Help - Search - Members
Full Version: ntv.vbs
Kaspersky Lab Forum > English User Forum > Virus-related issues
Ryanick
Hi,

PLease check attachments. Kaspersky Cannot Detect this virus. Hope someone can help to resolve this problem.

Description

Once ntv.vbs is loaded. IE will be redirected to www.youngerbabes.com website PLease see below other antivirus that detected this as virus from virustotal.com

File ntv_virus.zip received on 2010.04.10 05:04:18 (UTC)
Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.04.09 -
AhnLab-V3 5.0.0.2 2010.04.09 VBS/ScriptWorm
AntiVir 7.10.6.55 2010.04.09 HTML/Rce.Gen
Antiy-AVL 2.0.3.7 2010.04.09 -
Authentium 5.2.0.5 2010.04.09 VBS/Autorun.AM
Avast 4.8.1351.0 2010.04.09 -
Avast5 5.0.332.0 2010.04.09 -
AVG 9.0.0.787 2010.04.09 Citem_c.AN
BitDefender 7.2 2010.04.10 Generic.ScriptWorm.EBB0672D
CAT-QuickHeal 10.00 2010.04.09 -
ClamAV 0.96.0.3-git 2010.04.10 -
Comodo 4552 2010.04.10 UnclassifiedMalware
DrWeb 5.0.2.03300 2010.04.10 SCRIPT.Virus
eSafe 7.0.17.0 2010.04.08 Win32.VBS.StartPage
eTrust-Vet 35.2.7418 2010.04.09 -
F-Prot 4.5.1.85 2010.04.09 VBS/Autorun.AM
F-Secure 9.0.15370.0 2010.04.09 Generic.ScriptWorm.EBB0672D
Fortinet 4.0.14.0 2010.04.08 -
GData 19 2010.04.10 Generic.ScriptWorm.EBB0672D
Ikarus T3.1.1.80.0 2010.04.10 Generic.ScriptWorm
Jiangmin 13.0.900 2010.04.09 -
Kaspersky 7.0.0.125 2010.04.10 -
McAfee-GW-Edition 6.8.5 2010.04.09 Heuristic.Script.Rce
Microsoft 1.5605 2010.04.09 Worm:VBS/Autorun.AT
NOD32 5014 2010.04.09 -
Norman 6.04.11 2010.04.09 -
nProtect 2009.1.8.0 2010.04.06 Generic.ScriptWorm.EBB0672D
Panda 10.0.2.2 2010.04.09 -
PCTools 7.0.3.5 2010.04.10 -
Prevx 3.0 2010.04.10 -
Rising 22.42.04.03 2010.04.09 -
Sophos 4.52.0 2010.04.10 -
Sunbelt 6159 2010.04.10 -
Symantec 20091.2.0.41 2010.04.10 VBS.StartPage
TheHacker 6.5.2.0.258 2010.04.09 -
TrendMicro 9.120.0.1004 2010.04.10 Mal_Otorun3
VBA32 3.12.12.4 2010.04.09 -
ViRobot 2010.4.9.2269 2010.04.09 -
VirusBuster 5.0.27.0 2010.04.09 -

edit: del attachment: ntv_virus.zip ( 1.27K ) Number of downloads: 0
richbuff
Please do not attach questionable items on the forum. Instead, please see the first and third Important topic, and send it to the Lab, and attach the zipped virusinfo_syscure.zip.
Ryanick
Hi richbuff,

Sorry about that.


Can someone analyze the getsystem info log file I attached? The Website is still popping up.
richbuff
Repeat:

Please:

1) see the first Important topic, and attach the requested .zip, and gsi link.

2) see the third Important topic, and send it to the Lab.

/repeat.
Ryanick
Hi

Hope Got This right smile.gif

http://www.getsysteminfo.com/read.php?file...092a3c5859a4007

I analyzed what the virus does please see attachments.

I already have the following files and sent it to kaspersky helpdesk.

1. dns_cache.vbs
2. ntv.vbs
3. prn_share.vbs

richbuff
Please attach the zipped virusinfo_syscure.zip; instructions, see: http://forum.kaspersky.com/index.php?s=&am...st&p=678334
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2014 Invision Power Services, Inc.