Исследование антивирусов 4

Printable View

Показывать 40 сообщений этой темы на одной странице

28.08.2006, 16:04
Shu_b

Из раздела помощи:

Complete scanning result of "smss.exe", received in VirusTotal at 08.28.2006, 13:48:39 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.3 08.28.2006 HEUR/Trojan.Downloader
Authentium 4.93.8 08.25.2006 W32/Methodbod.gen
Avast 4.7.844.0 08.24.2006 no virus found
AVG 386 08.25.2006 no virus found
BitDefender 7.2 08.28.2006 Backdoor.MedBot.T
CAT-QuickHeal 8.00 08.26.2006 TrojanProxy.Horst.av
ClamAV devel-20060426 08.28.2006 no virus found
DrWeb 4.33 08.28.2006 Trojan.Popuper
eTrust-InoculateIT 23.72.108 08.27.2006 no virus found
eTrust-Vet 30.3.3045 08.28.2006 no virus found
Ewido 4.0 08.25.2006 no virus found
Fortinet 2.77.0.0 08.28.2006 W32/Horst.AV!tr
F-Prot 3.16f 08.25.2006 W32/Methodbod.gen
F-Prot4 4.2.1.29 08.26.2006 W32/Methodbod.gen
Ikarus 0.2.65.0 08.25.2006 no virus found
Kaspersky 4.0.2.24 08.28.2006 Trojan-Proxy.Win32.Horst.av
McAfee 4838 08.25.2006 no virus found
Microsoft 1.1560 08.27.2006 no virus found
NOD32v2 1.1728 08.28.2006 a variant of Win32/Medbot.BJ
Norman 5.90.23 08.28.2006 no virus found
Panda 9.0.0.4 08.27.2006 Suspicious file
Sophos 4.08.0 08.28.2006 no virus found
Symantec 8.0 08.28.2006 no virus found
TheHacker 5.9.8.201 08.28.2006 no virus found
UNA 1.83 08.28.2006 TrojanProxy.Win32.Horst.5AAE
VBA32 3.11.1 08.27.2006 no virus found
VirusBuster 4.3.7:9 08.27.2006 no virus found

Aditional Information
File size: 48640 bytes
MD5: 719b41f6e0d5b714db3c798b7c856c09
SHA1: 40ee797f1c81c0ff214c8ac8b21fd29d47751590
packers: UPX
packers: UPX

Complete scanning result of "nvsvcd.exe", received in VirusTotal at 08.28.2006, 13:48:34 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.3 08.28.2006 no virus found
Authentium 4.93.8 08.25.2006 no virus found
Avast 4.7.844.0 08.24.2006 no virus found
AVG 386 08.25.2006 no virus found
BitDefender 7.2 08.28.2006 Backdoor.MedBot.T
CAT-QuickHeal 8.00 08.26.2006 TrojanProxy.Horst.av
ClamAV devel-20060426 08.28.2006 no virus found
DrWeb 4.33 08.28.2006 Trojan.Spambot
eTrust-InoculateIT 23.72.108 08.27.2006 no virus found
eTrust-Vet 30.3.3045 08.28.2006 no virus found
Ewido 4.0 08.25.2006 no virus found
Fortinet 2.77.0.0 08.28.2006 no virus found
F-Prot 3.16f 08.25.2006 no virus found
F-Prot4 4.2.1.29 08.26.2006 no virus found
Ikarus 0.2.65.0 08.25.2006 no virus found
Kaspersky 4.0.2.24 08.28.2006 Trojan-Proxy.Win32.Horst.av
McAfee 4838 08.25.2006 no virus found
Microsoft 1.1560 08.27.2006 no virus found
NOD32v2 1.1728 08.28.2006 no virus found
Norman 5.90.23 08.28.2006 no virus found
Panda 9.0.0.4 08.27.2006 no virus found
Sophos 4.08.0 08.28.2006 no virus found
Symantec 8.0 08.28.2006 no virus found
TheHacker 5.9.8.201 08.28.2006 no virus found
UNA 1.83 08.28.2006 no virus found
VBA32 3.11.1 08.27.2006 no virus found
VirusBuster 4.3.7:9 08.27.2006 no virus found

Aditional Information
File size: 49152 bytes
MD5: 3dcf9028747a2366c6589a4dabf2e061
SHA1: 1b98315d2ebb4e680ce155b302cc725df97d2a13
29.08.2006, 11:50
MedvedD

На ноутбуке обнаружил

Complete scanning result of "DMSKSSRh.sys", received in VirusTotal at 08.29.2006, 09:06:29 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.3 08.29.2006 no virus found
Authentium 4.93.8 08.29.2006 is a security risk or a "backdoor" program
Avast 4.7.844.0 08.28.2006 no virus found
AVG 386 08.29.2006 no virus found
BitDefender 7.2 08.29.2006 no virus found
CAT-QuickHeal 8.00 08.26.2006 no virus found
ClamAV devel-20060426 08.29.2006 no virus found
DrWeb 4.33 08.29.2006 Trojan.NtRootKit.138
eTrust-InoculateIT 23.72.109 08.29.2006 no virus found
eTrust-Vet 30.3.3047 08.29.2006 no virus found
Ewido 4.0 08.25.2006 Backdoor.Genlot.DX
Fortinet 2.77.0.0 08.29.2006 PossibleThreat!03178
F-Prot 3.16f 08.25.2006 security risk or a "backdoor" program
F-Prot4 4.2.1.29 08.26.2006 Possibly a new unknown PE_Virus!Maximus
Ikarus 0.2.65.0 08.29.2006 no virus found
Kaspersky 4.0.2.24 08.29.2006 no virus found
McAfee 4839 08.28.2006 no virus found
Microsoft 1.1560 08.29.2006 no virus found
NOD32v2 1.1729 08.28.2006 no virus found
Norman 5.90.23 08.28.2006 no virus found
Panda 9.0.0.4 08.28.2006 no virus found
Sophos 4.08.0 08.29.2006 no virus found
Symantec 8.0 08.29.2006 no virus found
TheHacker 5.9.8.201 08.28.2006 no virus found
UNA 1.83 08.29.2006 no virus found
VBA32 3.11.1 08.28.2006 no virus found
VirusBuster 4.3.7:9 08.28.2006 no virus found
30.08.2006, 15:47
Aswed

Complete scanning result of "hlaa2_6.exe", received in VirusTotal at 08.30.2006, 13:37:31 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.3 08.30.2006 no virus found
Authentium 4.93.8 08.30.2006 no virus found
Avast 4.7.844.0 08.30.2006 no virus found
AVG 386 08.30.2006 Adware Generic.ODQ
BitDefender 7.2 08.30.2006 no virus found
CAT-QuickHeal 8.00 08.29.2006 no virus found
ClamAV devel-20060426 08.30.2006 no virus found
DrWeb 4.33 08.30.2006 no virus found
eTrust-InoculateIT 23.72.110 08.30.2006 no virus found
eTrust-Vet 30.3.3049 08.30.2006 no virus found
Ewido 4.0 08.25.2006 no virus found
Fortinet 2.77.0.0 08.30.2006 no virus found
F-Prot 3.16f 08.29.2006 no virus found
F-Prot4 4.2.1.29 08.30.2006 no virus found
Ikarus 0.2.65.0 08.29.2006 no virus found
Kaspersky 4.0.2.24 08.30.2006 no virus found
McAfee 4840 08.29.2006 no virus found
Microsoft 1.1560 08.30.2006 no virus found
NOD32v2 1.1731 08.30.2006 no virus found
Norman 5.90.23 08.30.2006 no virus found
Panda 9.0.0.4 08.29.2006 no virus found
Sophos 4.09.0 08.30.2006 no virus found
Symantec 8.0 08.30.2006 no virus found
TheHacker 5.9.8.201 08.28.2006 no virus found
UNA 1.83 08.30.2006 no virus found
VBA32 3.11.1 08.29.2006 no virus found
VirusBuster 4.3.7:9 08.29.2006 no virus found

Aditional Information
File size: 285250 bytes
MD5: 1724b9f3ff238ff278c7d5d41b4893c5
SHA1: 807f1569c58b310c155d21fb26a6ef08fc44d232
30.08.2006, 16:07
Shu_b

из темы: [url]http://virusinfo.info/showthread.php?t=6128[/url]

Complete scanning result of "wupdmgr.exe", received in VirusTotal at 08.30.2006, 06:27:55 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.3 08.29.2006 no virus found
Authentium 4.93.8 08.30.2006 no virus found
Avast 4.7.844.0 08.28.2006 no virus found
AVG 386 08.29.2006 no virus found
BitDefender 7.2 08.30.2006 Dropped:Generic.Malware.dld!g.5D750B80
CAT-QuickHeal 8.00 08.29.2006 no virus found
ClamAV devel-20060426 08.29.2006 no virus found
DrWeb 4.33 08.29.2006 DLOADER.Trojan packed by BINARYRES
eTrust-InoculateIT 23.72.110 08.30.2006 no virus found
eTrust-Vet 30.3.3047 08.29.2006 no virus found
Ewido 4.0 08.25.2006 no virus found
Fortinet 2.77.0.0 08.30.2006 suspicious
F-Prot 3.16f 08.29.2006 no virus found
F-Prot4 4.2.1.29 08.30.2006 no virus found
Ikarus 0.2.65.0 08.29.2006 no virus found
Kaspersky 4.0.2.24 08.30.2006 no virus found
McAfee 4840 08.29.2006 no virus found
Microsoft 1.1560 08.30.2006 no virus found
NOD32v2 1.1730 08.29.2006 probably unknown NewHeur_PE virus
Norman 5.90.23 08.29.2006 no virus found
Panda 9.0.0.4 08.29.2006 Suspicious file
Sophos 4.08.0 08.30.2006 no virus found
Symantec 8.0 08.30.2006 no virus found
TheHacker 5.9.8.201 08.28.2006 no virus found
UNA 1.83 08.30.2006 no virus found
VBA32 3.11.1 08.29.2006 suspected of Downloader.Small.54
VirusBuster 4.3.7:9 08.29.2006 no virus found

Aditional Information
File size: 9728 bytes
MD5: 6b153a2e68857c7fb9a07bb5870e35c2
SHA1: ac1b74410911417138c9b0172608a8ce6352f570
packers: UPX

Complete scanning result of "vmmlog32.dll", received in VirusTotal at 08.30.2006, 06:32:33 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.3 08.29.2006 no virus found
Authentium 4.93.8 08.30.2006 no virus found
Avast 4.7.844.0 08.28.2006 no virus found
AVG 386 08.29.2006 no virus found
BitDefender 7.2 08.30.2006 no virus found
CAT-QuickHeal 8.00 08.29.2006 no virus found
ClamAV devel-20060426 08.29.2006 no virus found
DrWeb 4.33 08.29.2006 no virus found
eTrust-InoculateIT 23.72.110 08.30.2006 no virus found
eTrust-Vet 30.3.3047 08.29.2006 no virus found
Ewido 4.0 08.25.2006 no virus found
Fortinet 2.77.0.0 08.30.2006 no virus found
F-Prot 3.16f 08.29.2006 no virus found
F-Prot4 4.2.1.29 08.30.2006 no virus found
Ikarus 0.2.65.0 08.29.2006 no virus found
Kaspersky 4.0.2.24 08.30.2006 no virus found
McAfee 4840 08.29.2006 no virus found
Microsoft 1.1560 08.30.2006 no virus found
NOD32v2 1.1730 08.29.2006 no virus found
Norman 5.90.23 08.29.2006 no virus found
Panda 9.0.0.4 08.29.2006 Suspicious file
Sophos 4.08.0 08.30.2006 no virus found
Symantec 8.0 08.30.2006 no virus found
TheHacker 5.9.8.201 08.28.2006 no virus found
UNA 1.83 08.30.2006 no virus found
VBA32 3.11.1 08.29.2006 suspected of Downloader.Small.54
VirusBuster 4.3.7:9 08.29.2006 no virus found

Aditional Information
File size: 7680 bytes
MD5: 429f2269ee60864de5a893c3200061ad
SHA1: 75b0443030593728e5e782924c95fbca1e24415a
30.08.2006, 16:38
Aswed

Любопытный результат:

