Исследование антивирусов 7

Printable View

Показывать 40 сообщений этой темы на одной странице

05.11.2008, 14:07
Shu_b

Исследование антивирусов 7

[quote]
Сообщение от [B]Geser[/B] [URL="http://virusinfo.info/showthread.php?p=75585#post75585"][IMG]http://virusinfo.info/images/buttonsru/viewpost.gif[/IMG][/URL]
[B][I]В общем думал я думал как сделать более-менее объективную оценку антивирусов, и кое что придумал. Вот в эту тему прошу всех постить результаты проверки зверей которые были пойманы исключительно ручками. Т.е. которых не видел установленный на компютере антивирус. Так выборка будет по настоящему случайной.[/I]

[I][COLOR=red]Постить в эту тему результаты проверки файлов исключительно пойманных руками на компьютерах.[/COLOR][/I]

[I][COLOR=blue][B]Не[/B] постить результаты проверки файлов найденных на других сайтах или в коллекциях. [/COLOR][/I]
[I][COLOR=blue][B]Не[/B] постить результаты проверки файлов изначально найденных антивирусом.[/COLOR][/I][/B]
[/quote]

Продолжим в новой теме.

[size="1"][color="#666686"][B][I]Добавлено через 4 часа 40 минут[/I][/B][/color][/size]

Для затравки: [CODE]File svchost.exe:ext.exe:$DATA received on 11.05.2008 12:03:13 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2008.11.5.3 2008.11.05 -
[B]AntiVir 7.9.0.10 2008.11.05 TR/Crypt.U.Gen[/B]
Authentium 5.1.0.4 2008.11.04 -
[B]Avast 4.8.1248.0 2008.11.04 Win32:Agent-ABKC[/B]
AVG 8.0.0.161 2008.11.05 -
[B]BitDefender 7.2 2008.11.05 Trojan.Rootkit.Agent.NFS
CAT-QuickHeal 9.50 2008.11.04 Win32.Backdoor.Tofsee.F.3[/B]
ClamAV 0.94.1 2008.11.05 -
DrWeb 4.44.0.09170 2008.11.05 -
[B]eSafe 7.0.17.0 2008.11.04 Suspicious File[/B]
eTrust-Vet 31.6.6190 2008.11.05 -
Ewido 4.0 2008.11.04 -
F-Prot 4.4.4.56 2008.11.04 -
F-Secure 8.0.14332.0 2008.11.05 -
Fortinet 3.117.0.0 2008.11.05 -
[B]GData 19 2008.11.05 Trojan.Rootkit.Agent.NFS
Ikarus T3.1.1.45.0 2008.11.05 Virus.Win32.Agent.ABKC[/B]
K7AntiVirus 7.10.516 2008.11.04 -
Kaspersky 7.0.0.125 2008.11.05 -
[B]McAfee 5424 2008.11.04 New Malware.bm[/B]
Microsoft 1.4005 2008.11.05 -
NOD32 3585 2008.11.05 -
Norman 5.80.02 2008.11.04 -
Panda 9.0.0.4 2008.11.05 -
PCTools 4.4.2.0 2008.11.04 -
Prevx1 V2 2008.11.05 -
[B]Rising 21.02.22.00 2008.11.05 Win32.Virut.GEN
SecureWeb-Gateway 6.7.6 2008.11.05 Trojan.Crypt.U.Gen[/B]
Sophos 4.35.0 2008.11.05 -
Sunbelt 3.1.1783.2 2008.11.05 -
Symantec 10 2008.11.05 -
TheHacker 6.3.1.1.140 2008.11.05 -
[B]TrendMicro 8.700.0.1004 2008.11.05 PAK_Generic.001[/B]
VBA32 3.12.8.9 2008.11.05 -
ViRobot 2008.11.5.1453 2008.11.05 -
VirusBuster 4.5.11.0 2008.11.04 -
Additional information
File size: 39936 bytes[/CODE]
06.11.2008, 16:07
Hanson

Файл avz00002.dta(C:\WINDOWS\system32\tvsm.dll) получен 2008.11.06 13:54:41 (CET)
Текущий статус:закончено
Результат: 1/36 (2.78%)
[QUOTE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.5.3 2008.11.06 -
AntiVir 7.9.0.26 2008.11.06 -
Authentium 5.1.0.4 2008.11.06 -
Avast 4.8.1248.0 2008.11.05 -
AVG 8.0.0.161 2008.11.06 -
BitDefender 7.2 2008.11.06 -
CAT-QuickHeal 9.50 2008.11.04 -
ClamAV 0.94.1 2008.11.06 -
DrWeb 4.44.0.09170 2008.11.06 -
eSafe 7.0.17.0 2008.11.05 -
eTrust-Vet 31.6.6194 2008.11.06 -
Ewido 4.0 2008.11.06 -
F-Prot 4.4.4.56 2008.11.06 -
F-Secure 8.0.14332.0 2008.11.06 -
Fortinet 3.117.0.0 2008.11.05 -
GData 19 2008.11.06 -
Ikarus T3.1.1.45.0 2008.11.06 -
K7AntiVirus 7.10.517 2008.11.05 -
Kaspersky 7.0.0.125 2008.11.06 Trojan-Ransom.Win32.BHO.a
McAfee 5425 2008.11.05 -
Microsoft 1.4005 2008.11.06 -
NOD32 3590 2008.11.06 -
Norman 5.80.02 2008.11.06 -
Panda 9.0.0.4 2008.11.05 -
PCTools 4.4.2.0 2008.11.06 -
Prevx1 V2 2008.11.06 -
Rising 21.02.32.00 2008.11.06 -
SecureWeb-Gateway 6.7.6 2008.11.06 -
Sophos 4.35.0 2008.11.06 -
Sunbelt 3.1.1783.2 2008.11.05 -
Symantec 10 2008.11.06 -
TheHacker 6.3.1.1.141 2008.11.05 -
TrendMicro 8.700.0.1004 2008.11.06 -
VBA32 3.12.8.9 2008.11.05 -
ViRobot 2008.11.6.1455 2008.11.06 -
VirusBuster 4.5.11.0 2008.11.05 -

Дополнительная информация
File size: 221184 bytes
MD5...: f9dc2a3052db20dfb8939a74e75314ed
SHA1..: fd936b597982f68d05d037773819d178d6706517
SHA256: a1e1a209a40dccc9848bf2b9029ba091cb3522c769e3a082761e277d534af1e1
SHA512: 3088346ac8f5f82f47abfadb2541e0e1e85dbe2db5cabcb13fd10d744123c8dd
9667ab1fffa8a1766a95e5717135239cb397db6dc26512ff4ccee0e87356f01c
PEiD..: -[/QUOTE]

может и ложняк,но вот ответ каспера
[QUOTE]avz00002.dta - Trojan-Ransom.Win32.BHO.a

This file is already detected. Please update your antivirus bases.[/QUOTE]

[size="1"][color="#666686"][B][I]Добавлено через 8 минут[/I][/B][/color][/size]

Файл avz00009.dta получен 2008.11.06 14:01:20 (CET)
(C:\windows\services.exe)
Текущий статус: закончено
Результат: 15/36 (41.67%)
[QUOTE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.5.3 2008.11.06 -
[B]AntiVir 7.9.0.26 2008.11.06 Worm/Joleee.CA[/B]
Authentium 5.1.0.4 2008.11.06 -
[B]Avast 4.8.1248.0 2008.11.05 Win32:Fabot
AVG 8.0.0.161 2008.11.06 Downloader.Generic_r.BG
BitDefender 7.2 2008.11.06 Trojan.Spammer.Tedroo.AT
CAT-QuickHeal 9.50 2008.11.04 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.06 -
DrWeb 4.44.0.09170 2008.11.06 -
eSafe 7.0.17.0 2008.11.05 -
eTrust-Vet 31.6.6194 2008.11.06 -
Ewido 4.0 2008.11.06 -
F-Prot 4.4.4.56 2008.11.06 -
[B]F-Secure 8.0.14332.0 2008.11.06 Email-Worm.Win32.Joleee.ca[/B]
Fortinet 3.117.0.0 2008.11.05 -
[B]GData 19 2008.11.06 Win32:Fabot
Ikarus T3.1.1.45.0 2008.11.06 Email-Worm.Win32.Joleee.ca[/B]
K7AntiVirus 7.10.517 2008.11.05 -
[B]Kaspersky 7.0.0.125 2008.11.06 Email-Worm.Win32.Joleee.ca[/B]
McAfee 5425 2008.11.05 -
[B]Microsoft 1.4005 2008.11.06 TrojanDropper:Win32/Cutwail.AR[/B]
NOD32 3590 2008.11.06 -
Norman 5.80.02 2008.11.06 -
Panda 9.0.0.4 2008.11.05 -
PCTools 4.4.2.0 2008.11.06 -
[B]Prevx1 V2 2008.11.06 System Back Door
Rising 21.02.32.00 2008.11.06 Trojan.Win32.Undef.smc
SecureWeb-Gateway 6.7.6 2008.11.06 Worm.Joleee.CA
Sophos 4.35.0 2008.11.06 W32/Jolly-A[/B]
Sunbelt 3.1.1783.2 2008.11.05 -
[B]Symantec 10 2008.11.06 Backdoor.Trojan[/B]
TheHacker 6.3.1.1.141 2008.11.05 -
TrendMicro 8.700.0.1004 2008.11.06 -
VBA32 3.12.8.9 2008.11.05 -
ViRobot 2008.11.6.1455 2008.11.06 -
VirusBuster 4.5.11.0 2008.11.05 -

File size: 40960 bytes
MD5...: 9d0528ae22b6e911b466ca74944f3013
SHA1..: e6c1466b2af413663b50e7461a55309dfdae0e86
SHA256: 810dd0f979c479b1eb494b87c454224ca02458bc501c8c6c6fb5a59362295dcb
SHA512: 749b25065d175ee5dc45678ff6700d0f13e2b7118aa1ea2d03e2ff95276c1dfa
cdc1565a88a722caf1f1721f190f8b817ff2f7874c117a9de7ddcb5240b4512c[/QUOTE]
08.11.2008, 08:27
ISO

