Author Topic: Infected with VBS: Malware (Script) allthough avast running...  (Read 17109 times)

0 Members and 1 Guest are viewing this topic.

Offline hariskar

  • Jr. Member
  • **
  • Posts: 25
I run  everyday a whole system scan with avast and I find everytime this script in my documents. Why does avast not see it the time it is coming in my pc? Is it dangerous? Why do I find it everyday in my pc? Where does it come from?
« Last Edit: May 29, 2003, 07:41:27 PM by hariskar »

Offline hariskar

  • Jr. Member
  • **
  • Posts: 25
Infected with VBS: Malware (Script) allthough avast running...
« Reply #1 on: May 26, 2003, 02:58:01 PM »
I run  everyday a whole system scan with avast and I find everytime this script in my documents. Why does avast not see it the time it is coming in my pc? I have the script control set to on. Is it dangerous? Why do I find it everyday in my pc? Where does it come from?

<Vlk's note: Merged with the duplicate thread in the Viruses&Worms category.>
« Last Edit: May 29, 2003, 07:42:48 PM by hariskar »

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11665
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:VBS: Malware (Script)
« Reply #2 on: May 26, 2003, 03:06:14 PM »
Where is it located (in which file)?
Is it always in the same file?
Do you have the resident scanner sensitivity set to Normal or High?

Vlk
If at first you don't succeed, then skydiving's not for you.

Offline hariskar

  • Jr. Member
  • **
  • Posts: 25
Infected with VBS: Malware (Script) allthough avast running...
« Reply #3 on: May 27, 2003, 07:54:38 AM »
Yesterday i set the script sensitivity to high and today I found again this script in this file: C:\Documents and Settings\dex\Local Settings\Temporary Internet Files\Content.IE5\CPIVS9U7\index[2].htm
Why doesn't avast block it?
« Last Edit: May 29, 2003, 07:43:05 PM by hariskar »

Offline hariskar

  • Jr. Member
  • **
  • Posts: 25
Infected with VBS: Malware (Script) allthough avast running...
« Reply #4 on: May 27, 2003, 08:05:34 AM »
I looked at the script sensitivity level after I wrote the previous message and it was to custom, allthough i put it at high yesterday, is it to custom because I unchecked Mozilla and Netscape and the splash screen? If yes what is the level, high or normal?
« Last Edit: May 29, 2003, 07:43:20 PM by hariskar »

Offline hariskar

  • Jr. Member
  • **
  • Posts: 25
Infected with VBS: Malware (Script) allthough avast running...
« Reply #5 on: May 27, 2003, 10:25:32 PM »
I found again this script today in a whole system scan in this file: C:\Documents and Settings\dex\Local Settings\Temporary Internet Files\Content.IE5\2P8FYTQ5\index4[1].htm
« Last Edit: May 29, 2003, 07:43:35 PM by hariskar »

Offline hariskar

  • Jr. Member
  • **
  • Posts: 25
Infected with VBS: Malware (Script) allthough avast running...
« Reply #6 on: May 28, 2003, 02:55:19 PM »
In a whole system scan, I found again the same script (VBS: Malware (Script))in this file: C:\Documents and Settings\dex\Local Settings\Temporary Internet Files\Content.IE5\09UZCHQZ\doa2.host[1].
« Last Edit: May 29, 2003, 07:43:58 PM by hariskar »

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11665
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:VBS: Malware (Script)
« Reply #7 on: May 28, 2003, 07:05:51 PM »
You can send the file to us (e.g. to support@avast.com or divis@avast.com) to see what's really inside -- it's hard to tell from the name.

Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

Offline hariskar

  • Jr. Member
  • **
  • Posts: 25
Infected with VBS: Malware (Script) allthough avast running...
« Reply #8 on: May 29, 2003, 02:55:29 PM »
Any news about this script?
« Last Edit: May 29, 2003, 07:44:15 PM by hariskar »

Offline hariskar

  • Jr. Member
  • **
  • Posts: 25
Re:Infected with VBS: Malware (Script) allthough avast running...
« Reply #9 on: May 30, 2003, 07:09:20 AM »
Again the same virus in this file: C:\Documents and Settings\dex\Local Settings\Temporary Internet Files\Content.IE5\G98P6ZO5\index[1].htm.
Could you please tell me what is happening here???

Offline kareld

  • Avast team
  • Jr. Member
  • *
  • Posts: 32
    • ALWIL Software
Re:Infected with VBS: Malware (Script) allthough avast running...
« Reply #10 on: June 02, 2003, 10:16:39 AM »
Dear  Hariskar,
   VBS:Malware is a generic name for a lot of different pices of malware. We are not able to tell what it really is without the infected file. Please send it to me, divis@asw.cz, or to support@asw.cz for analysis.

Offline ghj290

  • Newbie
  • *
  • Posts: 11
Re:Infected with VBS: Malware (Script) allthough avast running...
« Reply #11 on: June 02, 2003, 11:34:07 AM »
Download Internet Sweeper from here:- http://www.bmesite.com/  this will delete the index.dat file and the malware along with it.  As with the above poster I kept getting this on every scan and because the malware file is in the index.dat file it can't be moved to the chest or deleted by Avast, as it can't be moved to the cheat it isnt possible to send it to Avast.

HTH,
Trev

Offline hariskar

  • Jr. Member
  • **
  • Posts: 25
Re:Infected with VBS: Malware (Script) allthough avast running...
« Reply #12 on: June 02, 2003, 01:42:09 PM »
kareld I sent you the file attached in an email. Thanks for helping!


ghj290 avast can delete the file, but after one or two days I find it again in my pc...
« Last Edit: June 02, 2003, 01:42:37 PM by hariskar »

Offline joanlui

  • Full Member
  • ***
  • Posts: 136
  • FORZA ASCOLI!
    • FORZA PICCHIO
Re:Infected with VBS: Malware (Script) allthough avast running...
« Reply #13 on: June 02, 2003, 06:19:17 PM »
I have the same virus Malware problem...It appears in HTML saved page (usually index.html)...I saved it in chest and I am sending it... ::)
Win7 32 64 bit, PcLinuxOs 2011 Lxde version

Offline joanlui

  • Full Member
  • ***
  • Posts: 136
  • FORZA ASCOLI!
    • FORZA PICCHIO
Re:Infected with VBS: Malware (Script) allthough avast running...
« Reply #14 on: June 02, 2003, 07:16:49 PM »
Ok...I sent it ti Avast! support for check...

I found this MALWARE by surfing this site: www.kazaalite.tk

Maybe it's a Kazaa virus... 8)
Win7 32 64 bit, PcLinuxOs 2011 Lxde version