Исследование антивирусов 6

**Selmanuk** · 27.11.2007, 14:30

Файл opr03U42.htm.7FFFAE33 получен 2007.11.27 12:17:23 (CET)Антивирус Версия Обновление Результат
AhnLab-V3 2007.11.27.1 2007.11.27 -
AntiVir 7.6.0.34 2007.11.27 HEUR/Exploit.HTML
Authentium 4.93.8 2007.11.24 -
Avast 4.7.1074.0 2007.11.27 -
AVG 7.5.0.503 2007.11.26 Downloader.Agent
BitDefender 7.2 2007.11.27 -
CAT-QuickHeal 9.00 2007.11.27 -
ClamAV 0.91.2 2007.11.27 -
DrWeb 4.44.0.09170 2007.11.27 Worm.Sifiliz
eSafe 7.0.15.0 2007.11.21 -
eTrust-Vet 31.3.5329 2007.11.26 -
Ewido 4.0 2007.11.26 -
FileAdvisor 1 2007.11.27 -
Fortinet 3.14.0.0 2007.11.27 -
F-Prot 4.4.2.54 2007.11.27 -
F-Secure 6.70.13030.0 2007.11.27 -
Ikarus T3.1.1.12 2007.11.27 -
Kaspersky 7.0.0.125 2007.11.27 -
McAfee 5171 2007.11.26 -
Microsoft 1.3007 2007.11.27 -
NOD32v2 2687 2007.11.26 -
Norman 5.80.02 2007.11.26 -
Panda 9.0.0.4 2007.11.26 -
Prevx1 V2 2007.11.27 -
Rising 20.20.11.00 2007.11.27 -
Sophos 4.23.0 2007.11.27 Mal/ObfJS-R
Sunbelt 2.2.907.0 2007.11.27 -
Symantec 10 2007.11.27 -
TheHacker 6.2.9.142 2007.11.26 -
VBA32 3.12.2.5 2007.11.27 -
VirusBuster 4.3.26:9 2007.11.26 -
Webwasher-Gateway 6.0.1 2007.11.27 Heuristic.Exploit.HTML

Дополнительная информация
File size: 32803 bytes
MD5: 5021a06aa8e0848d140aa2b336e89aa8
SHA1: db20d942fb98310a5b43d3cc2a035c07962e0aac

Надоело быть жертвой? Стань профи по информационной безопасности, получай самую свежую информацию об угрозах и средствах защиты от ведущего российского аналитического центра Anti-Malware.ru:

**Shu_b** · 30.11.2007, 16:58

Сегодня последний день ноября, а так как активность данной темы немного упала, то я подбиваю промежуточные итоги. Выкладываю два графика за прошедший месяц и сумму. Месячный итог забавным получился.... ;-)

**DVi** · 30.11.2007, 17:12

Сумма - это второй, в котором стоит максимум 140?

**Shu_b** · 30.11.2007, 17:24

Сообщение от DVi

Сумма - это второй, в котором стоит максимум 140?

да, 65 + 58

**Surfer** · 01.12.2007, 19:17

Жестокие пинчары пошли, никем не ловятся.

File illusion.exe received on 12.01.2007 15:41:05 (CET)
Result: 4/32 (12.5%)

AhnLab-V3 2007.12.1.0 2007.11.30 -
AntiVir 7.6.0.34 2007.11.30 -
Authentium 4.93.8 2007.12.01 -
Avast 4.7.1074.0 2007.11.30 -
AVG 7.5.0.503 2007.12.01 -
BitDefender 7.2 2007.12.01 -
CAT-QuickHeal 9.00 2007.12.01 -
ClamAV 0.91.2 2007.12.01 -
DrWeb 4.44.0.09170 2007.12.01 -
eSafe 7.0.15.0 2007.11.29 -
eTrust-Vet 31.3.5340 2007.11.30 -
Ewido 4.0 2007.12.01 -
FileAdvisor 1 2007.12.01 -
Fortinet 3.14.0.0 2007.12.01 -
F-Prot 4.4.2.54 2007.11.30 -
F-Secure 6.70.13030.0 2007.11.30 -
Ikarus T3.1.1.12 2007.12.01 Virus.Win32.Zapchast.DA
Kaspersky 7.0.0.125 2007.12.01 Trojan.BAT.Runner.j
McAfee 5175 2007.11.30 -
Microsoft 1.3007 2007.12.01 -
NOD32v2 2696 2007.11.30 -
Norman 5.80.02 2007.11.30 -
Panda 9.0.0.4 2007.12.01 -
Prevx1 V2 2007.12.01 -
Rising 20.20.51.00 2007.12.01 Trojan.DL.Win32.Agent.bxw
Sophos 4.23.0 2007.12.01 Mal/Dropper-T
Sunbelt 2.2.907.0 2007.12.01 -
Symantec 10 2007.12.01 -
TheHacker 6.2.9.146 2007.11.30 -
VBA32 3.12.2.5 2007.12.01 -
VirusBuster 4.3.26:9 2007.11.30 -
Webwasher-Gateway 6.6.2 2007.12.01 -
Additional information
File size: 159843 bytes
MD5: 1b4023097c4e527b5e2e465d026d68cc
SHA1: 8bfd2cc1a1b4dbab31b15bc0581e6149c2cd1c29
packers: RAR

А вот он же, но в распакованом виде

File 1.exe received on 12.01.2007 15:46:00 (CET)
Result: 3/32 (9.38%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.1.0 2007.11.30 -
AntiVir 7.6.0.34 2007.11.30 -
Authentium 4.93.8 2007.12.01 -
Avast 4.7.1074.0 2007.11.30 -
AVG 7.5.0.503 2007.12.01 -
BitDefender 7.2 2007.12.01 -
CAT-QuickHeal 9.00 2007.12.01 -
ClamAV 0.91.2 2007.12.01 -
DrWeb 4.44.0.09170 2007.12.01 -
eSafe 7.0.15.0 2007.11.29 -
eTrust-Vet 31.3.5340 2007.11.30 -
Ewido 4.0 2007.12.01 -
FileAdvisor 1 2007.12.01 -
Fortinet 3.14.0.0 2007.12.01 -
F-Prot 4.4.2.54 2007.11.30 -
F-Secure 6.70.13030.0 2007.11.30 -
Ikarus T3.1.1.12 2007.12.01 Virus.Win32.Zapchast.DA
Kaspersky 7.0.0.125 2007.12.01 -
McAfee 5175 2007.11.30 -
Microsoft 1.3007 2007.12.01 -
NOD32v2 2696 2007.11.30 -
Norman 5.80.02 2007.11.30 -
Panda 9.0.0.4 2007.12.01 -
Prevx1 V2 2007.12.01 -
Rising 20.20.51.00 2007.12.01 Trojan.DL.Win32.Agent.bxw
Sophos 4.23.0 2007.12.01 Mal/Dropper-T
Sunbelt 2.2.907.0 2007.12.01 -
Symantec 10 2007.12.01 -
TheHacker 6.2.9.146 2007.11.30 -
VBA32 3.12.2.5 2007.12.01 -
VirusBuster 4.3.26:9 2007.11.30 -
Webwasher-Gateway 6.6.2 2007.12.01 -
Additional information
File size: 28672 bytes
MD5: 5564a7b0ec2c7012c64af96a87876491
SHA1: 840a0c70f91e49b4a6edb5fcb1b8eb64e9fcdb87

