Исследование антивирусов 6

Printable View

Показывать 40 сообщений этой темы на одной странице

27.11.2007, 14:30
Selmanuk

Файл opr03U42.htm.7FFFAE33 получен 2007.11.27 12:17:23 (CET)Антивирус Версия Обновление Результат
AhnLab-V3 2007.11.27.1 2007.11.27 -
[B]AntiVir 7.6.0.34 2007.11.27 HEUR/Exploit.HTML[/B]
Authentium 4.93.8 2007.11.24 -
Avast 4.7.1074.0 2007.11.27 -
[B]AVG 7.5.0.503 2007.11.26 Downloader.Agent [/B]
BitDefender 7.2 2007.11.27 -
CAT-QuickHeal 9.00 2007.11.27 -
ClamAV 0.91.2 2007.11.27 -
[B]DrWeb 4.44.0.09170 2007.11.27 Worm.Sifiliz[/B]
eSafe 7.0.15.0 2007.11.21 -
eTrust-Vet 31.3.5329 2007.11.26 -
Ewido 4.0 2007.11.26 -
FileAdvisor 1 2007.11.27 -
Fortinet 3.14.0.0 2007.11.27 -
F-Prot 4.4.2.54 2007.11.27 -
F-Secure 6.70.13030.0 2007.11.27 -
Ikarus T3.1.1.12 2007.11.27 -
Kaspersky 7.0.0.125 2007.11.27 -
McAfee 5171 2007.11.26 -
Microsoft 1.3007 2007.11.27 -
NOD32v2 2687 2007.11.26 -
Norman 5.80.02 2007.11.26 -
Panda 9.0.0.4 2007.11.26 -
Prevx1 V2 2007.11.27 -
Rising 20.20.11.00 2007.11.27 -
[B]Sophos 4.23.0 2007.11.27 Mal/ObfJS-R[/B]
Sunbelt 2.2.907.0 2007.11.27 -
Symantec 10 2007.11.27 -
TheHacker 6.2.9.142 2007.11.26 -
VBA32 3.12.2.5 2007.11.27 -
VirusBuster 4.3.26:9 2007.11.26 -
[B]Webwasher-Gateway 6.0.1 2007.11.27 Heuristic.Exploit.HTML [/B]

Дополнительная информация
File size: 32803 bytes
MD5: 5021a06aa8e0848d140aa2b336e89aa8
SHA1: db20d942fb98310a5b43d3cc2a035c07962e0aac
30.11.2007, 16:58
Shu_b

Вложений: 2

Сегодня последний день ноября, а так как активность данной темы немного упала, то я подбиваю промежуточные итоги. Выкладываю два графика за прошедший месяц и сумму. Месячный итог забавным получился.... ;-)
30.11.2007, 17:12
DVi

Сумма - это второй, в котором стоит максимум 140?
30.11.2007, 17:24
Shu_b

[QUOTE=DVi;155451]Сумма - это второй, в котором стоит максимум 140?[/QUOTE]

да, 65 + 58
01.12.2007, 19:17
Surfer

Жестокие пинчары пошли, никем не ловятся.

File illusion.exe received on 12.01.2007 15:41:05 (CET)
Result: 4/32 (12.5%)

AhnLab-V3 2007.12.1.0 2007.11.30 -
AntiVir 7.6.0.34 2007.11.30 -
Authentium 4.93.8 2007.12.01 -
Avast 4.7.1074.0 2007.11.30 -
AVG 7.5.0.503 2007.12.01 -
BitDefender 7.2 2007.12.01 -
CAT-QuickHeal 9.00 2007.12.01 -
ClamAV 0.91.2 2007.12.01 -
DrWeb 4.44.0.09170 2007.12.01 -
eSafe 7.0.15.0 2007.11.29 -
eTrust-Vet 31.3.5340 2007.11.30 -
Ewido 4.0 2007.12.01 -
FileAdvisor 1 2007.12.01 -
Fortinet 3.14.0.0 2007.12.01 -
F-Prot 4.4.2.54 2007.11.30 -
F-Secure 6.70.13030.0 2007.11.30 -
[B]Ikarus T3.1.1.12 2007.12.01 Virus.Win32.Zapchast.DA
Kaspersky 7.0.0.125 2007.12.01 Trojan.BAT.Runner.j[/B]
McAfee 5175 2007.11.30 -
Microsoft 1.3007 2007.12.01 -
NOD32v2 2696 2007.11.30 -
Norman 5.80.02 2007.11.30 -
Panda 9.0.0.4 2007.12.01 -
Prevx1 V2 2007.12.01 -
[B]Rising 20.20.51.00 2007.12.01 Trojan.DL.Win32.Agent.bxw
Sophos 4.23.0 2007.12.01 Mal/Dropper-T[/B]
Sunbelt 2.2.907.0 2007.12.01 -
Symantec 10 2007.12.01 -
TheHacker 6.2.9.146 2007.11.30 -
VBA32 3.12.2.5 2007.12.01 -
VirusBuster 4.3.26:9 2007.11.30 -
Webwasher-Gateway 6.6.2 2007.12.01 -
Additional information
File size: 159843 bytes
MD5: 1b4023097c4e527b5e2e465d026d68cc
SHA1: 8bfd2cc1a1b4dbab31b15bc0581e6149c2cd1c29
packers: RAR

А вот он же, но в распакованом виде

File 1.exe received on 12.01.2007 15:46:00 (CET)
Result: 3/32 (9.38%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.1.0 2007.11.30 -
AntiVir 7.6.0.34 2007.11.30 -
Authentium 4.93.8 2007.12.01 -
Avast 4.7.1074.0 2007.11.30 -
AVG 7.5.0.503 2007.12.01 -
BitDefender 7.2 2007.12.01 -
CAT-QuickHeal 9.00 2007.12.01 -
ClamAV 0.91.2 2007.12.01 -
DrWeb 4.44.0.09170 2007.12.01 -
eSafe 7.0.15.0 2007.11.29 -
eTrust-Vet 31.3.5340 2007.11.30 -
Ewido 4.0 2007.12.01 -
FileAdvisor 1 2007.12.01 -
Fortinet 3.14.0.0 2007.12.01 -
F-Prot 4.4.2.54 2007.11.30 -
F-Secure 6.70.13030.0 2007.11.30 -
[B]Ikarus T3.1.1.12 2007.12.01 Virus.Win32.Zapchast.DA[/B]
Kaspersky 7.0.0.125 2007.12.01 -
McAfee 5175 2007.11.30 -
Microsoft 1.3007 2007.12.01 -
NOD32v2 2696 2007.11.30 -
Norman 5.80.02 2007.11.30 -
Panda 9.0.0.4 2007.12.01 -
Prevx1 V2 2007.12.01 -
[B]Rising 20.20.51.00 2007.12.01 Trojan.DL.Win32.Agent.bxw
Sophos 4.23.0 2007.12.01 Mal/Dropper-T[/B]
Sunbelt 2.2.907.0 2007.12.01 -
Symantec 10 2007.12.01 -
TheHacker 6.2.9.146 2007.11.30 -
VBA32 3.12.2.5 2007.12.01 -
VirusBuster 4.3.26:9 2007.11.30 -
Webwasher-Gateway 6.6.2 2007.12.01 -
Additional information
File size: 28672 bytes
MD5: 5564a7b0ec2c7012c64af96a87876491
SHA1: 840a0c70f91e49b4a6edb5fcb1b8eb64e9fcdb87
02.12.2007, 06:28
Helgin

Антивирус Версия Обновление Результат
AhnLab-V3 2007.12.1.0 2007.11.30 -
[B]AntiVir 7.6.0.34 2007.11.30 CC/UKMalw.LB
Authentium 4.93.8 2007.12.01 W32/Trojan.BWKV[/B]
Avast 4.7.1074.0 2007.12.01 -
AVG 7.5.0.503 2007.12.01 -
BitDefender 7.2 2007.12.02 -
[B]CAT-QuickHeal 9.00 2007.12.01 Trojan.Soltek.kj[/B]
ClamAV 0.91.2 2007.12.02 -
DrWeb 4.44.0.09170 2007.12.01 -
eSafe 7.0.15.0 2007.11.29 -
eTrust-Vet 31.3.5340 2007.11.30 -
[B]Ewido 4.0 2007.12.01 Trojan.Legmir[/B]
FileAdvisor 1 2007.12.02 -
[B]Fortinet 3.14.0.0 2007.12.01 Generic.A!tr
F-Prot 4.4.2.54 2007.11.30 W32/Trojan.BWKV
F-Secure 6.70.13030.0 2007.11.30 W32/Malware.dam
Ikarus T3.1.1.12 2007.12.02 Trojan-PWS.Legmir[/B]
Kaspersky 7.0.0.125 2007.12.02 -
[B]McAfee 5175 2007.11.30 Generic Packed[/B]
Microsoft 1.3007 2007.12.02 -
NOD32v2 2696 2007.11.30 -
[B]Norman 5.80.02 2007.11.30 W32/Malware.dam
Panda 9.0.0.4 2007.12.02 Generic Trojan
Prevx1 V2 2007.12.02 Generic.Malware[/B]
Rising 20.20.52.00 2007.12.02 -
[B]Sophos 4.23.0 2007.12.01 Mal/Generic-A[/B]
Sunbelt 2.2.907.0 2007.12.01 -
[B]Symantec 10 2007.12.02 Backdoor.EggDrop[/B]
TheHacker 6.2.9.147 2007.12.01 -
[B]VBA32 3.12.2.5 2007.12.01 Trojan.PWS.Legmir[/B]
VirusBuster 4.3.26:9 2007.12.01 -
[B]Webwasher-Gateway 6.6.2 2007.12.01 Virus.UKMalw.LB[/B]
Дополнительная информация
File size: 61440 bytes
MD5: 9a667611eb788402ccadd829e29a4184
SHA1: 1b28150e07c4da97c7f343f63acf8a468a5f3733
Prevx info: [url]http://fileinfo.prevx.com/fileinfo.asp?PX5=6732446900B8FDA7F00A0052F5ABFE00BD2000BF[/url][/CODE]
02.12.2007, 17:42
Макcим

Из темы [url]http://virusinfo.info/showthread.php?t=14788[/url][QUOTE]AhnLab-V3 2007.12.1.0 2007.11.30 -
[B]AntiVir 7.6.0.34 2007.11.30 TR/Crypt.XPACK.Gen[/B]
Authentium 4.93.8 2007.12.01 -
Avast 4.7.1074.0 2007.12.02 -
AVG 7.5.0.503 2007.12.02 -
BitDefender 7.2 2007.12.02 -
CAT-QuickHeal 9.00 2007.12.01 -
ClamAV 0.91.2 2007.12.02 -
[B]DrWeb 4.44.0.09170 2007.12.02 Trojan.Packed.147[/B]
eSafe 7.0.15.0 2007.11.29 -
eTrust-Vet 31.3.5340 2007.11.30 -
Ewido 4.0 2007.12.02 -
FileAdvisor 1 2007.12.02 -
Fortinet 3.14.0.0 2007.12.02 -
F-Prot 4.4.2.54 2007.11.30 -
F-Secure 6.70.13030.0 2007.11.30 -
Ikarus T3.1.1.12 2007.12.02 -
Kaspersky 7.0.0.125 2007.12.02 -
McAfee 5175 2007.11.30 -
[B]Microsoft 1.3007 2007.12.02 Spammer:Win32/Tedroo.B[/B]
NOD32v2 2697 2007.12.02 -
Norman 5.80.02 2007.11.30 -
Panda 9.0.0.4 2007.12.02 -
Prevx1 V2 2007.12.02 -
Rising 20.20.62.00 2007.12.02 -
Sophos 4.23.0 2007.12.02 -
Sunbelt 2.2.907.0 2007.12.01 -
Symantec 10 2007.12.02 -
TheHacker 6.2.9.147 2007.12.01 -
VBA32 3.12.2.5 2007.12.02 -
VirusBuster 4.3.26:9 2007.12.01 -
[B]Webwasher-Gateway 6.6.2 2007.12.01 Trojan.Crypt.XPACK.Gen[/B]
[/QUOTE]Дополнительная информация
File size: 32768 bytes
MD5: ba6f53f0ccb15762068f41681d387761
SHA1: 5b4da53e8f918159c97f96f78971c430f6627dce
03.12.2007, 23:59
ssa555

[COLOR=#22229c][COLOR=#000000]Из темы [/COLOR][URL]http://virusinfo.info/showthread.php?t=14796[/URL][/COLOR]

[quote]Файл mssrv32.exe получен 2007.12.03 19:56:29 (CET)Антивирус Версия Обновление Результат
AhnLab-V3 2007.12.4.0 2007.12.03 -
[B]AntiVir 7.6.0.34 2007.12.03 TR/Dldr.Agent.fow [/B]
Authentium 4.93.8 2007.12.03 -
Avast 4.7.1074.0 2007.12.03 -
[B]AVG 7.5.0.503 2007.12.03 Obfustat.ABFX [/B]
BitDefender 7.2 2007.12.03 -
[B]CAT-QuickHeal 9.00 2007.12.03 TrojanDownloader.Agent.fow[/B]
ClamAV 0.91.2 2007.12.03 -
[B]DrWeb 4.44.0.09170 2007.12.03 Trojan.Packed.194 [/B]
eSafe 7.0.15.0 2007.12.03 -
eTrust-Vet 31.3.5340 2007.11.30 -
Ewido 4.0 2007.12.03 -
FileAdvisor 1 2007.12.03 -
Fortinet 3.14.0.0 2007.12.03 -
F-Prot 4.4.2.54 2007.12.02 -
[B]F-Secure 6.70.13030.0 2007.12.03 Trojan-Downloader.Win32.Agent.fow
Ikarus T3.1.1.12 2007.12.03 Virus.Win32.Zapchast.DA
Kaspersky 7.0.0.125 2007.12.03 Trojan-Downloader.Win32.Agent.fow [/B]
McAfee 5176 2007.12.03 -
Microsoft 1.3007 2007.12.03 -
NOD32v2 2698 2007.12.03 -
Norman 5.80.02 2007.12.03 -
Panda 9.0.0.4 2007.12.02 -
Prevx1 V2 2007.12.03 -
[B]Rising 20.21.02.00 2007.12.03 Trojan.DL.Win32.Agent.bxw [/B]
Sophos 4.23.0 2007.12.03 -
Sunbelt 2.2.907.0 2007.12.01 -
Symantec 10 2007.12.03 -
TheHacker 6.2.9.147 2007.12.01 -
VBA32 3.12.2.5 2007.12.03 -
VirusBuster 4.3.26:9 2007.12.03 -
[B]Webwasher-Gateway 6.6.2 2007.12.03 Trojan.Dldr.Agent.fow [/B]

