Open-AudIT
https://www.open-audit.org/phpBB3/

kaspersky 6 detect audit.vbs like a virus trojan.gen dowload
https://www.open-audit.org/phpBB3/viewtopic.php?f=8&t=2487
Page 1 of 2

Author:  exmachina [ Wed Nov 21, 2007 5:36 am ]
Post subject:  kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

hi,
it's just for say that :
kaspersky 6 server + workstation detect audit.vbs like a virus trojan.gen dowloader in my domain.

Author:  Deetz [ Sat Nov 24, 2007 2:20 am ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

Yes I also have this problem at work, and it is annoying because it was only recently that installed Kaspersky on all machines.

And so far I haven't found a 100% work around. I've found if you add *audit.vbs* to the allowed list AND uncheck Microsoft script checking in Web-Anti-Virus you can then run audit.vbs. But then whenever kaspersky does regular scans it still finds the VBS and complains.

Anyone else have to deal with this and have a better solution?

Author:  A_Hull [ Sat Nov 24, 2007 2:26 am ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

Other than NOD32 ? http://www.eset.com/

Is it the name (audit.vbs) or the simple fact that it is a VBS file?

Author:  exmachina [ Sun Nov 25, 2007 3:37 am ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

In my opinion ,
it's the use of a specific function in the script.

for example :
kaspersky detect virus gen trojan in simple ".bat" files containt format c:\ command line,

Author:  Deetz [ Mon Nov 26, 2007 10:58 pm ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

[quote="A_Hull"]Other than NOD32 ? http://www.eset.com/

Is it the name (audit.vbs) or the simple fact that it is a VBS file?Yeah I personally think NOD32 is one of the best out there, but wasn't my decision to go with Kaspersky.

It has nothing to do with the name but with some of the code in it. I don't realistically expect that there will be a way to change the VBS script so kaspersky doesn't complain, but just to get Kaspersky to be quiet and not try to delete the file would be nice.

Author:  A_Hull [ Tue Nov 27, 2007 1:34 am ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

Do the log files give any clues? Is it detecting it as a particular virus, or just warning generally that it doesn't like the look of it?

Author:  Deetz [ Tue Nov 27, 2007 1:57 am ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

It always detects virus gen trojan for me. And by default if you enter a directory with audit.vbs in it you can't copy the file or anything.

The only options are to delete, quarantine, or temp skip a file which really does nothing. Because users are working with laptops outside of the network I was hoping to have audit.vbs run at a specific time but I need to work around this Kaspersky issue first.

Author:  A_Hull [ Tue Nov 27, 2007 7:45 pm ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

I take it that simply renaming audit.vbs as openaudit.vbs or fred.vbs is not enough to have it stop complaining :?

Author:  Deetz [ Fri Dec 21, 2007 2:32 am ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

Sorry for the late reply but yeah no matter what I tried to allow in Kaspersky or what features I removed nothing worked.

Today I emailed Kasperksy and apparently this issue is now fixed. Hoping maybe tomorrow morning after an update everything will run smoothly. I plan to have remote users run the script, and they all have Kaspersky installed.

Author:  A_Hull [ Fri Dec 21, 2007 8:22 pm ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

Good to see Kaspersky following up on your problem, let us know how things go. :D

Author:  kraft [ Sun Mar 16, 2008 8:32 pm ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

Hi,

There is about four monts aftery Your post and I have the same problem with Kaspersky AV.
How about yours ?

Author:  MAS [ Mon Mar 24, 2008 10:42 am ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

Hi

Same for me, but we use F-SECURE (workstation and server).

Malicious code found in file audit.vbs.
Infection: Trojan-Downloader.JS.gen
Action: The file was quarantined.

Author:  shankwc [ Thu Jul 24, 2008 4:24 am ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

Has anyone figured out how to keep AV software from flagging and/or deleting audit.vbs? Perhaps it's time to make the audit script an executable?

Author:  A_Hull [ Thu Jul 24, 2008 6:12 am ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

There must be a similarity between Trojan-Downloader.JS.gen and audit.vbs can we find out a bit more from F-Secure and Kasperski, they should be able to help.

Author:  ptah_be [ Fri Jul 25, 2008 11:07 pm ]
Post subject:  Re: kaspersky 6 detect audit.vbs like a virus trojan.gen dowload

Is there a solutions for this? As I have the same problem with Kaspersky 6.

Page 1 of 2 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/