Исследование антивирусов 5

[RobinFood]

Complete scanning result of "tr.exe", received in VirusTotal at 04.06.2007, 20:23:52 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.7.0 04.06.2007 Win-Trojan/Bzub.90840
AntiVir 7.3.1.48 04.06.2007 TR/Spy.BZub.AI.1
Authentium 4.93.8 04.06.2007 no virus found
Avast 4.7.936.0 04.06.2007 Win32:BZub-DA
AVG 7.5.0.447 04.05.2007 Proxy.LSH
BitDefender 7.2 04.06.2007 MemScan:Trojan.Spy.BZub.AI
CAT-QuickHeal 9.00 04.06.2007 no virus found
ClamAV devel-20070312 04.06.2007 no virus found
DrWeb 4.33 04.06.2007 Trojan.Spambot
eSafe 7.0.15.0 04.06.2007 Suspicious Trojan/Worm
eTrust-Vet 30.7.3546 04.06.2007 no virus found
Ewido 4.0 04.06.2007 Downloader.Agent.bhc
FileAdvisor 1 04.06.2007 no virus found
Fortinet 2.85.0.0 04.06.2007 Spy/BZub
F-Prot 4.3.1.45 04.04.2007 no virus found
F-Secure 6.70.13030.0 04.06.2007 W32/Malware.MRI
Ikarus T3.1.1.3 04.06.2007 Trojan-Spy.Win32.Goldun.lw
Kaspersky 4.0.2.24 04.06.2007 no virus found
McAfee 5003 04.06.2007 no virus found
Microsoft 1.2405 04.06.2007 no virus found
NOD32v2 2171 04.06.2007 Win32/TrojanProxy.Cimuz.NAG
Norman 5.80.02 04.05.2007 W32/Malware.MRI
Panda 9.0.0.4 04.06.2007 Suspicious file
Prevx1 V2 04.06.2007 Spyware.Banker
Sophos 4.16.0 04.06.2007 no virus found
Sunbelt 2.2.907.0 04.03.2007 Trojan-Spy.BZub.AI
Symantec 10 04.06.2007 no virus found
TheHacker 6.1.6.085 04.04.2007 no virus found
VBA32 3.11.3 04.04.2007 Trojan.Win32.TrojanProxy.Cimuz.NAG
VirusBuster 4.3.7:9 04.06.2007 Trojan.DR.BZub.Gen.8
Webwasher-Gateway 6.0.1 04.06.2007 Trojan.Spy.BZub.AI.1

Aditional Information
File size: 90840 bytes
MD5: df57118c6759c33c73e4fcb612400894
SHA1: dc22dffc0ae29584af7fd7c215a3664083616cfe
packers: ASPack
packers: ASPACK
packers: Aspack
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=03e684081895

[RobinFood]

Complete scanning result of "zu.exe", received in VirusTotal at 04.06.2007, 20:24:23 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.7.0 04.06.2007 Win-Trojan/Proxy.98816
AntiVir 7.3.1.48 04.06.2007 TR/Proxy.Cimuz.NAH
Authentium 4.93.8 04.06.2007 no virus found
Avast 4.7.936.0 04.06.2007 Win32:BZub-DA
AVG 7.5.0.447 04.05.2007 Proxy.LSH
BitDefender 7.2 04.06.2007 no virus found
CAT-QuickHeal 9.00 04.06.2007 no virus found
ClamAV devel-20070312 04.06.2007 no virus found
DrWeb 4.33 04.06.2007 Trojan.Spambot
eSafe 7.0.15.0 04.06.2007 Suspicious Trojan/Worm
eTrust-Vet 30.7.3546 04.06.2007 no virus found
Ewido 4.0 04.06.2007 Downloader.Agent.bhc
FileAdvisor 1 04.06.2007 Not analyzed yet
Fortinet 2.85.0.0 04.06.2007 Spy/BZub
F-Prot 4.3.1.45 04.04.2007 no virus found
F-Secure 6.70.13030.0 04.06.2007 W32/Malware.MRJ
Ikarus T3.1.1.3 04.06.2007 Trojan-Downloader.Win32.Nurech.BF
Kaspersky 4.0.2.24 04.06.2007 no virus found
McAfee 5003 04.06.2007 no virus found
Microsoft 1.2405 04.06.2007 no virus found
NOD32v2 2171 04.06.2007 Win32/TrojanProxy.Cimuz.NAG
Norman 5.80.02 04.05.2007 W32/Malware.MRJ
Panda 9.0.0.4 04.06.2007 Suspicious file
Prevx1 V2 04.06.2007 Worm.Stormy
Sophos 4.16.0 04.06.2007 no virus found
Sunbelt 2.2.907.0 04.03.2007 no virus found
Symantec 10 04.06.2007 no virus found
TheHacker 6.1.6.085 04.04.2007 no virus found
VBA32 3.11.3 04.04.2007 Trojan.Win32.TrojanProxy.Cimuz.NAG
VirusBuster 4.3.7:9 04.06.2007 Trojan.DR.BZub.Gen.8
Webwasher-Gateway 6.0.1 04.06.2007 Trojan.Proxy.Cimuz.NAH


Aditional Information
File size: 98816 bytes
MD5: 2c01310bc493ac8a9b2d4ff00bfa17f4
SHA1: af4a333a17bb8c6f62c92c8714d5c220035c0906
packers: ASPack
packers: ASPACK
Bit9 info: http://fileadvisor.bit9.com/services...2d4ff00bfa17f4
packers: Aspack
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=c6dd84081896

[ZDM]