Порно информер - надстройка в IE.
[CODE]Файл trdlib.dll получен 2008.11.07 01:20:05 (CET)
Результат: 6/36 (16.67%)
Антивирус Версия Обновление Результат
[B]AhnLab-V3 2008.11.7.1 2008.11.06 Win-Trojan/Hexzone.352256[/B]
AntiVir 7.9.0.26 2008.11.07 -
Authentium 5.1.0.4 2008.11.06 -
Avast 4.8.1248.0 2008.11.06 -
AVG 8.0.0.161 2008.11.07 -
BitDefender 7.2 2008.11.07 -
[B]CAT-QuickHeal 9.50 2008.11.04 TrojanRansom.Hexzone.abq[/B]
ClamAV 0.94.1 2008.11.07 -
[B]DrWeb 4.44.0.09170 2008.11.07 Trojan.Blackmailer.244[/B]
eSafe 7.0.17.0 2008.11.06 -
eTrust-Vet 31.6.6195 2008.11.06 -
Ewido 4.0 2008.11.06 -
F-Prot 4.4.4.56 2008.11.06 -
F-Secure 8.0.14332.0 2008.11.06 -
Fortinet 3.117.0.0 2008.11.06 -
GData 19 2008.11.07 -
Ikarus T3.1.1.45.0 2008.11.06 -
K7AntiVirus 7.10.518 2008.11.06 -
Kaspersky 7.0.0.125 2008.11.07 -
McAfee 5426 2008.11.06 -
[B]Microsoft 1.4104 2008.11.07 Trojan:Win32/Hexzone.A!dll
NOD32 3592 2008.11.06 Win32/Hexzone.I[/B]
Norman 5.80.02 2008.11.06 -
Panda 9.0.0.4 2008.11.06 -
PCTools 4.4.2.0 2008.11.06 -
[B]Prevx1 V2 2008.11.07 Fraudulent Security Program[/B]
Rising 21.02.32.00 2008.11.06 -
SecureWeb-Gateway 6.7.6 2008.11.06 -
Sophos 4.35.0 2008.11.07 -
Sunbelt 3.1.1783.2 2008.11.05 -
Symantec 10 2008.11.07 -
TheHacker 6.3.1.1.143 2008.11.07 -
TrendMicro 8.700.0.1004 2008.11.06 -
VBA32 3.12.8.9 2008.11.06 -
ViRobot 2008.11.6.1455 2008.11.06 -
VirusBuster 4.5.11.0 2008.11.06 -
Дополнительная информация
File size: 352256 bytes
MD5...: 9d175e378ad55e55c2637c4ded6d749e
SHA1..: 21da44fc2dd8541188d3a21ba4b0875b69edd6ac
SHA256: 6e85aceb0b90726d1032ed98ccfdc3508010936a7a621822d20c068264b6935d
SHA512: 1151b5faadc673f55281c275f0fdd34753025bed1e660b67c9b473143559c469
673b61f87fdae496cc99aa7c5af0982e5a5020354d10b8287569d3826a580300
PEiD..: -[/CODE]
11.11.2008, 13:27
Hanson

Файл csrss5.dll получен 2008.11.11 10:28:26 (CET)
Текущий статус:закончено
Результат: 12/36 (33.34%)
[QUOTE]
Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.11.0 2008.11.10 -
[B]AntiVir 7.9.0.29 2008.11.11 TR/Agent.rnn[/B]
Authentium 5.1.0.4 2008.11.11 -
[B]Avast 4.8.1248.0 2008.11.10 Win32:Trojan-gen {Other}[/B]
AVG 8.0.0.161 2008.11.11 -
[B]BitDefender 7.2 2008.11.11 Trojan.Generic.752223[/B]
CAT-QuickHeal 9.50 2008.11.11 -
ClamAV 0.94.1 2008.11.11 -
DrWeb 4.44.0.09170 2008.11.11 -
[B]eSafe 7.0.17.0 2008.11.10 Suspicious File[/B]
eTrust-Vet 31.6.6203 2008.11.11 -
Ewido 4.0 2008.11.10 -
F-Prot 4.4.4.56 2008.11.10 -
F-Secure 8.0.14332.0 2008.11.11 -
Fortinet 3.117.0.0 2008.11.11 -
[B]GData 19 2008.11.11 Trojan.Generic.752223
Ikarus T3.1.1.45.0 2008.11.11 Virus.Win32.Trojan
K7AntiVirus 7.10.521 2008.11.10 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2008.11.11 -
McAfee 5430 2008.11.10 -
Microsoft 1.4104 2008.11.11 -
NOD32 3601 2008.11.11 -
Norman 5.80.02 2008.11.10 -
[B]Panda 9.0.0.4 2008.11.10 Generic Trojan[/B]
PCTools 4.4.2.0 2008.11.10 -
Prevx1 V2 2008.11.11 Worm
Rising 21.03.11.00 2008.11.11 -
[B]SecureWeb-Gateway 6.7.6 2008.11.11 Trojan.Agent.rnn[/B]
Sophos 4.35.0 2008.11.11 -
Sunbelt 3.1.1785.2 2008.11.11 -
[B]Symantec 10 2008.11.11 Trojan Horse[/B]
TheHacker 6.3.1.1.147 2008.11.10 -
[B]TrendMicro 8.700.0.1004 2008.11.11 BKDR_AGENT.BZ[/B]
VBA32 3.12.8.9 2008.11.10 -
ViRobot 2008.11.11.1460 2008.11.11 -
VirusBuster 4.5.11.0 2008.11.10 -
[/QUOTE]
13.11.2008, 11:15
Hanson

Файл [B]winctrl32.dll[/B] получен 2008.11.12 09:56:22 (CET)
Текущий статус: закончено
Результат: 12/36 (33.33%)
[QUOTE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.11.2 2008.11.12 -
[COLOR="Red"][B]AntiVir 7.9.0.31 2008.11.12 TR/Dropper.Gen[/B][/COLOR]
Authentium 5.1.0.4 2008.11.12 -
[B][COLOR="Red"]Avast 4.8.1248.0 2008.11.11 Win32:Trojan-gen {Other}[/COLOR][/B]
[B][COLOR="Red"]AVG 8.0.0.161 2008.11.11 Win32/Heur
BitDefender 7.2 2008.11.12 Trojan.Dropper.Kobcka.Gen.1[/COLOR][/B]
CAT-QuickHeal 9.50 2008.11.12 -
ClamAV 0.94.1 2008.11.12 -
[B][COLOR="Red"]DrWeb 4.44.0.09170 2008.11.12 BackDoor.Bulknet.225[/COLOR][/B]
eSafe 7.0.17.0 2008.11.11 -
eTrust-Vet 31.6.6203 2008.11.11 -
Ewido 4.0 2008.11.11 -
F-Prot 4.4.4.56 2008.11.11 -
F-Secure 8.0.14332.0 2008.11.12 -
Fortinet 3.117.0.0 2008.11.12 -
[B][COLOR="Red"]GData 19 2008.11.12 Trojan.Dropper.Kobcka.Gen.1[/COLOR][/B]
Ikarus T3.1.1.45.0 2008.11.12 -
K7AntiVirus 7.10.522 2008.11.11 -
Kaspersky 7.0.0.125 2008.11.12 -
[B][COLOR="Red"]McAfee 5431 2008.11.12 Cutwail.dll.gen
Microsoft 1.4104 2008.11.12 TrojanDownloader:Win32/Cutwail.S[/COLOR][/B]
NOD32 3605 2008.11.12 -
Norman 5.80.02 2008.11.11 -
Panda 9.0.0.4 2008.11.11 -
PCTools 4.4.2.0 2008.11.11 -
[B][COLOR="Red"]Prevx1 V2 2008.11.12 Malicious Software[/COLOR][/B]
Rising 21.03.20.00 2008.11.12 -
[B][COLOR="Red"]SecureWeb-Gateway 6.7.6 2008.11.12 Trojan.Dropper.Gen[/COLOR][/B]
Sophos 4.35.0 2008.11.12 -
Sunbelt 3.1.1785.2 2008.11.11 -
Symantec 10 2008.11.12 -
TheHacker 6.3.1.1.149 2008.11.12 -
TrendMicro 8.700.0.1004 2008.11.12 -
[B][COLOR="Red"]VBA32 3.12.8.9 2008.11.11 suspected of Embedded.Trojan-Downloader.Win32.Nicak[/COLOR][/B]
ViRobot 2008.11.12.1462 2008.11.12 -
[B][COLOR="Red"]VirusBuster 4.5.11.0 2008.11.11 Trojan.DR.Pandex.Gen.7[/QUOTE][/COLOR][/B]
13.11.2008, 12:12
kvit

[CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.13.2 2008.11.13 -
AntiVir 7.9.0.31 2008.11.13 -
Authentium 5.1.0.4 2008.11.12 -
Avast 4.8.1248.0 2008.11.12 -
[B]BitDefender 7.2 2008.11.13 BehavesLike:Trojan.ShellObject
[/B]CAT-QuickHeal 9.50 2008.11.12 -
ClamAV 0.94.1 2008.11.13 -
DrWeb 4.44.0.09170 2008.11.13 -
eSafe 7.0.17.0 2008.11.12 -
eTrust-Vet 31.6.6204 2008.11.11 -
Ewido 4.0 2008.11.12 -
F-Prot 4.4.4.56 2008.11.12 -
Fortinet 3.117.0.0 2008.11.13 -
GData 19 2008.11.13 -
Ikarus T3.1.1.45.0 2008.11.13 -
K7AntiVirus 7.10.523 2008.11.12 -
[B]Kaspersky 7.0.0.125 2008.11.13 Trojan-Spy.Win32.Agent.evf[/B]
McAfee 5432 2008.11.13 -
Microsoft 1.4104 2008.11.13 -
NOD32 3608 2008.11.13 -
Norman 5.80.02 2008.11.12 -
[B]Panda 9.0.0.4 2008.11.12 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.13 -
Rising 21.03.22.00 2008.11.12 -
SecureWeb-Gateway 6.7.6 2008.11.13 -
Sophos 4.35.0 2008.11.13 -
Sunbelt 3.1.1785.2 2008.11.11 -
Symantec 10 2008.11.13 -
TheHacker 6.3.1.1.151 2008.11.13 -
TrendMicro 8.700.0.1004 2008.11.13 -
VBA32 3.12.8.9 2008.11.12 -
ViRobot 2008.11.13.1464 2008.11.13 -
VirusBuster 4.5.11.0 2008.11.12 -
Дополнительная информация
File size: 24064 bytes
MD5...: 58d3976c41012ebf512eecd22bb782b3
SHA1..: b2bfa3e3ca372f11f4c21df10565a9214e4cd141
SHA256: baf8f3ec9e95df5e367a5c0267a3f097f8da9ee9d8b1b914aab7cbc338b27b8e
SHA512: 9ebef0bbcc74f72933fcf560803b51b7d6ff23c3bc2a70d0e980e6de93dd008a
33e914b72def62a9b3cac455068dd745cf31cdd9c7de8a566e51a6507206899b
PEiD..: -
[/CODE]

