My PC and usb flash drive infected VBS.Generic.552 or Trojan.VBS.Agent.k

[Keha]

Hi all!

This virus detected drweb and kaspersky. It Avast! not found. I send mail 10.09.2007 on vuris@avast.com with body virus, but avast till now not found virus.
Help me!

[DavidR]

Did you zip and password protect the sample file attached to the email, if not it may never have reached avast.com as it may have been intercepted en route at a mail server.

Personally I feel it is better to send samples from the chest as these are filtered on receipt, you don't need to zip and password protect as avast encrypts the sample. Just add it to your User Files section of the avast chest and email it from there.

[Lisandro]

I send mail 10.09.2007 on vuris@avast.com

I suppose it's a typo... virus@

[DavidR]

Possibly/hopefully so as it has been a long time otherwise, regardless though I feel it should be sent again but from the chest this time.

[Keha]

DavidR, I have sent virus through avast, as described at screenshot.
PS I expect reaction of programmers...

[DavidR]

They usually only respond if they require any more information.

You can periodically scan it in the chest to see when it has been included.

[Lisandro]

I expect reaction of programmers...

We too

[Keha]

When they will react?

[Lisandro]

Well... it's a shame for them if they take that much longer...

[DavidR]

When they will react?

As I said it is unlikely they will react directly to you, but I would have thought action would have been taken to include this in the VPS.

Perhaps we can add some more input if you can put it on a file sharing site I would be happy to download it (provided it isn't huge, I'm on dial-up ) and send it in also see if more submissions of the same file makes and impact.

- Rapidshare file upload -  Host your files with RapidShare FOR FREE! http://rapidshare.com useful if you haven't got an email client.
- 4shared.com - free file sharing and storage - http://www.4shared.com/

[Keha]

I till have not waited reactions.... I download this virus on http://cultus.org.ru/virus.zip
Welcome everybody.....

[Keha]

Nearly has not forgotten...
pass: virus

[DavidR]

I have downloaded the zip file and and checked at VirusTotal (see below) and will send to avast.

File kernel32.dll.vbs received on 10.12.2007 15:27:58 (CET)
Antivirus   Version   Last Update   Result
AhnLab-V3   2007.10.12.1   2007.10.12   VBS/Solow
AntiVir   7.6.0.23   2007.10.12   VBS/Small.Q
Authentium   4.93.8   2007.10.12   -
Avast   4.7.1051.0   2007.10.11   -
AVG   7.5.0.488   2007.10.12   VBS/Small
BitDefender   7.2   2007.10.12   VBS.Beight.A
CAT-QuickHeal   9.00   2007.10.11   -
ClamAV   0.91.2   2007.10.12   -
DrWeb   4.44.0.09170   2007.10.12   VBS.Generic.565
eSafe   7.0.15.0   2007.10.10   -
eTrust-Vet   31.2.5205   2007.10.12   VBS/Slogod.H
Ewido   4.0   2007.10.12   -
FileAdvisor   1   2007.10.12   -
Fortinet   3.11.0.0   2007.10.12   VBS/BUTSUR.C
F-Prot   4.3.2.48   2007.10.11   -
F-Secure   6.70.13030.0   2007.10.12   Trojan.VBS.Agent.k
Ikarus   T3.1.1.12   2007.10.12   Worm.VBS.Small.C
Kaspersky   7.0.0.125   2007.10.12   Trojan.VBS.Agent.k
McAfee   5139   2007.10.11   VBS/Generic
Microsoft   1.2908   2007.10.12   Worm:VBS/Agent.A
NOD32v2   2588   2007.10.12   VBS/Butsur.C
Norman   5.80.02   2007.10.12   VBS/Solow.V
Panda   9.0.0.4   2007.10.12   VBS/Keinf.A
Prevx1   V2   2007.10.12   -
Rising   19.44.42.00   2007.10.12   Worm.VBS.Agent.o
Sophos   4.22.0   2007.10.12   W32/Wekode-A
Sunbelt   2.2.907.0   2007.10.11   -
Symantec   10   2007.10.12   VBS.Solow.D
TheHacker   6.2.8.087   2007.10.12   -
VBA32   3.12.2.4   2007.10.12   Worm.VBS.Small.c
VirusBuster   4.3.26:9   2007.10.12   -
Webwasher-Gateway   6.0.1   2007.10.12   Script.Small.Q
Additional information
File size: 63260 bytes
MD5: d2c06c143e944d654ce1b095ec1a6654
SHA1: 3346dcf38a0636f7c83bd4abf8e94ccae7d900b0
packers: Unicode
packers: Unicode

[Keha]

thanks....

[DavidR]

Your welcome, lets see if it makes a difference.