Author Topic: VBS:Malware-gen  (Read 198412 times)

0 Members and 1 Guest are viewing this topic.

iamhitbytrojan

  • Guest
Re: VBS:Malware-gen
« Reply #210 on: August 07, 2009, 06:29:38 PM »
It says Malware name: VBS:Obfuscated-gen [trj]

Malware type:  Trojan Horse


I clicked on www.thtndc.org
avast 4.8 database 090806-1 08/06 also popped up and warned me of VBS:Obfuscated-gen [trj]
This site was a good one and meant no harm.
Can someone check it please to see if there is any more trojan or malware?

Please also check www.phiatruoc.net as it is a site administered by the same team of the above.
« Last Edit: August 07, 2009, 06:34:44 PM by iamhitbytrojan »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89362
  • No support PMs thanks
Re: VBS:Malware-gen
« Reply #211 on: August 07, 2009, 06:44:44 PM »
Well it tries to install a chat-room-client without asking the user and at best is down right rude and at worst possibly malicious.

It is also creating an applet and an object where it appears to be hiding (obfuscating) what the purpose is and I don't like what it tries to do directly in the C:\ drive.

avast isn't alone in thinking there is something wrong with this, http://www.virustotal.com/analisis/d430171aface541b88b199daef5962168ec1686e0ab2d8cb95ea9f85dfecea59-1249663618
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

mefite

  • Guest
Re: VBS:Malware-gen
« Reply #212 on: August 12, 2009, 07:10:03 PM »
--post removed-- wrong section
« Last Edit: August 12, 2009, 07:22:48 PM by mefite »

spg SCOTT

  • Guest
Re: VBS:Malware-gen
« Reply #213 on: August 12, 2009, 07:17:19 PM »
Hello

Please can you start  a new topic as your problem is unrelated to the original poster's and will cause some confusion.

Also, please can you modify your post (and change your next one) to break the link (i.e.change http to hXXp)

Thanks,

-Scott-



mefite

  • Guest
Re: VBS:Malware-gen
« Reply #214 on: August 12, 2009, 07:18:37 PM »
Sorry bout that.  Will do.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89362
  • No support PMs thanks
Re: VBS:Malware-gen
« Reply #215 on: August 12, 2009, 07:33:35 PM »
When you do, I didn't find anything, so some more info is required.

I have just visited the home page hXXp://www.greenbeanery.ca/bean/home.php with firefox 3.5.2 and I had no alert, so if you can be more specific on the URL where the alert lies - Please 'modify' your post change the URL from http to hXXp or www to wXw (as in my example), to break the link and avoid accidental exposure to suspect sites, thanks.

Since I'm on dial-up and the site is media rich, it takes forever to load, so I can't go browsing in the hope of finding it.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

auloon

  • Guest
Re: VBS:Malware-gen
« Reply #216 on: January 29, 2010, 02:22:40 PM »
Hello,

yesterday, juste when closing the computer (Windows XP SP2), the Avast (visrus base updated) showed the alert VBS-malware-gen in logonui.exe and blocked the computer. Today, after the restart I checked logonui.exe with the Avast - same problem. Avast proposes me to cure it, I accept, then it proposes to change the file with a sane copy, I accept it, and the alert re-appears again and again.

I have no idea of where from the virus came. To check with an alternative mean, I launched CureIt! which ran also in Win32, and it didn't find anything suspicious. Could it be an Avast error or shoul I really worry?

Thank you for help! 

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2297
Re: VBS:Malware-gen
« Reply #217 on: January 29, 2010, 02:43:00 PM »
Hello,
send us (virus@avast.com) the file to analyze and put "False positive" to subject. But "VBS-malware-gen" in .exe looks at 1st look suspisious (VBS is Visual Basic Script -- text file not binary).

Thank you
Milos

Ashish Sardana

  • Guest
Re: VBS:Malware-gen
« Reply #218 on: September 14, 2011, 06:44:48 AM »
Plz help me also, i am having problem with the file D:/autorun.inf and its showing on the screen again and again that the file is infected with vbs:malware-gen. Plz some1 help how to remove this  :-\

Thank You

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37621
  • Not a avast user
Re: VBS:Malware-gen
« Reply #219 on: September 14, 2011, 07:07:59 AM »
Plz help me also, i am having problem with the file D:/autorun.inf and its showing on the screen again and again that the file is infected with vbs:malware-gen. Plz some1 help how to remove this  :-\

Thank You
Read this   http://forum.avast.com/index.php?topic=53253.0