my computer was infected by this .vbs worm, on the system as .MS32DLL.dll.vbs and avast home 4.7 with the updated definition does not detect it.
This worm or virus seems to copy itself to the system via removable storage, e.g. handy drives and usb memory sticks.
I found some info on this, godzilla or zogilla or solowa as mentioned in the reports below, I dont know which flavor I got anyway I sent it zipped to virus@avast.com
You will not normally get a reply unless they require more information, they receive in excess of 4000 emails a day at that address.
If you still have the sample, add the file to the User Files (File, Add) section of the avast chest and send it from there (select the file, right click, email to Alwil Software), it won’t hurt to send it again. No need to zip and PW protect when the sample is sent from chest.
Submissions from the chest get filtered, so should hopefully stand out from the crowd and in the avast chest it can do no harm and you can periodically scan it to see if it has been added to the VPS.
I added it to the chest and sent it like you said.
Some more info on this virus:
it resides on the root of every drive and in c:\windows
it creates a file ‘autorun.inf’ on the root of every drive, containing :
[autorun]
shellexecute=wscript.exe .MS32DLL.dll.vbs
it looks like viewing a folder where the virus resides (drive root) in explorer activates the script.
For one brief second you see the file (the first time) and then it vanishes.
it will start a process called wscript, visible in task manager.
If you dont kill this process the virus file ms32dll.dll.vbs remains invisible. -when you change ‘show hidden files’, it will not take effect, as long as wscript is running.
It also changes the search behavior the windows search application to search for files.
it is a pain to remove all files and registry edits, to get infected 5 minutes later as soon as someone hands over his usb memory stick.
It seems to be extremely common and present on every computer I came across here in Bangkok!
I hope this virus will be detected by avast or that there will be a fix.