Trojan-Downloader.Win32.VB.fpn not found!!

Learn about Computer Security Virus/Malware Removal Assistance
1

Had a suspicious file and scanned it with CAVS 2.0 beta and then I uploaded it to kaspersky filescan and it found:
Trojan-Downloader.Win32.VB.fpn

where do I go from here?

2

Please send it up to :

Put it in a rar file and secure it. Then don’t forget the pass in the mail ;). Also tell them te detection Kaspersky gave.

Thx in advance :slight_smile:

Xan

3

encrypted the files in a rar file so that it would send through gmail…but sent :slight_smile:

4

about a day later now and the data base still hasn’t been updated…sophos and nod32 along with kaspersky (as mentioned) also detect this as a virus…common guys :stuck_out_tongue:

5

If you havent noticed already and by now CAV 2 is BETA. Comodo is working on CAVS 3.

6

well I’m under the assumption that 3.0 will use the signature files from 2.0 for detecting viruses? So isn’t it worth including the virus signature now?

7

Jonathan, If the file you submitted to comodo is malacious, comodo will include it as soon as they can In CAVS3.

8

There will be more signatures in CAV3 with the new technologies, etc introduced.

Josh

9

Hey guys,

just installed the beta, rescanned the files…nothing is to be found…?

I sent the files to the email address…I guess no one got around to it yet?

Thanks in any case,
Jonathan

10

Did you follow these instructions?

Josh

11

just resent the files…hopefully something will be done :slight_smile:

cheers,
Jonathan

12

You cannot send .exe’s through Gmail… Maybe that’s the problem. It’s annoying!!!

You could rename the file " Virusname.exx " and include a note to change it to .Exe

13

this has gone on long enough and is freakin pathetic.

Here’s my second email:

From: Jonathan - xxx@gmail.com
Date: Sat, Oct 4, 2008 at 9:34 PM
Subject: SUSPICIOUS FILE SUBMISSION
To: malwaresubmit@avlab.comodo.com

To whom it may concern…these files still haven’t been added to the
virus database.
Please see my post regarding this:
https://forums.comodo.com/virusmalware_removal_assistance/trojandownloaderwin32vbfpn_not_found-t26386.0.html

password to the rar file is “infected”

Kind Regards,
Jonathan

infected_files.rar
195K Gmail could not scan this file for viruses.

I don’t understand how these files still haven’t been added to the virus database? What is this, a bad joke?..I’m spoon feeding you new viruses that you can add to your database.

I think I’m going to shell out some money for either kaspersky or nod32 at this point. Thanks for trying though.

Jonathan

14

Jonathan,

There is ALOT of Samples submitted all the time.

Last week, In just 24 hours, 2 GIG worth of samples were submitted (Between August & Now it would NOW be ALOT more). It takes time, And everything is building up, the entire back-end infrastructure is in progress, like pre-analyzing malware automatically, etc. The guys are from what I heard are burning mid night oil at the labs, Sorry your sample couldn’t be added sooner. It takes around 20 mins to Analyse a file, then add it to the database (Well, if you want it done properly to avoid false positives as much as possible - which is always a common case), But everything is building up and being worked on… This is only the beginning, Melih (CEO, COMODO) Will tell you the same thing.

Infact, You can email Melih your sample, And it will go right to the top. I PMed you his Private Email.

Josh

15

Jonathan, You can’t send Excutables VIA gmail unless they are encrypted.