-
[code][B]a-squared 4.5.0.41 2009.11.12 Trojan-Ransom!IK[/B]
AhnLab-V3 5.0.0.2 2009.11.12 -
[B]AntiVir 7.9.1.65 2009.11.12 TR/Agent.314368[/B]
[B]Antiy-AVL 2.0.3.7 2009.11.12 Trojan/Win32.PogBlock.gen[/B]
Authentium 5.2.0.5 2009.11.12 -
Avast 4.8.1351.0 2009.11.12 -
[B]AVG 8.5.0.425 2009.11.12 SHeur2.BQNF[/B]
BitDefender 7.2 2009.11.12 -
CAT-QuickHeal 10.00 2009.11.12 -
ClamAV 0.94.1 2009.11.12 -
Comodo 2931 2009.11.12 -
[B]DrWeb 5.0.0.12182 2009.11.12 Trojan.Winlock.313[/B]
eSafe 7.0.17.0 2009.11.11 -
eTrust-Vet 35.1.7117 2009.11.12 -
F-Prot 4.5.1.85 2009.11.12 -
F-Secure 9.0.15370.0 2009.11.11 -
[B]Fortinet 3.120.0.0 2009.11.11 W32/PogBlock.DZ!t[/B]r
GData 19 2009.11.12 -
[B]Ikarus T3.1.1.74.0 2009.11.12 Trojan-Ransom[/B]
Jiangmin 11.0.800 2009.11.12 -
K7AntiVirus 7.10.894 2009.11.11 -
[B]Kaspersky 7.0.0.125 2009.11.12 Trojan-Ransom.Win32.PogBlock.dz[/B]
McAfee 5800 2009.11.12 -
[B]McAfee+Artemis 5800 2009.11.12 Artemis!36A90A29EE51
McAfee-GW-Edition 6.8.5 2009.11.12 Heuristic.BehavesLike.Win32.Suspicious.I
[/B]Microsoft 1.5202 2009.11.12 -
[B]NOD32 4600 2009.11.12 Win32/LockScreen.CW
Norman 6.03.02 2009.11.11 W32/Malware.JUJX
nProtect 2009.1.8.0 2009.11.12 Trojan/W32.PogBlock.314368.B
Panda 10.0.2.2 2009.11.12 Trj/CI.A
[/B]PCTools 7.0.3.5 2009.11.12 -
Prevx 3.0 2009.11.12 -
Rising 22.21.03.09 2009.11.12 -
Sophos 4.47.0 2009.11.12 -
Sunbelt 3.2.1858.2 2009.11.12 -
Symantec 1.4.4.12 2009.11.12 -
TheHacker 6.5.0.2.066 2009.11.11 -
TrendMicro 9.0.0.1003 2009.11.12 -
VBA32 3.12.10.11 2009.11.11 -
ViRobot 2009.11.12.2033 2009.11.12 -
VirusBuster 4.6.5.0 2009.11.12 -[/code]
File size: 314368 bytes
MD5...: 36a90a29ee5179e1ef66d8b84c30ffe6
SHA1..: 099102dea15df9af983f4a7e256403067546229e
SHA256: 3a226a94a47bbbd1cb32cc906a896fd1e091489d09e9a66ba9f46bc590284604
ssdeep: 6144:MhWqgRVlAr3NZysba2TBTl7yAOAkW5pW6ms:MhaQr3NZyspTtl7yPW5
-
File chknt32.exe received on 2009.11.13 04:59:03 (UTC)
[CODE]Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.11.13 -
AhnLab-V3 5.0.0.2 2009.11.12 -
[B]AntiVir 7.9.1.65 2009.11.12 TR/Dropper.Gen[/B]
Antiy-AVL 2.0.3.7 2009.11.13 -
Authentium 5.2.0.5 2009.11.13 -
Avast 4.8.1351.0 2009.11.12 -
AVG 8.5.0.425 2009.11.12 -
BitDefender 7.2 2009.11.13 -
CAT-QuickHeal 10.00 2009.11.12 -
ClamAV 0.94.1 2009.11.12 -
Comodo 2935 2009.11.13 -
DrWeb 5.0.0.12182 2009.11.13 -
eSafe 7.0.17.0 2009.11.12 -
eTrust-Vet 35.1.7118 2009.11.12 -
F-Prot 4.5.1.85 2009.11.12 -
F-Secure 9.0.15370.0 2009.11.11 -
Fortinet 3.120.0.0 2009.11.13 -
GData 19 2009.11.13 -
Ikarus T3.1.1.74.0 2009.11.13 -
[B]Jiangmin 11.0.800 2009.11.12 TrojanSpy.Zbot.srr[/B]
K7AntiVirus 7.10.894 2009.11.11 -
Kaspersky 7.0.0.125 2009.11.13 -
McAfee 5800 2009.11.12 -
McAfee+Artemis 5800 2009.11.12 -
[B]McAfee-GW-Edition 6.8.5 2009.11.12 Trojan.Dropper.Gen[/B]
Microsoft 1.5202 2009.11.12 -
NOD32 4602 2009.11.13 -
Norman 6.03.02 2009.11.11 -
nProtect 2009.1.8.0 2009.11.13 -
Panda 10.0.2.2 2009.11.13 -
PCTools 7.0.3.5 2009.11.13 -
Prevx 3.0 2009.11.13 -
Rising 22.21.04.01 2009.11.13 -
Sophos 4.47.0 2009.11.13 -
Sunbelt 3.2.1858.2 2009.11.12 -
Symantec 1.4.4.12 2009.11.13 -
TheHacker 6.5.0.2.067 2009.11.12 -
TrendMicro 9.0.0.1003 2009.11.12 -
VBA32 3.12.10.11 2009.11.13 -
ViRobot 2009.11.13.2034 2009.11.13 -
VirusBuster 4.6.5.0 2009.11.12 -[/CODE]
Additional information
File size: 142082 bytes
MD5...: 360f03ee267b52ee1b5b41e5ff65c29e
File svchost.exe received on 2009.11.13 05:02:22 (UTC)
[CODE]Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.11.10 -
AhnLab-V3 5.0.0.2 2009.11.06 -
AntiVir 7.9.1.61 2009.11.10 -
Antiy-AVL 2.0.3.7 2009.11.10 -
Authentium 5.2.0.5 2009.11.10 -
Avast 4.8.1351.0 2009.11.10 -
AVG 8.5.0.423 2009.11.10 -
BitDefender 7.2 2009.11.10 -
CAT-QuickHeal 10.00 2009.11.10 -
ClamAV 0.94.1 2009.11.10 -
Comodo 2905 2009.11.10 -
DrWeb 5.0.0.12182 2009.11.10 -
eSafe 7.0.17.0 2009.11.10 -
eTrust-Vet 35.1.7113 2009.11.10 -
F-Prot 4.5.1.85 2009.11.10 -
F-Secure 9.0.15370.0 2009.11.09 -
Fortinet 3.120.0.0 2009.11.10 -
GData 19 2009.11.10 -
Ikarus T3.1.1.74.0 2009.11.10 -
Jiangmin 11.0.800 2009.11.10 -
K7AntiVirus 7.10.892 2009.11.09 -
Kaspersky 7.0.0.125 2009.11.10 -
McAfee 5797 2009.11.09 -
McAfee+Artemis 5797 2009.11.09 -
McAfee-GW-Edition 6.8.5 2009.11.10 -
Microsoft 1.5202 2009.11.10 -
NOD32 4592 2009.11.10 -
Norman 6.03.02 2009.11.09 -
nProtect 2009.1.8.0 2009.11.10 -
Panda 10.0.2.2 2009.11.09 -
PCTools 7.0.3.5 2009.11.10 -
Prevx 3.0 2009.11.13 -
Rising 22.21.01.09 2009.11.10 -
Sophos 4.47.0 2009.11.10 -
Sunbelt 3.2.1858.2 2009.11.10 -
Symantec 1.4.4.12 2009.11.10 -
TheHacker 6.5.0.2.064 2009.11.09 -
TrendMicro 9.0.0.1003 2009.11.10 -
VBA32 3.12.10.11 2009.11.09 -
ViRobot 2009.11.10.2029 2009.11.10 -
VirusBuster 4.6.5.0 2009.11.09 -[/CODE]
Additional information
File size: 460800 bytes
MD5...: 0e2325e8a7a2cc4c2d3964de4f6cc748
-
File config.exe received on 2009.11.13 16:39:47 (UTC)
Result: 12/41 (29.27%)
[QUOTE][B]a-squared 4.5.0.41 2009.11.13 Trojan.Win32.Qhost!IK[/B]
AhnLab-V3 5.0.0.2 2009.11.13 -
AntiVir 7.9.1.65 2009.11.13 -
Antiy-AVL 2.0.3.7 2009.11.13 -
Authentium 5.2.0.5 2009.11.13 -
Avast 4.8.1351.0 2009.11.13 -
AVG 8.5.0.425 2009.11.13 -
BitDefender 7.2 2009.11.13 -
CAT-QuickHeal 10.00 2009.11.13 -
ClamAV 0.94.1 2009.11.13 -
[B]Comodo 2943 2009.11.13 Heur.Suspicious[/B]
[B]DrWeb 5.0.0.12182 2009.11.13 Trojan.Hoster.355[/B]
[B]eSafe 7.0.17.0 2009.11.12 Suspicious File[/B]
eTrust-Vet 35.1.7119 2009.11.13 -
F-Prot 4.5.1.85 2009.11.13 -
F-Secure 9.0.15370.0 2009.11.11 -
Fortinet 3.120.0.0 2009.11.13 -
GData 19 2009.11.13 -
[B]Ikarus T3.1.1.74.0 2009.11.13 Trojan.Win32.Qhost[/B]
Jiangmin 11.0.800 2009.11.12 -
K7AntiVirus 7.10.896 2009.11.13 -
[B]Kaspersky 7.0.0.125 2009.11.13 Trojan.BAT.Qhost.gy[/B]
McAfee 5800 2009.11.12 -
[B]McAfee+Artemis 5800 2009.11.12 Artemis!E1D0EFF13118[/B]
[B]McAfee-GW-Edition 6.8.5 2009.11.13 Heuristic.LooksLike.Win32.ModifiedUPX.B[/B]
Microsoft 1.5202 2009.11.13 -
NOD32 4604 2009.11.13 -
Norman 6.03.02 2009.11.13 -
nProtect 2009.1.8.0 2009.11.13 -
[B]Panda 10.0.2.2 2009.11.13 Trj/CI.A[/B]
PCTools 7.0.3.5 2009.11.13 -
Prevx 3.0 2009.11.13 -
[B]Rising 22.21.04.09 2009.11.13 Dropper.Win32.Agent.zrh[/B]
[B]Sophos 4.47.0 2009.11.13 Mal/Generic-A[/B]
Sunbelt 3.2.1858.2 2009.11.12 -
Symantec 1.4.4.12 2009.11.13 -
TheHacker 6.5.0.2.067 2009.11.12 -
[B]TrendMicro 9.0.0.1003 2009.11.13 PAK_Generic.001[/B]
VBA32 3.12.10.11 2009.11.13 -
ViRobot 2009.11.13.2035 2009.11.13 -
VirusBuster 4.6.5.0 2009.11.13 -[/QUOTE]
[url]http://www.virustotal.com/analisis/77cc07825f7e0c9588c11e3ea8de9a1ed330b8288701b2c8be42aa03f20a4abb-1258130387[/url]
-
Файло шлётся в письмах с текстовкой
[QUOTE]Dear Microsoft Customer,
Starting 12/11/2009 the Conficker worm began infecting Microsoft customers unusually rapidly. Microsoft has been advised by your Internet provider that your network is infected.