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

[CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.13.0 2008.11.13 -
AntiVir 7.9.0.31 2008.11.13 -
Authentium 5.1.0.4 2008.11.12 -
Avast 4.8.1248.0 2008.11.12 -
AVG 8.0.0.199 2008.11.12 -
BitDefender 7.2 2008.11.13 -
CAT-QuickHeal 9.50 2008.11.12 -
ClamAV 0.94.1 2008.11.13 -
DrWeb 4.44.0.09170 2008.11.13 -
eSafe 7.0.17.0 2008.11.12 -
eTrust-Vet 31.6.6208 2008.11.13 -
Ewido 4.0 2008.11.12 -
F-Prot 4.4.4.56 2008.11.12 -
[B]F-Secure 8.0.14332.0 2008.11.13 Trojan-Spy.Win32.Agent.evj[/B]
Fortinet 3.117.0.0 2008.11.13 -
GData 19 2008.11.13 -
Ikarus T3.1.1.45.0 2008.11.13 -
K7AntiVirus 7.10.523 2008.11.12 -
[B]Kaspersky 7.0.0.125 2008.11.13 Trojan-Spy.Win32.Agent.evj[/B]
McAfee 5432 2008.11.13 -
Microsoft 1.4104 2008.11.13 -
NOD32 3608 2008.11.13 -
Norman 5.80.02 2008.11.12 -
[B]Panda 9.0.0.4 2008.11.12 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.13 -
Prevx1 V2 2008.11.13 -
Rising 21.03.22.00 2008.11.12 -
SecureWeb-Gateway 6.7.6 2008.11.13 -
Sophos 4.35.0 2008.11.13 -
[B]Sunbelt 3.1.1785.2 2008.11.11 Virus.Win32.Agent.AJ (vf)[/B]
Symantec 10 2008.11.13 -
TheHacker 6.3.1.1.151 2008.11.13 -
TrendMicro 8.700.0.1004 2008.11.13 -
VBA32 3.12.8.9 2008.11.12 -
ViRobot 2008.11.13.1464 2008.11.13 -
VirusBuster 4.5.11.0 2008.11.12 -
Дополнительная информация
File size: 20480 bytes
MD5...: 9b9bc66a0b0de6fc3b3c24a8e98f2059
SHA1..: 33560b84a929114cbfcfbd91a6dce94edfc062ed
SHA256: b141c2cb4da0857eb5823e503802b4a680a4594a0fdde2a8ceba636cc6dfcb7d
SHA512: b59d52a798ada47efdfa54214d0f28ff554752c529fc505490b1ccc24ef04298
a32129994fd8c9f546beb2992c65a9fcda49b52d79b5b3200d9041351e63c968
PEiD..: -[/CODE]

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

[CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.13.2 2008.11.13 -
[B]AntiVir 7.9.0.31 2008.11.13 TR/Crypt.XPACK.Gen
Authentium 5.1.0.4 2008.11.12 W32/Ristix.A[/B]
Avast 4.8.1248.0 2008.11.12 -
[B]AVG 8.0.0.199 2008.11.12 Win32/Heur[/B]
BitDefender 7.2 2008.11.13 -
CAT-QuickHeal 9.50 2008.11.12 -
ClamAV 0.94.1 2008.11.13 -
DrWeb 4.44.0.09170 2008.11.13 -
eSafe 7.0.17.0 2008.11.12 -
eTrust-Vet 31.6.6204 2008.11.11 -
Ewido 4.0 2008.11.12 -
[B]F-Prot 4.4.4.56 2008.11.12 W32/Zbot.I.gen!Eldorado
F-Secure 8.0.14332.0 2008.11.13 Worm.Win32.AutoRun.sff[/B]
Fortinet 3.117.0.0 2008.11.13 -
GData 19 2008.11.13 -
[B]Ikarus T3.1.1.45.0 2008.11.13 Worm.Win32.AutoRun[/B]
K7AntiVirus 7.10.523 2008.11.12 -
[B]Kaspersky 7.0.0.125 2008.11.13 Worm.Win32.AutoRun.sff[/B]
McAfee 5432 2008.11.13 -
[B]Microsoft 1.4104 2008.11.13 Trojan:Win32/AgentBypass.gen!K[/B]
NOD32 3608 2008.11.13 -
Norman 5.80.02 2008.11.12 -
[B]Panda 9.0.0.4 2008.11.12 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.13 -
Prevx1 V2 2008.11.13 -
Rising 21.03.30.00 2008.11.13 -
[B]SecureWeb-Gateway 6.7.6 2008.11.13 Trojan.Crypt.XPACK.Gen[/B]
Sophos 4.35.0 2008.11.13 -
Sunbelt 3.1.1785.2 2008.11.11 -
Symantec 10 2008.11.13 -
TheHacker 6.3.1.1.151 2008.11.13 -
[B]TrendMicro 8.700.0.1004 2008.11.13 PAK_Generic.001
VBA32 3.12.8.9 2008.11.12 Trojan.Autorun.gen[/B]
ViRobot 2008.11.13.1464 2008.11.13 -
VirusBuster 4.5.11.0 2008.11.12 -
Дополнительная информация
File size: 24770 bytes
MD5...: 0d3335954da589c4fefdf544f6696fcf
SHA1..: cbd67db5092407a32457a2f8cd17ef51f1908849
SHA256: 8fc81c6c9414346256d2d4edce75f653061b438e2c068bef3c8153ea4e5eb0ff
SHA512: c1125f47fc9c4268acca3e6e7f3574647b6f13e92cd5f4d1794e10f0ac45597c
4378a374185796ad43b45aa5e13e4f1c518ae3fd220fa3a1a39c1e5236ccd63a
PEiD..: -[/CODE]

[size="1"][color="#666686"][B][I]Добавлено через 5 минут[/I][/B][/color][/size]

и еще плюс один который вообще ни один антивирус не нашел...
тот который никто не находил:
[QUOTE]Ваш запрос был проанализирован. Запись о новом вирусе добавлена в базу.
Вирус: Trojan.Blackmailer.291.[/QUOTE]
13.11.2008, 12:14
ISO

File clips01505.scr received on 11.13.2008 09:53:16 (CET)
Result: 11/36 (30.56%)

[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.13.2 2008.11.13 -
[B]AntiVir 7.9.0.31 2008.11.13 DR/Delphi.Gen[/B]
Authentium 5.1.0.4 2008.11.12 -
Avast 4.8.1248.0 2008.11.12 -
[B]AVG 8.0.0.199 2008.11.12 Win32/Heur[/B]
[B]BitDefender 7.2 2008.11.13 Trojan.Dropper.LdPinch.AO
CAT-QuickHeal 9.50 2008.11.12 TrojanPSW.LdPinch.abkf[/B]
ClamAV 0.94.1 2008.11.13 -
DrWeb 4.44.0.09170 2008.11.13 -
eSafe 7.0.17.0 2008.11.12 -
eTrust-Vet 31.6.6204 2008.11.11 -
Ewido 4.0 2008.11.12 -
F-Prot 4.4.4.56 2008.11.12 -
F-Secure 8.0.14332.0 2008.11.13 -
Fortinet 3.117.0.0 2008.11.13 -
[B]GData 19 2008.11.13 Trojan.Dropper.LdPinch.AO
Ikarus T3.1.1.45.0 2008.11.13 Downloader.Delphi[/B]
K7AntiVirus 7.10.523 2008.11.12 -
Kaspersky 7.0.0.125 2008.11.13 -
McAfee 5432 2008.11.13 -
Microsoft 1.4104 2008.11.13 -
[B]NOD32 3609 2008.11.13 a variant of Win32/Injector.DT[/B]
Norman 5.80.02 2008.11.12 -
Panda 9.0.0.4 2008.11.12 -
PCTools 4.4.2.0 2008.11.13 -
Prevx1 V2 2008.11.13 -
Rising 21.03.30.00 2008.11.13 -
[B]SecureWeb-Gateway 6.7.6 2008.11.13 Trojan.Dropper.Delphi.Gen
Sophos 4.35.0 2008.11.13 Troj/Merein-Gen[/B]
[B]Sunbelt 3.1.1785.2 2008.11.11 Trojan-PSW.Win32.OnLineGames.AFLB (vf)[/B]
Symantec 10 2008.11.13 -
TheHacker 6.3.1.1.151 2008.11.13 -
TrendMicro 8.700.0.1004 2008.11.13 -
[B]VBA32 3.12.8.9 2008.11.12 Malware-Cryptor.Win32.Xip[/B]
ViRobot 2008.11.13.1464 2008.11.13 -
VirusBuster 4.5.11.0 2008.11.12 -[/CODE]
Additional information
File size: 327680 bytes
MD5...: c0b52e992067fc43c7ac10cbabd0ee71
SHA1..: c57057305d14886dc6b9d236e7e69b29568ae04e
SHA256: 2f8ce5806dae02a5b76fb74c4e6e248178ae2caba458186336d5ec1b9dc28084
SHA512: ead5c5f730793eb113c1a09f2fee8c4adda19d09e85959fdbda5c61d3b17b1ab
1b3d26d45534475edb67eb2e085203a7586999d5408441a5251d88228fccbd0c
17.11.2008, 06:37
ISO

Файл virusscan.jotti.com из архива, скачанного по ссылке из этой темы [url]http://virusinfo.info/showthread.php?t=33974[/url]
File 1.exe received on 11.17.2008 04:26:24 (CET)
Result: 9/35 (25.72%)

[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.14.3 2008.11.17 -
[B]AntiVir 7.9.0.31 2008.11.16 DR/Delphi.Gen[/B]
Authentium 5.1.0.4 2008.11.17 -
Avast 4.8.1281.0 2008.11.16 -
AVG 8.0.0.199 2008.11.16 -
[B]BitDefender 7.2 2008.11.17 Trojan.Dropper.LdPinch.AO[/B]
CAT-QuickHeal 10.00 2008.11.15 -
ClamAV 0.94.1 2008.11.17 -
DrWeb 4.44.0.09170 2008.11.17 -
[B]eSafe 7.0.17.0 2008.11.16 Suspicious File[/B]
eTrust-Vet 31.6.6210 2008.11.14 -
Ewido 4.0 2008.11.16 -
F-Prot 4.4.4.56 2008.11.16 -
[B]F-Secure 8.0.14332.0 2008.11.17 Suspicious:W32/Malware!Gemini[/B]
Fortinet 3.117.0.0 2008.11.15 -
[B]GData 19 2008.11.17 Trojan.Dropper.LdPinch.AO[/B]
[B]Ikarus T3.1.1.45.0 2008.11.17 AdWare.SoftLayer[/B]
K7AntiVirus 7.10.526 2008.11.15 -
Kaspersky 7.0.0.125 2008.11.17 -
McAfee 5436 2008.11.16 -
Microsoft 1.4104 2008.11.17 -
NOD32 3615 2008.11.15 -
Norman 5.80.02 2008.11.14 -
[B]Panda 9.0.0.4 2008.11.16 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.16 -
Rising 21.03.42.00 2008.11.14 -
[B]SecureWeb-Gateway 6.7.6 2008.11.16 Trojan.Dropper.Delphi.Gen[/B]
Sophos 4.35.0 2008.11.17 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.17 -
TheHacker 6.3.1.1.155 2008.11.15 -
[B]TrendMicro 8.700.0.1004 2008.11.14 PAK_Generic.001[/B]
VBA32 3.12.8.9 2008.11.16 -
ViRobot 2008.11.17.1471 2008.11.17 -
VirusBuster 4.5.11.0 2008.11.16 -[/CODE]
Additional information
File size: 62976 bytes
MD5...: de69f09bc4d9365ddb519f7f14ba2d2e
SHA1..: a42d6fc76deb5bb39e4a6c8dbb9633885852622a
SHA256: 3a7930377eb4098d371827ba2c71892414afe9c7914b2fea36cfe01767cfa738
SHA512: 9db02bdd920d39c8feed03f281101111945665b7fb4a01c650e9fb694aa0a9da
d0fdbd3ec173280ef4f38c5252fa9ef37631cefd554214d272aa42ba3fa908ad
PEiD..: UPX 2.93 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser
TrID..: File type identification
Win32 Executable Generic (67.8%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
VXD Driver (0.2%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x422300
timedatestamp.....: 0x491ba782 (Thu Nov 13 04:05:22 2008)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0x1000 0x13000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0x14000 0xf000 0xf000 7.98 1d00a1d0110c03fdcec46aaeee5c6102
.rsrc 0x23000 0x1000 0x400 2.87 3053439ba625a5a3f1e0b8e29556614f

