Исследование антивирусов 5

**Макcим** · 08.07.2007, 18:35

Свежачок

AhnLab-V3 2007.7.7.0 07.06.2007 no virus found
AntiVir 7.4.0.39 07.07.2007 HEUR/Crypted
Authentium 4.93.8 07.07.2007 no virus found
Avast 4.7.997.0 07.06.2007 no virus found
AVG 7.5.0.476 07.07.2007 no virus found
BitDefender 7.2 07.08.2007 no virus found
CAT-QuickHeal 9.00 07.07.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 07.07.2007 no virus found
DrWeb 4.33 07.07.2007 no virus found
eSafe 7.0.15.0 07.06.2007 Suspicious Trojan/Worm
eTrust-Vet 30.8.3769 07.07.2007 no virus found
Ewido 4.0 07.07.2007 no virus found
FileAdvisor 1 07.08.2007 no virus found
Fortinet 2.91.0.0 07.08.2007 no virus found
F-Prot 4.3.2.48 07.06.2007 no virus found
F-Secure 6.70.13260.0 07.07.2007 no virus found
Ikarus T3.1.1.8 07.08.2007 no virus found
Kaspersky 4.0.2.24 07.08.2007 Trojan.Win32.Pakes.au
McAfee 5069 07.06.2007 no virus found
Microsoft 1.2704 07.08.2007 no virus found
NOD32v2 2384 07.08.2007 no virus found
Norman 5.80.02 07.06.2007 no virus found
Panda 9.0.0.4 07.07.2007 Suspicious file
Sophos 4.19.0 07.06.2007 no virus found
Sunbelt 2.2.907.0 07.07.2007 no virus found
Symantec 10 07.08.2007 no virus found
TheHacker 6.1.6.143 07.05.2007 no virus found
VBA32 3.12.0.2 07.07.2007 no virus found
VirusBuster 4.3.23:9 07.07.2007 no virus found
Webwasher-Gateway 6.0.1 07.08.2007 Heuristic.Crypted

Kaspersky эвристиком семерки (максимальные настройки) тоже не детектил.

Добавлено через 1 час 46 минут
Ещё один архивчик и опять Касперский промолчал

AhnLab-V3 2007.7.7.0 07.06.2007 no virus found
AntiVir 7.4.0.39 07.07.2007 no virus found
Authentium 4.93.8 07.07.2007 no virus found
Avast 4.7.997.0 07.06.2007 no virus found
AVG 7.5.0.476 07.07.2007 no virus found
BitDefender 7.2 07.08.2007 Application.Hotkeyshook.A
CAT-QuickHeal 9.00 07.07.2007 CrackTool.HotHook.dll (Not a Virus)
ClamAV devel-20070416 07.07.2007 Trojan.W32.HotKeysHook.A-2
DrWeb 4.33 07.07.2007 no virus found
eSafe 7.0.15.0 07.06.2007 no virus found
eTrust-Vet 30.8.3769 07.07.2007 no virus found
Ewido 4.0 07.08.2007 no virus found
FileAdvisor 1 07.08.2007 no virus found
Fortinet 2.91.0.0 07.08.2007 W32/Hotkeys.B!tr
F-Prot 4.3.2.48 07.06.2007 W32/Keylogger.BQ
F-Secure 6.70.13260.0 07.07.2007 W32/HotKeys.A
Ikarus T3.1.1.8 07.08.2007 Win32.KeyLogger.HatKeys
Kaspersky 4.0.2.24 07.08.2007 no virus found
McAfee 5069 07.06.2007 no virus found
Microsoft 1.2704 07.08.2007 no virus found
NOD32v2 2384 07.08.2007 Win32/Keylogger.HotKeysHook.A
Norman 5.80.02 07.06.2007 no virus found
Panda 9.0.0.4 07.08.2007 Suspicious file
Sophos 4.19.0 07.06.2007 HotKeys Hook
Sunbelt 2.2.907.0 07.07.2007 no virus found
Symantec 10 07.08.2007 no virus found
TheHacker 6.1.6.143 07.05.2007 no virus found
VBA32 3.12.0.2 07.07.2007 RiskWare.CrackTool.Win32.HotHook.dll
VirusBuster 4.3.23:9 07.07.2007 no virus found
Webwasher-Gateway 6.0.1 07.08.2007 Riskware.PSW.HotKeys

Добавлено через 1 час 12 минут
Complete scanning result of "test.rar", received in VirusTotal at 07.08.2007, 12:46:09 (CET).

AhnLab-V3 2007.7.7.0 07.06.2007 no virus found
AntiVir 7.4.0.39 07.07.2007 TR/Agent.8889
Authentium 4.93.8 07.07.2007 no virus found
Avast 4.7.997.0 07.06.2007 no virus found
AVG 7.5.0.476 07.07.2007 Downloader.Tibs.5.BO
BitDefender 7.2 07.08.2007 GenPack:Trojan.Downloader.Tibs.GXD
CAT-QuickHeal 9.00 07.07.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 07.08.2007 no virus found
DrWeb 4.33 07.08.2007 Trojan.Packed.142
eSafe 7.0.15.0 07.06.2007 Win32.Packed.13
eTrust-Vet 30.8.3769 07.07.2007 no virus found
Ewido 4.0 07.08.2007 no virus found
FileAdvisor 1 07.08.2007 no virus found
Fortinet 2.91.0.0 07.08.2007 Possible_Nucrp.3
F-Prot 4.3.2.48 07.06.2007 no virus found
F-Secure 6.70.13260.0 07.07.2007 Trojan-Downloader.Win32.Agent.bhp
Ikarus T3.1.1.8 07.08.2007 Packed.Win32.Tibs.an
Kaspersky 4.0.2.24 07.08.2007 Packed.Win32.Tibs.an
McAfee 5069 07.06.2007 New Win32.g2
Microsoft 1.2704 07.08.2007 TrojanDownloader:Win32/Vxgame
NOD32v2 2384 07.08.2007 Win32/TrojanDownloader.Small.AWA
Norman 5.80.02 07.06.2007 no virus found
Panda 9.0.0.4 07.08.2007 Suspicious file
Sophos 4.19.0 07.06.2007 Mal/Dorf-C
Sunbelt 2.2.907.0 07.07.2007 Trojan.Vxgame.z
Symantec 10 07.08.2007 Trojan.Packed.13
TheHacker 6.1.6.143 07.05.2007 Trojan/Downloader.Tibs.mq
VBA32 3.12.0.2 07.07.2007 OScope.Worm.GMA.Nuwar
VirusBuster 4.3.23:9 07.07.2007 Trojan.Tibs.Gen!Pac.126
Webwasher-Gateway 6.0.1 07.08.2007 Trojan.Agent.8889

Добавлено через 3 часа 37 минут
Complete scanning result of "SCardDR.rar", received in VirusTotal at 07.08.2007, 16:12:33 (CET).

AhnLab-V3 2007.7.7.0 07.06.2007 no virus found
AntiVir 7.4.0.39 07.08.2007 no virus found
Authentium 4.93.8 07.07.2007 no virus found
Avast 4.7.997.0 07.08.2007 no virus found
AVG 7.5.0.476 07.07.2007 no virus found
BitDefender 7.2 07.08.2007 no virus found
CAT-QuickHeal 9.00 07.07.2007 no virus found
ClamAV devel-20070416 07.08.2007 no virus found
DrWeb 4.33 07.08.2007 Trojan.MulDrop.7430
eSafe 7.0.15.0 07.08.2007 no virus found
eTrust-Vet 30.8.3769 07.07.2007 no virus found
Ewido 4.0 07.08.2007 no virus found
FileAdvisor 1 07.08.2007 no virus found
Fortinet 2.91.0.0 07.08.2007 no virus found
F-Prot 4.3.2.48 07.06.2007 no virus found
Ikarus T3.1.1.8 07.08.2007 Virus.VBS.Agent.c
Kaspersky 4.0.2.24 07.08.2007 Virus.VBS.Agent.c
McAfee 5069 07.06.2007 New Script
Microsoft 1.2704 07.08.2007 no virus found
NOD32v2 2384 07.08.2007 no virus found
Norman 5.80.02 07.06.2007 no virus found
Panda 9.0.0.4 07.08.2007 no virus found
Sophos 4.19.0 07.06.2007 no virus found
Sunbelt 2.2.907.0 07.07.2007 no virus found
Symantec 10 07.08.2007 no virus found
TheHacker 6.1.6.143 07.05.2007 no virus found
VBA32 3.12.0.2 07.07.2007 no virus found
VirusBuster 4.3.23:9 07.07.2007 no virus found
Webwasher-Gateway 6.0.1 07.08.2007 no virus found

Надоело быть жертвой? Стань профи по информационной безопасности, получай самую свежую информацию об угрозах и средствах защиты от ведущего российского аналитического центра Anti-Malware.ru:

**drongo** · 09.07.2007, 11:54

T=10861

Код:

Complete scanning result of "avz00003.dta", received in VirusTotal at 07.09.2007, 09:49:18 (CET).