To counteract further spread we advise removing the infection using an antispyware program. We are supplying all effected Windows Users with a free system scan in order to clean any files infected by the virus.
Please install attached file to start the scan. The process takes under a minute and will prevent your files from being compromised. We appreciate your prompt cooperation.
Regards,
Microsoft Windows Agent #2 (Hollis)
Microsoft Windows Computer Safety Division[/QUOTE]
[CODE]Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.11.13 -
AhnLab-V3 5.0.0.2 2009.11.13 -
AntiVir 7.9.1.65 2009.11.13 TR/Crypt.ZPACK.Gen
Antiy-AVL 2.0.3.7 2009.11.13 -
Authentium 5.2.0.5 2009.11.13 W32/Trojan3.BNG
Avast 4.8.1351.0 2009.11.13 -
AVG 8.5.0.425 2009.11.13 -
BitDefender 7.2 2009.11.13 -
CAT-QuickHeal 10.00 2009.11.13 (Suspicious) - DNAScan
ClamAV 0.94.1 2009.11.13 -
Comodo 2943 2009.11.13 -
DrWeb 5.0.0.12182 2009.11.13 -
eSafe 7.0.17.0 2009.11.12 Suspicious File
eTrust-Vet 35.1.7119 2009.11.13 -
F-Prot 4.5.1.85 2009.11.13 W32/Trojan3.BNG
F-Secure 9.0.15370.0 2009.11.11 Suspicious:W32/Malware!Online
Fortinet 3.120.0.0 2009.11.13 -
GData 19 2009.11.13 -
Ikarus T3.1.1.74.0 2009.11.13 -
Jiangmin 11.0.800 2009.11.12 -
K7AntiVirus 7.10.896 2009.11.13 -
Kaspersky 7.0.0.125 2009.11.13 -
McAfee 5800 2009.11.12 -
McAfee+Artemis 5800 2009.11.12 Artemis!74500712A6A8
McAfee-GW-Edition 6.8.5 2009.11.13 Trojan.Crypt.ZPACK.Gen
Microsoft 1.5202 2009.11.13 TrojanDownloader:Win32/Cutwail.gen!C
NOD32 4604 2009.11.13 -
Norman 6.03.02 2009.11.13 -
nProtect 2009.1.8.0 2009.11.13 -
Panda 10.0.2.2 2009.11.13 -
PCTools 7.0.3.5 2009.11.13 -
Prevx 3.0 2009.11.13 Medium Risk Malware
Rising 22.21.04.09 2009.11.13 -
Sophos 4.47.0 2009.11.13 Mal/FakeAV-AX
Sunbelt 3.2.1858.2 2009.11.12 -
Symantec 1.4.4.12 2009.11.13 -
TheHacker 6.5.0.2.067 2009.11.12 -
TrendMicro 9.0.0.1003 2009.11.13 -
VBA32 3.12.10.11 2009.11.13 -
ViRobot 2009.11.13.2035 2009.11.13 -
VirusBuster 4.6.5.0 2009.11.13 -[/CODE]
Additional information
File size: 55296 bytes
MD5 : 74500712a6a8a4a5951b96b56edec45a
SHA1 : d01998acf475bce2c2bad9f87cef122d34749e1d
SHA256: 9a497aab1129e85baed8c101a04159770c81084698b81648d20215a6901ae364
PEInfo: PE Structure information
-
Новое
[url]http://www.virustotal.com/ru/analisis/e6ed4016a88d2dfeb4113553a7a20dda90d832e31aec0422f83be4d4fc7fe86c-1258134499[/url]
[QUOTE]a-squared 4.5.0.41 2009.11.13 -
AhnLab-V3 5.0.0.2 2009.11.13 -
AntiVir 7.9.1.65 2009.11.13 -
Antiy-AVL 2.0.3.7 2009.11.13 -
Authentium 5.2.0.5 2009.11.13 -
Avast 4.8.1351.0 2009.11.13 -
AVG 8.5.0.425 2009.11.13 -
BitDefender 7.2 2009.11.13 -
[B]CAT-QuickHeal 10.00 2009.11.13 TrojanDropper.VB.mre[/B]
[B]ClamAV 0.94.1 2009.11.13 PUA.Packed.ASPack212[/B]
Comodo 2943 2009.11.13 -
DrWeb 5.0.0.12182 2009.11.13 -
[B]eSafe 7.0.17.0 2009.11.12 Suspicious File[/B]
eTrust-Vet 35.1.7119 2009.11.13 -
F-Prot 4.5.1.85 2009.11.13 -
F-Secure 9.0.15370.0 2009.11.11 -
Fortinet 3.120.0.0 2009.11.13 -
GData 19 2009.11.13 -
Ikarus T3.1.1.74.0 2009.11.13 -
Jiangmin 11.0.800 2009.11.12 -
K7AntiVirus 7.10.896 2009.11.13 -
Kaspersky 7.0.0.125 2009.11.13 -
McAfee 5800 2009.11.12 -
[B]McAfee+Artemis 5800 2009.11.12 Artemis!38668580BB61[/B]
[B]McAfee-GW-Edition 6.8.5 2009.11.13 Heuristic.LooksLike.Trojan.Crypt.ZPACK.B[/B]
Microsoft 1.5202 2009.11.13 -
NOD32 4604 2009.11.13 -
Norman 6.03.02 2009.11.13 -
nProtect 2009.1.8.0 2009.11.13 -
Panda 10.0.2.2 2009.11.13 -
PCTools 7.0.3.5 2009.11.13 -
[B]Prevx 3.0 2009.11.13 Medium Risk Malware[/B]
Rising 22.21.04.09 2009.11.13 -
Sophos 4.47.0 2009.11.13 -
[B]Sunbelt 3.2.1858.2 2009.11.12 Trojan.Win32.Generic!BT[/B]
Symantec 1.4.4.12 2009.11.13 -
TheHacker 6.5.0.2.067 2009.11.12 -
[B]TrendMicro 9.0.0.1003 2009.11.13 PAK_Generic.001[/B]
VBA32 3.12.10.11 2009.11.13 -
ViRobot 2009.11.13.2035 2009.11.13 -
VirusBuster 4.6.5.0 2009.11.13 - [/QUOTE]
[url]http://www.virustotal.com/ru/analisis/bf914aeae039025301243e629a6ffd2f108376acddd61190c0ef3b66b96fce89-1258134678[/url]
[QUOTE]a-squared 4.5.0.41 2009.11.10 -
AhnLab-V3 5.0.0.2 2009.11.06 -
AntiVir 7.9.1.61 2009.11.10 -
Antiy-AVL 2.0.3.7 2009.11.10 -
Authentium 5.2.0.5 2009.11.10 -
Avast 4.8.1351.0 2009.11.10 -
AVG 8.5.0.423 2009.11.10 -
[B]BitDefender 7.2 2009.11.10 Gen:Trojan.Heur.bC5@Y2hszUo[/B]
CAT-QuickHeal 10.00 2009.11.10 -
ClamAV 0.94.1 2009.11.10 -
Comodo 2905 2009.11.10 -
DrWeb 5.0.0.12182 2009.11.10 -
eSafe 7.0.17.0 2009.11.10 -
eTrust-Vet 35.1.7113 2009.11.10 -
F-Prot 4.5.1.85 2009.11.10 -
[B]F-Secure 9.0.15370.0 2009.11.09 Gen:Trojan.Heur.bC5@Y2hszUo [/B]
Fortinet 3.120.0.0 2009.11.10 -
[B]GData 19 2009.11.10 Gen:Trojan.Heur.bC5@Y2hszUo[/B]
Ikarus T3.1.1.74.0 2009.11.10 -
Jiangmin 11.0.800 2009.11.10 -
K7AntiVirus 7.10.892 2009.11.09 -
Kaspersky 7.0.0.125 2009.11.10 -
McAfee 5797 2009.11.09 -
McAfee+Artemis 5797 2009.11.09 -
McAfee-GW-Edition 6.8.5 2009.11.10 -
Microsoft 1.5202 2009.11.10 -
NOD32 4592 2009.11.10 -
Norman 6.03.02 2009.11.09 -
nProtect 2009.1.8.0 2009.11.10 -
Panda 10.0.2.2 2009.11.09 -
PCTools 7.0.3.5 2009.11.10 -
Prevx 3.0 2009.11.13 -
Rising 22.21.01.09 2009.11.10 -
Sophos 4.47.0 2009.11.10 -
Sunbelt 3.2.1858.2 2009.11.10 -
Symantec 1.4.4.12 2009.11.10 -
TheHacker 6.5.0.2.064 2009.11.09 -
TrendMicro 9.0.0.1003 2009.11.10 -
VBA32 3.12.10.11 2009.11.09 -
ViRobot 2009.11.10.2029 2009.11.10 -
VirusBuster 4.6.5.0 2009.11.09 - [/QUOTE]
-
[url]http://www.virustotal.com/ru/analisis/ecb9a45ec83eeceff4b71e53e6b0824348fc4b8d0361c80298edce1fa98daf6f-1258229217[/url]
[QUOTE]a-squared 4.5.0.41 2009.11.14 -
AhnLab-V3 5.0.0.2 2009.11.13 -
AntiVir 7.9.1.65 2009.11.13 -
Antiy-AVL 2.0.3.7 2009.11.13 -
Authentium 5.2.0.5 2009.11.14 -
Avast 4.8.1351.0 2009.11.14 -
AVG 8.5.0.425 2009.11.14 -
BitDefender 7.2 2009.11.14 -
CAT-QuickHeal 10.00 2009.11.13 -
ClamAV 0.94.1 2009.11.14 -