Complete scanning result of "flash.exe", received in VirusTotal at 04.06.2007, 21:06:45 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.7.0 04.06.2007 Win32/Stration.worm.Gen
AntiVir 7.3.1.48 04.06.2007 TR/Crypt.XDR.Gen
Authentium 4.93.8 04.06.2007 no virus found
Avast 4.7.936.0 04.06.2007 no virus found
AVG 7.5.0.447 04.05.2007 I-Worm/Stration
BitDefender 7.2 04.06.2007 DeepScan:Generic.Stration.3ACAC7FF
CAT-QuickHeal 9.00 04.06.2007 (Suspicious) - DNAScan
ClamAV devel-20070312 04.06.2007 Worm.Stration.ACF-5
DrWeb 4.33 04.06.2007 Win32.HLLM.Limar
eSafe 7.0.15.0 04.06.2007 Suspicious Trojan/Worm
eTrust-Vet 30.7.3546 04.06.2007 no virus found
Ewido 4.0 04.06.2007 no virus found
FileAdvisor 1 04.06.2007 no virus found
Fortinet 2.85.0.0 04.06.2007 suspicious
F-Prot 4.3.1.45 04.04.2007 no virus found
F-Secure 6.70.13030.0 04.06.2007 Email-Worm.Win32.Warezov.mx
Ikarus T3.1.1.3 04.06.2007 Trojan-Spy.Win32.Agent.hz
Kaspersky 4.0.2.24 04.06.2007 Email-Worm.Win32.Warezov.mx
McAfee 5003 04.06.2007 New Malware.n
Microsoft 1.2405 04.06.2007 Trojan:Win32/Stration.gen!dr
NOD32v2 2171 04.06.2007 a variant of Win32/Stration.XJ
Norman 5.80.02 04.05.2007 no virus found
Panda 9.0.0.4 04.06.2007 Suspicious file
Prevx1 V2 04.06.2007 no virus found
Sophos 4.16.0 04.06.2007 Mal/Packer
Sunbelt 2.2.907.0 04.03.2007 VIPRE.Suspicious
Symantec 10 04.06.2007 no virus found
TheHacker 6.1.6.085 04.04.2007 no virus found
VBA32 3.11.3 04.04.2007 MalwareScope.Worm.Warezov.6
VirusBuster 4.3.7:9 04.06.2007 Packed/Upack
Webwasher-Gateway 6.0.1 04.06.2007 Trojan.Crypt.XDR.Gen


Aditional Information
File size: 89116 bytes
MD5: 4e2f154f466c122f37e995945d4b7824
SHA1: 1f91f318191f0747ab22e87adda45735c46ae4ad
packers: UPACK
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Shu_b]

Новой страничке - новые промежуточные

[Shu_b]

Complete scanning result of "win26825.dll", received in VirusTotal at 04.10.2007, 12:36:03 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.10.0 04.10.2007 no virus found
AntiVir 7.3.1.48 04.10.2007 no virus found
Authentium 4.93.8 04.09.2007 no virus found
Avast 4.7.936.0 04.08.2007 Win32:Agent-FSP
AVG 7.5.0.447 04.10.2007 no virus found
BitDefender 7.2 04.10.2007 no virus found
CAT-QuickHeal 9.00 04.09.2007 no virus found
ClamAV devel-20070312 04.10.2007 no virus found
DrWeb 4.33 04.10.2007 no virus found
eSafe 7.0.15.0 04.09.2007 no virus found
eTrust-Vet 30.7.3557 04.10.2007 no virus found
Ewido 4.0 04.10.2007 no virus found
FileAdvisor 1 04.10.2007 no virus found
Fortinet 2.85.0.0 04.10.2007 no virus found
F-Prot 4.3.1.45 04.08.2007 no virus found
F-Secure 6.70.13030.0 04.10.2007 no virus found
Ikarus T3.1.1.3 04.10.2007 no virus found
Kaspersky 4.0.2.24 04.10.2007 no virus found
McAfee 5004 04.09.2007 no virus found
Microsoft 1.2405 04.10.2007 no virus found
NOD32v2 2176 04.10.2007 no virus found
Norman 5.80.02 04.10.2007 no virus found
Panda 9.0.0.4 04.09.2007 Suspicious file
Prevx1 V2 04.10.2007 no virus found
Sophos 4.16.0 04.06.2007 no virus found
Sunbelt 2.2.907.0 04.07.2007 no virus found
Symantec 10 04.10.2007 Infostealer
TheHacker 6.1.6.088 04.09.2007 no virus found
VBA32 3.11.3 04.09.2007 suspected of Email-Worm.Mydoom.20
VirusBuster 4.3.7:9 04.09.2007 no virus found
Webwasher-Gateway 6.0.1 04.10.2007 Win32.Malware.gen!90 (suspicious)

Aditional Information
File size: 1342976 bytes
MD5: 83bfd9358c229326ba0a8cd0e0796599
SHA1: 23625d8fa516b9e44a0b1433ab10146c2d1a8b50


Complete scanning result of "svchost.exe", received in VirusTotal at 04.10.2007, 13:27:32 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.10.0 04.10.2007 no virus found
AntiVir 7.3.1.48 04.10.2007 DR/Spy.Delf.AR.32
Authentium 4.93.8 04.09.2007 no virus found
Avast 4.7.936.0 04.08.2007 no virus found
AVG 7.5.0.447 04.10.2007 no virus found
BitDefender 7.2 04.10.2007 Dropped:Trojan.Spy.Delf.AR
CAT-QuickHeal 9.00 04.09.2007 no virus found
ClamAV devel-20070312 04.10.2007 no virus found
DrWeb 4.33 04.10.2007 no virus found
eSafe 7.0.15.0 04.09.2007 no virus found
eTrust-Vet 30.7.3557 04.10.2007 no virus found
Ewido 4.0 04.10.2007 no virus found
FileAdvisor 1 04.10.2007 no virus found
Fortinet 2.85.0.0 04.10.2007 suspicious
F-Prot 4.3.1.45 04.08.2007 no virus found
F-Secure 6.70.13030.0 04.10.2007 no virus found
Ikarus T3.1.1.5 04.10.2007 no virus found
Kaspersky 4.0.2.24 04.10.2007 no virus found
McAfee 5004 04.09.2007 no virus found
Microsoft 1.2405 04.10.2007 no virus found
NOD32v2 2176 04.10.2007 no virus found
Norman 5.80.02 04.10.2007 no virus found
Panda 9.0.0.4 04.09.2007 no virus found
Prevx1 V2 04.10.2007 no virus found
Sophos 4.16.0 04.06.2007 no virus found
Sunbelt 2.2.907.0 04.07.2007 no virus found
Symantec 10 04.10.2007 no virus found
TheHacker 6.1.6.088 04.09.2007 no virus found
VBA32 3.11.3 04.09.2007 suspected of Backdoor.Delf.57
VirusBuster 4.3.7:9 04.09.2007 no virus found
Webwasher-Gateway 6.0.1 04.10.2007 Trojan.Spy.Delf.AR.32

Aditional Information
File size: 603648 bytes
MD5: 1eb49e6da9c18e3878e609f3d11e726b
SHA1: a964aab10c4e88f30e6fe1a18efd6093aa566c13
packers: BINARYRES