Antivirus	Version	Update	Result
AhnLab-V3	2007.7.7.0	07.09.2007	no virus found
AntiVir	7.4.0.39	07.09.2007	TR/Spy.Bzub.B
Authentium	4.93.8	07.07.2007	no virus found
Avast	4.7.997.0	07.08.2007	no virus found
AVG	7.5.0.476	07.08.2007	no virus found
BitDefender	7.2	07.09.2007	no virus found
CAT-QuickHeal	9.00	07.07.2007	no virus found
ClamAV	devel-20070416	07.09.2007	no virus found
DrWeb	4.33	07.09.2007	Trojan.Spambot.2369
eSafe	7.0.15.0	07.08.2007	no virus found
eTrust-Vet	30.8.3774	07.09.2007	no virus found
Ewido	4.0	07.08.2007	no virus found
FileAdvisor	1	07.09.2007	no virus found
Fortinet	2.91.0.0	07.09.2007	Cimuz.CM!tr
F-Prot	4.3.2.48	07.06.2007	no virus found
Ikarus	T3.1.1.8	07.09.2007	no virus found
Kaspersky	4.0.2.24	07.09.2007	no virus found
McAfee	5069	07.06.2007	no virus found
Microsoft	1.2704	07.09.2007	Trojan:Win32/Mespam.B
NOD32v2	2384	07.08.2007	no virus found
Norman	5.80.02	07.06.2007	no virus found
Panda	9.0.0.4	07.08.2007	no virus found
Sophos	4.19.0	07.06.2007	Troj/Cimuz-CM
Sunbelt	2.2.907.0	07.07.2007	Trojan.Win32/Mespam.B
Symantec	10	07.09.2007	no virus found
TheHacker	6.1.6.144	07.09.2007	no virus found
VBA32	3.12.0.2	07.08.2007	no virus found
VirusBuster	4.3.23:9	07.08.2007	no virus found
Webwasher-Gateway	6.0.1	07.09.2007	Trojan.Spy.Bzub.B

Aditional Information
File size: 135168 bytes
MD5: b798e9d6a089c4911e424f5efd3cb801
SHA1: 9faed10f39fb76292f7ff8e213862953a58a42e6

**V_Bond** · 09.07.2007, 12:18

mplete scanning result of "reset5.dll", received in VirusTotal at 07.09.2007, 10:05:37 (CET).
Antivirus Version Update Result
AhnLab-V3 2007.7.7.0 07.09.2007 Win-AppCare/Reseterm.17408
AntiVir 7.4.0.39 07.09.2007 no virus found
Authentium 4.93.8 07.07.2007 no virus found
Avast 4.7.997.0 07.08.2007 no virus found
AVG 7.5.0.476 07.08.2007 Downloader.Tibs.5.AK
BitDefender 7.2 07.09.2007 no virus found
CAT-QuickHeal 9.00 07.07.2007 no virus found
ClamAV devel-20070416 07.09.2007 no virus found
DrWeb 4.33 07.09.2007 no virus found
eSafe 7.0.15.0 07.08.2007 Suspicious Trojan/Worm
eTrust-Vet 30.8.3774 07.09.2007 no virus found
Ewido 4.0 07.08.2007 no virus found
FileAdvisor 1 07.09.2007 no virus found
Fortinet 2.91.0.0 07.09.2007 no virus found
F-Prot 4.3.2.48 07.06.2007 no virus found
Ikarus T3.1.1.8 07.09.2007 no virus found
Kaspersky 4.0.2.24 07.09.2007 no virus found
McAfee 5069 07.06.2007 no virus found
Microsoft 1.2704 07.09.2007 no virus found
NOD32v2 2384 07.08.2007 no virus found
Norman 5.80.02 07.06.2007 no virus found
Panda 9.0.0.4 07.08.2007 no virus found
Sophos 4.19.0 07.06.2007 WPA Reset
Sunbelt 2.2.907.0 07.07.2007 no virus found
Symantec 10 07.09.2007 no virus found
TheHacker 6.1.6.144 07.09.2007 no virus found
VBA32 3.12.0.2 07.08.2007 no virus found
VirusBuster 4.3.23:9 07.08.2007 no virus found
Webwasher-Gateway 6.0.1 07.09.2007 no virus found

Aditional Information
File size: 17408 bytes
MD5: 4bbb069330b8124085eb38eb4391dcd9
SHA1: 0629ede68f31944e010723f3af5c44debf30834e
packers: PECOMPACT
packers: PECompact
это после рассылки вендорам только Sophos увидел ...

The sample e-mail you have sent in for analysis does contain viral file(s).

Files detected as App/WPAReset-A , Adware
(Only with Sophos Antivirus Version 6 and above )

**Макcим** · 10.07.2007, 01:50

AhnLab-V3 2007.7.7.0 07.09.2007 no virus found
AntiVir 7.4.0.39 07.09.2007 TR/Drop.Sp.102104.B
Authentium 4.93.8 07.07.2007 no virus found
Avast 4.7.997.0 07.08.2007 no virus found
AVG 7.5.0.476 07.08.2007 no virus found
BitDefender 7.2 07.09.2007 Trojan.Popuper.CA
CAT-QuickHeal 9.00 07.09.2007 TrojanSpy.BZub.ip
ClamAV devel-20070416 07.09.2007 Trojan.Spy-8939
DrWeb 4.33 07.09.2007 Trojan.Popuper
eSafe 7.0.15.0 07.08.2007 no virus found
eTrust-Vet 30.8.3774 07.09.2007 no virus found
Ewido 4.0 07.09.2007 Logger.BZub.nel
FileAdvisor 1 07.09.2007 no virus found
Fortinet 2.91.0.0 07.09.2007 no virus found
F-Prot 4.3.2.48 07.06.2007 no virus found
Ikarus T3.1.1.8 07.09.2007 Trojan-Spy.Win32.BZub.ip
Kaspersky 4.0.2.24 07.09.2007 Trojan-Spy.Win32.BZub.ip
McAfee 5069 07.06.2007 Spy-Agent.ba.gen
Microsoft 1.2704 07.09.2007 TrojanDropper:Win32/Small.OT
NOD32v2 2385 07.09.2007 Win32/Spy.BZub.NEL
Norman 5.80.02 07.06.2007 no virus found
Panda 9.0.0.4 07.09.2007 Trj/Cimuz.FX
Sophos 4.19.0 07.06.2007 Mal/Cimuz-A
Sunbelt 2.2.907.0 07.07.2007 no virus found
TheHacker 6.1.6.144 07.09.2007 Trojan/Agent.gen
VBA32 3.12.0.2 07.08.2007 Trojan.Popuper
VirusBuster 4.3.23:9 07.09.2007 no virus found
Webwasher-Gateway 6.0.1 07.09.2007 Trojan.Drop.Sp.102104.B

Добавлено через 6 часов 17 минут
File "test.rar" received on 07.09.2007 at 23:42:03 (CET) is being scanned by VirusTotal in this moment. Results will be shown as they're generated.

