chat_with_savita.txt.vbs

Viruses and worms
1

Hi all,
I recently encountered this virus on one of USB drives I use. I have attached the virus file herewith. Also, it went undetected when ran a scan with Avast Free Antivirus 2014.9.0.2021. The virus definitions are also up-to-date.
A forum: http://how-to-remove.us/chat_with_savita-txt-vbs/ mentions a detection rate of 2% of this virus.

2

I guess MCShield will stop it … www.mcshield.net

all those detecting as Trojan.Vbs.UBF are using Bitdefender engine
https://www.virustotal.com/nb/file/d081c7d1ab2dafcab2bf440cb9faf22cef57265b369ec2afa64617cae2ba1454/analysis/1413063176/

3

Interesting. Monitoring.

4

Is this supposed to be some sort of VS Worm infection?

5

Norman

===============================================================================
Hi,

File is encrypted and after decryption we didn’t get any malicious activity. Virus total and other AV are detecting on the basis of encryption not on any malicious activity.

Thanks

from F-secure after i told them what Norman said

Hello,

Thank you for your clarification.

However we decided the detection will stay valid due to the content of the file which might be related to a malicious activity.

Best regards,

Sophos and Avira added detection for it …

6

I haven’t seen any malicious activities by it on my system monitor, but the VBS file transfers itself to every drive plugged into the system and makes a copy of itself in all level 1 subfolders. I tried manually deleting it, and as expected no use. A clean format helps, but can not be permanent solution…
And funny to see some other anti-malware being mentioned on Avast official forum ;D ;D Still, will try that…

7

Sorry, no help using MCShield…

8

two months later, only 13 detect, and half of them use Bitdefender engine
https://www.virustotal.com/nb/file/d081c7d1ab2dafcab2bf440cb9faf22cef57265b369ec2afa64617cae2ba1454/analysis/1417802288/

read my post above with info from Norman lab …