VBS: Malware [Script}

I went to check my msn e-mail today and avast! popped up saying I have a virus/worm named VBS:Malware [Script]. The only option is gave me was to “abort connection” so I clicked it and now the page says the connection was reset (I am using Firefox as my web browser). I did a full scan on my pc using not only Avast! but AVG anti-virus as well and they detected nothing. My pc is clean. I made sure the scanners were both completely up to date just to be on the safe side and ran them both again and still nothing. I restarted my pc and tried to check my e-mail again and they same thing happened. Avast and AVG will not scan or clean the e-mail and I have yet to get a response from hotmail/msn on this. Does anyone know how to get the stupid thing out of my e-mail?

  • Kitty :-\

hey. ur not alone. i did the same thing, i checked my emails after i logged onto msn and yeh as u said a virus came up. i removed both of the 2 that pop up. but now i cant check my emails ever!!! please help us!!!

Just (7/27/07) started getting the VBS: Malware message. Got annoyed. Read the posts. Then, on a whim, went to my MyMSN page,
where I have my Hotmail setup as one of my modules. The list showed up - double clicked on it - went straight to the message, no problems. Went from message to message using up, down. and delete: no problems. Clicked on the Inbox link - up popped the warning again. So - a workaround of sorts.

Also - I noticed that when I go to my Hotmail page normally, and the warning message comes up, I can still see the message list. So again, on a whim, I clicked on one of the messages and it opened right up! The warning was still there, but I just moved it out of the way and kept reading.

All this was done in Firefox, XP2SP2, Avast free version. Haven’t tried it in IE…

This virus looks to be embedded in the hotmail inbox link html, i have had 3 phone calls already for three different hotmail accounts from 3 relatives . My accounts where fine until an hour ago when one of them started getting the virus, the other is still good but bet that magration will end it at some point also.It seems the emails are intact as the scanner is hitting on an html file that is trying to be downloaded into the ie 5 content section of the windows temp internet folder. As long as you close the connection and close any open internet explorerer windows then choose the send to “chest” command it will clean. If that generates an access violation error then choose the delete command. If the delete works your done, if you send to chest then i would suggest going into the chest and manually deleting the infected files. Once cleaned any access to the hotmail “Inbox” will re-infect the system.

I would suspect that Hotmail will need to fix their servers and would bet that this one will make the daily news, can just imagine how many people it’s going to effect. I feel for anyone not running anti-virus as those people will most likely have the file actually get onto the hard drive, to do who knows what after that.

My suggestion would be to clean it if you get it and stay away from the inbox on any hotmail accounts until more information comes out. I saw this start about 2400 EDT and these are the first comments i have seen, will most likely be thousand of threads on this come morning.

It will not make the news. This is only affecting avast users and only since the last avast VPS update.

Yeah, probably false alarm in new script malware detection engine.

If you can, please stop the web protection go to the page causing the false alarms, save the complete page.

Then try to scan with on-demand scanner. If it catches something, zip that sample and send it to virus@avast.com with link to this discussion and asking for false alarm removal.

Thanks!

then from the sounds of it, this is all on Microsoft’s side. I’ve already sent their support team three e-mails about the problem and I’m still waiting for their response. If they reply back to me, I’ll pass on what they tell me.

This problem is only affecting - as far as I can test - those free Hotmail/MSN accounts that have not yet been converted to Hotmail Live.

So, one other workaround is to click on the green button (upper left) that invites you to switch to Hotmail Live then avast will let you get your email in peace.

It is not Microsoft’s problem - it is avast’s.

Confirming that VPS 761-1 has corrected the Hotmail retrieval problem in IE, Firefox and with the Thunderbird mail client

I have the same problem, but the latest VPS ipdate is supposed to fix this

Not supposed to, it has fixed it.

I have a similar problem to this but with BTwebmail. I have 2 computers at home with Avast & it is coming up with only option to abort connection. I also use a computer at work, not with AVAST & am able to pick up website. Is this a false alarm & when is it going to be fixed

We will need more information on the detection without it it can’t be investigated, malware name, location break any URL so it isn’t active, e.g. http :// www . example-site.com.

Check the avast! Log Viewer (right click the avast icon), Warning section, this contains information on all avast detections.