vbs.drink.a

Discussion in 'NOD32 version 2 Forum' started by davidraven, Mar 6, 2009.

Thread Status:
Not open for further replies.
  1. davidraven

    davidraven Registered Member

    Joined:
    Mar 6, 2009
    Posts:
    2
    I've had a customer report that NOD32 v2.7 is reporting an attempt to download a worm/trojan named vbs.drink.a from the following web page:

    out-law.com/page-9639

    Can anyone else produce the same error and let me know what the full error message is?

    Kind regards


    David Raven
     
  2. Waterfox

    Waterfox Registered Member

    Joined:
    Mar 3, 2008
    Posts:
    118
    Location:
    Sweden
    Yes, NOD32 blocked that site stating that it's infected with VBS/Drink.A worm and that the connection's been terminated - quarantined.

    I'm using NOD32 v.4.0 so that's the only info I got on that threat.
    Sorry if that didn't help you much...;)
     
  3. davidraven

    davidraven Registered Member

    Joined:
    Mar 6, 2009
    Posts:
    2
    Thanks for the reply

    Funny thing is, the site is template based and the pages:

    out-law.com/page-9638
    out-law.com/page-9639
    out-law.com/page-9640

    are all based on the exact same template. The only difference is the plain-text page content.

    Any ideas as to why this page alone would trigger an AV alert?

    Thanks in advance


    David Raven
     
Thread Status:
Not open for further replies.