Исследование антивирусов 6

Printable View

Показывать 40 сообщений этой темы на одной странице

25.12.2007, 16:55
rubin

vhosts.exe

[code]AhnLab-V3 2007.12.25.10 2007.12.24 -
[b]AntiVir 7.6.0.46 2007.12.25 TR/Crypt.XPACK.Gen[/b]
Authentium 4.93.8 2007.12.25 -
Avast 4.7.1098.0 2007.12.24 -
AVG 7.5.0.516 2007.12.25 -
BitDefender 7.2 2007.12.25 -
CAT-QuickHeal 9.00 2007.12.25 -
ClamAV 0.91.2 2007.12.25 -
DrWeb 4.44.0.09170 2007.12.25 -
eSafe 7.0.15.0 2007.12.24 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.25 -
FileAdvisor 1 2007.12.25 -
Fortinet 3.14.0.0 2007.12.25 -
F-Prot 4.4.2.54 2007.12.25 -
F-Secure 6.70.13030.0 2007.12.25 -
Ikarus T3.1.1.15 2007.12.25 -
Kaspersky 7.0.0.125 2007.12.25 -
McAfee 5192 2007.12.24 -
Microsoft 1.3109 2007.12.25 -
NOD32v2 2747 2007.12.25 -
Norman 5.80.02 2007.12.24 -
[b]Panda 9.0.0.4 2007.12.25 Suspicious file[/b]
Prevx1 V2 2007.12.25 -
Rising 20.24.12.00 2007.12.25 -
[b]Sophos 4.24.0 2007.12.25 Mal/Basine-C[/b]
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.25 -
TheHacker 6.2.9.168 2007.12.22 -
VBA32 3.12.2.5 2007.12.24 -
VirusBuster 4.3.26:9 2007.12.24 -
[b]Webwasher-Gateway 6.6.2 2007.12.25 Trojan.Crypt.XPACK.Gen[/b][/code]
File size: 20480 bytes
MD5: 3f6a0b6f22e6b87ef817638789b46c0b
SHA1: ba8a1503089e8c0489b4beb52b160b11c05b15f4

avz00002.dta
[code]AhnLab-V3 2007.12.25.10 2007.12.24 -
[b]AntiVir 7.6.0.46 2007.12.25 TR/Crypt.XPACK.Gen[/b]
Authentium 4.93.8 2007.12.25 -
Avast 4.7.1098.0 2007.12.24 -
AVG 7.5.0.516 2007.12.25 -
BitDefender 7.2 2007.12.25 -
CAT-QuickHeal 9.00 2007.12.25 -
ClamAV 0.91.2 2007.12.25 -
[b]DrWeb 4.44.0.09170 2007.12.25 Trojan.Proxy.2240[/b]
eSafe 7.0.15.0 2007.12.24 -
eTrust-Vet 31.3.5400 2007.12.24 -
[b]Ewido 4.0 2007.12.25 Downloader.Small.fah[/b]
FileAdvisor 1 2007.12.25 -
Fortinet 3.14.0.0 2007.12.25 -
F-Prot 4.4.2.54 2007.12.25 -
F-Secure 6.70.13030.0 2007.12.25 -
Ikarus T3.1.1.15 2007.12.25 -
Kaspersky 7.0.0.125 2007.12.25 -
McAfee 5192 2007.12.24 -
Microsoft 1.3109 2007.12.25 -
NOD32v2 2747 2007.12.25 -
Norman 5.80.02 2007.12.24 -
Panda 9.0.0.4 2007.12.25 -
Prevx1 V2 2007.12.25 -
Rising 20.24.12.00 2007.12.25 -
Sophos 4.24.0 2007.12.25 -
[b]Sunbelt 2.2.907.0 2007.12.21 VIPRE.Suspicious[/b]
Symantec 10 2007.12.25 -
TheHacker 6.2.9.168 2007.12.22 -
[b]VBA32 3.12.2.5 2007.12.24 suspected of Trojan-PSW.Pinch.35 (paranoid heuristics)[/b]
VirusBuster 4.3.26:9 2007.12.24 -
[b]Webwasher-Gateway 6.6.2 2007.12.25 Trojan.Crypt.XPACK.Gen[/b][/code]
File size: 16896 bytes
MD5: f75864554cb100786170999c4dffc115
SHA1: 752d20a5a147e50b46dd69b76a80e94d05159be4
25.12.2007, 20:26
ALEX(XX)

File sysfope.exe received on 12.25.2007 18:20:39 (CET)

Antivirus;Version;Last Update;Result
AhnLab-V3;2007.12.25.10;2007.12.24;-
[B]AntiVir;7.6.0.46;2007.12.25;TR/Crypt.ULPM.Gen[/B]
Authentium;4.93.8;2007.12.25;-
[B]Avast;4.7.1098.0;2007.12.25;Win32:Agent-PBQ[/B]
AVG;7.5.0.516;2007.12.25;-
BitDefender;7.2;2007.12.25;-
[B]CAT-QuickHeal;9.00;2007.12.25;(Suspicious) - DNAScan[/B]
ClamAV;0.91.2;2007.12.25;-
[B]DrWeb;4.44.0.09170;2007.12.25;Trojan.DownLoader.38353[/B]
[B]eSafe;7.0.15.0;2007.12.25;suspicious Trojan/Worm[/B]
eTrust-Vet;31.3.5400;2007.12.24;-
Ewido;4.0;2007.12.25;-
FileAdvisor;1;2007.12.25;-
Fortinet;3.14.0.0;2007.12.25;-
[B]F-Prot;4.4.2.54;2007.12.25;W32/Heuristic-KPP!Eldorado[/B]
F-Secure;6.70.13030.0;2007.12.25;-
Ikarus;T3.1.1.15;2007.12.25;-
[B]Kaspersky;7.0.0.125;2007.12.25;not-a-virus:AdWare.Win32.Agent.yz[/B]
McAfee;5192;2007.12.24;-
[B]Microsoft;1.3109;2007.12.25;Trojan:Win32/AgentBypass.gen!K[/B]
NOD32v2;2747;2007.12.25;-
Norman;5.80.02;2007.12.24;-
[B]Panda;9.0.0.4;2007.12.25;Suspicious file[/B]
[B]Prevx1;V2;2007.12.25;Generic.Malware[/B]
Rising;20.24.12.00;2007.12.25;-
Sophos;4.24.0;2007.12.25;-
[B]Sunbelt;2.2.907.0;2007.12.21;VIPRE.Suspicious[/B]
Symantec;10;2007.12.25;-
TheHacker;6.2.9.168;2007.12.22;-
VBA32;3.12.2.5;2007.12.24;-
VirusBuster;4.3.26:9;2007.12.25;-
[B]Webwasher-Gateway;6.6.2;2007.12.25;Trojan.Crypt.ULPM.Gen[/B]

Additional information
File size: 34049 bytes
MD5: 0639ebdcda125a88685314262d817f8a
SHA1: f3d51361257b93db898a8f819653081b7ce369cf
PEiD: RCryptor v1.5 --> Vaska
packers: UPX
packers: UPX
packers: SuperCrypt, PE_Patch.UPX, UPX, UPX, PE_Patch.UPX, UPX
Prevx info: [URL]http://info.prevx.com/aboutprogramtext.asp?PX5=4B224CFB01D8114585B40015781844009E3A294A[/URL]
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.
26.12.2007, 06:25
ZhIV

Файл opr02TF4.htm получен 2007.12.26 04:02:54 (CET)

AhnLab-V3 2007.12.25.10 2007.12.24 -
AntiVir 7.6.0.46 2007.12.25 -
Authentium 4.93.8 2007.12.25 -
Avast 4.7.1098.0 2007.12.25 -
AVG 7.5.0.516 2007.12.25 -
BitDefender 7.2 2007.12.26 -
CAT-QuickHeal 9.00 2007.12.25 -
ClamAV 0.91.2 2007.12.26 -
[B]DrWeb 4.44.0.09170 2007.12.25 VBS.PackFor[/B]
eSafe 7.0.15.0 2007.12.25 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.25 -
FileAdvisor 1 2007.12.26 -
Fortinet 3.14.0.0 2007.12.26 -
F-Prot 4.4.2.54 2007.12.25 -
[B]F-Secure 6.70.13030.0 2007.12.26 DoS.JS.Dframe.n[/B]
Ikarus T3.1.1.15 2007.12.26 -
[B]Kaspersky 7.0.0.125 2007.12.26 DoS.JS.Dframe.n[/B]
[B]McAfee 5192 2007.12.24 Exploit-IFrame
Microsoft 1.3109 2007.12.26 DoS:JS/Dframe.gen[/B]
NOD32v2 2747 2007.12.25 -
Norman 5.80.02 2007.12.24 -
[B]Panda 9.0.0.4 2007.12.25 W32/Dowlod.A[/B]
Prevx1 V2 2007.12.26 -
Rising 20.24.12.00 2007.12.25 -
[B]Sophos 4.24.0 2007.12.26 Troj/Pintadd-A[/B]
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.26 -
TheHacker 6.2.9.168 2007.12.22 -
VBA32 3.12.2.5 2007.12.24 -
VirusBuster 4.3.26:9 2007.12.25 -
Webwasher-Gateway 6.6.2 2007.12.25 -
Дополнительная информация
File size: 35862 bytes
MD5: 4c03044564b1a19743b16341be25f583
SHA1: a0f5e06399f4899ec3e20cf086d232ead442e0c4
PEiD: -

Файл opr02TFK.htm получен 2007.12.26 04:08:36 (CET)
AhnLab-V3 2007.12.25.10 2007.12.24 -
AntiVir 7.6.0.46 2007.12.25 -
Authentium 4.93.8 2007.12.25 -
Avast 4.7.1098.0 2007.12.25 -
AVG 7.5.0.516 2007.12.25 -
BitDefender 7.2 2007.12.26 -
CAT-QuickHeal 9.00 2007.12.25 -
ClamAV 0.91.2 2007.12.26 -
[B]DrWeb 4.44.0.09170 2007.12.25 VBS.PackFor[/B]
eSafe 7.0.15.0 2007.12.25 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.25 -
FileAdvisor 1 2007.12.26 -
Fortinet 3.14.0.0 2007.12.26 -
F-Prot 4.4.2.54 2007.12.25 -
F-Secure 6.70.13030.0 2007.12.26 -
Ikarus T3.1.1.15 2007.12.26 -
Kaspersky 7.0.0.125 2007.12.26 -
[B]McAfee 5192 2007.12.24 Exploit-IFrame[/B]
Microsoft 1.3109 2007.12.26 -
NOD32v2 2747 2007.12.25 -
Norman 5.80.02 2007.12.24 -
Panda 9.0.0.4 2007.12.25 -
Prevx1 V2 2007.12.26 -
Rising 20.24.12.00 2007.12.25 -
[B]Sophos 4.24.0 2007.12.26 Troj/Pintadd-A[/B]
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.26 -
TheHacker 6.2.9.168 2007.12.22 -
VBA32 3.12.2.5 2007.12.24 -
VirusBuster 4.3.26:9 2007.12.25 -
Webwasher-Gateway 6.6.2 2007.12.26 -
Дополнительная информация
File size: 67463 bytes
MD5: ec217fa712390258690ffa3ba97f41e4
SHA1: ce0b0e06cf70c2654ca0580b74ac627919acd327
PEiD: -

Файл opr02UM9.htm получен 2007.12.26 04:09:04 (CET)
AhnLab-V3 2007.12.25.10 2007.12.24 -
AntiVir 7.6.0.46 2007.12.25 -
Authentium 4.93.8 2007.12.25 -
Avast 4.7.1098.0 2007.12.25 -
AVG 7.5.0.516 2007.12.25 -
[B]BitDefender 7.2 2007.12.26 Trojan.Downloader.Js.Agent.KV[/B]
CAT-QuickHeal 9.00 2007.12.25 -
ClamAV 0.91.2 2007.12.26 -
[B]DrWeb 4.44.0.09170 2007.12.25 Trojan.DownLoader.28150
eSafe 7.0.15.0 2007.12.25 JS.Iframe.cv
[/B]eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.25 -
FileAdvisor 1 2007.12.26 -
Fortinet 3.14.0.0 2007.12.26 -
F-Prot 4.4.2.54 2007.12.25 -
[B]F-Secure 6.70.13030.0 2007.12.26 Trojan-Downloader.JS.Agent.kv
Ikarus T3.1.1.15 2007.12.26 Trojan-Downloader.JS.Agent.kv
Kaspersky 7.0.0.125 2007.12.26 Trojan-Downloader.JS.Agent.kv
McAfee 5192 2007.12.24 Exploit-IFrame[/B]
Microsoft 1.3109 2007.12.26 -
NOD32v2 2747 2007.12.25 -
Norman 5.80.02 2007.12.24 -
Panda 9.0.0.4 2007.12.25 -
Prevx1 V2 2007.12.26 -
Rising 20.24.12.00 2007.12.25 -
Sophos 4.24.0 2007.12.26 -
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.26 -
TheHacker 6.2.9.168 2007.12.22 -
VBA32 3.12.2.5 2007.12.24 -
VirusBuster 4.3.26:9 2007.12.25 -
Webwasher-Gateway 6.6.2 2007.12.26 -
Дополнительная информация
File size: 12753 bytes
MD5: 5e9f555d80e10568d2dc561d7033c6e2
SHA1: 10f2687c222d366086a8c236ac68ab67d7fb92bb
PEiD: -

