Author Topic: Report Unknown Virus  (Read 3445 times)

0 Members and 1 Guest are viewing this topic.

Offline nickzn

  • Jr. Member
  • **
  • Posts: 21
  • I'm a llama!
Report Unknown Virus
« on: June 05, 2006, 04:19:19 PM »
Infect USB storage device and not detected by many antivirus including avast

Activated by double click on the device and release an AdobeR.exe to C:\windows


Open the USB disk to find (Show hidden files of course)

AdobeR.exe & autorun.inf 


To kill it manually

1.kill the process AdobeR.exe

2.delete AdobeR.exe & autorun  in USB device

3.delete AdobeR.exe in C:\windows

4.find out and delete all AdobeR related registry

5.run msconfig and remove the startup AdobeR option



I'll try to get a sample later since I've already deleted it...

Hope avast to be the first to be able to detect it.


Nothing to do with Adobe,  just a similar name


« Last Edit: June 05, 2006, 04:22:52 PM by nickzn »
Be the flame not the moth

Offline nickzn

  • Jr. Member
  • **
  • Posts: 21
  • I'm a llama!
Re: Report Unknown Virus
« Reply #1 on: June 06, 2006, 02:56:05 AM »
I managed to get a sample, to whom should I mail it?

Be the flame not the moth

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re: Report Unknown Virus
« Reply #2 on: June 06, 2006, 03:14:23 AM »
I managed to get a sample, to whom should I mail it?

Send an email with the file (false positive or infected) to: virus@avast.com

You can use Alwil FTP server as a second way to transfer only big files. Upload them to ftp://ftp.avast.com/incoming (please, note that you won't have READ access to the ftp server, just write - so you won't even be able to see what you've just uploaded).

You can zip and password the files... Inform a link to this thread and the password used.
You can send the files to Chest and, from there, resend to Alwil for analysis.
Thanks.  :)
The best things in life are free.

Offline nickzn

  • Jr. Member
  • **
  • Posts: 21
  • I'm a llama!
Re: Report Unknown Virus
« Reply #3 on: June 06, 2006, 04:30:40 AM »


Send an email with the file (false positive or infected) to: virus@avast.com

You can use Alwil FTP server as a second way to transfer only big files. Upload them to ftp://ftp.avast.com/incoming (please, note that you won't have READ access to the ftp server, just write - so you won't even be able to see what you've just uploaded).

You can zip and password the files... Inform a link to this thread and the password used.
You can send the files to Chest and, from there, resend to Alwil for analysis.
Thanks.  :)


I tried the FTP server, but failed because of poor link speed

So I mailed it to the email above


Question is : In the 3rd method, how can I move it to chest while avast don't detect it?

Be the flame not the moth

Offline justin1278

  • Advanced Poster
  • **
  • Posts: 1072
Re: Report Unknown Virus
« Reply #4 on: June 06, 2006, 04:32:36 AM »
Go to avast! Simple user interface, then open the chest, then go to user files, add a new file option toward the top of the chest. Add the file to the chest, then delete the original.

Regards,

Justin
My PC's

Compaq Presario:
Windows Vista Ultimate SP1
AMD Athlon 3800+ 2.4 GHz
2 GB RAM

Sony Vaio:
Windows XP Professional SP3 [Tester]
Intel Pentium M 1.86 GHz
1.5 GB RAM

Offline nickzn

  • Jr. Member
  • **
  • Posts: 21
  • I'm a llama!
Re: Report Unknown Virus
« Reply #5 on: June 06, 2006, 05:08:12 AM »
thank you !
Be the flame not the moth

Offline justin1278

  • Advanced Poster
  • **
  • Posts: 1072
Re: Report Unknown Virus
« Reply #6 on: June 06, 2006, 06:49:59 AM »
Hi,

My pleasure, hopefully the avast! team will get on that virus sample quickly.
My PC's

Compaq Presario:
Windows Vista Ultimate SP1
AMD Athlon 3800+ 2.4 GHz
2 GB RAM

Sony Vaio:
Windows XP Professional SP3 [Tester]
Intel Pentium M 1.86 GHz
1.5 GB RAM