( 3 imports )
> KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
> crtdll.dll: _rmdir
> shlwapi.dll: PathAddBackslashA

( 0 exports )
packers (F-Prot): embedded, UPX_LZMA
packers (Kaspersky): UPX
18.11.2008, 16:55
Shu_b

File wupdate.exe received on 11.18.2008 07:57:55 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.18.0 2008.11.18 -
[B]AntiVir 7.9.0.31 2008.11.17 HEUR/Crypted[/B]
Authentium 5.1.0.4 2008.11.18 -
Avast 4.8.1281.0 2008.11.17 -
[B]AVG 8.0.0.199 2008.11.17 SHeur.CHGW[/B]
BitDefender 7.2 2008.11.18 -
[B]CAT-QuickHeal 10.00 2008.11.17 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.18 -
DrWeb 4.44.0.09170 2008.11.18 -
eSafe 7.0.17.0 2008.11.17 -
eTrust-Vet 31.6.6210 2008.11.14 -
Ewido 4.0 2008.11.17 -
F-Prot 4.4.4.56 2008.11.17 -
F-Secure 8.0.14332.0 2008.11.18 -
Fortinet 3.117.0.0 2008.11.18 -
GData 19 2008.11.18 -
[B]Ikarus T3.1.1.45.0 2008.11.18 Trojan.Crypt.ASPM[/B]
K7AntiVirus 7.10.526 2008.11.15 -
Kaspersky 7.0.0.125 2008.11.18 -
McAfee 5437 2008.11.17 -
[B]Microsoft 1.4104 2008.11.17 Backdoor:Win32/Rbot.gen[/B]
NOD32 3620 2008.11.18 -
Norman 5.80.02 2008.11.17 -
[B]Panda 9.0.0.4 2008.11.17 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.17 -
Prevx1 V2 2008.11.18 -
Rising 21.04.10.00 2008.11.18 -
[B]SecureWeb-Gateway 6.7.6 2008.11.18 Heuristic.Crypted[/B]
Sophos 4.35.0 2008.11.18 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.18 -
TheHacker 6.3.1.1.157 2008.11.18 -
TrendMicro 8.700.0.1004 2008.11.18 -
VBA32 3.12.8.9 2008.11.17 -
ViRobot 2008.11.18.1473 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.17 -
Additional information
File size: 794624 bytes[/CODE]

[size="1"][color="#666686"][B][I]Добавлено через 6 часов 13 минут[/I][/B][/color][/size]

File ttuwj.sys received on 11.18.2008 14:11:55 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.18.2 2008.11.18 -
[B]AntiVir 7.9.0.31 2008.11.18 TR/Rootkit.Gen[/B]
Authentium 5.1.0.4 2008.11.18 -
[B]Avast 4.8.1281.0 2008.11.17 Win32:Rootkit-gen[/B]
AVG 8.0.0.199 2008.11.17 -
BitDefender 7.2 2008.11.18 -
CAT-QuickHeal 10.00 2008.11.18 -
ClamAV 0.94.1 2008.11.18 -
DrWeb 4.44.0.09170 2008.11.18 -
eSafe 7.0.17.0 2008.11.17 -
eTrust-Vet 31.6.6209 2008.11.14 -
Ewido 4.0 2008.11.18 -
F-Prot 4.4.4.56 2008.11.17 -
F-Secure 8.0.14332.0 2008.11.18 -
Fortinet 3.117.0.0 2008.11.18 -
[B]GData 19 2008.11.18 Win32:Rootkit-gen
Ikarus T3.1.1.45.0 2008.11.18 Backdoor.WinNT.Rustock[/B]
K7AntiVirus 7.10.526 2008.11.15 -
Kaspersky 7.0.0.125 2008.11.18 -
McAfee 5437 2008.11.17 -
[B]Microsoft 1.4104 2008.11.17 Backdoor:WinNT/Rustock.H[/B]
NOD32 3621 2008.11.18 -
[B]Norman 5.80.02 2008.11.18 W32/Rootkit.TFO
Panda 9.0.0.4 2008.11.17 Generic Malware[/B]
PCTools 4.4.2.0 2008.11.18 -
Prevx1 V2 2008.11.18 -
Rising 21.04.12.00 2008.11.18 -
[B]SecureWeb-Gateway 6.7.6 2008.11.18 Trojan.Rootkit.Gen[/B]
Sophos 4.35.0 2008.11.18 -
[B]Sunbelt 3.1.1801.2 2008.11.14 Trojan-GameThief.Win32.OnLineGames.TPC (vf)[/B]
Symantec 10 2008.11.18 -
TheHacker 6.3.1.1.157 2008.11.18 -
TrendMicro 8.700.0.1004 2008.11.18 -
VBA32 3.12.8.9 2008.11.17 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.17 -[/CODE]
Additional information
File size: 47104 bytes
MD5...: f39ed4922db5a0017a02f0dadfaac20a

[size="1"][color="#666686"][B][I]Добавлено через 33 минуты[/I][/B][/color][/size]

File wm9dap.dll received on 11.18.2008 14:32:37 (CET)
[CODE]Antivirus Version Last Update Result
[B]AhnLab-V3 2008.11.18.2 2008.11.18 Win32/Bagle.worm.73728.F[/B]
AntiVir 7.9.0.31 2008.11.18 -
[B]Authentium 5.1.0.4 2008.11.18 W32/Bongler-based!Maximus
Avast 4.8.1281.0 2008.11.17 Win32:Trojan-gen {Other}[/B]
AVG 8.0.0.199 2008.11.17 -
[B]BitDefender 7.2 2008.11.18 Win32.Worm.Bagle.ZLT[/B]
CAT-QuickHeal 10.00 2008.11.18 -
ClamAV 0.94.1 2008.11.18 -
DrWeb 4.44.0.09170 2008.11.18 -
eSafe 7.0.17.0 2008.11.17 -
eTrust-Vet 31.6.6210 2008.11.14 -
Ewido 4.0 2008.11.18 -
[B]F-Prot 4.4.4.56 2008.11.17 W32/Bongler-based!Maximus[/B]
F-Secure 8.0.14332.0 2008.11.18 -
Fortinet 3.117.0.0 2008.11.18 -
[B]GData 19 2008.11.18 Win32.Worm.Bagle.ZLT[/B]
Ikarus T3.1.1.45.0 2008.11.18 -
K7AntiVirus 7.10.526 2008.11.15 -
Kaspersky 7.0.0.125 2008.11.18 -
McAfee 5437 2008.11.17 -
Microsoft 1.4104 2008.11.17 -
NOD32 3621 2008.11.18 -
Norman 5.80.02 2008.11.18 -
Panda 9.0.0.4 2008.11.17 -
PCTools 4.4.2.0 2008.11.18 -
Prevx1 V2 2008.11.18 -
Rising 21.04.12.00 2008.11.18 -
SecureWeb-Gateway 6.7.6 2008.11.18 -
Sophos 4.35.0 2008.11.18 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.18 -
TheHacker 6.3.1.1.157 2008.11.18 -
TrendMicro 8.700.0.1004 2008.11.18 -
VBA32 3.12.8.9 2008.11.18 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.17 -[/CODE]
Additional information
File size: 73728 bytes

[size="1"][color="#666686"][B][I]Добавлено через 5 минут[/I][/B][/color][/size]

File antiviruspro2009.exe received on 11.18.2008 14:43:59 (CET)
[CODE]Antivirus Version Last Update Result
[B]AhnLab-V3 2008.11.18.2 2008.11.18 Win-Trojan/FakeAv.597323
AntiVir 7.9.0.31 2008.11.18 TR/Fakealert.HO[/B]
Authentium 5.1.0.4 2008.11.18 -
Avast 4.8.1281.0 2008.11.17 -
[B]AVG 8.0.0.199 2008.11.17 Downloader.Zlob.AGXV[/B]
BitDefender 7.2 2008.11.18 -
CAT-QuickHeal 10.00 2008.11.18 -
[B]ClamAV 0.94.1 2008.11.18 Trojan.FakeAV-17[/B]
DrWeb 4.44.0.09170 2008.11.18 -
eSafe 7.0.17.0 2008.11.17 -
eTrust-Vet 31.6.6209 2008.11.14 -
Ewido 4.0 2008.11.18 -
F-Prot 4.4.4.56 2008.11.17 -
F-Secure 8.0.14332.0 2008.11.18 -
Fortinet 3.117.0.0 2008.11.18 -
GData 19 2008.11.18 -
[B]Ikarus T3.1.1.45.0 2008.11.18 Trojan-Clicker.Win32.Klik[/B]
K7AntiVirus 7.10.526 2008.11.15 -
Kaspersky 7.0.0.125 2008.11.18 -
[B]McAfee 5437 2008.11.17 Generic FakeAlert.d
Microsoft 1.4104 2008.11.17 Trojan:Win32/FakeRean
NOD32 3621 2008.11.18 a variant of Win32/TrojanDownloader.FakeAlert.FP[/B]
Norman 5.80.02 2008.11.18 -
Panda 9.0.0.4 2008.11.17 -
PCTools 4.4.2.0 2008.11.18 -
[B]Prevx1 V2 2008.11.18 Malicious Software[/B]
Rising 21.04.12.00 2008.11.18 -
[B]SecureWeb-Gateway 6.7.6 2008.11.18 Trojan.Fakealert.HO
Sophos 4.35.0 2008.11.18 Mal/Generic-A[/B]
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.18 -
TheHacker 6.3.1.1.157 2008.11.18 -
TrendMicro 8.700.0.1004 2008.11.18 -
[B]VBA32 3.12.8.9 2008.11.18 Trojan.Win32.FraudPack.gtt[/B]
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.17 -[/CODE]
Additional information
File size: 597323 bytes
19.11.2008, 16:25
Shu_b