Файл opr03KWH.htm получен 2007.12.26 04:09:18 (CET)
AhnLab-V3 2007.12.25.10 2007.12.24 -
[B]AntiVir 7.6.0.46 2007.12.25 HTML/Rce.Gen[/B]
Authentium 4.93.8 2007.12.25 -
Avast 4.7.1098.0 2007.12.25 -
[B]AVG 7.5.0.516 2007.12.25 JS/Downloader.Agent
BitDefender 7.2 2007.12.26 Exploit.AdodbStream.J
[/B]CAT-QuickHeal 9.00 2007.12.25 -
ClamAV 0.91.2 2007.12.26 -
[B]DrWeb 4.44.0.09170 2007.12.25 VBS.PackFor
[/B]eSafe 7.0.15.0 2007.12.25 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.25 -
FileAdvisor 1 2007.12.26 -
[B]Fortinet 3.14.0.0 2007.12.26 JS/WebAttacker!exploit[/B]
F-Prot 4.4.2.54 2007.12.25 -
[B]F-Secure 6.70.13030.0 2007.12.26 JS/Laume.gen2
Ikarus T3.1.1.15 2007.12.26 Trojan-Downloader.JS.Psyme.hu
[/B]Kaspersky 7.0.0.125 2007.12.26 -
[B]McAfee 5192 2007.12.24 JS/Downloader-AUD
Microsoft 1.3109 2007.12.26 TrojanDownloader:JS/Psyme.gen
[/B]NOD32v2 2747 2007.12.25 -
[B]Norman 5.80.02 2007.12.24 JS/Laume.gen2
[/B]Panda 9.0.0.4 2007.12.25 -
Prevx1 V2 2007.12.26 -
Rising 20.24.12.00 2007.12.25 -
[B]Sophos 4.24.0 2007.12.26 Mal/ObfJS-A[/B]
Sunbelt 2.2.907.0 2007.12.21 -
[B]Symantec 10 2007.12.26 Downloader
TheHacker 6.2.9.168 2007.12.22 Trojan/Downloader.vbs
[/B]VBA32 3.12.2.5 2007.12.24 -
VirusBuster 4.3.26:9 2007.12.25 -
[B]Webwasher-Gateway 6.6.2 2007.12.26 Script.Rce.Gen[/B]
Дополнительная информация
File size: 507 bytes
MD5: 969a819391719993899c36f0ab1b921f
SHA1: 0f9d6e1200e22427cc1b8d7f215e6cf8de6e36d5
PEiD: -
packers: Crypt.DCScript

[size="1"][color="#666686"][B][I]Добавлено через 4 минуты[/I][/B][/color][/size]

Файл opr03NVL.htm получен 2007.12.26 04:10:43 (CET)

AhnLab-V3 2007.12.25.10 2007.12.24 -
AntiVir 7.6.0.46 2007.12.25 -
Authentium 4.93.8 2007.12.25 -
Avast 4.7.1098.0 2007.12.25 -
AVG 7.5.0.516 2007.12.25 -
[B]BitDefender 7.2 2007.12.26 Trojan.Downloader.Js.Psyme.O[/B]
CAT-QuickHeal 9.00 2007.12.25 -
[B]ClamAV 0.91.2 2007.12.26 JS.Small
DrWeb 4.44.0.09170 2007.12.25 VBS.Psyme.377
[/B]eSafe 7.0.15.0 2007.12.25 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.25 -
FileAdvisor 1 2007.12.26 -
[B]Fortinet 3.14.0.0 2007.12.26 JS/Inor.A!tr.dldr[/B]
F-Prot 4.4.2.54 2007.12.25 -
[B]F-Secure 6.70.13030.0 2007.12.26 Trojan-Downloader.JS.Small.ih
Ikarus T3.1.1.15 2007.12.26 Trojan-Downloader.JS.Inor.A
Kaspersky 7.0.0.125 2007.12.26 Trojan-Downloader.JS.Small.ih
McAfee 5192 2007.12.24 JS/Wonka
[/B]Microsoft 1.3109 2007.12.26 -
NOD32v2 2747 2007.12.25 -
Norman 5.80.02 2007.12.24 -
Panda 9.0.0.4 2007.12.25 -
Prevx1 V2 2007.12.26 -
Rising 20.24.12.00 2007.12.25 -
[B]Sophos 4.24.0 2007.12.26 Mal/ObfJS-H
[/B]Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.26 -
TheHacker 6.2.9.168 2007.12.22 -
[B]VBA32 3.12.2.5 2007.12.24 Trojan-Downloader.JS.Psyme.cv[/B]
VirusBuster 4.3.26:9 2007.12.25 -
Webwasher-Gateway 6.6.2 2007.12.26 -
Дополнительная информация
File size: 18502 bytes
MD5: d558d4e52ca3393ae521632262337912
SHA1: 032f4109040572877ab7a8d77f38cbafeb35b697
PEiD: -
26.12.2007, 19:42
strawser

[QUOTE=Shu_b;164167]ps. если не трудно, зашлите по ссылке (в zip'e, с паролем virus) - [url]http://virusinfo.info/upload_virus.php?tid=12941[/url][/QUOTE]
Выслал.

[size="1"][color="#666686"][B][I]Добавлено через 21 минуту[/I][/B][/color][/size]

[B]symantec ??[/B]

File 43.rar received on 12.26.2007 17:32:26 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.27.10 2007.12.26 -
[B]AntiVir 7.6.0.46 2007.12.26 TR/Dldr.Agent.dow[/B]
Authentium 4.93.8 2007.12.26 -
[B]Avast 4.7.1098.0 2007.12.26 Win32:Agent-MHD
AVG 7.5.0.516 2007.12.25 Agent.LOH
BitDefender 7.2 2007.12.26 Generic.NPop.84CDBBCB
CAT-QuickHeal 9.00 2007.12.25 Trojan.Agent.app
ClamAV 0.91.2 2007.12.26 Trojan.Downloader.Agent-1278
DrWeb 4.44.0.09170 2007.12.26 Trojan.DownLoader.36243
eSafe 7.0.15.0 2007.12.25 Win32.Agent.app[/B]
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.26 -
FileAdvisor 1 2007.12.26 -
[B]Fortinet 3.14.0.0 2007.12.26 W32/Agent.GBH!tr
F-Prot 4.4.2.54 2007.12.25 W32/VCtroj.A.gen!Eldorado
F-Secure 6.70.13030.0 2007.12.26 Trojan-Downloader.Win32.Agent.gbh[/B]
[B]Ikarus T3.1.1.15 2007.12.26 Trojan.Win32.Agent.app
Kaspersky 7.0.0.125 2007.12.26 Trojan-Downloader.Win32.Agent.gbh
McAfee 5192 2007.12.24 Generic Downloader.p
Microsoft 1.3109 2007.12.26 Trojan:Win32/Agent.APP
NOD32v2 2747 2007.12.25 Win32/Agent.NNA[/B]
Norman 5.80.02 2007.12.26 -
[B]Panda 9.0.0.4 2007.12.25 Trj/Downloader.QKJ
Prevx1 V2 2007.12.26 SystemPoser:Trojan-b
Rising 20.24.21.00 2007.12.26 Trojan.DL.Win32.Agent.zkj[/B]
Sophos 4.24.0 2007.12.26 -
[B]Sunbelt 2.2.907.0 2007.12.21 Trojan.Win32.Agent.app[/B]
Symantec 10 2007.12.26 -
TheHacker 6.2.9.168 2007.12.22 -
[B]VBA32 3.12.2.5 2007.12.26 Trojan.Win32.Agent.app
VirusBuster 4.3.26:9 2007.12.26 Trojan.Gretus.Gen!Pac
Webwasher-Gateway 6.6.2 2007.12.26 Trojan.Dldr.Agent.dow[/B]
Additional information
File size: 27469 bytes
MD5: 8a22d6c8a332be275d082e755fd7ae0c
SHA1: 956ab2106bb1fd18248429d9169a6433f1e52275
PEiD: -
packers: PecBundle, PECompact
packers: PE_Patch.PECompact, PecBundle, PECompact
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=D83A575300BE316874AC008416355900D01AA827[/url]

File Trojan_DownloaderWMA.rar received on 12.26.2007 19:18:02 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.27.10 2007.12.26 -
AntiVir 7.6.0.46 2007.12.26 -
Authentium 4.93.8 2007.12.26 -
Avast 4.7.1098.0 2007.12.26 -
AVG 7.5.0.516 2007.12.26 -
BitDefender 7.2 2007.12.26 -
CAT-QuickHeal 9.00 2007.12.25 -
ClamAV 0.91.2 2007.12.26 -
DrWeb 4.44.0.09170 2007.12.26 -
eSafe 7.0.15.0 2007.12.26 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.26 -
FileAdvisor 1 2007.12.26 -
Fortinet 3.14.0.0 2007.12.26 -
F-Prot 4.4.2.54 2007.12.25 -
[B]F-Secure 6.70.13030.0 2007.12.26 Trojan-Downloader.WMA.Wimad.l
Ikarus T3.1.1.15 2007.12.26 Trojan-Downloader.WMA.Wimad.l
Kaspersky 7.0.0.125 2007.12.26 Trojan-Downloader.WMA.Wimad.l[/B]
McAfee 5192 2007.12.24 -
Microsoft 1.3109 2007.12.26 -
NOD32v2 2747 2007.12.25 -
Norman 5.80.02 2007.12.26 -
Panda 9.0.0.4 2007.12.25 -
Prevx1 V2 2007.12.26 -
Rising 20.24.21.00 2007.12.26 -
Sophos 4.24.0 2007.12.26 -
Sunbelt 2.2.907.0 2007.12.21 -
Symantec 10 2007.12.26 -
TheHacker 6.2.9.168 2007.12.22 -
VBA32 3.12.2.5 2007.12.26 -
VirusBuster 4.3.26:9 2007.12.26 -
Webwasher-Gateway 6.6.2 2007.12.26 -
Additional information
File size: 333266 bytes
MD5: 3c9f2cfeb66f87e40aae6aba6fe0fd39
SHA1: 913429c10f23984dd014a049f507ec10e5b99cf4
PEiD: -
26.12.2007, 22:14
XL

Свежий шторм:

[CODE]Файл happy-2008.exe получен 2007.12.26 19:54:10 (CET)

AhnLab-V3 2007.12.27.10 2007.12.26 -
[B]AntiVir 7.6.0.46 2007.12.26 HEUR/Crypted[/B]
Authentium 4.93.8 2007.12.26 -
[B]Avast 4.7.1098.0 2007.12.26 Win32:DNSChanger-HI[/B]
AVG 7.5.0.516 2007.12.26 -
BitDefender 7.2 2007.12.26 -
CAT-QuickHeal 9.00 2007.12.26 -
ClamAV 0.91.2 2007.12.26 -
DrWeb 4.44.0.09170 2007.12.26 -
eSafe 7.0.15.0 2007.12.26 -
eTrust-Vet 31.3.5400 2007.12.24 -
Ewido 4.0 2007.12.26 -
FileAdvisor 1 2007.12.26 -
Fortinet 3.14.0.0 2007.12.26 -
F-Prot 4.4.2.54 2007.12.25 -
F-Secure 6.70.13030.0 2007.12.26 -
Ikarus T3.1.1.15 2007.12.26 -
Kaspersky 7.0.0.125 2007.12.26 -
McAfee 5193 2007.12.26 -
Microsoft 1.3109 2007.12.26 -
NOD32v2 2747 2007.12.25 -
Norman 5.80.02 2007.12.26 -
Panda 9.0.0.4 2007.12.25 -
[B]Prevx1 V2 2007.12.26 Heuristic: Suspicious File With Bad Child Associations[/B]
Rising 20.24.21.00 2007.12.26 -
Sophos 4.24.0 2007.12.26 -
[B]Sunbelt 2.2.907.0 2007.12.21 VIPRE.Suspicious[/B]
Symantec 10 2007.12.26 -
TheHacker 6.2.9.169 2007.12.26 -
VBA32 3.12.2.5 2007.12.26 -
VirusBuster 4.3.26:9 2007.12.26 -
[B]Webwasher-Gateway 6.6.2 2007.12.26 Heuristic.Crypted[/B]
Дополнительная информация
File size: 152064 bytes
MD5: 5c1d151eb4bfc5bf29ed0a02059c08bc
SHA1: f09434c0562f35071844d2a9606f431682f52511[/CODE]
28.12.2007, 13:17
ALEX(XX)