[Shu_b]

t-8937

Complete scanning result of "ntos.exe", received in VirusTotal at 04.11.2007, 08:26:44 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.10.0 04.10.2007 no virus found
AntiVir 7.3.1.50 04.10.2007 TR/Hijack.Age.38400
Authentium 4.93.8 04.11.2007 no virus found
Avast 4.7.936.0 04.10.2007 no virus found
AVG 7.5.0.447 04.11.2007 no virus found
BitDefender 7.2 04.11.2007 no virus found
CAT-QuickHeal 9.00 04.10.2007 (Suspicious) - DNAScan
ClamAV devel-20070312 04.11.2007 no virus found
DrWeb 4.33 04.11.2007 no virus found
eSafe 7.0.15.0 04.10.2007 no virus found
eTrust-Vet 30.7.3559 04.11.2007 no virus found
Ewido 4.0 04.10.2007 no virus found
FileAdvisor 1 04.11.2007 no virus found
Fortinet 2.85.0.0 04.11.2007 suspicious
F-Prot 4.3.1.45 04.11.2007 no virus found
F-Secure 6.70.13030.0 04.11.2007 no virus found
Ikarus T3.1.1.5 04.11.2007 no virus found
Kaspersky 4.0.2.24 04.11.2007 no virus found
McAfee 5005 04.10.2007 New Malware.ci
Microsoft 1.2405 04.11.2007 no virus found
NOD32v2 2178 04.10.2007 no virus found
Norman 5.80.02 04.10.2007 no virus found
Panda 9.0.0.4 04.11.2007 Trj/Wsnpoem.V
Prevx1 V2 04.11.2007 no virus found
Sophos 4.16.0 04.06.2007 no virus found
Sunbelt 2.2.907.0 04.07.2007 VIPRE.Suspicious
Symantec 10 04.11.2007 no virus found
TheHacker 6.1.6.088 04.09.2007 no virus found
VBA32 3.11.3 04.10.2007 no virus found
VirusBuster 4.3.7:9 04.10.2007 no virus found
Webwasher-Gateway 6.0.1 04.11.2007 Trojan.Hijack.Age.38400

Aditional Information
File size: 288256 bytes
MD5: ee0942b164d424a3b5c66f26a47e9c92
SHA1: e6d86e2c9106065301b2f34023422eaaa9d81486


Complete scanning result of "ipv6monk.dll", received in VirusTotal at 04.11.2007, 08:31:23 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.10.0 04.10.2007 no virus found
AntiVir 7.3.1.50 04.10.2007 HEUR/Malware
Authentium 4.93.8 04.11.2007 no virus found
Avast 4.7.936.0 04.10.2007 no virus found
AVG 7.5.0.447 04.11.2007 no virus found
BitDefender 7.2 04.11.2007 no virus found
CAT-QuickHeal 9.00 04.10.2007 no virus found
ClamAV devel-20070312 04.11.2007 no virus found
DrWeb 4.33 04.11.2007 no virus found
eSafe 7.0.15.0 04.10.2007 no virus found
eTrust-Vet 30.7.3559 04.11.2007 no virus found
Ewido 4.0 04.10.2007 no virus found
FileAdvisor 1 04.11.2007 no virus found
Fortinet 2.85.0.0 04.11.2007 no virus found
F-Prot 4.3.1.45 04.11.2007 no virus found
F-Secure 6.70.13030.0 04.11.2007 no virus found
Ikarus T3.1.1.5 04.11.2007 no virus found
Kaspersky 4.0.2.24 04.11.2007 no virus found
McAfee 5005 04.10.2007 Spy-Agent.ba
Microsoft 1.2405 04.11.2007 no virus found
NOD32v2 2178 04.10.2007 no virus found
Norman 5.80.02 04.10.2007 no virus found
Panda 9.0.0.4 04.11.2007 no virus found
Prevx1 V2 04.11.2007 no virus found
Sophos 4.16.0 04.06.2007 Mal/Cimuz-A
Sunbelt 2.2.907.0 04.07.2007 no virus found
Symantec 10 04.11.2007 no virus found
TheHacker 6.1.6.088 04.09.2007 no virus found
VBA32 3.11.3 04.10.2007 no virus found
VirusBuster 4.3.7:9 04.10.2007 no virus found
Webwasher-Gateway 6.0.1 04.11.2007 Heuristic.Malware

Aditional Information
File size: 64728 bytes
MD5: 22e74473941a34eb787fd059c9bcae1f
SHA1: b3b94288e309c1447e8d343017171e90bc36ce87

[aZm]

Complete scanning result of "Giper_WM.exe_aq", received in VirusTotal at 04.12.2007, 00:56:34 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.12.0 04.11.2007 no virus found
AntiVir 7.3.1.50 04.11.2007 TR/Crypt.XDR.Gen
Authentium 4.93.8 04.11.2007 is a security risk or a "backdoor" program
Avast 4.7.936.0 04.11.2007 no virus found
AVG 7.5.0.447 04.11.2007 no virus found
BitDefender 7.2 04.12.2007 Dropped:Trojan.Peed.Gen
CAT-QuickHeal 9.00 04.11.2007 (Suspicious) - DNAScan
ClamAV devel-20070312 04.12.2007 Trojan.Dropper-653
DrWeb 4.33 04.11.2007 Trojan.PWS.LDPinch.1622
eSafe 7.0.15.0 04.11.2007 Win32.LdPinch.bgj
eTrust-Vet 30.7.3560 04.11.2007 no virus found
Ewido 4.0 04.10.2007 Trojan.LdPinch.bgj
FileAdvisor 1 04.12.2007 no virus found
Fortinet 2.85.0.0 04.11.2007 W32/LdPinch.BGJ!tr.pws
F-Prot 4.3.1.45 04.11.2007 W32/PWStealer
F-Secure 6.70.13030.0 04.11.2007 Trojan-PSW.Win32.LdPinch.bgj
Ikarus T3.1.1.5 04.11.2007 Trojan-PWS.Win32.LdPinch.bgj
Kaspersky 4.0.2.24 04.11.2007 Trojan-PSW.Win32.LdPinch.bgj
McAfee 5006 04.11.2007 no virus found
Microsoft 1.2405 04.11.2007 no virus found
NOD32v2 2182 04.11.2007 no virus found
Norman 5.80.02 04.11.2007 W32/LdPinch.JAY
Panda 9.0.0.4 04.11.2007 Suspicious file
Prevx1 V2 04.12.2007 no virus found
Sophos 4.16.0 04.11.2007 no virus found
Sunbelt 2.2.907.0 04.07.2007 no virus found
Symantec 10 04.11.2007 no virus found
TheHacker 6.1.6.088 04.09.2007 no virus found
VBA32 3.11.3 04.10.2007 Trojan-PSW.Win32.LdPinch.bgj
VirusBuster 4.3.7:9 04.11.2007 Trojan.PWS.LdPinch.AXS
Webwasher-Gateway 6.0.1 04.11.2007 Trojan.Crypt.XDR.Gen

