Click to See Complete Forum and Search --> : VBS/Vipina...what is it?


PrDeltoid
January 20th, 2004, 04:24 PM
So I got this user who, upon boot of her Win98 box, got a warning from McAfee that she was infected with "VBS/Vipina". The file infected was an .ini in the Network Associates directory on the local HDD (file was called 104.ini) and it was hidden. Deleting or cleaning it wouldnt work. I ran an upto date scan on her machine and on her home directory/network directories as well.

In the meantime I hit the 'net looking for more info. Hrmmm...nothing at trusty old www.antivirus.com. I hit McAfee's Virus Encyclopedia. NOTHING!? Hrmm. Sohpos nothing. Noroton zip. I was at my wits end. Google only came back with a readme.txt from McAfee saying that yes, their scanners picked it up, but that was it.

So, about this time the VScan finishes with no infectied items! Grrrr! I was back at square one! Rebooting sadly, only showed me normal operation (which I would normally be exstatic about). Heres, my questions for the uber brains out there:

1.) What the heck is VBS/Vipina? More so, what does it do?
2.) Anyone else come across this? And
3.) Should I be worried?

Like I said. Her machine is up-to-date now, both Security Patches and AntiVirus Dats. When she boots now, there are now warnings or anything.

Normally, I love it when stuff works, but not when theres a problem and then it disappears with out me knowing what happend, why it happend or anything like that! To many really bad problems start out that way. ;)

Thanks in advance.
pr

ADisturbance
January 21st, 2004, 08:01 AM
The link below should tell you what you want to know about that virus. It appears to be a script virus of some type.

https://www.ucalgary.ca/ftp/micros/datfiles/mac/virex7/virlist.txt

eboyjones
January 21st, 2004, 08:14 AM
If you scroll way down on this list it lists it as a script virus.

https://www.ucalgary.ca/ftp/micros/datfiles/mac/virex7/virlist.txt

funny the Universtiy of Calgary has info but not McAfee.
But not how to remove it.

Stalemate
January 21st, 2004, 11:34 AM
McAfee DAT Version 4312 lists it as of Dec. 31 2003.