File loader.exe received on 12.27.2007 2145 (CET)Antivirus Version Last Update Result
AhnLab-V3 2007.12.28.10 2007.12.27 -
AntiVir 7.6.0.46 2007.12.27 -
Authentium 4.93.8 2007.12.27 -
Avast 4.7.1098.0 2007.12.27 -
[B]AVG 7.5.0.516 2007.12.27 Generic9.AIKU [/B]
[B]BitDefender 7.2 2007.12.27 Trojan.Agent.Small.SVO[/B]
CAT-QuickHeal 9.00 2007.12.27 -
ClamAV 0.91.2 2007.12.27 -
DrWeb 4.44.0.09170 2007.12.27 -
eSafe 7.0.15.0 2007.12.27 -
[B]eTrust-Vet 31.3.5406 2007.12.27 Win32/Chepvil!generic[/B]
Ewido 4.0 2007.12.27 -
FileAdvisor 1 2007.12.27 -
Fortinet 3.14.0.0 2007.12.27 -
F-Prot 4.4.2.54 2007.12.26 -
[B]F-Secure 6.70.13030.0 2007.12.27 W32/Malware[/B]
Ikarus T3.1.1.15 2007.12.27 -
Kaspersky 7.0.0.125 2007.12.27 -
McAfee 5194 2007.12.27 -
Microsoft 1.3109 2007.12.27 -
NOD32v2 2751 2007.12.27 -
[B]Norman 5.80.02 2007.12.27 W32/Malware[/B]
Panda 9.0.0.4 2007.12.27 -
Prevx1 V2 2007.12.27 -
Rising 20.24.32.00 2007.12.27 -
Sophos 4.24.0 2007.12.27 -
Sunbelt 2.2.907.0 2007.12.27 -
Symantec 10 2007.12.27 -
TheHacker 6.2.9.172 2007.12.27 -
VBA32 3.12.2.5 2007.12.26 -
VirusBuster 4.3.26:9 2007.12.27 -
Webwasher-Gateway 6.6.2 2007.12.27 -

Additional information
File size: 8704 bytes
MD5: 4b4bfceb4b304e2823cae013c55cca97
SHA1: db326f1ccef67ebeebb4aff07286190580e36113
PEiD: -
norman sandbox: [ General information ] * **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: [EMAIL="[email protected]"][email protected][/EMAIL] - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**. * File length: 8704 bytes. [ Process/window information ] * Attempts to access service \"McShield\". * Disables security related services. 

[size="1"][color="#666686"][B][I]Добавлено через 10 часов 10 минут[/I][/B][/color][/size]

File winable.exe received on 12.28.2007 07:08:05 (CET)

Antivirus;Version;Last Update;Result
[B]AhnLab-V3;2007.12.28.11;2007.12.28;Win-Trojan/Agent.61440.DB[/B]
[B]AntiVir;7.6.0.46;2007.12.27;BDS/StarDor.A[/B]
Authentium;4.93.8;2007.12.28;-
[B]Avast;4.7.1098.0;2007.12.27;Win32:Adloader-KY[/B]
AVG;7.5.0.516;2007.12.27;-
BitDefender;7.2;2007.12.28;-
[B]CAT-QuickHeal;9.00;2007.12.27;TrojanDownloader.bho.gll[/B]
ClamAV;0.91.2;2007.12.27;-
[B]DrWeb;4.44.0.09170;2007.12.27;Trojan.Stars.origin[/B]
eSafe;7.0.15.0;2007.12.27;-
eTrust-Vet;31.3.5407;2007.12.27;-
[B]Ewido;4.0;2007.12.27;Downloader.Adload.ni[/B]
FileAdvisor;1;2007.12.28;-
Fortinet;3.14.0.0;2007.12.28;-
F-Prot;4.4.2.54;2007.12.28;-
F-Secure;6.70.13030.0;2007.12.28;-
Ikarus;T3.1.1.15;2007.12.28;-
Kaspersky;7.0.0.125;2007.12.28;-
McAfee;5194;2007.12.27;-
Microsoft;1.3109;2007.12.28;-
NOD32v2;2751;2007.12.27;-
Norman;5.80.02;2007.12.27;-
Panda;9.0.0.4;2007.12.27;-
Prevx1;V2;2007.12.28;-
[B]Rising;20.24.32.00;2007.12.27;Trojan.Win32.Agent.zug[/B]
Sophos;4.24.0;2007.12.28;-
Sunbelt;2.2.907.0;2007.12.28;-
[B]Symantec;10;2007.12.28;Adware.MaxSearch[/B]
TheHacker;6.2.9.172;2007.12.27;-
VBA32;3.12.2.5;2007.12.26;-
VirusBuster;4.3.26:9;2007.12.27;-
[B]Webwasher-Gateway;6.6.2;2007.12.28;Trojan.Backdoor.StarDor.A[/B]

Additional information
File size: 61440 bytes
MD5: 4a7b083438836184abebec212920d695
SHA1: 922d42c3b759725bacef54c24b4da0b9b4bb3503
PEiD: -

[size="1"][color="#666686"][B][I]Добавлено через 3 часа 38 минут[/I][/B][/color][/size]

File VideoAccessCodecInstall.exe received on 12.28.2007 11:08:55 (CET)

Antivirus;Version;Last Update;Result
AhnLab-V3;2007.12.28.11;2007.12.28;-
[B]AntiVir;7.6.0.46;2007.12.28;TR/Dldr.Zlob[/B]
Authentium;4.93.8;2007.12.28;-
Avast;4.7.1098.0;2007.12.27;-
[B]AVG;7.5.0.516;2007.12.27;Downloader.Zlob[/B]
BitDefender;7.2;2007.12.28;-
[B]CAT-QuickHeal;9.00;2007.12.27;TrojanDownloader.Zlob.gen[/B]
[B]ClamAV;0.91.2;2007.12.28;Trojan.Dropper-2557[/B]
DrWeb;4.44.0.09170;2007.12.28;-
eSafe;7.0.15.0;2007.12.27;-
eTrust-Vet;31.3.5408;2007.12.28;-
Ewido;4.0;2007.12.27;-
FileAdvisor;1;2007.12.28;-
Fortinet;3.14.0.0;2007.12.28;-
F-Prot;4.4.2.54;2007.12.28;-
[B]F-Secure;6.70.13030.0;2007.12.28;Trojan-Downloader.Win32.Zlob.fns[/B]
Ikarus;T3.1.1.15;2007.12.28;-
[B]Kaspersky;7.0.0.125;2007.12.28;Trojan-Downloader.Win32.Zlob.fns[/B]
McAfee;5194;2007.12.27;-
[B]Microsoft;1.3109;2007.12.28;Trojan:Win32/Tibs.gen!lds[/B]
NOD32v2;2752;2007.12.28;-
[B]Norman;5.80.02;2007.12.27;W32/Zlob.ARDM[/B]
Panda;9.0.0.4;2007.12.27;-
Prevx1;V2;2007.12.28;-
Rising;20.24.41.00;2007.12.28;-
[B]Sophos;4.24.0;2007.12.28;Troj/Zlobar-Fam[/B]
Sunbelt;2.2.907.0;2007.12.28;-
Symantec;10;2007.12.28;-
[B]TheHacker;6.2.9.172;2007.12.27;Trojan/Downloader.gen[/B]
[B]VBA32;3.12.2.5;2007.12.26;MalwareScope.Worm.Nuwar-Glowa.1[/B]
VirusBuster;4.3.26:9;2007.12.27;-
[B]Webwasher-Gateway;6.6.2;2007.12.28;Trojan.Dldr.Zlob[/B]

Additional information
File size: 148200 bytes
MD5: 4a9828c1ef46b792f45d6358855ead27
SHA1: be7dcaed6ceb853078832d2dc6c80fc696f5bdcd
PEiD: -
29.12.2007, 14:43
rubin

эвона как бывает... temp/winlogon.exe
[code]AhnLab-V3 2007.12.29.11 2007.12.29 -
AntiVir 7.6.0.46 2007.12.28 -
Authentium 4.93.8 2007.12.29 -
Avast 4.7.1098.0 2007.12.28 -
[b]AVG 7.5.0.516 2007.12.28 SHeur.AJLM[/b]
BitDefender 7.2 2007.12.29 -
CAT-QuickHeal 9.00 2007.12.29 -
ClamAV 0.91.2 2007.12.29 -
DrWeb 4.44.0.09170 2007.12.29 -
eSafe 7.0.15.0 2007.12.27 -
eTrust-Vet 31.3.5412 2007.12.29 -
Ewido 4.0 2007.12.29 -
FileAdvisor 1 2007.12.29 -
Fortinet 3.14.0.0 2007.12.29 -
F-Prot 4.4.2.54 2007.12.28 -
F-Secure 6.70.13030.0 2007.12.28 -
Ikarus T3.1.1.15 2007.12.29 -
Kaspersky 7.0.0.125 2007.12.29 -
McAfee 5195 2007.12.28 -
Microsoft 1.3109 2007.12.29 -
NOD32v2 2754 2007.12.28 -
Norman 5.80.02 2007.12.28 -
Panda 9.0.0.4 2007.12.28 -
Prevx1 V2 2007.12.29 -
Rising 20.24.52.00 2007.12.29 -
Sophos 4.24.0 2007.12.29 -
Sunbelt 2.2.907.0 2007.12.28 -
Symantec 10 2007.12.29 -
TheHacker 6.2.9.174 2007.12.28 -
VBA32 3.12.2.5 2007.12.29 -
VirusBuster 4.3.26:9 2007.12.28 -
Webwasher-Gateway 6.6.2 2007.12.28 -[/code]

Дополнительная информация
File size: 33280 bytes
MD5: 16ccf9650143c6746eb39ba09489d412
SHA1: 4080c60b5b983d93c822fa0cbc04d844a54ad969
30.12.2007, 14:12
Bratez

\WINDOWS\system32\kdcys.exe

Complete scanning result of "avz00001.dta", processed in VirusTotal at 12/30/2007 12:02:21 (CET).

[ file data ]
* name: avz00001.dta
* size: 73742
* md5.: 179f70d07c604671de2741a531840e81
* sha1: 5e7827dd0db639fdada394bd1312972c530f541c
* peid..: -

[ scan result ]
AhnLab-V3 2007.12.29.11/20071229 found nothing
[B]AntiVir 7.6.0.46/20071229 found [HEUR/Crypted]
[/B]Authentium 4.93.8/20071229 found nothing
Avast 4.7.1098.0/20071229 found nothing
[B]AVG 7.5.0.516/20071229 found [DNSChanger.G]
BitDefender 7.2/20071230 found [Trojan.DNSChanger.RB]
CAT-QuickHeal 9.00/20071229 found [(Suspicious) - DNAScan]
[/B]ClamAV 0.91.2/20071230 found nothing
DrWeb 4.44.0.09170/20071230 found nothing
eSafe 7.0.15.0/20071227 found nothing
eTrust-Vet 31.3.5412/20071229 found nothing
Ewido 4.0/20071229 found nothing
F-Prot 4.4.2.54/20071229 found nothing
F-Secure 6.70.13030.0/20071230 found nothing
FileAdvisor 1/20071230 found nothing
Fortinet 3.14.0.0/20071230 found nothing
[B]Ikarus T3.1.1.15/20071230 found [Trojan.DNSChanger.RB]
Kaspersky 7.0.0.125/20071230 found [Heur.Trojan.Generic]
[/B]McAfee 5195/20071228 found nothing
[B]Microsoft 1.3109/20071230 found [Trojan:Win32/Alureon.gen!D]
NOD32v2 2755/20071229 found [Win32/TrojanDownloader.Zlob.BMQ]
[/B]Norman 5.80.02/20071228 found nothing
Panda 9.0.0.4/20071230 found nothing
Prevx1 V2/20071230 found nothing
Rising 20.24.52.00/20071229 found nothing
Sophos 4.24.0/20071230 found nothing
Sunbelt 2.2.907.0/20071230 found nothing
Symantec 10/20071230 found nothing
TheHacker 6.2.9.175/20071229 found nothing
VBA32 3.12.2.5/20071229 found nothing
VirusBuster 4.3.26:9/20071229 found nothing
[B]Webwasher-Gateway 6.6.2/20071229 found [Heuristic.Crypted]
[/B]
30.12.2007, 16:36
strawser

File websitetutorial.exe received on 12.30.2007 14:25:33 (CET)

Result: 4/32 (12.5%)