Complete scanning result of "bs2_.exe", received in VirusTotal at 08.30.2006, 14:25:38 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.3 08.30.2006 [B]no virus found[/B]
Authentium 4.93.8 08.30.2006 no virus found
Avast 4.7.844.0 08.30.2006 no virus found
AVG 386 08.30.2006 Downloader.Generic.LTW
BitDefender 7.2 08.30.2006 no virus found
CAT-QuickHeal 8.00 08.30.2006 no virus found
ClamAV devel-20060426 08.30.2006 no virus found
DrWeb 4.33 08.30.2006 no virus found
eTrust-InoculateIT 23.72.110 08.30.2006 no virus found
eTrust-Vet 30.3.3051 08.30.2006 no virus found
Ewido 4.0 08.25.2006 no virus found
Fortinet 2.77.0.0 08.30.2006 no virus found
F-Prot 3.16f 08.29.2006 no virus found
F-Prot4 4.2.1.29 08.30.2006 no virus found
Ikarus 0.2.65.0 08.29.2006 no virus found
Kaspersky 4.0.2.24 08.30.2006 [B]no virus found[/B]
McAfee 4840 08.29.2006 no virus found
Microsoft 1.1560 08.30.2006 no virus found
NOD32v2 1.1731 08.30.2006 [B]no virus found[/B]
Norman 5.90.23 08.30.2006 W32/DLoader.ALQE
Panda 9.0.0.4 08.29.2006 Suspicious file
Sophos 4.09.0 08.30.2006 no virus found
Symantec 8.0 08.30.2006 no virus found
TheHacker 5.9.8.201 08.28.2006 no virus found
UNA 1.83 08.30.2006 no virus found
VBA32 3.11.1 08.30.2006 no virus found
VirusBuster 4.3.7:9 08.29.2006 no virus found

Aditional Information
File size: 218360 bytes
MD5: e400719473a03af06e2420690523a9f9
SHA1: 54854a3e8403f207de0450bfa3c047b6757bbdfe
packers: MEW

Complete scanning result of "sysB.exe", received in VirusTotal at 08.30.2006, 14:26:05 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.3 08.30.2006 [B]no virus found[/B]
Authentium 4.93.8 08.30.2006 no virus found
Avast 4.7.844.0 08.30.2006 no virus found
AVG 386 08.30.2006 Dropper.Agent.BII
BitDefender 7.2 08.30.2006 no virus found
CAT-QuickHeal 8.00 08.30.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 08.30.2006 no virus found
DrWeb 4.33 08.30.2006 no virus found
eTrust-InoculateIT 23.72.110 08.30.2006 no virus found
eTrust-Vet 30.3.3051 08.30.2006 no virus found
Ewido 4.0 08.25.2006 no virus found
Fortinet 2.77.0.0 08.30.2006 no virus found
F-Prot 3.16f 08.29.2006 no virus found
F-Prot4 4.2.1.29 08.30.2006 no virus found
Ikarus 0.2.65.0 08.29.2006 no virus found
Kaspersky 4.0.2.24 08.30.2006 [B]no virus found[/B]
McAfee 4840 08.29.2006 no virus found
Microsoft 1.1560 08.30.2006 no virus found
NOD32v2 1.1731 08.30.2006 [B]no virus found[/B]
Norman 5.90.23 08.30.2006 no virus found
Panda 9.0.0.4 08.29.2006 no virus found
Sophos 4.09.0 08.30.2006 no virus found
Symantec 8.0 08.30.2006 no virus found
TheHacker 5.9.8.201 08.28.2006 no virus found
UNA 1.83 08.30.2006 no virus found
VBA32 3.11.1 08.30.2006 no virus found
VirusBuster 4.3.7:9 08.29.2006 no virus found

Aditional Information
File size: 78620 bytes
MD5: a81de1647b572ee26a980eba1cd09791
SHA1: c5c97b7a6227902f467d681e93b1989b498e5720
packers: Petite
01.09.2006, 14:21
MedvedD

[url]http://forum.ixbt.com/topic.cgi?id=27:6845-32[/url] Искал утилиты для починки флеш-драйва, нашёл это..

Complete scanning result of "USBFlash_Controller_Reset_1.02.zi", received in VirusTotal at 09.01.2006, 12:02:06 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.11 09.01.2006 HEUR/Crypted
Authentium 4.93.8 08.31.2006 no virus found
Avast 4.7.844.0 08.31.2006 no virus found
AVG 386 08.31.2006 no virus found
BitDefender 7.2 08.31.2006 no virus found
CAT-QuickHeal 8.00 08.31.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 08.31.2006 no virus found
DrWeb 4.33 09.01.2006 MULDROP.PWS.Trojan
eTrust-InoculateIT 23.72.112 09.01.2006 no virus found
eTrust-Vet 30.3.3054 09.01.2006 no virus found
Ewido 4.0 09.01.2006 no virus found
Fortinet 2.77.0.0 08.31.2006 suspicious
F-Prot 3.16f 08.31.2006 no virus found
F-Prot4 4.2.1.29 08.31.2006 no virus found
Ikarus 0.2.65.0 08.31.2006 Backdoor.Win32.SdBot.AKU
[B]Kaspersky 4.0.2.24 09.01.2006 no virus found[/B]
McAfee 4842 08.31.2006 no virus found
Microsoft 1.1560 09.01.2006 no virus found
NOD32v2 1.1734 08.31.2006 probably unknown NewHeur_PE virus
Norman 5.90.23 08.31.2006 no virus found
Panda 9.0.0.4 08.31.2006 no virus found
Sophos 4.09.0 09.01.2006 no virus found
Symantec 8.0 09.01.2006 no virus found
TheHacker 5.9.8.202 08.31.2006 no virus found
UNA 1.83 09.01.2006 Win32.CRYPT.virus
[B]VBA32 3.11.1 08.31.2006 no virus found [/B]
VirusBuster 4.3.7:9 08.31.2006 no virus found

Aditional Information
File size: 124685 bytes
MD5: da434a798c2af51a4127e8bbae6427d3
SHA1: 174b76faacf2f549f2b83c36dc4c836f964d485e
packers: SVKProtector
02.09.2006, 19:53
Alexey P.

Complete scanning result of "your1.exe", received in VirusTotal at 09.02.2006,
17:37:56 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.11 09.01.2006 HEUR/Crypted
Authentium 4.93.8 09.02.2006 no virus found
Avast 4.7.844.0 09.01.2006 Win32:Rbot-WX
AVG 386 09.01.2006 no virus found
BitDefender 7.2 09.02.2006 no virus found
CAT-QuickHeal 8.00 09.02.2006 no virus found
ClamAV devel-20060426 09.02.2006 no virus found
DrWeb 4.33 09.02.2006 Win32.HLLW.MyBot
eTrust-InoculateIT 23.72.113 09.01.2006 no virus found
eTrust-Vet 30.3.3056 09.01.2006 Win32/Rbot!generic
Ewido 4.0 09.02.2006 no virus found
Fortinet 2.77.0.0 09.02.2006 no virus found
F-Prot 3.16f 09.01.2006 no virus found
F-Prot4 4.2.1.29 09.01.2006 no virus found
Ikarus 0.2.65.0 09.01.2006 no virus found
Kaspersky 4.0.2.24 09.02.2006 no virus found
McAfee 4843 09.01.2006 no virus found
Microsoft 1.1560 09.02.2006 no virus found
NOD32v2 1.1736 09.02.2006 a variant of Win32/Rbot
Norman 5.90.23 09.01.2006 no virus found
Panda 9.0.0.4 09.02.2006 W32/Gaobot.OAG.worm
Sophos 4.09.0 09.02.2006 no virus found
Symantec 8.0 09.02.2006 no virus found
TheHacker 5.9.8.203 09.01.2006 no virus found
UNA 1.83 09.02.2006 no virus found
VBA32 3.11.1 09.01.2006 no virus found
VirusBuster 4.3.7:9 09.02.2006 no virus found

Aditional Information
File size: 115712 bytes
MD5: 9deef30dd599bd3b3be68c536ea88177
SHA1: 4ca18289ab2c73795d9fc4e18e5bfcef826348e2
packers: Aspack
02.09.2006, 23:31
Зайцев Олег

Antivirus Version Update Result
AntiVir 7.1.1.11 09.01.2006 HEUR/Crypted
Authentium 4.93.8 09.02.2006 no virus found
Avast 4.7.844.0 09.01.2006 Win32:Murlo-F
AVG 386 09.01.2006 no virus found
BitDefender 7.2 09.02.2006 Backdoor.Small.CHH
CAT-QuickHeal 8.00 09.02.2006 no virus found
ClamAV devel-20060426 09.02.2006 no virus found
DrWeb 4.33 09.02.2006 BackDoor.Jink
eTrust-InoculateIT 23.72.113 09.01.2006 no virus found
eTrust-Vet 30.3.3056 09.01.2006 Win32/Fifibe!generic
Ewido 4.0 09.02.2006 no virus found
Fortinet 2.77.0.0 09.02.2006 suspicious
F-Prot 3.16f 09.01.2006 no virus found
F-Prot4 4.2.1.29 09.01.2006 no virus found
Ikarus 0.2.65.0 09.02.2006 no virus found
Kaspersky 4.0.2.24 09.02.2006 no virus found
McAfee 4843 09.01.2006 no virus found
Microsoft 1.1560 09.02.2006 no virus found
NOD32v2 1.1736 09.02.2006 a variant of Win32/Small.BB
Norman 5.90.23 09.01.2006 W32/Smalldoor.GON
Panda 9.0.0.4 09.02.2006 Trj/SrchSpy.N
Sophos 4.09.0 09.02.2006 no virus found
Symantec 8.0 09.02.2006 Backdoor.Trojan
TheHacker 5.9.8.203 09.01.2006 no virus found
UNA 1.83 09.02.2006 no virus found
VBA32 3.11.1 09.01.2006 no virus found
VirusBuster 4.3.7:9 09.02.2006 no virus found

образец прислан пользователем, так как заподозрен AVZ как Trojan-Downloader.Win32.Murlo.du
02.09.2006, 23:48
Зайцев Олег

Antivirus Version Update Result
AntiVir 7.1.1.11 09.01.2006 HEUR/Crypted
Authentium 4.93.8 09.02.2006 no virus found
Avast 4.7.844.0 09.01.2006 no virus found
AVG 386 09.01.2006 no virus found
BitDefender 7.2 09.02.2006 no virus found
CAT-QuickHeal 8.00 09.02.2006 Backdoor.Sdbot.gen
ClamAV devel-20060426 09.02.2006 no virus found
DrWeb 4.33 09.02.2006 no virus found
eTrust-InoculateIT 23.72.113 09.01.2006 Win32/Cavitate.AB!Trojan
eTrust-Vet 30.3.3056 09.01.2006 Win32/Cavitate.AC
Ewido 4.0 09.02.2006 no virus found
Fortinet 2.77.0.0 09.02.2006 no virus found
F-Prot 3.16f 09.01.2006 no virus found
F-Prot4 4.2.1.29 09.01.2006 no virus found
Ikarus 0.2.65.0 09.02.2006 no virus found
Kaspersky 4.0.2.24 09.02.2006 no virus found
McAfee 4843 09.01.2006 Downloader-YO
Microsoft 1.1560 09.02.2006 no virus found
NOD32v2 1.1736 09.02.2006 a variant of Win32/TrojanDownloader.Murlo
Norman 5.90.23 09.01.2006 W32/Laok.A
Panda 9.0.0.4 09.02.2006 Trj/Downloader.KDH
Sophos 4.09.0 09.02.2006 no virus found
Symantec 8.0 09.02.2006 no virus found
TheHacker 5.9.8.203 09.01.2006 no virus found
UNA 1.83 09.02.2006 no virus found
VBA32 3.11.1 09.01.2006 no virus found
VirusBuster 4.3.7:9 09.02.2006 no virus found

Aditional Information
File size: 20992 bytes
MD5: 1b1f8eca1913f80e3d912ac597fab6a8
SHA1: 9bd720ed0ed4fcb629d320182bd987f2e5fd13fb
образец прислан пользователем, так как заподозрен AVZ как Trojan-Downloader.Win32.Murlo.du - изловлен на том-же ПК, что и образец из поста #100
03.09.2006, 12:11
MOCT

WebMoney троянцы:

Complete scanning result of "WebMoney.exe", received in VirusTotal at 09.03.2006, 09:28:05 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.11 09.01.2006 no virus found
Authentium 4.93.8 09.02.2006 no virus found
Avast 4.7.844.0 09.01.2006 Win32:Webmoner-J
AVG 386 09.01.2006 no virus found
BitDefender 7.2 09.03.2006 no virus found
CAT-QuickHeal 8.00 09.02.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.02.2006 no virus found
DrWeb 4.33 09.02.2006 no virus found
eTrust-InoculateIT 23.72.113 09.01.2006 no virus found
eTrust-Vet 30.3.3056 09.01.2006 no virus found
Ewido 4.0 09.02.2006 Dropper.Joiner.cb
Fortinet 2.77.0.0 09.02.2006 suspicious
F-Prot 3.16f 09.01.2006 no virus found
F-Prot4 4.2.1.29 09.01.2006 no virus found
Ikarus 0.2.65.0 09.02.2006 Trojan-Spy.Win32.Agent.mf
Kaspersky 4.0.2.24 09.03.2006 no virus found
McAfee 4843 09.01.2006 no virus found
Microsoft 1.1560 09.03.2006 no virus found
NOD32v2 1.1736 09.02.2006 a variant of Win32/TrojanDropper.Delf.UQ
Norman 5.90.23 09.01.2006 Suspicious_F.gen
Panda 9.0.0.4 09.02.2006 no virus found
Sophos 4.09.0 09.03.2006 no virus found
Symantec 8.0 09.03.2006 no virus found
TheHacker 5.9.8.203 09.01.2006 no virus found
UNA 1.83 09.02.2006 no virus found
VBA32 3.11.1 09.03.2006 suspected of Backdoor.Bifrose.52
VirusBuster 4.3.7:9 09.02.2006 no virus found

