Avira missing downadup worm

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Latest deinfitions of avira, completely missing what i believe are variants
of the downadup worm.

The bastard seems to be causing explorer DEP, renames essential windows
login files, creates autorun.inf on attatched usbs, which point either to a
recycler folder and a 'boot' file or a mispelled recycler folder, causing
the infection to be passed on, other files are alos infected on the drive.

Beware neither avira, malwarebytes or superantispyware picked up any of
these.

Gaz



Re: Avira missing downadup worm



Gaz wrote:
Quoted text here. Click to load it
Do a find for David Lipman's post on his mult-av scanning methods for help.
Try putting in multi av in the message box in Find and you should find a
post by Lipman on 11Feb09.



Re: Avira missing downadup worm

On 02/13/2009 05:08 AM, Gaz sent:
Quoted text here. Click to load it

                       *** Cross Posted ***

Hello Gaz:

If you have any suspected malware files, send them to:

                 <http://www.virustotal.com/

for possible identification.

If you receive evidence to corroborate your theory, also pass those
files to the Avira, Malwarebytes and SUPERAntiSpyware folks for their
examination and inclusion in their databases.

Warm regards,

Pete
--
1PW  @?6A62?FEH9:DE=6o2@=]4@> [r4o7t]

Re: Avira missing downadup worm

Quoted text here. Click to load it

Another acquiantance  of mine having installed Avira premium installed
in his PC did miss it also... It was not even recognized as
conficker,downadup, kido etc, but just plain recycler.

Re: Avira missing downadup worm

on 13/02/2009, Gaz supposed :
Quoted text here. Click to load it

You can send Avira any file and if it contains a virus they will
include it, they will also tell you if it does not contain a virus.

--
Privacylover: http://www.privacylover.com



Re: Avira missing downadup worm

says...
Quoted text here. Click to load it

Chris, Stalking on the internet is a crime, you are warned that you will
be reported to your providers if you continue.

Learn more about Butt's lack of ethics and obsessions in the links
below.

--
Leythos - spam999free@rrohio.com (remove 999 to email me)
Public Service Warning: Learn about PCButts before you trust:
http://www.velocityreviews.com/forums/t513604-author-of-removeit.html
http://www.google.com/search?hl=en&q=pcbutts1+thief
http://tinyurl.com/4rruwd

Re: Avira missing downadup worm

Quoted text here. Click to load it

Gee, ya think ya know someone - an' he turns out to be trollthief.

...is nothing sacred?



Re: Avira missing downadup worm


Quoted text here. Click to load it

If you would like to submit them to http://uploads.malwarebytes.org I'll
see that we do detect them with a future update.


--
Regards,
Dustin Cook
Malware Researcher
MalwareBytes - http://www.malwarebytes.org
  


Re: Avira missing downadup worm


Quoted text here. Click to load it

You may also add me to the displeased user list. He'll block my software
(BugHunter) but so far, I don't get the recognition David has been given.
I want my spotlight too!


--
Regards,
Dustin Cook
Malware Researcher
MalwareBytes - http://www.malwarebytes.org
  


Site Timeline