NEW Virus

[system]

There is a new virus that Avast form not detected.

hXXp://www.box.net/shared/ki8c63yghz
Pass Unrar: 123

Add 2 Virus

hXXp://www.box.net/shared/u18rfs3qdk

hXXp://www.box.net/shared/yts4fucfj6

Pass unrar :123

Thank!

[system]

Please edit your post and change the http to hXXp to protect others from malware if they click on it accidentally. Thank you.

[system]

Virus in file .RAR has password protected, OK

[system]

To edit your first post, go to the top of the posting page and you will see the Modify button > click on it > delete your hyperlink > repost it not as a hyperlink and change it to hXXp…to protect others.

Have you submitted this to VirusTotal http://www.virustotal.com/ for analysis? If so, please post their results.

[system]

Now that you know how to edit…you need to edit the additional links you just added to your first post. Get rid of the http and change them to hXXp so others cannot accidently get malware.

[system]

Here are the results on tolta Virus

http://i1006.photobucket.com/albums/af189/huuchinhvn/chinh/a.png

[system]

Thank you for editing your post and the Virus Total report. I’m sure the Avast Team will be updating their definitions, if they haven’t already.

[system]

a Virus continue

hXXp://www.box.net/shared/d1rab272ve

Pass: 123

result on http://www.virustotal.com

http://i1006.photobucket.com/albums/af189/huuchinhvn/chinh/1-2.png

[DavidR]

Please don’t create multiple topics about the same thing.

All samples should be sent directly to avast, as I mentioned in your other topic.

@DavidR

Send the sample/s directly to avast as a Undetected Malware:
Open the chest and right click in the Chest and select Add, navigate to where you have the sample and add it to the chest (see image). Once in the chest, right click on the file and select ‘Submit to virus lab…’ complete the form and submit, the file will be uploaded during the next update.

Or

Send the sample to virus (at) avast (dot) com zipped and password protected with the password in email body, a link to this topic and or VT results page, etc. might help and undetected malware in the subject.

[polonus]

Hi huuchinhvn,

This is not a new virus but a new variety of brontok, can be removed using this removal tool:
http://www.sophos.com/support/disinfection/brontok.html
Kaspersky’s removal tool for brontok: http://dnl-eu5.kaspersky-labs.com/utils/klwk/klwk.zip
Bitdefender’s removal tool for brontok: http://download.bitdefender.com/resources/files/Download/en/AntiBrontokA-en.exe
and there also the brontok washer: htxp://rapidshare.com/files/56703754/brontok-washer.zip (do not use because has files spoofed as archives),

polonus