Aditional Information
File size: 50969 bytes
MD5: 75d63e6c81becb17ae8b1b572a427a69
SHA1: 3f20ee0914dc20989a2af0a97b3682b06a8c4d36
packers: FSG

внутри него вот такой файл:

Complete scanning result of "webmoney.1", received in VirusTotal at 09.03.2006, 10:08:44 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.11 09.01.2006 TR/Spy.Webmoner.AG
Authentium 4.93.8 09.02.2006 could be infected with an unknown virus
Avast 4.7.844.0 09.01.2006 no virus found
AVG 386 09.01.2006 no virus found
BitDefender 7.2 09.03.2006 BehavesLike:Win32.FileInfector
CAT-QuickHeal 8.00 09.02.2006 no virus found
ClamAV devel-20060426 09.02.2006 no virus found
DrWeb 4.33 09.03.2006 no virus found
eTrust-InoculateIT 23.72.113 09.01.2006 no virus found
eTrust-Vet 30.3.3056 09.01.2006 no virus found
Ewido 4.0 09.02.2006 no virus found
Fortinet 2.77.0.0 09.02.2006 no virus found
F-Prot 3.16f 09.01.2006 could be infected with an unknown virus
F-Prot4 4.2.1.29 09.01.2006 no virus found
Ikarus 0.2.65.0 09.02.2006 no virus found
Kaspersky 4.0.2.24 09.03.2006 no virus found
McAfee 4843 09.01.2006 no virus found
Microsoft 1.1560 09.03.2006 no virus found
NOD32v2 1.1736 09.02.2006 no virus found
Norman 5.90.23 09.01.2006 no virus found
Panda 9.0.0.4 09.02.2006 Suspicious file
Sophos 4.09.0 09.03.2006 no virus found
Symantec 8.0 09.03.2006 no virus found
TheHacker 5.9.8.203 09.01.2006 no virus found
UNA 1.83 09.02.2006 no virus found
VBA32 3.11.1 09.03.2006 no virus found
VirusBuster 4.3.7:9 09.02.2006 no virus found

Aditional Information
File size: 57856 bytes
MD5: 8d2d9140c36038505eca62b3ccedc9b8
SHA1: b1d7b7da25ab5ce2a613aefdb92a5fcfc1a65e26

Complete scanning result of "MD_joiner.exe", received in VirusTotal at 09.03.2006, 09:41:07 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.11 09.01.2006 HEUR/Crypted
Authentium 4.93.8 09.02.2006 no virus found
Avast 4.7.844.0 09.01.2006 no virus found
AVG 386 09.01.2006 no virus found
BitDefender 7.2 09.03.2006 no virus found
CAT-QuickHeal 8.00 09.02.2006 no virus found
ClamAV devel-20060426 09.02.2006 no virus found
DrWeb 4.33 09.03.2006 BACKDOOR.Trojan
eTrust-InoculateIT 23.72.113 09.01.2006 no virus found
eTrust-Vet 30.3.3056 09.01.2006 no virus found
Ewido 4.0 09.02.2006 no virus found
Fortinet 2.77.0.0 09.02.2006 suspicious
F-Prot 3.16f 09.01.2006 no virus found
F-Prot4 4.2.1.29 09.01.2006 no virus found
Ikarus 0.2.65.0 09.02.2006 no virus found
Kaspersky 4.0.2.24 09.03.2006 no virus found
McAfee 4843 09.01.2006 no virus found
Microsoft 1.1560 09.03.2006 no virus found
NOD32v2 1.1736 09.02.2006 no virus found
Norman 5.90.23 09.01.2006 no virus found
Panda 9.0.0.4 09.02.2006 no virus found
Sophos 4.09.0 09.03.2006 no virus found
Symantec 8.0 09.03.2006 no virus found
TheHacker 5.9.8.203 09.01.2006 no virus found
UNA 1.83 09.02.2006 Win32.CRYPT.virus
VBA32 3.11.1 09.03.2006 no virus found
VirusBuster 4.3.7:9 09.02.2006 no virus found

Aditional Information
File size: 208896 bytes
MD5: 4a95a9a857ab578879b343dd1da2fe69
SHA1: fc2e26daaadee53f623a2327b0fae5a7b3f4ed8c
packers: ExeStealth
03.09.2006, 12:12
MOCT

Complete scanning result of "ya_v_pionerske_.jpeg_.exe", received in VirusTotal at 09.03.2006, 09:31:52 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.11 09.01.2006 HEUR/Crypted
Authentium 4.93.8 09.02.2006 Possibly a new variant of W32/Threat-HLLAV-based!Maximus
Avast 4.7.844.0 09.01.2006 no virus found
AVG 386 09.01.2006 no virus found
BitDefender 7.2 09.03.2006 no virus found
CAT-QuickHeal 8.00 09.02.2006 no virus found
ClamAV devel-20060426 09.02.2006 no virus found
DrWeb 4.33 09.03.2006 Trojan.MulDrop.1161
eTrust-InoculateIT 23.72.113 09.01.2006 no virus found
eTrust-Vet 30.3.3056 09.01.2006 no virus found
Ewido 4.0 09.02.2006 no virus found
Fortinet 2.77.0.0 09.02.2006 no virus found
F-Prot 3.16f 09.01.2006 Possibly a new variant of W32/Threat-HLLAV-based!Maximus
F-Prot4 4.2.1.29 09.01.2006 W32/Threat-HLLAV-based!Maximus
Ikarus 0.2.65.0 09.02.2006 no virus found
Kaspersky 4.0.2.24 09.03.2006 no virus found
McAfee 4843 09.01.2006 no virus found
Microsoft 1.1560 09.03.2006 no virus found
NOD32v2 1.1736 09.02.2006 a variant of Win32/TrojanDropper.Joiner.AJ
Norman 5.90.23 09.01.2006 no virus found
Panda 9.0.0.4 09.02.2006 Suspicious file
Sophos 4.09.0 09.03.2006 no virus found
Symantec 8.0 09.03.2006 no virus found
TheHacker 5.9.8.203 09.01.2006 no virus found
UNA 1.83 09.02.2006 no virus found
VBA32 3.11.1 09.03.2006 no virus found
VirusBuster 4.3.7:9 09.02.2006 no virus found

Aditional Information
File size: 197632 bytes
MD5: 7da39c33941a3b4e010274e82d481288
SHA1: bc66de0d1e784144eb512be4ae212fdba912b0b6
packers: Aspack

p.s. представители AV могут обращаться за образцами
03.09.2006, 12:13
MOCT

Файлы из склеек вредоносных файлов:

Complete scanning result of "icqz.2", received in VirusTotal at 09.03.2006, 09:34:17 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.11 09.01.2006 HEUR/Malware
Authentium 4.93.8 09.02.2006 no virus found
Avast 4.7.844.0 09.01.2006 Win32:Trojan-gen. {Other}
AVG 386 09.01.2006 no virus found
BitDefender 7.2 09.03.2006 Trojan.Pws.Ldpinch.IZ
CAT-QuickHeal 8.00 09.02.2006 no virus found
ClamAV devel-20060426 09.02.2006 no virus found
DrWeb 4.33 09.03.2006 Trojan.PWS.LDPinch.751
eTrust-InoculateIT 23.72.113 09.01.2006 no virus found
eTrust-Vet 30.3.3056 09.01.2006 no virus found
Ewido 4.0 09.02.2006 Trojan.LdPinch
Fortinet 2.77.0.0 09.02.2006 KeyHook
F-Prot 3.16f 09.01.2006 no virus found
F-Prot4 4.2.1.29 09.01.2006 no virus found
Ikarus 0.2.65.0 09.02.2006 no virus found
Kaspersky 4.0.2.24 09.03.2006 no virus found
McAfee 4843 09.01.2006 potentially unwanted program KeyHook
Microsoft 1.1560 09.03.2006 no virus found
NOD32v2 1.1736 09.02.2006 a variant of Win32/PSW.LdPinch
Norman 5.90.23 09.01.2006 no virus found
Panda 9.0.0.4 09.02.2006 no virus found
Sophos 4.09.0 09.03.2006 no virus found
Symantec 8.0 09.03.2006 no virus found
TheHacker 5.9.8.203 09.01.2006 no virus found
UNA 1.83 09.02.2006 no virus found
VBA32 3.11.1 09.03.2006 Trojan.PWS.LDPinch.751
VirusBuster 4.3.7:9 09.02.2006 no virus found

Aditional Information
File size: 3584 bytes
MD5: 85a62c067c01ff386b5b2b933b6c1a5a
SHA1: c6fcc7ef4f35fd601363adbd5c5bfd993651e654

Complete scanning result of "resapi.1", received in VirusTotal at 09.03.2006, 09:37:36 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.11 09.01.2006 TR/PSW.Ziew.4
Authentium 4.93.8 09.02.2006 no virus found
Avast 4.7.844.0 09.01.2006 no virus found
AVG 386 09.01.2006 no virus found
BitDefender 7.2 09.03.2006 no virus found
CAT-QuickHeal 8.00 09.02.2006 no virus found
ClamAV devel-20060426 09.02.2006 no virus found
DrWeb 4.33 09.03.2006 no virus found
eTrust-InoculateIT 23.72.113 09.01.2006 no virus found
eTrust-Vet 30.3.3056 09.01.2006 no virus found
Ewido 4.0 09.02.2006 no virus found
Fortinet 2.77.0.0 09.02.2006 no virus found
F-Prot 3.16f 09.01.2006 no virus found
F-Prot4 4.2.1.29 09.01.2006 no virus found
Ikarus 0.2.65.0 09.02.2006 no virus found
Kaspersky 4.0.2.24 09.03.2006 no virus found
McAfee 4843 09.01.2006 no virus found
Microsoft 1.1560 09.03.2006 no virus found
NOD32v2 1.1736 09.02.2006 no virus found
Norman 5.90.23 09.01.2006 no virus found
Panda 9.0.0.4 09.02.2006 Suspicious file
Sophos 4.09.0 09.03.2006 no virus found
Symantec 8.0 09.03.2006 no virus found
TheHacker 5.9.8.203 09.01.2006 no virus found
UNA 1.83 09.02.2006 no virus found
VBA32 3.11.1 09.03.2006 suspected of Trojan-PSW.Delf.2
VirusBuster 4.3.7:9 09.02.2006 no virus found

Aditional Information
File size: 70880 bytes
MD5: 5cabe0847b96b363db7cd79a597a8abc
SHA1: a2d0cc7a7070a2e593fb1c660caa2a45dc7e2782
packers: UPX
03.09.2006, 13:44
Nike

по аське послали линк как на прогу для спама.

Complete scanning result of "instamess2.exe", received in VirusTotal at 09.03.2006, 11:39:41 (CET).
Antivirus Version Update Result
AntiVir 7.1.1.11 09.01.2006 no virus found
Authentium 4.93.8 09.02.2006 no virus found
Avast 4.7.844.0 09.01.2006 no virus found
AVG 386 09.01.2006 no virus found
BitDefender 7.2 09.03.2006 no virus found
CAT-QuickHeal 8.00 09.02.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.02.2006 no virus found
DrWeb n - no virus found
eTrust-InoculateIT 23.72.113 09.01.2006 no virus found
eTrust-Vet 30.3.3056 09.01.2006 no virus found
Ewido 4.0 09.02.2006 Dropper.Prodex.11.b
Fortinet 2.77.0.0 09.02.2006 suspicious
F-Prot 3.16f 09.01.2006 no virus found
F-Prot4 4.2.1.29 09.01.2006 no virus found
Ikarus 0.2.65.0 09.02.2006 no virus found
Kaspersky 4.0.2.24 09.03.2006 no virus found
McAfee 4843 09.01.2006 no virus found
Microsoft 1.1560 09.03.2006 no virus found
NOD32v2 1.1736 09.02.2006 a variant of Win32/PSW.LdPinch
Norman 5.90.23 09.01.2006 W32/Malware
Panda 9.0.0.4 09.02.2006 Suspicious file
Sophos 4.09.0 09.03.2006 no virus found
Symantec 8.0 09.03.2006 no virus found
TheHacker 5.9.8.203 09.01.2006 no virus found
UNA 1.83 09.02.2006 no virus found
VBA32 3.11.1 09.03.2006 Dropper.Trojan.PSW.LdPinch
VirusBuster 4.3.7:9 09.02.2006 no virus found

Aditional Information
File size: 414683 bytes
MD5: e06ddf51bfc66f6a33de71f6e745de18
SHA1: a23dd8925e3199a8302a48b0482d8fd97299024f
Norman SandBox:
[ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: [email][email protected][/email] - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* Creating several executable files on hard-drive.
* File length: 414683 bytes.

