Help - Search - Members
Full Version: Destructive Virus
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
jdessoliers
Greetings,

My client has a Kasp Admin Kit with Workstation 6.2.690. All his workstations have their Virus definitions up to date

A virus entered his network through an USB Stick. It spreaded itself through the network and infected various computers.
Besides of adding a few keys in the registry and replicating in various directories, his main action is deleting ALL the Excel files ( *.xls) on the hard disk.
Kaspersky does not recognize the file as a virus, but the proactive defense recognizes it as a WORM.P2P.GENERIC when it activates itself.
But Proactive Defense didn t deny the access though … Could you explain me why it infected the computer besides of being spotted for its strange behavior ?
The virus jumped onto a w2kserver and my client can t reboot it in SAFE MODE to make it disappear. What would be the next step ?


Symantec recognizes it as W32.Silly.FDC. Attached to this post a screenshot of Symantec warning.
I ve sent a mail to newvirus@kaspersky.com but I still don t have any news.


Please let me know if you have a quick fix for this.

Click to view attachment

jdessoliers
Good news for me,

I ve received a mail from newvirus@kaspersky.com

They ve told me that the Virus hash will be added to the next update.

svchost.exe_ - Virus.Win32.VB.ja

When can I expect to receive the "next update" ? How often do Kaspersky release updates ?

Beforehand, thanks
Caos
They are very very fast, I think than less one hour.

Regards
Sn328721
Octobers figures stated that an update had been released every 39mins on average
darqtanian
Hi is this really already solved? and is it already added on the virus definition file?
I can see that this is last year. but we've recently saw a kind of virus and analyzed it at Virustotal and had this result.

Virus Total

Which states that Kaspersky didnt know this kind of threat.
Im just worried that this might not be updated or this might be a new strain.
We've already sent the threat sample to Kaspersky and we are waiting for results.
dawinci
QUOTE(darqtanian @ 16.07.2009 01:12) *
Hi is this really already solved? and is it already added on the virus definition file?
I can see that this is last year. but we've recently saw a kind of virus and analyzed it at Virustotal and had this result.

Virus Total

Which states that Kaspersky didnt know this kind of threat.
Im just worried that this might not be updated or this might be a new strain.
We've already sent the threat sample to Kaspersky and we are waiting for results.

Hi,

please have a quick look at Virus Watch. Classified 'Virus.Win32.VB.ja' is detected since 9th of January 2008, 19:39 and released with databases at 23:10. Time between detection and update release is for QoS.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.