Comodo 2955 2009.11.14 -
[B]DrWeb 5.0.0.12182 2009.11.14 DLOADER.Trojan[/B]
eSafe 7.0.17.0 2009.11.12 -
eTrust-Vet 35.1.7121 2009.11.14 -
F-Prot 4.5.1.85 2009.11.14 -
F-Secure 9.0.15370.0 2009.11.11 -
Fortinet 3.120.0.0 2009.11.14 -
GData 19 2009.11.14 -
Ikarus T3.1.1.74.0 2009.11.14 -
[B]Jiangmin 11.0.800 2009.11.12 Trojan/Scar.dar[/B]
K7AntiVirus 7.10.896 2009.11.13 -
Kaspersky 7.0.0.125 2009.11.14 -
McAfee 5802 2009.11.14 -
McAfee+Artemis 5802 2009.11.14 -
McAfee-GW-Edition 6.8.5 2009.11.14 -
Microsoft 1.5202 2009.11.14 -
NOD32 4608 2009.11.14 -
Norman 6.03.02 2009.11.14 -
nProtect 2009.1.8.0 2009.11.14 -
Panda 10.0.2.2 2009.11.14 -
PCTools 7.0.3.5 2009.11.13 -
Prevx 3.0 2009.11.14 -
Rising 22.21.05.04 2009.11.14 -
[B]Sophos 4.47.0 2009.11.14 Sus/Behav-1018[/B]
Sunbelt 3.2.1858.2 2009.11.12 -
Symantec 1.4.4.12 2009.11.14 -
TheHacker 6.5.0.2.070 2009.11.14 -
[B]TrendMicro 9.0.0.1003 2009.11.14 Cryp_Xin2 [/B]
VBA32 3.12.10.11 2009.11.13 -
ViRobot 2009.11.14.2037 2009.11.14 -
VirusBuster 4.6.5.0 2009.11[/QUOTE]
-
Файл Book_1019.exe получен 2009.11.15 15:46:55 (UTC)
Текущий статус: закончено
Результат: 6/41 (14.64%)
[QUOTE]Антивирус Версия Обновление Результат
[B]a-squared 4.5.0.41 2009.11.10 Trojan-Downloader.Adload!IK[/B]
AhnLab-V3 5.0.0.2 2009.11.06 -
[B]AntiVir 7.9.1.61 2009.11.10 ADSPY/AdSpy.Gen[/B]
Antiy-AVL 2.0.3.7 2009.11.10 -
Authentium 5.2.0.5 2009.11.10 -
Avast 4.8.1351.0 2009.11.10 -
AVG 8.5.0.423 2009.11.10 -
BitDefender 7.2 2009.11.10 -
CAT-QuickHeal 10.00 2009.11.10 -
[B]ClamAV 0.94.1 2009.11.10 PUA.Packed.ASPack212[/B]
Comodo 2905 2009.11.10 -
[B]DrWeb 5.0.0.12182 2009.11.10 Adware.FieryAds.22[/B]
eSafe 7.0.17.0 2009.11.10 -
eTrust-Vet 35.1.7113 2009.11.10 -
F-Prot 4.5.1.85 2009.11.10 -
F-Secure 9.0.15370.0 2009.11.09 -
Fortinet 3.120.0.0 2009.11.10 -
GData 19 2009.11.10 -
[B]Ikarus T3.1.1.74.0 2009.11.10 Trojan-Downloader.Adload[/B]
Jiangmin 11.0.800 2009.11.10 -
K7AntiVirus 7.10.892 2009.11.09 -
Kaspersky 7.0.0.125 2009.11.10 -
McAfee 5797 2009.11.09 -
McAfee+Artemis 5797 2009.11.09 -
[B]McAfee-GW-Edition 6.8.5 2009.11.10 Ad-Spyware.AdSpy.Gen[/B]
Microsoft 1.5202 2009.11.10 -
NOD32 4592 2009.11.10 -
Norman 6.03.02 2009.11.09 -
nProtect 2009.1.8.0 2009.11.10 -
Panda 10.0.2.2 2009.11.09 -
PCTools 7.0.3.5 2009.11.10 -
Prevx 3.0 2009.11.15 -
Rising 22.21.01.09 2009.11.10 -
Sophos 4.47.0 2009.11.10 -
Sunbelt 3.2.1858.2 2009.11.10 -
Symantec 1.4.4.12 2009.11.10 -
TheHacker 6.5.0.2.064 2009.11.09 -
TrendMicro 9.0.0.1003 2009.11.10 -
VBA32 3.12.10.11 2009.11.09 -
ViRobot 2009.11.10.2029 2009.11.10 -
VirusBuster 4.6.5.0 2009.11.09 -[/QUOTE]
Дополнительная информация
File size: 2840636 bytes
MD5...: c242644ab2195e21c4e12db26d179791
SHA1..: 9a389131e813e78c0ca2ff231536e63e10d524b6
SHA256: 9d03bc6ab21defa3a08321ed3a6a72e7d6f45ee4252c4cbad2317683e14b7553
ssdeep: 49152:jvuniWVf68YjB6MhLXNA3onW9FtdP2ZQlWnn4Br1i8qhzRxYnVSvmYE8ej
jnMe6:S/Vf6RB6wLXNA3o8Fr+OW4pkhYnYvmqH
PEiD..: -
PEInfo: PE Structure information
[url]http://www.virustotal.com/ru/analisis/9d03bc6ab21defa3a08321ed3a6a72e7d6f45ee4252c4cbad2317683e14b7553-1258300015[/url]
-
Файл opdux.exe получен 2009.11.16 12:15:42 (UTC)
[CODE]Антивирус Версия Обновление Результат
[B]a-squared 4.5.0.41 2009.11.16 Trojan.Win32.Inhoo!IK[/B]
AhnLab-V3 5.0.0.2 2009.11.13 -
[B]AntiVir 7.9.1.65 2009.11.16 TR/Crypt.XPACK.Gen[/B]
Antiy-AVL 2.0.3.7 2009.11.16 -
Authentium 5.2.0.5 2009.11.15 -
Avast 4.8.1351.0 2009.11.16 -
AVG 8.5.0.425 2009.11.16 -
BitDefender 7.2 2009.11.16 -
CAT-QuickHeal 10.00 2009.11.16 -
ClamAV 0.94.1 2009.11.15 -
Comodo 2957 2009.11.15 -
DrWeb 5.0.0.12182 2009.11.16 -
eSafe 7.0.17.0 2009.11.16 -
eTrust-Vet 35.1.7122 2009.11.16 -
F-Prot 4.5.1.85 2009.11.15 -
F-Secure 9.0.15370.0 2009.11.11 -
Fortinet 3.120.0.0 2009.11.16 -
GData 19 2009.11.16 -
[B]Ikarus T3.1.1.74.0 2009.11.16 Trojan.Win32.Inhoo[/B]
Jiangmin 11.0.800 2009.11.16 -
K7AntiVirus 7.10.896 2009.11.13 -
Kaspersky 7.0.0.125 2009.11.16 -
McAfee 5803 2009.11.15 -
[B]McAfee+Artemis 5803 2009.11.15 Artemis!45861A208020[/B]
[B]McAfee-GW-Edition 6.8.5 2009.11.16 Heuristic.LooksLike.Win32.SuspiciousPE.B[/B]
Microsoft 1.5202 2009.11.16 -
NOD32 4611 2009.11.16 -
[B]Norman 6.03.02 2009.11.16 OnLineGames.KGCC
nProtect 2009.1.8.0 2009.11.16 Trojan-PWS/W32.WebGame.116522[/B]
Panda 10.0.2.2 2009.11.15 -
PCTools 7.0.3.5 2009.11.16 -
[B]Prevx 3.0 2009.11.16 High Risk Cloaked Malware[/B]
Rising 22.22.00.08 2009.11.16 -
[B]Sophos 4.47.0 2009.11.16 Mal/Taterf-A
Sunbelt 3.2.1858.2 2009.11.12 BehavesLike.Win32.Malware (v)[/B]
Symantec 1.4.4.12 2009.11.16 -
TheHacker 6.5.0.2.070 2009.11.14 -
TrendMicro 9.0.0.1003 2009.11.16 -
[B]VBA32 3.12.10.11 2009.11.15 Trojan-PSW.Win32.OnlineGames.3[/B]
ViRobot 2009.11.16.2039 2009.11.16 -
VirusBuster 4.6.5.0 2009.11.15 -
Дополнительная информация
File size: 116522 bytes
MD5...: 45861a208020a1d229b0edd08d0e0728
SHA1..: 0816185e69fdc55028436e6ad61f5a0886af544b
SHA256: e3ff27178fa318e0a3d02a72f3e0c57b340e4ac15d6a3ee92cd58ba75104d313
ssdeep: 3072:pSI68HHJiSK8DxrAZfWtNvnDFslJ7gjZPFZLWA:pUK9rDxsZfWDDFs/7CdZ<br>
PEiD..: -
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x10df<br>timedatestamp.....: 0x4ae9205d (Thu Oct 29 04:55:57 2009)<br>machinetype.......: 0x14c (I386)<br><br>( 6 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x1e000 0x69a 7.85 161cdb2fe51242369d2e1ad76108af32<br>.data 0x1f000 0x1a000 0x19e00 7.93 8a6df4b740fbc2532d922bfabd195250<br>.rsrc 0x39000 0x2000 0x1696 0.73 4d2293991318c4674c148474722c3b75<br>.reloc 0x3b000 0x4000 0x52a 0.08 4d4e2459bb10d0de2d080a7cba5a8524<br>vnpsg 0x3f000 0x1000 0x69a 0.00 d41d8cd98f00b204e9800998ecf8427e<br> 0x40000 0x3000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<br><br>( 1 imports ) <br>> KERNEL32.DLL: GetStartupInfoA, FlushFileBuffers, FlushInstructionCache, GetComputerNameExA, GetCommandLineA, GetModuleHandleA, LoadLibraryA, ExitProcess, GetCurrentProcessId, IsBadReadPtr<br><br>( 0 exports ) <br>