[ Changes to filesystem ]
* Creates file x.exe.
* Creates file y.exe.
* Creates file C: empole320.

[ Process/window information ]
* Attemps to open x.exe NULL.
* Attemps to open y.exe NULL.
* Attempts to access service "".
* Attempts to access service "AVWUpSrv".
* Attempts to access service "NOD32krn".
* Attempts to access service "Ahnlab task Scheduler".
* Attempts to access service "alerter".
* Attempts to access service "AlertManger".
* Attempts to access service "AVExch32Service".
* Attempts to access service "avg7alrt".
* Attempts to access service "avg7updsvc".
* Attempts to access service "AvgCore".
* Attempts to access service "AvgFsh".
* Attempts to access service "AvgServ".
* Attempts to access service "avpcc".
* Attempts to access service "AVUPDService".
* Attempts to access service "AvxIni".
* Attempts to access service "awhost32".
* Attempts to access service "backweb client - 4476822".
* Attempts to access service "BackWeb Client - 7681197".
* Attempts to access service "backweb client-4476822".
* Attempts to access service "ccEvtMgr".
* Attempts to access service "ccPwdSvc".
* Attempts to access service "ccSetMgr".
* Attempts to access service "ccSetMgr.exe".
* Attempts to access service "DefWatch".
* Attempts to access service "dvpapi".
* Attempts to access service "dvpinit".
* Attempts to access service "fsbwsys".
* Attempts to access service "fsdfwd".
* Attempts to access service "F-Secure Gatekeeper Handler Starter".
* Attempts to access service "FSMA".
* Attempts to access service "KAVMonitorService".
* Attempts to access service "kavsvc".
* Attempts to access service "KLBLMain".
05.09.2006, 17:34
Зайцев Олег

STATUS: FINISHEDComplete scanning result of "main.exe", received in VirusTotal at 09.05.2006, 15:13:07 (CET).
Antivirus Version Update Result
AntiVir 7.1.1.11 09.05.2006 HEUR/Crypted
Authentium 4.93.8 09.03.2006 no virus found
Avast 4.7.844.0 09.04.2006 no virus found
AVG 386 09.04.2006 no virus found
BitDefender 7.2 09.05.2006 DeepScan:Generic.Dialer.9192775C
CAT-QuickHeal 8.00 09.04.2006 no virus found
ClamAV devel-20060426 09.05.2006 no virus found
DrWeb 4.33 09.05.2006 no virus found
eTrust-InoculateIT 23.72.115 09.04.2006 no virus found
eTrust-Vet 30.3.3063 09.05.2006 no virus found
Ewido 4.0 09.05.2006 no virus found
Fortinet 2.77.0.0 09.04.2006 suspicious
F-Prot 3.16f 09.04.2006 no virus found
F-Prot4 4.2.1.29 09.04.2006 no virus found
Ikarus 0.2.65.0 09.05.2006 no virus found
Kaspersky 4.0.2.24 09.05.2006 no virus found
McAfee 4844 09.04.2006 no virus found
Microsoft 1.1560 09.03.2006 no virus found
NOD32v2 1.1739 09.04.2006 no virus found
Norman 5.90.23 09.04.2006 no virus found
Panda 9.0.0.4 09.04.2006 Suspicious file
Sophos 4.09.0 09.05.2006 no virus found
Symantec 8.0 09.05.2006 no virus found
TheHacker 5.9.8.204 09.04.2006 no virus found
UNA 1.83 09.05.2006 no virus found
VBA32 3.11.1 09.04.2006 suspected of Trojan-Dropper.Agent.55
VirusBuster 4.3.7:9 09.05.2006 no virus found

Aditional Information
File size: 47616 bytes
MD5: f5c661cc0428119d9e76cb709c105f13
SHA1: e6d17eee0d5002629aa33a24eaea9d568f59e6b7
packers: UPX

На самом деле это троян, типа Pinch-а. Создает swf файл - его запуск приводит к отображению чьей-то голой задницы :) тем временем пароли уходят злоумышленнику...
05.09.2006, 17:52
Alex_Goodwin

Пришло по аське:
Внимание, СЕНСАЦИЯ!!! Секс Курниковой с охранниками,
съемка скрытой камерой - впервые в Интернете.
хттп://skijimramov.cz

Далее ссылка на скринсейвер.

orgi_kurnikova.scr
Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 a792a79d5bbf50ddae389669b2e345f3
Packers detected: UPX
Scanner results
AntiVir Found Heuristic/Crypted (probable variant)
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found Trojan-PSW.Win32.LdPinch.awn
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Trojan-Dropper.Agent.55 (probable variant)

STATUS: FINISHEDComplete scanning result of "__1056", received in VirusTotal at 09.05.2006, 15:37:50 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.11 09.05.2006 HEUR/Crypted
Authentium 4.93.8 09.03.2006 no virus found
Avast 4.7.844.0 09.04.2006 no virus found
AVG 386 09.04.2006 no virus found
BitDefender 7.2 09.05.2006 no virus found
CAT-QuickHeal 8.00 09.05.2006 no virus found
ClamAV devel-20060426 09.05.2006 no virus found
DrWeb 4.33 09.05.2006 Trojan.PWS.LDPinch.1130
eTrust-InoculateIT 23.72.115 09.04.2006 no virus found
eTrust-Vet 30.3.3063 09.05.2006 no virus found
Ewido 4.0 09.05.2006 no virus found
Fortinet 2.77.0.0 09.04.2006 suspicious
F-Prot 3.16f 09.04.2006 no virus found
F-Prot4 4.2.1.29 09.04.2006 Possibly a new unknown PE_Virus!Maximus
Ikarus 0.2.65.0 09.05.2006 no virus found
Kaspersky 4.0.2.24 09.05.2006 Trojan-PSW.Win32.LdPinch.awn
McAfee 4844 09.04.2006 no virus found
Microsoft 1.1560 09.03.2006 no virus found
NOD32v2 1.1739 09.04.2006 no virus found
Norman 5.90.23 09.04.2006 no virus found
Panda 9.0.0.4 09.04.2006 Suspicious file
Sophos 4.09.0 09.05.2006 no virus found
Symantec 8.0 09.05.2006 no virus found
TheHacker 5.9.8.204 09.04.2006 Posible_Worm322
UNA 1.83 09.05.2006 no virus found
VBA32 3.11.1 09.04.2006 suspected of Trojan-Dropper.Agent.55
VirusBuster 4.3.7:9 09.05.2006 no virus found

Aditional Information
File size: 54272 bytes
MD5: a792a79d5bbf50ddae389669b2e345f3
SHA1: e4d1d9fe375e7111449a442440acad3f21ee40bf
packers: UPX

Странно, что доктор на джотти не нашел, а на вирус тотале нашел. Базы разные/скорость обновления?
05.09.2006, 23:30
Shu_b

Complete scanning result of "sysaudio.exe", received in VirusTotal at 09.05.2006, 21:13:10 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.11 09.05.2006 TR/Small.GO.1
Authentium 4.93.8 09.03.2006 no virus found
Avast 4.7.844.0 09.04.2006 no virus found
AVG 386 09.05.2006 no virus found
BitDefender 7.2 09.05.2006 Trojan.Win32.Small.GO
CAT-QuickHeal 8.00 09.05.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.05.2006 no virus found
DrWeb 4.33 09.05.2006 BACKDOOR.Trojan
eTrust-InoculateIT 23.72.115 09.04.2006 no virus found
eTrust-Vet 30.3.3063 09.05.2006 no virus found
Ewido 4.0 09.05.2006 no virus found
Fortinet 2.77.0.0 09.04.2006 no virus found
F-Prot 3.16f 09.04.2006 no virus found
F-Prot4 4.2.1.29 09.04.2006 no virus found
Ikarus 0.2.65.0 09.05.2006 no virus found
Kaspersky 4.0.2.24 09.05.2006 Trojan.Win32.Small.go
McAfee 4845 09.05.2006 Generic Keylogger.f
Microsoft 1.1560 09.05.2006 no virus found
NOD32v2 1.1740 09.05.2006 no virus found
Norman 5.90.23 09.05.2006 no virus found
Panda 9.0.0.4 09.05.2006 Trj/Small.QU
Sophos 4.09.0 09.05.2006 no virus found
Symantec 8.0 09.05.2006 Trojan Horse
TheHacker 5.9.8.204 09.04.2006 no virus found
UNA 1.83 09.05.2006 no virus found
VBA32 3.11.1 09.05.2006 Trojan.Win32.Small.go
VirusBuster 4.3.7:9 09.05.2006 no virus found

Aditional Information
File size: 174080 bytes
MD5: 5cac47e0b901d8eb80f49a32e4b7b6fd
SHA1: 52f7e7355e26021a6a636786b7ba8a5ee3a7e61a
packers: Aspack

ps: Файл сохранён как sysaudio_44fdd030d940b.zip
Размер файла 164691
MD5 e1b149839105214f044d9513ab71d631
06.09.2006, 02:09
Nike

Опять разнообразные викусики предлогают посмотреть их фотки.

Antivirus Version Update Result
AntiVir 7.1.1.11 09.05.2006 HEUR/Malware
Authentium 4.93.8 09.05.2006 no virus found
Avast 4.7.844.0 09.04.2006 no virus found
AVG 386 09.05.2006 no virus found
BitDefender 7.2 09.05.2006 BehavesLike:Win32.ExplorerHijack
CAT-QuickHeal 8.00 09.05.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.05.2006 no virus found
DrWeb 4.33 09.05.2006 no virus found
eTrust-InoculateIT 23.72.117 09.05.2006 no virus found
eTrust-Vet 30.3.3063 09.05.2006 Win32/Areses
Ewido 4.0 09.05.2006 no virus found
Fortinet 2.77.0.0 09.04.2006 suspicious
F-Prot 3.16f 09.05.2006 no virus found
F-Prot4 4.2.1.29 09.05.2006 no virus found
Ikarus 0.2.65.0 09.05.2006 no virus found
Kaspersky 4.0.2.24 09.05.2006 no virus found
McAfee 4845 09.05.2006 New Malware.n
Microsoft 1.1560 09.05.2006 no virus found
NOD32v2 1.1740 09.05.2006 a variant of Win32/TrojanDownloader.Delf.AJD
Norman 5.90.23 09.05.2006 W32/Downloader
Panda 9.0.0.4 09.05.2006 Suspicious file
Sophos 4.09.0 09.05.2006 no virus found
Symantec 8.0 09.05.2006 no virus found
TheHacker 5.9.8.204 09.04.2006 no virus found
UNA 1.83 09.05.2006 no virus found
VBA32 3.11.1 09.05.2006 no virus found
VirusBuster 4.3.7:9 09.05.2006 no virus found

Aditional Information
File size: 10713 bytes
MD5: e26d357f83fccd692b018b257abf6b0d
SHA1: eefa825e88616f4efc04a09ce1fb2dd12a9a8621
packers: UPack
Norman SandBox:
[ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: [email][email protected][/email] - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* **Locates window "NULL [class AVP.AlertDialog]" on desktop.
* File length: 10713 bytes.

[ Changes to filesystem ]
* Creates file C:WINDOWSTEMPcsrss.exe.

[ Changes to registry ]
* Sets value "m"="m" in key "HKCUSoftwareMicrosoftWindows".

[ Network services ]
* Looks for an Internet connection.
* Opens URL: hттp://rikoger.com/lonus/1/1.exe.

[ Security issues ]
* Starting downloaded file - potential security problem.

[ Process/window information ]
* Modifies other process memory.
* Attemps to open C:WINDOWSTEMPcsrss.exe NULL.

Complete scanning result of "1.exe", received in VirusTotal at 09.06.2006, 00:01:41 (CET).
Antivirus Version Update Result
AntiVir 7.1.1.11 09.05.2006 HEUR/Crypted
Authentium 4.93.8 09.05.2006 no virus found
Avast 4.7.844.0 09.04.2006 no virus found
AVG 386 09.05.2006 no virus found
BitDefender 7.2 09.05.2006 no virus found
CAT-QuickHeal 8.00 09.05.2006 no virus found
ClamAV devel-20060426 09.05.2006 no virus found
DrWeb 4.33 09.05.2006 no virus found
eTrust-InoculateIT 23.72.117 09.05.2006 no virus found
eTrust-Vet 30.3.3063 09.05.2006 no virus found
Ewido 4.0 09.05.2006 no virus found
Fortinet 2.77.0.0 09.04.2006 suspicious
F-Prot 3.16f 09.05.2006 no virus found
F-Prot4 4.2.1.29 09.05.2006 no virus found
Ikarus 0.2.65.0 09.05.2006 no virus found
Kaspersky 4.0.2.24 09.05.2006 no virus found
McAfee 4845 09.05.2006 no virus found
Microsoft 1.1560 09.05.2006 Win32/Ldpinch
NOD32v2 1.1740 09.05.2006 no virus found
Norman 5.90.23 09.05.2006 no virus found
Panda 9.0.0.4 09.05.2006 Suspicious file
Sophos 4.09.0 09.05.2006 no virus found
Symantec 8.0 09.05.2006 no virus found
TheHacker 5.9.8.204 09.04.2006 no virus found
UNA 1.83 09.05.2006 no virus found
VBA32 3.11.1 09.05.2006 suspected of Trojan-Dropper.Agent.55
VirusBuster 4.3.7:9 09.05.2006 no virus found

Aditional Information
File size: 23552 bytes
MD5: 1d27b25be4ea6b3319b9490e83665585
SHA1: 4caa00ec15dbb04f704cc99424eb63a2c2a5b3ca
packers: UPX

результат странноватый..
06.09.2006, 14:11
MOCT

новый Scano. обратите внимание - разные антивирусы знают либо начинку, либо оболочку. и лишь единицы детектируют оба файла.