**Helgin** · 02.12.2007, 06:28

Антивирус Версия Обновление Результат
AhnLab-V3 2007.12.1.0 2007.11.30 -
AntiVir 7.6.0.34 2007.11.30 CC/UKMalw.LB
Authentium 4.93.8 2007.12.01 W32/Trojan.BWKV
Avast 4.7.1074.0 2007.12.01 -
AVG 7.5.0.503 2007.12.01 -
BitDefender 7.2 2007.12.02 -
CAT-QuickHeal 9.00 2007.12.01 Trojan.Soltek.kj
ClamAV 0.91.2 2007.12.02 -
DrWeb 4.44.0.09170 2007.12.01 -
eSafe 7.0.15.0 2007.11.29 -
eTrust-Vet 31.3.5340 2007.11.30 -
Ewido 4.0 2007.12.01 Trojan.Legmir
FileAdvisor 1 2007.12.02 -
Fortinet 3.14.0.0 2007.12.01 Generic.A!tr
F-Prot 4.4.2.54 2007.11.30 W32/Trojan.BWKV
F-Secure 6.70.13030.0 2007.11.30 W32/Malware.dam
Ikarus T3.1.1.12 2007.12.02 Trojan-PWS.Legmir
Kaspersky 7.0.0.125 2007.12.02 -
McAfee 5175 2007.11.30 Generic Packed
Microsoft 1.3007 2007.12.02 -
NOD32v2 2696 2007.11.30 -
Norman 5.80.02 2007.11.30 W32/Malware.dam
Panda 9.0.0.4 2007.12.02 Generic Trojan
Prevx1 V2 2007.12.02 Generic.Malware
Rising 20.20.52.00 2007.12.02 -
Sophos 4.23.0 2007.12.01 Mal/Generic-A
Sunbelt 2.2.907.0 2007.12.01 -
Symantec 10 2007.12.02 Backdoor.EggDrop
TheHacker 6.2.9.147 2007.12.01 -
VBA32 3.12.2.5 2007.12.01 Trojan.PWS.Legmir
VirusBuster 4.3.26:9 2007.12.01 -
Webwasher-Gateway 6.6.2 2007.12.01 Virus.UKMalw.LB
Дополнительная информация
File size: 61440 bytes
MD5: 9a667611eb788402ccadd829e29a4184
SHA1: 1b28150e07c4da97c7f343f63acf8a468a5f3733
Prevx info: http://fileinfo.prevx.com/fileinfo.a...ABFE00BD2000BF[/CODE]

**Макcим** · 02.12.2007, 17:42

Из темы http://virusinfo.info/showthread.php?t=14788

AhnLab-V3 2007.12.1.0 2007.11.30 -
AntiVir 7.6.0.34 2007.11.30 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2007.12.01 -
Avast 4.7.1074.0 2007.12.02 -
AVG 7.5.0.503 2007.12.02 -
BitDefender 7.2 2007.12.02 -
CAT-QuickHeal 9.00 2007.12.01 -
ClamAV 0.91.2 2007.12.02 -
DrWeb 4.44.0.09170 2007.12.02 Trojan.Packed.147
eSafe 7.0.15.0 2007.11.29 -
eTrust-Vet 31.3.5340 2007.11.30 -
Ewido 4.0 2007.12.02 -
FileAdvisor 1 2007.12.02 -
Fortinet 3.14.0.0 2007.12.02 -
F-Prot 4.4.2.54 2007.11.30 -
F-Secure 6.70.13030.0 2007.11.30 -
Ikarus T3.1.1.12 2007.12.02 -
Kaspersky 7.0.0.125 2007.12.02 -
McAfee 5175 2007.11.30 -
Microsoft 1.3007 2007.12.02 Spammer:Win32/Tedroo.B
NOD32v2 2697 2007.12.02 -
Norman 5.80.02 2007.11.30 -
Panda 9.0.0.4 2007.12.02 -
Prevx1 V2 2007.12.02 -
Rising 20.20.62.00 2007.12.02 -
Sophos 4.23.0 2007.12.02 -
Sunbelt 2.2.907.0 2007.12.01 -
Symantec 10 2007.12.02 -
TheHacker 6.2.9.147 2007.12.01 -
VBA32 3.12.2.5 2007.12.02 -
VirusBuster 4.3.26:9 2007.12.01 -
Webwasher-Gateway 6.6.2 2007.12.01 Trojan.Crypt.XPACK.Gen

Дополнительная информация
File size: 32768 bytes
MD5: ba6f53f0ccb15762068f41681d387761
SHA1: 5b4da53e8f918159c97f96f78971c430f6627dce

**ssa555** · 03.12.2007, 23:59

Из темы http://virusinfo.info/showthread.php?t=14796

Файл mssrv32.exe получен 2007.12.03 19:56:29 (CET)Антивирус Версия Обновление Результат
AhnLab-V3 2007.12.4.0 2007.12.03 -
AntiVir 7.6.0.34 2007.12.03 TR/Dldr.Agent.fow
Authentium 4.93.8 2007.12.03 -
Avast 4.7.1074.0 2007.12.03 -
AVG 7.5.0.503 2007.12.03 Obfustat.ABFX
BitDefender 7.2 2007.12.03 -
CAT-QuickHeal 9.00 2007.12.03 TrojanDownloader.Agent.fow
ClamAV 0.91.2 2007.12.03 -
DrWeb 4.44.0.09170 2007.12.03 Trojan.Packed.194
eSafe 7.0.15.0 2007.12.03 -
eTrust-Vet 31.3.5340 2007.11.30 -
Ewido 4.0 2007.12.03 -
FileAdvisor 1 2007.12.03 -
Fortinet 3.14.0.0 2007.12.03 -
F-Prot 4.4.2.54 2007.12.02 -
F-Secure 6.70.13030.0 2007.12.03 Trojan-Downloader.Win32.Agent.fow
Ikarus T3.1.1.12 2007.12.03 Virus.Win32.Zapchast.DA
Kaspersky 7.0.0.125 2007.12.03 Trojan-Downloader.Win32.Agent.fow
McAfee 5176 2007.12.03 -
Microsoft 1.3007 2007.12.03 -
NOD32v2 2698 2007.12.03 -
Norman 5.80.02 2007.12.03 -
Panda 9.0.0.4 2007.12.02 -
Prevx1 V2 2007.12.03 -
Rising 20.21.02.00 2007.12.03 Trojan.DL.Win32.Agent.bxw
Sophos 4.23.0 2007.12.03 -
Sunbelt 2.2.907.0 2007.12.01 -
Symantec 10 2007.12.03 -
TheHacker 6.2.9.147 2007.12.01 -
VBA32 3.12.2.5 2007.12.03 -
VirusBuster 4.3.26:9 2007.12.03 -
Webwasher-Gateway 6.6.2 2007.12.03 Trojan.Dldr.Agent.fow

