deleted the infected files it found?
Can you send us these files in a zip-container with the password virus here: http://virusinfo.info/upload_virus_eng.php?tid=21790 ?

yotta
21.04.2008, 11:09
yes AVG delete it but it back again.
i uploaded the zip file and its name is :.vbe.zip
the password is :scriptvb

kps
21.04.2008, 11:17
We need the password to be virus . Otherwise it cant be checked by the VirLab.

Rene-gad
21.04.2008, 11:49
the password is :scriptvb
__________________________________________________ __________

Please resend the file in archive with password "infected" (without quotas).

yotta
21.04.2008, 12:07
the password of the zip file that contain rhe virus is : scriptvb.

Rene-gad
21.04.2008, 12:14
the password of the zip file that contain rhe virus is : scriptvb.
we don't have any possibility to inform KL about it. Pls. reload the quarantine as requested or the topic will be closed >:(

yotta
21.04.2008, 12:15
sorry,i upload it now with password "infected"

Rene-gad
21.04.2008, 12:25
I think, AVZ has just removed this virus. Pls. make the 3 new logs, don't forget to update the database of AVZ.

yotta
21.04.2008, 12:45
ok,i will do.
but whats the contain of the script file, it seem encrypted.

Rene-gad
21.04.2008, 13:44
but whats the contain of the script file, it seem encrypted.Yes, but we haven't received an answer from KL. By Norman it's VBS/Autorun.G
EDIT: .vbe - Trojan.VBS.Agent.bt
Now we're missing your new logs.

yotta
23.04.2008, 15:19
thats the new logs

Rene-gad
23.04.2008, 19:22
Clapper board the 2nd
pls. Update the bases of AVZ
pls. Switch System Recovery off
Thank you.

yotta
26.04.2008, 18:20
hope that will help.
thank you

Rene-gad
26.04.2008, 19:09
hope that will help.
thank you
Do you understand English sufficiently? ;)

Attention !!! Database was last updated 06/04/2008 it is necessary to update the bases using automatic updates (File/Database update)