RDS...: NSRL Reference Data Set<br>-
pdfid.: -
trid..: Win32 Executable Generic (68.0%)<br>Generic Win/DOS Executable (15.9%)<br>DOS Executable Generic (15.9%)<br>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
<a href='http://info.prevx.com/aboutprogramtext.asp?PX5=CF8A698C2ADF9E45C7D001C9F1596100BAD12C11' target='_blank'>http://info.prevx.com/aboutprogramtext.asp?PX5=CF8A698C2ADF9E45C7D001C9F1596100BAD12C11</a>
sigcheck:<br>publisher....: n/a<br>copyright....: n/a<br>product......: n/a<br>description..: n/a<br>original name: n/a<br>internal name: n/a<br>file version.: n/a<br>comments.....: n/a<br>signers......: -<br>signing date.: -<br>verified.....: Unsigned<br>
[/CODE]
-
Судя по строкам в коде, некий "СМС-шпион от Martin Pesch"
[CODE]Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.11.16 -
AhnLab-V3 5.0.0.2 2009.11.16 -
AntiVir 7.9.1.65 2009.11.16 -
Antiy-AVL 2.0.3.7 2009.11.16 -
Authentium 5.2.0.5 2009.11.16 -
Avast 4.8.1351.0 2009.11.16 -
AVG 8.5.0.425 2009.11.16 -
BitDefender 7.2 2009.11.16 -
CAT-QuickHeal 10.00 2009.11.16 -
ClamAV 0.94.1 2009.11.16 -
Comodo 2958 2009.11.16 -
DrWeb 5.0.0.12182 2009.11.16 -
eSafe 7.0.17.0 2009.11.16 -
eTrust-Vet 35.1.7123 2009.11.16 -
F-Prot 4.5.1.85 2009.11.16 -
F-Secure 9.0.15370.0 2009.11.11 -
Fortinet 3.120.0.0 2009.11.16 -
GData 19 2009.11.16 -
Ikarus T3.1.1.74.0 2009.11.16 -
Jiangmin 11.0.800 2009.11.16 -
K7AntiVirus 7.10.897 2009.11.16 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2009.11.16 -
McAfee 5804 2009.11.16 -
McAfee+Artemis 5804 2009.11.16 -
McAfee-GW-Edition 6.8.5 2009.11.16 -
Microsoft 1.5202 2009.11.16 -
NOD32 4613 2009.11.16 -
Norman 6.03.02 2009.11.16 W32/Banker.C!genr
nProtect 2009.1.8.0 2009.11.16 -
Panda 10.0.2.2 2009.11.16 -
PCTools 7.0.3.5 2009.11.16 -
Prevx 3.0 2009.11.16 Medium Risk Malware
Rising 22.22.00.08 2009.11.16 -
Sophos 4.47.0 2009.11.16 -
Sunbelt 3.2.1858.2 2009.11.12 -
Symantec 1.4.4.12 2009.11.16 -
TheHacker 6.5.0.2.071 2009.11.16 Trojan/Buzus.bjcf
TrendMicro 9.0.0.1003 2009.11.16 -
VBA32 3.12.10.11 2009.11.15 -
ViRobot 2009.11.16.2039 2009.11.16 Trojan.Win32.Agent.2558416
VirusBuster 4.6.5.0 2009.11.16 -[/CODE]
-
Пришло по почте
[CODE]Антивирус Версия Обновление Результат
[B]a-squared 4.5.0.41 2009.11.17 Email-Worm.Win32.Alcaul!IK[/B]
AhnLab-V3 5.0.0.2 2009.11.16 -
AntiVir 7.9.1.65 2009.11.17 -
Antiy-AVL 2.0.3.7 2009.11.17 -
Authentium 5.2.0.5 2009.11.17 -
Avast 4.8.1351.0 2009.11.16 -
AVG 8.5.0.425 2009.11.17 -
BitDefender 7.2 2009.11.17 -
[B]CAT-QuickHeal 10.00 2009.11.17 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2009.11.17 -
Comodo 2964 2009.11.17 -
DrWeb 5.0.0.12182 2009.11.17 -
[B]eSafe 7.0.17.0 2009.11.16 Win32.Email.Worm.alc[/B]
eTrust-Vet 35.1.7124 2009.11.17 -
F-Prot 4.5.1.85 2009.11.16 -
F-Secure 9.0.15370.0 2009.11.17 -
Fortinet 3.120.0.0 2009.11.16 -
GData 19 2009.11.17 -
[B]Ikarus T3.1.1.74.0 2009.11.17 Email-Worm.Win32.Alcaul[/B]
Jiangmin 11.0.800 2009.11.17 -
K7AntiVirus 7.10.897 2009.11.16 -
Kaspersky 7.0.0.125 2009.11.17 -
McAfee 5804 2009.11.16 -
McAfee+Artemis 5804 2009.11.16 -
McAfee-GW-Edition 6.8.5 2009.11.17 -
Microsoft 1.5202 2009.11.17 -
NOD32 4613 2009.11.16 -
Norman 6.03.02 2009.11.17 -
nProtect 2009.1.8.0 2009.11.17 -
Panda 10.0.2.2 2009.11.16 -
PCTools 7.0.3.5 2009.11.17 -
Prevx 3.0 2009.11.17 -
Rising 22.22.01.06 2009.11.17 -
Sophos 4.47.0 2009.11.17 -
Sunbelt 3.2.1858.2 2009.11.12 -
Symantec 1.4.4.12 2009.11.17 -
TheHacker 6.5.0.2.071 2009.11.16 -
TrendMicro 9.0.0.1003 2009.11.17 -
VBA32 3.12.10.11 2009.11.15 -
ViRobot 2009.11.17.2041 2009.11.17 -
VirusBuster 4.6.5.0 2009.11.16 -
Дополнительная информация
File size: 321252 bytes
MD5 : 9495af761e931137c652aa23edfdb8b1
SHA1 : a8834f74c885c899290b046a986f97ab4ffb2ace
SHA256: bc7b5102b4199b2ea4d1da14c719200122d46c159143e8c3e89026479ba9811b
PEInfo: PE Structure information<br> <br> ( base data )<br> entrypointaddress.: 0xA29A0<br> timedatestamp.....: 0x3EC86C8E (Mon May 19 07:33:02 2003)<br> machinetype.......: 0x14C (Intel I386)<br> <br> ( 3 sections )<br> name viradd virsiz rawdsiz ntrpy md5<br> code 0x1000 0x67000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<br>text 0x68000 0x3B000 0x3AC00 7.92 d02a24ba5d833b9df533741aeaf5597d<br>.rsrc 0xA3000 0x7000 0x6A00 4.18 a691aeee67ecb4bd770132f10e1caa78<br> <br> ( 9 imports )<br> <br>> advapi32.dll: RegCloseKey<br>> comctl32.dll: -<br>> comdlg32.dll: GetOpenFileNameA<br>> gdi32.dll: PatBlt<br>> kernel32.dll: LoadLibraryA, GetProcAddress, ExitProcess<br>> ole32.dll: DoDragDrop<br>> oleaut32.dll: -<br>> shlwapi.dll: PathIsURLA<br>> user32.dll: GetDC<br> <br> ( 0 exports )<br>
TrID : File type identification<br>56.9% (.EXE) Win32 EXE Yoda's Crypter (26569/9/4)<br>18.2% (.EXE) Win32 Executable Generic (8527/13/3)<br>16.2% (.DLL) Win32 Dynamic Link Library (generic) (7583/30/2)<br>4.2% (.EXE) Generic Win/DOS Executable (2002/3)<br>4.2% (.EXE) DOS Executable Generic (2000/1)
ssdeep: 6144:HibqIVqfnbpbSdebCVIbY1/JaXxky4BPdlz05pL7ITJcm5DXN2MsQRjx:HIqIWnbhY2Y1/A14B7CpLSN2g9x
PEiD : UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser
packers (Kaspersky): UPX
packers (F-Prot): UPX
RDS : NSRL Reference Data Set<br>-[/CODE]
-
File hot.html received on 2009.11.18 15:59:35 (UTC)
Result: 8/41 (19.52%)
[QUOTE]a-squared 4.5.0.41 2009.11.18 Trojan-Downloader.JS.Shadraem!IK
AhnLab-V3 5.0.0.2 2009.11.18 -
AntiVir 7.9.1.70 2009.11.18 HTML/Crypted.Gen
Antiy-AVL 2.0.3.7 2009.11.18 -
Authentium 5.2.0.5 2009.11.18 -
Avast 4.8.1351.0 2009.11.18 HTML:IFrame-KP
AVG 8.5.0.425 2009.11.18 -
BitDefender 7.2 2009.11.18 -
CAT-QuickHeal 10.00 2009.11.17 -
ClamAV 0.94.1 2009.11.18 -