Aditional Information
File size: 43174 bytes
MD5: 37bdc87bf1150179feb7bf00c8534101
SHA1: 524c57b769a56927aa70ee487f14d59ad4afe624

[Shu_b]

t-8722

Complete scanning result of "TIMEMP316.exe", received in VirusTotal at 04.12.2007, 10:01:41 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.12.0 04.12.2007 no virus found
AntiVir 7.3.1.50 04.12.2007 TR/Dldr.Swizzor.Gen
Authentium 4.93.8 04.12.2007 no virus found
Avast 4.7.936.0 04.11.2007 no virus found
AVG 7.5.0.447 04.11.2007 no virus found
BitDefender 7.2 04.12.2007 Trojan.FatObfus.Gen
CAT-QuickHeal 9.00 04.11.2007 (Suspicious) - DNAScan
ClamAV devel-20070312 04.12.2007 no virus found
DrWeb 4.33 04.12.2007 no virus found
eSafe 7.0.15.0 04.11.2007 no virus found
eTrust-Vet 30.7.3562 04.12.2007 no virus found
Ewido 4.0 04.10.2007 no virus found
FileAdvisor 1 04.12.2007 no virus found
Fortinet 2.85.0.0 04.12.2007 suspicious
F-Prot 4.3.1.45 04.12.2007 no virus found
F-Secure 6.70.13030.0 04.12.2007 Trojan.Win32.Obfuscated.en
Ikarus T3.1.1.5 04.12.2007 not-a-virus:AdWare.Win32.Lop.ag
Kaspersky 4.0.2.24 04.12.2007 Trojan.Win32.Obfuscated.en
McAfee 5006 04.11.2007 no virus found
Microsoft 1.2405 04.11.2007 no virus found
NOD32v2 2182 04.11.2007 no virus found
Norman 5.80.02 04.11.2007 no virus found
Panda 9.0.0.4 04.12.2007 no virus found
Sophos 4.16.0 04.12.2007 no virus found
Sunbelt 2.2.907.0 04.07.2007 no virus found
Symantec 10 04.12.2007 no virus found
TheHacker 6.1.6.088 04.09.2007 no virus found
VBA32 3.11.3 04.10.2007 MalwareScope.Trojan-Downloader.Obfuscated.2
VirusBuster 4.3.7:9 04.11.2007 Adware.Lop.Gen
Webwasher-Gateway 6.0.1 04.12.2007 Trojan.Dldr.Swizzor.Gen

Aditional Information
File size: 254464 bytes
MD5: b32a0a30bb3800f8d5b4f35fb116dfc2
SHA1: 6d4062651b954691ec22483e6032c2ed665b6609

[drongo]

T= 8993

Complete scanning result of "avz00001.dta", received in VirusTotal at 04.14.2007, 12:41:04 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.14.0 04.13.2007 no virus found
AntiVir 7.3.1.50 04.13.2007 ADSPY/Virtumonde.IG.1
Authentium 4.93.8 04.14.2007 no virus found
Avast 4.7.936.0 04.13.2007 no virus found
AVG 7.5.0.447 04.13.2007 no virus found
BitDefender 7.2 04.14.2007 MemScan:Trojan.Vundo.DLM
CAT-QuickHeal 9.00 04.13.2007 no virus found
ClamAV devel-20070312 04.13.2007 Trojan.Packed-7
DrWeb 4.33 04.14.2007 Trojan.Virtumod
eSafe 7.0.15.0 04.12.2007 suspicious Trojan/Worm
eTrust-Vet 30.7.3567 04.14.2007 Win32/Chisyne!generic
Ewido 4.0 04.14.2007 Adware.Virtumonde
FileAdvisor 1 04.14.2007 no virus found
Fortinet 2.85.0.0 04.14.2007 no virus found
F-Prot 4.3.2.48 04.13.2007 W32/Adware.IHC
F-Secure 6.70.13030.0 04.13.2007 Vundo.gen17
Ikarus T3.1.1.5 04.14.2007 not-a-virus:AdWare.Win32.Virtumonde.bq
Kaspersky 4.0.2.24 04.14.2007 not-a-virus:AdWare.Win32.Virtumonde.ig
McAfee 5009 04.13.2007 potentially unwanted program Vundo
Microsoft 1.2405 04.14.2007 no virus found
NOD32v2 2187 04.13.2007 Win32/Adware.Virtumonde
Norman 5.80.02 04.14.2007 W32/Virtumonde.GAG
Panda 9.0.0.4 04.14.2007 Suspicious file
Prevx1 V2 04.14.2007 SpywareQuake
Sophos 4.16.0 04.12.2007 no virus found
Sunbelt 2.2.907.0 04.14.2007 VIPRE.Suspicious
Symantec 10 04.14.2007 no virus found
TheHacker 6.1.6.088 04.09.2007 Adware/Virtumonde.ig
VBA32 3.11.3 04.13.2007 AdWare.Win32.Virtumonde.ig
VirusBuster 4.3.7:9 04.13.2007 Adware.Vundo.Gen!Pac.8
Webwasher-Gateway 6.0.1 04.13.2007 Ad-Spyware.Virtumonde.IG.1

Aditional Information
File size: 26694 bytes
MD5: 63243513b3e5fdb7a3f3ddd775e98f25
SHA1: d1b58b9fcb6b31ea4d8e4b42ebcefb2569754cbd
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=47cf87067768
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.