File mschco.exe received on 11.19.2008 11:21:50 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.18.2 2008.11.19 -
[B]AntiVir 7.9.0.34 2008.11.19 TR/ATRAPS.Gen
[/B]Authentium 5.1.0.4 2008.11.18 -
Avast 4.8.1281.0 2008.11.18 -
[B]AVG 8.0.0.199 2008.11.19 Generic12.OIV
BitDefender 7.2 2008.11.19 BehavesLike:Win32.ExplorerHijack
[/B]CAT-QuickHeal 10.00 2008.11.19 -
ClamAV 0.94.1 2008.11.19 -
DrWeb 4.44.0.09170 2008.11.19 -
eSafe 7.0.17.0 2008.11.18 -
eTrust-Vet 31.6.6217 2008.11.19 -
Ewido 4.0 2008.11.18 -
F-Prot 4.4.4.56 2008.11.18 -
[B]F-Secure 8.0.14332.0 2008.11.19 W32/Malware
[/B]Fortinet 3.117.0.0 2008.11.19 -
[B]GData 19 2008.11.19 BehavesLike:Win32.ExplorerHijack
Ikarus T3.1.1.45.0 2008.11.19 Trojan-Dropper.Agent
[/B]K7AntiVirus 7.10.527 2008.11.18 -
[B]Kaspersky 7.0.0.125 2008.11.19 Heur.Trojan.Generic
[/B]McAfee 5438 2008.11.18 -
Microsoft 1.4104 2008.11.19 -
NOD32 3623 2008.11.18 -
[B]Norman 5.80.02 2008.11.18 W32/Malware
Panda 9.0.0.4 2008.11.19 Suspicious file
[/B]PCTools 4.4.2.0 2008.11.18 -
Prevx1 V2 2008.11.19 -
Rising 21.04.22.00 2008.11.19 -
[B]SecureWeb-Gateway 6.7.6 2008.11.19 Trojan.ATRAPS.Gen
Sophos 4.35.0 2008.11.19 Mal/Behav-204
[/B]Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.19 -
TheHacker 6.3.1.1.158 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.19 -
VBA32 3.12.8.9 2008.11.18 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.18 -[/CODE]
Additional information
File size: 66560 bytes
MD5...: 07cf2d63869c7dd52e464e36cdece5ee

[size="1"][color="#666686"][B][I]Добавлено через 2 часа 40 минут[/I][/B][/color][/size]

File Client_gerda.exe received on 11.19.2008 14:12:39 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.18.2 2008.11.19 -
AntiVir 7.9.0.34 2008.11.19 -
Authentium 5.1.0.4 2008.11.18 -
Avast 4.8.1281.0 2008.11.18 -
AVG 8.0.0.199 2008.11.19 -
BitDefender 7.2 2008.11.19 -
CAT-QuickHeal 10.00 2008.11.19 -
ClamAV 0.94.1 2008.11.19 -
DrWeb 4.44.0.09170 2008.11.19 -
eSafe 7.0.17.0 2008.11.18 -
eTrust-Vet 31.6.6217 2008.11.19 -
Ewido 4.0 2008.11.18 -
F-Prot 4.4.4.56 2008.11.18 -
F-Secure 8.0.14332.0 2008.11.19 -
Fortinet 3.117.0.0 2008.11.19 -
GData 19 2008.11.19 -
Ikarus T3.1.1.45.0 2008.11.19 -
K7AntiVirus 7.10.527 2008.11.18 -
Kaspersky 7.0.0.125 2008.11.19 -
McAfee 5438 2008.11.18 -
Microsoft 1.4104 2008.11.19 -
[B]NOD32 3624 2008.11.19 a variant of Win32/Packed.Themida[/B]
Norman 5.80.02 2008.11.18 -
Panda 9.0.0.4 2008.11.19 -
PCTools 4.4.2.0 2008.11.19 -
Prevx1 V2 2008.11.19 -
Rising 21.04.22.00 2008.11.19 -
[B]SecureWeb-Gateway 6.7.6 2008.11.19 Win32.EPO.gen (suspicious)
Sophos 4.35.0 2008.11.19 Sus/UnkPacker[/B]
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.19 -
TheHacker 6.3.1.1.158 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.19 -
VBA32 3.12.8.9 2008.11.18 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.18 -[/CODE]
Additional information
File size: 2816512 bytes

[size="1"][color="#666686"][B][I]Добавлено через 8 минут[/I][/B][/color][/size]

File services.exe received on 11.19.2008 14:22:18 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.18.2 2008.11.19 -
AntiVir 7.9.0.34 2008.11.19 -
Authentium 5.1.0.4 2008.11.18 -
Avast 4.8.1281.0 2008.11.18 -
[B]AVG 8.0.0.199 2008.11.19 Downloader.Generic_r.BT[/B]
BitDefender 7.2 2008.11.19 -
[B]CAT-QuickHeal 10.00 2008.11.19 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.19 -
DrWeb 4.44.0.09170 2008.11.19 -
eSafe 7.0.17.0 2008.11.18 -
eTrust-Vet 31.6.6217 2008.11.19 -
Ewido 4.0 2008.11.18 -
F-Prot 4.4.4.56 2008.11.18 -
F-Secure 8.0.14332.0 2008.11.19 -
Fortinet 3.117.0.0 2008.11.19 -
GData 19 2008.11.19 -
Ikarus T3.1.1.45.0 2008.11.19 -
K7AntiVirus 7.10.527 2008.11.18 -
Kaspersky 7.0.0.125 2008.11.19 -
McAfee 5438 2008.11.18 -
Microsoft 1.4104 2008.11.19 -
[B]NOD32 3624 2008.11.19 probably a variant of Win32/Kryptik.BJ[/B]
Norman 5.80.02 2008.11.18 -
Panda 9.0.0.4 2008.11.19 -
PCTools 4.4.2.0 2008.11.19 -
Prevx1 V2 2008.11.19 -
Rising 21.04.22.00 2008.11.19 -
[B]SecureWeb-Gateway 6.7.6 2008.11.19 Trojan.LooksLike.Agent[/B]
Sophos 4.35.0 2008.11.19 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.19 -
TheHacker 6.3.1.1.158 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.19 -
VBA32 3.12.8.9 2008.11.18 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.18 -[/CODE]
Additional information
File size: 43520 bytes
MD5...: f8250fd02168d36d7ecb6c6ba1429f45
20.11.2008, 14:30
Shu_b

File rs32net.exe received on 11.20.2008 11:48:48 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.20.3 2008.11.20 -
[B]AntiVir 7.9.0.34 2008.11.20 TR/Dropper.Gen[/B]
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.19 -
AVG 8.0.0.199 2008.11.19 -
BitDefender 7.2 2008.11.20 -
CAT-QuickHeal 10.00 2008.11.20 -
ClamAV 0.94.1 2008.11.20 -
DrWeb 4.44.0.09170 2008.11.20 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6219 2008.11.20 -
Ewido 4.0 2008.11.19 -
F-Prot 4.4.4.56 2008.11.20 -
F-Secure 8.0.14332.0 2008.11.20 -
Fortinet 3.117.0.0 2008.11.20 -
GData 19 2008.11.20 -
Ikarus T3.1.1.45.0 2008.11.20 -
K7AntiVirus 7.10.528 2008.11.19 -
Kaspersky 7.0.0.125 2008.11.20 -
McAfee 5439 2008.11.19 -
[B]Microsoft 1.4104 2008.11.20 TrojanDropper:Win32/Cutwail.AL[/B]
NOD32 3626 2008.11.19 -
Norman 5.80.02 2008.11.19 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.19 -
Prevx1 V2 2008.11.20 Malicious Software
Rising 21.04.32.00 2008.11.20 -
[B]SecureWeb-Gateway 6.7.6 2008.11.20 Trojan.Dropper.Gen
Sophos 4.35.0 2008.11.20 Troj/Bravo-I[/B]
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.20 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.20 -
VBA32 3.12.8.9 2008.11.19 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.19 -[/CODE]
Additional information
File size: 22528 bytes
MD5...: 5e14eee58af9bf39dd2c35177dd4fd97

[size="1"][color="#666686"][B][I]Добавлено через 21 минуту[/I][/B][/color][/size]

File RQRSPOVS.sys received on 11.20.2008 12:11:22 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.20.3 2008.11.20 -
AntiVir 7.9.0.34 2008.11.20 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.19 -
AVG 8.0.0.199 2008.11.19 -
BitDefender 7.2 2008.11.20 -
CAT-QuickHeal 10.00 2008.11.20 -
ClamAV 0.94.1 2008.11.20 -
DrWeb 4.44.0.09170 2008.11.20 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6219 2008.11.20 -
Ewido 4.0 2008.11.19 -
F-Prot 4.4.4.56 2008.11.20 -
F-Secure 8.0.14332.0 2008.11.20 -
Fortinet 3.117.0.0 2008.11.20 -
GData 19 2008.11.20 -
Ikarus T3.1.1.45.0 2008.11.20 -
K7AntiVirus 7.10.528 2008.11.19 -
Kaspersky 7.0.0.125 2008.11.20 -
McAfee 5439 2008.11.19 -
Microsoft 1.4104 2008.11.20 -
NOD32 3627 2008.11.20 -
Norman 5.80.02 2008.11.19 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.19 -
Prevx1 V2 2008.11.20 -
Rising 21.04.32.00 2008.11.20 -
[B]SecureWeb-Gateway 6.7.6 2008.11.20 Trojan.LooksLike.Rootkit[/B]
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.20 -
TheHacker 6.3.1.1.159 2008.11.19 -
[B]TrendMicro 8.700.0.1004 2008.11.20 Cryp_Xed-3[/B]
VBA32 3.12.8.9 2008.11.19 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.19 -[/CODE]
Additional information
File size: 176640 bytes
MD5...: 7de9a3c67dc9c95275d594662bb7c993

[size="1"][color="#666686"][B][I]Добавлено через 15 минут[/I][/B][/color][/size]

