vbs.drink.a

Discussion in 'NOD32 version 2 Forum' started by davidraven, Mar 6, 2009.

Thread Status:
Not open for further replies.
  1. davidraven

    davidraven Registered Member

    Joined:
    Mar 6, 2009
    Posts:
    2
    I've had a customer report that NOD32 v2.7 is reporting an attempt to download a worm/trojan named vbs.drink.a from the following web page:

    out-law.com/page-9639

    Can anyone else produce the same error and let me know what the full error message is?

    Kind regards


    David Raven
     
    davidraven, Mar 6, 2009
    #1
  2. Waterfox

    Waterfox Registered Member

    Joined:
    Mar 3, 2008
    Posts:
    118
    Location:
    Sweden
    Yes, NOD32 blocked that site stating that it's infected with VBS/Drink.A worm and that the connection's been terminated - quarantined.

    I'm using NOD32 v.4.0 so that's the only info I got on that threat.
    Sorry if that didn't help you much...;)
     
    Waterfox, Mar 6, 2009
    #2
  3. davidraven

    davidraven Registered Member

    Joined:
    Mar 6, 2009
    Posts:
    2
    Thanks for the reply

    Funny thing is, the site is template based and the pages:

    out-law.com/page-9638
    out-law.com/page-9639
    out-law.com/page-9640

    are all based on the exact same template. The only difference is the plain-text page content.

    Any ideas as to why this page alone would trigger an AV alert?

    Thanks in advance


    David Raven
     
    davidraven, Mar 6, 2009
    #3
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...