Дополнительная информация
File size: 24576 bytes
MD5: f0bc7f9da285c7714917756de15a53ea
SHA1: 8fd774c3ded5b7cfc69a863f1a5793315c143681
PEiD: -

**Shu_b** · 04.12.2007, 12:12

t - 14813

Код:

Antivirus       Version Last Update     Result
AhnLab-V3       2007.12.4.0     2007.12.03      -
AntiVir 7.6.0.34        2007.12.03      -
Authentium      4.93.8  2007.12.04      -
Avast   4.7.1074.0      2007.12.03      -
AVG     7.5.0.503       2007.12.04      -
BitDefender     7.2     2007.12.04      -
CAT-QuickHeal   9.00    2007.12.03      -
ClamAV  0.91.2  2007.12.04      -
DrWeb   4.44.0.09170    2007.12.03      -
eSafe   7.0.15.0        2007.12.03      Win32.Eterok.C
eTrust-Vet      31.3.5349       2007.12.04      -
Ewido   4.0     2007.12.03      -
FileAdvisor     1       2007.12.04      -
Fortinet        3.14.0.0        2007.12.04      -
F-Prot  4.4.2.54        2007.12.04      -
F-Secure        6.70.13030.0    2007.12.04      -
Ikarus  T3.1.1.12       2007.12.04      -
Kaspersky       7.0.0.125       2007.12.04      -
McAfee  5176    2007.12.03      -
Microsoft       1.3007  2007.12.03      -
NOD32v2 2699    2007.12.03      -
Norman  5.80.02 2007.12.03      -
Panda   9.0.0.4 2007.12.03      -
Prevx1  V2      2007.12.04      -
Rising  20.21.02.00     2007.12.03      -
Sophos  4.24.0  2007.12.04      -
Sunbelt 2.2.907.0       2007.12.01      -
Symantec        10      2007.12.04      Backdoor.Eterok.C
TheHacker       6.2.9.148       2007.12.03      -
VBA32   3.12.2.5        2007.12.03      -
VirusBuster     4.3.26:9        2007.12.03      -
Webwasher-Gateway       6.6.2   2007.12.03      -
Additional information
File size: 19968 bytes

t-14175

Код:

File _svchost.exe ( ie_updater.exe ) received on 12.04.2007 09:36:34 (CET)
Antivirus	Version	Last Update	Result
AhnLab-V3	2007.12.4.0	2007.12.03	Win-Trojan/Xema.variant
AntiVir	7.6.0.34	2007.12.04	-
Authentium	4.93.8	2007.12.04	-
Avast	4.7.1074.0	2007.12.03	Win32:Tiny-LJ
AVG	7.5.0.503	2007.12.04	Downloader.Generic6.WVT
BitDefender	7.2	2007.12.04	-
CAT-QuickHeal	9.00	2007.12.03	TrojanDownloader.Tiny.abz
ClamAV	0.91.2	2007.12.04	-
DrWeb	4.44.0.09170	2007.12.04	Trojan.DownLoader.origin
eSafe	7.0.15.0	2007.12.03	-
eTrust-Vet	31.3.5349	2007.12.04	-
Ewido	4.0	2007.12.03	-
FileAdvisor	1	2007.12.04	-
Fortinet	3.14.0.0	2007.12.04	-
F-Prot	4.4.2.54	2007.12.04	-
F-Secure	6.70.13030.0	2007.12.04	-
Ikarus	T3.1.1.12	2007.12.04	Virus.Win32.Tiny.LJ
Kaspersky	7.0.0.125	2007.12.04	-
McAfee	5176	2007.12.03	Generic Downloader.k
Microsoft	1.3007	2007.12.03	-
NOD32v2	2699	2007.12.03	Win32/TrojanDownloader.Tiny.NJ
Norman	5.80.02	2007.12.03	-
Panda	9.0.0.4	2007.12.03	Trj/Downloader.RLK
Prevx1	V2	2007.12.04	Heuristic: Suspicious File With Outbound Communications
Rising	20.21.10.00	2007.12.04	-
Sophos	4.24.0	2007.12.04	-
Sunbelt	2.2.907.0	2007.12.01	-
Symantec	10	2007.12.04	-
TheHacker	6.2.9.148	2007.12.03	-
VBA32	3.12.2.5	2007.12.03	-
VirusBuster	4.3.26:9	2007.12.03	-
Webwasher-Gateway	6.6.2	2007.12.04	-
Additional information
File size: 6144 bytes
MD5: a375f523505751cf04a34506315fd982
SHA1: 0b2eeee53b89ea666653ed5e770824d637d633ef
PEiD: -
packers: embedded

**Ultima Weapon** · 05.12.2007, 06:28

File pskavs.zip received on 12.04.2007 12:09:29 (CET)
Current status: finished
Result: 6/32 (18.75%)
Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - Frisk #2
Authentium - - -
Avast - - Win32:CTX
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - Sirius.Annihilator.272
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - Virus.Win32.CTX
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - -
Rising - - -
Sophos - - W95/Whog-878b
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - Win32.Bumble
Additional information
MD5: f20440d212d03abdb531eb3c99e1a47a

Добавлено через 8 минут

File Sample_3.zip received on 12.04.2007 12:57:39 (CET)
Current status: finished
Result: 21/32 (65.63%)
Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 2007.12.4.1 2007.12.04 -
AntiVir 7.6.0.34 2007.12.04 TR/Crack.H.5
Authentium 4.93.8 2007.12.04 -
Avast 4.7.1074.0 2007.12.04 Win32ownloader-AS
AVG 7.5.0.503 2007.12.04 Downloader.Generic2.LKM
BitDefender 7.2 2007.12.04 Trojan.Crack.H
CAT-QuickHeal 9.00 2007.12.03 (Suspicious) - DNAScan
ClamAV 0.91.2 2007.12.04 -
DrWeb 4.44.0.09170 2007.12.04 -
eSafe 7.0.15.0 2007.12.03 Win32.Trojan
eTrust-Vet 31.3.5349 2007.12.04 -
Ewido 4.0 2007.12.04 Trojan.Crack.h
FileAdvisor 1 2007.12.04 -
Fortinet 3.14.0.0 2007.12.04 Crack.D!tr
F-Prot 4.4.2.54 2007.12.04 W32/Heuristic-162!Eldorado
F-Secure 6.70.13030.0 2007.12.04 W32/DLoader.ASHL
Ikarus T3.1.1.12 2007.12.04 Trojan-PWS.Win32.LdPinch.SX
Kaspersky 7.0.0.125 2007.12.04 -
McAfee 5176 2007.12.03 Downloader.gen.a
Microsoft 1.3007 2007.12.03 -
NOD32v2 2699 2007.12.03 probably a variant of Win32/Agent
Norman 5.80.02 2007.12.04 W32/DLoader.ASHL
Panda 9.0.0.4 2007.12.03 Suspicious file
Prevx1 V2 2007.12.04 Generic.Malware
Rising 20.21.10.00 2007.12.04 Hack.Win32.Dpatch.a
Sophos 4.24.0 2007.12.04 Troj/Crack-D
Sunbelt 2.2.907.0 2007.12.01 VIPRE.Suspicious
Symantec 10 2007.12.04 Trojan Horse
TheHacker 6.2.9.148 2007.12.03 -
VBA32 3.12.2.5 2007.12.03 -
VirusBuster 4.3.26:9 2007.12.03 -
Webwasher-Gateway 6.6.2 2007.12.04 Trojan.Crack.H.5