Complete scanning result of "New.hta.aq", received in VirusTotal at 09.06.2006, 11:51:25 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.11 09.06.2006 no virus found
Authentium 4.93.8 09.06.2006 no virus found
Avast 4.7.844.0 09.06.2006 no virus found
AVG 386 09.05.2006 no virus found
BitDefender 7.2 09.06.2006 [email][email protected][/email]
CAT-QuickHeal 8.00 09.05.2006 no virus found
ClamAV devel-20060426 09.06.2006 Worm.Scano.AF-2
DrWeb 4.33 09.06.2006 Win32.HLLM.Perf
eTrust-InoculateIT 23.72.117 09.05.2006 no virus found
eTrust-Vet 30.3.3063 09.05.2006 no virus found
Ewido 4.0 09.05.2006 no virus found
Fortinet 2.77.0.0 09.06.2006 no virus found
F-Prot 3.16f 09.06.2006 no virus found
F-Prot4 4.2.1.29 09.06.2006 no virus found
Ikarus 0.2.65.0 09.06.2006 no virus found
Kaspersky 4.0.2.24 09.06.2006 no virus found
McAfee 4845 09.05.2006 no virus found
Microsoft 1.1560 09.06.2006 no virus found
NOD32v2 1.1740 09.05.2006 Win32/Scano.AO
Norman 5.90.23 09.06.2006 no virus found
Panda 9.0.0.4 09.05.2006 no virus found
Sophos 4.09.0 09.06.2006 W32/Bagle-GY
Symantec 8.0 09.06.2006 W32.Areses.Q!vbs
TheHacker 5.9.8.205 09.06.2006 no virus found
UNA 1.83 09.06.2006 no virus found
VBA32 3.11.1 09.05.2006 Email-Worm.Win32.Scano.e#6
VirusBuster 4.3.7:9 09.05.2006 no virus found

Aditional Information
File size: 68250 bytes
MD5: 2ba71d2c2a8cc8a7f7d368cde15604ea
SHA1: dbed05da8ee64054a77b7fcbe920f40d024d3f51

внутри него:
Complete scanning result of "tOT1Js.exe", received in VirusTotal at 09.06.2006, 12:04:48 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.11 09.06.2006 HEUR/Crypted
Authentium 4.93.8 09.06.2006 no virus found
Avast 4.7.844.0 09.06.2006 no virus found
AVG 386 09.05.2006 no virus found
BitDefender 7.2 09.06.2006 no virus found
CAT-QuickHeal 8.00 09.05.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.06.2006 Worm.Scano.AG
DrWeb 4.33 09.06.2006 Win32.HLLM.Perf.based
eTrust-InoculateIT 23.72.117 09.05.2006 no virus found
eTrust-Vet 30.3.3064 09.06.2006 no virus found
Ewido 4.0 09.05.2006 no virus found
Fortinet 2.77.0.0 09.06.2006 suspicious
F-Prot 3.16f 09.06.2006 no virus found
F-Prot4 4.2.1.29 09.06.2006 W32/Scano.gen!EEH
Ikarus 0.2.65.0 09.06.2006 no virus found
Kaspersky 4.0.2.24 09.06.2006 Email-Worm.Win32.Scano.aq
McAfee 4845 09.05.2006 no virus found
Microsoft 1.1560 09.06.2006 Win32/Scano.gen@mm
NOD32v2 1.1740 09.05.2006 a variant of Win32/Scano
Norman 5.90.23 09.06.2006 W32/Suspicious_U.gen
Panda 9.0.0.4 09.05.2006 Suspicious file
Sophos 4.09.0 09.06.2006 no virus found
Symantec 8.0 09.06.2006 no virus found
TheHacker 5.9.8.205 09.06.2006 no virus found
UNA 1.83 09.06.2006 no virus found
VBA32 3.11.1 09.05.2006 suspected of Trojan-Dropper.Agent.55
VirusBuster 4.3.7:9 09.05.2006 no virus found

Aditional Information
File size: 21264 bytes
MD5: 9602652056d29277beacdbe07e6ca77a
SHA1: 7c4b0de0ceec16065941e5208b449c4261862bde
packers: UPack
07.09.2006, 10:37
Shu_b

[url]http://virusinfo.info/showthread.php?t=6169[/url]

Complete scanning result of "pviever.exe", received in VirusTotal at 09.07.2006, 08:11:08 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.14 09.06.2006 no virus found
Authentium 4.93.8 09.07.2006 no virus found
Avast 4.7.844.0 09.06.2006 Win32:Delf-AMI
AVG 386 09.06.2006 no virus found
BitDefender 7.2 09.07.2006 no virus found
CAT-QuickHeal 8.00 09.05.2006 no virus found
ClamAV devel-20060426 09.07.2006 no virus found
DrWeb 4.33 09.06.2006 no virus found
eTrust-InoculateIT 23.72.118 09.07.2006 no virus found
eTrust-Vet 30.3.3064 09.06.2006 no virus found
Ewido 4.0 09.05.2006 Backdoor.Delf.co
Fortinet 2.77.0.0 09.07.2006 no virus found
F-Prot 3.16f 09.07.2006 no virus found
F-Prot4 4.2.1.29 09.07.2006 no virus found
Ikarus 0.2.65.0 09.06.2006 no virus found
Kaspersky 4.0.2.24 09.07.2006 no virus found
McAfee 4846 09.06.2006 potentially unwanted program Ptop
Microsoft 1.1560 09.07.2006 no virus found
NOD32v2 1.1742 09.06.2006 probably a variant of Win32/PornTool.Topor
Norman 5.90.23 09.06.2006 no virus found
Panda 9.0.0.4 09.07.2006 Suspicious file
Sophos 4.09.0 09.07.2006 no virus found
Symantec 8.0 09.07.2006 no virus found
TheHacker 5.9.8.206 09.07.2006 no virus found
UNA 1.83 09.06.2006 no virus found
VBA32 3.11.1 09.05.2006 suspected of Trojan-Clicker.Agent.35 (paranoid heuristics)
VirusBuster 4.3.7:9 09.06.2006 no virus found

Aditional Information
File size: 698368 bytes
MD5: cae352d5f45c474cc80ab7749a369ba7
SHA1: 27b426030ee7cfc4c6201f9ec3c89d04796430e9
07.09.2006, 18:27
ALEX(XX)

STATUS: FINISHEDComplete scanning result of "pornmagpass_ver1.164.exe", received in VirusTotal at 09.07.2006, 14:51:30 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.14 09.07.2006 DR/Zlob.Gen
Authentium 4.93.8 09.07.2006 no virus found
Avast 4.7.844.0 09.06.2006 no virus found
AVG 386 09.06.2006 Downloader.Zlob.CI
BitDefender 7.2 09.07.2006 no virus found
CAT-QuickHeal 8.00 09.05.2006 no virus found
ClamAV devel-20060426 09.07.2006 no virus found
DrWeb 4.33 09.07.2006 no virus found
eTrust-InoculateIT 23.72.118 09.07.2006 no virus found
eTrust-Vet 30.3.3066 09.07.2006 no virus found
Ewido 4.0 09.05.2006 no virus found
Fortinet 2.77.0.0 09.07.2006 suspicious
F-Prot 3.16f 09.07.2006 no virus found
F-Prot4 4.2.1.29 09.07.2006 no virus found
Ikarus 0.2.65.0 09.07.2006 no virus found
Kaspersky 4.0.2.24 09.07.2006 no virus found
McAfee 4846 09.06.2006 no virus found
Microsoft 1.1560 09.07.2006 no virus found
NOD32v2 1.1743 09.07.2006 no virus found
Norman 5.90.23 09.07.2006 no virus found
Panda 9.0.0.4 09.07.2006 Suspicious file
Sophos 4.09.0 09.07.2006 no virus found
Symantec 8.0 09.07.2006 no virus found
TheHacker 5.9.8.206 09.07.2006 no virus found
UNA 1.83 09.06.2006 no virus found
VBA32 3.11.1 09.07.2006 no virus found
VirusBuster 4.3.7:9 09.06.2006 Trojan.DL.Zlob.YM.Gen

Aditional Information
File size: 97048 bytes
MD5: d025ec6f1c48e55bf7064c64d35fb20b
SHA1: 3a394352996fd5ce3efd6e84c1b884fa446ba532
packers: UPX
08.09.2006, 22:18
Exxx

[URL="http://www.virusinfo.info/showthread.php?t=6178"]Отсюда[/URL]
Complete scanning result of "Setup.exe", received in VirusTotal at 09.08.2006, 18:44:20 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.16 09.08.2006 no virus found
Authentium 4.93.8 09.08.2006 no virus found
Avast 4.7.844.0 09.08.2006 no virus found
AVG 386 09.08.2006 no virus found
BitDefender 7.2 09.08.2006 no virus found
[B]CAT-QuickHeal 8.00 09.07.2006 (Suspicious) - DNAScan[/B]
ClamAV devel-20060426 09.08.2006 no virus found
DrWeb 4.33 09.08.2006 no virus found
eTrust-InoculateIT 23.72.119 09.08.2006 no virus found
eTrust-Vet 30.3.3068 09.08.2006 no virus found
Ewido 4.0 09.05.2006 no virus found
[B]Fortinet 2.77.0.0 09.07.2006 suspicious[/B]
F-Prot 3.16f 09.08.2006 no virus found
F-Prot4 4.2.1.29 09.07.2006 no virus found
Ikarus 0.2.65.0 09.08.2006 no virus found
[B]Kaspersky 4.0.2.24 09.08.2006 Trojan.Win32.Agent.yu[/B]
McAfee 4847 09.07.2006 no virus found
Microsoft 1.1560 09.08.2006 no virus found
NOD32v2 1.1745 09.08.2006 no virus found
Norman 5.90.23 09.08.2006 no virus found
[B]Panda 9.0.0.4 09.08.2006 Suspicious file[/B]
Sophos 4.09.0 09.08.2006 no virus found
Symantec 8.0 09.08.2006 no virus found
TheHacker 5.9.8.208 09.08.2006 no virus found
UNA 1.83 09.08.2006 no virus found
VBA32 3.11.1 09.07.2006 no virus found
VirusBuster 4.3.7:9 09.08.2006 no virus found

Aditional Information
File size: 137216 bytes
MD5: 7d247f72d2fef27f058afed9b4bda88e
SHA1: 83501d378567c3844ed1254474cc47c654aa2eb5
packers: Obsidium
09.09.2006, 12:48
drongo

File: ASRLSetup.exe
Status: INFECTED/MALWARE
MD5 30fe50789e73789e1be4b7a73ebc2d7b
Packers detected: EDIT
Scanner results
AntiVir Found Adware-Spyware/AdvanceSp.A.1 adware
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found Backdoor.Win32.VB.ate
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found nothing
P.S. Возможно ложное срабатывание , в средстве от шпионов :[URL="hXXp://www.appfile.com/software/ASRLSetup.exe"]hXXp://www.appfile.com/software/ASRLSetup.exe[/URL]
09.09.2006, 14:40
MOCT

Complete scanning result of "ans.exe", received in VirusTotal at 09.09.2006, 12:35:59 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.16 09.09.2006 HEUR/Crypted
Authentium 4.93.8 09.09.2006 could be a corrupted executable file
Avast 4.7.844.0 09.08.2006 no virus found
AVG 386 09.08.2006 no virus found
BitDefender 7.2 09.09.2006 no virus found
CAT-QuickHeal 8.00 09.09.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.09.2006 Trojan.Haxdoor-33
eTrust-InoculateIT 23.72.120 09.08.2006 no virus found
eTrust-Vet 30.3.3070 09.09.2006 no virus found
DrWeb 4.33 09.09.2006 no virus found
Ewido 4.0 09.05.2006 no virus found
Fortinet 2.77.0.0 09.09.2006 no virus found
F-Prot 3.16f 09.09.2006 no virus found
F-Prot4 4.2.1.29 09.08.2006 no virus found
Ikarus 0.2.65.0 09.08.2006 Backdoor.Win32.Haxdoor.GS
Kaspersky 4.0.2.24 09.09.2006 no virus found
McAfee 4848 09.08.2006 no virus found
Microsoft 1.1560 09.09.2006 no virus found
NOD32v2 1.1746 09.08.2006 no virus found
Norman 5.80.02 09.08.2006 no virus found
Panda 9.0.0.4 09.08.2006 no virus found
Sophos 4.09.0 09.09.2006 no virus found
Symantec 8.0 09.09.2006 no virus found
TheHacker 5.9.8.208 09.08.2006 no virus found
UNA 1.83 09.08.2006 no virus found
VBA32 3.11.1 09.09.2006 no virus found
VirusBuster 4.3.7:9 09.08.2006 no virus found