File Microsoft Common\svchost.exe received on 11.20.2008 12:26:54 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.20.3 2008.11.20 -
AntiVir 7.9.0.34 2008.11.20 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.19 -
[B]AVG 8.0.0.199 2008.11.19 SHeur2.CKX[/B]
BitDefender 7.2 2008.11.20 -
[B]CAT-QuickHeal 10.00 2008.11.20 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.20 -
DrWeb 4.44.0.09170 2008.11.20 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6219 2008.11.20 -
Ewido 4.0 2008.11.19 -
F-Prot 4.4.4.56 2008.11.20 -
[B]F-Secure 8.0.14332.0 2008.11.20 W32/Zbot.BDS[/B]
Fortinet 3.117.0.0 2008.11.20 -
GData 19 2008.11.20 -
[B]Ikarus T3.1.1.45.0 2008.11.20 Trojan.Win32.AgentBypass[/B]
K7AntiVirus 7.10.528 2008.11.19 -
Kaspersky 7.0.0.125 2008.11.20 -
McAfee 5439 2008.11.19 -
[B]Microsoft 1.4104 2008.11.20 Trojan:Win32/AgentBypass.gen!K[/B]
NOD32 3627 2008.11.20 -
[B]Norman 5.80.02 2008.11.19 W32/Zbot.BDS[/B]
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.19 -
Prevx1 V2 2008.11.20 -
[B]Rising 21.04.32.00 2008.11.20 Worm.Win32.Agent.aaj
SecureWeb-Gateway 6.7.6 2008.11.20 Win32.NewMalware.HM!27136!4[/B]
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.20 -
TheHacker 6.3.1.1.159 2008.11.19 -
[B]TrendMicro 8.700.0.1004 2008.11.20 PAK_Generic.001
VBA32 3.12.8.9 2008.11.19 Worm.Win32.AutoRun.rjn[/B]
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.19 -[/CODE]
Additional information
File size: 27136 bytes
21.11.2008, 09:56
Phoenix

Предыдущая проверка кем-то на тотале была с результатом 10/36 от 12.11.2008.
Медленно реагируют господа аналитики... >:(

Файл mzlcjb.exe получен 2008.11.21 07:39:36 (CET)
[CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.21.0 2008.11.20 -
[B]AntiVir 7.9.0.34 2008.11.20 TR/Autoit.420098[/B]
Authentium 5.1.0.4 2008.11.20 -
[B]Avast 4.8.1281.0 2008.11.20 Win32:Rootkit-gen
AVG 8.0.0.199 2008.11.20 Worm/Autoit.FOX[/B]
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.20 -
[B]eSafe 7.0.17.0 2008.11.19 Win32.Autoit.fj[/B]
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
[B]F-Secure 8.0.14332.0 2008.11.21 Trojan.Win32.Autoit.fj
Fortinet 3.117.0.0 2008.11.21 W32/Autoit.FJ!tr
GData 19 2008.11.21 Win32:Rootkit-gen
Ikarus T3.1.1.45.0 2008.11.21 Trojan.Win32.Autoit.dt[/B]
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Trojan.Win32.Autoit.fj[/B]
McAfee 5440 2008.11.20 -
[B]Microsoft 1.4104 2008.11.21 Trojan:Win32/Meredrop[/B]
[COLOR="Red"]NOD32 3629 2008.11.21 -[/COLOR]
[B]Norman 5.80.02 2008.11.20 W32/Agent.JIIR
Panda 9.0.0.4 2008.11.20 W32/Sohanat.AS.worm[/B]
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
[B]SecureWeb-Gateway 6.7.6 2008.11.21 Trojan.Autoit.420098
Sophos 4.35.0 2008.11.20 Sus/Behav-1011[/B]
Sunbelt 3.1.1801.2 2008.11.14 -
[B]Symantec 10 2008.11.21 W32.Harakit
TheHacker 6.3.1.1.159 2008.11.19 Trojan/Autoit.gs[/B]
TrendMicro 8.700.0.1004 2008.11.21 -
[B]VBA32 3.12.8.9 2008.11.20 Trojan.Win32.Autoit.fj[/B]
ViRobot 2008.11.18.1474 2008.11.18 -
[B]VirusBuster 4.5.11.0 2008.11.20 Trojan.Autoit.ED[/B][/CODE]
Дополнительная информация
File size: 420614 bytes
MD5...: 12a2b1e6075df82adb55b0091d0fb3f8
SHA1..: 2a73bbfe558ef5f7c7fecb991513598456d5609b
SHA256: c950a445c37e58538b1c64b28397b425d521eb2dacc73bd62e9cb6a4e31eca76
SHA512: 4b36f77d26a396579fd1872171372f446dba448ea682cee6db03614e8ea78d71 a47d33e7df9c34152d6cdc79f00be271cf1d55a3cf706b54882bac8b383eb721
PEiD..: -
TrID..: File type identification UPX compressed Win32 Executable (39.5%) Win32 EXE Yoda's Crypter (34.3%) Win32 Executable Generic (11.0%) Win32 Dynamic Link Library (generic) (9.8%) Generic Win/DOS Executable (2.5%)
PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x490490 timedatestamp.....: 0x4850e379 (Thu Jun 12 08:51:05 2008) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 UPX0 0x1000 0x58000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e UPX1 0x59000 0x38000 0x37800 7.93 c8cb0c68e090a662ba2868cc32095c1b .rsrc 0x91000 0x1000 0x600 3.31 d013d2373cc18dfe81eb1acfaa18d88b ( 13 imports ) > KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess > ADVAPI32.dll: RegCloseKey > COMCTL32.dll: ImageList_Create > comdlg32.dll: GetSaveFileNameW > GDI32.dll: LineTo > MPR.dll: WNetUseConnectionW > ole32.dll: CoInitialize > OLEAUT32.dll: - > SHELL32.dll: DragFinish > USER32.dll: GetDC > VERSION.dll: VerQueryValueW > WINMM.dll: timeGetTime > WSOCK32.dll: - ( 0 exports ) 
packers (Kaspersky): PE_Patch.UPX, UPX
packers (F-Prot): UPX
21.11.2008, 14:13
Shu_b

File msansspc.dll received on 11.21.2008 08:39:34 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
AntiVir 7.9.0.34 2008.11.20 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
AVG 8.0.0.199 2008.11.20 -
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
[B]DrWeb 4.44.0.09170 2008.11.20 Trojan.Inject.4675[/B]
eSafe 7.0.17.0 2008.11.19 Suspicious File
eTrust-Vet 31.6.6219 2008.11.20 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
F-Secure 8.0.14332.0 2008.11.21 -
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Backdoor.Win32.Small.gsc[/B]
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
[B]Rising 21.04.40.00 2008.11.21 Trojan.Win32.Undef.tap[/B]
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 28160 bytes
MD5...: f0f3bf172996b2ae0dd399b7119f94a1

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

File ie567.dll received on 11.21.2008 08:53:15 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
AntiVir 7.9.0.34 2008.11.21 -
[B]Authentium 5.1.0.4 2008.11.20 W32/Heuristic-KPP!Eldorado[/B]
Avast 4.8.1281.0 2008.11.20 -
AVG 8.0.0.199 2008.11.20 -
BitDefender 7.2 2008.11.21 -
[B]CAT-QuickHeal 10.00 2008.11.21 Win32.TrojanSpy.Hitpop.gen!C.6[/B]
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.21 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
[B]F-Prot 4.4.4.56 2008.11.21 W32/Heuristic-KPP!Eldorado[/B]
F-Secure 8.0.14332.0 2008.11.21 -
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
Kaspersky 7.0.0.125 2008.11.21 -
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
[B]Norman 5.80.02 2008.11.20 W32/Malware.EJQN
Panda 9.0.0.4 2008.11.20 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 Worm
[B]Rising 21.04.40.00 2008.11.21 AdWare.Win32.Mnless.aof[/B]
SecureWeb-Gateway 6.7.6 2008.11.21 -
[B]Sophos 4.35.0 2008.11.20 Mal/Behav-304[/B]
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 46592 bytes

[size="1"][color="#666686"][B][I]Добавлено через 7 минут[/I][/B][/color][/size]

File qyklib.dll received on 11.21.2008 09:05:51 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
AntiVir 7.9.0.34 2008.11.21 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
AVG 8.0.0.199 2008.11.20 -
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
[B]DrWeb 4.44.0.09170 2008.11.21 Trojan.Virtumod.852[/B]
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
[B]F-Secure 8.0.14332.0 2008.11.21 Trojan-Downloader.Win32.BHO.zt[/B]
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Trojan-Downloader.Win32.BHO.zt[/B]
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 330240 bytes
MD5...: 3ef71d8bb7020a5b2850fe47d5a62a49

[size="1"][color="#666686"][B][I]Добавлено через 3 минуты[/I][/B][/color][/size]

File avz00003.dta received on 11.21.2008 09:06:51 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
AntiVir 7.9.0.34 2008.11.21 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
[B]AVG 8.0.0.199 2008.11.20 Win32/Heur[/B]
BitDefender 7.2 2008.11.21 -
[B]CAT-QuickHeal 10.00 2008.11.21 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.21 -
[B]eSafe 7.0.17.0 2008.11.19 Suspicious File[/B]
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
[B]F-Secure 8.0.14332.0 2008.11.21 Trojan.Win32.Agent.aouk[/B]
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
[B]Ikarus T3.1.1.45.0 2008.11.21 Backdoor.Win32.Momibot[/B]
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Trojan.Win32.Agent.aouk[/B]
McAfee 5440 2008.11.20 -
[B]Microsoft 1.4104 2008.11.21 Backdoor:Win32/Momibot.gen!B[/B]
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 42496 bytes

[size="1"][color="#666686"][B][I]Добавлено через 9 минут[/I][/B][/color][/size]

File msvcrt48.dll received on 11.21.2008 09:16:54 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
AntiVir 7.9.0.34 2008.11.21 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
[B]AVG 8.0.0.199 2008.11.20 PSW.Agent.WGY[/B]
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.21 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
[B]F-Secure 8.0.14332.0 2008.11.21 Trojan-Spy.Win32.Agent.eyl
Fortinet 3.117.0.0 2008.11.21 Spy/Agent[/B]
GData 19 2008.11.21 -
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Trojan-Spy.Win32.Agent.eyl[/B]
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
[B]Panda 9.0.0.4 2008.11.20 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 20480 bytes

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

File msconfig.exe received on 11.21.2008 09:17:48 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
[B]AntiVir 7.9.0.34 2008.11.21 TR/Dropper.Gen[/B]
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
AVG 8.0.0.199 2008.11.20 -
BitDefender 7.2 2008.11.21 -
[B]CAT-QuickHeal 10.00 2008.11.21 TrojanDropper.Agent.zaq[/B]
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.21 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6219 2008.11.20 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
[B]F-Secure 8.0.14332.0 2008.11.21 Trojan-Dropper.Win32.Agent.zxz[/B]
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Trojan-Dropper.Win32.Agent.zxz[/B]
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
[B]Panda 9.0.0.4 2008.11.20 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
[B]SecureWeb-Gateway 6.7.6 2008.11.21 Trojan.Dropper.Gen[/B]
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
[B]VBA32 3.12.8.9 2008.11.20 Trojan-Dropper.Win32.Agent.zaq[/B]
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 25088 bytes

[size="1"][color="#666686"][B][I]Добавлено через 20 минут[/I][/B][/color][/size]