Comodo 2979 2009.11.18 -
DrWeb 5.0.0.12182 2009.11.18 -
eSafe 7.0.17.0 2009.11.18 -
eTrust-Vet 35.1.7127 2009.11.18 -
F-Prot 4.5.1.85 2009.11.17 -
F-Secure 9.0.15370.0 2009.11.17 -
Fortinet 3.120.0.0 2009.11.18 -
GData 19 2009.11.18 HTML:IFrame-KP
Ikarus T3.1.1.74.0 2009.11.18 Trojan-Downloader.JS.Shadraem
Jiangmin 11.0.800 2009.11.18 -
K7AntiVirus 7.10.899 2009.11.18 -
Kaspersky 7.0.0.125 2009.11.18 Trojan-Downloader.JS.Shadraem.a
McAfee 5805 2009.11.17 -
McAfee+Artemis 5805 2009.11.17 -
McAfee-GW-Edition 6.8.5 2009.11.18 Heuristic.Script.Crypted
Microsoft 1.5202 2009.11.18 -
NOD32 4618 2009.11.18 -
Norman 6.03.02 2009.11.18 -
nProtect 2009.1.8.0 2009.11.18 -
Panda 10.0.2.2 2009.11.18 -
PCTools 7.0.3.5 2009.11.18 -
Prevx 3.0 2009.11.18 -
Rising 22.22.02.08 2009.11.18 -
Sophos 4.47.0 2009.11.18 Mal/ObfJS-CB
Sunbelt 3.2.1858.2 2009.11.17 -
Symantec 1.4.4.12 2009.11.18 -
TheHacker 6.5.0.2.072 2009.11.18 -
TrendMicro 9.0.0.1003 2009.11.18 -
VBA32 3.12.12.0 2009.11.18 -
ViRobot 2009.11.18.2043 2009.11.18 -
VirusBuster 5.0.21.0 2009.11.17 - [/QUOTE]
[url]http://www.virustotal.com/analisis/9cfcd351b3aed8519cecf5ba78001ea8d783eb76c8bc4d1ae4bd75cf5006cf7a-1258559975[/url]
-
File userlib.dll received on 2009.11.19 16:18:09 (UTC)
Result: 3/41 (7.32%)
[CODE]Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.11.19 -
AhnLab-V3 5.0.0.2 2009.11.19 -
AntiVir 7.9.1.72 2009.11.19 -
Antiy-AVL 2.0.3.7 2009.11.19 -
Authentium 5.2.0.5 2009.11.19 -
Avast 4.8.1351.0 2009.11.19 -
AVG 8.5.0.425 2009.11.19 -
BitDefender 7.2 2009.11.19 -
CAT-QuickHeal 10.00 2009.11.19 -
ClamAV 0.94.1 2009.11.19 -
Comodo 2979 2009.11.18 -
[B]DrWeb 5.0.0.12182 2009.11.19 Trojan.Winlock.341[/B]
eSafe 7.0.17.0 2009.11.19 -
eTrust-Vet 35.1.7130 2009.11.19 -
F-Prot 4.5.1.85 2009.11.19 -
F-Secure 9.0.15370.0 2009.11.17 -
Fortinet 3.120.0.0 2009.11.19 -
GData 19 2009.11.19 -
Ikarus T3.1.1.74.0 2009.11.19 -
Jiangmin 11.0.800 2009.11.19 -
[B]K7AntiVirus 7.10.900 2009.11.19 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2009.11.19 -
McAfee 5806 2009.11.18 -
McAfee+Artemis 5806 2009.11.18 -
McAfee-GW-Edition 6.8.5 2009.11.19 -
Microsoft 1.5302 2009.11.19 -
[B]NOD32 4622 2009.11.19 Win32/LockScreen.CZ[/B]
Norman 6.03.02 2009.11.19 -
nProtect 2009.1.8.0 2009.11.19 -
Panda 10.0.2.2 2009.11.18 -
PCTools 7.0.3.5 2009.11.19 -
Prevx 3.0 2009.11.19 -
Rising 22.22.03.09 2009.11.19 -
Sophos 4.47.0 2009.11.19 -
Sunbelt 3.2.1858.2 2009.11.19 -
Symantec 1.4.4.12 2009.11.19 -
TheHacker 6.5.0.2.073 2009.11.18 -
TrendMicro 9.0.0.1003 2009.11.19 -
VBA32 3.12.12.0 2009.11.19 -
ViRobot 2009.11.19.2045 2009.11.19 -
VirusBuster 5.0.21.0 2009.11.19 -[/CODE]
Additional information
File size: 114688 bytes
MD5...: c06063a7028d3b68df9b295fc56cdfc8
SHA1..: aed50512acf6ce6816e95f7892cd50fe51ca88e7
SHA256: a9d095bd1b6b25ea83483c71fcb650390929bd8a567a12f9c650303980dd6d1b
ssdeep: 1536:EEwtiCTKB56FSRxa0kGU7c+gV0Up33ZNgk8VSlpVS2tkB:ofK36FSuXKNMV
sV3tk
PEiD..: -
File pno0001.exe received on 2009.11.19 16:29:08 (UTC)
Result: 14/41 (34.15%)
[CODE]Antivirus Version Last Update Result
[B]a-squared 4.5.0.41 2009.11.19 Trojan.Win32.Pakes!A2
AhnLab-V3 5.0.0.2 2009.11.19 Win-Trojan/Pakes.97280[/B]
AntiVir 7.9.1.72 2009.11.19 -
Antiy-AVL 2.0.3.7 2009.11.19 -
Authentium 5.2.0.5 2009.11.19 -
Avast 4.8.1351.0 2009.11.19 -
AVG 8.5.0.425 2009.11.19 -
BitDefender 7.2 2009.11.19 -
[B]CAT-QuickHeal 10.00 2009.11.19 Trojan.Agent.ATV[/B]
ClamAV 0.94.1 2009.11.19 -
[B]Comodo 2979 2009.11.18 TrojWare.Win32.Trojan.Agent.~HDM[/B]
DrWeb 5.0.0.12182 2009.11.19 -
[B]eSafe 7.0.17.0 2009.11.19 Win32.TRCrypt.XPACK[/B]
eTrust-Vet 35.1.7130 2009.11.19 -
F-Prot 4.5.1.85 2009.11.19 -
[B]F-Secure 9.0.15370.0 2009.11.17 Suspicious:W32/Malware!Gemini[/B]
Fortinet 3.120.0.0 2009.11.19 -
GData 19 2009.11.19 -
Ikarus T3.1.1.74.0 2009.11.19 -
Jiangmin 11.0.800 2009.11.19 -
[B]K7AntiVirus 7.10.900 2009.11.19 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2009.11.19 -
[B]McAfee 5806 2009.11.18 potentially unwanted program Kkrunchy Packed
McAfee+Artemis 5806 2009.11.18 potentially unwanted program Kkrunchy Packed
McAfee-GW-Edition 6.8.5 2009.11.19 Heuristic.LooksLike.Win32.Dropper.B[/B]
Microsoft 1.5302 2009.11.19 -
NOD32 4622 2009.11.19 -
Norman 6.03.02 2009.11.19 -
nProtect 2009.1.8.0 2009.11.19 -
Panda 10.0.2.2 2009.11.18 -
PCTools 7.0.3.5 2009.11.19 -
Prevx 3.0 2009.11.19 -
[B]Rising 22.22.03.09 2009.11.19 Packer.Win32.Agent.GEN[/B]
Sophos 4.47.0 2009.11.19 -
[B]Sunbelt 3.2.1858.2 2009.11.19 Trojan.Win32.Pakes[/B]
Symantec 1.4.4.12 2009.11.19 -
[B]TheHacker 6.5.0.2.073 2009.11.18 Trojan/Pakes[/B]
TrendMicro 9.0.0.1003 2009.11.19 -
VBA32 3.12.12.0 2009.11.19 -
[B]ViRobot 2009.11.19.2045 2009.11.19 Spyware.Pakes.97280[/B]
VirusBuster 5.0.21.0 2009.11.19 -[/CODE]
Additional information
File size: 97280 bytes
MD5...: 0630f5f61bbd95dd28c2558c7092bc07
SHA1..: 29413afbc3a5b5fb03de428a546235559e3170b5
SHA256: ac2192b740c57125067a29d2e0ea6d95b222543398188c5f67bbf01157622685
ssdeep: 1536:1Y0Fv5UEX+k/uR61CxyT/k4ce044gWO9tCFkKE/K/plMCqisOARp6+RyhWL
fh:dFv5UEC6WJje044dytCFlqK/7MCsOAxD
PEiD..: -
PEInfo: PE Structure information
-
File Supernatural_S05E10_Abandon_All_H received on 2009.11.20 10:19:02 (UTC)
Result: 12/41 (29.27%)
[QUOTE][B]a-squared 4.5.0.41 2009.11.20 Riskware.Win32.Vbinder!IK[/B]
AhnLab-V3 5.0.0.2 2009.11.19 -
AntiVir 7.9.1.72 2009.11.20 -
Antiy-AVL 2.0.3.7 2009.11.20 -
Authentium 5.2.0.5 2009.11.19 -
Avast 4.8.1351.0 2009.11.20 -
AVG 8.5.0.425 2009.11.20 -
[B]BitDefender 7.2 2009.11.20 Gen:Trojan.Heur.hm0@dfocoJfi[/B]
CAT-QuickHeal 10.00 2009.11.20 -
ClamAV 0.94.1 2009.11.20 -
Comodo 2983 2009.11.19 -
DrWeb 5.0.0.12182 2009.11.20 -
eSafe 7.0.17.0 2009.11.19 -
[B]eTrust-Vet 35.1.7132 2009.11.20 Win32/VBInject!generic[/B]
F-Prot 4.5.1.85 2009.11.19 -