AhnLab-V3 2007.7.7.0 07.09.2007 no virus found
AntiVir 7.4.0.39 07.09.2007 TR/Agent.aqu
Authentium 4.93.8 07.09.2007 no virus found
Avast 4.7.997.0 07.09.2007 Win32:Agent-IWR
AVG 7.5.0.476 07.09.2007 Generic5.AZE
BitDefender 7.2 07.09.2007 no virus found
CAT-QuickHeal 9.00 07.09.2007 Rootkit.Agent.ad
ClamAV devel-20070416 07.09.2007 no virus found
DrWeb 4.33 07.09.2007 BackDoor.Friend
eSafe 7.0.15.0 07.08.2007 suspicious Trojan/Worm
eTrust-Vet 30.8.3776 07.09.2007 no virus found
Ewido 4.0 07.09.2007 no virus found
FileAdvisor 1 07.09.2007 no virus found
Fortinet 2.91.0.0 07.09.2007 no virus found
F-Prot 4.3.2.48 07.09.2007 no virus found
Ikarus T3.1.1.8 07.09.2007 Trojan.Win32.Agent.aqu
Kaspersky 4.0.2.24 07.09.2007 Trojan.Win32.Agent.aqu
McAfee 5070 07.09.2007 no virus found
Microsoft 1.2704 07.09.2007 no virus found
NOD32v2 2386 07.09.2007 a variant of Win32/Adware.Virtumonde.O
Norman 5.80.02 07.09.2007 no virus found
Panda 9.0.0.4 07.09.2007 Spyware/Virtumonde
Sophos 4.19.0 07.06.2007 Virtumundo
Sunbelt 2.2.907.0 07.07.2007 VIPRE.Suspicious
Symantec 10 07.09.2007 no virus found
TheHacker 6.1.6.144 07.09.2007 Trojan/Agent.aqu
VBA32 3.12.0.2 07.09.2007 BackDoor.Friend
VirusBuster 4.3.23:9 07.09.2007 no virus found
Webwasher-Gateway 6.0.1 07.09.2007 Trojan.Agent.aqu

**drongo** · 10.07.2007, 13:25

T=10933
Complete scanning result of "avz00005.dta", received in VirusTotal at 07.10.2007, 11:10:47 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.7.7.0 07.10.2007 no virus found
AntiVir 7.4.0.39 07.10.2007 HEUR/Malware
Authentium 4.93.8 07.09.2007 no virus found
Avast 4.7.997.0 07.09.2007 no virus found
AVG 7.5.0.476 07.09.2007 no virus found
BitDefender 7.2 07.10.2007 BehavesLike:Trojan.StartPage
CAT-QuickHeal 9.00 07.09.2007 no virus found
ClamAV devel-20070416 07.10.2007 no virus found
DrWeb 4.33 07.10.2007 no virus found
eSafe 7.0.15.0 07.08.2007 no virus found
eTrust-Vet 30.8.3777 07.10.2007 no virus found
Ewido 4.0 07.10.2007 no virus found
FileAdvisor 1 07.10.2007 no virus found
Fortinet 2.91.0.0 07.10.2007 no virus found
F-Prot 4.3.2.48 07.09.2007 no virus found
Ikarus T3.1.1.8 07.10.2007 no virus found
Kaspersky 4.0.2.24 07.10.2007 no virus found
McAfee 5070 07.09.2007 no virus found
Microsoft 1.2704 07.10.2007 no virus found
NOD32v2 2389 07.10.2007 probably unknown NewHeur_PE virus
Norman 5.80.02 07.09.2007 W32/Malware
Panda 9.0.0.4 07.10.2007 Suspicious file
Sophos 4.19.0 07.06.2007 no virus found
Sunbelt 2.2.907.0 07.07.2007 no virus found
Symantec 10 07.10.2007 no virus found
TheHacker 6.1.6.144 07.09.2007 no virus found
VBA32 3.12.0.2 07.09.2007 no virus found
VirusBuster 4.3.23:9 07.09.2007 no virus found
Webwasher-Gateway 6.0.1 07.10.2007 Heuristic.Malware

Aditional Information
File size: 9216 bytes
MD5: e2902ae694d9cb8f748a5dea022d4cf6
SHA1: fb7e6e37a7a38a1966ef9559e67c80014dc85c9c
norman sandbox: [ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: [email protected] - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* File length: 9216 bytes.

[ Changes to registry ]
* Modifies value "Start Page"="http://scanner.malwarealarm.com/3/?advid=732" in key "HKCUSoftwareMicrosoftInternet ExplorerMain".

[ Network services ]
* Looks for an Internet connection.

[ Process/window information ]
* Attemps to open jlfU%ywfyX .
* Attemps to open hp://scanner.malwarealarm.com/10/?advid=732 .
* Attemps to open hp://go.errorprotector.com/MTUxNzI=/...1/in=1/epp=1// .
* Attemps to open hp://go.winantispyware.com/MTM4MDE=/...=1/ed=1/ex=1// .
* Attemps to open hp://scanner.malwarealarm.com/5/?advid=732 .
* Attemps to open hp://go.errorsafe.com/MTUxNzE=/2/5294/ax=1/ed=1/ex=1// .
* Attemps to open hp://go.systemdoctor.com/MTM4MDA=/2/...=1/ed=1/ex=1// .
* Attemps to open hp://go.drivecleaner.com/MTM4MDI=/2/...=1/ed=1/ex=1// .
* Attemps to open hp://softwarereferral.com/jump.php?w...MTY4Ojo=&lid=1 .
* Attemps to open hp://go.winantivirus.com/MTM3MTA=/2/...=1/ed=1/ex=1// .
* Attemps to open hp://softwarereferral.com/jump.php?w...MTY4Ojo=&lid=2 .
* Attemps to open hp://www.canadianmedsworld.com/?aid=670 .
* Attemps to open hp://scanner.malwarealarm.com/8/?advid=732 .
* Attemps to open hp://scanner.malwarealarm.com/9/?advid=732 .
* Attemps to open hp://www.canadianpharmacyltd.com/?aid=670 .
* Attemps to open hp://softwarereferral.com/jump.php?w...MTY4Ojo=&lid=7 .
* Attemps to open hp://scanner.malwarealarm.com/3/?advid=732 .
* Attemps to open hp://scanner.malwarealarm.com/4/?advid=732 .

люблю я такие примеры

7 касперский с максимальной эвристикой ловит, ещё один реальный пример того,что нужно менять версию каспера на вирустотале. Я уже написал им, но никакого ответа не получил. Пишите тоже, чем больше напишут, тем быстрее заменят.

**Макcим** · 10.07.2007, 13:44

**yu_mor** · 10.07.2007, 15:19

гордо лежал на рабочем столе:
Complete scanning result of "file.exe", received in VirusTotal at 07.10.2007, 12:59:42 (CET).
Antivirus Version Update Result
AhnLab-V3 2007.7.7.0 07.10.2007 no virus found
AntiVir 7.4.0.39 07.10.2007 TR/Crypt.XPACK.Gen
Authentium 4.93.8 07.09.2007 no virus found
Avast 4.7.997.0 07.09.2007 no virus found
AVG 7.5.0.476 07.09.2007 Generic5.FRJ
BitDefender 7.2 07.10.2007 Trojan.PWS.LdPinch.BSJ
CAT-QuickHeal 9.00 07.09.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 07.10.2007 no virus found
DrWeb 4.33 07.10.2007 Trojan.PWS.LDPinch.1417
eSafe 7.0.15.0 07.08.2007 Win32.PolyCrypt.b
eTrust-Vet 30.8.3777 07.10.2007 no virus found
Ewido 4.0 07.10.2007 no virus found
FileAdvisor 1 07.10.2007 no virus found
Fortinet 2.91.0.0 07.10.2007 W32/Basine.B
F-Prot 4.3.2.48 07.09.2007 no virus found
Ikarus T3.1.1.8 07.10.2007 Packed.Win32.PolyCrypt.b
Kaspersky 4.0.2.24 07.10.2007 Packed.Win32.PolyCrypt.b
McAfee 5070 07.09.2007 no virus found
Microsoft 1.2704 07.10.2007 Trojan:Win32/Anomaly.gen!A
NOD32v2 2389 07.10.2007 no virus found
Norman 5.80.02 07.10.2007 no virus found
Panda 9.0.0.4 07.10.2007 no virus found
Sophos 4.19.0 07.06.2007 Mal/Basine-C
Sunbelt 2.2.907.0 07.07.2007 no virus found
Symantec 10 07.10.2007 no virus found
TheHacker 6.1.6.144 07.09.2007 no virus found
VBA32 3.12.0.2 07.09.2007 no virus found
VirusBuster 4.3.23:9 07.09.2007 Trojan.DR.Cimuz.Gen.1
Webwasher-Gateway 6.0.1 07.10.2007 Trojan.Crypt.XPACK.Gen

Aditional Information
File size: 52526 bytes
MD5: df8c8940526488e6080a77e7dbe9b4a4
SHA1: 30daa45fa817aebb2bbb68b1affbe4ff3b0d2016