Complete scanning result of "avz00002.dta", received in VirusTotal at 04.14.2007, 12:16:22 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.14.0 04.13.2007 no virus found
AntiVir 7.3.1.50 04.13.2007 no virus found
Authentium 4.93.8 04.14.2007 no virus found
Avast 4.7.936.0 04.13.2007 no virus found
AVG 7.5.0.447 04.13.2007 no virus found
BitDefender 7.2 04.14.2007 no virus found
CAT-QuickHeal 9.00 04.13.2007 no virus found
ClamAV devel-20070312 04.13.2007 no virus found
DrWeb 4.33 04.14.2007 Trojan.Virtumod
eSafe 7.0.15.0 04.12.2007 suspicious Trojan/Worm
eTrust-Vet 30.7.3567 04.14.2007 Win32/Vundo!generic
Ewido 4.0 04.14.2007 no virus found
FileAdvisor 1 04.14.2007 no virus found
Fortinet 2.85.0.0 04.14.2007 suspicious
F-Prot 4.3.2.48 04.13.2007 no virus found
F-Secure 6.70.13030.0 04.13.2007 Vundo.gen17
Ikarus T3.1.1.5 04.14.2007 no virus found
Kaspersky 4.0.2.24 04.14.2007 no virus found
McAfee 5009 04.13.2007 no virus found
Microsoft 1.2405 04.14.2007 no virus found
NOD32v2 2187 04.13.2007 no virus found
Norman 5.80.02 04.14.2007 Vundo.gen17
Panda 9.0.0.4 04.14.2007 Suspicious file
Prevx1 V2 04.14.2007 no virus found
Sophos 4.16.0 04.12.2007 no virus found
Sunbelt 2.2.907.0 04.14.2007 VIPRE.Suspicious
Symantec 10 04.14.2007 no virus found
TheHacker 6.1.6.088 04.09.2007 no virus found
VBA32 3.11.3 04.13.2007 no virus found
VirusBuster 4.3.7:9 04.13.2007 Adware.Vundo.Gen!Pac.8
Webwasher-Gateway 6.0.1 04.13.2007 Win32.UPXpacked.gen (suspicious)

Aditional Information
File size: 280676 bytes
MD5: 5231ec5b06afc427c5a22312a1861b52
SHA1: dfaf82aef9b09df072e8e98de403ed317e8f44f2
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Winsent]

File: reg.exe
Status: INFECTED/MALWARE
MD5 c1e9fbf2fbdfcfab0c185c8b1382a2d6
Packers detected: -


Scanner results

Scan taken on 15 Apr 2007 08:18:20 (GMT)

AntiVir Found TR/Crypt.XPACK.Gen
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Trojan.Peed.Gen
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found Trojan-PSW.Win32.LdPinch.but
Fortinet Found nothing
Kaspersky Anti-Virus Found Trojan-PSW.Win32.LdPinch.but
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found nothing

[drongo]

T=9014

Complete scanning result of "flash.rar", received in VirusTotal at 04.15.2007, 19:02:46 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.14.0 04.13.2007 no virus found
AntiVir 7.3.1.52 04.14.2007 no virus found
Authentium 4.93.8 04.14.2007 no virus found
Avast 4.7.981.0 04.15.2007 no virus found
AVG 7.5.0.447 04.15.2007 no virus found
BitDefender 7.2 04.15.2007 no virus found
CAT-QuickHeal 9.00 04.14.2007 no virus found
ClamAV devel-20070312 04.15.2007 no virus found
DrWeb 4.33 04.15.2007 no virus found
eSafe 7.0.15.0 04.15.2007 suspicious Trojan/Worm
eTrust-Vet 30.7.3567 04.14.2007 no virus found
Ewido 4.0 04.15.2007 no virus found
FileAdvisor 1 04.15.2007 no virus found
Fortinet 2.85.0.0 04.15.2007 no virus found
F-Prot 4.3.2.48 04.13.2007 no virus found
F-Secure 6.70.13030.0 04.14.2007 no virus found
Ikarus T3.1.1.5 04.15.2007 Backdoor.Win32.Ciadoor.13
Kaspersky 4.0.2.24 04.15.2007 no virus found
McAfee 5009 04.13.2007 no virus found
Microsoft 1.2405 04.15.2007 no virus found
NOD32v2 2187 04.13.2007 no virus found
Norman 5.80.02 04.14.2007 no virus found
Panda 9.0.0.4 04.15.2007 Suspicious file
Prevx1 V2 04.15.2007 no virus found
Sophos 4.16.0 04.12.2007 no virus found
Sunbelt 2.2.907.0 04.14.2007 no virus found
Symantec 10 04.15.2007 no virus found
TheHacker 6.1.6.094 04.14.2007 no virus found
VBA32 3.11.3 04.14.2007 no virus found
VirusBuster 4.3.7:9 04.15.2007 no virus found
Webwasher-Gateway 6.0.1 04.14.2007 Worm.Win32.ModifiedUPX.gen!90 (suspicious)

Aditional Information
File size: 72352 bytes
MD5: 558b6d738131fc85269346cf9409daa5
SHA1: e9b7d9310819aade575cf3cd21099129970b2a0d
packers: UPX
packers: UPX
packers: UPX

[Shu_b]

t-9080

Complete scanning result of "arprmdg0.dll", received in VirusTotal at 04.17.2007, 21:09:54 (CET).
Antivirus Version Update Result
AhnLab-V3 2007.4.18.0 04.17.2007 no virus found
AntiVir 7.3.1.53 04.17.2007 TR/Agent.20983
Authentium 4.93.8 04.17.2007 no virus found
Avast 4.7.981.0 04.17.2007 no virus found
AVG 7.5.0.447 04.17.2007 PSW.Generic3.VQG
BitDefender 7.2 04.17.2007 Generic.Malware.SFYdlwdld.54C1D768
CAT-QuickHeal 9.00 04.17.2007 no virus found
ClamAV devel-20070312 04.17.2007 no virus found
DrWeb 4.33 04.17.2007 no virus found
eSafe 7.0.15.0 04.17.2007 suspicious Trojan/Worm
eTrust-Vet 30.7.3574 04.17.2007 Win32/Hanlo!generic
Ewido 4.0 04.17.2007 no virus found
FileAdvisor 1 04.17.2007 no virus found
Fortinet 2.85.0.0 04.17.2007 suspicious
F-Prot 4.3.2.48 04.17.2007 no virus found
F-Secure 6.70.13030.0 04.17.2007 W32/Horst.gen28
Ikarus T3.1.1.5 04.17.2007 no virus found
Kaspersky 4.0.2.24 04.17.2007 no virus found
McAfee 5011 04.17.2007 no virus found
Microsoft 1.2405 04.17.2007 TrojanSpy:Win32/Goldun.gen!dll
NOD32v2 2199 04.17.2007 a variant of Win32/Spy.Goldun.GU
Norman 5.80.02 04.17.2007 W32/Horst.gen28
Panda 9.0.0.4 04.17.2007 Suspicious file
Prevx1 V2 04.17.2007 no virus found
Sophos 4.16.0 04.17.2007 Mal/Behav-007
Sunbelt 2.2.907.0 04.14.2007 no virus found
Symantec 10 04.17.2007 no virus found
TheHacker 6.1.6.095 04.15.2007 no virus found
VBA32 3.11.3 04.17.2007 suspected of Trojan-Spy.Banker.51
VirusBuster 4.3.7:9 04.17.2007 no virus found
Webwasher-Gateway 6.0.1 04.17.2007 Trojan.Agent.20983