Antivirus Version Last Update Result
AhnLab-V3 2007.12.29.11 2007.12.29 -
AntiVir 7.6.0.46 2007.12.29 -
Authentium 4.93.8 2007.12.29 -
Avast 4.7.1098.0 2007.12.29 -
AVG 7.5.0.516 2007.12.30 -
BitDefender 7.2 2007.12.30 -
CAT-QuickHeal 9.00 2007.12.29 -
ClamAV 0.91.2 2007.12.30 -
DrWeb 4.44.0.09170 2007.12.30 -
[B]eSafe 7.0.15.0 2007.12.27 suspicious Trojan/Worm[/B]
eTrust-Vet 31.3.5412 2007.12.29 -
Ewido 4.0 2007.12.30 -
FileAdvisor 1 2007.12.30 -
Fortinet 3.14.0.0 2007.12.30 -
F-Prot 4.4.2.54 2007.12.29 -
F-Secure 6.70.13030.0 2007.12.30 -
[B]Ikarus T3.1.1.15 2007.12.30 Trojan-Downloader.Win32.Banload.eta[/B]
Kaspersky 7.0.0.125 2007.12.30 -
McAfee 5195 2007.12.28 -
Microsoft 1.3109 2007.12.30 -
NOD32v2 2755 2007.12.29 -
[B]Norman 5.80.02 2007.12.28 W32/BHO.AMN[/B]
Panda 9.0.0.4 2007.12.30 -
[B]Prevx1 V2 2007.12.30 Heuristic: Suspicious File With Outbound Communications[/B]
Rising 20.24.52.00 2007.12.29 -
Sophos 4.24.0 2007.12.30 -
Sunbelt 2.2.907.0 2007.12.30 -
Symantec 10 2007.12.30 -
TheHacker 6.2.9.175 2007.12.29 -
VBA32 3.12.2.5 2007.12.29 -
VirusBuster 4.3.26:9 2007.12.29 -
Webwasher-Gateway 6.6.2 2007.12.29 -
Additional information
File size: 338164 bytes
MD5: 236882e4572d87562157798ed807eccf
SHA1: 4ade5312ae36fbc760cf4a73eae60ce099ac1209
PEiD: -
packers: UPX
packers: UPX
packers: UPX
31.12.2007, 13:52
Shu_b

Вложений: 3

Ну... подведём итоги... месяца. :)

edit: загружены более компактные картинки.
31.12.2007, 17:35
Surfer

Опять шторм, только криптованый.
Самое интересное что 8-ка каспера уже ловит его как желатин =\

Файл happy_2008.exe получен 2007.12.31 15:13:22 (CET)
Текущий статус: Загрузка ... в очереди ожидание проверка закончено НЕ НАЙДЕНО ОСТАНОВЛЕНО
Результат: 12/32 (37.5%)

Антивирус Версия Обновление Результат
AhnLab-V3 2008.1.1.10 2007.12.31 -
[B]AntiVir 7.6.0.46 2007.12.31 TR/Crypt.XDR.Gen[/B]
Authentium 4.93.8 2007.12.30 -
[B]Avast 4.7.1098.0 2007.12.30 Win32:Zhelatin-ASX[/B]
AVG 7.5.0.516 2007.12.31 -
[B]BitDefender 7.2 2007.12.31 Trojan.Peed.IRS[/B]
CAT-QuickHeal 9.00 2007.12.31 -
ClamAV 0.91.2 2007.12.31 -
[B]DrWeb 4.44.0.09170 2007.12.31 Trojan.Spambot.2559[/B]
eSafe 7.0.15.0 2007.12.30 -
eTrust-Vet 31.3.5417 2007.12.31 -
Ewido 4.0 2007.12.31 -
FileAdvisor 1 2007.12.31 -
[B]Fortinet 3.14.0.0 2007.12.31 W32/Tibs.G@mm[/B]
F-Prot 4.4.2.54 2007.12.31 -
F-Secure 6.70.13030.0 2007.12.31 -
Ikarus T3.1.1.15 2007.12.31 -
Kaspersky 7.0.0.125 2007.12.31 -
[B]McAfee 5195 2007.12.28 W32/Nuwar@MM
Microsoft 1.3109 2007.12.31 Backdoor:WinNT/Nuwar.B!sys
NOD32v2 2758 2007.12.31 probably a variant of Win32/Nuwar[/B]
Norman 5.80.02 2007.12.31 -
[B]Panda 9.0.0.4 2007.12.31 Suspicious file[/B]
[B]Prevx1 V2 2007.12.31 Stormy:Worm-All Variants[/B]
Rising 20.24.52.00 2007.12.29 -
[B]Sophos 4.24.0 2007.12.31 Mal/Dorf-H[/B]
Sunbelt 2.2.907.0 2007.12.30 -
Symantec 10 2007.12.31 -
TheHacker 6.2.9.175 2007.12.29 -
VBA32 3.12.2.5 2007.12.29 -
VirusBuster 4.3.26:9 2007.12.31 -
[B]Webwasher-Gateway 6.6.2 2007.12.31 Trojan.Crypt.XDR.Gen[/B]
Дополнительная информация
File size: 143873 bytes
MD5: 30196db0c6df236d32307693feb4935e
SHA1: bb34c478ab65a3418f333996568178fcdc7a6011
PEiD: -
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=105E7F9201F7EAC4320F020ED7E37E00B13961EF[/url]
01.01.2008, 16:34
mA_sat

Поставил Икарус себе, посмотреть как он работает

Файл Mswtif.dll получен 2007.11.05 22:24:39 (CET)

Текущий статус: закончено
Результат: 3/31 (9.68%)
Форматированные Форматированные
Печать результатов Печать результатов
Антивирус Версия Обновление Результат
AhnLab-V3 - - -
AntiVir - - -
Authentium - - Possibly a new variant of W32/CodeCru-based!Maximus
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - W32/CodeCru-based!Maximus
F-Secure - - -
Ikarus - - Trojan-Spy.Win32.Agent.rb
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -
Дополнительная информация
MD5: 472f3ca7b2d92bd5b3c351e101fd5451
01.01.2008, 16:56
XL

Свежая сборка Storm:

[QUOTE]Файл happy_2008.rar получен 2008.01.01 14:46:59 (CET)

AhnLab-V3 2008.1.1.10 2007.12.31 -
[B]AntiVir 7.6.0.46 2007.12.31 TR/Crypt.XDR.Gen[/B]
Authentium 4.93.8 2007.12.31 -
[B]Avast 4.7.1098.0 2007.12.31 Win32:Zhelatin-ASX[/B]
AVG 7.5.0.516 2007.12.31 -
[B]BitDefender 7.2 2008.01.01 Trojan.Agent.AGIU[/B]
CAT-QuickHeal 9.00 2007.12.31 -
[B]ClamAV 0.91.2 2008.01.01 Trojan.Peed-80[/B]
DrWeb 4.44.0.09170 2007.12.31 -
eSafe 7.0.15.0 2007.12.31 -
eTrust-Vet 31.3.5421 2008.01.01 -
Ewido 4.0 2007.12.31 -
FileAdvisor 1 2008.01.01 -
Fortinet 3.14.0.0 2008.01.01 -
F-Prot 4.4.2.54 2007.12.31 -
[B]F-Secure 6.70.13030.0 2008.01.01 Tibs.BFZU[/B]
Ikarus T3.1.1.15 2008.01.01 -
[B]Kaspersky 7.0.0.125 2008.01.01 Email-Worm.Win32.Zhelatin.qa[/B]
McAfee 5196 2007.12.31 -
[B]Microsoft 1.3109 2008.01.01 Backdoor:Win32/Nuwar.gen!A
NOD32v2 2759 2008.01.01 a variant of Win32/Nuwar[/B]
Norman 5.80.02 2007.12.31 -
[B]Panda 9.0.0.4 2008.01.01 Suspicious file[/B]
Prevx1 V2 2008.01.01 -
Rising 20.24.52.00 2007.12.29 -
Sophos 4.24.0 2008.01.01 -
Sunbelt 2.2.907.0 2007.12.30 -
[B]Symantec 10 2008.01.01 Trojan.Peacomm.D[/B]
TheHacker 6.2.9.176 2008.01.01 -
VBA32 3.12.2.5 2007.12.31 -
VirusBuster 4.3.26:9 2008.01.01 -
[B]Webwasher-Gateway 6.6.2 2007.12.31 Trojan.Crypt.XDR.Gen[/B]
Дополнительная информация
File size: 81844 bytes
MD5: 7ae43f75d7127fe35c840daf86ab7a73
SHA1: 665043076eb03db80edfa756a83739074f7b57dc[/QUOTE]

Каспер только недавно начал детектить...базы пришлось вручную обновить.
01.01.2008, 23:06
Surfer

File ibho1.dll received on 01.01.2008 20:56:10 (CET)
Current status: finished

Result: 6/32 (18.75%)

Antivirus Version Last Update Result
AhnLab-V3 2008.1.1.10 2007.12.31 -
AntiVir 7.6.0.46 2007.12.31 -
Authentium 4.93.8 2007.12.31 -
Avast 4.7.1098.0 2007.12.31 -
AVG 7.5.0.516 2008.01.01 -
[B]BitDefender 7.2 2008.01.01 Adware.Give4free.C[/B]
CAT-QuickHeal 9.00 2007.12.31 -
ClamAV 0.91.2 2008.01.01 -
DrWeb 4.44.0.09170 2007.12.31 -
eSafe 7.0.15.0 2008.01.01 -
eTrust-Vet 31.3.5421 2008.01.01 -
Ewido 4.0 2008.01.01 -
FileAdvisor 1 2008.01.01 -
Fortinet 3.14.0.0 2008.01.01 -
F-Prot 4.4.2.54 2008.01.01 -
F-Secure 6.70.13030.0 2008.01.01 -
Ikarus T3.1.1.15 2008.01.01 -
Kaspersky 7.0.0.125 2008.01.01 -
[B]McAfee 5196 2007.12.31 potentially unwanted program Adware-Give4Free
Microsoft 1.3109 2008.01.01 Adware:Win32/Give4Free[/B]
NOD32v2 2759 2008.01.01 -
Norman 5.80.02 2007.12.31 -
[B]Panda 9.0.0.4 2008.01.01 Generic Malware[/B]
Prevx1 V2 2008.01.01 -
Rising 20.24.52.00 2007.12.29 -
Sophos 4.24.0 2008.01.01 -
[B]Sunbelt 2.2.907.0 2007.12.30 Give4Free[/B]
Symantec 10 2008.01.01 -
TheHacker 6.2.9.176 2008.01.01 -
VBA32 3.12.2.5 2007.12.31 -
VirusBuster 4.3.26:9 2008.01.01 -
[B]Webwasher-Gateway 6.6.2 2007.12.31 Trojan.Downloader.Win32.Malware.gen (suspicious)[/B]

Additional information
File size: 29696 bytes
MD5: b2e0d43ac994b95839af87587a50d9dd
SHA1: 8d49252eeafba8616c05e93274907e7c28ec9490
PEiD: -
packers: UPX
packers: UPX
packers: UPX
03.01.2008, 01:39
strawser

File Crack_Windows_XP.zip received on 01.02.2008 23:22:33 (CET)
Result: 11/32 (34.38%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.3.10 2008.01.02 -
[B]AntiVir 7.6.0.46 2008.01.02 TR/Dropper.Gen[/B]
Authentium 4.93.8 2008.01.02 -
[B]Avast 4.7.1098.0 2008.01.02 Win32:Agent-KXS
AVG 7.5.0.516 2008.01.02 Dropper.Agent.DQC
BitDefender 7.2 2008.01.02 Trojan.PWS.LdPinch.BSG[/B]
CAT-QuickHeal 9.00 2008.01.02 -
ClamAV 0.91.2 2008.01.02 -
[B]DrWeb 4.44.0.09170 2008.01.02 Trojan.MulDrop.6269[/B]
[B]eSafe 7.0.15.0 2008.01.02 Suspicious File[/B]
eTrust-Vet 31.3.5424 2008.01.02 -
Ewido 4.0 2008.01.02 -
FileAdvisor 1 2008.01.02 -
Fortinet 3.14.0.0 2008.01.02 -
F-Prot 4.4.2.54 2008.01.02 -
[B]F-Secure 6.70.13030.0 2008.01.02 Trojan-Dropper.Win32.Agent.bib
Ikarus T3.1.1.15 2008.01.02 Trojan-Dropper.Win32.Agent.bib
Kaspersky 7.0.0.125 2008.01.02 Trojan-Dropper.Win32.Agent.bib[/B]
[COLOR="Red"]McAfee 5197 2008.01.02 -[/COLOR]
Microsoft 1.3109 2008.01.02 -
[COLOR="#ff0000"]NOD32v2 2761 2008.01.02 -[/COLOR]
Norman 5.80.02 2008.01.02 -
[B]Panda 9.0.0.4 2008.01.02 Suspicious file[/B]
Prevx1 V2 2008.01.02 -
Rising 20.25.22.00 2008.01.02 -
Sophos 4.24.0 2008.01.02 -
Sunbelt 2.2.907.0 2008.01.02 -
[COLOR="#ff0000"]Symantec 10 2008.01.02 -[/COLOR]
TheHacker 6.2.9.176 2008.01.01 -
VBA32 3.12.2.5 2008.01.02 -
VirusBuster 4.3.26:9 2008.01.02 -
[B]Webwasher-Gateway 6.6.2 2008.01.02 Trojan.Dropper.Gen[/B]
Additional information
File size: 76817 bytes
MD5: 70d14dd0b905baf481453ff2001ee566
SHA1: 78fce6f9585cf29bcb8e033874e1378c14a1dbed
PEiD: -