**Макcим** · 10.07.2007, 15:45

**Макcим** · 11.07.2007, 19:28

AhnLab-V3 2007.7.11.1 20070711 no virus found
AntiVir 7.4.0.39 20070711 HEUR/Malware
Authentium 4.93.8 20070710 no virus found
Avast 4.7.997.0 20070711 no virus found
AVG 7.5.0.476 20070710 SHeur.MK
BitDefender 7.2 20070711 no virus found
CAT-QuickHeal 9.00 20070711 no virus found
ClamAV devel-20070416 20070711 no virus found
DrWeb 4.33 20070711 no virus found
eSafe 7.0.15.0 20070710 suspicious Trojan/Worm
eTrust-Vet 30.8.3779 20070711 no virus found
Ewido 4.0 20070711 no virus found
FileAdvisor 1 20070711 no virus found
Fortinet 2.91.0.0 20070711 no virus found
F-Prot 4.3.2.48 20070710 no virus found
Ikarus T3.1.1.8 20070711 no virus found
Kaspersky 4.0.2.24 20070711 no virus found
McAfee 5071 20070710 no virus found
Microsoft 1.2704 20070711 no virus found
NOD32v2 2392 20070711 no virus found
Norman 5.80.02 20070711 no virus found
Panda 9.0.0.4 20070711 no virus found
Sophos 4.19.0 20070706 no virus found
Sunbelt 2.2.907.0 20070711 no virus found
Symantec 10 20070711 no virus found
TheHacker 6.1.6.144 20070709 no virus found
VBA32 3.12.0.2 20070710 no virus found
VirusBuster 4.3.23:9 20070711 no virus found
Webwasher-Gateway 6.0.1 20070711 Heuristic.Malware

*************************************************

Добавлено через 35 минут
AhnLab-V3 2007.7.11.1 20070711 no virus found
AntiVir 7.4.0.39 20070711 TR/DNSChanger.76041
Authentium 4.93.8 20070710 no virus found
Avast 4.7.997.0 20070711 no virus found
AVG 7.5.0.476 20070710 Downloader.Zlob.DEZ
BitDefender 7.2 20070711 DeepScan:Generic.Zlob.7.41F1B32B
CAT-QuickHeal 9.00 20070711 no virus found
ClamAV devel-20070416 20070711 no virus found
DrWeb 4.33 20070711 no virus found
eSafe 7.0.15.0 20070710 Win32.Zlob.acn
eTrust-Vet 30.8.3779 20070711 no virus found
Ewido 4.0 20070711 no virus found
FileAdvisor 1 20070711 no virus found
Fortinet 2.91.0.0 20070711 W32/DNSChanger.JC!tr
F-Prot 4.3.2.48 20070710 no virus found
Ikarus T3.1.1.8 20070711 Generic.Zlob.7
Kaspersky 4.0.2.24 20070711 no virus found
McAfee 5071 20070710 no virus found
Microsoft 1.2704 20070711 no virus found
NOD32v2 2393 20070711 Win32/TrojanDownloader.Zlob
Norman 5.80.02 20070711 Zlob.AIZJ
Panda 9.0.0.4 20070711 Adware/XXXAccess
Sophos 4.19.0 20070706 no virus found
Sunbelt 2.2.907.0 20070711 no virus found
Symantec 10 20070711 Trojan.Zlob
TheHacker 6.1.6.144 20070709 no virus found
VBA32 3.12.0.2 20070710 no virus found
VirusBuster 4.3.23:9 20070711 no virus found
Webwasher-Gateway 6.0.1 20070711 Trojan.DNSChanger.76041

**PavelA** · 12.07.2007, 16:28

Тема 11000 Файл rstrui.exe

AhnLab-V3 2007.7.12.1 2007.07.12 no virus found
AntiVir 7.4.0.39 2007.07.12 no virus found
Authentium 4.93.8 2007.07.12 no virus found
Avast 4.7.997.0 2007.07.12 no virus found
AVG 7.5.0.476 2007.07.12 no virus found
BitDefender 7.2 2007.07.12 no virus found
CAT-QuickHeal 9.00 2007.07.12 (Suspicious) - DNAScan
ClamAV devel-20070416 2007.07.12 no virus found
DrWeb 4.33 2007.07.12 no virus found
eSafe 7.0.15.0 2007.07.10 no virus found
eTrust-Vet 30.8.3781 2007.07.12 no virus found
Ewido 4.0 2007.07.12 no virus found
FileAdvisor 1 2007.07.12 no virus found
Fortinet 2.91.0.0 2007.07.12 no virus found
F-Prot 4.3.2.48 2007.07.11 no virus found
Ikarus T3.1.1.8 2007.07.12 no virus found
Kaspersky 4.0.2.24 2007.07.12 no virus found
McAfee 5072 2007.07.11 no virus found
Microsoft 1.2704 2007.07.12 no virus found
NOD32v2 2395 2007.07.12 no virus found
Norman 5.80.02 2007.07.12 no virus found
Panda 9.0.0.4 2007.07.12 no virus found
Sophos 4.19.0 2007.07.06 no virus found
Sunbelt 2.2.907.0 2007.07.12 VIPRE.Suspicious
Symantec 10 2007.07.12 no virus found
TheHacker 6.1.6.145 2007.07.12 no virus found
VBA32 3.12.0.2 2007.07.12 no virus found
VirusBuster 4.3.23:9 2007.07.11 no virus found
Webwasher-Gateway 6.0.1 2007.07.12 Win32.Malware.gen (suspicious

По Симантеку 10.1.4.4000 - w32.virut.j. Поражает exe-файлы.

**Макcим** · 12.07.2007, 18:30

Из темы http://virusinfo.info/showthread.php?t=10996
По вердикту аналитиков ЛК avz00006.dta - Virus.Win9x.Zom.864

AhnLab-V3 2007.7.13.0 2007.07.12 no virus found
AntiVir 7.4.0.39 2007.07.12 no virus found
Authentium 4.93.8 2007.07.12 no virus found
Avast 4.7.997.0 2007.07.12 no virus found
AVG 7.5.0.476 2007.07.12 no virus found
BitDefender 7.2 2007.07.12 no virus found
CAT-QuickHeal 9.00 2007.07.12 no virus found
ClamAV devel-20070416 2007.07.12 no virus found
eSafe 7.0.15.0 2007.07.10 Suspicious Trojan/Worm
eTrust-Vet 30.8.3781 2007.07.12 no virus found
Ewido 4.0 2007.07.12 no virus found
FileAdvisor 1 2007.07.12 no virus found
Fortinet 2.91.0.0 2007.07.12 no virus found
F-Prot 4.3.2.48 2007.07.11 no virus found
Ikarus T3.1.1.8 2007.07.12 no virus found
Kaspersky 4.0.2.24 2007.07.12 Virus.Win9x.Zom.864
McAfee 5072 2007.07.11 New Malware.aj
Microsoft 1.2704 2007.07.12 no virus found
NOD32v2 2395 2007.07.12 no virus found
Norman 5.80.02 2007.07.12 W32/Suspicious_U.gen
Panda 9.0.0.4 2007.07.12 no virus found
Sophos 4.19.0 2007.07.06 Mal/Packer
Sunbelt 2.2.907.0 2007.07.12 VIPRE.Suspicious
Symantec 10 2007.07.12 no virus found
TheHacker 6.1.6.145 2007.07.12 no virus found
VBA32 3.12.0.2 2007.07.12 no virus found
VirusBuster 4.3.23:9 2007.07.12
Webwasher-Gateway 6.0.1 2007.07.12 Win32.Malware.gen (suspicious)

**Muzzle** · 13.07.2007, 05:33

Свежачок из темы http://virusinfo.info/showthread.php?t=10990
файл blink.dll

Antivirus Version Last Update Result
AhnLab-V3 2007.7.13.0 2007.07.12 no virus found
AntiVir 7.4.0.39 2007.07.12 no virus found
Authentium 4.93.8 2007.07.12 no virus found
Avast 4.7.997.0 2007.07.12 no virus found
AVG 7.5.0.476 2007.07.12 no virus found
BitDefender 7.2 2007.07.13 no virus found
CAT-QuickHeal 9.00 2007.07.12 no virus found
ClamAV devel-20070416 2007.07.13 no virus found
DrWeb 4.33 2007.07.12 DLOADER.Trojan
eSafe 7.0.15.0 2007.07.10 no virus found
eTrust-Vet 30.8.3782 2007.07.12 no virus found
Ewido 4.0 2007.07.12 no virus found
FileAdvisor 1 2007.07.13 no virus found
Fortinet 2.91.0.0 2007.07.12 no virus found
F-Prot 4.3.2.48 2007.07.11 no virus found
Ikarus T3.1.1.8 2007.07.12 no virus found
Kaspersky 4.0.2.24 2007.07.13 Backdoor.Win32.Agent.aqr
McAfee 5073 2007.07.12 no virus found
Microsoft 1.2704 2007.07.12 no virus found
NOD32v2 2396 2007.07.12 no virus found
Norman 5.80.02 2007.07.12 no virus found
Panda 9.0.0.4 2007.07.12 Suspicious file
Sophos 4.19.0 2007.07.06 no virus found
Sunbelt 2.2.907.0 2007.07.12 no virus found
Symantec 10 2007.07.13 no virus found
TheHacker 6.1.6.145 2007.07.12 no virus found
VBA32 3.12.0.2 2007.07.12 no virus found
VirusBuster 4.3.23:9 2007.07.12 no virus found
Webwasher-Gateway 6.0.1 2007.07.13 no virus found
Aditional information
File size: 120617 bytes
MD5: 97608ec010006982c8947ece097f8445
SHA1: d46fe590e5d8b03abefd2281ad839bc5dfac6baa

