Sophos

Sophos blogs

Sus/Scribble-A

Category
Type
What's been detected
  • Sus/Scribble-A exhibits characteristics commonly, but not exclusively, found in malware.
What to do

Summary

 
Affected operating systems Windows
Protection available since 17 March 2009 03:52:26 (GMT)
Last updated 21 October 2009 11:25:28 (GMT)
Detected by Sophos Anti-Virus for Windows, version 9

Action

Your options.

If you've received an alert, then you have 2 options:

  • authorize the file
  • send the file to the lab for analysis

Authorize the file if it's from a trusted source.

Send it to the lab for analysis if you:

  • do not trust the file
  • or believe it to be compromised in some way

To reduce the chance of unwanted detections, Sophos HIPS should be set to 'Alert only' mode for the duration of any software installations. For more information, please read the knowledgebase article about deciding whether to allow or block a file.

Sending a file to the lab?

When you complete the sample submission form, please give a reason for your submission and mention this "HIPS/" detection.

More Information

Sus/Scribble-A is a file that displays characteristics or behavior typically associated with the Scribble or Vetor family of polymorphic viruses.

Please send a sample to Sophos to assist in improving our technology.

NB since the virus sometimes corrupts the file during infection, it may not be possible to disinfect all files detected as Sus/Scribble-A.

RSS|Atom
Get reports about the latest suspicious behavior and file detections delivered to your computer