Worm.VBS.Dunihi.W

[Michael (alan1998)]

You can report it in their forums: https://forums.malwarebytes.org/index.php?s=66a1706d6127bc63b0a32c2ac10b7c4a&showforum=51

That link is dead.

Malwarebytes still won't detect it. Has someone reported it to them?

It is now .... reported

Found, Mod answered to "Will look at it shortly"
 
Topic Locked.

[Secondmineboy]

That link works for me here. Weird.

[Michael (alan1998)]

That link works for me here. Weird.

I'm having issues talking to any MBAM site.... Must just be me

[Secondmineboy]

Thats weird.

[DavidR]

That link works for me here. Weird.

Whilst the link didn't appear dead, it is taking an eternity to load with the waiting for malwarebytes... etc. displayed at the bottom of the screen.

EDIT: Just been back and it has loaded, there must be some issues with the site.

[Michael (alan1998)]

That link works for me here. Weird.

Whilst the link didn't appear dead, it is taking an eternity to load with the waiting for malwarebytes... etc. displayed at the bottom of the screen.

EDIT: Just been back and it has loaded, there must be some issues with the site.

I had some 403 error saying the site was having Capacity Issues or down for Maintence. Are they under attack or something? I've never had an issue on MBAM's website.

[Secondmineboy]

They could be attacked or maybe they are doing some maintenance, maybe they need to shutdown the server or parts from them
so they have less capacity then usual.

It takes forever here to load too.
Maybe they are being attacked at the moment, or the hoster is being attacked.

http://www.downforeveryoneorjustme.com/forums.malwarebytes.org

Now i cannot even reach the website, it ends up with an error.

[Michael (alan1998)]

They could be attacked or maybe they are doing some maintenance, maybe they need to shutdown the server or parts from them
so they have less capacity then usual.

It takes forever here to load too.
Maybe they are being attacked at the moment, or the hoster is being attacked.

http://www.downforeveryoneorjustme.com/forums.malwarebytes.org

Now i cannot even reach the website, it ends up with an error.

Given what they do, I'd guess it's an attack. Dang it

Steven, if you're on the MBAM forums, what class (If any at all) are you in?

[Secondmineboy]

Im not on the Malwarebytes forums, sorry.

I had seen a livestream some months ago from a youtuber called Markiplier.
And 30 minutes after beginning the livestream someone found out his IP and DDossed his home router.

And what has he done?  He got his laptop and his equipment and got over to his brothers house and continued there.

[Michael (alan1998)]

Im not on the Malwarebytes forums, sorry.

I had seen a livestream some months ago from a youtuber called Markiplier.
And 30 minutes after beginning the livestream someone found out his IP and DDossed his home router.

And what has he done?  He got his laptop and his equipment and got over to his brothers house and continued there.

Lol. Way to get the guy back. Basically saying try me.

[Secondmineboy]

Good that they havent found out his brothers IP address.

But later the Charity Site was attacked. He was making a charity livestream at that time.

You can look his channel here: http://www.youtube.com/user/markiplierGAME?feature=watch

The Drunk Minecraft season is really fun: http://www.youtube.com/playlist?list=PL4E8CE9E89554302E

[Michael (alan1998)]

Oh, I've seen drunk minecraft players. It's quite funny when you kill them

[Secondmineboy]

He has done a whole row of Drunk Minecraft.

Pretty Funny.

Episode 13 Latins Wrath is really funny. You can find it in the playlist.

[polonus]

Hi Steven Winderlich and alan1998,

Always like to give you two eager young anti-malware dogs some additional inspiration and some info to bite on,
so go over following information on the latest VBS malcode.
Are these detections somehow related? Is this another flaw of VBS or just the one we are discussing here?
See: http://urlquery.net/report.php?id=8649257
See: https://www.virustotal.com/nl/url/cfb2e14fee52d00931436ec10366da9df39465e5472e4e759d4711e98a866280/analysis/
See: https://www.virustotal.com/nl/file/11216d699c21213064d63796cf74fbd1f07f0d58f024f1a38cab2382be4dfa24/analysis/1388270716/
avast! detects as VBS:Malware-gen as you two mentioned.
And the Bitdefender foum report here: http://forum.bitdefender.com/index.php?showtopic=40871
See how it became viral: http://processchecker.com/file/avcheck.exe.html
And what Alex Nightwatcher reports here: http://regrunreanimator.com/newvirus/malware/avcheck-exe.htm

pol

[Michael (alan1998)]

Process Checker:

Sorry, reading that site (Processcheck) made me crack up laughing. They're using a PUP program without a good reputation to check a computer with a "PDF" (Potential Dangerous File).

I'll continue reading here.

From the same site: Something wrong with avcheck.exe ?

Is avcheck.exe using too much CPU or memory ? It's probably your file has been infected with a virus. Let try the program named to see if it helps.

Snickers. Looks @ Task Manager to see DreamWeaver using 99% of the CPU

Bit Defender Report

Seems like it's fine. Nothing wrong. AVCheck.exe is Bit Defender Product.


VirusTotal:

https://www.virustotal.com/en/file/11216d699c21213064d63796cf74fbd1f07f0d58f024f1a38cab2382be4dfa24/analysis/1388270716/ (Random file name, so what is the program?)


VirusTotal:

https://www.virustotal.com/en/url/cfb2e14fee52d00931436ec10366da9df39465e5472e4e759d4711e98a866280/analysis/

Interesting. If this really is a Bit Defender Product, why is it considered to be a "Bad" website and product?

URL Query to me = total confusion.