Добавлено через 5 минут

File Trojan_1.zip received on 12.04.2007 13:03:24 (CET)
Current status: finished
Result: 20/32 (62.5%)
Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 2007.12.4.1 2007.12.04 -
AntiVir 7.6.0.34 2007.12.04 TR/Crack.H.3
Authentium 4.93.8 2007.12.04 -
Avast 4.7.1074.0 2007.12.04 Win32ownloader-AS
AVG 7.5.0.503 2007.12.04 Downloader.Generic2.LKM
BitDefender 7.2 2007.12.04 Trojan.Crack.H
CAT-QuickHeal 9.00 2007.12.03 (Suspicious) - DNAScan
ClamAV 0.91.2 2007.12.04 -
DrWeb 4.44.0.09170 2007.12.04 -
eSafe 7.0.15.0 2007.12.03 Win32.Trojan
eTrust-Vet 31.3.5349 2007.12.04 -
Ewido 4.0 2007.12.04 Trojan.Crack.h
FileAdvisor 1 2007.12.04 -
Fortinet 3.14.0.0 2007.12.04 W32/Crack.D!tr
F-Prot 4.4.2.54 2007.12.04 W32/Heuristic-162!Eldorado
F-Secure 6.70.13030.0 2007.12.04 W32/DLoader.ASHL
Ikarus T3.1.1.12 2007.12.04 Trojan-PWS.Win32.LdPinch.SX
Kaspersky 7.0.0.125 2007.12.04 -
McAfee 5176 2007.12.03 Generic Downloader.z
Microsoft 1.3007 2007.12.03 -
NOD32v2 2699 2007.12.03 probably a variant of Win32/Agent
Norman 5.80.02 2007.12.04 W32/DLoader.ASHL
Panda 9.0.0.4 2007.12.03 Generic Trojan
Prevx1 V2 2007.12.04 -
Rising 20.21.10.00 2007.12.04 Hack.Win32.Dpatch.a
Sophos 4.24.0 2007.12.04 Troj/Crack-D
Sunbelt 2.2.907.0 2007.12.01 Trojan.Unclassified.gen
Symantec 10 2007.12.04 Trojan Horse
TheHacker 6.2.9.148 2007.12.03 -
VBA32 3.12.2.5 2007.12.03 -
VirusBuster 4.3.26:9 2007.12.03 -
Webwasher-Gateway 6.6.2 2007.12.04 Trojan.Crack.H.3

Добавлено через 1 минуту

ile Trojan_Win_32_Agent.cro.zip received on 12.04.2007 11:15:37 (CET)
Current status: finished
Result: 26/32 (81.25%)
Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - TR/Drop.Agent.cro
Authentium - - W32/Splendor.7116
Avast - - Win32:Agent-NMK
AVG - - Win32/Virut
BitDefender - - Trojan.Downloader.LoadAdv.XXA
CAT-QuickHeal - - Win32.Trojan.Pakes
ClamAV - - Trojan.Agent-9180
DrWeb - - Trojan.Packed.155
eSafe - - Win32.Agent.cro
eTrust-Vet - - -
Ewido - - Trojan.Agent.cro
FileAdvisor - - -
Fortinet - - W32/Agent.VD!tr
F-Prot - - W32/Backdoor.CARM
F-Secure - - Virus.Win32.Virut.av
Ikarus - - Trojan.Win32.Agent.cro
Kaspersky - - Trojan.Win32.Agent.cro
McAfee - - W32/Virut.gen.a
Microsoft - - Virus:Win32/Virut.AC
NOD32v2 - - Win32/TrojanDownloader.Agent.NSP
Norman - - DLoader.EBYE
Panda - - Trj/Agent.HCK
Prevx1 - - -
Rising - - Trojan.Win32.Mnless.zir
Sophos - - Mal/HckPk-A
Sunbelt - - -
Symantec - - W32.Virut.W
TheHacker - - -
VBA32 - - Trojan.Win32.Agent.cro
VirusBuster - - Adware.Vundo.V.Gen
Webwasher-Gateway - - Trojan.Drop.Agent.cro

File crude.exe received on 12.05.2007 04:09:52 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 4/32 (12.5%)

AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.04 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.04 -
BitDefender 7.2 2007.12.05 -
CAT-QuickHeal 9.00 2007.12.04 -
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.04 -
eSafe 7.0.15.0 2007.12.04 suspicious Trojan/Worm
eTrust-Vet 31.3.5352 2007.12.05 -
Ewido 4.0 2007.12.04 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.04 -
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 -
Kaspersky 7.0.0.125 2007.12.05 -
McAfee 5177 2007.12.04 -
Microsoft 1.3007 2007.12.03 -
NOD32v2 2701 2007.12.05 -
Norman 5.80.02 2007.12.04 -
Panda 9.0.0.4 2007.12.04 -
Prevx1 V2 2007.12.05 Generic.Malware
Rising 20.21.12.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 -
Sunbelt 2.2.907.0 2007.12.05 VIPRE.Suspicious
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
VBA32 3.12.2.5 2007.12.04 -
VirusBuster 4.3.26:9 2007.12.04 -
Webwasher-Gateway 6.6.2 2007.12.04 Win32.Malware.gen#UPX!92 (suspicious)

Добавлено через 6 минут

File noisybearcab_bin received on 07.23.2007 09:36:30 (CET)
Result: 20/30 (66.67%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - Java/NoisyBear
Authentium - - is a destructive program
Avast - - JS:NoisyBear
AVG - - -
BitDefender - - Trojan.NoisyBear
CAT-QuickHeal - - -
ClamAV - - Java.Noisybear
DrWeb - - Trojan.NoisyBear
eSafe - - Drummer
eTrust-Vet - - Java/Nosybea
Ewido - - Trojan.NoisyBear
FileAdvisor - - -
Fortinet - - JAV/Noisybear!tr
F-Prot - - Java/Trojan!217c
F-Secure - - Java/NoisyBear.A
Ikarus - - Trojan.NoisyBear
Kaspersky - - -
McAfee - - JV/g
Microsoft - - Trojan:Java/Noisybear
NOD32v2 - - -
Norman - - -
Panda - - JV/NoisyBear
Sophos - - Troj/NoisyBear
Sunbelt - - -
Symantec - - Trojan Horse
TheHacker - - -
VBA32 - - -
VirusBuster - - Java.NoisyBear
Webwasher-Gateway - - Java.NoisyBear