Дополнительная информация
File size: 24576 bytes
MD5: f0bc7f9da285c7714917756de15a53ea
SHA1: 8fd774c3ded5b7cfc69a863f1a5793315c143681
PEiD: -
[/quote]
04.12.2007, 12:12
Shu_b

t - 14813
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2007.12.4.0 2007.12.03 -
AntiVir 7.6.0.34 2007.12.03 -
Authentium 4.93.8 2007.12.04 -
Avast 4.7.1074.0 2007.12.03 -
AVG 7.5.0.503 2007.12.04 -
BitDefender 7.2 2007.12.04 -
CAT-QuickHeal 9.00 2007.12.03 -
ClamAV 0.91.2 2007.12.04 -
DrWeb 4.44.0.09170 2007.12.03 -
[B]eSafe 7.0.15.0 2007.12.03 Win32.Eterok.C[/B]
eTrust-Vet 31.3.5349 2007.12.04 -
Ewido 4.0 2007.12.03 -
FileAdvisor 1 2007.12.04 -
Fortinet 3.14.0.0 2007.12.04 -
F-Prot 4.4.2.54 2007.12.04 -
F-Secure 6.70.13030.0 2007.12.04 -
Ikarus T3.1.1.12 2007.12.04 -
Kaspersky 7.0.0.125 2007.12.04 -
McAfee 5176 2007.12.03 -
Microsoft 1.3007 2007.12.03 -
NOD32v2 2699 2007.12.03 -
Norman 5.80.02 2007.12.03 -
Panda 9.0.0.4 2007.12.03 -
Prevx1 V2 2007.12.04 -
Rising 20.21.02.00 2007.12.03 -
Sophos 4.24.0 2007.12.04 -
Sunbelt 2.2.907.0 2007.12.01 -
[B]Symantec 10 2007.12.04 Backdoor.Eterok.C[/B]
TheHacker 6.2.9.148 2007.12.03 -
VBA32 3.12.2.5 2007.12.03 -
VirusBuster 4.3.26:9 2007.12.03 -
Webwasher-Gateway 6.6.2 2007.12.03 -
Additional information
File size: 19968 bytes[/CODE]

t-14175
[CODE]File _svchost.exe ( ie_updater.exe ) received on 12.04.2007 09:36:34 (CET)
Antivirus Version Last Update Result
[B]AhnLab-V3 2007.12.4.0 2007.12.03 Win-Trojan/Xema.variant[/B]
AntiVir 7.6.0.34 2007.12.04 -
Authentium 4.93.8 2007.12.04 -
[B]Avast 4.7.1074.0 2007.12.03 Win32:Tiny-LJ
AVG 7.5.0.503 2007.12.04 Downloader.Generic6.WVT[/B]
BitDefender 7.2 2007.12.04 -
[B]CAT-QuickHeal 9.00 2007.12.03 TrojanDownloader.Tiny.abz[/B]
ClamAV 0.91.2 2007.12.04 -
[B]DrWeb 4.44.0.09170 2007.12.04 Trojan.DownLoader.origin[/B]
eSafe 7.0.15.0 2007.12.03 -
eTrust-Vet 31.3.5349 2007.12.04 -
Ewido 4.0 2007.12.03 -
FileAdvisor 1 2007.12.04 -
Fortinet 3.14.0.0 2007.12.04 -
F-Prot 4.4.2.54 2007.12.04 -
F-Secure 6.70.13030.0 2007.12.04 -
[B]Ikarus T3.1.1.12 2007.12.04 Virus.Win32.Tiny.LJ[/B]
Kaspersky 7.0.0.125 2007.12.04 -
[B]McAfee 5176 2007.12.03 Generic Downloader.k[/B]
Microsoft 1.3007 2007.12.03 -
[B]NOD32v2 2699 2007.12.03 Win32/TrojanDownloader.Tiny.NJ[/B]
Norman 5.80.02 2007.12.03 -
[B]Panda 9.0.0.4 2007.12.03 Trj/Downloader.RLK
Prevx1 V2 2007.12.04 Heuristic: Suspicious File With Outbound [/B]Communications
Rising 20.21.10.00 2007.12.04 -
Sophos 4.24.0 2007.12.04 -
Sunbelt 2.2.907.0 2007.12.01 -
Symantec 10 2007.12.04 -
TheHacker 6.2.9.148 2007.12.03 -
VBA32 3.12.2.5 2007.12.03 -
VirusBuster 4.3.26:9 2007.12.03 -
Webwasher-Gateway 6.6.2 2007.12.04 -
Additional information
File size: 6144 bytes
MD5: a375f523505751cf04a34506315fd982
SHA1: 0b2eeee53b89ea666653ed5e770824d637d633ef
PEiD: -
packers: embedded[/CODE]
05.12.2007, 06:28
Ultima Weapon

File pskavs.zip received on 12.04.2007 12:09:29 (CET)
Current status: finished
Result: 6/32 (18.75%)
Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 - - -
[B]AntiVir - - Frisk #2[/B]
Authentium - - -
[B]Avast - - Win32:CTX[/B]
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
[B]ClamAV - - Sirius.Annihilator.272[/B]
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
[B]Ikarus - - Virus.Win32.CTX[/B]
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - -
Rising - - -
[B]Sophos - - W95/Whog-878b[/B]
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
[B]Webwasher-Gateway - - Win32.Bumble[/B]
Additional information
MD5: f20440d212d03abdb531eb3c99e1a47a

Добавлено через 8 минут

File Sample_3.zip received on 12.04.2007 12:57:39 (CET)
Current status: finished
Result: 21/32 (65.63%)
Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 2007.12.4.1 2007.12.04 -
[B]AntiVir 7.6.0.34 2007.12.04 TR/Crack.H.5[/B]
Authentium 4.93.8 2007.12.04 -
[B]Avast 4.7.1074.0 2007.12.04 Win32ownloader-AS[/B]
[B]AVG 7.5.0.503 2007.12.04 Downloader.Generic2.LKM[/B]
[B]BitDefender 7.2 2007.12.04 Trojan.Crack.H[/B]
[B]CAT-QuickHeal 9.00 2007.12.03 (Suspicious) - DNAScan[/B]
ClamAV 0.91.2 2007.12.04 -
DrWeb 4.44.0.09170 2007.12.04 -
[B]eSafe 7.0.15.0 2007.12.03 Win32.Trojan[/B]
eTrust-Vet 31.3.5349 2007.12.04 -
[B]Ewido 4.0 2007.12.04 Trojan.Crack.h[/B]
FileAdvisor 1 2007.12.04 -
[B]Fortinet 3.14.0.0 2007.12.04 Crack.D!tr[/B]
[B]F-Prot 4.4.2.54 2007.12.04 W32/Heuristic-162!Eldorado[/B]
[B]F-Secure 6.70.13030.0 2007.12.04 W32/DLoader.ASHL[/B]
[B]Ikarus T3.1.1.12 2007.12.04 Trojan-PWS.Win32.LdPinch.SX[/B]
Kaspersky 7.0.0.125 2007.12.04 -
[B]McAfee 5176 2007.12.03 Downloader.gen.a[/B]
Microsoft 1.3007 2007.12.03 -
[B]NOD32v2 2699 2007.12.03 probably a variant of Win32/Agent[/B]
[B]Norman 5.80.02 2007.12.04 W32/DLoader.ASHL[/B]
[B]Panda 9.0.0.4 2007.12.03 Suspicious file[/B]
[B]Prevx1 V2 2007.12.04 Generic.Malware[/B]
[B]Rising 20.21.10.00 2007.12.04 Hack.Win32.Dpatch.a[/B]
[B]Sophos 4.24.0 2007.12.04 Troj/Crack-D[/B]
[B]Sunbelt 2.2.907.0 2007.12.01 VIPRE.Suspicious[/B]
[B]Symantec 10 2007.12.04 Trojan Horse[/B]
TheHacker 6.2.9.148 2007.12.03 -
VBA32 3.12.2.5 2007.12.03 -
VirusBuster 4.3.26:9 2007.12.03 -
[B]Webwasher-Gateway 6.6.2 2007.12.04 Trojan.Crack.H.5[/B]

Добавлено через 5 минут

File Trojan_1.zip received on 12.04.2007 13:03:24 (CET)
Current status: finished
Result: 20/32 (62.5%)
Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 2007.12.4.1 2007.12.04 -
[B]AntiVir 7.6.0.34 2007.12.04 TR/Crack.H.3[/B]
Authentium 4.93.8 2007.12.04 -
[B]Avast 4.7.1074.0 2007.12.04 Win32ownloader-AS[/B]
[B]AVG 7.5.0.503 2007.12.04 Downloader.Generic2.LKM[/B]
[B]BitDefender 7.2 2007.12.04 Trojan.Crack.H[/B]
[B]CAT-QuickHeal 9.00 2007.12.03 (Suspicious) - DNAScan[/B]
ClamAV 0.91.2 2007.12.04 -
DrWeb 4.44.0.09170 2007.12.04 -
[B]eSafe 7.0.15.0 2007.12.03 Win32.Trojan[/B]
eTrust-Vet 31.3.5349 2007.12.04 -
[B]Ewido 4.0 2007.12.04 Trojan.Crack.h[/B]
FileAdvisor 1 2007.12.04 -
[B]Fortinet 3.14.0.0 2007.12.04 W32/Crack.D!tr[/B]
[B]F-Prot 4.4.2.54 2007.12.04 W32/Heuristic-162!Eldorado[/B]
[B]F-Secure 6.70.13030.0 2007.12.04 W32/DLoader.ASHL[/B]
[B]Ikarus T3.1.1.12 2007.12.04 Trojan-PWS.Win32.LdPinch.SX[/B]
Kaspersky 7.0.0.125 2007.12.04 -
[B]McAfee 5176 2007.12.03 Generic Downloader.z[/B]
Microsoft 1.3007 2007.12.03 -
[B]NOD32v2 2699 2007.12.03 probably a variant of Win32/Agent[/B]
[B]Norman 5.80.02 2007.12.04 W32/DLoader.ASHL[/B]
[B]Panda 9.0.0.4 2007.12.03 Generic Trojan[/B]
Prevx1 V2 2007.12.04 -
[B]Rising 20.21.10.00 2007.12.04 Hack.Win32.Dpatch.a[/B]
[B]Sophos 4.24.0 2007.12.04 Troj/Crack-D[/B]
[B]Sunbelt 2.2.907.0 2007.12.01 Trojan.Unclassified.gen[/B]
[B]Symantec 10 2007.12.04 Trojan Horse[/B]
TheHacker 6.2.9.148 2007.12.03 -
VBA32 3.12.2.5 2007.12.03 -
VirusBuster 4.3.26:9 2007.12.03 -
[B]Webwasher-Gateway 6.6.2 2007.12.04 Trojan.Crack.H.3[/B]

Добавлено через 1 минуту

ile Trojan_Win_32_Agent.cro.zip received on 12.04.2007 11:15:37 (CET)
Current status: finished
Result: 26/32 (81.25%)
Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 - - -
[B]AntiVir - - TR/Drop.Agent.cro[/B]
[B]Authentium - - W32/Splendor.7116[/B]
[B]Avast - - Win32:Agent-NMK[/B]
[B]AVG - - Win32/Virut[/B]
[B]BitDefender - - Trojan.Downloader.LoadAdv.XXA[/B]
[B]CAT-QuickHeal - - Win32.Trojan.Pakes[/B]
[B]ClamAV - - Trojan.Agent-9180[/B]
[B]DrWeb - - Trojan.Packed.155[/B]
[B]eSafe - - Win32.Agent.cro[/B]
eTrust-Vet - - -
[B]Ewido - - Trojan.Agent.cro[/B]
FileAdvisor - - -
[B]Fortinet - - W32/Agent.VD!tr[/B]
[B]F-Prot - - W32/Backdoor.CARM[/B]
[B]F-Secure - - Virus.Win32.Virut.av[/B]
[B]Ikarus - - Trojan.Win32.Agent.cro[/B]
[B]Kaspersky - - Trojan.Win32.Agent.cro[/B]
[B]McAfee - - W32/Virut.gen.a[/B]
[B]Microsoft - - Virus:Win32/Virut.AC[/B]
[B]NOD32v2 - - Win32/TrojanDownloader.Agent.NSP[/B]
[B]Norman - - DLoader.EBYE[/B]
[B]Panda - - Trj/Agent.HCK[/B]
Prevx1 - - -
[B]Rising - - Trojan.Win32.Mnless.zir[/B]
[B]Sophos - - Mal/HckPk-A[/B]
Sunbelt - - -
[B]Symantec - - W32.Virut.W[/B]
TheHacker - - -
[B]VBA32 - - Trojan.Win32.Agent.cro[/B]
[B]VirusBuster - - Adware.Vundo.V.Gen[/B]
[B]Webwasher-Gateway - - Trojan.Drop.Agent.cro[/B]

File crude.exe received on 12.05.2007 04:09:52 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 4/32 (12.5%)

AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.04 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.04 -
BitDefender 7.2 2007.12.05 -
CAT-QuickHeal 9.00 2007.12.04 -
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.04 -
[B]eSafe 7.0.15.0 2007.12.04 suspicious Trojan/Worm[/B]
eTrust-Vet 31.3.5352 2007.12.05 -
Ewido 4.0 2007.12.04 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.04 -
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 -
Kaspersky 7.0.0.125 2007.12.05 -
McAfee 5177 2007.12.04 -
Microsoft 1.3007 2007.12.03 -
NOD32v2 2701 2007.12.05 -
Norman 5.80.02 2007.12.04 -
Panda 9.0.0.4 2007.12.04 -
[B]Prevx1 V2 2007.12.05 Generic.Malware[/B]
Rising 20.21.12.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 -
[B]Sunbelt 2.2.907.0 2007.12.05 VIPRE.Suspicious[/B]
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
VBA32 3.12.2.5 2007.12.04 -
VirusBuster 4.3.26:9 2007.12.04 -
[B]Webwasher-Gateway 6.6.2 2007.12.04 Win32.Malware.gen#UPX!92[/B] (suspicious)

[SIZE=1][COLOR=#666686][B][I]Добавлено через 6 минут[/I][/B][/COLOR][/SIZE]

File noisybearcab_bin received on 07.23.2007 09:36:30 (CET)
Result: 20/30 (66.67%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
[B]AntiVir - - Java/NoisyBear[/B]
[B]Authentium - - is a destructive program[/B]
[B]Avast - - JS:NoisyBear[/B]
AVG - - -
[B]BitDefender - - Trojan.NoisyBear[/B]
CAT-QuickHeal - - -
[B]ClamAV - - Java.Noisybear[/B]
[B]DrWeb - - Trojan.NoisyBear[/B]
[B]eSafe - - Drummer[/B]
[B]eTrust-Vet - - Java/Nosybea[/B]
[B]Ewido - - Trojan.NoisyBear[/B]
FileAdvisor - - -
[B]Fortinet - - JAV/Noisybear!tr[/B]
[B]F-Prot - - Java/Trojan!217c[/B]
[B]F-Secure - - Java/NoisyBear.A[/B]
[B]Ikarus - - Trojan.NoisyBear[/B]
Kaspersky - - -
[B]McAfee - - JV/g[/B]
[B]Microsoft - - Trojan:Java/Noisybear[/B]
NOD32v2 - - -
Norman - - -
[B]Panda - - JV/NoisyBear[/B]
[B]Sophos - - Troj/NoisyBear[/B]
Sunbelt - - -
[B]Symantec - - Trojan Horse[/B]
TheHacker - - -
VBA32 - - -
[B]VirusBuster - - Java.NoisyBear[/B]
[B]Webwasher-Gateway - - Java.NoisyBear[/B]

File emul.zip received on 12.03.2007 07:49:40 (CET)
Result: 16/32 (50%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
[B]AntiVir - - TR/Hijack.Explor.4284[/B]
Authentium - - -
[B]Avast - - Win32:Avtest[/B]
[B]AVG - - Downloader.Delf.LY[/B]
[B]BitDefender - - BehavesLike:Win32.ExplorerHijack[/B]
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
[B]eSafe - - Win32.Delf.adw[/B]
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
[B]F-Secure - - W32/Downloader.AJC[/B]
[B]Ikarus - - BehavesLikeWin32.ExplorerHijack[/B]
[B]Kaspersky - - Heur.Invader[/B]
McAfee - - -
[B]Microsoft - - TrojanDownloader:Win32/Delf[/B]
[B]NOD32v2 - - probably unknown NewHeur_PE virus[/B]
[B]Norman - - W32/Downloader.AJC[/B]
[B]Panda - - Suspicious file[/B]
[B]Prevx1 - - Generic.Malware[/B]
Rising - - -
Sophos - - -
[B]Sunbelt - - Win32.ExplorerHijack[/B]
Symantec - - -
TheHacker - - -
[B]VBA32 - - suspected of Win32.Trojan.Downloader[/B] ([URL]http://.[/URL]..)
VirusBuster - - -
[B]Webwasher-Gateway - - Trojan.Hijack.Explor.4284[/B]

[SIZE=1][COLOR=#666686][B][I]Добавлено через 4 минуты[/I][/B][/COLOR][/SIZE]