Добавлено через 2 часа 3 минуты
Ещё одна новинка

детектит только Касперский
2kadiras.exe

AhnLab-V3 2007.7.13.0 2007.07.12 no virus found
AntiVir 7.4.0.39 2007.07.12 no virus found
Authentium 4.93.8 2007.07.12 no virus found
Avast 4.7.997.0 2007.07.12 no virus found
AVG 7.5.0.476 2007.07.12 no virus found
BitDefender 7.2 2007.07.13 no virus found
CAT-QuickHeal 9.00 2007.07.12 no virus found
ClamAV devel-20070416 2007.07.13 no virus found
DrWeb 4.33 2007.07.12 no virus found
eSafe 7.0.15.0 2007.07.10 no virus found
eTrust-Vet 30.8.3782 2007.07.12 no virus found
Ewido 4.0 2007.07.12 no virus found
FileAdvisor 1 2007.07.13 no virus found
Fortinet 2.91.0.0 2007.07.12 no virus found
F-Prot 4.3.2.48 2007.07.11 no virus found
Ikarus T3.1.1.8 2007.07.12 no virus found
Kaspersky 4.0.2.24 2007.07.13 not-a-virus

orn-Dialer.Win32.Agent.bb
McAfee 5073 2007.07.12 no virus found
Microsoft 1.2704 2007.07.12 no virus found
NOD32v2 2396 2007.07.12 no virus found
Norman 5.80.02 2007.07.12 no virus found
Panda 9.0.0.4 2007.07.12 no virus found
Sophos 4.19.0 2007.07.06 no virus found
Sunbelt 2.2.907.0 2007.07.12 no virus found
Symantec 10 2007.07.13 no virus found
TheHacker 6.1.6.145 2007.07.12 no virus found
VBA32 3.12.0.2 2007.07.13 no virus found
VirusBuster 4.3.23:9 2007.07.12 no virus found
Webwasher-Gateway 6.0.1 2007.07.13 no virus found
Aditional information
File size: 25104 bytes
MD5: 9a1e16d1f5cabe8c0f93f1b759e82955
SHA1: bfab242afe999102524f16fd2d22aa7970f7d01e

**drongo** · 13.07.2007, 14:12

T=11011

File avz00002.dta received on 07.13.2007 12:03:41 (CET)

Antivirus Version Last Update Result
AhnLab-V3 2007.7.13.0 2007.07.13 no virus found
AntiVir 7.4.0.39 2007.07.13 HEUR/Malware
Authentium 4.93.8 2007.07.13 no virus found
Avast 4.7.997.0 2007.07.12 no virus found
AVG 7.5.0.476 2007.07.12 no virus found
BitDefender 7.2 2007.07.13 no virus found
CAT-QuickHeal 9.00 2007.07.12 no virus found
ClamAV devel-20070416 2007.07.13 no virus found
DrWeb 4.33 2007.07.13 no virus found
eSafe 7.0.15.0 2007.07.10 no virus found
eTrust-Vet 30.8.3783 2007.07.13 no virus found
Ewido 4.0 2007.07.12 no virus found
FileAdvisor 1 2007.07.13 no virus found
Fortinet 2.91.0.0 2007.07.13 no virus found
F-Prot 4.3.2.48 2007.07.13 no virus found
Ikarus T3.1.1.8 2007.07.13 no virus found
Kaspersky 4.0.2.24 2007.07.13 not-a-virus:AdWare.Win32.Zhongsou.g
McAfee 5073 2007.07.12 no virus found
Microsoft 1.2704 2007.07.12 no virus found
NOD32v2 2396 2007.07.12 no virus found
Norman 5.80.02 2007.07.12 no virus found
Panda 9.0.0.4 2007.07.12 no virus found
Sophos 4.19.0 2007.07.06 no virus found
Sunbelt 2.2.907.0 2007.07.12 no virus found
Symantec 10 2007.07.13 Trojan Horse
TheHacker 6.1.6.145 2007.07.12 no virus found
VBA32 3.12.0.2 2007.07.13 no virus found
VirusBuster 4.3.23:9 2007.07.12 no virus found
Webwasher-Gateway 6.0.1 2007.07.13 Heuristic.Malware
Aditional information
File size: 135168 bytes
MD5: 7abca86780155b0eb52cfd67e3d7ff27
SHA1: 600ccdf95cf9775050419b95ac27c7ea4b77cb3a

**yu_mor** · 13.07.2007, 15:14

Maxim, это вы правильно сделали, что вернулись с граики к тескту!

AhnLab-V3 2007.7.13.0 2007.07.13 no virus found
AntiVir 7.4.0.39 2007.07.13 TR/Dldr.SVloader
Authentium 4.93.8 2007.07.13 could be a corrupted executable file
Avast 4.7.997.0 2007.07.12 no virus found
AVG 7.5.0.476 2007.07.12 no virus found
BitDefender 7.2 2007.07.13 no virus found
CAT-QuickHeal 9.00 2007.07.12 (Suspicious) - DNAScan
ClamAV devel-20070416 2007.07.13 no virus found
DrWeb 4.33 2007.07.13 no virus found
eSafe 7.0.15.0 2007.07.10 Suspicious Trojan/Worm
eTrust-Vet 30.8.3783 2007.07.13 no virus found
Ewido 4.0 2007.07.13 no virus found
FileAdvisor 1 2007.07.13 no virus found
Fortinet 2.91.0.0 2007.07.13 W32/Nurech.AZ!tr.dldr
F-Prot 4.3.2.48 2007.07.13 no virus found
Ikarus T3.1.1.8 2007.07.13 no virus found
Kaspersky 4.0.2.24 2007.07.13 no virus found
McAfee 5073 2007.07.12 no virus found
Microsoft 1.2704 2007.07.12 no virus found
NOD32v2 2396 2007.07.12 no virus found
Norman 5.80.02 2007.07.12 W32/Suspicious_U.gen
Panda 9.0.0.4 2007.07.12 Suspicious file
Sophos 4.19.0 2007.07.06 Mal/Packer
Sunbelt 2.2.907.0 2007.07.12 no virus found
Symantec 10 2007.07.13 no virus found
TheHacker 6.1.6.145 2007.07.12 no virus found
VBA32 3.12.0.2 2007.07.13 no virus found
VirusBuster 4.3.23:9 2007.07.12
Webwasher-Gateway 6.0.1 2007.07.13 Trojan.Dldr.SVloader
Aditional information
File size: 1047 bytes
MD5: 593727de2fd3e994f1c5ccd9fd9af926
SHA1: 4524e44c0b45e7b9e1591a3f938254caa7dfb02d
packers: UPACK

AhnLab-V3 2007.7.13.0 2007.07.13 no virus found
AntiVir 7.4.0.39 2007.07.13 no virus found
Authentium 4.93.8 2007.07.13 W32/Downloader2.AHRD
Avast 4.7.997.0 2007.07.12 no virus found
AVG 7.5.0.476 2007.07.12 Downloader.Generic4.TSR
BitDefender 7.2 2007.07.13 Trojan.Peed.Gen
CAT-QuickHeal 9.00 2007.07.12 no virus found
ClamAV devel-20070416 2007.07.13 Trojan.Downloader-9011
DrWeb 4.33 2007.07.13 no virus found
eSafe 7.0.15.0 2007.07.10 Suspicious Trojan/Worm
eTrust-Vet 30.8.3783 2007.07.13 no virus found
Ewido 4.0 2007.07.13 no virus found
FileAdvisor 1 2007.07.13 no virus found
Fortinet 2.91.0.0 2007.07.13 no virus found
F-Prot 4.3.2.48 2007.07.13 W32/Downloader2.AHRD
Ikarus T3.1.1.8 2007.07.13 no virus found
Kaspersky 4.0.2.24 2007.07.13 no virus found
McAfee 5073 2007.07.12 no virus found
Microsoft 1.2704 2007.07.12 no virus found
NOD32v2 2396 2007.07.12 no virus found
Norman 5.80.02 2007.07.12 no virus found
Panda 9.0.0.4 2007.07.12 Suspicious file
Sophos 4.19.0 2007.07.06 Troj/Dloadr-BAM
Sunbelt 2.2.907.0 2007.07.12 no virus found
Symantec 10 2007.07.13 no virus found
TheHacker 6.1.6.145 2007.07.12 no virus found
VBA32 3.12.0.2 2007.07.13 no virus found
VirusBuster 4.3.23:9 2007.07.12 no virus found
Webwasher-Gateway 6.0.1 2007.07.13 Win32.Malware.gen!92 (suspicious)
Aditional information
File size: 25774 bytes
MD5: 596f7c514408bca81abf7c9eb2d19fee
SHA1: c62ec8e766a02e5d0501ab2caf8bee5fee6059ee