File emul.zip received on 12.03.2007 07:49:40 (CET)
Result: 16/32 (50%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - TR/Hijack.Explor.4284
Authentium - - -
Avast - - Win32:Avtest
AVG - - Downloader.Delf.LY
BitDefender - - BehavesLike:Win32.ExplorerHijack
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - Win32.Delf.adw
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - W32/Downloader.AJC
Ikarus - - BehavesLikeWin32.ExplorerHijack
Kaspersky - - Heur.Invader
McAfee - - -
Microsoft - - TrojanDownloader:Win32/Delf
NOD32v2 - - probably unknown NewHeur_PE virus
Norman - - W32/Downloader.AJC
Panda - - Suspicious file
Prevx1 - - Generic.Malware
Rising - - -
Sophos - - -
Sunbelt - - Win32.ExplorerHijack
Symantec - - -
TheHacker - - -
VBA32 - - suspected of Win32.Trojan.Downloader (http://...)
VirusBuster - - -
Webwasher-Gateway - - Trojan.Hijack.Explor.4284

Добавлено через 4 минуты

File EvID4226.exe received on 12.04.2007 16:11:06 (CET)
Result: 15/32 (46.88%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - Potentially harmful program HackTool.AB
BitDefender - - Application.Evid.M
CAT-QuickHeal - - AdWare.Agent.bq (Not a Virus)
ClamAV - - -
DrWeb - - -
eSafe - - suspicious Trojan/Worm
eTrust-Vet - - -
Ewido - - Not-A-Virus.Hacktool.EvID
FileAdvisor - - High threat detected
Fortinet - - HackerTool/Evid
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - potentially unwanted program Tool-Evid
Microsoft - - -
NOD32v2 - - Win32/Tool.EvID4226
Norman - - -
Panda - - HackTool/EvID
Prevx1 - - Potentially harmful program HackTool.AB
Rising - - -
Sophos - - EvID4226
Sunbelt - - Event ID 4226 Patcher
Symantec - - -
TheHacker - - Aplicacion/Tool.evid
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - Riskware.Tool.EvID4226.A

**Ultima Weapon** · 05.12.2007, 16:32

File askBarSetup.zip received on 12.05.2007 08:29:00 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 4/32 (12.5%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.04 -
BitDefender 7.2 2007.12.05 -
CAT-QuickHeal 9.00 2007.12.04 -
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.04 -
eSafe 7.0.15.0 2007.12.04 -
eTrust-Vet 31.3.5352 2007.12.05 -
Ewido 4.0 2007.12.04 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 -
F-Prot 4.4.2.54 2007.12.05 W32/Mywebsearch.I.gen!Eldorado
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 -
Kaspersky 7.0.0.125 2007.12.05 -
McAfee 5177 2007.12.04 -
Microsoft 1.3007 2007.12.05 -
NOD32v2 2703 2007.12.05 a variant of Win32/AdInstaller
Norman 5.80.02 2007.12.04 -
Panda 9.0.0.4 2007.12.04 -
Prevx1 V2 2007.12.05 Heuristic: Suspicious Hijacker
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 -
Sunbelt 2.2.907.0 2007.12.05 -
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
VBA32 3.12.2.5 2007.12.04 suspected of Trojan-Dropper.Delf.36 (paranoid heuristics)
VirusBuster 4.3.26:9 2007.12.04 -
Webwasher-Gateway 6.6.2 2007.12.05 -

Добавлено через 8 минут

File gen.exe received on 12.05.2007 08:37:09 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 4/32 (12.5%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.04 -
BitDefender 7.2 2007.12.05 -
CAT-QuickHeal 9.00 2007.12.04 -
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.04 -
eSafe 7.0.15.0 2007.12.04 suspicious Trojan/Worm
eTrust-Vet 31.3.5352 2007.12.05 -
Ewido 4.0 2007.12.04 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 -
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 -
Kaspersky 7.0.0.125 2007.12.05 -
McAfee 5177 2007.12.04 -
Microsoft 1.3007 2007.12.05 -
NOD32v2 2703 2007.12.05 -
Norman 5.80.02 2007.12.04 -
Panda 9.0.0.4 2007.12.04 Suspicious file
Prevx1 V2 2007.12.05 -
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 -
Sunbelt 2.2.907.0 2007.12.05 VIPRE.Suspicious
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
VBA32 3.12.2.5 2007.12.04 -
VirusBuster 4.3.26:9 2007.12.04 -
Webwasher-Gateway 6.6.2 2007.12.05 Win32.Malware.gen#UPX!92 (suspicious)

Добавлено через 22 минуты

File b.exe received on 12.05.2007 08:57:30 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 15/32 (46.88%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.04 Generic5.HNY
BitDefender 7.2 2007.12.05 -
CAT-QuickHeal 9.00 2007.12.04 (Suspicious) - DNAScan
ClamAV 0.91.2 2007.12.05 PUA.Packed.UPack-2
DrWeb 4.44.0.09170 2007.12.04 -
eSafe 7.0.15.0 2007.12.04 Suspicious File
eTrust-Vet 31.3.5352 2007.12.05 -
Ewido 4.0 2007.12.04 -
FileAdvisor 1 2007.12.05 High threat detected
Fortinet 3.14.0.0 2007.12.05 -
F-Prot 4.4.2.54 2007.12.05 W32/Heuristic-162!Eldorado
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 Trojan-Downloader.Win32.Zlob.and
Kaspersky 7.0.0.125 2007.12.05 -
McAfee 5177 2007.12.04 New Malware.aj
Microsoft 1.3007 2007.12.05 -
NOD32v2 2703 2007.12.05 -
Norman 5.80.02 2007.12.04 W32/Suspicious_U.gen
Panda 9.0.0.4 2007.12.04 -
Prevx1 V2 2007.12.05 Generic.Malware
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 Mal/Packer
Sunbelt 2.2.907.0 2007.12.05 VIPRE.Suspicious
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 W32/Behav-Heuristic-060
VBA32 3.12.2.5 2007.12.04 -
VirusBuster 4.3.26:9 2007.12.04 Packed/Upack
Webwasher-Gateway 6.6.2 2007.12.05 Win32.Malware.gen (suspicious)

Добавлено через 22 минуты

File c.exe received on 12.03.2007 16:35:59 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 4/32 (12.5%)

Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - ADSPY/LordPatch.A
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - suspicious Trojan/Worm
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - Heuristic: Suspicious File With Outbound Communications
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - Ad-Spyware.LordPatch.A

Добавлено через 27 минут

File bab.exe received on 11.19.2007 08:12:20 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 2/32 (6.25%)

Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - W32/Malware.AQMG
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - W32/Malware.AQMG
Panda - - -
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -

Добавлено через 28 минут

File ul.exe received on 12.01.2007 08:24:10 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 8/32 (25%)

Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - TR/Gendal.134656
Authentium - - -
Avast - - -
AVG - - Generic7.FSV
BitDefender - - Trojan.Generic.69247
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - High threat detected
Fortinet - - W32/BBTN.A!tr
F-Prot - - -
F-Secure - - -
Ikarus - - Trojan.Generic
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - W32.MALWARE.GEN
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - Trojan.Gendal.134656