File EvID4226.exe received on 12.04.2007 16:11:06 (CET)
Result: 15/32 (46.88%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
[B]AVG - - Potentially harmful program HackTool.AB[/B]
[B]BitDefender - - Application.Evid.M[/B]
[B]CAT-QuickHeal - - AdWare.Agent.bq (Not a Virus)[/B]
ClamAV - - -
DrWeb - - -
[B]eSafe - - suspicious Trojan/Worm[/B]
eTrust-Vet - - -
[B]Ewido - - Not-A-Virus.Hacktool.EvID[/B]
[B]FileAdvisor - - High threat detected[/B]
[B]Fortinet - - HackerTool/Evid[/B]
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
[B]McAfee - - potentially unwanted program Tool-Evid[/B]
Microsoft - - -
[B]NOD32v2 - - Win32/Tool.EvID4226[/B]
Norman - - -
[B]Panda - - HackTool/EvID[/B]
[B]Prevx1 - - Potentially harmful program HackTool.AB[/B]
Rising - - -
[B]Sophos - - EvID4226[/B]
[B]Sunbelt - - Event ID 4226 Patcher[/B]
Symantec - - -
[B]TheHacker - - Aplicacion/Tool.evid[/B]
VBA32 - - -
VirusBuster - - -
[B]Webwasher-Gateway - - Riskware.Tool.EvID4226.A[/B]
05.12.2007, 16:32
Ultima Weapon

File askBarSetup.zip received on 12.05.2007 08:29:00 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 4/32 (12.5%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.04 -
BitDefender 7.2 2007.12.05 -
CAT-QuickHeal 9.00 2007.12.04 -
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.04 -
eSafe 7.0.15.0 2007.12.04 -
eTrust-Vet 31.3.5352 2007.12.05 -
Ewido 4.0 2007.12.04 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 -
[B]F-Prot 4.4.2.54 2007.12.05 W32/Mywebsearch.I.gen!Eldorado[/B]
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 -
Kaspersky 7.0.0.125 2007.12.05 -
McAfee 5177 2007.12.04 -
Microsoft 1.3007 2007.12.05 -
[B]NOD32v2 2703 2007.12.05 a variant of Win32/AdInstaller[/B]
Norman 5.80.02 2007.12.04 -
Panda 9.0.0.4 2007.12.04 -
[B]Prevx1 V2 2007.12.05 Heuristic: Suspicious Hijacker[/B]
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 -
Sunbelt 2.2.907.0 2007.12.05 -
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
[B]VBA32 3.12.2.5 2007.12.04 suspected of Trojan-Dropper.Delf.36 (paranoid heuristics)[/B]
VirusBuster 4.3.26:9 2007.12.04 -
Webwasher-Gateway 6.6.2 2007.12.05 -

[SIZE=1][COLOR=#666686][B][I]Добавлено через 8 минут[/I][/B][/COLOR][/SIZE]

File gen.exe received on 12.05.2007 08:37:09 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 4/32 (12.5%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.04 -
BitDefender 7.2 2007.12.05 -
CAT-QuickHeal 9.00 2007.12.04 -
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.04 -
[B]eSafe 7.0.15.0 2007.12.04 suspicious Trojan/Worm[/B]
eTrust-Vet 31.3.5352 2007.12.05 -
Ewido 4.0 2007.12.04 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 -
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 -
Kaspersky 7.0.0.125 2007.12.05 -
McAfee 5177 2007.12.04 -
Microsoft 1.3007 2007.12.05 -
NOD32v2 2703 2007.12.05 -
Norman 5.80.02 2007.12.04 -
[B]Panda 9.0.0.4 2007.12.04 Suspicious file[/B]
Prevx1 V2 2007.12.05 -
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 -
[B]Sunbelt 2.2.907.0 2007.12.05 VIPRE.Suspicious[/B]
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
VBA32 3.12.2.5 2007.12.04 -
VirusBuster 4.3.26:9 2007.12.04 -
[B]Webwasher-Gateway 6.6.2 2007.12.05 Win32.Malware.gen#UPX!92 (suspicious)[/B]

[SIZE=1][COLOR=#666686][B][I]Добавлено через 22 минуты[/I][/B][/COLOR][/SIZE]

File b.exe received on 12.05.2007 08:57:30 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 15/32 (46.88%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
[B]AVG 7.5.0.503 2007.12.04 Generic5.HNY[/B]
BitDefender 7.2 2007.12.05 -
[B]CAT-QuickHeal 9.00 2007.12.04 (Suspicious) - DNAScan[/B]
[B]ClamAV 0.91.2 2007.12.05 PUA.Packed.UPack-2[/B]
DrWeb 4.44.0.09170 2007.12.04 -
[B]eSafe 7.0.15.0 2007.12.04 Suspicious File[/B]
eTrust-Vet 31.3.5352 2007.12.05 -
Ewido 4.0 2007.12.04 -
[B]FileAdvisor 1 2007.12.05 High threat detected[/B]
Fortinet 3.14.0.0 2007.12.05 -
[B]F-Prot 4.4.2.54 2007.12.05 W32/Heuristic-162!Eldorado[/B]
F-Secure 6.70.13030.0 2007.12.05 -
[B]Ikarus T3.1.1.12 2007.12.05 Trojan-Downloader.Win32.Zlob.and[/B]
Kaspersky 7.0.0.125 2007.12.05 -
[B]McAfee 5177 2007.12.04 New Malware.aj[/B]
Microsoft 1.3007 2007.12.05 -
NOD32v2 2703 2007.12.05 -
[B]Norman 5.80.02 2007.12.04 W32/Suspicious_U.gen[/B]
Panda 9.0.0.4 2007.12.04 -
[B]Prevx1 V2 2007.12.05 Generic.Malware[/B]
Rising 20.21.20.00 2007.12.05 -
[B]Sophos 4.24.0 2007.12.05 Mal/Packer[/B]
[B]Sunbelt 2.2.907.0 2007.12.05 VIPRE.Suspicious[/B]
Symantec 10 2007.12.05 -
[B]TheHacker 6.2.9.150 2007.12.05 W32/Behav-Heuristic-060[/B]
VBA32 3.12.2.5 2007.12.04 -
[B]VirusBuster 4.3.26:9 2007.12.04 Packed/Upack[/B]
[B]Webwasher-Gateway 6.6.2 2007.12.05 Win32.Malware.gen (suspicious)[/B]

[SIZE=1][COLOR=#666686][B][I]Добавлено через 22 минуты[/I][/B][/COLOR][/SIZE]

File c.exe received on 12.03.2007 16:35:59 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 4/32 (12.5%)

Antivirus Version Last Update Result
AhnLab-V3 - - -
[B]AntiVir - - ADSPY/LordPatch.A[/B]
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
[B]eSafe - - suspicious Trojan/Worm[/B]
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
[B]Prevx1 - - Heuristic: Suspicious File With Outbound Communications[/B]
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
[B]Webwasher-Gateway - - Ad-Spyware.LordPatch.A[/B]

[SIZE=1][COLOR=#666686][B][I]Добавлено через 27 минут[/I][/B][/COLOR][/SIZE]

File bab.exe received on 11.19.2007 08:12:20 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 2/32 (6.25%)

Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
[B]F-Secure - - W32/Malware.AQMG[/B]
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
[B]Norman - - W32/Malware.AQMG[/B]
Panda - - -
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -

[SIZE=1][COLOR=#666686][B][I]Добавлено через 28 минут[/I][/B][/COLOR][/SIZE]

File ul.exe received on 12.01.2007 08:24:10 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 8/32 (25%)

Antivirus Version Last Update Result
AhnLab-V3 - - -
[B]AntiVir - - TR/Gendal.134656[/B]
Authentium - - -
Avast - - -
[B]AVG - - Generic7.FSV[/B]
[B]BitDefender - - Trojan.Generic.69247[/B]
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
[B]FileAdvisor - - High threat detected[/B]
[B]Fortinet - - W32/BBTN.A!tr[/B]
F-Prot - - -
F-Secure - - -
[B]Ikarus - - Trojan.Generic[/B]
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
[B]Prevx1 - - W32.MALWARE.GEN[/B]
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
[B]Webwasher-Gateway - - Trojan.Gendal.134656[/B]

[SIZE=1][COLOR=#666686][B][I]Добавлено через 10 минут[/I][/B][/COLOR][/SIZE]

File kayo.rar received on 12.05.2007 10:26:36 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 10/32 (31.25%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.04 -
[B]BitDefender 7.2 2007.12.05 Packer.Krunchy.A[/B]
[B]CAT-QuickHeal 9.00 2007.12.04 (Suspicious) - DNAScan[/B]
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.04 -
[B]eSafe 7.0.15.0 2007.12.04 Suspicious File[/B]
eTrust-Vet 31.3.5353 2007.12.05 -
Ewido 4.0 2007.12.04 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 -
[B]F-Prot 4.4.2.54 2007.12.05 W32/Heuristic-162!Eldorado[/B]
F-Secure 6.70.13030.0 2007.12.05 -
[B]Ikarus T3.1.1.12 2007.12.05 Packer.Krunchy.A[/B]
Kaspersky 7.0.0.125 2007.12.05 -
McAfee 5177 2007.12.04 -
Microsoft 1.3007 2007.12.05 -
NOD32v2 2703 2007.12.05 -
Norman 5.80.02 2007.12.04 -
[B]Panda 9.0.0.4 2007.12.04 Suspicious file[/B]
[B]Prevx1 V2 2007.12.05 Heuristic: Suspicious File With Covert [/B]Attributes
Rising 20.21.20.00 2007.12.05 -
[B]Sophos 4.24.0 2007.12.05 Mal/EncPk-BP[/B]
Sunbelt 2.2.907.0 2007.12.05 -
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
VBA32 3.12.2.5 2007.12.04 -
[B]VirusBuster 4.3.26:9 2007.12.04 Packed/FRBR[/B]
[B]Webwasher-Gateway 6.6.2 2007.12.05 Win32.Malware.gen [/B][B](suspicious)[/B]

[SIZE=1][COLOR=#666686][B][I]Добавлено через 4 минуты[/I][/B][/COLOR][/SIZE]

File chong.exe received on 11.14.2007 03:26:51 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 7/32 (21.88%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
[B]AVG - - Generic9.STX[/B]
BitDefender - - -
[B]CAT-QuickHeal - - (Suspicious) - DNAScan[/B]
ClamAV - - -
DrWeb - - -
[B]eSafe - - Suspicious File[/B]
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
[B]F-Secure - - W32/Malware.AZKM[/B]
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
[B]Norman - - W32/Malware.AZKM[/B]
Panda - - -
[B]Prevx1 - - Heuristic: Suspicious Self Modifying EXE[/B]
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
[B]Webwasher-Gateway - - Win32.Malware.gen#PECompact[/B] (suspicious)

[SIZE=1][COLOR=#666686][B][I]Добавлено через 52 секунды[/I][/B][/COLOR][/SIZE]

File maker.exe received on 11.21.2007 03:48:22 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 1/32 (3.13%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
[B]Webwasher-Gateway - - Win32.ModifiedUPX.gen!90 (suspicious)[/B]

[SIZE=1][COLOR=#666686][B][I]Добавлено через 4 минуты[/I][/B][/COLOR][/SIZE]

File obra.exe received on 12.04.2007 20:25:35 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 8/32 (25%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
[B]CAT-QuickHeal - - (Suspicious) - DNAScan[/B]
ClamAV - - -
DrWeb - - -
[B]eSafe - - Suspicious File[/B]
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - Low threat detected
Fortinet - - -
F-Prot - - -
F-Secure - - -
[B]Ikarus - - Trojan-PWS.Win32.LdPinch.bjx[/B]
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
[B]Panda - - Suspicious file[/B]
[B]Prevx1 - - Generic.Malware[/B]
Rising - - -
Sophos - - -
[B]Sunbelt - - VIPRE.Suspicious[/B]
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
[B]Webwasher-Gateway - - Win32.Malware.gen#PECompact!92 (suspicious)[/B]

[SIZE=1][COLOR=#666686][B][I]Добавлено через 1 минуту[/I][/B][/COLOR][/SIZE]

File mader.exe received on 11.10.2007 16:55:53 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 7/32 (21.88%)

Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
[B]CAT-QuickHeal - - (Suspicious) - DNAScan[/B]
ClamAV - - -
DrWeb - - -
[B]eSafe - - SuspiciousR-Mytob3[/B]
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
[B]Ikarus - - Backdoor.Win32.IRCBot.az[/B]
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
[B]Panda - - Suspicious file[/B]
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
[B]TheHacker - - W32/Behav-Heuristic-065[/B]
VBA32 - - -
[B]VirusBuster - - Packed/MoleBox[/B]
[B]Webwasher-Gateway - - Win32.Malware.gen (suspicious)[/B]
Additional information
05.12.2007, 17:34
Surfer

OMFG...

Ultima Weapon plz, post only real malware in this thread.

for example EvID4226.exe is not malware, it is only patch for tcp/ip for p2p networks...

%)
05.12.2007, 20:52
sergio342

Файл startdrv.exe получен 2007.12.05 18:42:02 (CET)
Был пойман эвристикой KIS7.125 как Troyan.Generic

Антивирус Версия Обновление Результат
AhnLab-V3 2007.12.5.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.05 -
BitDefender 7.2 2007.12.05 -
CAT-QuickHeal 9.00 2007.12.05 -
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.05 -
eSafe 7.0.15.0 2007.12.05 -
eTrust-Vet 31.3.5352 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 -
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 -
[B]Kaspersky 7.0.0.125 2007.12.05 Trojan.Win32.Agent.dei [/B]
McAfee 5178 2007.12.05 -
Microsoft 1.3007 2007.12.05 -
NOD32v2 2704 2007.12.05 -
Norman 5.80.02 2007.12.05 -
Panda 9.0.0.4 2007.12.04 -
Prevx1 V2 2007.12.05 -
Rising 20.21.20.00 2007.12.05 -
[B]Sophos 4.24.0 2007.12.05 Mal/Dropper-O [/B]
Sunbelt 2.2.907.0 2007.12.05 -
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
VBA32 3.12.2.5 2007.12.04 -
VirusBuster 4.3.26:9 2007.12.05 -
Webwasher-Gateway 6.6.2 2007.12.05 -
06.12.2007, 08:21
Ultima Weapon

File cmdow.zip received on 12.05.2007 20:09:17 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 13/32 (40.63%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.6.0 2007.12.05 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
[B]AVG 7.5.0.503 2007.12.05 Potentially harmful program HideExec.BD[/B]
BitDefender 7.2 2007.12.05 -
[B]CAT-QuickHeal 9.00 2007.12.05 RiskTool.HideWindows (Not a Virus)[/B]
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.05 -
eSafe 7.0.15.0 2007.12.05 -
eTrust-Vet 31.3.5353 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.05 -
[B]Fortinet 3.14.0.0 2007.12.05 HackerTool/HideWindows
F-Prot 4.4.2.54 2007.12.05 W32/HackToolX.DY[/B]
F-Secure 6.70.13030.0 2007.12.05 -
[B]Ikarus T3.1.1.12 2007.12.05 not-a-virus:RiskTool.Win32.HideWindows[/B]
[B]Kaspersky 7.0.0.125 2007.12.05 not-a-virus:RiskTool.Win32.HideWindows[/B]
[B]McAfee 5178 2007.12.05 potentially unwanted program Tool-HideWindow[/B]
Microsoft 1.3007 2007.12.05 -
[B]NOD32v2 2701 2007.12.05 Win32/CMDOW.143[/B]
Norman 5.80.02 2007.12.05 -
[B]Panda 9.0.0.4 2007.12.04 Application/HideWindow.S[/B]
Prevx1 V2 2007.12.05 -
Rising 20.21.20.00 2007.12.05 -
[B]Sophos 4.24.0 2007.12.05 HideWindow
Sunbelt 2.2.907.0 2007.12.05 Trojan.HideWindow[/B]
Symantec 10 2007.12.05 -
[B]TheHacker 6.2.9.150 2007.12.05 Aplicacion/HideWindows[/B]
VBA32 3.12.2.5 2007.12.04 -
VirusBuster 4.3.26:9 2007.12.05 -
[B]Webwasher-Gateway 6.6.2 2007.12.05 Riskware.HideWindows.I[/B]