Aditional Information
File size: 20589 bytes
MD5: de0eaba4203aa36dbbb8888317e3817f
SHA1: 7bb9bcb72e8198ff8e332a88fda0d9d6e133d85d
packers: UPX

[darzanebor]

Trojan.Win32.Agent.qt

AhnLab-V3 2007.4.19.1 04.19.2007 no virus found
AntiVir 7.3.1.53 04.19.2007 TR/Crypt.PEC2X.Gen
Authentium 4.93.8 04.18.2007 no virus found
Avast 4.7.981.0 04.19.2007 no virus found
AVG 7.5.0.447 04.18.2007 Generic3.UEB
BitDefender 7.2 04.19.2007 no virus found
CAT-QuickHeal 9.00 04.18.2007 no virus found
ClamAV devel-20070416 04.19.2007 no virus found
DrWeb 4.33 04.19.2007 no virus found
eSafe 7.0.15.0 04.18.2007 Win32.Agent.qt
eTrust-Vet 30.7.3579 04.19.2007 no virus found
Ewido 4.0 04.19.2007 Trojan.Agent.qt
FileAdvisor 1 04.19.2007 no virus found
Fortinet 2.85.0.0 04.19.2007 W32/Agent.QT!tr
F-Prot 4.3.2.48 04.18.2007 no virus found
F-Secure 6.70.13030.0 04.19.2007 Trojan.Win32.Agent.qt
Ikarus T3.1.1.5 04.19.2007 Trojan.Win32.Agent.qt
Kaspersky 4.0.2.24 04.19.2007 Trojan.Win32.Agent.qt
McAfee 5012 04.18.2007 no virus found
Microsoft 1.2405 04.19.2007 Trojan:Win32/Agent.PA
NOD32v2 2204 04.19.2007 probably a variant of Win32/Agent.QT
Norman 5.80.02 04.19.2007 no virus found
Panda 9.0.0.4 04.19.2007 Spyware/Virtumonde
Prevx1 V2 04.19.2007 Polynomial.Code.Exploit
Sophos 4.16.0 04.17.2007 Troj/Nebule-Gen
Sunbelt 2.2.907.0 04.07.2007 VIPRE.Suspicious
Symantec 10 04.19.2007 no virus found
TheHacker 6.1.6.095 04.15.2007 no virus found
VBA32 3.11.3 04.19.2007 no virus found
VirusBuster 4.3.7:9 04.18.2007 no virus found
Webwasher-Gateway 6.0.1 04.19.2007 Trojan.Crypt.PEC2X.Gen

[Kuzz]

Complete scanning result of "avz00004.dta", received in VirusTotal at 04.20.2007, 20:22:51 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.21.0 04.20.2007 no virus found
AntiVir 7.3.1.53 04.20.2007 HEUR/Malware
Authentium 4.93.8 04.20.2007 no virus found
Avast 4.7.981.0 04.20.2007 no virus found
AVG 7.5.0.464 04.19.2007 no virus found
BitDefender 7.2 04.20.2007 no virus found
CAT-QuickHeal 9.00 04.20.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 04.20.2007 no virus found
DrWeb 4.33 04.20.2007 no virus found
eSafe 7.0.15.0 04.19.2007 Suspicious Trojan/Worm
eTrust-Vet 30.7.3581 04.20.2007 no virus found
Ewido 4.0 04.20.2007 no virus found
FileAdvisor 1 04.20.2007 No threat detected
Fortinet 2.85.0.0 04.20.2007 suspicious
F-Prot 4.3.2.48 04.20.2007 W32/Threat-HLLSI-based!Maximus
F-Secure 6.70.13030.0 04.20.2007 no virus found
Ikarus T3.1.1.5 04.20.2007 no virus found
Kaspersky 4.0.2.24 04.20.2007 no virus found
McAfee 5014 04.20.2007 no virus found
Microsoft 1.2405 04.20.2007 no virus found
NOD32v2 2207 04.20.2007 no virus found
Norman 5.80.02 04.20.2007 W32/Malware.PKD
Panda 9.0.0.4 04.19.2007 no virus found
Prevx1 V2 04.20.2007 no virus found
Sophos 4.16.0 04.20.2007 Troj/Dowdec-Gen
Sunbelt 2.2.907.0 04.19.2007 VIPRE.Suspicious
Symantec 10 04.20.2007 no virus found
TheHacker 6.1.6.095 04.15.2007 no virus found
VBA32 3.11.4 04.20.2007 suspected of Downloader.Small.34
VirusBuster 4.3.7:9 04.20.2007 Packed/FSG
Webwasher-Gateway 6.0.1 04.20.2007 Heuristic.Malware

Aditional Information
File size: 12962 bytes
MD5: ca64887c85940f4755006f6340eb7973
SHA1: 7babc964fe4f1b956d0c39e63d177844ae06d71e
packers: FSG
Bit9 info: http://fileadvisor.bit9.com/services...006f6340eb7973
packers: embedded

[Winsent]

Complete scanning result of "love.scr", received in VirusTotal at 04.21.2007, 09:08:30 (CET).


Antivirus Version Update Result

AhnLab-V3 2007.4.21.0 04.20.2007 no virus found
AntiVir 7.3.1.53 04.20.2007 TR/PSW.LdPinch.btg
Authentium 4.93.8 04.20.2007 Possibly a new variant of W32/new-malware!Maximus
Avast 4.7.981.0 04.20.2007 Win32dPinch-BO
AVG 7.5.0.464 04.20.2007 PSW.Ldpinch.FYQ
BitDefender 7.2 04.21.2007 no virus found
CAT-QuickHeal 9.00 04.20.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 04.20.2007 no virus found
DrWeb 4.33 04.20.2007 no virus found
eSafe 7.0.15.0 04.19.2007 Win32.LdPinch.btg
eTrust-Vet 30.7.3583 04.21.2007 no virus found
Ewido 4.0 04.20.2007 Trojan.LdPinch.btg
FileAdvisor 1 04.21.2007 no virus found
Fortinet 2.85.0.0 04.21.2007 W32/LdPinch.BTG!tr.pws
F-Prot 4.3.2.48 04.20.2007 W32/new-malware!Maximus
F-Secure 6.70.13030.0 04.20.2007 Trojan-PSW.Win32.LdPinch.btg
Ikarus T3.1.1.5 04.21.2007 Trojan-Downloader.Win32.Banload.ams
Kaspersky 4.0.2.24 04.21.2007 Trojan-PSW.Win32.LdPinch.btg
McAfee 5014 04.20.2007 no virus found
Microsoft 1.2405 04.21.2007 no virus found
NOD32v2 2208 04.21.2007 Win32/PSW.LdPinch.NCB
Norman 5.80.02 04.20.2007 W32/LdPinch.JBK
Panda 9.0.0.4 04.20.2007 Suspicious file
Prevx1 V2 04.21.2007 no virus found
Sophos 4.16.0 04.20.2007 Mal/Basine-A
Sunbelt 2.2.907.0 04.19.2007 VIPRE.Suspicious
Symantec 10 04.20.2007 no virus found
TheHacker 6.1.6.095 04.15.2007 Trojan/PSW.LdPinch.btg
VBA32 3.11.4 04.21.2007 MalwareScope.Trojan-PSW.Pinch.42
VirusBuster 4.3.7:9 04.20.2007 Packed/FSG
Webwasher-Gateway 6.0.1 04.21.2007 Trojan.PSW.LdPinch.btg