Добавлено через 10 минут

File kayo.rar received on 12.05.2007 10:26:36 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 10/32 (31.25%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.04 -
BitDefender 7.2 2007.12.05 Packer.Krunchy.A
CAT-QuickHeal 9.00 2007.12.04 (Suspicious) - DNAScan
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.04 -
eSafe 7.0.15.0 2007.12.04 Suspicious File
eTrust-Vet 31.3.5353 2007.12.05 -
Ewido 4.0 2007.12.04 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 -
F-Prot 4.4.2.54 2007.12.05 W32/Heuristic-162!Eldorado
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 Packer.Krunchy.A
Kaspersky 7.0.0.125 2007.12.05 -
McAfee 5177 2007.12.04 -
Microsoft 1.3007 2007.12.05 -
NOD32v2 2703 2007.12.05 -
Norman 5.80.02 2007.12.04 -
Panda 9.0.0.4 2007.12.04 Suspicious file
Prevx1 V2 2007.12.05 Heuristic: Suspicious File With Covert Attributes
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 Mal/EncPk-BP
Sunbelt 2.2.907.0 2007.12.05 -
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
VBA32 3.12.2.5 2007.12.04 -
VirusBuster 4.3.26:9 2007.12.04 Packed/FRBR
Webwasher-Gateway 6.6.2 2007.12.05 Win32.Malware.gen (suspicious)

Добавлено через 4 минуты

File chong.exe received on 11.14.2007 03:26:51 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 7/32 (21.88%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - Generic9.STX
BitDefender - - -
CAT-QuickHeal - - (Suspicious) - DNAScan
ClamAV - - -
DrWeb - - -
eSafe - - Suspicious File
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - W32/Malware.AZKM
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - W32/Malware.AZKM
Panda - - -
Prevx1 - - Heuristic: Suspicious Self Modifying EXE
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - Win32.Malware.gen#PECompact (suspicious)

Добавлено через 52 секунды

File maker.exe received on 11.21.2007 03:48:22 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 1/32 (3.13%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - Win32.ModifiedUPX.gen!90 (suspicious)

Добавлено через 4 минуты

File obra.exe received on 12.04.2007 20:25:35 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 8/32 (25%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - (Suspicious) - DNAScan
ClamAV - - -
DrWeb - - -
eSafe - - Suspicious File
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - Low threat detected
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - Trojan-PWS.Win32.LdPinch.bjx
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - Suspicious file
Prevx1 - - Generic.Malware
Rising - - -
Sophos - - -
Sunbelt - - VIPRE.Suspicious
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - Win32.Malware.gen#PECompact!92 (suspicious)

Добавлено через 1 минуту

File mader.exe received on 11.10.2007 16:55:53 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 7/32 (21.88%)

Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - (Suspicious) - DNAScan
ClamAV - - -
DrWeb - - -
eSafe - - SuspiciousR-Mytob3
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - Backdoor.Win32.IRCBot.az
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - Suspicious file
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - W32/Behav-Heuristic-065
VBA32 - - -
VirusBuster - - Packed/MoleBox
Webwasher-Gateway - - Win32.Malware.gen (suspicious)
Additional information

**Surfer** · 05.12.2007, 17:34

OMFG...

Ultima Weapon plz, post only real malware in this thread.

for example EvID4226.exe is not malware, it is only patch for tcp/ip for p2p networks...

%)

**sergio342** · 05.12.2007, 20:52

Файл startdrv.exe получен 2007.12.05 18:42:02 (CET)
Был пойман эвристикой KIS7.125 как Troyan.Generic

Антивирус Версия Обновление Результат
AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.05 -
BitDefender 7.2 2007.12.05 -
CAT-QuickHeal 9.00 2007.12.05 -
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.05 -
eSafe 7.0.15.0 2007.12.05 -
eTrust-Vet 31.3.5352 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 -
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 -
Kaspersky 7.0.0.125 2007.12.05 Trojan.Win32.Agent.dei
McAfee 5178 2007.12.05 -
Microsoft 1.3007 2007.12.05 -
NOD32v2 2704 2007.12.05 -
Norman 5.80.02 2007.12.05 -
Panda 9.0.0.4 2007.12.04 -
Prevx1 V2 2007.12.05 -
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 Mal/Dropper-O
Sunbelt 2.2.907.0 2007.12.05 -
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
VBA32 3.12.2.5 2007.12.04 -
VirusBuster 4.3.26:9 2007.12.05 -
Webwasher-Gateway 6.6.2 2007.12.05 -

**Ultima Weapon** · 06.12.2007, 08:21

File cmdow.zip received on 12.05.2007 20:09:17 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 13/32 (40.63%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.6.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.05 Potentially harmful program HideExec.BD
BitDefender 7.2 2007.12.05 -
CAT-QuickHeal 9.00 2007.12.05 RiskTool.HideWindows (Not a Virus)
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.05 -
eSafe 7.0.15.0 2007.12.05 -
eTrust-Vet 31.3.5353 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 HackerTool/HideWindows
F-Prot 4.4.2.54 2007.12.05 W32/HackToolX.DY
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 not-a-virus:RiskTool.Win32.HideWindows
Kaspersky 7.0.0.125 2007.12.05 not-a-virus:RiskTool.Win32.HideWindows
McAfee 5178 2007.12.05 potentially unwanted program Tool-HideWindow
Microsoft 1.3007 2007.12.05 -
NOD32v2 2701 2007.12.05 Win32/CMDOW.143
Norman 5.80.02 2007.12.05 -
Panda 9.0.0.4 2007.12.04 Application/HideWindow.S
Prevx1 V2 2007.12.05 -
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 HideWindow
Sunbelt 2.2.907.0 2007.12.05 Trojan.HideWindow
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 Aplicacion/HideWindows
VBA32 3.12.2.5 2007.12.04 -
VirusBuster 4.3.26:9 2007.12.05 -
Webwasher-Gateway 6.6.2 2007.12.05 Riskware.HideWindows.I

Добавлено через 39 минут

File avz_2200_2.cab received on 12.05.2007 20:47:22 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 15/32 (46.88%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.6.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 TR/Hijack.Explor.4284
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 Win32:Avtest
AVG 7.5.0.503 2007.12.05 Downloader.Delf.LY
BitDefender 7.2 2007.12.05 BehavesLike:Win32ExplorerHijack
CAT-QuickHeal 9.00 2007.12.05 -
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.05 Trojan.MulDrop.9781
eSafe 7.0.15.0 2007.12.05 Win32.Delf.adw
eTrust-Vet 31.3.5353 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 -
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.05 W32/Downloader.AJC
Ikarus T3.1.1.12 2007.12.05 BehavesLikeWin32.ExplorerHijack
Kaspersky 7.0.0.125 2007.12.05 Heur.Invader
McAfee 5178 2007.12.05 -
Microsoft 1.3007 2007.12.05 TrojanDownloader:Win32/Delf
NOD32v2 2704 2007.12.05 probably unknown NewHeur_PE virus
Norman 5.80.02 2007.12.05 -
Panda 9.0.0.4 2007.12.04 Suspicious file
Prevx1 V2 2007.12.05 Generic.Malware
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 -
Sunbelt 2.2.907.0 2007.12.05 -
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
VBA32 3.12.2.5 2007.12.04 suspected of Win32.Trojan.Downloader (http://...)
VirusBuster 4.3.26:9 2007.12.05 -
Webwasher-Gateway 6.6.2 2007.12.05 Trojan.Hijack.Explor.4284