[size="1"][color="#666686"][B][I]Добавлено через 39 минут[/I][/B][/color][/size]

File avz_2200_2.cab received on 12.05.2007 20:47:22 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 15/32 (46.88%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.6.0 2007.12.05 -
[B]AntiVir 7.6.0.34 2007.12.05 TR/Hijack.Explor.4284[/B]
Authentium 4.93.8 2007.12.05 -
[B]Avast 4.7.1098.0 2007.12.05 Win32:Avtest
AVG 7.5.0.503 2007.12.05 Downloader.Delf.LY
BitDefender 7.2 2007.12.05 BehavesLike:Win32ExplorerHijack[/B]
CAT-QuickHeal 9.00 2007.12.05 -
ClamAV 0.91.2 2007.12.05 -
[B]DrWeb 4.44.0.09170 2007.12.05 Trojan.MulDrop.9781
eSafe 7.0.15.0 2007.12.05 Win32.Delf.adw[/B]
eTrust-Vet 31.3.5353 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.05 -
Fortinet 3.14.0.0 2007.12.05 -
F-Prot 4.4.2.54 2007.12.05 -
[B]F-Secure 6.70.13030.0 2007.12.05 W32/Downloader.AJC
Ikarus T3.1.1.12 2007.12.05 BehavesLikeWin32.ExplorerHijack[/B]
[B]Kaspersky 7.0.0.125 2007.12.05 Heur.Invader[/B]
McAfee 5178 2007.12.05 -
[B]Microsoft 1.3007 2007.12.05 TrojanDownloader:Win32/Delf
NOD32v2 2704 2007.12.05 probably unknown NewHeur_PE virus[/B]
Norman 5.80.02 2007.12.05 -
[B]Panda 9.0.0.4 2007.12.04 Suspicious file
Prevx1 V2 2007.12.05 Generic.Malware[/B]
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 -
Sunbelt 2.2.907.0 2007.12.05 -
Symantec 10 2007.12.05 -
TheHacker 6.2.9.150 2007.12.05 -
[B]VBA32 3.12.2.5 2007.12.04 suspected of Win32.Trojan.Downloader [/B]([url]http://.[/url]..)
VirusBuster 4.3.26:9 2007.12.05 -
[B]Webwasher-Gateway 6.6.2 2007.12.05 Trojan.Hijack.Explor.4284[/B]

[size="1"][color="#666686"][B][I]Добавлено через 43 минуты[/I][/B][/color][/size]

File SSINSTALLER_124.zip received on 12.05.2007 21:24:16 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 8/32 (25%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.6.0 2007.12.05 -
[B]AntiVir 7.6.0.34 2007.12.05 ADSPY/SafeSurf[/B]
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.05 -
[B]BitDefender 7.2 2007.12.05 Trojan.Generic.75414[/B]
CAT-QuickHeal 9.00 2007.12.05 -
ClamAV 0.91.2 2007.12.05 -
DrWeb 4.44.0.09170 2007.12.05 -
eSafe 7.0.15.0 2007.12.05 -
eTrust-Vet 31.3.5353 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.05 -
[B]Fortinet 3.14.0.0 2007.12.05 Spy/SafeSurf[/B]
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.05 -
Ikarus T3.1.1.12 2007.12.05 -
Kaspersky 7.0.0.125 2007.12.05 -
McAfee 5178 2007.12.05 -
Microsoft 1.3007 2007.12.05 -
NOD32v2 2704 2007.12.05 -
Norman 5.80.02 2007.12.05 -
[B]Panda 9.0.0.4 2007.12.05 Spyware/SafeSurf
Prevx1 V2 2007.12.05 Generic.Malware[/B]
Rising 20.21.20.00 2007.12.05 -
Sophos 4.24.0 2007.12.05 -
[B]Sunbelt 2.2.907.0 2007.12.05 SafeSurfing[/B]
Symantec 10 2007.12.05 -
TheHacker 6.2.9.151 2007.12.05 -
VBA32 3.12.2.5 2007.12.05 -
[B]VirusBuster 4.3.26:9 2007.12.05 Trojan.DL.Istbar.Gen.1[/B]
[B]Webwasher-Gateway 6.6.2 2007.12.05 Ad-Spyware.SafeSurf[/B]

[size="1"][color="#666686"][B][I]Добавлено через 8 часов 43 минуты[/I][/B][/color][/size]

File DLD.exe received on 11.21.2007 09:14:16 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 2/32 (6.25%)

Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
[B]DrWeb - - BACKDOOR.Trojan[/B]
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
[B]Prevx1 - - Heuristic: Suspicious Hijacker[/B]
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -
06.12.2007, 08:28
Shu_b

t-14879[CODE]File abcB812.tmp received on 12.06.2007 06:05:57 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.6.0 2007.12.06 -
[B]AntiVir 7.6.0.34 2007.12.05 Worm/Ntech.W[/B]
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
[B]AVG 7.5.0.503 2007.12.06 Downloader.Agent.14.C
BitDefender 7.2 2007.12.06 Trojan.Kobcka.BC
CAT-QuickHeal 9.00 2007.12.05 Trojan.Pakes.brf[/B]
ClamAV 0.91.2 2007.12.06 -
DrWeb 4.44.0.09170 2007.12.05 -
eSafe 7.0.15.0 2007.12.05 -
eTrust-Vet 31.3.5355 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.06 -
Fortinet 3.14.0.0 2007.12.06 -
F-Prot 4.4.2.54 2007.12.05 -
[B]F-Secure 6.70.13030.0 2007.12.06 Trojan.Win32.Pakes.brf
Ikarus T3.1.1.12 2007.12.06 Trojan.Win32.Pakes.brf
Kaspersky 7.0.0.125 2007.12.06 Trojan.Win32.Pakes.brf[/B]
McAfee 5178 2007.12.05 -
[B]Microsoft 1.3007 2007.12.06 TrojanDropper:Win32/Cutwail.R
NOD32v2 2705 2007.12.05 Win32/Agent.NNK
Norman 5.80.02 2007.12.05 W32/Smalltroj.BOJA[/B]
Panda 9.0.0.4 2007.12.05 -
Prevx1 V2 2007.12.06 -
Rising 20.21.22.00 2007.12.06 -
Sophos 4.24.0 2007.12.06 -
Sunbelt 2.2.907.0 2007.12.05 -
Symantec 10 2007.12.06 -
TheHacker 6.2.9.151 2007.12.05 -
[B]VBA32 3.12.2.5 2007.12.05 Trojan.Win32.Pakes.brf
VirusBuster 4.3.26:9 2007.12.05 Trojan.DR.Pandex.Gen.1
Webwasher-Gateway 6.6.2 2007.12.05 Worm.Ntech.W
Additional information[/B]
File size: 20480 bytes[/CODE]
[CODE]File rt26.exe received on 12.06.2007 06:10:27 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.6.0 2007.12.06 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.06 -
BitDefender 7.2 2007.12.06 -
CAT-QuickHeal 9.00 2007.12.05 -
ClamAV 0.91.2 2007.12.06 -
DrWeb 4.44.0.09170 2007.12.05 -
eSafe 7.0.15.0 2007.12.05 -
eTrust-Vet 31.3.5355 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.06 -
Fortinet 3.14.0.0 2007.12.06 -
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.06 -
[B]Ikarus T3.1.1.12 2007.12.06 Virus.Win32.Zapchast.DA
Kaspersky 7.0.0.125 2007.12.06 Trojan-PSW.Win32.LdPinch.ejl
[/B]McAfee 5178 2007.12.05 -
Microsoft 1.3007 2007.12.06 -
NOD32v2 2705 2007.12.05 -
Norman 5.80.02 2007.12.05 -
Panda 9.0.0.4 2007.12.05 -
Prevx1 V2 2007.12.06 -
[B]Rising 20.21.22.00 2007.12.06 Trojan.DL.Win32.Agent.bxw
Sophos 4.24.0 2007.12.06 Mal/Dropper-T
[/B]Sunbelt 2.2.907.0 2007.12.05 -
Symantec 10 2007.12.06 -
TheHacker 6.2.9.151 2007.12.05 -
VBA32 3.12.2.5 2007.12.05 -
VirusBuster 4.3.26:9 2007.12.05 -
Webwasher-Gateway 6.6.2 2007.12.05 -
Additional information
File size: 52224 bytes[/CODE]
06.12.2007, 08:30
Ultima Weapon

File change.exe received on 12.06.2007 06:22:16 (CET)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.6.0 2007.12.06 -
AntiVir 7.6.0.34 2007.12.05 -
Authentium 4.93.8 2007.12.05 -
Avast 4.7.1098.0 2007.12.05 -
AVG 7.5.0.503 2007.12.06 -
BitDefender 7.2 2007.12.06 -
CAT-QuickHeal 9.00 2007.12.05 -
ClamAV 0.91.2 2007.12.06 -
DrWeb 4.44.0.09170 2007.12.05 -
eSafe 7.0.15.0 2007.12.05 suspicious Trojan/Worm
eTrust-Vet 31.3.5355 2007.12.05 -
Ewido 4.0 2007.12.05 -
FileAdvisor 1 2007.12.06 -
Fortinet 3.14.0.0 2007.12.06 -
F-Prot 4.4.2.54 2007.12.05 -
F-Secure 6.70.13030.0 2007.12.06 -
Ikarus T3.1.1.12 2007.12.06 -
Kaspersky 7.0.0.125 2007.12.06 -
McAfee 5178 2007.12.05 -
Microsoft 1.3007 2007.12.06 -
NOD32v2 2705 2007.12.05 -
Norman 5.80.02 2007.12.05 -
Panda 9.0.0.4 2007.12.05 -
Prevx1 V2 2007.12.06 -
Rising 20.21.22.00 2007.12.06 -
Sophos 4.24.0 2007.12.06 -
Sunbelt 2.2.907.0 2007.12.05 VIPRE.Suspicious
Symantec 10 2007.12.06 -
TheHacker 6.2.9.151 2007.12.05 -
VBA32 3.12.2.5 2007.12.05 -
VirusBuster 4.3.26:9 2007.12.05 -
Webwasher-Gateway 6.6.2 2007.12.05 Win32.Malware.gen#UPX!92 (suspicious)
06.12.2007, 08:42
Shu_b

Вложений: 1

You do not know where to receive the report for the publication?
Look -
06.12.2007, 09:28
Ultima Weapon

File fi.exe received on 12.05.2007 06:59:45 (CET)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
[B]AVG - - KillAV.FF[/B]
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
[B]eSafe - - suspicious Trojan/Worm[/B]
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
[B]Fortinet - - Spy/Agent[/B]
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
[B]Panda - - Suspicious file[/B]
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -
Additional information
MD5: 239421fb8dde79a54e86bca3ef4868ac
06.12.2007, 21:51
rubin

Файл avz00001.dta получен 2007.12.06 19:38:20 (CET)
[code][B]AhnLab-V3 2007.12.7.0 2007.12.06 Win-Trojan/Xema.variant
AntiVir 7.6.0.34 2007.12.06 TR/Dldr.Vb.ANF.104
Authentium 4.93.8 2007.12.05 W32/Downldr2.URL[/B]
Avast 4.7.1098.0 2007.12.05 -
[B]AVG 7.5.0.503 2007.12.06 Downloader.Generic4.KWJ
BitDefender 7.2 2007.12.06 Trojan.Downloader.Vb.ANF
CAT-QuickHeal 9.00 2007.12.06 (Suspicious) - DNAScan
ClamAV 0.91.2 2007.12.06 PUA.Packed.Expressor
DrWeb 4.44.0.09170 2007.12.06 Trojan.DownLoader.15237
eSafe 7.0.15.0 2007.12.06 Suspicious File[/B]
eTrust-Vet 31.3.5356 2007.12.06 -
Ewido 4.0 2007.12.06 -
[B]FileAdvisor 1 2007.12.06 High threat detected
Fortinet 3.14.0.0 2007.12.06 PossibleThreat
F-Prot 4.4.2.54 2007.12.05 W32/Downldr2.URL[/B]
F-Secure 6.70.13030.0 2007.12.06 -
[B]Ikarus T3.1.1.12 2007.12.06 Backdoor.Win32.Hupigon.mrv[/B]
Kaspersky 7.0.0.125 2007.12.06 -
[B]McAfee 5179 2007.12.06 New Malware.dq
Microsoft 1.3007 2007.12.06 Worm:Win32/VB
NOD32v2 2707 2007.12.06 Win32/TrojanDownloader.VB.ANF[/B]
Norman 5.80.02 2007.12.06 -
[B]Panda 9.0.0.4 2007.12.06 Trj/QQPass.QV
Prevx1 V2 2007.12.06 Heuristic: Suspicious File With Code [/B][B]Injection Technology[/B]
[B]Rising 20.21.32.00 2007.12.06 Trojan.DL.VB.dpl
Sophos 4.24.0 2007.12.06 Mal/Behav-160
Sunbelt 2.2.907.0 2007.12.05 Trojan-Downloader.Vb.ANF
Symantec 10 2007.12.06 W32.SillyFDC[/B]
TheHacker 6.2.9.151 2007.12.05 -
[B]VBA32 3.12.2.5 2007.12.05 Trojan-Downloader.Win32.VB.anf
VirusBuster 4.3.26:9 2007.12.06 Packed/eXPressor
Webwasher-Gateway 6.6.2 2007.12.06 Trojan.Dldr.Vb.ANF.104[/B][/code]

Дополнительная информация
File size: 22044 bytes
MD5: 477f7953da0469d65efd95f84e4bb0dc
SHA1: 30f811ac2fc90ea2d59fa8d20e44fa11f8fa9c2b
PEiD: eXPressor v1.3 -> CGSoftLabs (h)
Bit9 info: [url]http://fileadvisor.bit9.com/services/extinfo.aspx?md5=477f7953da0469d65efd95f84e4bb0dc[/url]
packers: Expressor
Prevx info: [url]http://fileinfo.prevx.com/fileinfo.asp?PX5=523D110E1CAD74D056CE0031D8FA6C00093D066E[/url]
07.12.2007, 08:06
zorro84

Файл PICT0038470.zip получен 2007.12.07 05:47:24 (CET)
Результат: 8/32 (25%)

Антивирус Версия Обновление Результат
AhnLab-V3 2007.12.7.0 2007.12.07 -
AntiVir 7.6.0.34 2007.12.06 -
Authentium 4.93.8 2007.12.06 -
Avast 4.7.1098.0 2007.12.06 -
[b]AVG 7.5.0.503 2007.12.07 Obfustat.AARZ[/b]
[b]BitDefender 7.2 2007.12.07 Trojan.Downloader.Agent.YVP[/b]
CAT-QuickHeal 9.00 2007.12.06 -
ClamAV 0.91.2 2007.12.07 -
[b]DrWeb 4.44.0.09170 2007.12.06 Trojan.MulDrop.9716[/b]
eSafe 7.0.15.0 2007.12.06 -
eTrust-Vet 31.3.5358 2007.12.07 -
Ewido 4.0 2007.12.06 -
FileAdvisor 1 2007.12.07 -
Fortinet 3.14.0.0 2007.12.06 -
F-Prot 4.4.2.54 2007.12.06 -
[b]F-Secure 6.70.13030.0 2007.12.07 Trojan-PSW.Win32.LdPinch.eim[/b]
Ikarus T3.1.1.12 2007.12.07 -
[b]Kaspersky 7.0.0.125 2007.12.07 Trojan-PSW.Win32.LdPinch.eim[/b]
McAfee 5179 2007.12.06 -
Microsoft 1.3007 2007.12.07 -
NOD32v2 2708 2007.12.07 -
[b]Norman 5.80.02 2007.12.06 W32/Malware.AHSU.dropper[/b]
Panda 9.0.0.4 2007.12.06 -
Prevx1 V2 2007.12.07 -
Rising 20.21.32.00 2007.12.06 -
Sophos 4.24.0 2007.12.07 -
Sunbelt 2.2.907.0 2007.12.07 -
Symantec 10 2007.12.07 -
TheHacker 6.2.9.152 2007.12.07 -
[b]VBA32 3.12.2.5 2007.12.05 MalwareScope.Trojan-PSW.Pinch.1[/b]
[b]VirusBuster 4.3.26:9 2007.12.06 Trojan.DR.LdPinch.CCL[/b]
Webwasher-Gateway 6.6.2 2007.12.06 -

