Report Unknown Virus

Avast Free Antivirus / Premium Security
1

Infect USB storage device and not detected by many antivirus including avast

Activated by double click on the device and release an AdobeR.exe to C:\windows

Open the USB disk to find (Show hidden files of course)

AdobeR.exe & autorun.inf

To kill it manually

1.kill the process AdobeR.exe

2.delete AdobeR.exe & autorun in USB device

3.delete AdobeR.exe in C:\windows

4.find out and delete all AdobeR related registry

5.run msconfig and remove the startup AdobeR option

I’ll try to get a sample later since I’ve already deleted it…

Hope avast to be the first to be able to detect it.

Nothing to do with Adobe, just a similar name

2

I managed to get a sample, to whom should I mail it?

3

Send an email with the file (false positive or infected) to: virus@avast.com

You can use Alwil FTP server as a second way to transfer only big files. Upload them to ftp://ftp.avast.com/incoming (please, note that you won’t have READ access to the ftp server, just write - so you won’t even be able to see what you’ve just uploaded).

You can zip and password the files… Inform a link to this thread and the password used.
You can send the files to Chest and, from there, resend to Alwil for analysis.
Thanks. :slight_smile:

4

I tried the FTP server, but failed because of poor link speed

So I mailed it to the email above

Question is : In the 3rd method, how can I move it to chest while avast don’t detect it?

5

Go to avast! Simple user interface, then open the chest, then go to user files, add a new file option toward the top of the chest. Add the file to the chest, then delete the original.

Regards,

Justin

6

thank you !

7

Hi,

My pleasure, hopefully the avast! team will get on that virus sample quickly.