File 1.tmp received on 11.21.2008 09:40:18 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.21 -
AntiVir 7.9.0.34 2008.11.21 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
AVG 8.0.0.199 2008.11.20 -
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
[B]DrWeb 4.44.0.09170 2008.11.21 Trojan.EmailSpy.origin[/B]
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
F-Secure 8.0.14332.0 2008.11.21 -
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
[B]Ikarus T3.1.1.45.0 2008.11.21 Trojan-PWS.Win32.LdPinch[/B]
K7AntiVirus 7.10.529 2008.11.20 -
Kaspersky 7.0.0.125 2008.11.21 -
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
[B]VBA32 3.12.8.9 2008.11.20 suspected of Email-Worm.Bagle.2 [/B](paranoid heuristics)
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 17408 bytes

[size="1"][color="#666686"][B][I]Добавлено через 2 часа 29 минут[/I][/B][/color][/size]

File twext.exe received on 11.21.2008 12:10:31 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.21 -
AntiVir 7.9.0.34 2008.11.21 -
Authentium 5.1.0.4 2008.11.20 -
[B]Avast 4.8.1281.0 2008.11.20 Win32:Rootkit-gen
AVG 8.0.0.199 2008.11.20 Win32/Heur[/B]
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.21 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6221 2008.11.21 -
Ewido 4.0 2008.11.20 -
[B]F-Prot 4.4.4.56 2008.11.21 W32/Tibs.AA.gen!Eldorado[/B]
F-Secure 8.0.14332.0 2008.11.21 -
Fortinet 3.117.0.0 2008.11.21 -
[B]GData 19 2008.11.21 Win32:Rootkit-gen[/B]
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
Kaspersky 7.0.0.125 2008.11.21 -
[B]McAfee 5440 2008.11.20 PWS-Zbot.gen.c
McAfee+Artemis 5440 2008.11.20 PWS-Zbot.gen.c[/B]
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
[B]Norman 5.80.02 2008.11.20 W32/Malware.EMMQ
Panda 9.0.0.4 2008.11.20 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.42.00 2008.11.21 -
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.21 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 180224 bytes
MD5...: 76cd24722cdae9e4d955d8c5f76577d9
24.11.2008, 12:18
Shu_b

File MyCentriaInfoBar.dll received on 11.24.2008 07:30:28 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.24 -
AntiVir 7.9.0.35 2008.11.23 -
Authentium 5.1.0.4 2008.11.24 -
Avast 4.8.1281.0 2008.11.23 -
[B]AVG 8.0.0.199 2008.11.23 Generic.BK[/B]
BitDefender 7.2 2008.11.24 -
CAT-QuickHeal 10.00 2008.11.24 -
ClamAV 0.94.1 2008.11.24 -
DrWeb 4.44.0.09170 2008.11.24 -
eSafe 7.0.17.0 2008.11.23 -
eTrust-Vet 31.6.6222 2008.11.22 -
Ewido 4.0 2008.11.23 -
F-Prot 4.4.4.56 2008.11.24 -
F-Secure 8.0.14332.0 2008.11.24 -
Fortinet 3.117.0.0 2008.11.23 -
GData 19 2008.11.24 -
Ikarus T3.1.1.45.0 2008.11.24 -
K7AntiVirus 7.10.531 2008.11.22 -
Kaspersky 7.0.0.125 2008.11.24 -
McAfee 5443 2008.11.23 -
McAfee+Artemis 5443 2008.11.23 -
Microsoft 1.4104 2008.11.24 -
[B]NOD32 3633 2008.11.24 a variant of Win32/Adware.Mycentria.AA[/B]
Norman 5.80.02 2008.11.22 -
Panda 9.0.0.4 2008.11.23 -
PCTools 4.4.2.0 2008.11.23 -
Prevx1 V2 2008.11.24 -
Rising 21.05.00.00 2008.11.24 -
[B]SecureWeb-Gateway 6.7.6 2008.11.23 Worm.Win32.Malware.gen (suspicious)[/B]
Sophos 4.35.0 2008.11.24 -
[B]Sunbelt 3.1.1823.2 2008.11.22 VIPRE.Suspicious[/B]
Symantec 10 2008.11.24 -
TheHacker 6.3.1.1.160 2008.11.23 -
TrendMicro 8.700.0.1004 2008.11.24 -
VBA32 3.12.8.9 2008.11.23 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.23 -[/CODE]
Additional information
File size: 677888 bytes
MD5...: 2865574dfa36fe62154efe8f35ef58c8

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

File qlylib.dll received on 11.24.2008 07:30:07 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.24 -
AntiVir 7.9.0.35 2008.11.23 -
Authentium 5.1.0.4 2008.11.24 -
Avast 4.8.1281.0 2008.11.23 -
AVG 8.0.0.199 2008.11.23 -
BitDefender 7.2 2008.11.24 -
CAT-QuickHeal 10.00 2008.11.24 -
ClamAV 0.94.1 2008.11.24 -
[B]DrWeb 4.44.0.09170 2008.11.24 Trojan.Blackmailer.origin[/B]
eSafe 7.0.17.0 2008.11.23 -
eTrust-Vet 31.6.6221 2008.11.21 -
Ewido 4.0 2008.11.23 -
F-Prot 4.4.4.56 2008.11.24 -
[B]F-Secure 8.0.14332.0 2008.11.24 Trojan-Ransom.Win32.Hexzone.gfz[/B]
Fortinet 3.117.0.0 2008.11.23 -
GData 19 2008.11.24 -
Ikarus T3.1.1.45.0 2008.11.24 -
K7AntiVirus 7.10.531 2008.11.22 -
[B]Kaspersky 7.0.0.125 2008.11.24 Trojan-Ransom.Win32.Hexzone.gfz[/B]
McAfee 5443 2008.11.23 -
McAfee+Artemis 5443 2008.11.23 -
Microsoft 1.4104 2008.11.24 -
NOD32 3633 2008.11.24 -
Norman 5.80.02 2008.11.22 -
Panda 9.0.0.4 2008.11.23 -
PCTools 4.4.2.0 2008.11.23 -
Prevx1 V2 2008.11.24 -
Rising 21.05.00.00 2008.11.24 -
SecureWeb-Gateway 6.7.6 2008.11.23 -
Sophos 4.35.0 2008.11.24 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.24 -
TheHacker 6.3.1.1.160 2008.11.23 -
TrendMicro 8.700.0.1004 2008.11.24 -
VBA32 3.12.8.9 2008.11.23 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.23 -[/CODE]
Additional information
File size: 318976 bytes
MD5...: 1ea079abbcc15c884c25ee73f41e4b77

[size="1"][color="#666686"][B][I]Добавлено через 1 час 0 минут[/I][/B][/color][/size]

File csrcs.exe received on 11.24.2008 10:12:28 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.24 -
[B]AntiVir 7.9.0.35 2008.11.24 TR/Autoit.FN[/B]
Authentium 5.1.0.4 2008.11.24 -
Avast 4.8.1281.0 2008.11.23 -
AVG 8.0.0.199 2008.11.23 -
BitDefender 7.2 2008.11.24 -
CAT-QuickHeal 10.00 2008.11.24 -
ClamAV 0.94.1 2008.11.24 -
[B]DrWeb 4.44.0.09170 2008.11.24 Win32.HLLW.Autoruner.3438
eSafe 7.0.17.0 2008.11.23 Suspicious File[/B]
eTrust-Vet 31.6.6225 2008.11.24 -
Ewido 4.0 2008.11.23 -
F-Prot 4.4.4.56 2008.11.24 -
[B]F-Secure 8.0.14332.0 2008.11.24 Trojan.Win32.Autoit.fn[/B]
Fortinet 3.117.0.0 2008.11.24 -
GData 19 2008.11.24 -
[B]Ikarus T3.1.1.45.0 2008.11.24 Trojan.Win32.Autoit.dt[/B]
K7AntiVirus 7.10.531 2008.11.22 -
[B]Kaspersky 7.0.0.125 2008.11.24 Trojan.Win32.Autoit.fn[/B]
McAfee 5443 2008.11.23 -
McAfee+Artemis 5443 2008.11.23 -
Microsoft 1.4104 2008.11.24 -
NOD32 3634 2008.11.24 -
[B]Norman 5.80.02 2008.11.22 W32/Agent.JIIR[/B]
Panda 9.0.0.4 2008.11.23 -
PCTools 4.4.2.0 2008.11.23 -
Prevx1 V2 2008.11.24 -
Rising 21.05.00.00 2008.11.24 -
[B]SecureWeb-Gateway 6.7.6 2008.11.24 Trojan.Autoit.FN
Sophos 4.35.0 2008.11.24 Sus/Behav-1011[/B]
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.24 -
[B]TheHacker 6.3.1.1.161 2008.11.24 Trojan/Autoit.gs[/B]
TrendMicro 8.700.0.1004 2008.11.24 -
VBA32 3.12.8.9 2008.11.23 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.23 -[/CODE]
Additional information
File size: 420170 bytes
MD5...: 6c34e59430cbe53274744841c5edb554
25.11.2008, 12:53
Hanson

File [B]twext.exe[/B] received on 11.25.2008 07:14:53 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 14/37 (37.84%)

[QUOTE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.24 -
Authentium 5.1.0.4 2008.11.24 -
[B]Avast 4.8.1281.0 2008.11.24 Win32:Rootkit-gen
AVG 8.0.0.199 2008.11.24 Agent.AMGG[/B]
BitDefender 7.2 2008.11.25 -
CAT-QuickHeal 10.00 2008.11.25 -
ClamAV 0.94.1 2008.11.25 -
DrWeb 4.44.0.09170 2008.11.24 -
[B]eSafe 7.0.17.0 2008.11.24 Suspicious File[/B]
eTrust-Vet 31.6.6226 2008.11.25 -
Ewido 4.0 2008.11.24 -
[B]F-Prot 4.4.4.56 2008.11.24 W32/DelfInject.A.gen!Eldorado
F-Secure 8.0.14332.0 2008.11.25 Trojan.Win32.Agent.anyc
Fortinet 3.117.0.0 2008.11.25 W32/Agent.ANYC!tr
GData 19 2008.11.25 Win32:Rootkit-gen
Ikarus T3.1.1.45.0 2008.11.25 Trojan.Win32.Agent[/B]
K7AntiVirus 7.10.532 2008.11.24 -
[B]Kaspersky 7.0.0.125 2008.11.25 Trojan.Win32.Agent.anyc[/B]
McAfee 5444 2008.11.24 -
[B]McAfee+Artemis 5444 2008.11.24 Generic!Artemis
Microsoft 1.4104 2008.11.25 PWS:Win32/Zbot.FAL[/B]
NOD32 3637 2008.11.24 -
[B]Norman 5.80.02 2008.11.24 W32/Agent.JILH[/B]
Panda 9.0.0.4 2008.11.24 -
PCTools 4.4.2.0 2008.11.24 -
Prevx1 V2 2008.11.25 -
[B]Rising 21.05.10.00 2008.11.25 Trojan.Win32.Agent.any[/B]
SecureWeb-Gateway 6.7.6 2008.11.24 -
Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
[B]VBA32 3.12.8.9 2008.11.24 Trojan.Win32.Agent.anyc[/B]
ViRobot 2008.11.25.1484 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/QUOTE]
25.11.2008, 14:42
Shu_b