Дополнительная информация
File size: 92275 bytes
MD5: bfb62a7151a4aa1cb5aaeab569858e03
SHA1: fc3bbbce71e60d508c5577a70e37c8a505f25166
13.12.2007, 09:22
santy

File ntos.exe received on 12.13.2007 07:05:07 (CET)
Result: 8/32 (25%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
[b]AntiVir - - TR/Crypt.XPACK.Gen[/b]
Authentium - - -
Avast - - -
[b]AVG - - Pakes_c.GD[/b]
[b]BitDefender - - Trojan.Spy.Agent.NLL[/b]
CAT-QuickHeal - - -
ClamAV - - -
[b]DrWeb - - Trojan.Proxy.2071[/b]
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
[b]Panda - - Trj/Wsnpoem.NI[/b]
Prevx1 - - -
Rising - - -
Sophos - - -
[b]Sunbelt - - VIPRE.Suspicious[/b]
Symantec - - -
TheHacker - - -
VBA32 - - -
[b]VirusBuster - - TrojanSpy.ZBot.Gen!Pac.3[/b]
[b]Webwasher-Gateway - - Trojan.Crypt.XPACK.Gen[/b]
Additional information
MD5: e46d907a7bc952e60910dec6c906d443
13.12.2007, 11:07
Shu_b

другой ntos.exe

[CODE]received on [B]12.11.2007 13:19:22[/B] (CET)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
[B]Symantec - - Infostealer.Notos!gen[/B]
TheHacker - - -
VBA32 - - -
VirusBuster - - -
[B]Webwasher-Gateway - - Virus.Win32.FileInfector.gen [/B](suspicious)
Additional information
MD5: ec43197aed08fa5ade6f3853341a96fe[/CODE]
прошло два дня...[CODE]received on [B]12.13.2007 08:54:08[/B] (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.13.10 2007.12.12 -
[B]AntiVir 7.6.0.40 2007.12.13 TR/Rkit.WsnPoem[/B]
Authentium 4.93.8 2007.12.13 -
Avast 4.7.1098.0 2007.12.12 -
[B]AVG 7.5.0.503 2007.12.12 Pakes_c.FU[/B]
BitDefender 7.2 2007.12.13 -
[B]CAT-QuickHeal 9.00 2007.12.12 TrojanSpy.Zbot.ej[/B]
ClamAV 0.91.2 2007.12.12 -
DrWeb 4.44.0.09170 2007.12.12 -
eSafe 7.0.15.0 2007.12.12 -
eTrust-Vet 31.3.5373 2007.12.13 -
Ewido 4.0 2007.12.12 -
FileAdvisor 1 2007.12.13 -
[B]Fortinet 3.14.0.0 2007.12.13 Spy/Zbot[/B]
F-Prot 4.4.2.54 2007.12.12 -
[B]F-Secure 6.70.13030.0 2007.12.13 Trojan-Spy.Win32.Zbot.ej
Ikarus T3.1.1.12 2007.12.13 Trojan-Spy.Win32.Zbot.ej
Kaspersky 7.0.0.125 2007.12.13 Trojan-Spy.Win32.Zbot.ej[/B]
McAfee 5184 2007.12.12 -
Microsoft 1.3007 2007.12.13 -
NOD32v2 2720 2007.12.12 -
Norman 5.80.02 2007.12.12 -
[B]Panda 9.0.0.4 2007.12.12 Trj/Wsnpoem.NI[/B]
Prevx1 V2 2007.12.13 -
Rising 20.22.30.00 2007.12.13 -
Sophos 4.24.0 2007.12.13 -
Sunbelt 2.2.907.0 2007.12.13 -
[B]Symantec 10 2007.12.13 Infostealer.Notos!gen
TheHacker 6.2.9.157 2007.12.12 Trojan/Spy.Zbot.ej[/B]
VBA32 3.12.2.5 2007.12.10 -
VirusBuster 4.3.26:9 2007.12.12 -
[B]Webwasher-Gateway 6.6.2 2007.12.13 Trojan.Rkit.WsnPoem[/B]
Additional information
File size: 436224 bytes
MD5: ec43197aed08fa5ade6f3853341a96fe[/CODE]
14.12.2007, 13:53
Shu_b

эвона как бывает....

[CODE]File avz00004.dta received on [B]12.12.2007 15:43:24 [/B](CET)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
[B]DrWeb - - Trojan.PWS.Mailspy.origin[/B]
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -
Additional information
MD5: dbdc82a265e16e784d0a4e97ce515e01[/CODE]
прошло два дня...[CODE]File avz00004.dta received on [B]12.14.2007 07:27:01[/B] (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.14.10 2007.12.13 -
AntiVir 7.6.0.45 2007.12.13 -
Authentium 4.93.8 2007.12.13 -
Avast 4.7.1098.0 2007.12.13 -
AVG 7.5.0.503 2007.12.13 -
BitDefender 7.2 2007.12.14 -
CAT-QuickHeal 9.00 2007.12.13 -
ClamAV 0.91.2 2007.12.13 -
[B]DrWeb 4.44.0.09170 2007.12.13 Trojan.PWS.Mailspy.origin[/B]
eSafe 7.0.15.0 2007.12.13 -
eTrust-Vet 31.3.5374 2007.12.13 -
Ewido 4.0 2007.12.13 -
FileAdvisor 1 2007.12.14 -
Fortinet 3.14.0.0 2007.12.14 -
F-Prot 4.4.2.54 2007.12.13 -
F-Secure 6.70.13030.0 2007.12.14 -
Ikarus T3.1.1.15 2007.12.14 -
[B]Kaspersky 7.0.0.125 2007.12.14 Trojan-Proxy.Win32.Agent.ul[/B]
McAfee 5185 2007.12.13 -
Microsoft 1.3109 2007.12.14 -
NOD32v2 2722 2007.12.14 -
Norman 5.80.02 2007.12.13 -
Panda 9.0.0.4 2007.12.14 -
Prevx1 V2 2007.12.14 -
Rising 20.22.40.00 2007.12.14 -
Sophos 4.24.0 2007.12.14 -
Sunbelt 2.2.907.0 2007.12.14 -
Symantec 10 2007.12.14 -
TheHacker 6.2.9.159 2007.12.14 -
VBA32 3.12.2.5 2007.12.14 -
VirusBuster 4.3.26:9 2007.12.13 -
Webwasher-Gateway 6.6.2 2007.12.14 -
Additional information
File size: 241664 bytes
MD5: dbdc82a265e16e784d0a4e97ce515e01
SHA1: 9c990d0b3d3078fa4b40f8783ef431bad3429e54
PEiD: -[/CODE]

[size="1"][color="#666686"][B][I]Добавлено через 4 часа 21 минуту[/I][/B][/color][/size]

t-15259
Вроде пара, а детектируются совсем не одинаково...
[CODE]File vp7vmcia.exe received on 12.14.2007 11:43:10 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.14.11 2007.12.14 -
AntiVir 7.6.0.45 2007.12.14 -
Authentium 4.93.8 2007.12.13 -
[B]Avast 4.7.1098.0 2007.12.13 Win32:Warezov-CLK
AVG 7.5.0.503 2007.12.13 I-Worm/Stration
BitDefender 7.2 2007.12.14 Win32.Warezov.ADV@mm
CAT-QuickHeal 9.00 2007.12.13 (Suspicious) - DNAScan[/B]
ClamAV 0.91.2 2007.12.14 -
[B]DrWeb 4.44.0.09170 2007.12.14 Win32.HLLM.Limar
eSafe 7.0.15.0 2007.12.13 Suspicious File[/B]
eTrust-Vet 31.3.5375 2007.12.14 -
Ewido 4.0 2007.12.13 -
FileAdvisor 1 2007.12.14 -
Fortinet 3.14.0.0 2007.12.14 -
[B]F-Prot 4.4.2.54 2007.12.13 W32/Heuristic-162!Eldorado
F-Secure 6.70.13030.0 2007.12.14 W32/Viking.EQ
Ikarus T3.1.1.15 2007.12.14 Backdoor.Win32.Rbot.AJU
Kaspersky 7.0.0.125 2007.12.14 Email-Worm.Win32.Warezov.gen
McAfee 5185 2007.12.13 New Malware.n[/B]
Microsoft 1.3109 2007.12.14 -
[B]NOD32v2 2722 2007.12.14 a variant of Win32/Stration.ABD
Norman 5.80.02 2007.12.13 W32/Suspicious_U.gen
Panda 9.0.0.4 2007.12.14 W32/Spamta.ADQ.worm[/B]
Prevx1 V2 2007.12.14 -
[B]Rising 20.22.41.00 2007.12.14 Worm.Mail.Warezov.cj
Sophos 4.24.0 2007.12.14 Mal/EncPk-BW
Sunbelt 2.2.907.0 2007.12.14 VIPRE.Suspicious[/B]
Symantec 10 2007.12.14 -
[B]TheHacker 6.2.9.159 2007.12.14 W32/Behav-Heuristic-060[/B]
VBA32 3.12.2.5 2007.12.14 -
[B]VirusBuster 4.3.26:9 2007.12.13 Packed/Upack
Webwasher-Gateway 6.6.2 2007.12.14 Packer.UPACK[/B]
Additional information
File size: 93769 bytes
MD5: 34eff679d5d09d0e466dfb86d62f486f
SHA1: f1a3ebd40ae65a534ce9186b3490acedbe77fb18
PEiD: -
packers: PE_Patch, UPack[/CODE][CODE]File vp7vmcia.dll received on 12.14.2007 11:43:21 (CET)
Antivirus Version Last Update Result
[B]AhnLab-V3 2007.12.14.11 2007.12.14 Win32/Stration.worm.Gen[/B]
AntiVir 7.6.0.45 2007.12.14 -
[B]Authentium 4.93.8 2007.12.13 W32/Warezov.gen4
Avast 4.7.1098.0 2007.12.13 Win32:Warezov-CRX
AVG 7.5.0.503 2007.12.13 I-Worm/Stration
BitDefender 7.2 2007.12.14 Generic.Stration.BF196041[/B]
CAT-QuickHeal 9.00 2007.12.13 -
ClamAV 0.91.2 2007.12.14 -
[B]DrWeb 4.44.0.09170 2007.12.14 Win32.HLLM.Limar
eSafe 7.0.15.0 2007.12.13 Suspicious File[/B]
eTrust-Vet 31.3.5375 2007.12.14 -
Ewido 4.0 2007.12.13 -
FileAdvisor 1 2007.12.14 -
Fortinet 3.14.0.0 2007.12.14 -
[B]F-Prot 4.4.2.54 2007.12.13 W32/Warezov.gen4[/B]
F-Secure 6.70.13030.0 2007.12.14 -
Ikarus T3.1.1.15 2007.12.14 -
Kaspersky 7.0.0.125 2007.12.14 -
McAfee 5185 2007.12.13 -
[B]Microsoft 1.3109 2007.12.14 Trojan:Win32/Stration.F!dll[/B]
NOD32v2 2722 2007.12.14 -
Norman 5.80.02 2007.12.13 -
Panda 9.0.0.4 2007.12.14 -
Prevx1 V2 2007.12.14 -
Rising 20.22.41.00 2007.12.14 -
[B]Sophos 4.24.0 2007.12.14 W32/Strati-Gen[/B]
Sunbelt 2.2.907.0 2007.12.14 -
Symantec 10 2007.12.14 -
TheHacker 6.2.9.159 2007.12.14 -
VBA32 3.12.2.5 2007.12.14 -
VirusBuster 4.3.26:9 2007.12.13 -
Webwasher-Gateway 6.6.2 2007.12.14 -
Additional information
File size: 118784 bytes
MD5: c46a64349de797bd24a689ee0b774af6
SHA1: e2683a98a513aabc92bf5a4a294d4be40586109a
PEiD: -[/CODE]

t-15272[CODE]File avz00004__1_._ta received on 12.14.2007 14:28:19 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.14.11 2007.12.14 -
AntiVir 7.6.0.45 2007.12.14 -
Authentium 4.93.8 2007.12.13 -
Avast 4.7.1098.0 2007.12.13 -
AVG 7.5.0.503 2007.12.14 -
BitDefender 7.2 2007.12.14 -
CAT-QuickHeal 9.00 2007.12.13 -
ClamAV 0.91.2 2007.12.14 -
[B]DrWeb 4.44.0.09170 2007.12.14 Trojan.BhoSpy.origin
eSafe 7.0.15.0 2007.12.13 suspicious Trojan/Worm[/B]
eTrust-Vet 31.3.5375 2007.12.14 -
Ewido 4.0 2007.12.14 -
FileAdvisor 1 2007.12.14 -
Fortinet 3.14.0.0 2007.12.14 -
F-Prot 4.4.2.54 2007.12.13 -
F-Secure 6.70.13030.0 2007.12.14 -
[B]Ikarus T3.1.1.15 2007.12.14 Trojan.Win32.BHO.d[/B]
Kaspersky 7.0.0.125 2007.12.14 -
McAfee 5185 2007.12.13 -
[B]Microsoft 1.3109 2007.12.14 Trojan:Win32/Adclicker.AO[/B]
NOD32v2 2723 2007.12.14 -
Norman 5.80.02 2007.12.13 -
Panda 9.0.0.4 2007.12.14 -
Prevx1 V2 2007.12.14 -
Rising 20.22.41.00 2007.12.14 -
Sophos 4.24.0 2007.12.14 -
Sunbelt 2.2.907.0 2007.12.14 -
[B]Symantec 10 2007.12.14 Trojan.Adclicker[/B]
TheHacker 6.2.9.159 2007.12.14 -
VBA32 3.12.2.5 2007.12.14 -
VirusBuster 4.3.26:9 2007.12.13 -
Webwasher-Gateway 6.0.1 2007.12.14 -
Additional information
File size: 25600 bytes
MD5: bc4efbf73eafc728fe58fc2636c5b87a
SHA1: bd9e8c3a1ef447aa38d16746c3b47f95c14de725
PEiD: -
packers: UPX[/CODE][CODE]File avz00005__1_._ta received on 12.14.2007 14:30:27 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.14.11 2007.12.14 -
AntiVir 7.6.0.45 2007.12.14 -
Authentium 4.93.8 2007.12.13 -
[B]Avast 4.7.1098.0 2007.12.13 Win32:Trojan-gen {Other}[/B]
AVG 7.5.0.503 2007.12.14 -
[B]BitDefender 7.2 2007.12.14 Trojan.Agent.AFJP[/B]
CAT-QuickHeal 9.00 2007.12.13 -
ClamAV 0.91.2 2007.12.14 -
[B]DrWeb 4.44.0.09170 2007.12.14 Trojan.Inject.363[/B]
eSafe 7.0.15.0 2007.12.13 -
eTrust-Vet 31.3.5375 2007.12.14 -
Ewido 4.0 2007.12.14 -
[B]FileAdvisor 1 2007.12.14 High threat detected[/B]
Fortinet 3.14.0.0 2007.12.14 -
F-Prot 4.4.2.54 2007.12.13 -
F-Secure 6.70.13030.0 2007.12.14 -
[B]Ikarus T3.1.1.15 2007.12.14 Virus.Win32.Trojan[/B]
Kaspersky 7.0.0.125 2007.12.14 -
McAfee 5185 2007.12.13 -
Microsoft 1.3109 2007.12.14 -
NOD32v2 2723 2007.12.14 -
Norman 5.80.02 2007.12.13 -
[B]Panda 9.0.0.4 2007.12.14 Trj/Inject.O[/B]
Prevx1 V2 2007.12.14 -
[B]Rising 20.22.41.00 2007.12.14 Trojan.Win32.Inject.dg[/B]
Sophos 4.24.0 2007.12.14 -
Sunbelt 2.2.907.0 2007.12.14 -
[B]Symantec 10 2007.12.14 Trojan.Farfli[/B]
TheHacker 6.2.9.159 2007.12.14 -
VBA32 3.12.2.5 2007.12.14 -
VirusBuster 4.3.26:9 2007.12.13 -
Webwasher-Gateway 6.0.1 2007.12.14 -
Additional information
File size: 3072 bytes
MD5: 8651fab023f6fbd1b02428ce2889e9e4[/CODE]
16.12.2007, 18:18
rubin