Добавлено через 43 минуты

File SSINSTALLER_124.zip received on 12.05.2007 21:24:16 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 8/32 (25%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.6.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 ADSPY/SafeSurf
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.05 -
BitDefender 7.2 2007.12.05 Trojan.Generic.75414
CAT-QuickHeal 9.00 2007.12.05 -
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.05 -
eSafe 7.0.15.0 2007.12.05 -
eTrust-Vet 31.3.5353 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 Spy/SafeSurf
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 -
Kaspersky 7.0.0.125 2007.12.05 -
McAfee 5178 2007.12.05 -
Microsoft 1.3007 2007.12.05 -
NOD32v2 2704 2007.12.05 -
Norman 5.80.02 2007.12.05 -
Panda 9.0.0.4 2007.12.05 Spyware/SafeSurf
Prevx1 V2 2007.12.05 Generic.Malware
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 -
Sunbelt 2.2.907.0 2007.12.05 SafeSurfing
Symantec 10 2007.12.05 -
TheHacker 6.2.9.151 2007.12.05 -
VBA32 3.12.2.5 2007.12.05 -
VirusBuster 4.3.26:9 2007.12.05 Trojan.DL.Istbar.Gen.1
Webwasher-Gateway 6.6.2 2007.12.05 Ad-Spyware.SafeSurf

Добавлено через 8 часов 43 минуты

File DLD.exe received on 11.21.2007 09:14:16 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 2/32 (6.25%)

Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - BACKDOOR.Trojan
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - Heuristic: Suspicious Hijacker
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -

**Shu_b** · 06.12.2007, 08:28

t-14879

Код:

File abcB812.tmp received on 12.06.2007 06:05:57 (CET)
Antivirus	Version	Last Update	Result
AhnLab-V3	2007.12.6.0	2007.12.06	-
AntiVir	7.6.0.34	2007.12.05	Worm/Ntech.W
Authentium	4.93.8	2007.12.05	-
Avast	4.7.1098.0	2007.12.05	-
AVG	7.5.0.503	2007.12.06	Downloader.Agent.14.C
BitDefender	7.2	2007.12.06	Trojan.Kobcka.BC
CAT-QuickHeal	9.00	2007.12.05	Trojan.Pakes.brf
ClamAV	0.91.2	2007.12.06	-
DrWeb	4.44.0.09170	2007.12.05	-
eSafe	7.0.15.0	2007.12.05	-
eTrust-Vet	31.3.5355	2007.12.05	-
Ewido	4.0	2007.12.05	-
FileAdvisor	1	2007.12.06	-
Fortinet	3.14.0.0	2007.12.06	-
F-Prot	4.4.2.54	2007.12.05	-
F-Secure	6.70.13030.0	2007.12.06	Trojan.Win32.Pakes.brf
Ikarus	T3.1.1.12	2007.12.06	Trojan.Win32.Pakes.brf
Kaspersky	7.0.0.125	2007.12.06	Trojan.Win32.Pakes.brf
McAfee	5178	2007.12.05	-
Microsoft	1.3007	2007.12.06	TrojanDropper:Win32/Cutwail.R
NOD32v2	2705	2007.12.05	Win32/Agent.NNK
Norman	5.80.02	2007.12.05	W32/Smalltroj.BOJA
Panda	9.0.0.4	2007.12.05	-
Prevx1	V2	2007.12.06	-
Rising	20.21.22.00	2007.12.06	-
Sophos	4.24.0	2007.12.06	-
Sunbelt	2.2.907.0	2007.12.05	-
Symantec	10	2007.12.06	-
TheHacker	6.2.9.151	2007.12.05	-
VBA32	3.12.2.5	2007.12.05	Trojan.Win32.Pakes.brf
VirusBuster	4.3.26:9	2007.12.05	Trojan.DR.Pandex.Gen.1
Webwasher-Gateway	6.6.2	2007.12.05	Worm.Ntech.W
Additional information
File size: 20480 bytes

Код:

File rt26.exe received on 12.06.2007 06:10:27 (CET)
Antivirus	Version	Last Update	Result
AhnLab-V3	2007.12.6.0	2007.12.06	-
AntiVir	7.6.0.34	2007.12.05	-
Authentium	4.93.8	2007.12.05	-
Avast	4.7.1098.0	2007.12.05	-
AVG	7.5.0.503	2007.12.06	-
BitDefender	7.2	2007.12.06	-
CAT-QuickHeal	9.00	2007.12.05	-
ClamAV	0.91.2	2007.12.06	-
DrWeb	4.44.0.09170	2007.12.05	-
eSafe	7.0.15.0	2007.12.05	-
eTrust-Vet	31.3.5355	2007.12.05	-
Ewido	4.0	2007.12.05	-
FileAdvisor	1	2007.12.06	-
Fortinet	3.14.0.0	2007.12.06	-
F-Prot	4.4.2.54	2007.12.05	-
F-Secure	6.70.13030.0	2007.12.06	-
Ikarus	T3.1.1.12	2007.12.06	Virus.Win32.Zapchast.DA
Kaspersky	7.0.0.125	2007.12.06	Trojan-PSW.Win32.LdPinch.ejl
McAfee	5178	2007.12.05	-
Microsoft	1.3007	2007.12.06	-
NOD32v2	2705	2007.12.05	-
Norman	5.80.02	2007.12.05	-
Panda	9.0.0.4	2007.12.05	-
Prevx1	V2	2007.12.06	-
Rising	20.21.22.00	2007.12.06	Trojan.DL.Win32.Agent.bxw
Sophos	4.24.0	2007.12.06	Mal/Dropper-T
Sunbelt	2.2.907.0	2007.12.05	-
Symantec	10	2007.12.06	-
TheHacker	6.2.9.151	2007.12.05	-
VBA32	3.12.2.5	2007.12.05	-
VirusBuster	4.3.26:9	2007.12.05	-
Webwasher-Gateway	6.6.2	2007.12.05	-
Additional information
File size: 52224 bytes