Aditional Information
File size: 52237 bytes
MD5: 4f08e6f4834843895d516717c646d7f9
SHA1: 8d2cd6bc0155c29e82affbc610fbbb63e6a0517f
09.09.2006, 15:03
HATTIFNATTOR

vbsys2.dll
MD5 85fee9b46163517dca34a1dec07c102a

AntiVir Found nothing
ArcaVir Found nothing
Avast Found Win32:Agent-BBZ
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Malware.Agent.20 (probable variant)

File: internt.exe
MD5 703f5be2e37c525934f118a482f850ac

AntiVir Found Trojan/LipGame.W.2
ArcaVir Found nothing
Avast Found Win32:Dialer-BG
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found Dialer-717
Dr.Web Found Trojan.DownLoader.2163
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found probably a variant of Win32/Dialer.EB (probable variant)
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Malware.Agent.20 (probable variant)

на фтп
10.09.2006, 10:34
Зайцев Олег

STATUS: FINISHED Complete scanning result of "doc.log.exe", received in VirusTotal at 09.10.2006, 08:21:56 (CET).
Antivirus Version Update Result
AntiVir 7.1.1.16 09.09.2006 no virus found
Authentium 4.93.8 09.09.2006 W32/Flurry.B
Avast 4.7.844.0 09.08.2006 no virus found
AVG 386 09.08.2006 no virus found
BitDefender 7.2 09.10.2006 Generic.Stration.3DE5FEED
CAT-QuickHeal 8.00 09.09.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.10.2006 Worm.Stration.Y-1
DrWeb 4.33 09.09.2006 no virus found
eTrust-InoculateIT 23.72.120 09.08.2006 no virus found
eTrust-Vet 30.3.3070 09.09.2006 no virus found
Ewido 4.0 09.09.2006 no virus found
Fortinet 2.77.0.0 09.09.2006 suspicious
F-Prot 3.16f 09.09.2006 security risk named W32/Flurry.B
F-Prot4 4.2.1.29 09.09.2006 W32/Flurry.B
Ikarus 0.2.65.0 09.08.2006 no virus found
Kaspersky 4.0.2.24 09.10.2006 no virus found
McAfee 4848 09.08.2006 no virus found
Microsoft 1.1560 09.09.2006 no virus found
NOD32v2 1.1746 09.08.2006 no virus found
Norman 5.90.23 09.08.2006 W32/Suspicious_M.gen
Panda 9.0.0.4 09.09.2006 Suspicious file
Sophos 4.09.0 09.10.2006 W32/Stration-S
Symantec 8.0 09.10.2006 [EMAIL="W32.Stration.A@mm"]W32.Stration.A@mm[/EMAIL]
TheHacker 5.9.8.208 09.08.2006 no virus found
UNA 1.83 09.08.2006 no virus found
VBA32 3.11.1 09.10.2006 no virus found
VirusBuster 4.3.7:9 09.09.2006 Trojan.Opnis.Gen!Pac

Aditional Information
File size: 151251 bytes
MD5: c46de6c5c7f7365a0655e5289120f23f
SHA1: e75296a98bccdc2e403b08cfc6aa9d3a7eafc1a8

Это со вчерашнего вечера рассылается по почте, у нас в конторе несколько штук пришло ...
11.09.2006, 11:35
Shu_b

Из раздела помогите:

Complete scanning result of "mssocks.exe", received in VirusTotal at 09.11.2006, 08:56:24 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.16 09.11.2006 HEUR/Malware
Authentium 4.93.8 09.11.2006 no virus found
Avast 4.7.844.0 09.08.2006 no virus found
AVG 386 09.08.2006 Generic2.ARY
BitDefender 7.2 09.11.2006 Trojan.Proxy.AE
CAT-QuickHeal 8.00 09.09.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.11.2006 no virus found
DrWeb 4.33 09.11.2006 BACKDOOR.Trojan
eTrust-InoculateIT 23.72.121 09.10.2006 no virus found
eTrust-Vet 30.3.3070 09.09.2006 no virus found
Ewido 4.0 09.10.2006 no virus found
Fortinet 2.77.0.0 09.10.2006 suspicious
F-Prot 3.16f 09.11.2006 no virus found
F-Prot4 4.2.1.29 09.11.2006 no virus found
Ikarus 0.2.65.0 09.08.2006 Trojan-Spy.Win32.Banker.anv
Kaspersky 4.0.2.24 09.11.2006 no virus found
McAfee 4848 09.08.2006 New Malware.n
Microsoft 1.1560 09.11.2006 no virus found
NOD32v2 1.1748 09.11.2006 probably unknown NewHeur_PE virus
Norman 5.90.23 09.08.2006 no virus found
Panda 9.0.0.4 09.10.2006 Bck/YourProxy.A
Sophos 4.09.0 09.11.2006 no virus found
Symantec 8.0 09.11.2006 no virus found
TheHacker 5.9.8.209 09.11.2006 no virus found
UNA 1.83 09.08.2006 no virus found
VBA32 3.11.1 09.11.2006 no virus found
VirusBuster 4.3.7:9 09.10.2006 no virus found

Aditional Information
File size: 29214 bytes
MD5: 1f6016d52abd7e60442ef00d6bb519c4
SHA1: e357f1fce692e0dea6b89774eb054b69b315d2c1
packers: UPack

Complete scanning result of "icodecpack.131.exe", received in VirusTotal at 09.11.2006, 09:20:09 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.16 09.11.2006 no virus found
Authentium 4.93.8 09.11.2006 no virus found
Avast 4.7.844.0 09.08.2006 no virus found
AVG 386 09.08.2006 no virus found
BitDefender 7.2 09.11.2006 Trojan.Downloader.Zlob.WT
CAT-QuickHeal 8.00 09.09.2006 no virus found
ClamAV devel-20060426 09.11.2006 no virus found
DrWeb 4.33 09.11.2006 no virus found
eTrust-InoculateIT 23.72.121 09.10.2006 no virus found
eTrust-Vet 30.3.3071 09.11.2006 no virus found
Ewido 4.0 09.10.2006 no virus found
Fortinet 2.77.0.0 09.10.2006 suspicious
F-Prot 3.16f 09.11.2006 no virus found
F-Prot4 4.2.1.29 09.11.2006 no virus found
Ikarus 0.2.65.0 09.08.2006 no virus found
Kaspersky 4.0.2.24 09.11.2006 Trojan-Downloader.Win32.Zlob.ajn
McAfee 4848 09.08.2006 no virus found
Microsoft 1.1560 09.11.2006 no virus found
NOD32v2 1.1748 09.11.2006 no virus found
Norman 5.90.23 09.08.2006 no virus found
Panda 9.0.0.4 09.10.2006 Suspicious file
Sophos 4.09.0 09.11.2006 no virus found
Symantec 8.0 09.11.2006 no virus found
TheHacker 5.9.8.209 09.11.2006 no virus found
UNA 1.83 09.08.2006 no virus found
VBA32 3.11.1 09.11.2006 no virus found
VirusBuster 4.3.7:9 09.10.2006 no virus found

Aditional Information
File size: 56012 bytes
MD5: 89a993dc4415d8132100d31562f26dd9
SHA1: 2f8d2dd1e7453c25560d52c5cd93da02a2bed72e
packers: UPX
12.09.2006, 09:27
MOCT

первый троян грузит второго и третьего.

Complete scanning result of "loader.exe", received in VirusTotal at 09.12.2006, 07:17:14 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.16 09.11.2006 HEUR/Malware
Authentium 4.93.8 09.11.2006 no virus found
Avast 4.7.844.0 09.11.2006 no virus found
AVG 386 09.11.2006 no virus found
BitDefender 7.2 09.12.2006 Generic.Malware.dld!!.889E488A
CAT-QuickHeal 8.00 09.11.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.12.2006 no virus found
DrWeb 4.33 09.11.2006 no virus found
eTrust-InoculateIT 23.72.122 09.12.2006 no virus found
eTrust-Vet 30.3.3071 09.11.2006 no virus found
Ewido 4.0 09.11.2006 no virus found
Fortinet 2.77.0.0 09.11.2006 suspicious
F-Prot 3.16f 09.12.2006 no virus found
F-Prot4 4.2.1.29 09.11.2006 no virus found
Ikarus 0.2.65.0 09.11.2006 no virus found
Kaspersky 4.0.2.24 09.12.2006 no virus found
McAfee 4849 09.11.2006 no virus found
Microsoft 1.1560 09.12.2006 no virus found
NOD32v2 1.1750 09.11.2006 no virus found
Norman 5.90.23 09.11.2006 Suspicious_F.gen
Panda 9.0.0.4 09.11.2006 Suspicious file
Sophos 4.09.0 09.11.2006 no virus found
Symantec 8.0 09.12.2006 no virus found
TheHacker 5.9.8.209 09.11.2006 no virus found
UNA 1.83 09.11.2006 no virus found
VBA32 3.11.1 09.12.2006 no virus found
VirusBuster 4.3.7:9 09.11.2006 no virus found

Aditional Information
File size: 2069 bytes
MD5: e7a3afd53b5bcff95cc1beb8e7d4f02f
SHA1: 67d3522c24fbac802637da169b714f4f20ce6096
packers: FSG

Complete scanning result of "downloader.exe", received in VirusTotal at 09.12.2006, 07:21:13 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.16 09.11.2006 TR/Dldr.Botol.C.1
Authentium 4.93.8 09.11.2006 no virus found
Avast 4.7.844.0 09.11.2006 no virus found
AVG 386 09.11.2006 no virus found
BitDefender 7.2 09.12.2006 no virus found
CAT-QuickHeal 8.00 09.11.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.12.2006 no virus found
DrWeb 4.33 09.11.2006 no virus found
eTrust-InoculateIT 23.72.122 09.12.2006 no virus found
eTrust-Vet 30.3.3071 09.11.2006 no virus found
Ewido 4.0 09.11.2006 no virus found
Fortinet 2.77.0.0 09.11.2006 suspicious
F-Prot 3.16f 09.12.2006 no virus found
F-Prot4 4.2.1.29 09.11.2006 no virus found
Ikarus 0.2.65.0 09.11.2006 no virus found
Kaspersky 4.0.2.24 09.12.2006 Trojan-Downloader.Win32.Small.dam
McAfee 4849 09.11.2006 no virus found
Microsoft 1.1560 09.12.2006 no virus found
NOD32v2 1.1750 09.11.2006 no virus found
Norman 5.90.23 09.11.2006 no virus found
Panda 9.0.0.4 09.11.2006 Suspicious file
Sophos 4.09.0 09.11.2006 no virus found
Symantec 8.0 09.12.2006 Trojan.Galapoper.A
TheHacker 5.9.8.209 09.11.2006 no virus found
UNA 1.83 09.11.2006 no virus found
VBA32 3.11.1 09.12.2006 no virus found
VirusBuster 4.3.7:9 09.11.2006 no virus found

Aditional Information
File size: 8300 bytes
MD5: 801f72f23e35cfb17c2a602f1f818f66
SHA1: 8e274432854f81d42e4bc031bde6b947674b4703

Complete scanning result of "loadadv455.exe", received in VirusTotal at 09.12.2006, 07:23:51 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.16 09.11.2006 TR/Crypt.F.Gen
Authentium 4.93.8 09.11.2006 Possibly a new variant of W32/Downloader-Sml-based!Maximus
Avast 4.7.844.0 09.11.2006 no virus found
AVG 386 09.11.2006 Downloader.Tibs
BitDefender 7.2 09.12.2006 Win32.FpuJunk.2
CAT-QuickHeal 8.00 09.11.2006 no virus found
ClamAV devel-20060426 09.12.2006 no virus found
eTrust-InoculateIT 23.72.122 09.12.2006 no virus found
eTrust-Vet 30.3.3071 09.11.2006 no virus found
DrWeb 4.33 09.11.2006 no virus found
Ewido 4.0 09.11.2006 no virus found
Fortinet 2.77.0.0 09.11.2006 no virus found
F-Prot 3.16f 09.12.2006 Possibly a new variant of W32/Downloader-Sml-based!Maximus
F-Prot4 4.2.1.29 09.11.2006 W32/Downloader-Sml-based!Maximus
Ikarus 0.2.65.0 09.11.2006 no virus found
Kaspersky 4.0.2.24 09.12.2006 Trojan-Downloader.Win32.Small.dnt
McAfee 4849 09.11.2006 no virus found
Microsoft 1.1560 09.12.2006 no virus found
NOD32v2 1.1750 09.12.2006 no virus found
Norman 5.80.02 09.11.2006 no virus found
Panda 9.0.0.4 09.11.2006 Suspicious file
Sophos 4.09.0 09.11.2006 no virus found
Symantec 8.0 09.12.2006 Bloodhound.Tibs
TheHacker 5.9.8.209 09.11.2006 no virus found
UNA 1.83 09.11.2006 no virus found
VBA32 3.11.1 09.12.2006 no virus found
VirusBuster 4.3.7:9 09.11.2006 no virus found