Файл avz00001.dta получен 2007.12.16 16:11:03 (CET)
[code]AhnLab-V3 2007.12.15.10 2007.12.14 -
AntiVir 7.6.0.45 2007.12.16 TR/Dldr.Delf.djm
Authentium 4.93.8 2007.12.16 -
Avast 4.7.1098.0 2007.12.16 -
AVG 7.5.0.503 2007.12.16 Downloader.Generic6.ZTJ
BitDefender 7.2 2007.12.16 -
CAT-QuickHeal 9.00 2007.12.15 -
ClamAV 0.91.2 2007.12.16 -
DrWeb 4.44.0.09170 2007.12.16 -
eSafe 7.0.15.0 2007.12.13 -
eTrust-Vet 31.3.5377 2007.12.15 -
Ewido 4.0 2007.12.16 -
FileAdvisor 1 2007.12.16 -
Fortinet 3.14.0.0 2007.12.16 -
F-Prot 4.4.2.54 2007.12.16 W32/Backdoor2.ATN
F-Secure 6.70.13030.0 2007.12.16 Trojan-Downloader.Win32.Delf.djm
Ikarus T3.1.1.15 2007.12.16 Trojan-Downloader.Win32.Delf.djm
Kaspersky 7.0.0.125 2007.12.16 Trojan-Downloader.Win32.Delf.djm
McAfee 5186 2007.12.14 -
Microsoft 1.3109 2007.12.16 Trojan:Win32/Delflob.D
NOD32v2 2723 2007.12.14 Win32/Adware.IeDefender
Norman 5.80.02 2007.12.13 -
Panda 9.0.0.4 2007.12.16 Adware/VideoDecoder
Prevx1 V2 2007.12.16 -
Rising 20.22.41.00 2007.12.14 -
Sophos 4.24.0 2007.12.15 Mal/Emogen-N
Sunbelt 2.2.907.0 2007.12.15 -
Symantec 10 2007.12.15 -
TheHacker 6.2.9.160 2007.12.14 -
VBA32 3.12.2.5 2007.12.15 -
VirusBuster 4.3.26:9 2007.12.16 -
Webwasher-Gateway 6.6.2 2007.12.16 -

Дополнительная информация
File size: 222208 bytes
MD5: c7c05b733e1db6c2ee9d847b7296a0ab
SHA1: 368759f675f0066375e4fd0b45309ddde8afabc4
PEiD: ASPack v2.12 -> Alexey Solodovnikov
packers: ASPack[/code]
17.12.2007, 10:43
Shu_b

t-15367[CODE]File svchost.exe received on 12.17.2007 06:13:11 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.17.10 2007.12.17 -
[B]AntiVir 7.6.0.45 2007.12.16 TR/Rootkit.Gen[/B]
Authentium 4.93.8 2007.12.16 -
Avast 4.7.1098.0 2007.12.16 -
AVG 7.5.0.503 2007.12.16 -
BitDefender 7.2 2007.12.17 -
CAT-QuickHeal 9.00 2007.12.15 -
ClamAV 0.91.2 2007.12.17 -
[B]DrWeb 4.44.0.09170 2007.12.16 BackDoor.PifPaf.origin[/B]
eSafe 7.0.15.0 2007.12.16 -
[B]eTrust-Vet 31.3.5377 2007.12.15 Win32/Unknown[/B]
Ewido 4.0 2007.12.16 -
FileAdvisor 1 2007.12.17 -
Fortinet 3.14.0.0 2007.12.17 -
F-Prot 4.4.2.54 2007.12.17 -
[B]F-Secure 6.70.13030.0 2007.12.17 Backdoor.Win32.IRCBot.avf[/B]
Ikarus T3.1.1.15 2007.12.17 -
[B]Kaspersky 7.0.0.125 2007.12.17 Backdoor.Win32.IRCBot.avf[/B]
McAfee 5186 2007.12.14 -
Microsoft 1.3109 2007.12.17 -
NOD32v2 2723 2007.12.14 -
Norman 5.80.02 2007.12.13 -
[B]Panda 9.0.0.4 2007.12.16 Suspicious file
Prevx1 V2 2007.12.17 Heuristic: Suspicious Self Modifying File
Rising 20.22.41.00 2007.12.14 Backdoor.Win32.IRCbot.anh
Sophos 4.24.0 2007.12.16 Mal/Behav-059[/B]
Sunbelt 2.2.907.0 2007.12.15 -
Symantec 10 2007.12.15 -
TheHacker 6.2.9.160 2007.12.14 -
VBA32 3.12.2.5 2007.12.15 -
VirusBuster 4.3.26:9 2007.12.16 -
[B]Webwasher-Gateway 6.6.2 2007.12.17 Trojan.Rootkit.Gen[/B]
Additional information
File size: 66560 bytes
MD5: 83ebab351e7a88e7b84863afc2b2e9fa[/CODE]

t-15357 кто знает руткита?[CODE]File vncbwxjt.dat received on 12.17.2007 08:21:30 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.17.10 2007.12.17 -
[B]AntiVir 7.6.0.45 2007.12.17 TR/Rootkit.Gen[/B]
Authentium 4.93.8 2007.12.16 -
Avast 4.7.1098.0 2007.12.16 -
AVG 7.5.0.503 2007.12.16 -
[B]BitDefender 7.2 2007.12.17 Trojan.Rootkit.Agent.NDW
CAT-QuickHeal 9.00 2007.12.15 Rootkit.Agent.ql[/B]
ClamAV 0.91.2 2007.12.17 -
[B]DrWeb 4.44.0.09170 2007.12.16 Trojan.NtRootKit.511[/B]
eSafe 7.0.15.0 2007.12.16 -
[B]eTrust-Vet 31.3.5377 2007.12.15 Win32/Kvol.Q[/B]
Ewido 4.0 2007.12.16 -
FileAdvisor 1 2007.12.17 -
Fortinet 3.14.0.0 2007.12.17 -
[B]F-Prot 4.4.2.54 2007.12.17 W32/Rootkit.AHL
F-Secure 6.70.13030.0 2007.12.17 Rootkit.Win32.Agent.ql
Ikarus T3.1.1.15 2007.12.17 Rootkit.Win32.Agent.ql
Kaspersky 7.0.0.125 2007.12.17 Rootkit.Win32.Agent.ql[/B]
McAfee 5186 2007.12.14 -
Microsoft 1.3109 2007.12.17 -
NOD32v2 2726 2007.12.17 -
Norman 5.80.02 2007.12.14 -
Panda 9.0.0.4 2007.12.16 -
[B]Prevx1 V2 2007.12.17 Win32.Rootkit.Gen[/B]
Rising 20.23.00.00 2007.12.17 -
Sophos 4.24.0 2007.12.16 -
Sunbelt 2.2.907.0 2007.12.15 -
Symantec 10 2007.12.17 -
TheHacker 6.2.9.160 2007.12.14 -
VBA32 3.12.2.5 2007.12.15 -
[B]VirusBuster 4.3.26:9 2007.12.16 Rootkit.Agent.XBM
Webwasher-Gateway 6.6.2 2007.12.17 Trojan.Rootkit.Gen[/B]
Additional information
File size: 19456 bytes
MD5: b0e801a834bd344fcb4c5f53fdf495a8
SHA1: ad7e31f0060490886ed0f2947080611c670c6764[/CODE]

[size="1"][color="#666686"][B][I]Добавлено через 2 часа 11 минут[/I][/B][/color][/size]

t-15251 Эвристик VBA радует, жаль что нечасто... [CODE]File avz00001.dta received on 12.17.2007 08:34:05 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.17.10 2007.12.17 -
AntiVir 7.6.0.45 2007.12.17 -
Authentium 4.93.8 2007.12.16 -
Avast 4.7.1098.0 2007.12.16 -
AVG 7.5.0.503 2007.12.16 -
BitDefender 7.2 2007.12.17 -
CAT-QuickHeal 9.00 2007.12.15 -
ClamAV 0.91.2 2007.12.17 -
DrWeb 4.44.0.09170 2007.12.16 -
eSafe 7.0.15.0 2007.12.16 -
eTrust-Vet 31.3.5377 2007.12.15 -
Ewido 4.0 2007.12.16 -
FileAdvisor 1 2007.12.17 -
Fortinet 3.14.0.0 2007.12.17 -
F-Prot 4.4.2.54 2007.12.17 -
[B]F-Secure 6.70.13030.0 2007.12.17 Trojan.Win32.Agent.dkf[/B]
Ikarus T3.1.1.15 2007.12.17 -
[B]Kaspersky 7.0.0.125 2007.12.17 Trojan.Win32.Agent.dkf[/B]
McAfee 5186 2007.12.14 -
Microsoft 1.3109 2007.12.17 -
NOD32v2 2726 2007.12.17 -
Norman 5.80.02 2007.12.14 -
Panda 9.0.0.4 2007.12.16 -
Prevx1 V2 2007.12.17 -
Rising 20.23.00.00 2007.12.17 -
Sophos 4.24.0 2007.12.16 -
Sunbelt 2.2.907.0 2007.12.15 -
Symantec 10 2007.12.17 -
TheHacker 6.2.9.160 2007.12.14 -
[B]VBA32 3.12.2.5 2007.12.15 suspected of Trojan-Downloader.PassAlert.2[/B]
VirusBuster 4.3.26:9 2007.12.16 -
Webwasher-Gateway 6.6.2 2007.12.17 -
Additional information
File size: 17920 bytes
MD5: 521a3ba1db0ee2caa04b85ea0ab27390[/CODE]

т-15300 [CODE]File avz00010.dta received on 12.17.2007 09:10:51 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.14.11 2007.12.14 -
[B]AntiVir 7.6.0.45 2007.12.17 TR/Dldr.Small.hdo.1[/B]
Authentium 4.93.8 2007.12.13 -
Avast 4.7.1098.0 2007.12.13 -
AVG 7.5.0.503 2007.12.13 -
BitDefender 7.2 2007.12.17 -
CAT-QuickHeal 9.00 2007.12.13 -
ClamAV 0.91.2 2007.12.14 -
DrWeb 4.44.0.09170 2007.12.14 -
eSafe 7.0.15.0 2007.12.13 -
[B]eTrust-Vet 31.3.5382 2007.12.17 Win32/Chepvil!generic[/B]
Ewido 4.0 2007.12.14 -
FileAdvisor 1 2007.12.17 -
Fortinet 3.14.0.0 2007.12.14 -
F-Prot 4.4.2.54 2007.12.13 -
[B]F-Secure 6.70.13030.0 2007.12.17 Trojan-Downloader.Win32.Small.hdo[/B]
Ikarus T3.1.1.15 2007.12.14 -
[B]Kaspersky 7.0.0.125 2007.12.17 Trojan-Downloader.Win32.Small.hdo[/B]
McAfee 5185 2007.12.13 -
Microsoft 1.3109 2007.12.14 -
NOD32v2 2726 2007.12.17 -
[B]Norman 5.80.02 2007.12.14 W32/Malware[/B]
Panda 9.0.0.4 2007.12.14 -
Prevx1 V2 2007.12.17 -
Rising 20.22.41.00 2007.12.14 -
Sophos 4.24.0 2007.12.17 -
Sunbelt 2.2.907.0 2007.12.14 -
Symantec 10 2007.12.17 -
TheHacker 6.2.9.159 2007.12.14 -
VBA32 3.12.2.5 2007.12.14 -
VirusBuster 4.3.26:9 2007.12.13 -
[B]Webwasher-Gateway 6.0.1 2007.12.17 Trojan.Dldr.Small.hdo.1[/B]
Additional information
File size: 8704 bytes
MD5: 6546cdedb878e65ff6274327d92309cd[/CODE]
18.12.2007, 15:08
rubin

Файл avz00001.dta получен 2007.12.18 12:43:29 (CET)
[code]AhnLab-V3 2007.12.18.11 2007.12.18 Win-Trojan/Agent.677888
AntiVir 7.6.0.45 2007.12.18 -
Authentium 4.93.8 2007.12.18 -
Avast 4.7.1098.0 2007.12.17 -
AVG 7.5.0.503 2007.12.17 -
BitDefender 7.2 2007.12.18 BehavesLike:Trojan.ShellStartup
CAT-QuickHeal 9.00 2007.12.17 -
ClamAV 0.91.2 2007.12.18 -
DrWeb 4.44.0.09170 2007.12.18 -
eSafe 7.0.15.0 2007.12.17 -
eTrust-Vet 31.3.5385 2007.12.18 -
Ewido 4.0 2007.12.18 -
FileAdvisor 1 2007.12.18 -
Fortinet 3.14.0.0 2007.12.18 -
F-Prot 4.4.2.54 2007.12.18 -
F-Secure 6.70.13030.0 2007.12.18 -
Ikarus T3.1.1.15 2007.12.18 BehavesLikeTrojan.ShellStartup
Kaspersky 7.0.0.125 2007.12.18 Trojan-Clicker.Win32.Agent.op
McAfee 5187 2007.12.17 -
Microsoft 1.3109 2007.12.18 -
NOD32v2 2729 2007.12.18 -
Norman 5.80.02 2007.12.17 -
Panda 9.0.0.4 2007.12.18 -
Prevx1 V2 2007.12.18 -
Rising 20.23.12.00 2007.12.18 -
Sophos 4.24.0 2007.12.18 -
Sunbelt 2.2.907.0 2007.12.18 -
Symantec 10 2007.12.18 -
TheHacker 6.2.9.162 2007.12.17 -
VBA32 3.12.2.5 2007.12.17 suspected of Embedded.Trojan.Win32.ViniX
VirusBuster 4.3.26:9 2007.12.17 -
Webwasher-Gateway 6.0.1 2007.12.18 -[/code]

Дополнительная информация
File size: 687616 bytes
MD5: 03c1bbbc57e9b85b448e36541cb9f46d
SHA1: 9d8206da74f1bde05946c7ee0a8c165df9b31eae
PEiD: Armadillo v1.71
18.12.2007, 18:06
Макcим

Файл avz00001.dta получен 2007.12.18 15:53:45 (CET)
[QUOTE]AhnLab-V3 2007.12.18.11 2007.12.18 -
AntiVir 7.6.0.45 2007.12.18 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2007.12.18 -
Avast 4.7.1098.0 2007.12.17 Win32:Kbot-D
AVG 7.5.0.503 2007.12.17 SHeur.SHY
BitDefender 7.2 2007.12.18 Trojan.AVKiller.AW
CAT-QuickHeal 9.00 2007.12.17 (Suspicious) - DNAScan
ClamAV 0.91.2 2007.12.18 -
DrWeb 4.44.0.09170 2007.12.18 Trojan.MulDrop.8347
eSafe 7.0.15.0 2007.12.17 Suspicious File
eTrust-Vet 31.3.5385 2007.12.18 -
Ewido 4.0 2007.12.18 -
FileAdvisor 1 2007.12.18 High threat detected
Fortinet 3.14.0.0 2007.12.18 -
F-Prot 4.4.2.54 2007.12.18 -
F-Secure 6.70.13030.0 2007.12.18 -
Ikarus T3.1.1.15 2007.12.18 Backdoor.Win32.Kbot.aq
Kaspersky 7.0.0.125 2007.12.18 -
McAfee 5187 2007.12.17 Tcad-Crypted
Microsoft 1.3109 2007.12.18 TrojanDownloader:Win32/Small.gen!AAM
NOD32v2 2730 2007.12.18 -
Norman 5.80.02 2007.12.17 -
Panda 9.0.0.4 2007.12.18 Suspicious file
Prevx1 V2 2007.12.18 -
Rising 20.23.12.00 2007.12.18 Trojan.Win32.Agent.yfx
Sophos 4.24.0 2007.12.18 Mal/Basine-C
Sunbelt 2.2.907.0 2007.12.18 -
Symantec 10 2007.12.18 Backdoor.Trojan
TheHacker 6.2.9.162 2007.12.17 -
VBA32 3.12.2.5 2007.12.17 Trojan.MulDrop.8347
VirusBuster 4.3.26:9 2007.12.17 Trojan.DR.Dirat.Gen
Webwasher-Gateway 6.6.2 2007.12.18 Trojan.Crypt.XPACK.Gen[/QUOTE]Дополнительная информация
File size: 12868 bytes
MD5: 9d537c85b5071a82695474ca45621822
SHA1: 9f6b2251125a4751f593ad693b564470839d48c5
PEiD: BlackEnergy DDoS Bot Crypter
Bit9 info: [url]http://fileadvisor.bit9.com/services/extinfo.aspx?md5=9d537c85b5071a82695474ca45621822[/url]
18.12.2007, 21:10
rubin