**SuperBrat** · 13.07.2007, 15:35

File avz00001.dta received on 07.13.2007 12:16:01 (CET)
Current status: finished

Print results Antivirus Version Last Update Result
AhnLab-V3 2007.7.13.0 2007.07.13 Win32/Viking.D
AntiVir 7.4.0.39 2007.07.13 W32/Viking.Q
Authentium 4.93.8 2007.07.13 W32/Viking.2!Generic
Avast 4.7.997.0 2007.07.12 Win32:Viking-P-UPK
AVG 7.5.0.476 2007.07.12 Worm/Generic.RP
BitDefender 7.2 2007.07.13 Win32.Worm.Viking.E
CAT-QuickHeal 9.00 2007.07.12 W32.Viking.n
ClamAV devel-20070416 2007.07.13 W32.Philis.W
DrWeb 4.33 2007.07.13 Win32.HLLW.Viking.4
eSafe 7.0.15.0 2007.07.10 suspicious Trojan/Worm
eTrust-Vet 30.8.3783 2007.07.13 Win32/Looked.AG
Ewido 4.0 2007.07.12 Worm.Viking.n
FileAdvisor 1 2007.07.13 no virus found
Fortinet 2.91.0.0 2007.07.13 W32/Viking.N
F-Prot 4.3.2.48 2007.07.13 no virus found
Ikarus T3.1.1.8 2007.07.13 Worm.Win32.Viking.n
Kaspersky 4.0.2.24 2007.07.13 Worm.Win32.Viking.n
McAfee 5073 2007.07.12 W32/HLLP.Philis.ap
Microsoft 1.2704 2007.07.12 Virus:Win32/Viking.G
NOD32v2 2396 2007.07.12 Win32/Viking.N
Norman 5.80.02 2007.07.12 W32/Looked.A
Panda 9.0.0.4 2007.07.12 W32/Viking.I.worm
Sophos 4.19.0 2007.07.06 W32/Looked-B
Sunbelt 2.2.907.0 2007.07.12 VIPRE.Suspicious
Symantec 10 2007.07.13 W32.Looked.P
TheHacker 6.1.6.145 2007.07.12 W32/Philis.gen
VBA32 3.12.0.2 2007.07.13 MalwareScope.Worm.Viking.4
VirusBuster 4.3.23:9 2007.07.12 Worm.Viking.V
Webwasher-Gateway 6.0.1 2007.07.13 Win32.Viking.Q
Aditional information
File size: 30105 bytes
MD5: b04018780c99ea77915e710bbbf19684
SHA1: 89a1d3401fd33426d88ad6fa4fb1e847f0c9b6aa
packers: UPack

**Макcим** · 14.07.2007, 18:19

File ecard.exe received on 07.13.2007 22:26:09 (CET)

AhnLab-V3 2007.7.14.0 2007.07.13 no virus found
AntiVir 7.4.0.39 2007.07.13 TR/Small.DBY.DB
Authentium 4.93.8 2007.07.13 no virus found
Avast 4.7.997.0 2007.07.13 Win32:Tibs-BBA
AVG 7.5.0.476 2007.07.13 Downloader.Tibs.6.T
BitDefender 7.2 2007.07.13 Trojan.Peed.OQ
CAT-QuickHeal 9.00 2007.07.13 Trojan.Tibs.ab
ClamAV devel-20070416 2007.07.13 no virus found
DrWeb 4.33 2007.07.13 Trojan.Packed.142
eSafe 7.0.15.0 2007.07.10 Suspicious Trojan/Worm
eTrust-Vet 30.8.3783 2007.07.13 Win32/Sintun
Ewido 4.0 2007.07.13 no virus found
FileAdvisor 1 2007.07.13 no virus found
Fortinet 2.91.0.0 2007.07.13 W32/Tibs.AB!tr
F-Prot 4.3.2.48 2007.07.13 no virus found
Ikarus T3.1.1.8 2007.07.13 Packed.Win32.Tibs.ab
Kaspersky 4.0.2.24 2007.07.13 Packed.Win32.Tibs.ab
McAfee 5074 2007.07.13 W32/Nuwar@MM
Microsoft 1.2704 2007.07.12 Worm:Win32/Nuwar.JT.dr
NOD32v2 2397 2007.07.13 no virus found
Norman 5.80.02 2007.07.13 no virus found
Panda 9.0.0.4 2007.07.13 Suspicious file
Sophos 4.19.0 2007.07.06 Mal/Dorf-A
Sunbelt 2.2.907.0 2007.07.12 no virus found
Symantec 10 2007.07.13 Trojan.Packed.13
TheHacker 6.1.6.146 2007.07.13 no virus found
VBA32 3.12.0.2 2007.07.13 no virus found
VirusBuster 4.3.23:9 2007.07.13 Trojan.Tibs.Gen!Pac.126
Webwasher-Gateway 6.0.1 2007.07.13 Trojan.Small.DBY.DB

Добавлено через 17 часов 51 минуту
File cent.exe received on 07.14.2007 16:16:10 (CET)

AhnLab-V3 2007.7.14.0 2007.07.14 no virus found
AntiVir 7.4.0.39 2007.07.13 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2007.07.13 no virus found
Avast 4.7.997.0 2007.07.13 no virus found
AVG 7.5.0.476 2007.07.13 no virus found
BitDefender 7.2 2007.07.14 MemScan:Trojan.PWS.LdPinch.BSJ
CAT-QuickHeal 9.00 2007.07.14 (Suspicious) - DNAScan
ClamAV devel-20070416 2007.07.14 no virus found
DrWeb 4.33 2007.07.14 no virus found
eSafe 7.0.15.0 2007.07.10 Suspicious Trojan/Worm
eTrust-Vet 30.8.3784 2007.07.14 no virus found
Ewido 4.0 2007.07.14 no virus found
FileAdvisor 1 2007.07.14 no virus found
Fortinet 2.91.0.0 2007.07.14 no virus found
F-Prot 4.3.2.48 2007.07.13 no virus found
Ikarus T3.1.1.8 2007.07.14 no virus found
Kaspersky 4.0.2.24 2007.07.14 Trojan-PSW.Win32.LdPinch.bjx
McAfee 5074 2007.07.13 no virus found
Microsoft 1.2704 2007.07.14 Trojan:Win32/Anomaly.gen!A
NOD32v2 2399 2007.07.14 no virus found
Norman 5.80.02 2007.07.13 no virus found
Panda 9.0.0.4 2007.07.14 no virus found
Sophos 4.19.0 2007.07.06 Mal/Basine-C
Sunbelt 2.2.907.0 2007.07.14 no virus found
Symantec 10 2007.07.14 no virus found
TheHacker 6.1.6.146 2007.07.13 no virus found
VBA32 3.12.0.2 2007.07.13 no virus found
VirusBuster 4.3.23:9 2007.07.14 no virus found
Webwasher-Gateway 6.0.1 2007.07.14 Trojan.Crypt.XPACK.Gen

**Muzzle** · 16.07.2007, 09:28

из темы http://www.virusinfo.info/showthread.php?t=10929
файл xccjmmuu.dll

Antivirus Version Last Update Result
AhnLab-V3 2007.7.14.0 2007.07.16 no virus found
AntiVir 7.4.0.42 2007.07.15 TR/PSW.Gamania.B
Authentium 4.93.8 2007.07.13 no virus found
Avast 4.7.997.0 2007.07.16 no virus found
AVG 7.5.0.476 2007.07.15 no virus found
BitDefender 7.2 2007.07.16 Trojan.Vundo.CG
CAT-QuickHeal 9.00 2007.07.14 no virus found
ClamAV devel-20070416 2007.07.16 no virus found
DrWeb 4.33 2007.07.15 Trojan.Virtumod
eSafe 7.0.15.0 2007.07.10 Suspicious Trojan/Worm
eTrust-Vet 30.8.3784 2007.07.14 Win32/Vundo
Ewido 4.0 2007.07.14 no virus found
FileAdvisor 1 2007.07.16 no virus found
Fortinet 2.91.0.0 2007.07.16 no virus found
F-Prot 4.3.2.48 2007.07.13 no virus found
Ikarus T3.1.1.8 2007.07.16 Trojan-PWS.Gamania.B
Kaspersky 4.0.2.24 2007.07.16 no virus found
McAfee 5074 2007.07.13 no virus found
Microsoft 1.2704 2007.07.16 no virus found
NOD32v2 2399 2007.07.14 no virus found
Norman 5.80.02 2007.07.13 no virus found
Panda 9.0.0.4 2007.07.15 Suspicious file
Sophos 4.19.0 2007.07.06 no virus found
Sunbelt 2.2.907.0 2007.07.14 VIPRE.Suspicious
Symantec 10 2007.07.16 no virus found
TheHacker 6.1.6.146 2007.07.13 no virus found
VBA32 3.12.0.2 2007.07.16 no virus found
VirusBuster 4.3.23:9 2007.07.15 no virus found
Webwasher-Gateway 6.0.1 2007.07.16 Trojan.PSW.Gamania.B