File mvat.rar received on 01.02.2008 23:48:44 (CET)
Result: 15/32 (46.88%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.3.10 2008.01.02 -
[B]AntiVir 7.6.0.46 2008.01.02 BDS/Pcclient.GV.183[/B]
Authentium 4.93.8 2008.01.02 -
Avast 4.7.1098.0 2008.01.02 -
AVG 7.5.0.516 2008.01.02 -
[B]BitDefender 7.2 2008.01.02 Backdoor.Pcclient.GV
CAT-QuickHeal 9.00 2008.01.02 (Suspicious) - DNAScan[/B]
ClamAV 0.91.2 2008.01.02 -
[COLOR="#ff0000"]DrWeb 4.44.0.09170 2008.01.02 -[/COLOR]
[B]eSafe 7.0.15.0 2008.01.02 suspicious Trojan/Worm[/B]
eTrust-Vet 31.3.5424 2008.01.02 -
Ewido 4.0 2008.01.02 -
FileAdvisor 1 2008.01.02 -
[B]Fortinet 3.14.0.0 2008.01.02 PossibleThreat!024944
F-Prot 4.4.2.54 2008.01.02 W32/Heuristic-162!Eldorado[/B]
F-Secure 6.70.13030.0 2008.01.02 -
[B]Ikarus T3.1.1.15 2008.01.02 MalwareScope.Backdoor.Hupigon.3[/B]
[COLOR="#ff0000"]Kaspersky 7.0.0.125 2008.01.02 -[/COLOR]
[B]McAfee 5197 2008.01.02 New Malware.aq[/B]
Microsoft 1.3109 2008.01.02 -
NOD32v2 2761 2008.01.02 -
Norman 5.80.02 2008.01.02 -
[B]Panda 9.0.0.4 2008.01.02 Generic Malware
Prevx1 V2 2008.01.02 BACKDOOR.PCCLIENT.GV[/B]
Rising 20.25.22.00 2008.01.02 -
[B]Sophos 4.24.0 2008.01.02 Mal/Packer[/B]
Sunbelt 2.2.907.0 2008.01.02 -
[B]Symantec 10 2008.01.02 Backdoor.Trojan
TheHacker 6.2.9.176 2008.01.01 W32/Behav-Heuristic-063[/B]
VBA32 3.12.2.5 2008.01.02 -
[B]VirusBuster 4.3.26:9 2008.01.02 Packed/NSPack
Webwasher-Gateway 6.6.2 2008.01.02 Trojan.Backdoor.Pcclient.GV.183[/B]
Additional information
File size: 44114 bytes
MD5: 6ee63970d8f3523c80115cbd55eaba7b
SHA1: 57c81f393055eda6db89da9e97398081701e9382
PEiD: -
packers: NSPack, PE_Patch, UPX
packers: NSPack, UPX
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=7B9C43E74B2A6556CD6200EBB381510018414621[/url]

File mail.ru.games.crack.rar received on 01.03.2008 00:15:36 (CET)
Result: 13/32 (40.63%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.3.10 2008.01.02 -
AntiVir 7.6.0.46 2008.01.02 -
Authentium 4.93.8 2008.01.02 -
Avast 4.7.1098.0 2008.01.02 -
[B]AVG 7.5.0.516 2008.01.02 Generic5.MNE[/B]
[COLOR="#ff0000"]BitDefender 7.2 2008.01.02 -[/COLOR]
[B]CAT-QuickHeal 9.00 2008.01.02 (Suspicious) - DNAScan
ClamAV 0.91.2 2008.01.02 PUA.Packed.UPack-2[/B]
[COLOR="#ff0000"]DrWeb 4.44.0.09170 2008.01.02 -[/COLOR]
[B]eSafe 7.0.15.0 2008.01.02 Suspicious File[/B]
eTrust-Vet 31.3.5424 2008.01.02 -
Ewido 4.0 2008.01.02 -
FileAdvisor 1 2008.01.03 -
Fortinet 3.14.0.0 2008.01.02 -
[B]F-Prot 4.4.2.54 2008.01.02 W32/Heuristic-162!Eldorado[/B]
F-Secure 6.70.13030.0 2008.01.02 -
[B]Ikarus T3.1.1.15 2008.01.02 Trojan.Keygen.Q[/B]
[COLOR="#ff0000"]Kaspersky 7.0.0.125 2008.01.02 -[/COLOR]
[B]McAfee 5197 2008.01.02 New Malware.aj[/B]
Microsoft 1.3109 2008.01.02 -
[COLOR="#ff0000"]NOD32v2 2761 2008.01.02 -[/COLOR]
Norman 5.80.02 2008.01.02 -
Panda 9.0.0.4 2008.01.02 -
[B]Prevx1 V2 2008.01.03 Generic.Malware[/B]
Rising 20.25.22.00 2008.01.02 -
[B]Sophos 4.24.0 2008.01.02 Mal/Packer
Sunbelt 2.2.907.0 2008.01.02 VIPRE.Suspicious[/B]
[COLOR="#ff0000"]Symantec 10 2008.01.02 -[/COLOR]
[B]TheHacker 6.2.9.176 2008.01.01 W32/Behav-Heuristic-060[/B]
VBA32 3.12.2.5 2008.01.02 -
[B]VirusBuster 4.3.26:9 2008.01.02 Packed/Upack
Webwasher-Gateway 6.0.1 2008.01.02 Win32.Malware.gen [/B](suspicious)
Additional information
File size: 47431 bytes
MD5: 027e42801a8c06b052b246000d5d8181
SHA1: 84896e282662da0c99f10de258da036d217e1da4
PEiD: -
packers: UPack
packers: PE_Patch, UPack
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=357064D3680D0A85BF470060C7DFB10012B9D722[/url]
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

File Backdoor-Controller.rar received on 01.03.2008 12:31:10 (CET)
Result: 16/32 (50%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.3.10 2008.01.02 -
[B]AntiVir 7.6.0.46 2008.01.03 BDS/Prorat.ae.23
Authentium 4.93.8 2008.01.02 is a dropper for W32/Dropper.DFP
Avast 4.7.1098.0 2008.01.03 Win32:LdPinch-RV
AVG 7.5.0.516 2008.01.02 PSW.Ldpinch.DQX
BitDefender 7.2 2008.01.03 Trojan.Dropper.Agent.BBA[/B]
CAT-QuickHeal 9.00 2008.01.02 -
[B]ClamAV 0.91.2 2008.01.03 Trojan.Dropper-118
DrWeb 4.44.0.09170 2008.01.03 Trojan.MulDrop.5406[/B]
eSafe 7.0.15.0 2008.01.02 -
eTrust-Vet 31.3.5427 2008.01.03 -
Ewido 4.0 2008.01.02 -
FileAdvisor 1 2008.01.03 -
Fortinet 3.14.0.0 2008.01.03 -
[B]F-Prot 4.4.2.54 2008.01.02 W32/Dropper.DFP
F-Secure 6.70.13030.0 2008.01.03 Trojan-Dropper.Win32.Agent.bba[/B]
[B]Ikarus T3.1.1.15 2008.01.03 Trojan-Dropper.Win32.VB.FI
Kaspersky 7.0.0.125 2008.01.03 Trojan-Dropper.Win32.Agent.bba[/B]
[COLOR="#ff0000"]McAfee 5198 2008.01.03 -[/COLOR]
Microsoft 1.3109 2008.01.03 -
[B]NOD32v2 2763 2008.01.03 Win32/TrojanDropper.Small.AQM[/B]
Norman 5.80.02 2008.01.03 -
[B]Panda 9.0.0.4 2008.01.03 Suspicious file
Prevx1 V2 2008.01.03 Generic.Malware[/B]
Rising 20.25.32.00 2008.01.03 -
Sophos 4.24.0 2008.01.03 -
Sunbelt 2.2.907.0 2008.01.03 -
[COLOR="#ff0000"]Symantec 10 2008.01.03 -[/COLOR]
TheHacker 6.2.9.178 2008.01.03 -
[B]VBA32 3.12.2.5 2008.01.02 Trojan-PSW.Win32.LdPinch.bka[/B]
VirusBuster 4.3.26:9 2008.01.02 -
[B]Webwasher-Gateway 6.6.2 2008.01.03 Trojan.Backdoor.Prorat.ae.23[/B]
Additional information
File size: 978065 bytes
MD5: 4bedef351df50464ee90711a1e2d380a
SHA1: 401e41aa223770086ed242053588dd62ab6b952b
PEiD: -
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=873FF7B3386CCA335CCA0F2BE836BD00ADC94FD9[/url]

Вначале только эвристики сработали,а потом Каспер подтвердил и довалил в базы этого зверя по имени Dr. Web Антивирус + Антиспам.rar. Только тот антивирус, которому вирус посвящен еще не детектит.

File Dr._Web__________________________ received on 01.03.2008 20:52:13 (CET)
Result: 3/32 (9.38%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.4.10 2008.01.03 -
AntiVir 7.6.0.46 2008.01.03 -
Authentium 4.93.8 2008.01.02 -
Avast 4.7.1098.0 2008.01.03 -
AVG 7.5.0.516 2008.01.03 -
BitDefender 7.2 2008.01.03 -
CAT-QuickHeal 9.00 2008.01.03 -
ClamAV 0.91.2 2008.01.03 -
DrWeb 4.44.0.09170 2008.01.03 -
eSafe 7.0.15.0 2008.01.03 -
eTrust-Vet 31.3.5427 2008.01.03 -
Ewido 4.0 2008.01.03 -
FileAdvisor 1 2008.01.03 -
Fortinet 3.14.0.0 2008.01.03 -
F-Prot 4.4.2.54 2008.01.02 -
F-Secure 6.70.13030.0 2008.01.03 -
Ikarus T3.1.1.15 2008.01.03 -
[B]Kaspersky 7.0.0.125 2008.01.03 Trojan-Spy.Win32.Delf.avq[/B]
McAfee 5199 2008.01.03 -
Microsoft 1.3109 2008.01.03 -
NOD32v2 2764 2008.01.03 -
Norman 5.80.02 2008.01.03 -
[B]Panda 9.0.0.4 2008.01.03 Suspicious file
[B]Prevx1 V2 2008.01.03 Heuristic: Suspicious File With Mass Email [/B]Capabilities[/B]
Rising 20.25.32.00 2008.01.03 -
Sophos 4.24.0 2008.01.03 -
Sunbelt 2.2.907.0 2008.01.03 -
Symantec 10 2008.01.03 -
TheHacker 6.2.9.178 2008.01.03 -
VBA32 3.12.2.5 2008.01.02 -
VirusBuster 4.3.26:9 2008.01.03 -
Webwasher-Gateway 6.6.2 2008.01.03 -
Additional information
File size: 1900647 bytes
MD5: 0b2b4248ced3112ce75eff9bb0052a13
SHA1: 71c7e7861a1b43cc41d3ad9f3dc564192ec694bc
PEiD: -
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=3D1AA9EF00A1257B2A54335334EB8000D3CE854D[/url]