\com\lsass.exe
Файл avz00002.dta получен 2007.12.18 18:09:58 (CET)
[code]AhnLab-V3 2007.12.19.10 2007.12.18 -
AntiVir 7.6.0.45 2007.12.18 TR/Agent.dzc.1
Authentium 4.93.8 2007.12.18 -
Avast 4.7.1098.0 2007.12.17 -
AVG 7.5.0.503 2007.12.17 Downloader.Agent.14.R
BitDefender 7.2 2007.12.18 Trojan.Pinx.A
CAT-QuickHeal 9.00 2007.12.18 -
ClamAV 0.91.2 2007.12.18 -
DrWeb 4.44.0.09170 2007.12.18 -
eSafe 7.0.15.0 2007.12.18 -
eTrust-Vet 31.3.5385 2007.12.18 -
Ewido 4.0 2007.12.18 -
FileAdvisor 1 2007.12.18 -
Fortinet 3.14.0.0 2007.12.18 -
F-Prot 4.4.2.54 2007.12.18 W32/BadBHO.A.gen!Eldorado
F-Secure 6.70.13030.0 2007.12.18 -
Ikarus T3.1.1.15 2007.12.18 -
Kaspersky 7.0.0.125 2007.12.18 -
McAfee 5187 2007.12.17 W32/Fujacks
Microsoft 1.3109 2007.12.18 -
NOD32v2 2730 2007.12.18 -
Norman 5.80.02 2007.12.18 -
Panda 9.0.0.4 2007.12.18 Adware/BaiduBar
Prevx1 V2 2007.12.18 Heuristic: Suspicious File With Bad Child Associations
Rising 20.23.12.00 2007.12.18 Worm.Win32.DiskGen.ay
Sophos 4.24.0 2007.12.18 Mal/Packer
Sunbelt 2.2.907.0 2007.12.18 -
Symantec 10 2007.12.18 W32.Pagipef.I
TheHacker 6.2.9.163 2007.12.18 -
VBA32 3.12.2.5 2007.12.17 -
VirusBuster 4.3.26:9 2007.12.18 Packed/FSG
Webwasher-Gateway 6.6.2 2007.12.18 Trojan.Agent.dzc.1[/code]
Дополнительная информация
File size: 102400 bytes
MD5: 6d8280c2b3a8265efe330a50c7db8312
SHA1: c3e2a50cac6b58a7666c934420a381083a2ea899
PEiD: Armadillo v1.71
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=18F14A9000FC2FAB902901F2CF2EBE000ABE57DC[/url]
19.12.2007, 06:41
santy

File _msntsrv.exe_ received on 12.18.2007 22:24:34 (CET)
Result: 2/32 (6.25%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
[b]eSafe - - Suspicious File[/b]
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
[b]NOD32v2 - - a variant of Win32/Injector.F[/b]
Norman - - -
Panda - - -
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -
Additional information
MD5: 0c31e0783fda89f9f5daff4861fc1f86
19.12.2007, 21:15
rubin

t=15470
айл avz00002.dta получен 2007.12.19 19:07:31 (CET)
[code]AhnLab-V3 2007.12.20.10 2007.12.19 -
AntiVir 7.6.0.45 2007.12.19 -
Authentium 4.93.8 2007.12.19 -
Avast 4.7.1098.0 2007.12.18 -
AVG 7.5.0.503 2007.12.19 -
BitDefender 7.2 2007.12.19 -
CAT-QuickHeal 9.00 2007.12.19 -
ClamAV 0.91.2 2007.12.19 -
DrWeb 4.44.0.09170 2007.12.19 -
eSafe 7.0.15.0 2007.12.19 -
eTrust-Vet 31.3.5386 2007.12.18 -
Ewido 4.0 2007.12.19 -
FileAdvisor 1 2007.12.19 -
Fortinet 3.14.0.0 2007.12.19 -
F-Prot 4.4.2.54 2007.12.18 -
F-Secure 6.70.13030.0 2007.12.19 -
Ikarus T3.1.1.15 2007.12.19 -
[b]Kaspersky 7.0.0.125 2007.12.19 SpamTool.Win32.Agent.ee[/b]
McAfee 5189 2007.12.19 -
Microsoft 1.3109 2007.12.19 -
NOD32v2 2734 2007.12.19 -
Norman 5.80.02 2007.12.19 -
Panda 9.0.0.4 2007.12.18 -
[b]Prevx1 V2 2007.12.19 SystemPoser:Trojan-a[/b]
Rising 20.23.22.00 2007.12.19 -
Sophos 4.24.0 2007.12.19 -
Sunbelt 2.2.907.0 2007.12.19 -
Symantec 10 2007.12.19 -
TheHacker 6.2.9.165 2007.12.19 -
VBA32 3.12.2.5 2007.12.19 -
VirusBuster 4.3.26:9 2007.12.19 -
Webwasher-Gateway 6.6.2 2007.12.19 -[/code]
Дополнительная информация
File size: 33280 bytes
MD5: 182d10f02592b398575cb25bccc8ad8b
SHA1: e9eabd6d65b65a72056fdf9bd287333c17bd0495
PEiD: -
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=0B11785700275687820A007150F3520000CD71DE[/url]
19.12.2007, 21:58
XL

Файл ndisrd.sys получен 2007.12.19 19:45:21

[CODE]AhnLab-V3 2007.12.20.10 2007.12.19 -
[B]AntiVir 7.6.0.45 2007.12.19 TR/Dldr.Small.AQI.3[/B]
Authentium 4.93.8 2007.12.19 -
Avast 4.7.1098.0 2007.12.18 -
[B]AVG 7.5.0.503 2007.12.19 Generic5.LQN
BitDefender 7.2 2007.12.19 Trojan.Generic.61039[/B]
CAT-QuickHeal 9.00 2007.12.19 -
ClamAV 0.91.2 2007.12.19 -
DrWeb 4.44.0.09170 2007.12.19 -
eSafe 7.0.15.0 2007.12.19 -
eTrust-Vet 31.3.5387 2007.12.19 -
[B]Ewido 4.0 2007.12.19 Downloader.Small
FileAdvisor 1 2007.12.19 High threat detected
Fortinet 3.14.0.0 2007.12.19 W32/Small.AQI!tr
F-Prot 4.4.2.54 2007.12.18 W32/DownloaderX.UDM
F-Secure 6.70.13030.0 2007.12.19 W32/Smalltroj.LRX[/B]
Ikarus T3.1.1.15 2007.12.19 -
Kaspersky 7.0.0.125 2007.12.19 -
McAfee 5189 2007.12.19 -
[B]Microsoft 1.3109 2007.12.19 TrojanDownloader:Win32/Small[/B]
NOD32v2 2734 2007.12.19 -
[B]Norman 5.80.02 2007.12.19 W32/Smalltroj.LRX[/B]
Panda 9.0.0.4 2007.12.18 -
Prevx1 V2 2007.12.19 -
Rising 20.23.22.00 2007.12.19 -
Sophos 4.24.0 2007.12.19 -
Sunbelt 2.2.907.0 2007.12.19 -
Symantec 10 2007.12.19 -
TheHacker 6.2.9.165 2007.12.19 -
VBA32 3.12.2.5 2007.12.19 -
VirusBuster 4.3.26:9 2007.12.19 -
[B]Webwasher-Gateway 6.6.2 2007.12.19 Trojan.Dldr.Small.AQI.3[/B]

File size: 15338 bytes
MD5: 62d4ef02daab1e5a32a2dee911bbb8a2[/CODE]
22.12.2007, 12:38
Макcим

Файл avz00005.dta получен 2007.12.22 10:30:48 (CET)
[QUOTE]AhnLab-V3 2007.12.22.10 2007.12.21 [B][B]Win-Trojan/Conhook.121876.D
AntiVir 7.6.0.46 2007.12.21 TR/Dldr.ConHook.Gen[/B][/B]
Authentium 4.93.8 2007.12.21 -
[B]Avast 4.7.1098.0 2007.12.21 Win32:Adware-gen
AVG 7.5.0.503 2007.12.21 Adware Generic2.WJX
BitDefender 7.2 2007.12.22 Trojan.Conhook.Y
CAT-QuickHeal 9.00 2007.12.22 AdWare.BHO.nv (Not a Virus)
ClamAV 0.91.2 2007.12.22 Adware.BHO-181
DrWeb 4.44.0.09170 2007.12.21 Adware.Crew
eSafe 7.0.15.0 2007.12.20 Suspicious File[/B]
eTrust-Vet 31.3.5395 2007.12.21 -
Ewido 4.0 2007.12.21 -
FileAdvisor 1 2007.12.22 -
Fortinet 3.14.0.0 2007.12.22 -
[B]F-Prot 4.4.2.54 2007.12.21 W32/Heuristic-162!Eldorado[/B]
F-Secure 6.70.13030.0 2007.12.21 -
[B]Ikarus T3.1.1.15 2007.12.22 Trojan.Conhook.Y[/B]
Kaspersky 7.0.0.125 2007.12.22 -
McAfee 5191 2007.12.21 -
[B]Microsoft 1.3109 2007.12.22 VirTool:Win32/Obfuscator.Q
NOD32v2 2740 2007.12.21 Win32/Adware.BHO.V[/B]
Norman 5.80.02 2007.12.21 -
[B]Panda 9.0.0.4 2007.12.22 Suspicious file
Prevx1 V2 2007.12.22 Generic.Malware[/B]
Rising 20.23.51.00 2007.12.22 -
[B]Sophos 4.24.0 2007.12.22 Mal/BHO-C[/B]
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.22 -
TheHacker 6.2.9.167 2007.12.21 -
VBA32 3.12.2.5 2007.12.21 -
VirusBuster 4.3.26:9 2007.12.21 -
[B]Webwasher-Gateway 6.6.2 2007.12.22 Trojan.Dldr.ConHook.Gen[/B][/QUOTE]Дополнительная информация
File size: 121876 bytes
MD5: a4693d78511723681930fb2fc144e1b6
SHA1: de04b3a37b95f3a16f556b74124c521856a8d563
PEiD: -
packers: Morphine
packers: Morphine
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=68EC51D314B80545DCD30124EBFEEF006D771E7E[/url]
24.12.2007, 12:14
Shu_b

t-15578
[CODE]File jkklm.dll received on 12.24.2007 10:05:58 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.24.10 2007.12.24 -
[B]AntiVir 7.6.0.46 2007.12.24 TR/Agent.316512[/B]
Authentium 4.93.8 2007.12.23 -
Avast 4.7.1098.0 2007.12.23 -
[B]AVG 7.5.0.516 2007.12.23 BHO.CTB
BitDefender 7.2 2007.12.24 Trojan.Vundo.DRM[/B]
CAT-QuickHeal 9.00 2007.12.22 -
ClamAV 0.91.2 2007.12.24 -
DrWeb 4.44.0.09170 2007.12.24 -
eSafe 7.0.15.0 2007.12.23 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.23 -
FileAdvisor 1 2007.12.24 -
Fortinet 3.14.0.0 2007.12.24 -
[B]F-Prot 4.4.2.54 2007.12.23 W32/Virtumonde.G.gen!Eldorado
F-Secure 6.70.13030.0 2007.12.24 Vundo.gen49
Ikarus T3.1.1.15 2007.12.24 Trojan.Vundo.DRM[/B]
Kaspersky 7.0.0.125 2007.12.24 -
McAfee 5191 2007.12.21 -
[B]Microsoft 1.3109 2007.12.24 Trojan:Win32/Vundo.gen!A
[/B]NOD32v2 2744 2007.12.23 -
[B]Norman 5.80.02 2007.12.21 Vundo.gen49
Panda 9.0.0.4 2007.12.23 Spyware/Vundo
Prevx1 V2 2007.12.24 Rogue Antispyware:All Strains-All Variants
[/B]Rising 20.24.00.00 2007.12.24 -
Sophos 4.24.0 2007.12.24 -
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.24 -
TheHacker 6.2.9.168 2007.12.22 -
VBA32 3.12.2.5 2007.12.22 -
[B]VirusBuster 4.3.26:9 2007.12.23 Adware.Vundo.V.Gen
Webwasher-Gateway 6.6.2 2007.12.24 Trojan.Agent.316512
[/B]Additional information
File size: 316512 bytes
MD5: 03cb87e667cd31645b6f4256c4c6cbaa[/CODE][CODE]File eotfkuyf.dll received on 12.24.2007 10:05:44 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.24.10 2007.12.24 -
[B]AntiVir 7.6.0.46 2007.12.24 TR/Vundo.Gen
[/B]Authentium 4.93.8 2007.12.23 -
Avast 4.7.1098.0 2007.12.23 -
[B]AVG 7.5.0.516 2007.12.23 Obfustat.ADEL
[/B]BitDefender 7.2 2007.12.24 -
CAT-QuickHeal 9.00 2007.12.22 -
ClamAV 0.91.2 2007.12.24 -
[B]DrWeb 4.44.0.09170 2007.12.24 Trojan.Virtumod.251
eSafe 7.0.15.0 2007.12.23 Suspicious File
eTrust-Vet 31.3.5400 2007.12.24 Win32/Vundo.IX
[/B]Ewido 4.0 2007.12.23 -
FileAdvisor 1 2007.12.24 -
Fortinet 3.14.0.0 2007.12.24 -
[B]F-Prot 4.4.2.54 2007.12.23 W32/Virtumonde.G.gen!Eldorado
[/B]F-Secure 6.70.13030.0 2007.12.24 -
Ikarus T3.1.1.15 2007.12.24 -
Kaspersky 7.0.0.125 2007.12.24 -
McAfee 5191 2007.12.21 -
[B]Microsoft 1.3109 2007.12.24 Trojan:Win32/Vundo.gen!A
[/B]NOD32v2 2744 2007.12.23 -
Norman 5.80.02 2007.12.21 -
[B]Panda 9.0.0.4 2007.12.23 Spyware/Virtumonde
[/B]Prevx1 V2 2007.12.24 -
Rising 20.24.00.00 2007.12.24 -
[B]Sophos 4.24.0 2007.12.24 Troj/Virtum-Gen
[/B]Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.24 -
[B]TheHacker 6.2.9.168 2007.12.22 Adware/SecToolBar.y
[/B]VBA32 3.12.2.5 2007.12.22 -
[B]VirusBuster 4.3.26:9 2007.12.23 Adware.Vundo.V.Gen
Webwasher-Gateway 6.6.2 2007.12.24 Trojan.Vundo.Gen
[/B]Additional information
File size: 165472 bytes
MD5: 0e0691c9faf2a69a96d44ac24bb281c3[/CODE]
24.12.2007, 17:15
vlad179

Файл avz00001.dta получен 2007.12.24 12:00:39 (CET)