файл - vhpabgkn.dll

Antivirus Version Last Update Result
AhnLab-V3 2007.7.14.0 2007.07.16 no virus found
AntiVir 7.4.0.42 2007.07.15 no virus found
Authentium 4.93.8 2007.07.13 no virus found
Avast 4.7.997.0 2007.07.16 no virus found
AVG 7.5.0.476 2007.07.15 no virus found
BitDefender 7.2 2007.07.16 no virus found
CAT-QuickHeal 9.00 2007.07.14 no virus found
ClamAV devel-20070416 2007.07.16 no virus found
DrWeb 4.33 2007.07.16 Trojan.Virtumod
eSafe 7.0.15.0 2007.07.10 Suspicious Trojan/Worm
eTrust-Vet 30.8.3784 2007.07.14 no virus found
Ewido 4.0 2007.07.14 no virus found
FileAdvisor 1 2007.07.16 no virus found
Fortinet 2.91.0.0 2007.07.16 no virus found
F-Prot 4.3.2.48 2007.07.13 no virus found
Ikarus T3.1.1.8 2007.07.16 Win32.Rigel.6468
Kaspersky 4.0.2.24 2007.07.16 no virus found
McAfee 5074 2007.07.13 no virus found
Microsoft 1.2704 2007.07.16 no virus found
NOD32v2 2399 2007.07.14 no virus found
Norman 5.80.02 2007.07.13 no virus found
Panda 9.0.0.4 2007.07.15 Suspicious file
Sophos 4.19.0 2007.07.06 no virus found
Sunbelt 2.2.907.0 2007.07.14 VIPRE.Suspicious
Symantec 10 2007.07.16 no virus found
TheHacker 6.1.6.146 2007.07.13 no virus found
VBA32 3.12.0.2 2007.07.16 no virus found
VirusBuster 4.3.23:9 2007.07.15 no virus found
Webwasher-Gateway 6.0.1 2007.07.16 Virus.Win32.FileInfector.gen (suspicious)

**drongo** · 16.07.2007, 12:40

T=11066
File mssrv32.exe received on 07.16.2007 09:46:22 (CET)

Antivirus Version Last Update Result
AhnLab-V3 2007.7.14.0 2007.07.16 no virus found
AntiVir 7.4.0.42 2007.07.16 HEUR/Crypted
Authentium 4.93.8 2007.07.13 no virus found
Avast 4.7.997.0 2007.07.16 no virus found
AVG 7.5.0.476 2007.07.15 Generic5.LBD
BitDefender 7.2 2007.07.16 Trojan.Agent.APV
CAT-QuickHeal 9.00 2007.07.14 (Suspicious) - DNAScan
ClamAV devel-20070416 2007.07.16 no virus found
DrWeb 4.33 2007.07.16 no virus found
eSafe 7.0.15.0 2007.07.10 Suspicious Trojan/Worm
eTrust-Vet 30.8.3787 2007.07.16 no virus found
Ewido 4.0 2007.07.14 Trojan.Agent.apv
FileAdvisor 1 2007.07.16 no virus found
Fortinet 2.91.0.0 2007.07.16 no virus found
F-Prot 4.3.2.48 2007.07.13 no virus found
Ikarus T3.1.1.8 2007.07.16 Trojan.Win32.Agent.apv
Kaspersky 4.0.2.24 2007.07.16 Trojan.Win32.Agent.apv
McAfee 5074 2007.07.13 no virus found
Microsoft 1.2704 2007.07.16 no virus found
NOD32v2 2399 2007.07.14 no virus found
Norman 5.80.02 2007.07.13 W32/Agent.BTGG
Panda 9.0.0.4 2007.07.15 Trj/Downloader.MDW
Sophos 4.19.0 2007.07.16 no virus found
Sunbelt 2.2.907.0 2007.07.14 Trojan.Win32.Agent.apv
Symantec 10 2007.07.16 no virus found
TheHacker 6.1.6.146 2007.07.13 Trojan/Agent.apv
VBA32 3.12.0.2 2007.07.16 Trojan.Win32.Agent.apv
VirusBuster 4.3.23:9 2007.07.15 no virus found
Webwasher-Gateway 6.0.1 2007.07.16 Heuristic.Crypted
Aditional information
File size: 12379 bytes
MD5: 329fcafb53b3bc5adbe3e915cc8253a5
SHA1: 030b56976b969672154a7bcb839b7e31e848750b

t=10929

Добавлено через 46 минут

Код:

File ieqokuvj.dll received on 07.16.2007 10:23:16 (CET)

	
Antivirus 	Version 	Last Update 	Result
AhnLab-V3	2007.7.14.0	2007.07.16	no virus found
AntiVir	7.4.0.42	2007.07.16	no virus found
Authentium	4.93.8	2007.07.13	no virus found
Avast	4.7.997.0	2007.07.16	no virus found
AVG	7.5.0.476	2007.07.15	no virus found
BitDefender	7.2	2007.07.16	no virus found
CAT-QuickHeal	9.00	2007.07.14	no virus found
ClamAV	devel-20070416	2007.07.16	no virus found
DrWeb	4.33	2007.07.16	Trojan.Virtumod
eSafe	7.0.15.0	2007.07.10	Suspicious Trojan/Worm
eTrust-Vet	30.8.3787	2007.07.16	no virus found
Ewido	4.0	2007.07.14	no virus found
FileAdvisor	1	2007.07.16	no virus found
Fortinet	2.91.0.0	2007.07.16	no virus found
F-Prot	4.3.2.48	2007.07.13	no virus found
Ikarus	T3.1.1.8	2007.07.16	Win32.Rigel.6468
Kaspersky	4.0.2.24	2007.07.16	Trojan.Win32.BHO.bd
McAfee	5074	2007.07.13	no virus found
Microsoft	1.2704	2007.07.16	no virus found
NOD32v2	2399	2007.07.14	no virus found
Norman	5.80.02	2007.07.13	no virus found
Panda	9.0.0.4	2007.07.15	Suspicious file
Sophos	4.19.0	2007.07.16	Virtumundo
Sunbelt	2.2.907.0	2007.07.14	VIPRE.Suspicious
Symantec	10	2007.07.16	no virus found
TheHacker	6.1.6.146	2007.07.13	no virus found
VBA32	3.12.0.2	2007.07.16	no virus found
VirusBuster	4.3.23:9	2007.07.15	no virus found
Webwasher-Gateway	6.0.1	2007.07.16	Virus.Win32.FileInfector.gen (suspicious)
Aditional information
File size: 66624 bytes
MD5: f4f358cf6a6a3f0539622d1bcabc07a9
SHA1: 5f35399114f07afe429e1d710bcdb993806791de
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

**Muzzle** · 16.07.2007, 15:55

mxrs.exe -вирёк ломится по портам 135 и 445
http://virusinfo.info/showthread.php?t=11077