Aditional Information
File size: 48669 bytes
MD5: bd7645ca7a50754dc2b2f73d6f1cf69b
SHA1: 18baf768f4833c164587f335452b99a3992f2112
packers: FSG
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[drongo]

Complete scanning result of "avz00006.dta", received in VirusTotal at 04.22.2007, 13:17:09 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.21.0 04.20.2007 no virus found
AntiVir 7.3.1.53 04.20.2007 TR/PSW.LdPinch.BNL
Authentium 4.93.8 04.20.2007 no virus found
Avast 4.7.981.0 04.21.2007 no virus found
AVG 7.5.0.464 04.21.2007 no virus found
BitDefender 7.2 04.22.2007 no virus found
CAT-QuickHeal 9.00 04.21.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 04.21.2007 no virus found
DrWeb 4.33 04.22.2007 no virus found
eSafe 7.0.15.0 04.19.2007 suspicious Trojan/Worm
eTrust-Vet 30.7.3585 04.21.2007 no virus found
Ewido 4.0 04.21.2007 no virus found
FileAdvisor 1 04.22.2007 no virus found
Fortinet 2.85.0.0 04.22.2007 W32/LdPinch.BMO!tr.pws
F-Prot 4.3.2.48 04.20.2007 no virus found
F-Secure 6.70.13030.0 04.22.2007 no virus found
Ikarus T3.1.1.5 04.22.2007 no virus found
Kaspersky 4.0.2.24 04.22.2007 no virus found
McAfee 5014 04.20.2007 New Poly Win32
Microsoft 1.2405 04.22.2007 no virus found
NOD32v2 2209 04.21.2007 Win32/PSW.LdPinch.BMO
Norman 5.80.02 04.21.2007 no virus found
Panda 9.0.0.4 04.22.2007 Trj/Ldpinch.ACD
Prevx1 V2 04.22.2007 no virus found
Sophos 4.16.0 04.20.2007 Mal/Basine-C
Sunbelt 2.2.907.0 04.19.2007 VIPRE.Suspicious
Symantec 10 04.22.2007 Bloodhound.W32.1
TheHacker 6.1.6.095 04.15.2007 no virus found
VBA32 3.11.4 04.21.2007 no virus found
VirusBuster 4.3.7:9 04.21.2007 Packed/MEW
Webwasher-Gateway 6.0.1 04.22.2007 Trojan.PSW.LdPinch.BNL

Aditional Information
File size: 37603 bytes
MD5: aba92bf22fac44a0d87fb74a47b6939a
SHA1: 135988c5ba72ef2a4bd9b208130662f804fd8c11
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

P.S. редкий экземпьярчик - касперскуй не знает, а symantec знает.

[Kuzz]

В аське здесь бегал..

Complete scanning result of "my_img.pif", received in VirusTotal at 04.23.2007, 15:49:13 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.21.0 04.23.2007 Win32/Stration.worm.Gen
AntiVir 7.4.0.14 04.23.2007 TR/Crypt.XDR.Gen
Authentium 4.93.8 04.23.2007 no virus found
Avast 4.7.981.0 04.21.2007 no virus found
AVG 7.5.0.464 04.22.2007 I-Worm/Stration
BitDefender 7.2 04.23.2007 DeepScan:Generic.Stration.5DDF19F0
CAT-QuickHeal 9.00 04.23.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 04.23.2007 no virus found
DrWeb 4.33 04.23.2007 no virus found
eSafe 7.0.15.0 04.22.2007 Suspicious Trojan/Worm
eTrust-Vet 30.7.3589 04.23.2007 no virus found
Ewido 4.0 04.23.2007 no virus found
FileAdvisor 1 04.23.2007 no virus found
Fortinet 2.85.0.0 04.23.2007 suspicious
F-Prot 4.3.2.48 04.23.2007 no virus found
F-Secure 6.70.13030.0 04.23.2007 no virus found
Ikarus T3.1.1.5 04.23.2007 Trojan-Spy.Win32.Agent.hz
Kaspersky 4.0.2.24 04.23.2007 no virus found
McAfee 5014 04.20.2007 New Malware.n
Microsoft 1.2405 04.23.2007 TrojanDropper:Win32/Stration.gen!E
NOD32v2 2212 04.23.2007 a variant of Win32/Stration.XJ
Norman 5.80.02 04.23.2007 no virus found
Panda 9.0.0.4 04.23.2007 Suspicious file
Prevx1 V2 04.23.2007 no virus found
Sophos 4.16.0 04.20.2007 Mal/Packer
Sunbelt 2.2.907.0 04.19.2007 VIPRE.Suspicious
Symantec 10 04.23.2007 no virus found
TheHacker 6.1.6.088 04.09.2007 no virus found
VBA32 3.11.4 04.23.2007 MalwareScope.Worm.Warezov.1
VirusBuster 4.3.7:9 04.23.2007 Packed/Upack
Webwasher-Gateway 6.0.1 04.23.2007 Trojan.Crypt.XDR.Gen

Aditional Information
File size: 103459 bytes
MD5: 6da0222a35429e4c49f941e68a0cbb14
SHA1: a2931571c6dfd1e99daff459595b2bc7d19edcd9
packers: UPACK
packers: UPack

[Kuzz]