File _webfile.ru____________.exe.safe received on 01.03.2008 22:18:35 (CET)
Result: 22/32 (68.75%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.4.10 2008.01.03 -
[B]AntiVir 7.6.0.46 2008.01.03 TR/Spy.Gen[/B]
Authentium 4.93.8 2008.01.02 -
[B]Avast 4.7.1098.0 2008.01.03 Win32:LdPinch-BHU
AVG 7.5.0.516 2008.01.03 Dropper.Generic.PPQ
BitDefender 7.2 2008.01.03 Trojan.PWS.LDPinch.TDA
CAT-QuickHeal 9.00 2008.01.03 TrojanDropper.Agent.buo[/B]
ClamAV 0.91.2 2008.01.03 -
[B]DrWeb 4.44.0.09170 2008.01.03 Trojan.MulDrop.8720
eSafe 7.0.15.0 2008.01.03 Win32.Agent.buo[/B]
eTrust-Vet 31.3.5427 2008.01.03 -
Ewido 4.0 2008.01.03 -
FileAdvisor 1 2008.01.03 -
[B]Fortinet 3.14.0.0 2008.01.03 W32/Basine.BUO!tr
F-Prot 4.4.2.54 2008.01.02 W32/Trojan.CFPJ
F-Secure 6.70.13030.0 2008.01.03 Trojan-Dropper.Win32.Agent.buo
Ikarus T3.1.1.15 2008.01.03 Trojan-Dropper.Win32.Small.bae
Kaspersky 7.0.0.125 2008.01.03 Trojan-Dropper.Win32.Agent.buo[/B]
[COLOR="Red"]McAfee 5199 2008.01.03[/COLOR] -
Microsoft 1.3109 2008.01.03 -
[B]NOD32v2 2764 2008.01.03 probably a variant of Win32/TrojanDropper.Agent[/B]
[B]Norman 5.80.02 2008.01.03 W32/Wow.CAV
Panda 9.0.0.4 2008.01.03 Trj/Downloader.MDW
Prevx1 V2 2008.01.03 Generic.Malware
Rising 20.25.32.00 2008.01.03 Dropper.Win32.Agent.buo
Sophos 4.24.0 2008.01.03 Mal/Basine-C[/B]
Sunbelt 2.2.907.0 2008.01.03 -
[B]Symantec 10 2008.01.03 Infostealer.Notos!gen
TheHacker 6.2.9.178 2008.01.03 Trojan/Dropper.Agent.buo
VBA32 3.12.2.5 2008.01.02 Trojan-Dropper.Win32.Agent.buo[/B]
VirusBuster 4.3.26:9 2008.01.03 -
[B]Webwasher-Gateway 6.6.2 2008.01.03 Trojan.Spy.Gen[/B]
Additional information
File size: 627488 bytes
MD5: 011df53be509662db76f8d75b3948f41
SHA1: 10e42de52df7c7cfcdc6ad5884c2a857e11354b4
PEiD: -
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=ECB83E5120300063932809E3BCC83F001FBF7C10[/url]

File keygen__kaspersky_6.0_.exe.safe received on 01.03.2008 22:47:05 (CET)
Result: 19/32 (59.38%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.4.10 2008.01.03 -
[B]AntiVir 7.6.0.46 2008.01.03 TR/Crypt.XPACK.Gen[/B]
Authentium 4.93.8 2008.01.02 -
[B]Avast 4.7.1098.0 2008.01.03 Win32:LdPinch-NO
AVG 7.5.0.516 2008.01.03 PSW.Ldpinch.RGB
BitDefender 7.2 2008.01.03 MemScan:Trojan.PWS.LdPinch.BSG
CAT-QuickHeal 9.00 2008.01.03 Win32.Trojan-PSW.LdPinch.bgj3[/B]
ClamAV 0.91.2 2008.01.03 -
[B]DrWeb 4.44.0.09170 2008.01.03 Trojan.PWS.LDPinch.1407
eSafe 7.0.15.0 2008.01.03 Suspicious File[/B]
eTrust-Vet 31.3.5427 2008.01.03 -
Ewido 4.0 2008.01.03 -
FileAdvisor 1 2008.01.03 -
Fortinet 3.14.0.0 2008.01.03 -
[B]F-Prot 4.4.2.54 2008.01.02 W32/LdPinch.F.gen!Eldorado
F-Secure 6.70.13030.0 2008.01.03 Trojan-PSW.Win32.LdPinch.btw
Ikarus T3.1.1.15 2008.01.03 Trojan-PWS.Win32.LdPinch.bmi
Kaspersky 7.0.0.125 2008.01.03 Trojan-PSW.Win32.LdPinch.btw[/B]
[COLOR="Red"]McAfee 5199 2008.01.03 -[/COLOR]
[B]Microsoft 1.3109 2008.01.03 Trojan:Win32/Anomaly.gen!A
NOD32v2 2764 2008.01.03 a variant of Win32/PSW.LdPinch.NCB[/B]
Norman 5.80.02 2008.01.03 -
Panda 9.0.0.4 2008.01.03 -
Prevx1 V2 2008.01.03 -
[B]Rising 20.25.32.00 2008.01.03 Trojan.PSW.Win32.LdPinch.btw
Sophos 4.24.0 2008.01.03 Troj/LdPinch-PZ
Sunbelt 2.2.907.0 2008.01.03 Trojan-PWS.LdPinch.BSG
Symantec 10 2008.01.03 Infostealer[/B]
TheHacker 6.2.9.178 2008.01.03 -
[B]VBA32 3.12.2.5 2008.01.02 MalwareScope.Trojan-PSW.Pinch.1[/B]
VirusBuster 4.3.26:9 2008.01.03 -
[B]Webwasher-Gateway 6.6.2 2008.01.03 Trojan.Crypt.XPACK.Gen[/B]
Additional information
File size: 32829 bytes
MD5: b4bd55ddbdda7f7fc6d7985a19421700
SHA1: c9cdcd832a776813e1b45cd890ff7a8883d3955f
PEiD: -
packers: RCryptor, PECompact
packers: PecBundle, PECompact

File AVP_Keygen_5.0.exe received on 01.04.2008 11:46:22 (CET)
Result: 16/32 (50%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.4.11 2008.01.04 -
[B]AntiVir 7.6.0.46 2008.01.03 TR/Crypt.XPACK.Gen[/B]
Authentium 4.93.8 2008.01.04 -
[B]Avast 4.7.1098.0 2008.01.03 Win32:Small-YL
AVG 7.5.0.516 2008.01.03 Packed.AverCrypt[/B]
BitDefender 7.2 2008.01.04 -
[B]CAT-QuickHeal 9.00 2008.01.03 (Suspicious) - DNAScan[/B]
ClamAV 0.91.2 2008.01.04 -
[B]DrWeb 4.44.0.09170 2008.01.03 Trojan.KeyLogger.195[/B]
eSafe 7.0.15.0 2008.01.03 1760502504
eTrust-Vet 31.3.5430 2008.01.04 -
[B]Ewido 4.0 2008.01.03 Logger.Small.cw[/B]
FileAdvisor 1 2008.01.04 -
Fortinet 3.14.0.0 2008.01.04 -
F-Prot 4.4.2.54 2008.01.04 -
[B]F-Secure 6.70.13030.0 2008.01.04 Trojan-Spy.Win32.Small.cw[/B]
Ikarus T3.1.1.15 2008.01.04 -
[B]Kaspersky 7.0.0.125 2008.01.04 Trojan-Spy.Win32.Small.cw[/B]
[COLOR="Red"]McAfee 5199 2008.01.03 -[/COLOR]
Microsoft 1.3109 2008.01.04 -
[B]NOD32v2 2764 2008.01.03 probably unknown NewHeur_PE [/B]virus
Norman 5.80.02 2008.01.03 -
[B]Panda 9.0.0.4 2008.01.03 Suspicious file[/B]
Prevx1 V2 2008.01.04 -
Rising 20.25.41.00 2008.01.04 -
[B]Sophos 4.24.0 2008.01.04 Mal/Basine-C
Sunbelt 2.2.907.0 2008.01.04 VIPRE.Suspicious
Symantec 10 2008.01.04 Infostealer[/B]
TheHacker 6.2.9.180 2008.01.04 -
[B]VBA32 3.12.2.5 2008.01.02 suspected of Embedded.Trojan.Win32.Spy.Small.CW[/B]
VirusBuster 4.3.26:9 2008.01.03 -
[B]Webwasher-Gateway 6.6.2 2008.01.04 Trojan.Crypt.XPACK.Gen[/B]
Additional information
File size: 17920 bytes
MD5: d6420ad88e50a5f20fbbd87c0929fba0
SHA1: b3ca55bc190383e040656a78fe7e8082dc40b6ea
PEiD: AverCryptor 1.02 beta -> os1r1s
packers: PE-Crypt.PNH
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

File AMS_Enterprise_2.79.exe received on 01.04.2008 11:46:48 (CET)
Result: 16/32 (50%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.4.11 2008.01.04 -
[B]AntiVir 7.6.0.46 2008.01.03 TR/Spy.Gen[/B]
Authentium 4.93.8 2008.01.04 -
Avast 4.7.1098.0 2008.01.03 -
[B]AVG 7.5.0.516 2008.01.03 PSW.Ldpinch.RLT
BitDefender 7.2 2008.01.04 Trojan.PWS.LdPinch.TGA
CAT-QuickHeal 9.00 2008.01.03 TrojanPSW.LdPinch.cds[/B]
ClamAV 0.91.2 2008.01.04 -
[B]DrWeb 4.44.0.09170 2008.01.03 Trojan.PWS.LDPinch.1941
eSafe 7.0.15.0 2008.01.03 Win32.LdPinch.cds[/B]
eTrust-Vet 31.3.5430 2008.01.04 -
Ewido 4.0 2008.01.03 -
[B]FileAdvisor 1 2008.01.04 High threat detected[/B]
Fortinet 3.14.0.0 2008.01.04 -
F-Prot 4.4.2.54 2008.01.04 -
[B]F-Secure 6.70.13030.0 2008.01.04 Trojan-PSW.Win32.LdPinch.cds
Ikarus T3.1.1.15 2008.01.04 MalwareScope.Trojan-PWS.Pinch.1
Kaspersky 7.0.0.125 2008.01.04 Trojan-PSW.Win32.LdPinch.cds[/B]
[COLOR="Red"]McAfee 5199 2008.01.03 -[/COLOR]
Microsoft 1.3109 2008.01.04 -
[COLOR="#ff0000"]NOD32v2 2764 2008.01.03 -[/COLOR]
Norman 5.80.02 2008.01.03 -
Panda 9.0.0.4 2008.01.03 -
Prevx1 V2 2008.01.04 -
[B]Rising 20.25.41.00 2008.01.04 Trojan.PSW.Win32.LdPinch.cds
Sophos 4.24.0 2008.01.04 Mal/Basine-C
Sunbelt 2.2.907.0 2008.01.04 Trojan-Spy.Gen[/B]
[COLOR="#ff0000"]Symantec 10 2008.01.04 -[/COLOR]
[B]TheHacker 6.2.9.180 2008.01.04 Trojan/PSW.LdPinch.cds
VBA32 3.12.2.5 2008.01.02 Trojan-PSW.Win32.LdPinch.cds[/B]
VirusBuster 4.3.26:9 2008.01.03 -
[B]Webwasher-Gateway 6.6.2 2008.01.04 Trojan.Spy.Gen[/B]
Additional information
File size: 42496 bytes
MD5: 2cb93a4a640c366add1d1177f0bec443
SHA1: cbf6b16d41f65b1ea0ebf74432a023abf15e528d
PEiD: -
Bit9 info: [url]http://fileadvisor.bit9.com/services/extinfo.aspx?md5=2cb93a4a640c366add1d1177f0bec443[/url]
packers: PE_Patch.FreeCryptor, FreeCryptor

File pinch3_Builder.rar received on 01.04.2008 12:21:55 (CET)
Result: 22/32 (68.75%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.4.11 2008.01.04 -
[B]AntiVir 7.6.0.46 2008.01.04 TR/Crypt.XDR.Gen
Authentium 4.93.8 2008.01.04 W32/Trojan.ACMO
Avast 4.7.1098.0 2008.01.03 Win32:LdPinch-OR
AVG 7.5.0.516 2008.01.03 Dropper.Agent.EFM
BitDefender 7.2 2008.01.04 Trojan.PWS.LdPinch.TAI
CAT-QuickHeal 9.00 2008.01.03 (Suspicious) - DNAScan
ClamAV 0.91.2 2008.01.04 Trojan.Spy-295
DrWeb 4.44.0.09170 2008.01.03 Trojan.MulDrop.7648
eSafe 7.0.15.0 2008.01.03 Suspicious File[/B]
eTrust-Vet 31.3.5430 2008.01.04 -
Ewido 4.0 2008.01.03 -
FileAdvisor 1 2008.01.04 -
Fortinet 3.14.0.0 2008.01.04 -
[B]F-Prot 4.4.2.54 2008.01.04 W32/Trojan2.CKZ
F-Secure 6.70.13030.0 2008.01.04 Trojan-Dropper.Win32.PeStaple.13
Ikarus T3.1.1.15 2008.01.04 Trojan-Dropper.Win32.Agent.bgn
Kaspersky 7.0.0.125 2008.01.04 Trojan-Dropper.Win32.PeStaple.13[/B]
[COLOR="Red"]McAfee 5199 2008.01.03 -[/COLOR]
Microsoft 1.3109 2008.01.04 -
[B]NOD32v2 2765 2008.01.04 Win32/TrojanDropper.FriJoiner.NAA[/B]
Norman 5.80.02 2008.01.03 -
[B]Panda 9.0.0.4 2008.01.03 Suspicious file
Prevx1 V2 2008.01.04 Heuristic: Suspicious Self Modifying EXE
Rising 20.25.42.00 2008.01.04 Dropper.Win32.Agent.bgn
Sophos 4.24.0 2008.01.04 Mal/Basine-C
Sunbelt 2.2.907.0 2008.01.04 VIPRE.Suspicious[/B]
[COLOR="#ff0000"]Symantec 10 2008.01.04 -[/COLOR]
TheHacker 6.2.9.180 2008.01.04 -
[B]VBA32 3.12.2.5 2008.01.02 Trojan-Dropper.Win32.Agent.bgn
VirusBuster 4.3.26:9 2008.01.03 Trojan.DR.Webmoner.Gen.2
Webwasher-Gateway 6.6.2 2008.01.04 Trojan.Crypt.XDR.Gen[/B]
Additional information
File size: 422425 bytes
MD5: e33df8b9e185b82fe16a25e33c799d25
SHA1: d107330b71da84f1a1ac4397fe4829941ccafb94
PEiD: -
packers: PecBundle, PECompact
packers: PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact, PE_Patch.PECompact, PecBundle, PECompact
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=95CA3E6B2BB00A11EA0A015121B164009BA2505A[/url]
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.
04.01.2008, 19:01
strawser