[B]F-Secure 9.0.15370.0 2009.11.20 Packed:W32/Vbinder.gen!M[/B]
Fortinet 3.120.0.0 2009.11.20 -
[B]GData 19 2009.11.20 Gen:Trojan.Heur.hm0@dfocoJfi[/B]
[B]Ikarus T3.1.1.74.0 2009.11.20 VirTool.Win32.Vbinder[/B]
Jiangmin 11.0.800 2009.11.20 -
K7AntiVirus 7.10.900 2009.11.19 -
Kaspersky 7.0.0.125 2009.11.20 -
McAfee 5807 2009.11.19 -
[B]McAfee+Artemis 5807 2009.11.19 Artemis!4DA16394F226[/B]
McAfee-GW-Edition 6.8.5 2009.11.20 -
[B]Microsoft 1.5302 2009.11.20 VirTool:Win32/Vbinder.gen!GL[/B]
NOD32 4624 2009.11.20 -
[B]Norman 6.03.02 2009.11.20 W32/Obfuscated.C!genr[/B]
nProtect 2009.1.8.0 2009.11.20 -
[B]Panda 10.0.2.2 2009.11.20 Suspicious file[/B]
PCTools 7.0.3.5 2009.11.20 -
[B]Prevx 3.0 2009.11.20 Medium Risk Malware[/B]
Rising 22.22.04.04 2009.11.20 -
[B]Sophos 4.47.0 2009.11.20 Mal/Generic-A[/B]
Sunbelt 3.2.1858.2 2009.11.19 -
Symantec 1.4.4.12 2009.11.20 -
TheHacker 6.5.0.2.074 2009.11.19 -
TrendMicro 9.0.0.1003 2009.11.20 -
VBA32 3.12.12.0 2009.11.20 -
ViRobot 2009.11.20.2047 2009.11.20 -
VirusBuster 5.0.21.0 2009.11.19 -[/QUOTE]
[url]http://www.virustotal.com/analisis/d11810fb0dab8831f27417a1ea30eeaf763512ee2ca6b52d1ab28f39ee99b671-1258712342[/url]
-
File VKMaster.exe received on 2009.11.25 06:06:50 (UTC)
Result: 10/41 (24.4%)
[QUOTE][B]a-squared 4.5.0.43 2009.11.25 Trojan.Win32.VkHost!IK[/B]
AhnLab-V3 5.0.0.2 2009.11.24 -
AntiVir 7.9.1.70 2009.11.24 -
[B]Antiy-AVL 2.0.3.7 2009.11.24 Trojan/Win32.VkHost[/B]
Authentium 5.2.0.5 2009.11.24 -
Avast 4.8.1351.0 2009.11.24 -
AVG 8.5.0.425 2009.11.24 -
BitDefender 7.2 2009.11.25 -
CAT-QuickHeal 10.00 2009.11.25 -
ClamAV 0.94.1 2009.11.25 -
[B]Comodo 3026 2009.11.25 Heur.Suspicious[/B]
DrWeb 5.0.0.12182 2009.11.25 -
eSafe 7.0.17.0 2009.11.24 -
eTrust-Vet 35.1.7140 2009.11.24 -
F-Prot 4.5.1.85 2009.11.24 -
F-Secure 9.0.15370.0 2009.11.24 -
Fortinet 4.0.14.0 2009.11.24 -
GData 19 2009.11.25 -
[B]Ikarus T3.1.1.74.0 2009.11.25 Trojan.Win32.VkHost[/B]
[B]Jiangmin 11.0.800 2009.11.24 Trojan/StartPage.bim[/B]
K7AntiVirus 7.10.903 2009.11.23 -
[B]Kaspersky 7.0.0.125 2009.11.25 Trojan.Win32.VkHost.ej[/B]
McAfee 5812 2009.11.24 -
[B]McAfee+Artemis 5812 2009.11.24 Artemis!4918AE2ACCD8[/B]
McAfee-GW-Edition 6.8.5 2009.11.24 -
Microsoft 1.5302 2009.11.24 -
NOD32 4634 2009.11.24 -
Norman 6.03.02 2009.11.24 -
nProtect 2009.1.8.0 2009.11.24 -
[B]Panda 10.0.2.2 2009.11.24 Suspicious file[/B]
PCTools 7.0.3.5 2009.11.25 -
[B]Prevx 3.0 2009.11.25 High Risk Cloaked Malware[/B]
Rising 22.23.02.03 2009.11.25 -
Sophos 4.47.0 2009.11.25 -
Sunbelt 3.2.1858.2 2009.11.25 -
Symantec 1.4.4.12 2009.11.25 -
TheHacker 6.5.0.2.076 2009.11.23 -
TrendMicro 9.0.0.1003 2009.11.25 -
[B]VBA32 3.12.12.0 2009.11.25 Trojan.Win32.VkHost.vmn[/B]
ViRobot 2009.11.25.2052 2009.11.25 -
VirusBuster 5.0.21.0 2009.11.24 -[/QUOTE]
[url]http://www.virustotal.com/analisis/0fa7e74da866a4361a55d276960bdd44dfb54dc82fc1c28c10de5288bc466c3e-1259129210[/url]
-
Файл js1.js получен 2009.11.26 00:12:04 (UTC)
Текущий статус: закончено
Результат: 4/41 (9.76%)
[QUOTE]Антивирус Версия Обновление Результат
a-squared 4.5.0.43 2009.11.25 -
AhnLab-V3 5.0.0.2 2009.11.25 -
[B]AntiVir 7.9.1.78 2009.11.25 JS/iFrame.ZP[/B]
Antiy-AVL 2.0.3.7 2009.11.25 -
Authentium 5.2.0.5 2009.11.25 -
[B]Avast 4.8.1351.0 2009.11.25 HTML:Iframe-inf[/B]
AVG 8.5.0.425 2009.11.25 -
BitDefender 7.2 2009.11.26 -
CAT-QuickHeal 10.00 2009.11.25 -
ClamAV 0.94.1 2009.11.25 -
Comodo 3036 2009.11.25 -
DrWeb 5.0.0.12182 2009.11.25 -
eSafe 7.0.17.0 2009.11.24 -
eTrust-Vet 35.1.7142 2009.11.25 -
F-Prot 4.5.1.85 2009.11.25 -
F-Secure 9.0.15370.0 2009.11.24 -
Fortinet 4.0.14.0 2009.11.25 -
[B]GData 19 2009.11.25 HTML:Iframe-inf[/B]
Ikarus T3.1.1.74.0 2009.11.25 -
Jiangmin 11.0.800 2009.11.25 -
K7AntiVirus 7.10.905 2009.11.25 -
Kaspersky 7.0.0.125 2009.11.25 -
McAfee 5813 2009.11.25 -
McAfee+Artemis 5813 2009.11.25 -
[B]McAfee-GW-Edition 6.8.5 2009.11.25 Script.iFrame.ZP[/B]
Microsoft 1.5302 2009.11.25 -
NOD32 4637 2009.11.25 -
Norman 6.03.02 2009.11.25 -
nProtect 2009.1.8.0 2009.11.25 -
Panda 10.0.2.2 2009.11.25 -
PCTools 7.0.3.5 2009.11.26 -
Prevx 3.0 2009.11.26 -
Rising 22.23.02.09 2009.11.25 -
Sophos 4.47.0 2009.11.26 -
Sunbelt 3.2.1858.2 2009.11.26 -
Symantec 1.4.4.12 2009.11.26 -
TheHacker 6.5.0.2.078 2009.11.25 -
TrendMicro 9.100.0.1001 2009.11.25 -
VBA32 3.12.12.0 2009.11.25 -
ViRobot 2009.11.25.2053 2009.11.25 -
VirusBuster 5.0.21.0 2009.11.25 -[/QUOTE]
Дополнительная информация
File size: 464 bytes
MD5 : c8d70b689752d07fb6b4129960565ea9
SHA1 : 54900c914e777bdfc465d28955979eddd539ef7c
SHA256: 73b0a813fab7c0f758e346994db022da4b2bfe7f7b81f21f6987c2a477398d02
TrID : File type identification
file seems to be plain text/ASCII (0.0%)
ssdeep: 12:SFBt5PBLU5M5vQnDzLMXFF91I193MLDIqJmWJcTrVMbu:SFBt5FU5CvmDWFF0XkD3SHVMq
PEiD : -
RDS : NSRL Reference Data Set
[url]http://www.virustotal.com/ru/analisis/73b0a813fab7c0f758e346994db022da4b2bfe7f7b81f21f6987c2a477398d02-1259194324[/url]
***
Файл js2.js получен 2009.11.26 00:20:22 (UTC)
Текущий статус: закончено
Результат: 1/41 (2.44%)
[QUOTE]Антивирус Версия Обновление Результат
a-squared 4.5.0.43 2009.11.25 -
AhnLab-V3 5.0.0.2 2009.11.25 -
AntiVir 7.9.1.78 2009.11.25 -
Antiy-AVL 2.0.3.7 2009.11.25 -
Authentium 5.2.0.5 2009.11.25 -
Avast 4.8.1351.0 2009.11.25 -
AVG 8.5.0.425 2009.11.25 -
BitDefender 7.2 2009.11.26 -
CAT-QuickHeal 10.00 2009.11.25 -
ClamAV 0.94.1 2009.11.25 -
Comodo 3037 2009.11.26 -
DrWeb 5.0.0.12182 2009.11.25 -
eSafe 7.0.17.0 2009.11.24 -
eTrust-Vet 35.1.7142 2009.11.25 -
F-Prot 4.5.1.85 2009.11.25 -
F-Secure 9.0.15370.0 2009.11.24 -
Fortinet 4.0.14.0 2009.11.25 -
GData 19 2009.11.26 -
Ikarus T3.1.1.74.0 2009.11.25 -
Jiangmin 11.0.800 2009.11.25 -
K7AntiVirus 7.10.905 2009.11.25 -
[B]Kaspersky 7.0.0.125 2009.11.26 Trojan-Downloader.JS.Agent.etc[/B]
McAfee 5813 2009.11.25 -