Aditional Information
File size: 8711 bytes
MD5: 77558bd6de32c7ab682d6eb39a7b934a
SHA1: 54905a83d6bb284f3c101e49a1c5ec1d83aa61a5
12.09.2006, 12:03
Alex_Goodwin

ZCodec1000.exe

STATUS: FINISHEDComplete scanning result of "__1056", received in VirusTotal at 09.12.2006, 09:51:41 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.16 09.12.2006 TR/Drop.Zlob.acn
Authentium 4.93.8 09.12.2006 no virus found
Avast 4.7.844.0 09.11.2006 no virus found
AVG 386 09.11.2006 Downloader.Zlob.DEZ
BitDefender 7.2 09.12.2006 no virus found
CAT-QuickHeal 8.00 09.11.2006 no virus found
ClamAV devel-20060426 09.12.2006 no virus found
eTrust-InoculateIT 23.72.122 09.12.2006 no virus found
eTrust-Vet 30.3.3073 09.12.2006 no virus found
DrWeb 4.33 09.12.2006 no virus found
Ewido 4.0 09.11.2006 no virus found
Fortinet 2.77.0.0 09.11.2006 no virus found
F-Prot 3.16f 09.12.2006 no virus found
F-Prot4 4.2.1.29 09.12.2006 no virus found
Ikarus 0.2.65.0 09.11.2006 no virus found
Kaspersky 4.0.2.24 09.12.2006 no virus found
McAfee 4849 09.11.2006 no virus found
Microsoft 1.1560 09.12.2006 no virus found
NOD32v2 1.1750 09.12.2006 no virus found
Norman 5.80.02 09.11.2006 no virus found
Panda 9.0.0.4 09.11.2006 no virus found
Sophos 4.09.0 09.12.2006 no virus found
Symantec 8.0 09.12.2006 no virus found
TheHacker 5.9.8.209 09.11.2006 no virus found
UNA 1.83 09.11.2006 no virus found
VBA32 3.11.1 09.12.2006 no virus found
VirusBuster 4.3.7:9 09.11.2006 no virus found

Aditional Information
File size: 73064 bytes
MD5: f1c363300315382a71b50019b4d29ede
SHA1: 7462cc11052cd5cf84ab4bfd80d6301d9e3095a6

Здравствуйте.
В присланном Вами файле не найдено ничего вредоносного.
---------
С уважением, Борис Ямпольский
Вирусный аналитик
ЗАО "Лаборатория Касперского"

Тел.: +7 (095) 797-8700
E-mail: [email][email protected][/email]
[url]http://www.kaspersky.com[/url] [url]http://www.viruslist.com[/url]

> Attachment: ZCodec1000.exe
13.09.2006, 07:46
MOCT

Complete scanning result of "SimpleLoader.exe", received in VirusTotal at 09.13.2006, 05:40:29 (CET).

Antivirus Version Update Result
AntiVir 7.1.1.16 09.12.2006 no virus found
Authentium 4.93.8 09.12.2006 no virus found
Avast 4.7.844.0 09.11.2006 no virus found
AVG 386 09.12.2006 no virus found
BitDefender 7.2 09.13.2006 BehavesLike:Trojan.Downloader
CAT-QuickHeal 8.00 09.12.2006 no virus found
ClamAV devel-20060426 09.12.2006 no virus found
DrWeb 4.33 09.12.2006 no virus found
eTrust-InoculateIT 23.72.123 09.13.2006 no virus found
eTrust-Vet 30.3.3073 09.12.2006 no virus found
Ewido 4.0 09.12.2006 no virus found
Fortinet 2.77.0.0 09.13.2006 no virus found
F-Prot 3.16f 09.13.2006 no virus found
F-Prot4 4.2.1.29 09.13.2006 no virus found
Ikarus 0.2.65.0 09.12.2006 no virus found
Kaspersky 4.0.2.24 09.13.2006 no virus found
McAfee 4850 09.12.2006 no virus found
Microsoft 1.1560 09.13.2006 TrojanDropper:Win32/Small.gen
NOD32v2 1.1753 09.12.2006 probably unknown NewHeur_PE virus
Norman 5.90.23 09.12.2006 W32/Downloader
Panda 9.0.0.4 09.12.2006 no virus found
Sophos 4.09.0 09.13.2006 no virus found
Symantec 8.0 09.13.2006 no virus found
TheHacker 5.9.8.210 09.13.2006 no virus found
UNA 1.83 09.11.2006 no virus found
VBA32 3.11.1 09.12.2006 no virus found
VirusBuster 4.3.7:9 09.12.2006 no virus found

Aditional Information
File size: 24576 bytes
MD5: d933e553c6a0abb5da6be1718b24f04d
SHA1: c5d193282b6e0a3ec21d8bfe0c58b5d514d2e0b7
13.09.2006, 14:35
Alex_Goodwin

AntiVir 7.1.1.16 09.13.2006 no virus found
Authentium 4.93.8 09.13.2006 no virus found
Avast 4.7.844.0 09.11.2006 Win32:Trojan-gen. {Delphi}
AVG 386 09.12.2006 no virus found
BitDefender 7.2 09.13.2006 no virus found
CAT-QuickHeal 8.00 09.12.2006 no virus found
ClamAV devel-20060426 09.13.2006 no virus found
eTrust-InoculateIT 23.72.123 09.13.2006 no virus found
eTrust-Vet 30.3.3073 09.12.2006 no virus found
DrWeb 4.33 09.13.2006 VirusConstructor.Xinch
Ewido 4.0 09.13.2006 no virus found
Fortinet 2.77.0.0 09.13.2006 suspicious
F-Prot 3.16f 09.13.2006 no virus found
F-Prot4 4.2.1.29 09.13.2006 no virus found
Ikarus 0.2.65.0 09.12.2006 no virus found
Kaspersky 4.0.2.24 09.13.2006 no virus found
McAfee 4850 09.12.2006 no virus found
Microsoft 1.1560 09.13.2006 no virus found
NOD32v2 1.1753 09.12.2006 probably unknown NewHeur_PE virus
Norman 5.80.02 09.12.2006 no virus found
Panda 9.0.0.4 09.12.2006 Suspicious file
Sophos 4.09.0 09.13.2006 no virus found
Symantec 8.0 09.13.2006 no virus found
TheHacker 5.9.8.210 09.13.2006 no virus found
UNA 1.83 09.11.2006 no virus found
VBA32 3.11.1 09.12.2006 VirusConstructor.Xinch
VirusBuster 4.3.7:9 09.12.2006 Trojan.QHosts.G

Ответ ЛК:

В присланном Вами файле обнаружено новое вредоносное программное обеспечение.
Trojan-PSW.Win32.LdPinch.sh
Его детектирование будет включено в очередное обновление антивирусных баз.
Благодарим за оказанную помощь.
14.09.2006, 19:06
Синауридзе Александр

Complete scanning result of "12345.scr", received in VirusTotal at 09.14.2006, 16:43:51 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.16 09.14.2006 HEUR/Crypted
Authentium 4.93.8 09.13.2006 no virus found
Avast 4.7.844.0 09.13.2006 no virus found
AVG 386 09.13.2006 no virus found
BitDefender 7.2 09.14.2006 no virus found
CAT-QuickHeal 8.00 09.14.2006 W32.Brontok.Q
ClamAV devel-20060426 09.14.2006 no virus found
DrWeb 4.33 09.14.2006 Trojan.PWS.LDPinch.1145
eTrust-InoculateIT 23.72.124 09.14.2006 no virus found
eTrust-Vet 30.3.3077 09.14.2006 no virus found
Ewido 4.0 09.14.2006 no virus found
Fortinet 2.82.0.0 09.13.2006 no virus found
F-Prot 3.16f 09.13.2006 no virus found
F-Prot4 4.2.1.29 09.14.2006 no virus found
Ikarus 0.2.65.0 09.14.2006 Backdoor.Win32.Ciadoor.N
Kaspersky 4.0.2.24 09.14.2006 no virus found
McAfee 4851 09.13.2006 no virus found
Microsoft 1.1560 09.14.2006 no virus found
[B]NOD32v2 1.1756 09.14.2006 no virus found [/B]
Norman 5.90.23 09.14.2006 W32/Suspicious_M.gen
Panda 9.0.0.4 09.14.2006 Suspicious file
Sophos 4.09.0 09.14.2006 no virus found
Symantec 8.0 09.14.2006 no virus found
TheHacker 5.9.8.211 09.14.2006 no virus found
UNA 1.83 09.13.2006 no virus found
VBA32 3.11.1 09.13.2006 suspected of Malware.Agent.26 (paranoid heuristics)
VirusBuster 4.3.7:9 09.14.2006 no virus found

Aditional Information
File size: 46517 bytes
MD5: cf44cfcbeaa831c3086e99243d70f901
SHA1: ffdae0aedaa59bb2e35882dbb629a43ecfe24821
packers: MEW
15.09.2006, 10:55
Alex_Goodwin

STATUS: FINISHEDComplete scanning result of "__1056", received in VirusTotal at 09.15.2006, 08:44:29 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.16 09.14.2006 BDC/Coldfus.11B.Dll
Authentium 4.93.8 09.14.2006 no virus found
Avast 4.7.844.0 09.13.2006 no virus found
AVG 386 09.14.2006 no virus found
BitDefender 7.2 09.15.2006 no virus found
CAT-QuickHeal 8.00 09.14.2006 no virus found
ClamAV devel-20060426 09.14.2006 Trojan.Dropper.Joiner.21
DrWeb 4.33 09.15.2006 no virus found
eTrust-InoculateIT 23.72.125 09.15.2006 no virus found
eTrust-Vet 30.3.3078 09.15.2006 no virus found
Ewido 4.0 09.14.2006 no virus found
Fortinet 2.82.0.0 09.15.2006 no virus found
F-Prot 3.16f 09.14.2006 no virus found
F-Prot4 4.2.1.29 09.14.2006 no virus found
Ikarus 0.2.65.0 09.14.2006 Trojan-Dropper.Win32.Tefil.21.A
Kaspersky 4.0.2.24 09.15.2006 no virus found
McAfee 4852 09.14.2006 W32/Spybot.worm.gen.p
Microsoft 1.1560 09.15.2006 no virus found
NOD32v2 1.1757 09.14.2006 no virus found
Norman 5.90.23 09.14.2006 no virus found
Panda 9.0.0.4 09.14.2006 Suspicious file
Sophos 4.09.0 09.15.2006 no virus found
Symantec 8.0 09.15.2006 no virus found
TheHacker 5.9.8.212 09.15.2006 Trojan/Hami
UNA 1.83 09.14.2006 no virus found
VBA32 3.11.1 09.14.2006 no virus found
VirusBuster 4.3.7:9 09.14.2006 no virus found

Aditional Information
File size: 1744896 bytes
MD5: 92c9f40b4da907589123bcb6cc600fa1
SHA1: 43408d1b230de21c8be607b7c8cd6dd4456ce8b5
packers: Armadillo

Здравствуйте.
В присланном Вами файле обнаружен Trojan-PSW.Win32.LdPinch.axh.
Его детектирование будет включено в очередное обновление антивирусных баз.
Благодарим за оказанную помощь.
15.09.2006, 11:10
Alex_Goodwin

STATUS: FINISHEDComplete scanning result of "__1056", received in VirusTotal at 09.15.2006, 08:57:13 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.16 09.15.2006 HEUR/Crypted
Authentium 4.93.8 09.14.2006 no virus found
Avast 4.7.844.0 09.13.2006 no virus found
AVG 386 09.14.2006 no virus found
BitDefender 7.2 09.15.2006 no virus found
CAT-QuickHeal 8.00 09.14.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.14.2006 no virus found
eTrust-InoculateIT 23.72.125 09.15.2006 no virus found
eTrust-Vet 30.3.3078 09.15.2006 no virus found
DrWeb 4.33 09.15.2006 no virus found
Ewido 4.0 09.14.2006 Heuristic.Win32.Morphine-Crypted
Fortinet 2.82.0.0 09.15.2006 suspicious
F-Prot 3.16f 09.14.2006 no virus found
F-Prot4 4.2.1.29 09.14.2006 no virus found
Ikarus 0.2.65.0 09.14.2006 no virus found
Kaspersky 4.0.2.24 09.15.2006 no virus found
McAfee 4852 09.14.2006 New Malware.h
Microsoft 1.1560 09.15.2006 no virus found
NOD32v2 1.1757 09.15.2006 unpack error
Norman 5.80.02 09.14.2006 W32/Suspicious_N.gen
Panda 9.0.0.4 09.14.2006 Suspicious file
Sophos 4.09.0 09.15.2006 no virus found
Symantec 8.0 09.15.2006 no virus found
TheHacker 5.9.8.212 09.15.2006 no virus found
UNA 1.83 09.14.2006 no virus found
VBA32 3.11.1 09.14.2006 suspected of Trojan.Delf.37
VirusBuster 4.3.7:9 09.14.2006 no virus found