File paroliki.exe.safe received on 01.04.2008 16:52:17 (CET)
Result: 15/32 (46.88%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.4.11 2008.01.04 -
[B]AntiVir 7.6.0.46 2008.01.04 TR/PSW.LdPinch.eix[/B]
Authentium 4.93.8 2008.01.04 -
[B]Avast 4.7.1098.0 2008.01.03 Win32:LdPinch-BJV
AVG 7.5.0.516 2008.01.04 PSW.Ldpinch.RZB[/B]
[COLOR="Red"]BitDefender 7.2 2008.01.04 -[/COLOR]
[B]CAT-QuickHeal 9.00 2008.01.04 TrojanPSW.LdPinch.eix[/B]
ClamAV 0.91.2 2008.01.04 -
[COLOR="#ff0000"]DrWeb 4.44.0.09170 2008.01.04 -[/COLOR]
eSafe 7.0.15.0 2008.01.03 -
eTrust-Vet 31.3.5430 2008.01.04 -
Ewido 4.0 2008.01.04 -
[B]FileAdvisor 1 2008.01.04 High threat detected[/B]
Fortinet 3.14.0.0 2008.01.04 -
[B]F-Prot 4.4.2.54 2008.01.04 W32/LdPinch.H.gen!Eldorado
F-Secure 6.70.13030.0 2008.01.04 Trojan-PSW.Win32.LdPinch.eix
Ikarus T3.1.1.15 2008.01.04 Virus.Win32.LdPinch.BJV
Kaspersky 7.0.0.125 2008.01.04 Trojan-PSW.Win32.LdPinch.eix[/B]
[COLOR="#ff0000"]McAfee 5199 2008.01.03 -[/COLOR]
Microsoft 1.3109 2008.01.04 -
[COLOR="#ff0000"]NOD32v2 2765 2008.01.04 -[/COLOR]
Norman 5.80.02 2008.01.04 -
[B]Panda 9.0.0.4 2008.01.03 Suspicious file[/B]
Prevx1 V2 2008.01.04 -
Rising 20.25.42.00 2008.01.04 -
Sophos 4.24.0 2008.01.04 -
[B]Sunbelt 2.2.907.0 2008.01.04 VIPRE.Suspicious
Symantec 10 2008.01.04 Infostealer
TheHacker 6.2.9.180 2008.01.04 Trojan/PSW.LdPinch.eix
VBA32 3.12.2.5 2008.01.02 MalwareScope.Trojan-PSW.Pinch.1[/B]
VirusBuster 4.3.26:9 2008.01.04 -
[B]Webwasher-Gateway 6.6.2 2008.01.04 Trojan.PSW.LdPinch.eix[/B]
Additional information
File size: 31232 bytes
MD5: 70a709161375ec2f634b5371d966b663
SHA1: 716dc079cbf424ef8ee41b6d5f301e9d519eb9af
PEiD: -
Bit9 info: [url]http://fileadvisor.bit9.com/services/extinfo.aspx?md5=70a709161375ec2f634b5371d966b663[/url]
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

File __________________.rar received on 01.04.2008 17:09:46 (CET)
Result: 3/32 (9.38%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.4.11 2008.01.04 -
AntiVir 7.6.0.46 2008.01.04 -
Authentium 4.93.8 2008.01.04 -
Avast 4.7.1098.0 2008.01.03 -
AVG 7.5.0.516 2008.01.04 -
BitDefender 7.2 2008.01.04 -
CAT-QuickHeal 9.00 2008.01.04 -
ClamAV 0.91.2 2008.01.04 -
[B]DrWeb 4.44.0.09170 2008.01.04 SCRIPT.Virus[/B]
eSafe 7.0.15.0 2008.01.03 -
eTrust-Vet 31.3.5430 2008.01.04 -
Ewido 4.0 2008.01.04 -
FileAdvisor 1 2008.01.04 -
Fortinet 3.14.0.0 2008.01.04 -
F-Prot 4.4.2.54 2008.01.04 -
F-Secure 6.70.13030.0 2008.01.04 -
Ikarus T3.1.1.15 2008.01.04 -
[B]Kaspersky 7.0.0.125 2008.01.04 Trojan.VBS.KillFiles.u[/B]
McAfee 5199 2008.01.03 -
Microsoft 1.3109 2008.01.04 -
NOD32v2 2765 2008.01.04 -
Norman 5.80.02 2008.01.04 -
[B]Panda 9.0.0.4 2008.01.03 Suspicious file[/B]
Prevx1 V2 2008.01.04 -
Rising 20.25.42.00 2008.01.04 -
Sophos 4.24.0 2008.01.04 -
Sunbelt 2.2.907.0 2008.01.04 -
Symantec 10 2008.01.04 -
TheHacker 6.2.9.180 2008.01.04 -
VBA32 3.12.2.5 2008.01.02 -
VirusBuster 4.3.26:9 2008.01.04 -
Webwasher-Gateway 6.6.2 2008.01.04 -
Additional information
File size: 1929 bytes
MD5: 8809ee20f31497ebec7796e40a314586
SHA1: 61e0b881ce3284a4ad154e47770f31e4f32e35ae
PEiD: -

File NewYear2008.scr.safe received on 01.04.2008 17:32:44 (CET)
Result: 18/32 (56.25%)
Antivirus Version Last Update Result
[B]AhnLab-V3 2008.1.4.11 2008.01.04 Win-Trojan/LdPinch.34287
AntiVir 7.6.0.46 2008.01.04 TR/Crypt.NSPM.Gen[/B]
Authentium 4.93.8 2008.01.04 -
Avast 4.7.1098.0 2008.01.03 -
[B]A[B]VG 7.5.0.516 2008.01.04 PSW.Ldpinch.QZF
BitDefender 7.2 2008.01.04 Trojan.PWS.Ldpinch.TEJ
CAT-QuickHeal 9.00 2008.01.04 (Suspicious) - DNAScan[/B][/B]
ClamAV 0.91.2 2008.01.04 -
[B]DrWeb 4.44.0.09170 2008.01.04 Trojan.PWS.LDPinch.1407[/B]
[B]eSafe 7.0.15.0 2008.01.03 Suspicious File[/B]
eTrust-Vet 31.3.5430 2008.01.04 -
Ewido 4.0 2008.01.04 -
FileAdvisor 1 2008.01.04 -
Fortinet 3.14.0.0 2008.01.04 -
F-Prot 4.4.2.54 2008.01.04 -
[B]F-Secure 6.70.13030.0 2008.01.04 Trojan-PSW.Win32.LdPinch.ecw
Ikarus T3.1.1.15 2008.01.04 Trojan-PWS.Win32.LdPinch.ecw
Kaspersky 7.0.0.125 2008.01.04 Trojan-PSW.Win32.LdPinch.ecw[/B]
[COLOR="Red"]McAfee 5200 2008.01.04 -[/COLOR]
Microsoft 1.3109 2008.01.04 -
[B]NOD32v2 2765 2008.01.04 Win32/PSW.LdPinch.NCB
Norman 5.80.02 2008.01.04 W32/LdPinch.RUP[/B]
Panda 9.0.0.4 2008.01.03 -
Prevx1 V2 2008.01.04 -
[B]Rising 20.25.42.00 2008.01.04 Trojan.DL.Win32.Small.etp
Sophos 4.24.0 2008.01.04 Mal/Basine-C
Sunbelt 2.2.907.0 2008.01.04 VIPRE.Suspicious
Symantec 10 2008.01.04 Infostealer[/B]
TheHacker 6.2.9.180 2008.01.04 -
VBA32 3.12.2.5 2008.01.02 -
[B]VirusBuster 4.3.26:9 2008.01.04 Trojan.PWS.LdPinch.CGD
Webwasher-Gateway 6.6.2 2008.01.04 Trojan.Crypt.NSPM.Gen[/B]
Additional information
File size: 34287 bytes
MD5: add4b1566e862412eb08921b6975e5c7
SHA1: 590895137004cc116c2bb340e01c9a701990295b
PEiD: -
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

File l2phx.rar received on 01.04.2008 18:06:56 (CET)
Result: 12/32 (37.5%)
Antivirus Version Last Update Result
AhnLab-V3 2008.1.4.11 2008.01.04 -
[B]AntiVir 7.6.0.46 2008.01.04 TR/Crypt.XDR.Gen[/B]
Authentium 4.93.8 2008.01.04 -
[B]Avast 4.7.1098.0 2008.01.03 Win32:Cardspy-B[/B]
AVG 7.5.0.516 2008.01.04 -
[B]BitDefender 7.2 2008.01.04 DeepScan:Generic.FWB.324295B9[/B]
CAT-QuickHeal 9.00 2008.01.04 -
ClamAV 0.91.2 2008.01.04 -
[COLOR="#ff0000"]DrWeb 4.44.0.09170 2008.01.04 -[/COLOR]
eSafe 7.0.15.0 2008.01.03 -
eTrust-Vet 31.3.5430 2008.01.04 -
Ewido 4.0 2008.01.04 -
FileAdvisor 1 2008.01.04 -
Fortinet 3.14.0.0 2008.01.04 -
F-Prot 4.4.2.54 2008.01.04 -
F-Secure 6.70.13030.0 2008.01.04 -
[B]Ikarus T3.1.1.15 2008.01.04 Trojan.Win32.Delf.nf
Kaspersky 7.0.0.125 2008.01.04 Trojan-PSW.Win32.LdPinch.cds[/B]
[COLOR="#ff0000"]McAfee 5200 2008.01.04 -[/COLOR]
Microsoft 1.3109 2008.01.04 -
[COLOR="#ff0000"]NOD32v2 2765 2008.01.04 -[/COLOR]
Norman 5.80.02 2008.01.04 -
[B]Panda 9.0.0.4 2008.01.03 Suspicious file
Prevx1 V2 2008.01.04 Heuristic: Suspicious Self Modifying File[/B]
Rising 20.25.42.00 2008.01.04 -
[B]Sophos 4.24.0 2008.01.04 Mal/Behav-053
Sunbelt 2.2.907.0 2008.01.04 Backdoor.Delf.BF[/B]
[COLOR="#ff0000"]Symantec 10 2008.01.04 -[/COLOR]
TheHacker 6.2.9.180 2008.01.04 -
[B]VBA32 3.12.2.5 2008.01.02 MalwareScope.Trojan-PSW.Pinch.1
VirusBuster 4.3.26:9 2008.01.04 Trojan.DR.Webmoner.Gen.2[/B]
[B]Webwasher-Gateway 6.6.2 2008.01.04 Win32.NewMalware.CC!9728!4[/B]
Additional information
File size: 588302 bytes
MD5: fc2912bfe501e1303698cfcd7071ef9a
SHA1: 1a3f0b835a179e8ee52b9392925154c95dd72834
PEiD: -
packers: NCode
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=DFB27F2A00C4B8A626E100D404988F00C89E16CF[/url]
05.01.2008, 18:22
ALEX(XX)

File Check.exe received on 01.05.2008 16:13:02 (CET)