McAfee+Artemis 5813 2009.11.25 -
McAfee-GW-Edition 6.8.5 2009.11.26 -
Microsoft 1.5302 2009.11.25 -
NOD32 4637 2009.11.25 -
Norman 6.03.02 2009.11.25 -
nProtect 2009.1.8.0 2009.11.25 -
Panda 10.0.2.2 2009.11.25 -
PCTools 7.0.3.5 2009.11.26 -
Prevx 3.0 2009.11.26 -
Rising 22.23.02.09 2009.11.25 -
Sophos 4.47.0 2009.11.26 -
Sunbelt 3.2.1858.2 2009.11.26 -
Symantec 1.4.4.12 2009.11.26 -
TheHacker 6.5.0.2.078 2009.11.25 -
TrendMicro 9.100.0.1001 2009.11.25 -
VBA32 3.12.12.0 2009.11.25 -
ViRobot 2009.11.25.2053 2009.11.25 -
VirusBuster 5.0.21.0 2009.11.25 -[/QUOTE]
Дополнительная информация
File size: 972 bytes
MD5...: f93215e92417e29ec5be1f246399678d
SHA1..: d3a576835a39c82a2813532abc7dca8c27889c32
SHA256: 42fe4ef2a7a270c04bb93d136d37041d9d2fb4e92e8f26aa7f9c11eed46b5f07
ssdeep: 24:QZFWLOPVGO8lP9T3lDaYLCKjMtd/5yfXk61M5:vLd9T3lGYLCKjMt94/kH
PEiD..: -
PEInfo: -
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Text - UTF-16 (LE) encoded (64.4%)
MP3 audio (32.2%)
Lumena CEL bitmap (2.0%)
Corel Photo Paint (1.3%)
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
packers (F-Prot): Unicode
[url]http://www.virustotal.com/ru/analisis/42fe4ef2a7a270c04bb93d136d37041d9d2fb4e92e8f26aa7f9c11eed46b5f07-1259194822[/url]
***
Файл js3.js получен 2009.11.26 00:23:56 (UTC)
Текущий статус: закончено
Результат: 6/41 (14.64%)
[QUOTE]Антивирус Версия Обновление Результат
[B]a-squared 4.5.0.43 2009.11.25 Generic.XPL.ADODB!IK[/B]
AhnLab-V3 5.0.0.2 2009.11.25 -
AntiVir 7.9.1.78 2009.11.25 -
Antiy-AVL 2.0.3.7 2009.11.25 -
Authentium 5.2.0.5 2009.11.25 -
Avast 4.8.1351.0 2009.11.25 -
AVG 8.5.0.425 2009.11.25 -
BitDefender 7.2 2009.11.26 -
CAT-QuickHeal 10.00 2009.11.25 -
ClamAV 0.94.1 2009.11.25 -
Comodo 3037 2009.11.26 -
DrWeb 5.0.0.12182 2009.11.25 -
eSafe 7.0.17.0 2009.11.24 -
eTrust-Vet 35.1.7142 2009.11.25 -
F-Prot 4.5.1.85 2009.11.25 -
F-Secure 9.0.15370.0 2009.11.24 -
Fortinet 4.0.14.0 2009.11.25 -
GData 19 2009.11.26 -
[B]Ikarus T3.1.1.74.0 2009.11.25 Generic.XPL.ADODB[/B]
Jiangmin 11.0.800 2009.11.25 -
K7AntiVirus 7.10.905 2009.11.25 -
Kaspersky 7.0.0.125 2009.11.26 -
McAfee 5813 2009.11.25 -
McAfee+Artemis 5813 2009.11.25 -
[B]McAfee-GW-Edition 6.8.5 2009.11.26 Heuristic.BehavesLike.JS.Exploit.B[/B]
Microsoft 1.5302 2009.11.25 -
NOD32 4637 2009.11.25 -
Norman 6.03.02 2009.11.25 -
nProtect 2009.1.8.0 2009.11.25 -
Panda 10.0.2.2 2009.11.25 -
[B]PCTools 7.0.3.5 2009.11.26 HTML.Psyme.Gen[/B]
Prevx 3.0 2009.11.26 -
Rising 22.23.02.09 2009.11.25 -
[B]Sophos 4.47.0 2009.11.26 Sus/Psyme-A[/B]
Sunbelt 3.2.1858.2 2009.11.26 -
Symantec 1.4.4.12 2009.11.26 -
TheHacker 6.5.0.2.078 2009.11.25 -
TrendMicro 9.100.0.1001 2009.11.25 -
VBA32 3.12.12.0 2009.11.25 -
ViRobot 2009.11.25.2053 2009.11.25 -
[B]VirusBuster 5.0.21.0 2009.11.25 HTML.Psyme.Gen[/B][/QUOTE]
Дополнительная информация
File size: 5100 bytes
MD5...: e31525943fdef580361a8ad018f71736
SHA1..: 2bf16f831abf05139815fa4d5cad7c275224aeae
SHA256: e097e355c51ae57845ba6c346c34bc4489baa0104f955f2a0fc74a6686570e39
ssdeep: 96:0PANgC4OwWJrHa69caEiOHdMlBKgBg+4S:++43WJrHaocaEikMDp
PEiD..: -
PEInfo: -
RDS...: NSRL Reference Data Set
-
pdfid.: -
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
trid..: Unknown!
[url]http://www.virustotal.com/ru/analisis/e097e355c51ae57845ba6c346c34bc4489baa0104f955f2a0fc74a6686570e39-1259195036[/url]
-
В VBA, DrWeb и Symantec файл ушел
Файл tcwoa8mp.scr.part получен 2009.11.27 16:09:24 (UTC)
Текущий статус: Загрузка ... в очереди ожидание проверка закончено НЕ НАЙДЕНО ОСТАНОВЛЕНО
Результат: 8/41 (19.52%)
[QUOTE]Антивирус Версия Обновление Результат
a-squared 4.5.0.43 2009.11.26 -
AhnLab-V3 5.0.0.2 2009.11.26 -
[B]AntiVir 7.9.1.78 2009.11.26 TR/Dropper.Gen[/B]
Antiy-AVL 2.0.3.7 2009.11.26 -
Authentium 5.2.0.5 2009.11.26 -
Avast 4.8.1351.0 2009.11.26 -
AVG 8.5.0.425 2009.11.26 -
BitDefender 7.2 2009.11.26 -
CAT-QuickHeal 10.00 2009.11.26 -
ClamAV 0.94.1 2009.11.26 -
[B]Comodo 3044 2009.11.26 Heur.Packed.Unknown[/B]
DrWeb 5.0.0.12182 2009.11.26 -
eSafe 7.0.17.0 2009.11.24 -
eTrust-Vet 35.1.7143 2009.11.26 -
F-Prot 4.5.1.85 2009.11.25 -
[B]F-Secure 9.0.15370.0 2009.11.24 Suspicious:W32/Malware!Gemini[/B]
Fortinet 4.0.14.0 2009.11.26 -
GData 19 2009.11.26 -
Ikarus T3.1.1.74.0 2009.11.26 -
Jiangmin 11.0.800 2009.11.26 -
K7AntiVirus 7.10.905 2009.11.25 -
Kaspersky 7.0.0.125 2009.11.26 -
McAfee 5813 2009.11.25 -
McAfee+Artemis 5813 2009.11.25 -
[B]McAfee-GW-Edition 6.8.5 2009.11.26 Trojan.Dropper.Gen[/B]
Microsoft 1.5302 2009.11.26 -
NOD32 4639 2009.11.26 -
[B]Norman 6.03.02 2009.11.25 W32/Obfuscated.V[/B]
nProtect 2009.1.8.0 2009.11.26 -
Panda 10.0.2.2 2009.11.26 -
PCTools 7.0.3.5 2009.11.26 -
Prevx 3.0 2009.11.27 -
Rising 22.23.03.10 2009.11.26 -
[B]Sophos 4.48.0 2009.11.26 Sus/UnkPack-C
Sunbelt 3.2.1858.2 2009.11.26 Trojan-Ransom.Win32.SMSer.jk (v)
Symantec 1.4.4.12 2009.11.26 Suspicious.MH690.A[/B]
TheHacker 6.5.0.2.079 2009.11.26 -
TrendMicro 9.100.0.1001 2009.11.26 -
VBA32 3.12.12.0 2009.11.26 -
ViRobot 2009.11.26.2056 2009.11.26 -
VirusBuster 5.0.21.0 2009.11.25 -[/QUOTE]
Дополнительная информация
File size: 141312 bytes
MD5...: 2089ab41530c6394c60009f822228444
SHA1..: fbac52fe484d8752a30eeb41911966bf51a1ab76
SHA256: 3f36cf53d21c4e74ab3373f39eb859f5d885d197fbf348007d79c23e5df116e2
ssdeep: 3072:i98xzIsP/3Dsv7TFMz9wbhH9QI7npj1jNz6N+00D:HznX3gjTFU9tILNz6N
+00D
PEiD..: -
PEInfo: PE Structure information
[url]http://www.virustotal.com/ru/analisis/3f36cf53d21c4e74ab3373f39eb859f5d885d197fbf348007d79c23e5df116e2-1259338164[/url]
-
Файл fsuwdm.exe получен 2009.12.01 04:22:19 (UTC)
Текущий статус: закончено
Результат: 19/41 (46.34%)
[QUOTE]Антивирус Версия Обновление Результат
[B]a-squared 4.5.0.43 2009.12.01 Worm.Autorun!IK[/B]
AhnLab-V3 5.0.0.2 2009.12.01 -
[B]AntiVir 7.9.1.88 2009.11.30 Worm/Autorun.esq[/B]