Aditional Information
File size: 426496 bytes
MD5: 875c6820aa8e7d391735b9904ed79f21
SHA1: 305d5a13771e73690eb79baed195e1300dc5f4c9
packers: Morphine
15.09.2006, 11:22
Alex_Goodwin

AntiVir 7.2.0.16 09.15.2006 no virus found
Authentium 4.93.8 09.14.2006 no virus found
Avast 4.7.844.0 09.13.2006 no virus found
AVG 386 09.14.2006 no virus found
BitDefender 7.2 09.15.2006 no virus found
CAT-QuickHeal 8.00 09.14.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.14.2006 no virus found
DrWeb 4.33 09.15.2006 no virus found
eTrust-InoculateIT 23.72.125 09.15.2006 no virus found
eTrust-Vet 30.3.3078 09.15.2006 no virus found
Ewido 4.0 09.14.2006 no virus found
Fortinet 2.82.0.0 09.15.2006 suspicious
F-Prot 3.16f 09.14.2006 no virus found
F-Prot4 4.2.1.29 09.14.2006 no virus found
Ikarus 0.2.65.0 09.14.2006 no virus found
Kaspersky 4.0.2.24 09.15.2006 no virus found
McAfee 4852 09.14.2006 New Malware.f
Microsoft 1.1560 09.15.2006 no virus found
NOD32v2 1.1757 09.14.2006 no virus found
Norman 5.90.23 09.14.2006 W32/Suspicious_U.gen
Panda 9.0.0.4 09.14.2006 Suspicious file
Sophos 4.09.0 09.15.2006 no virus found
Symantec 8.0 09.15.2006 no virus found
TheHacker 5.9.8.212 09.15.2006 no virus found
UNA 1.83 09.14.2006 no virus found
VBA32 3.11.1 09.14.2006 no virus found
VirusBuster 4.3.7:9 09.14.2006 no virus found

Aditional Information
File size: 27082 bytes
MD5: 2e8ea67cbff726db0368a2fe125d301a
SHA1: bcfde81b364da38c2cfce4b74cae12e6e91ded65
packers: UPack
15.09.2006, 14:44
Alex_Goodwin

STATUS: FINISHEDComplete scanning result of "__1056", received in VirusTotal at 09.15.2006, 12:39:06 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.16 09.15.2006 Worm/Sdbot.664576.B
Authentium 4.93.8 09.14.2006 no virus found
Avast 4.7.844.0 09.13.2006 Win32:Bifrose-CG
AVG 386 09.14.2006 no virus found
BitDefender 7.2 09.15.2006 no virus found
CAT-QuickHeal 8.00 09.14.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 09.14.2006 Trojan.Bifrose-361
eTrust-InoculateIT 23.72.125 09.15.2006 no virus found
eTrust-Vet 30.3.3078 09.15.2006 no virus found
DrWeb 4.33 09.15.2006 no virus found
Ewido 4.0 09.15.2006 Backdoor.Rbot
Fortinet 2.82.0.0 09.15.2006 suspicious
F-Prot 3.16f 09.14.2006 no virus found
F-Prot4 4.2.1.29 09.14.2006 no virus found
Ikarus 0.2.65.0 09.14.2006 no virus found
Kaspersky 4.0.2.24 09.15.2006 Backdoor.Win32.Bifrose.sj
McAfee 4852 09.14.2006 no virus found
Microsoft 1.1560 09.15.2006 no virus found
NOD32v2 1.1758 09.15.2006 no virus found
Norman 5.80.02 09.15.2006 W32/SDBot.AHPV
Panda 9.0.0.4 09.14.2006 Suspicious file
Sophos 4.09.0 09.15.2006 no virus found
Symantec 8.0 09.15.2006 IRC Trojan
TheHacker 5.9.8.212 09.15.2006 no virus found
UNA 1.83 09.14.2006 no virus found
VBA32 3.11.1 09.14.2006 Backdoor.Win32.Bifrose.sj
VirusBuster 4.3.7:9 09.14.2006 no virus found

Aditional Information
File size: 4453 bytes
MD5: 50b8de6b5d337af93c1d86172415647f
SHA1: f873b08b39053805df88433b04f6a82d09efb5fa
15.09.2006, 22:40
Shu_b

сумма
17.09.2006, 08:34
Синауридзе Александр

Complete scanning result of "FND0.NFI", received in VirusTotal at 09.17.2006, 06:16:10 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.16 09.16.2006 no virus found
Authentium 4.93.8 09.15.2006 no virus found
Avast 4.7.844.0 09.15.2006 no virus found
AVG 386 09.15.2006 no virus found
BitDefender 7.2 09.17.2006 no virus found
CAT-QuickHeal 8.00 09.15.2006 no virus found
ClamAV devel-20060426 09.17.2006 no virus found
DrWeb 4.33 09.16.2006 Trojan.Spambot
eTrust-InoculateIT 23.72.127 09.16.2006 no virus found
eTrust-Vet 30.3.3078 09.15.2006 no virus found
Ewido 4.0 09.16.2006 no virus found
Fortinet 2.82.0.0 09.17.2006 no virus found
F-Prot 3.16f 09.15.2006 no virus found
F-Prot4 4.2.1.29 09.15.2006 no virus found
Kaspersky 4.0.2.24 09.17.2006 no virus found
McAfee 4853 09.15.2006 no virus found
Microsoft 1.1560 09.17.2006 no virus found
[B]NOD32v2 1.1759 09.16.2006 no virus found[/B]
Norman 5.90.23 09.15.2006 no virus found
Panda 9.0.0.4 09.16.2006 no virus found
Sophos 4.09.0 09.16.2006 no virus found
Symantec 8.0 09.17.2006 no virus found
TheHacker 6.0.1.071 09.17.2006 no virus found
UNA 1.83 09.15.2006 TrojanProxy.Win32.Horst.0CC2
VBA32 3.11.1 09.15.2006 no virus found
VirusBuster 4.3.7:9 09.16.2006 no virus found

Aditional Information
File size: 48640 bytes
MD5: 74def88a325869fbe299f379119fe5e4
SHA1: 50e6e770a1d8559c75f9fc91dfcd7b57d33b66b2
packers: XORCrypt, UPX
19.09.2006, 01:32
mvlab

STATUS: FINISHEDComplete scanning result of "SVKP.sys", received in VirusTotal at 09.18.2006, 23:25:06 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.16 09.18.2006 no virus found
Authentium 4.93.8 09.18.2006 no virus found
Avast 4.7.844.0 09.15.2006 no virus found
AVG 386 09.18.2006 no virus found
BitDefender 7.2 09.18.2006 no virus found
CAT-QuickHeal 8.00 09.18.2006 Rootkit.Agent.dm
ClamAV devel-20060426 09.18.2006 Trojan.PcClient-42
DrWeb 4.33 09.18.2006 no virus found
eTrust-InoculateIT 23.72.127 09.16.2006 no virus found
eTrust-Vet 30.3.3084 09.18.2006 no virus found
Ewido 4.0 09.18.2006 no virus found
Fortinet 2.82.0.0 09.18.2006 no virus found
F-Prot 3.16f 09.18.2006 no virus found
F-Prot4 4.2.1.29 09.18.2006 no virus found
Ikarus 0.2.65.0 09.18.2006 no virus found
Kaspersky 4.0.2.24 09.18.2006 no virus found
McAfee 4854 09.18.2006 no virus found
Microsoft 1.1560 09.17.2006 no virus found
NOD32v2 1.1761 09.18.2006 no virus found
Norman 5.90.23 09.18.2006 no virus found
Panda 9.0.0.4 09.18.2006 no virus found
Sophos 4.09.0 09.18.2006 no virus found
Symantec 8.0 09.18.2006 no virus found
TheHacker 6.0.1.071 09.17.2006 no virus found
UNA 1.83 09.18.2006 no virus found
VBA32 3.11.1 09.18.2006 no virus found
VirusBuster 4.3.7:9 09.18.2006 Rootkit.Agent.DML

Aditional Information
File size: 2368 bytes
MD5: f05028b163b92c302a74409d683ac9b0
SHA1: 74a943b9f3bf63f8de5c3175f96366b24a661067
packers: embedded
19.09.2006, 01:46
mvlab

STATUS: FINISHEDComplete scanning result of "Save.exe", received in VirusTotal at 09.18.2006, 23:39:28 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.16 09.18.2006 ADSPY/SaveNow.CB.19
Authentium 4.93.8 09.18.2006 no virus found
Avast 4.7.844.0 09.15.2006 Win32:Adware-gen.
AVG 386 09.18.2006 Adware Generic.OXE
BitDefender 7.2 09.18.2006 no virus found
CAT-QuickHeal 8.00 09.18.2006 Adware.WhenU.g (Not a Virus)
ClamAV devel-20060426 09.18.2006 no virus found
DrWeb 4.33 09.18.2006 Adware.SaveNow
eTrust-InoculateIT 23.72.127 09.16.2006 no virus found
eTrust-Vet 30.3.3084 09.18.2006 no virus found
Ewido 4.0 09.18.2006 Adware.SaveNow
Fortinet 2.82.0.0 09.18.2006 Adware/SaveNow!014
F-Prot 3.16f 09.18.2006 no virus found
F-Prot4 4.2.1.29 09.18.2006 no virus found
Ikarus 0.2.65.0 09.18.2006 no virus found
Kaspersky 4.0.2.24 09.18.2006 not-a-virus:AdTool.Win32.WhenU.g
McAfee 4854 09.18.2006 potentially unwanted program Adware-SaveNow
Microsoft 1.1560 09.18.2006 WhenU.SaveNow (threat-c)
NOD32v2 1.1761 09.18.2006 probably a variant of Win32/Adware.WhenU.SaveNow
Norman 5.90.23 09.18.2006 W32/SaveNow.SZ
Panda 9.0.0.4 09.18.2006 Adware/SaveNow
Sophos 4.09.0 09.18.2006 no virus found
Symantec 8.0 09.18.2006 no virus found
TheHacker 6.0.1.071 09.17.2006 no virus found
UNA 1.83 09.18.2006 Adware.SaveNow.331C
VBA32 3.11.1 09.18.2006 AdWare.Win32.SaveNow.cb
VirusBuster 4.3.7:9 09.18.2006 no virus found

Aditional Information
File size: 642928 bytes
MD5: ef8bf7756646be6b9fde7e65940ec387
SHA1: f2facb314dbd7d86dbcbee7d5e171800d6281964
19.09.2006, 13:54
Shu_b

Из раздела помогите: [url=http://virusinfo.info/showthread.php?t=6257]t=6257[/url]

Complete scanning result of "eraseme_51577.exe", received in VirusTotal at 09.19.2006, 11:46:48 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.16 09.19.2006 TR/Packed.CryptExe
Authentium 4.93.8 09.18.2006 could be a corrupted executable file
Avast 4.7.844.0 09.15.2006 no virus found
AVG 386 09.18.2006 no virus found
BitDefender 7.2 09.19.2006 no virus found
CAT-QuickHeal 8.00 09.18.2006 no virus found
ClamAV devel-20060426 09.19.2006 no virus found
eTrust-InoculateIT 23.72.128 09.19.2006 no virus found
eTrust-Vet 30.3.3086 09.19.2006 no virus found
DrWeb 4.33 09.19.2006 Win32.HLLW.MyBot
Ewido 4.0 09.19.2006 no virus found
Fortinet 2.82.0.0 09.19.2006 suspicious
F-Prot 3.16f 09.18.2006 no virus found
F-Prot4 4.2.1.29 09.18.2006 no virus found
Ikarus 0.2.65.0 09.18.2006 no virus found
Kaspersky 4.0.2.24 09.19.2006 no virus found
McAfee 4854 09.18.2006 no virus found
Microsoft 1.1560 09.19.2006 no virus found
NOD32v2 1.1762 09.19.2006 no virus found
Norman 5.80.02 09.18.2006 no virus found
Panda 9.0.0.4 09.18.2006 no virus found
Sophos 4.09.0 09.19.2006 no virus found
Symantec 8.0 09.19.2006 no virus found
TheHacker 6.0.1.072 09.19.2006 no virus found
UNA 1.83 09.18.2006 no virus found
VBA32 3.11.1 09.19.2006 no virus found
VirusBuster 4.3.7:9 09.18.2006 no virus found

Aditional Information
File size: 14336 bytes
MD5: 1ab834217078af1dcc572b0108e06b31
SHA1: 29b490196fd08e84649d06e71ebfc2f843357a22

Показывать 40 сообщений этой темы на одной странице

Текущее время: 01:54. Часовой пояс GMT +3.

Page generated in 0.00311 seconds with 10 queries