Antivirus Version Last Update Result
AhnLab-V3 2008.1.5.11 2008.01.05 -
[B]AntiVir 7.6.0.46 2008.01.04 TR/PSW.Wow.LQ[/B]
Authentium 4.93.8 2008.01.04 -
Avast 4.7.1098.0 2008.01.04 -
AVG 7.5.0.516 2008.01.05 -
BitDefender 7.2 2008.01.05 -
CAT-QuickHeal 9.00 2008.01.05 -
ClamAV 0.91.2 2008.01.05 -
DrWeb 4.44.0.09170 2008.01.05 -
[B]eSafe 7.0.15.0 2008.01.03 Win32.WOW.lq[/B]
eTrust-Vet 31.3.5432 2008.01.04 -
Ewido 4.0 2008.01.05 -
[B]FileAdvisor 1 2008.01.05 High threat detected[/B]
[B]Fortinet 3.14.0.0 2008.01.05 W32/WOW.LQ!tr.pws[/B]
F-Prot 4.4.2.54 2008.01.04 -
[B]F-Secure 6.70.13030.0 2008.01.04 W32/Wow.BHU[/B]
[B]Ikarus T3.1.1.15 2008.01.05 Trojan-PWS.Win32.WOW.lq[/B]
Kaspersky 7.0.0.125 2008.01.05 -
McAfee 5200 2008.01.04 -
Microsoft 1.3109 2008.01.05 -
NOD32v2 2766 2008.01.04 -
[B]Norman 5.80.02 2008.01.04 W32/Wow.BHU[/B]
[B]Panda 9.0.0.4 2008.01.05 Trj/WoW.HV[/B]
[B]Prevx1 V2 2008.01.05 Generic.Malware[/B]
Rising 20.25.52.00 2008.01.05 -
[B]Sophos 4.24.0 2008.01.05 Mal/Generic-A[/B]
[B]Sunbelt 2.2.907.0 2008.01.05 VIPRE.Suspicious[/B]
[B]Symantec 10 2008.01.05 Trojan Horse[/B]
[B]TheHacker 6.2.9.180 2008.01.04 Trojan/PSW.WOW.lq[/B]
[B]VBA32 3.12.2.5 2008.01.02 Trojan-PSW.Win32.WOW.lq[/B]
VirusBuster 4.3.26:9 2008.01.05 -
[B]Webwasher-Gateway 6.6.2 2008.01.04 Trojan.PSW.Wow.LQ[/B]

Additional information
File size: 245760 bytes
MD5: 70abf6a1b03de09b581ed39c5196c6fa
SHA1: 027891795ce1316faf4754066691c14002392bad
PEiD: -
Bit9 info: [URL]http://fileadvisor.bit9.com/services/extinfo.aspx?md5=70abf6a1b03de09b581ed39c5196c6fa[/URL]
Prevx info: [URL]http://info.prevx.com/aboutprogramtext.asp?PX5=AC0B4401009E1677C0B303CFDCD867002B0784EF[/URL]
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.
06.01.2008, 14:04
rubin

mssrv32.exe получен 2008.01.06 11:56:33 (CET)
[code]AhnLab-V3 2008.1.5.11 2008.01.05 -
[b]AntiVir 7.6.0.46 2008.01.04 TR/Crypt.XPACK.Gen[/b]
Authentium 4.93.8 2008.01.05 -
Avast 4.7.1098.0 2008.01.05 -
[b]AVG 7.5.0.516 2008.01.05 Crypt.H[/b]
BitDefender 7.2 2008.01.06 -
CAT-QuickHeal 9.00 2008.01.05 -
ClamAV 0.91.2 2008.01.06 -
[b]DrWeb 4.44.0.09170 2008.01.06 Trojan.DownLoader.35134
eSafe 7.0.15.0 2008.01.03 suspicious Trojan/Worm[/b]
eTrust-Vet 31.3.5432 2008.01.04 -
Ewido 4.0 2008.01.05 -
FileAdvisor 1 2008.01.06 -
Fortinet 3.14.0.0 2008.01.06 -
F-Prot 4.4.2.54 2008.01.05 -
F-Secure 6.70.13030.0 2008.01.05 -
Ikarus T3.1.1.15 2008.01.06 -
Kaspersky 7.0.0.125 2008.01.06 -
McAfee 5200 2008.01.04 -
Microsoft 1.3109 2008.01.06 -
NOD32v2 2767 2008.01.06 -
Norman 5.80.02 2008.01.04 -
Panda 9.0.0.4 2008.01.05 -
[b]Prevx1 V2 2008.01.06 Heuristic: Suspicious Self Modifying EXE[/b]
Rising 20.25.62.00 2008.01.06 -
Sophos 4.24.0 2008.01.06 -
Sunbelt 2.2.907.0 2008.01.05 -
Symantec 10 2008.01.06 -
TheHacker 6.2.9.181 2008.01.05 -
VBA32 3.12.2.5 2008.01.02 -
VirusBuster 4.3.26:9 2008.01.05 -
[b]Webwasher-Gateway 6.6.2 2008.01.04 Trojan.Crypt.XPACK.Gen[/b][/code]
File size: 14336 bytes
MD5: 96357a35c71162303038c815cb9e02a6
SHA1: fcb927ef0aef3b6e3aa8521c5a16f1ce5b2ba5c9
PEiD: -
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=151E04B300F5036D387C00F87D78FB00D2F59177[/url]

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

ftpgrb[1].exe получен 2008.01.06 11:56:29 (CET)
[code]AhnLab-V3 2008.1.5.11 2008.01.05 -
AntiVir 7.6.0.46 2008.01.04 -
Authentium 4.93.8 2008.01.05 -
Avast 4.7.1098.0 2008.01.05 -
AVG 7.5.0.516 2008.01.05 -
BitDefender 7.2 2008.01.06 -
CAT-QuickHeal 9.00 2008.01.05 -
ClamAV 0.91.2 2008.01.06 -
DrWeb 4.44.0.09170 2008.01.06 -
eSafe 7.0.15.0 2008.01.03 -
eTrust-Vet 31.3.5432 2008.01.04 -
Ewido 4.0 2008.01.05 -
FileAdvisor 1 2008.01.06 -
Fortinet 3.14.0.0 2008.01.06 -
F-Prot 4.4.2.54 2008.01.05 -
F-Secure 6.70.13030.0 2008.01.05 -
[b]Ikarus T3.1.1.15 2008.01.06 Trojan-Spy.Finanz.J
Kaspersky 7.0.0.125 2008.01.06 Trojan-PSW.Win32.Agent.vh[/b]
McAfee 5200 2008.01.04 -
Microsoft 1.3109 2008.01.06 -
NOD32v2 2767 2008.01.06 -
Norman 5.80.02 2008.01.04 -
Panda 9.0.0.4 2008.01.05 -
[b]Prevx1 V2 2008.01.06 Heuristic: Suspicious Self Modifying File[/b]
Rising 20.25.62.00 2008.01.06 -
[b]Sophos 4.24.0 2008.01.06 Mal/Behav-112
Sunbelt 2.2.907.0 2008.01.05 Trojan.Nethell.B[/b]
Symantec 10 2008.01.06 -
TheHacker 6.2.9.181 2008.01.05 -
VBA32 3.12.2.5 2008.01.02 -
VirusBuster 4.3.26:9 2008.01.05 -
Webwasher-Gateway 6.6.2 2008.01.04 -[/code]
File size: 16896 bytes
MD5: 5f587ef06b011a352f51c0fe67704d4b
SHA1: 8d5b1adaa59d352f2af549935936a0316f430361
PEiD: Armadillo v1.71
packers: UPX
Prevx info: [url]http://info.prevx.com/aboutprogramtext.asp?PX5=3274D91B00128361427500E52C0581002333697E[/url]
06.01.2008, 20:56
XL

вот такой малварный драйверочек поймал:

[QUOTE]Файл beep.sys получен 2008.01.06 18:46:14 (CET)

AhnLab-V3 2008.1.5.11 2008.01.05 -
AntiVir 7.6.0.46 2008.01.06 -
Authentium 4.93.8 2008.01.06 -
Avast 4.7.1098.0 2008.01.06 -
AVG 7.5.0.516 2008.01.06 -
[B]BitDefender 7.2 2008.01.06 Generic.Zlob.96765D0B
CAT-QuickHeal 9.00 2008.01.05 (Suspicious) - DNAScan[/B]
ClamAV 0.91.2 2008.01.06 -
DrWeb 4.44.0.09170 2008.01.06 -
eSafe 7.0.15.0 2008.01.06 -
eTrust-Vet 31.3.5432 2008.01.04 -
Ewido 4.0 2008.01.06 -
FileAdvisor 1 2008.01.06 -
Fortinet 3.14.0.0 2008.01.06 -
F-Prot 4.4.2.54 2008.01.05 -
[B]F-Secure 6.70.13030.0 2008.01.05 Rootkit.Win32.Agent.sv
Ikarus T3.1.1.15 2008.01.06 Generic.Zlob
Kaspersky 7.0.0.125 2008.01.06 Rootkit.Win32.Agent.sv[/B]
McAfee 5200 2008.01.04 -
Microsoft 1.3109 2008.01.06 -
NOD32v2 2767 2008.01.06 -
Norman 5.80.02 2008.01.04 -
Panda 9.0.0.4 2008.01.06 -
[B]Prevx1 V2 2008.01.06 Heuristic: Suspicious File With Anti-Security Technology[/B]
Rising 20.25.62.00 2008.01.06 -
Sophos 4.24.0 2008.01.06 -
Sunbelt 2.2.907.0 2008.01.05 -
[B]Symantec 10 2008.01.06 Trojan.Virantix.B[/B]
TheHacker 6.2.9.181 2008.01.05 -
VBA32 3.12.2.5 2008.01.06 -
VirusBuster 4.3.26:9 2008.01.06 -
[B]Webwasher-Gateway 6.6.2 2008.01.06 Win32.Malware.gen!80 (suspicious)[/B]
Дополнительная информация
File size: 61440 bytes
MD5: cd7336cd26222ff6d1c7872da7a43173
SHA1: 92eb6067027f64f866224e12509508fc97cc6aee[/QUOTE]

описание зверька от symantec:
[url]http://www.symantec.com/security_response/writeup.jsp?docid=2007-122607-2738-99&tabid=2[/url]

в списке завершаемых процессов улыбнуло:
[COLOR="Red"]avz.exe
cureit.exe[/COLOR]
07.01.2008, 22:15
Surfer

[SIZE="1"]delphi - for noobs =)[/SIZE]

Antivirus Version Last Update Result
AhnLab-V3 2008.1.8.10 2008.01.07 -
[B]AntiVir 7.6.0.46 2008.01.07 TR/Delphi.Downloader.Gen
Authentium 4.93.8 2008.01.06 Possibly a new variant of W32/NewMalware-LSU-based!Maximus[/B]
Avast 4.7.1098.0 2008.01.07 -
[B]AVG 7.5.0.516 2008.01.07 Downloader.Generic6.ACOR[/B]
BitDefender 7.2 2008.01.07 -
CAT-QuickHeal 9.00 2008.01.07 -
ClamAV 0.91.2 2008.01.07 -
[B]DrWeb 4.44.0.09170 2008.01.07 DLOADER.Trojan[/B]
eSafe 7.0.15.0 2008.01.06 -
eTrust-Vet 31.3.5438 2008.01.07 -
Ewido 4.0 2008.01.07 -
FileAdvisor 1 2008.01.07 -
Fortinet 3.14.0.0 2008.01.07 -
[B]F-Prot 4.4.2.54 2008.01.06 W32/NewMalware-LSU-based!Maximus
F-Secure 6.70.13030.0 2008.01.07 W32/Downloader
Ikarus T3.1.1.15 2008.01.07 Trojan-Downloader.Win32.Delf.NC
Kaspersky 7.0.0.125 2008.01.07 Heur.Downloader[/B]
McAfee 5201 2008.01.07 -
[B]Microsoft 1.3109 2008.01.07 TrojanDownloader:Win32/Small.gen!X
NOD32v2 2771 2008.01.07 a variant of Win32/TrojanDownloader.Dadobra.FX
Norman 5.80.02 2008.01.07 W32/Downloader
Panda 9.0.0.4 2008.01.07 Suspicious file[/B]
Prevx1 V2 2008.01.07 -
Rising 20.26.02.00 2008.01.07 -
[B]Sophos 4.24.0 2008.01.07 Mal/Heuri-E[/B]
Sunbelt 2.2.907.0 2008.01.05 -
Symantec 10 2008.01.07 -
TheHacker 6.2.9.183 2008.01.07 -
[B]VBA32 3.12.2.5 2008.01.07 suspected of Win32.Trojan.Downloader ([url]http://.[/url]..) [/B]
VirusBuster 4.3.26:9 2008.01.07 -
[B]Webwasher-Gateway 6.6.2 2008.01.07 Trojan.Delphi.Downloader.Gen[/B]
Additional information
File size: 16896 bytes
MD5: 10a20ab9b8e55fb3e5f3affdb94027ad
SHA1: 4296f6f9ae3ff4b804ee4e35484ae2d7700af0a7
PEiD: -

[url]http://www.virustotal.com/analisis/4172f5fc9c1bd9282b9807533a0b08f5[/url]

Показывать 40 сообщений этой темы на одной странице