Антивирус Версия Обновление Результат
AhnLab-V3 2007.12.24.10 2007.12.24 -
AntiVir 7.6.0.46 2007.12.24 [B]DR/Delphi.Gen[/B]
Authentium 4.93.8 2007.12.23 -
Avast 4.7.1098.0 2007.12.24 -
AVG 7.5.0.516 2007.12.23 [B]Agent.MCC[/B]
BitDefender 7.2 2007.12.24 [B]Trojan.PSW.LdPinch.AKX[/B]
CAT-QuickHeal 9.00 2007.12.22 -
ClamAV 0.91.2 2007.12.24 -
DrWeb 4.44.0.09170 2007.12.24 -
eSafe 7.0.15.0 2007.12.23 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.24 -
FileAdvisor 1 2007.12.24 -
Fortinet 3.14.0.0 2007.12.24 [B]W32/Dropper.DMW!tr[/B]
F-Prot 4.4.2.54 2007.12.23 -
F-Secure 6.70.13030.0 2007.12.24 [B]Trojan.Win32.Agent.dmw[/B]
Ikarus T3.1.1.15 2007.12.24 [B]Virus.Win32.Zapchast.DA[/B]
Kaspersky 7.0.0.125 2007.12.24 [B]Trojan.Win32.Agent.dmw[/B]
McAfee 5191 2007.12.21 -
Microsoft 1.3109 2007.12.24 [B]VirTool:Win32/DelfInject.gen!AA[/B]
NOD32v2 2745 2007.12.24 -
Norman 5.80.02 2007.12.24 [B]LdPinch.STT[/B]
Panda 9.0.0.4 2007.12.23 -
Prevx1 V2 2007.12.24 -
Rising 20.24.01.00 2007.12.24 [B]Trojan.DL.Win32.Agent.bxw[/B]
Sophos 4.24.0 2007.12.24 [B]Mal/Dropper-T[/B]
Sunbelt 2.2.907.0 2007.12.21 -
TheHacker 6.2.9.168 2007.12.22 [B]Trojan/Agent.dmw[/B]
VBA32 3.12.2.5 2007.12.22 -
VirusBuster 4.3.26:9 2007.12.23 -
Webwasher-Gateway 6.6.2 2007.12.24 [B]Trojan.Dropper.Delphi.Gen[/B]

Дополнительная информация
File size: 42496 bytes
MD5: e52ef0b4afca6e89c1bb2abdeb59543c
SHA1: dc1bd5e85c38918777f928ac398642dee3d997bb
PEiD: -
24.12.2007, 22:03
strawser

File Keylog.zip received on 12.03.2007 14:14:43 (CET)
Current status: finished
Result: 26/32 (81.25%)
Version Last Update Result
AhnLab-V3 - - -
[B]AntiVir - - TR/SPY.KeyLogger.LF
Authentium - - W32/Trojan.OGD
Avast - - Win32:Keylogger-DO
AVG - - PSW.Generic2.LFE
BitDefender - - Trojan.Spy.Keylogger.LF[/B]
CAT-QuickHeal - -
ClamAV - - -
DrWeb - - -
[B]eSafe - - Win32.Trojan
eTrust-Vet - - Win32/VMalum.ANED
Ewido - - Logger.KeyLogger.lf
FileAdvisor - - High threat detected
Fortinet - - Spy/KeyLogger
F-Prot - - W32/Trojan.OGD
F-Secure - - Trojan-Spy.Win32.KeyLogger.lf
Ikarus - - Trojan-Spy.Win32.KeyLogger.lf
Kaspersky - - Trojan-Spy.Win32.KeyLogger.lf
McAfee - - Generic.do[/B]
Microsoft - - -
[B]NOD32v2 - - Win32/Spy.KeyLogger.LF
Norman - - W32/Keylog.BAM
Panda - - Trj/Keylog.LH[/B]
Prevx1 - - -
[B]Rising - - Trojan.Spy.KeyLogger.agx
Sophos - - Mal/Generic-A
Sunbelt - - Trojan-Spy.Win32.KeyLogger.lf
Symantec - - Infostealer
TheHacker - - Trojan/Spy.KeyLogger.lf
VBA32 - - Trojan-Spy.Win32.KeyLogger.lf
VirusBuster - - TrojanSpy.KeyLogger.JX
Webwasher-Gateway - - Trojan.SPY.KeyLogger.LF[/B]

Additional information
MD5: 8935a514da0aac5d8828c4afa37a6c08

File Trojan_Spy_Banker_qez.rar received on 12.24.2007 15:38:13 (CET)
Current status: finished
Result: 6/32 (18.75%)
Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
[B]CAT-QuickHeal - - TrojanSpy.Banker.gez[/B]
ClamAV - - -
[B]DrWeb - - Adware.MoneyGainer[/B]
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
[B]F-Prot - - W32/Banker.BBZT[/B]
F-Secure - - -
[B]Ikarus - - Trojan-Spy.Win32.Banker.gez[/B]
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
[B]Prevx1 - - Heuristic: Suspicious File With Bad Child Associations[/B]
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
[B]VBA32 - - Trojan-Spy.Win32.Banker.gez[/B]
VirusBuster - - -
Webwasher-Gateway - - -
Additional information
MD5: b6aaf0e414282bd28a625f09e88d0e8c

[B]Mcafee ???[/B]

Trojan_program_Rootkit.Win32.Agen received on 12.24.2007 15:43:58 (CET)
Current status: finished
Result: 24/32 (75%)
Antivirus Version Last Update Result
AhnLab-V3 - - -
[B]AntiVir - - TR/Crypt.XDR.Gen[/B]
Authentium - - -
[B]Avast - - Win32:Trojan-gen {UPX}
AVG - - Dropper.Agent.9.Q
BitDefender - - Trojan.Srizbi.T
CAT-QuickHeal - - Rootkit.Agent.ld[/B]
ClamAV - - -
[B]DrWeb - - Trojan.NtRootKit.493
eSafe - - Rootkit.Win32.Agent.[/B]
eTrust-Vet - - -
[B]Ewido - - Rootkit.Agent.ld[/B]
FileAdvisor - - -
[B]Fortinet - - W32/Agent.LD!tr.rkit
F-Prot - - W32/Rootkit.AGQ
F-Secure - - Rootkit.Win32.Agent.ld
Ikarus - - Trojan.Srizbi.T
Kaspersky - - Rootkit.Win32.Agent.ld[/B]
McAfee - - -
[B]Microsoft - - Trojan:Win32/Agent
NOD32v2 - - probably a variant of Win32/Rootkit[/B]
Norman - - -
[B]Panda - - Trj/Downloader.MDW
Prevx1 - - Generic.Malware
Rising - - RootKit.Win32.Agent.ld
Sophos - - Mal/Generic-A
Sunbelt - - Trojan.Srizbi.T
Symantec - - Trojan.Srizbi
TheHacker - - Trojan/Agent.ld
VBA32 - - Rootkit.Win32.Agent.ld[/B]
VirusBuster - - -
[B]Webwasher-Gateway - - Trojan.Crypt.XDR.Gen[/B]
Additional information
MD5: 04d5a112d079eee44f7df7f3557a7c3f
25.12.2007, 01:26
drongo

[code]Файл avz00001.dta получен 2007.12.24 23:19:03 (CET)
Антивирус Версия Обновление Результат
AhnLab-V3 2007.12.25.10 2007.12.24 -
[B]AntiVir 7.6.0.46 2007.12.24 TR/Hijacker.Gen[/B]
Authentium 4.93.8 2007.12.23 -
[B]Avast 4.7.1098.0 2007.12.24 Win32:Small-IKB
AVG 7.5.0.516 2007.12.24 Downloader.Small.60.AO[/B]
BitDefender 7.2 2007.12.24 -
CAT-QuickHeal 9.00 2007.12.24 -
ClamAV 0.91.2 2007.12.24 -
DrWeb 4.44.0.09170 2007.12.24 -
[B]eSafe 7.0.15.0 2007.12.24 suspicious Trojan/Worm[/B]
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.24 -
FileAdvisor 1 2007.12.24 -
Fortinet 3.14.0.0 2007.12.24 -
F-Prot 4.4.2.54 2007.12.23 -
F-Secure 6.70.13030.0 2007.12.24 -
[B]Ikarus T3.1.1.15 2007.12.24 Virus.Win32.Small.IKB[/B]
Kaspersky 7.0.0.125 2007.12.24 -
McAfee 5192 2007.12.24 -
[B]Microsoft 1.3109 2007.12.24 VirTool:Win32/Obfuscator!Mal[/B]
NOD32v2 2745 2007.12.24 -
Norman 5.80.02 2007.12.24 -
Panda 9.0.0.4 2007.12.24 -
Prevx1 V2 2007.12.24 -
Rising 20.24.02.00 2007.12.24 -
Sophos 4.24.0 2007.12.24 -
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.24 -
TheHacker 6.2.9.168 2007.12.22 -
VBA32 3.12.2.5 2007.12.24 -
VirusBuster 4.3.26:9 2007.12.24 -
[B]Webwasher-Gateway 6.6.2 2007.12.24 Trojan.Hijacker.Gen[/B]
Дополнительная информация
File size: 8192 bytes
MD5: 71629f64d4a92d29d4e5932e17931a05
SHA1: 55d4c70ec497b15a7c49257a4f82d032b7b47938
PEiD: -
packers: UPX
packers: UPX
packers: UPX
packers: PE_Patch.UPX, UPX[/code]
25.12.2007, 08:26
Shu_b

t=15629[CODE]File cssrss.exe received on 12.25.2007 06:20:01 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.25.10 2007.12.24 -
[b]AntiVir 7.6.0.46 2007.12.24 TR/Crypt.XPACK.Gen[/b]
Authentium 4.93.8 2007.12.24 -
Avast 4.7.1098.0 2007.12.24 -
AVG 7.5.0.516 2007.12.24 -
BitDefender 7.2 2007.12.25 -
CAT-QuickHeal 9.00 2007.12.25 -
ClamAV 0.91.2 2007.12.25 -
DrWeb 4.44.0.09170 2007.12.24 -
eSafe 7.0.15.0 2007.12.24 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.24 -
FileAdvisor 1 2007.12.25 -
Fortinet 3.14.0.0 2007.12.25 -
F-Prot 4.4.2.54 2007.12.24 -
F-Secure 6.70.13030.0 2007.12.24 -
Ikarus T3.1.1.15 2007.12.25 -
Kaspersky 7.0.0.125 2007.12.25 -
McAfee 5192 2007.12.24 -
Microsoft 1.3109 2007.12.25 -
NOD32v2 2746 2007.12.25 -
Norman 5.80.02 2007.12.24 -
Panda 9.0.0.4 2007.12.24 -
Prevx1 V2 2007.12.25 -
Rising 20.24.02.00 2007.12.24 -
Sophos 4.24.0 2007.12.24 -
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.25 -
TheHacker 6.2.9.168 2007.12.22 -
VBA32 3.12.2.5 2007.12.24 -
VirusBuster 4.3.26:9 2007.12.24 -
[b]Webwasher-Gateway 6.6.2 2007.12.25 Trojan.Crypt.XPACK.Gen[/b]
Additional information
File size: 35840 bytes
MD5: 1c1e3c1e4109f5f9e15d147c91326c13[/CODE]
25.12.2007, 12:53
Shu_b

[QUOTE=strawser;164091]File askBarSetup.zip received on 12.05.2007 08:34:36 (CET)[/QUOTE]

сегодня 25.12, а не 5.12... :-(

[size="1"][color="#666686"][B][I]Добавлено через 1 час 36 минут[/I][/B][/color][/size]

t-15645[CODE]File user32.dat received on 12.25.2007 10:46:25 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.25.10 2007.12.24 -
AntiVir 7.6.0.46 2007.12.24 -
Authentium 4.93.8 2007.12.24 -
[B]Avast 4.7.1098.0 2007.12.24 Win32:Tibs-ADO[/B]
AVG 7.5.0.516 2007.12.24 -
BitDefender 7.2 2007.12.25 -
CAT-QuickHeal 9.00 2007.12.25 -
ClamAV 0.91.2 2007.12.25 -
DrWeb 4.44.0.09170 2007.12.25 -
[B]eSafe 7.0.15.0 2007.12.24 suspicious Trojan/Worm[/B]
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.24 -
FileAdvisor 1 2007.12.25 -
Fortinet 3.14.0.0 2007.12.25 -
F-Prot 4.4.2.54 2007.12.24 -
F-Secure 6.70.13030.0 2007.12.24 -
[B]Ikarus T3.1.1.15 2007.12.25 Virus.Win32.Tibs.ADO
Kaspersky 7.0.0.125 2007.12.25 Trojan-Clicker.Win32.Agent.ph[/B]
McAfee 5192 2007.12.24 -
Microsoft 1.3109 2007.12.25 -
NOD32v2 2746 2007.12.25 -
Norman 5.80.02 2007.12.24 -
Panda 9.0.0.4 2007.12.24 -
[B]Prevx1 V2 2007.12.25 Heuristic: Suspicious File With Bad Parent Associations[/B]
Rising 20.24.11.00 2007.12.25 -
Sophos 4.24.0 2007.12.25 -
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.25 -
TheHacker 6.2.9.168 2007.12.22 -
VBA32 3.12.2.5 2007.12.24 -
VirusBuster 4.3.26:9 2007.12.24 -
[B]Webwasher-Gateway 6.6.2 2007.12.25 Win32.UPXpacked.gen (suspicious)[/B]
Additional information
File size: 6144 bytes
MD5: b7d2d09d310a8c86ff706b5b9b84593d
SHA1: 50c91dadee58fd8c7a7c7013e2178bb55dbeb0b0
PEiD: -
packers: UPX[/CODE]
25.12.2007, 13:11
strawser

[QUOTE=Shu_b;164093]сегодня 25.12, а не 5.12... :-( [/QUOTE]

Да,прошу прощения. Скопировал старый лог. Вот новый.Dr web уже знает этого зверя, а F-pot почему-то уже нет.

File askBarSetup.zip received on 12.25.2007 11:05:11 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.25.10 2007.12.24 -
AntiVir 7.6.0.46 2007.12.24 -
Authentium 4.93.8 2007.12.25 -
Avast 4.7.1098.0 2007.12.24 -
AVG 7.5.0.516 2007.12.24 -
BitDefender 7.2 2007.12.25 -
CAT-QuickHeal 9.00 2007.12.25 -
ClamAV 0.91.2 2007.12.25 -
[B]DrWeb 4.44.0.09170 2007.12.25 Adware.Msearch[/B]
eSafe 7.0.15.0 2007.12.24 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.24 -
FileAdvisor 1 2007.12.25 -
Fortinet 3.14.0.0 2007.12.25 -
F-Prot 4.4.2.54 2007.12.24 -
F-Secure 6.70.13030.0 2007.12.24 -
Ikarus T3.1.1.15 2007.12.25 -
Kaspersky 7.0.0.125 2007.12.25 -
McAfee 5192 2007.12.24 -
Microsoft 1.3109 2007.12.25 -
[B]NOD32v2 2746 2007.12.25 a variant of Win32/AdInstaller[/B]
Norman 5.80.02 2007.12.24 -
Panda 9.0.0.4 2007.12.24 -
[B]Prevx1 V2 2007.12.25 Heuristic: Suspicious Hijacker[/B]
Rising 20.24.11.00 2007.12.25 -
Sophos 4.24.0 2007.12.25 -
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.25 -
TheHacker 6.2.9.168 2007.12.22 -
[B]VBA32 3.12.2.5 2007.12.24 suspected of Trojan-Dropper.Delf.36 (paranoid heuristics)[/B]
VirusBuster 4.3.26:9 2007.12.24 -
Webwasher-Gateway 6.6.2 2007.12.25 -
Additional information
File size: 517576 bytes
MD5: 170996a490c22b2c1c77b89067280d9e
SHA1: a59d0e8b21b186a7f7c2f727456484a61be873ac
PEiD: -
25.12.2007, 15:55
Shu_b

[QUOTE=strawser;164119]Вот новый.Dr web уже знает этого зверя {cut}[/QUOTE]

Это неизвестно, на вирустотале только недавно "отремонтировали" Drweb чтоб он adware показывал.

ps. если не трудно, зашлите по ссылке (в zip'e, с паролем virus) - [url]http://virusinfo.info/upload_virus.php?tid=12941[/url]

Показывать 40 сообщений этой темы на одной странице