Antivirus Version Last Update Result
AhnLab-V3 2007.7.14.0 2007.07.16 no virus found
AntiVir 7.4.0.42 2007.07.16 HEUR/Crypted
Authentium 4.93.8 2007.07.13 Possibly a new variant of W32/Backdoor-based
Avast 4.7.997.0 2007.07.16 Win32:SdBot-gen44
AVG 7.5.0.476 2007.07.15 no virus found
BitDefender 7.2 2007.07.16 DeepScan:Generic.Sdbot.51BCF3A2
CAT-QuickHeal 9.00 2007.07.14 (Suspicious) - DNAScan
ClamAV devel-20070416 2007.07.16 no virus found
DrWeb 4.33 2007.07.16 no virus found
eSafe 7.0.15.0 2007.07.10 Suspicious Trojan/Worm
eTrust-Vet 30.8.3787 2007.07.16 no virus found
Ewido 4.0 2007.07.14 no virus found
FileAdvisor 1 2007.07.16 no virus found
Fortinet 2.91.0.0 2007.07.16 no virus found
F-Prot 4.3.2.48 2007.07.13 no virus found
Ikarus T3.1.1.8 2007.07.16 Generic.Sdbot
Kaspersky 4.0.2.24 2007.07.16 no virus found
McAfee 5074 2007.07.13 no virus found
Microsoft 1.2704 2007.07.16 no virus found
NOD32v2 2399 2007.07.14 probably a variant of Win32/Genetik
Norman 5.80.02 2007.07.13 W32/Malware.ABAT
Panda 9.0.0.4 2007.07.15 W32/Gaobot.PUP.worm
Sophos 4.19.0 2007.07.16 no virus found
Sunbelt 2.2.907.0 2007.07.14 VIPRE.Suspicious
Symantec 10 2007.07.16 W32.Spybot.Worm
TheHacker 6.1.6.147 2007.07.16 no virus found
VBA32 3.12.0.2 2007.07.16 no virus found
VirusBuster 4.3.23:9 2007.07.15 no virus found
Webwasher-Gateway 6.0.1 2007.07.16 Heuristic.Crypted

**Макcим** · 16.07.2007, 23:24

Файлы из темы http://virusinfo.info/showthread.php?t=11085

File avz00003.dta received on 07.16.2007 21:05:26 (CET)

AhnLab-V3 2007.7.14.0 2007.07.16 Win32/IRCBot.worm.variant
AntiVir 7.4.0.42 2007.07.16 TR/Crypt.PCMM.Gen
Authentium 4.93.8 2007.07.13 W32/Backdoor.AREZ
Avast 4.7.997.0 2007.07.16 Win32:SdBot-4541
AVG 7.5.0.476 2007.07.15 IRC/BackDoor.SdBot3.BCQ
BitDefender 7.2 2007.07.16 Backdoor.SDBot.DEOL
CAT-QuickHeal 9.00 2007.07.16 Backdoor.SdBot.bfl
ClamAV devel-20070416 2007.07.16 Trojan.SdBot-6493
DrWeb 4.33 2007.07.16 Win32.HLLW.MyBot
eSafe 7.0.15.0 2007.07.16 Win32.SdBot.bfl
eTrust-Vet 30.8.3787 2007.07.16 Win32/Rbot.GSI
Ewido 4.0 2007.07.14 Backdoor.SdBot.bfl
FileAdvisor 1 2007.07.16 Low threat detected
Fortinet 2.91.0.0 2007.07.16 W32/PCMM.AU!tr
F-Prot 4.3.2.48 2007.07.13 W32/Backdoor!4c8f
Ikarus T3.1.1.8 2007.07.16 Backdoor.Win32.SdBot.bfl
Kaspersky 4.0.2.24 2007.07.16 Backdoor.Win32.SdBot.bfl
McAfee 5075 2007.07.16 New Malware.ea
Microsoft 1.2704 2007.07.16 Trojan:Win32/Ircbrute!FE1D
NOD32v2 2400 2007.07.16 no virus found
Norman 5.80.02 2007.07.16 W32/SDBot.AQKY
Panda 9.0.0.4 2007.07.16 W32/Sdbot.KLO.worm
Sophos 4.19.0 2007.07.16 Mal/Packer
Sunbelt 2.2.907.0 2007.07.14 Backdoor.Win32.SdBot.bfl
Symantec 10 2007.07.16 no virus found
TheHacker 6.1.6.147 2007.07.16 Backdoor/SdBot.bfl
VBA32 3.12.0.2 2007.07.16 Backdoor.Win32.SdBot.bfl
VirusBuster 4.3.23:9 2007.07.16 Worm.SdBot.FOF
Webwasher-Gateway 6.0.1 2007.07.16 Trojan.Crypt.PCMM.Gen

AhnLab-V3 2007.7.14.0 2007.07.16 Win-Trojan/Slaper.70834
AntiVir 7.4.0.42 2007.07.16 Worm/IRCBot.aak
Authentium 4.93.8 2007.07.13 W32/Trojan.ASXG
Avast 4.7.997.0 2007.07.16 no virus found
AVG 7.5.0.476 2007.07.16 Proxy.PAY
BitDefender 7.2 2007.07.16 Trojan.Proxy.Slaper.AA
CAT-QuickHeal 9.00 2007.07.16 TrojanProxy.Slaper.p
ClamAV devel-20070416 2007.07.16 Trojan.Proxy-920
DrWeb 4.33 2007.07.16 BackDoor.Mailbot
eSafe 7.0.15.0 2007.07.16 Win32.Slaper.p
eTrust-Vet 30.8.3787 2007.07.16 no virus found
Ewido 4.0 2007.07.14 Proxy.Slaper.p
FileAdvisor 1 2007.07.16 no virus found
Fortinet 2.91.0.0 2007.07.16 W32/Slaper.P!tr
F-Prot 4.3.2.48 2007.07.13 W32/Trojan.ASXG
Ikarus T3.1.1.8 2007.07.16 Trojan-Proxy.Win32.Slaper.p
Kaspersky 4.0.2.24 2007.07.16 Trojan-Proxy.Win32.Slaper.p
McAfee 5075 2007.07.16 New Malware.ea
Microsoft 1.2704 2007.07.16 no virus found
NOD32v2 2400 2007.07.16 no virus found
Norman 5.80.02 2007.07.16 W32/Slaper.FK
Panda 9.0.0.4 2007.07.16 Suspicious file
Sophos 4.19.0 2007.07.16 Mal/Packer
Sunbelt 2.2.907.0 2007.07.14 VIPRE.Suspicious
Symantec 10 2007.07.16 no virus found
TheHacker 6.1.6.147 2007.07.16 Trojan/Proxy.Slaper.p
VBA32 3.12.0.2 2007.07.16 Trojan-Proxy.Win32.Slaper.p
VirusBuster 4.3.23:9 2007.07.16 no virus found
Webwasher-Gateway 6.0.1 2007.07.16 Worm.IRCBot.aak

AhnLab-V3 2007.7.14.0 2007.07.16 Win-Trojan/Slaper.73742
AntiVir 7.4.0.42 2007.07.16 Worm/IRCBot.aak
Authentium 4.93.8 2007.07.13 W32/Trojan.ARSS
Avast 4.7.997.0 2007.07.16 no virus found
AVG 7.5.0.476 2007.07.16 Proxy.PAZ
BitDefender 7.2 2007.07.16 Trojan.Proxy.Slapper.B
CAT-QuickHeal 9.00 2007.07.16 (Suspicious) - DNAScan
ClamAV devel-20070416 2007.07.16 Trojan.Proxy-919
DrWeb 4.33 2007.07.16 no virus found
eSafe 7.0.15.0 2007.07.16 Win32.Slaper.p
eTrust-Vet 30.8.3787 2007.07.16 no virus found
Ewido 4.0 2007.07.16 Proxy.Slaper.p
FileAdvisor 1 2007.07.16 no virus found
Fortinet 2.91.0.0 2007.07.16 W32/Slaper.P!tr
F-Prot 4.3.2.48 2007.07.13 W32/Trojan.ARSS
Ikarus T3.1.1.8 2007.07.16 Trojan-Proxy.Win32.Slaper.p
Kaspersky 4.0.2.24 2007.07.16 Trojan-Proxy.Win32.Slaper.p
McAfee 5075 2007.07.16 New Malware.ea
Microsoft 1.2704 2007.07.16 no virus found
NOD32v2 2400 2007.07.16 no virus found
Norman 5.80.02 2007.07.16 W32/Slaper.FJ
Panda 9.0.0.4 2007.07.16 Generic Malware
Sophos 4.19.0 2007.07.16 Mal/Packer
Sunbelt 2.2.907.0 2007.07.14 Trojan-Proxy.Win32.Slaper.p
Symantec 10 2007.07.16 no virus found
TheHacker 6.1.6.147 2007.07.16 Trojan/Proxy.Slaper.p
VBA32 3.12.0.2 2007.07.16 Trojan-Proxy.Win32.Slaper.p
VirusBuster 4.3.23:9 2007.07.16 no virus found
Webwasher-Gateway 6.0.1 2007.07.16 Worm.IRCBot.aak

Исследование антивирусов 5

Опции темы

Похожие темы

Исследование антивирусов 7

Исследование антивирусов 6

Исследование антивирусов 4

Исследование антивирусов 3

Исследование антивирусов 2

Ваши права в разделе