А это сюда, в голосование закинули:
Complete scanning result of "review-play1191.exe", received in VirusTotal at 04.23.2007, 16:22:26 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.24.0 04.23.2007 no virus found
AntiVir 7.4.0.14 04.23.2007 no virus found
Authentium 4.93.8 04.23.2007 no virus found
Avast 4.7.981.0 04.23.2007 no virus found
AVG 7.5.0.464 04.22.2007 no virus found
BitDefender 7.2 04.23.2007 no virus found
CAT-QuickHeal 9.00 04.23.2007 no virus found
ClamAV devel-20070416 04.23.2007 no virus found
DrWeb 4.33 04.23.2007 no virus found
eSafe 7.0.15.0 04.23.2007 no virus found
eTrust-Vet 30.7.3589 04.23.2007 no virus found
Ewido 4.0 04.23.2007 no virus found
FileAdvisor 1 04.23.2007 No threat detected
Fortinet 2.85.0.0 04.23.2007 no virus found
F-Prot 4.3.2.48 04.23.2007 no virus found
F-Secure 6.70.13030.0 04.23.2007 no virus found
Ikarus T3.1.1.5 04.23.2007 no virus found
Kaspersky 4.0.2.24 04.23.2007 no virus found
McAfee 5014 04.20.2007 no virus found
Microsoft 1.2405 04.23.2007 no virus found
NOD32v2 2212 04.23.2007 no virus found
Norman 5.80.02 04.23.2007 no virus found
Panda 9.0.0.4 04.23.2007 no virus found
Prevx1 V2 04.23.2007 Trojan.MoviesDVDS
Sophos 4.16.0 04.20.2007 no virus found
Sunbelt 2.2.907.0 04.19.2007 no virus found
Symantec 10 04.23.2007 no virus found
TheHacker 6.1.6.095 04.15.2007 Trojan/DNSChanger.ik
VBA32 3.11.4 04.23.2007 no virus found
VirusBuster 4.3.7:9 04.23.2007 no virus found
Webwasher-Gateway 6.0.1 04.23.2007 no virus found

Aditional Information
File size: 72044 bytes
MD5: 9eedeefeb8f9cf30ea4b3daf73e53b42
SHA1: 5df35968083d0866ea8551bfcb192002ca9c5394
packers: BINARYRES, BINARYRES
Bit9 info: http://fileadvisor.bit9.com/services...4b3daf73e53b42
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=aaaf86229590

[Kuzz]

Complete scanning result of "avz00002.dta", received in VirusTotal at 04.25.2007, 15:11:12 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.26.0 04.25.2007 no virus found
AntiVir 7.4.0.15 04.25.2007 TR/Rootkit.Agent.CC
Authentium 4.93.8 04.24.2007 no virus found
Avast 4.7.981.0 04.25.2007 no virus found
AVG 7.5.0.464 04.25.2007 no virus found
BitDefender 7.2 04.25.2007 Trojan.Rootkit.Agent.CC
CAT-QuickHeal 9.00 04.24.2007 no virus found
ClamAV devel-20070416 04.25.2007 no virus found
DrWeb 4.33 04.25.2007 no virus found
eSafe 7.0.15.0 04.25.2007 no virus found
eTrust-Vet 30.7.3594 04.25.2007 no virus found
Ewido 4.0 04.24.2007 no virus found
FileAdvisor 1 04.25.2007 no virus found
Fortinet 2.85.0.0 04.25.2007 no virus found
F-Prot 4.3.2.48 04.24.2007 no virus found
F-Secure 6.70.13030.0 04.25.2007 no virus found
Ikarus T3.1.1.5 04.25.2007 Trojan.Rootkit.Agent.CC
Kaspersky 4.0.2.24 04.25.2007 no virus found
McAfee 5016 04.24.2007 no virus found
Microsoft 1.2405 04.25.2007 no virus found
NOD32v2 2217 04.25.2007 no virus found
Norman 5.80.02 04.24.2007 no virus found
Panda 9.0.0.4 04.25.2007 no virus found
Prevx1 V2 04.25.2007 no virus found
Sophos 4.16.0 04.23.2007 no virus found
Sunbelt 2.2.907.0 04.19.2007 no virus found
Symantec 10 04.25.2007 no virus found
TheHacker 6.1.6.095 04.15.2007 no virus found
VBA32 3.11.4 04.25.2007 no virus found
VirusBuster 4.3.7:9 04.25.2007 no virus found
Webwasher-Gateway 6.0.1 04.25.2007 Trojan.Rootkit.Agent.CC

Aditional Information
File size: 8105 bytes
MD5: 9e3cfddc91678f7a53bbb747b0959b22
SHA1: eeb134297935c81dd0537c02c39b8a6fa19fd2d1

[saicat]

Complete scanning result of "Vertrag.doc.exw", received in VirusTotal at 04.25.2007, 18:18:10 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.26.0 04.25.2007 no virus found
AntiVir 7.4.0.15 04.25.2007 no virus found
Authentium 4.93.8 04.24.2007 no virus found
Avast 4.7.981.0 04.25.2007 no virus found
AVG 7.5.0.464 04.25.2007 no virus found
BitDefender 7.2 04.25.2007 no virus found
CAT-QuickHeal 9.00 04.25.2007 no virus found
ClamAV devel-20070416 04.25.2007 Trojan.Fakebill-1
DrWeb 4.33 04.25.2007 DLOADER.Trojan
eSafe 7.0.15.0 04.25.2007 no virus found
eTrust-Vet 30.7.3594 04.25.2007 no virus found
Ewido 4.0 04.25.2007 no virus found
FileAdvisor 1 04.25.2007 no virus found
Fortinet 2.85.0.0 04.25.2007 no virus found
F-Prot 4.3.2.48 04.24.2007 no virus found
F-Secure 6.70.13030.0 04.25.2007 no virus found
Ikarus T3.1.1.5 04.25.2007 Trojan-Downloader.Win32.Small
Kaspersky 4.0.2.24 04.25.2007 no virus found
McAfee 5017 04.25.2007 Downloader-AAP
Microsoft 1.2405 04.25.2007 no virus found
NOD32v2 2218 04.25.2007 a variant of Win32/TrojanDownloader.Nurech.BG
Norman 5.80.02 04.25.2007 no virus found
Panda 9.0.0.4 04.25.2007 Suspicious file
Prevx1 V2 04.25.2007 no virus found
Sophos 4.16.0 04.23.2007 no virus found
Sunbelt 2.2.907.0 04.19.2007 no virus found
Symantec 10 04.25.2007 no virus found
TheHacker 6.1.6.095 04.15.2007 no virus found
VBA32 3.11.4 04.25.2007 no virus found
VirusBuster 4.3.7:9 04.25.2007 no virus found
Webwasher-Gateway 6.0.1 04.25.2007 no virus found

Aditional Information
File size: 19456 bytes
MD5: ca0b6a262396cc85869455150f8ef94f
SHA1: bfdb87d4fd273865493e2308544c1feeac83ba6c