Does avast detect? Yes, it does!

Viruses and worms
1

Hi malware fighters,

VBS malcode found here:

Threat Name: VBS.Runauto avast detects as VBS:Solow-L [Wrm]
Location: htxp://663580359755569.baidu20.info/go/ie.vbs

Threat Name: VBS.Runauto and avast detects as VBS:Solow-L [Wrm]
Location: htxp://448365145540354.baidu20.info/go/ie.vbs

remover: http://raisencrantz.blogspot.com/search/label/Script%20Virus%20Remover

pol

2

Good to see these detected, thanks for informing us polonus

3

VirSCAN - ie.vbs - 11/36
http://virscan.org/report/82472f5191bff35c027ea9a9c2454ca6.html

always get some strange results on Virscan, avast and Bitdefender detect it, but not GData with latest update ?

4

Hi Pondus,

Must have something to do how these scanners are run and they do not run full heuristic services.
I have run the attached JS file (attached as txt file) against jotti and virustotal and only 1 detection:
Attached is a sample of viral javascript code in harmless txt format,
File size: 3134 bytes name analyse.txt
Filetype: Little-endian UTF-16 Unicode character data, with very long lines, with CRLF line terminators
MD5: 8bb23b26a56874b8464156d6db786542
SHA1: 0ab3b42c33e2255b431feeb39478b3585fa973ed
http://virusscan.jotti.org/en/scanresult/14a9ca66dbc05abd15777007cdf820fc9be68fe7

polonus

5

and now at VT

VirusTotal - ie.vbs - 25/41
http://www.virustotal.com/analisis/ef74a3349387a388a954febb6f99a980032aa4f294bdf2a7f4f346c3f42d4c90-1276793959

and here Gdata detect… ??? …and also F-secure, using bitdefender engine and i think nProtect since the detection is identical
but no detection on VirSCAN