**Ultima Weapon** · 06.12.2007, 08:30

File change.exe received on 12.06.2007 06:22:16 (CET)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.6.0 2007.12.06 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.06 -
BitDefender 7.2 2007.12.06 -
CAT-QuickHeal 9.00 2007.12.05 -
ClamAV 0.91.2 2007.12.06 -
DrWeb 4.44.0.09170 2007.12.05 -
eSafe 7.0.15.0 2007.12.05 suspicious Trojan/Worm
eTrust-Vet 31.3.5355 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.06 -
Fortinet 3.14.0.0 2007.12.06 -
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.06 -
Ikarus T3.1.1.12 2007.12.06 -
Kaspersky 7.0.0.125 2007.12.06 -
McAfee 5178 2007.12.05 -
Microsoft 1.3007 2007.12.06 -
NOD32v2 2705 2007.12.05 -
Norman 5.80.02 2007.12.05 -
Panda 9.0.0.4 2007.12.05 -
Prevx1 V2 2007.12.06 -
Rising 20.21.22.00 2007.12.06 -
Sophos 4.24.0 2007.12.06 -
Sunbelt 2.2.907.0 2007.12.05 VIPRE.Suspicious
Symantec 10 2007.12.06 -
TheHacker 6.2.9.151 2007.12.05 -
VBA32 3.12.2.5 2007.12.05 -
VirusBuster 4.3.26:9 2007.12.05 -
Webwasher-Gateway 6.6.2 2007.12.05 Win32.Malware.gen#UPX!92 (suspicious)

**Shu_b** · 06.12.2007, 08:42

You do not know where to receive the report for the publication?
Look -

**Ultima Weapon** · 06.12.2007, 09:28

File fi.exe received on 12.05.2007 06:59:45 (CET)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - KillAV.FF
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - suspicious Trojan/Worm
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - Spy/Agent
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - Suspicious file
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -
Additional information
MD5: 239421fb8dde79a54e86bca3ef4868ac

**rubin** · 06.12.2007, 21:51

Файл avz00001.dta получен 2007.12.06 19:38:20 (CET)

Код:

AhnLab-V3	2007.12.7.0	2007.12.06	Win-Trojan/Xema.variant
AntiVir	7.6.0.34	2007.12.06	TR/Dldr.Vb.ANF.104
Authentium	4.93.8	2007.12.05	W32/Downldr2.URL
Avast	4.7.1098.0	2007.12.05	-
AVG	7.5.0.503	2007.12.06	Downloader.Generic4.KWJ
BitDefender	7.2	2007.12.06	Trojan.Downloader.Vb.ANF
CAT-QuickHeal	9.00	2007.12.06	(Suspicious) - DNAScan
ClamAV	0.91.2	2007.12.06	PUA.Packed.Expressor
DrWeb	4.44.0.09170	2007.12.06	Trojan.DownLoader.15237
eSafe	7.0.15.0	2007.12.06	Suspicious File
eTrust-Vet	31.3.5356	2007.12.06	-
Ewido	4.0	2007.12.06	-
FileAdvisor	1	2007.12.06	High threat detected
Fortinet	3.14.0.0	2007.12.06	PossibleThreat
F-Prot	4.4.2.54	2007.12.05	W32/Downldr2.URL
F-Secure	6.70.13030.0	2007.12.06	-
Ikarus	T3.1.1.12	2007.12.06	Backdoor.Win32.Hupigon.mrv
Kaspersky	7.0.0.125	2007.12.06	-
McAfee	5179	2007.12.06	New Malware.dq
Microsoft	1.3007	2007.12.06	Worm:Win32/VB
NOD32v2	2707	2007.12.06	Win32/TrojanDownloader.VB.ANF
Norman	5.80.02	2007.12.06	-
Panda	9.0.0.4	2007.12.06	Trj/QQPass.QV
Prevx1	V2	2007.12.06	Heuristic: Suspicious File With Code Injection Technology
Rising	20.21.32.00	2007.12.06	Trojan.DL.VB.dpl
Sophos	4.24.0	2007.12.06	Mal/Behav-160
Sunbelt	2.2.907.0	2007.12.05	Trojan-Downloader.Vb.ANF
Symantec	10	2007.12.06	W32.SillyFDC
TheHacker	6.2.9.151	2007.12.05	-
VBA32	3.12.2.5	2007.12.05	Trojan-Downloader.Win32.VB.anf
VirusBuster	4.3.26:9	2007.12.06	Packed/eXPressor
Webwasher-Gateway	6.6.2	2007.12.06	Trojan.Dldr.Vb.ANF.104

Дополнительная информация
File size: 22044 bytes
MD5: 477f7953da0469d65efd95f84e4bb0dc
SHA1: 30f811ac2fc90ea2d59fa8d20e44fa11f8fa9c2b
PEiD: eXPressor v1.3 -> CGSoftLabs (h)
Bit9 info: http://fileadvisor.bit9.com/services...fd95f84e4bb0dc
packers: Expressor
Prevx info: http://fileinfo.prevx.com/fileinfo.a...FA6C00093D066E

**zorro84** · 07.12.2007, 08:06

Файл PICT0038470.zip получен 2007.12.07 05:47:24 (CET)
Результат: 8/32 (25%)

Антивирус Версия Обновление Результат
AhnLab-V3 2007.12.7.0 2007.12.07 -
AntiVir 7.6.0.34 2007.12.06 -
Authentium 4.93.8 2007.12.06 -
Avast 4.7.1098.0 2007.12.06 -
AVG 7.5.0.503 2007.12.07 Obfustat.AARZ
BitDefender 7.2 2007.12.07 Trojan.Downloader.Agent.YVP
CAT-QuickHeal 9.00 2007.12.06 -
ClamAV 0.91.2 2007.12.07 -
DrWeb 4.44.0.09170 2007.12.06 Trojan.MulDrop.9716
eSafe 7.0.15.0 2007.12.06 -
eTrust-Vet 31.3.5358 2007.12.07 -
Ewido 4.0 2007.12.06 -
FileAdvisor 1 2007.12.07 -
Fortinet 3.14.0.0 2007.12.06 -
F-Prot 4.4.2.54 2007.12.06 -
F-Secure 6.70.13030.0 2007.12.07 Trojan-PSW.Win32.LdPinch.eim
Ikarus T3.1.1.12 2007.12.07 -
Kaspersky 7.0.0.125 2007.12.07 Trojan-PSW.Win32.LdPinch.eim
McAfee 5179 2007.12.06 -
Microsoft 1.3007 2007.12.07 -
NOD32v2 2708 2007.12.07 -
Norman 5.80.02 2007.12.06 W32/Malware.AHSU.dropper
Panda 9.0.0.4 2007.12.06 -
Prevx1 V2 2007.12.07 -
Rising 20.21.32.00 2007.12.06 -
Sophos 4.24.0 2007.12.07 -
Sunbelt 2.2.907.0 2007.12.07 -
Symantec 10 2007.12.07 -
TheHacker 6.2.9.152 2007.12.07 -
VBA32 3.12.2.5 2007.12.05 MalwareScope.Trojan-PSW.Pinch.1
VirusBuster 4.3.26:9 2007.12.06 Trojan.DR.LdPinch.CCL
Webwasher-Gateway 6.6.2 2007.12.06 -

Дополнительная информация
File size: 92275 bytes
MD5: bfb62a7151a4aa1cb5aaeab569858e03
SHA1: fc3bbbce71e60d508c5577a70e37c8a505f25166

Исследование антивирусов 6

Опции темы

Похожие темы

Исследование антивирусов 7

Исследование антивирусов 5

Исследование антивирусов 4

Исследование антивирусов 3

Исследование антивирусов 2

Ваши права в разделе