Antiy-AVL 2.0.3.7 2009.12.01 -
Authentium 5.2.0.5 2009.11.30 -
Avast 4.8.1351.0 2009.11.30 -
AVG 8.5.0.426 2009.12.01 -
[B]BitDefender 7.2 2009.12.01 Trojan.Generic.IS.548711[/B]
CAT-QuickHeal 10.00 2009.12.01 -
ClamAV 0.94.1 2009.12.01 -
Comodo 3096 2009.12.01 -
DrWeb 5.0.0.12182 2009.12.01 -
[B]eSafe 7.0.17.0 2009.11.30 Win32.Worm.AutoRun.u[/B]
eTrust-Vet 35.1.7149 2009.12.01 -
F-Prot 4.5.1.85 2009.11.30 -
[B]F-Secure 9.0.15370.0 2009.11.29 Trojan.Generic.IS.548711[/B]
Fortinet 4.0.14.0 2009.12.01 -
[B]GData 19 2009.12.01 Trojan.Generic.IS.548711
Ikarus T3.1.1.74.0 2009.12.01 Worm.Autorun[/B]
Jiangmin 11.0.800 2009.11.29 -
[B]K7AntiVirus 7.10.906 2009.11.27 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2009.12.01 -
[B]McAfee 5818 2009.11.30 Generic.dx!gdd
McAfee+Artemis 5818 2009.11.30 Generic.dx!gdd
McAfee-GW-Edition 6.8.5 2009.11.30 Heuristic.LooksLike.Worm.Autorun.L[/B]
Microsoft 1.5302 2009.12.01 -
NOD32 4650 2009.11.30 -
[B]Norman 6.03.02 2009.11.30 W32/Suspicious_Gen.AFVN
nProtect 2009.1.8.0 2009.11.28 Trojan/W32.Agent.101887
Panda 10.0.2.2 2009.11.30 Trj/CI.A
PCTools 7.0.3.5 2009.12.01 Trojan.Generic[/B]
Prevx 3.0 2009.12.01 -
Rising 22.24.01.01 2009.12.01 -
[B]Sophos 4.48.0 2009.12.01 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.12.01 Trojan.Win32.Generic!BT
Symantec 1.4.4.12 2009.12.01 Trojan Horse
TheHacker 6.5.0.2.082 2009.11.30 W32/AutoRun.esq[/B]
TrendMicro 9.100.0.1001 2009.11.30 -
VBA32 3.12.12.0 2009.11.30 -
ViRobot 2009.12.1.2063 2009.12.01 -
VirusBuster 5.0.21.0 2009.11.30 -[/QUOTE]
Дополнительная информация
File size: 101887 bytes
MD5 : fb9e6b5ecf70319a9265160366758d40
SHA1 : fad215f0578e1d1e7d8bc56947e2aec81db9aea8
SHA256: 29df2d237385b30f2152b7bfd5b8f138182b2874a0b278e9b4ca24dbc5725a6d
PEInfo: PE Structure information
-
Очередные промежуточные итоги народного тестирования Октябрь-Ноябрь:
-
Пришел по скайпу
Файл DCS00006.scr получен 2009.12.02 11:13:26 (UTC)
Текущий статус: закончено
Результат: 10/41 (24.4%)
[QUOTE]Антивирус Версия Обновление Результат
[B]a-squared 4.5.0.43 2009.12.02 Riskware.Win32.VBInject!IK[/B]
AhnLab-V3 5.0.0.2 2009.12.02 -
[B]AntiVir 7.9.1.92 2009.12.02 TR/Dropper.Gen[/B]
Antiy-AVL 2.0.3.7 2009.12.02 -
[B]Authentium 5.2.0.5 2009.12.02 W32/Trojan-Gypikon-based.DM2!Maximus[/B]
Avast 4.8.1351.0 2009.12.02 -
[B]AVG 8.5.0.426 2009.12.02 BackDoor.Generic12.MNM[/B]
BitDefender 7.2 2009.12.02 -
CAT-QuickHeal 10.00 2009.12.02 -
ClamAV 0.94.1 2009.12.02 -
Comodo 3103 2009.12.01 -
DrWeb 5.0.0.12182 2009.12.02 -
eSafe 7.0.17.0 2009.12.01 -
eTrust-Vet 35.1.7152 2009.12.02 -
[B]F-Prot 4.5.1.85 2009.12.01 W32/Trojan-Gypikon-based.DM2!Maximus[/B]
F-Secure 9.0.15370.0 2009.11.29 -
Fortinet 4.0.14.0 2009.12.02 -
GData 19 2009.12.02 -
[B]Ikarus T3.1.1.74.0 2009.12.02 VirTool.Win32.VBInject[/B]
Jiangmin 13.0.900 2009.12.02 -
K7AntiVirus 7.10.906 2009.11.27 -
Kaspersky 7.0.0.125 2009.12.02 -
McAfee 5819 2009.12.01 -
McAfee+Artemis 5819 2009.12.01 -
[B]McAfee-GW-Edition 6.8.5 2009.12.02 Trojan.Dropper.Gen
Microsoft 1.5302 2009.12.02 VirTool:Win32/VBInject.gen!BA[/B]
NOD32 4654 2009.12.02 -
[B]Norman 6.03.02 2009.12.02 W32/Obfuscated.A!genr[/B]
nProtect 2009.1.8.0 2009.12.02 -
[B]Panda 10.0.2.2 2009.12.01 Bck/Bifrost.gen[/B]
PCTools 7.0.3.5 2009.12.02 -
Prevx 3.0 2009.12.02 -
Rising 22.24.02.07 2009.12.02 -
Sophos 4.48.0 2009.12.02 -
Sunbelt 3.2.1858.2 2009.12.02 -
Symantec 1.4.4.12 2009.12.02 -
TheHacker 6.5.0.2.083 2009.12.01 -
TrendMicro 9.100.0.1001 2009.12.02 -
VBA32 3.12.12.0 2009.12.02 -
ViRobot 2009.12.2.2068 2009.12.02 -
VirusBuster 5.0.21.0 2009.12.01 -[/QUOTE]
Дополнительная информация
File size: 127853 bytes
MD5...: 53392b9a43e84ba983287a394d26fdee
SHA1..: 3b13ca048572602d8a572036fc3fb968949f0d3d
SHA256: df0088568531f9265eb3e56fdd546a42d66256d32788d2c66b76230eee71137b
ssdeep: 3072:c8JzVjHbmp5JsZ1prgZWHJTJK5DcSXIeUSJU5MQyBDc2:c8rmZETgZqJTJ9
cvuH2
PEiD..: -
PEInfo: PE Structure information
[url]http://www.virustotal.com/ru/analisis/df0088568531f9265eb3e56fdd546a42d66256d32788d2c66b76230eee71137b-1259752406[/url]
-
File setup.exe received on 2009.12.03 14:47:53 (UTC)
Result: 8/41 (19.52%)
[QUOTE]a-squared 4.5.0.43 2009.12.03 -
AhnLab-V3 5.0.0.2 2009.12.03 -
AntiVir 7.9.1.92 2009.12.03 -
Antiy-AVL 2.0.3.7 2009.12.03 -
Authentium 5.2.0.5 2009.12.02 -
Avast 4.8.1351.0 2009.12.03 -
AVG 8.5.0.426 2009.12.03 -
BitDefender 7.2 2009.12.03 -
[B]CAT-QuickHeal 10.00 2009.12.03 Trojan.VkHost.is[/B]
ClamAV 0.94.1 2009.12.03 -
[B]Comodo 3103 2009.12.01 Heur.Packed.Unknown[/B]
DrWeb 5.0.0.12182 2009.12.03 -
eSafe 7.0.17.0 2009.12.02 -
eTrust-Vet 35.1.7155 2009.12.03 -
F-Prot 4.5.1.85 2009.12.02 -
F-Secure 9.0.15370.0 2009.12.03 -
Fortinet 4.0.14.0 2009.12.03 -
GData 19 2009.12.03 -
Ikarus T3.1.1.74.0 2009.12.03 -
Jiangmin 13.0.900 2009.12.02 -
K7AntiVirus 7.10.910 2009.12.03 -
[B]Kaspersky 7.0.0.125 2009.12.03 Trojan.Win32.VkHost.iz[/B]
[B]McAfee 5819 2009.12.01 PWS-Banker.gen.ec[/B]
[B]McAfee+Artemis 5819 2009.12.01 PWS-Banker.gen.ec[/B]
[B]McAfee-GW-Edition 6.8.5 2009.12.03 Heuristic.LooksLike.Win32.QQpass.H[/B]
Microsoft 1.5302 2009.12.03 -
NOD32 4658 2009.12.03 -
Norman 6.03.02 2009.12.03 -
nProtect 2009.1.8.0 2009.12.03 -
[B]Panda 10.0.2.2 2009.12.03 Trj/Downloader.MDW[/B]
PCTools 7.0.3.5 2009.12.03 -
Prevx 3.0 2009.12.03 -
Rising 22.24.03.06 2009.12.03 -
[B]Sophos 4.48.0 2009.12.03 Mal/Generic-A[/B]
Sunbelt 3.2.1858.2 2009.12.03 -
Symantec 1.4.4.12 2009.12.03 -
TheHacker 6.5.0.2.083 2009.12.01 -
TrendMicro 9.100.0.1001 2009.12.03 -
VBA32 3.12.12.0 2009.12.03 -
ViRobot 2009.12.3.2070 2009.12.03 -
VirusBuster 5.0.21.0 2009.12.02 -[/QUOTE]
[url]http://www.virustotal.com/analisis/b3b2109af898aeeaa9b533e7e7e88a2fb7e2be8ab2a76bbb3d2f7b974ddc4db3-1259851673[/url]
Page generated in 0.00664 seconds with 10 queries