SemiAntivirus.VBS

[scrtsqurrl]

It's runnining rife on my PC. Seems to have spread through an autorun.inf flash drive run event.

I have submitted this to ESET and I am not getting detection. Can someone help thanks

~EC edit: Link to possible malware removed~

[scrtsqurrl]

So should I resubmit or I'd like to get my PC cleaned up by NOD32.

[funkydude]

You can submit new malware samples to samples("at")eset.com in a zip file with the password "infected" with this threads URL in the subject.

[scrtsqurrl]

Originally Posted by funkydude

You can submit new malware samples to samples("at")eset.com in a zip file with the password "infected" with this threads URL in the subject.

I did that. Still nothing. No detection / no email reply / I guess ESET don't care.

[funkydude]

Originally Posted by scrtsqurrl

I did that. Still nothing. No detection / no email reply / I guess ESET don't care.

You will need to wait a few days until you're next in the queue of mail.

[scrtsqurrl]

Originally Posted by funkydude

You will need to wait a few days until you're next in the queue of mail.

Submitted sample through NOD32 on 11/11/2008 - Sent follow up email a week later. Posted here on Wilder's. Really feels like ESET don't care.

[Marcos]

Originally Posted by scrtsqurrl

I did that. Still nothing. No detection / no email reply / I guess ESET don't care.

Did you actually protect the archive with a password? We haven't received anything at samples[at]eset.com with a thread to Wilders in the url today. Could you upload it somewhere and send just the url to the file?

[funkydude]

Originally Posted by Marcos

Did you actually protect the archive with a password? We haven't received anything at samples[at]eset.com with a thread to Wilders in the url today. Could you upload it somewhere and send just the url to the file?

Is it just me or are you repeating this A LOT lately? You might want to consider there's something wrong with the account.

[scrtsqurrl]

Originally Posted by Marcos

Did you actually protect the archive with a password? We haven't received anything at samples[at]eset.com with a thread to Wilders in the url today. Could you upload it somewhere and send just the url to the file?

Ahh. I don't think I .zip'ed up the file. I'll do that right away right now.

I also didn't zip it up when I sent the sample through NOD32.

[scrtsqurrl]

Bueller, Bueller, Bueller, ESET *cough* Bueller?

Feels like I and my three 2 year licenses of NOD32 don't matter to ESET.

[Marcos]

Originally Posted by scrtsqurrl

Bueller, Bueller, Bueller, ESET *cough* Bueller?

Feels like I and my three 2 year licenses of NOD32 don't matter to ESET.

Your post doesn't make any sense to me. By the way, that simple vbs script is detected from version 3644.

[scrtsqurrl]

Originally Posted by Marcos

Your post doesn't make any sense to me. By the way, that simple vbs script is detected from version 3644.

Thanks Marcos!

Now if only NOD32 scanned the registry and cleaned up the keys that were left by the autorun.inf and the semiantivirus.vbs.

At least all my thumb drives are now clean.

[Marcos]

Both v3 and v4 remove all references to malware when deleted from the disk.

~ removed by me and transformed to a PM ~

[CivilTaz]

Originally Posted by HiTech_boy

~ removed by me and transformed to a PM ~

TOP SECRET ?

Originally Posted by CivilTaz

TOP SECRET ?

No . I am not happy with the VirusLab ,too and their "actions" recently ... and I wrote too long post which might disappointe somebody , so I sent it to Marcos via PM . Not that I expect anything to change from that PM but ...

[CivilTaz]

Originally Posted by HiTech_boy

No . I am not happy with the VirusLab ,too and their "actions" recently

Yeah, i know what u are talking about.

[scrtsqurrl]

The only thing that annoys me about NOD32's detection is that it takes too long for the signatures to be updated for current spyware's.

I have examples of where Free products such as Avast! and AVG add detection or offer timely detection before ESET. Makes me wonder if it's really worth paying for Antivirus.