File dezubebo.dll received on 11.25.2008 12:10:38 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
Authentium 5.1.0.4 2008.11.25 -
Avast 4.8.1281.0 2008.11.24 -
AVG 8.0.0.199 2008.11.24 -
BitDefender 7.2 2008.11.25 -
CAT-QuickHeal 10.00 2008.11.25 -
ClamAV 0.94.1 2008.11.25 -
DrWeb 4.44.0.09170 2008.11.25 -
[B]eSafe 7.0.17.0 2008.11.24 Suspicious File[/B]
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.24 -
F-Prot 4.4.4.56 2008.11.24 -
F-Secure 8.0.14332.0 2008.11.25 -
Fortinet 3.117.0.0 2008.11.25 -
GData 19 2008.11.25 -
Ikarus T3.1.1.45.0 2008.11.25 -
K7AntiVirus 7.10.532 2008.11.24 -
Kaspersky 7.0.0.125 2008.11.25 -
McAfee 5444 2008.11.24 -
McAfee+Artemis 5444 2008.11.24 -
Microsoft 1.4104 2008.11.25 -
Norman 5.80.02 2008.11.25 -
[B]Panda 9.0.0.4 2008.11.24 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.24 -
[B]Prevx1 V2 2008.11.25 Malicious Software
Rising 21.05.12.00 2008.11.25 Trojan.Win32.VUNDO.bug
SecureWeb-Gateway 6.7.6 2008.11.25 Win32.Malware.gen!92 (suspicious)
Sophos 4.35.0 2008.11.25 Troj/Virtum-Gen[/B]
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 3.12.8.9 2008.11.24 -
ViRobot 2008.11.25.1485 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/CODE]
Additional information
File size: 93238 bytes
MD5...: 61607392528b27274c81bbaacfc10f50

[size="1"][color="#666686"][B][I]Добавлено через 2 минуты[/I][/B][/color][/size]

File junefare.dll vakumene.dll vebimayo.dll received on 11.25.2008 12:10:23 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
Authentium 5.1.0.4 2008.11.25 -
Avast 4.8.1281.0 2008.11.24 -
AVG 8.0.0.199 2008.11.24 -
BitDefender 7.2 2008.11.25 -
CAT-QuickHeal 10.00 2008.11.25 -
ClamAV 0.94.1 2008.11.25 -
DrWeb 4.44.0.09170 2008.11.25 -
[B]eSafe 7.0.17.0 2008.11.24 Suspicious File[/B]
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.24 -
F-Prot 4.4.4.56 2008.11.24 -
F-Secure 8.0.14332.0 2008.11.25 -
Fortinet 3.117.0.0 2008.11.25 -
GData 19 2008.11.25 -
Ikarus T3.1.1.45.0 2008.11.25 -
K7AntiVirus 7.10.532 2008.11.24 -
Kaspersky 7.0.0.125 2008.11.25 -
McAfee 5444 2008.11.24 -
McAfee+Artemis 5444 2008.11.24 -
[B]Microsoft 1.4104 2008.11.25 TrojanDownloader:Win32/Agent.F
NOD32 3638 2008.11.25 a variant of Win32/Adware.Virtumonde.NDI
[/B]Norman 5.80.02 2008.11.25 -
Panda 9.0.0.4 2008.11.24 -
PCTools 4.4.2.0 2008.11.24 -
Prevx1 V2 2008.11.25 -
[B]Rising 21.05.12.00 2008.11.25 Trojan.Win32.VUNDO.btg
SecureWeb-Gateway 6.7.6 2008.11.25 Win32.Malware.gen!92 (suspicious)
[/B]Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 3.12.8.9 2008.11.24 -
ViRobot 2008.11.25.1485 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/CODE]
Additional information
File size: 59444 bytes
MD5...: 2c96bf8d899b877939ea04f2f750d449
SHA1..: 10fe62be640628edb4ac661902213bb0cde922be

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

File winsys2.exe received on 11.25.2008 12:18:26 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
Authentium 5.1.0.4 2008.11.25 -
Avast 4.8.1281.0 2008.11.24 -
AVG 8.0.0.199 2008.11.24 -
BitDefender 7.2 2008.11.25 -
CAT-QuickHeal 10.00 2008.11.25 -
ClamAV 0.94.1 2008.11.25 -
DrWeb 4.44.0.09170 2008.11.25 -
eSafe 7.0.17.0 2008.11.24 -
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.24 -
F-Prot 4.4.4.56 2008.11.24 -
F-Secure 8.0.14332.0 2008.11.25 -
Fortinet 3.117.0.0 2008.11.25 -
GData 19 2008.11.25 -
Ikarus T3.1.1.45.0 2008.11.25 -
[B]K7AntiVirus 7.10.532 2008.11.24 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2008.11.25 -
McAfee 5444 2008.11.24 -
McAfee+Artemis 5444 2008.11.24 -
Microsoft 1.4104 2008.11.25 -
NOD32 3638 2008.11.25 -
Norman 5.80.02 2008.11.25 -
[B]Panda 9.0.0.4 2008.11.24 Trj/Agent.ISR[/B]
PCTools 4.4.2.0 2008.11.24 -
Prevx1 V2 2008.11.25 -
Rising 21.05.12.00 2008.11.25 -
SecureWeb-Gateway 6.7.6 2008.11.25 -
Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 None 2008.11.24 -
ViRobot 2008.11.25.1485 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/CODE]
Additional information
File size: 208896 bytes
MD5...: daee383586db76671c43a83c04e51283

[size="1"][color="#666686"][B][I]Добавлено через 2 минуты[/I][/B][/color][/size]

File kdsqm.exe received on 11.25.2008 12:17:28 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
[B]Authentium 5.1.0.4 2008.11.25 W32/Sinowal-based!Maximus
Avast 4.8.1281.0 2008.11.24 Win32:FaDrop[/B]
AVG 8.0.0.199 2008.11.24 -
BitDefender 7.2 2008.11.25 -
[B]CAT-QuickHeal 10.00 2008.11.25 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.25 -
DrWeb 4.44.0.09170 2008.11.25 -
[B]eSafe 7.0.17.0 2008.11.24 Suspicious File[/B]
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.24 -
[B]F-Prot 4.4.4.56 2008.11.24 W32/Sinowal-based!Maximus
F-Secure 8.0.14332.0 2008.11.25 Suspicious:W32/Malware!Gemini[/B]
Fortinet 3.117.0.0 2008.11.25 -
[B]GData 19 2008.11.25 Win32:FaDrop
Ikarus T3.1.1.45.0 2008.11.25 Trojan.Win32.Alureon[/B]
K7AntiVirus 7.10.532 2008.11.24 -
Kaspersky 7.0.0.125 2008.11.25 -
McAfee 5444 2008.11.24 -
[B]McAfee+Artemis 5444 2008.11.24 Generic!Artemis
Microsoft 1.4104 2008.11.25 Trojan:Win32/Alureon.gen
NOD32 3638 2008.11.25 a variant of Win32/Kryptik.BT[/B]
Norman 5.80.02 2008.11.25 -
Panda 9.0.0.4 2008.11.24 -
PCTools 4.4.2.0 2008.11.24 -
Prevx1 V2 2008.11.25 -
Rising 21.05.12.00 2008.11.25 -
SecureWeb-Gateway 6.7.6 2008.11.25 -
Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 3.12.8.9 2008.11.24 -
ViRobot 2008.11.25.1485 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/CODE]
Additional information
File size: 75264 bytes
MD5...: 2401ac0314d0dfbbae8b74eae98e1b3f

[size="1"][color="#666686"][B][I]Добавлено через 11 минут[/I][/B][/color][/size]

File bodozanu.dll received on 11.25.2008 12:38:52 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
Authentium 5.1.0.4 2008.11.25 -
[B]Avast 4.8.1281.0 2008.11.24 Win32:Trojan-gen {Other}
AVG 8.0.0.199 2008.11.24 Generic11.BERB
BitDefender 7.2 2008.11.25 Trojan.Vundo.FSY[/B]
CAT-QuickHeal 10.00 2008.11.25 -
[B]ClamAV 0.94.1 2008.11.25 Trojan.Spy-55283
DrWeb 4.44.0.09170 2008.11.25 Trojan.Virtumod.585
eSafe 7.0.17.0 2008.11.24 Suspicious File[/B]
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.25 -
[B]F-Prot 4.4.4.56 2008.11.24 W32/Virtumonde.AG.gen!Eldorado[/B]
F-Secure 8.0.14332.0 2008.11.25 -
Fortinet 3.117.0.0 2008.11.25 -
[B]GData 19 2008.11.25 Trojan.Vundo.FSY
Ikarus T3.1.1.45.0 2008.11.25 Trojan.Vundo.FSY
K7AntiVirus 7.10.532 2008.11.24 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2008.11.25 -
McAfee 5444 2008.11.24 -
McAfee+Artemis 5444 2008.11.24 -
[B]Microsoft 1.4104 2008.11.25 Trojan:Win32/Vundo.KAM
NOD32 3638 2008.11.25 a variant of Win32/Adware.Virtumonde.NCG
Norman 5.80.02 2008.11.25 W32/Virtumonde.ABGK[/B]
Panda 9.0.0.4 2008.11.24 -
PCTools 4.4.2.0 2008.11.24 -
Prevx1 V2 2008.11.25 -
[B]Rising 21.05.12.00 2008.11.25 Trojan.Win32.Undef.rjb
SecureWeb-Gateway 6.7.6 2008.11.25 Win32.Malware.gen!92 (suspicious)
Sophos 4.35.0 2008.11.25 Troj/BHO-HG[/B]
Sunbelt 3.1.1823.2 2008.11.22 -
[B]Symantec 10 2008.11.25 Trojan.Vundo[/B]
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 3.12.8.9 2008.11.24 -
[B]ViRobot 2008.11.25.1485 2008.11.25 Trojan.Win32.PSWIGames.59392.I[/B]
VirusBuster 4.5.11.0 2008.11.24 -[/CODE]
Additional information
File size: 59392 bytes
25.11.2008, 18:38
senyak

Файл fun_21243 получен 2008.11.25 16:33:08 (CET)
Текущий статус: закончено
Результат: 5/37 (13.52%)

[QUOTE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
Authentium 5.1.0.4 2008.11.25 -
Avast 4.8.1281.0 2008.11.24 -
[B]AVG 8.0.0.199 2008.11.25 Crypt.AUA[/B]
BitDefender 7.2 2008.11.25 -
CAT-QuickHeal 10.00 2008.11.25 -
ClamAV 0.94.1 2008.11.25 -
[B]DrWeb 4.44.0.09170 2008.11.25 Trojan.MulDrop.24733[/B]
eSafe 7.0.17.0 2008.11.25 -
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.25 -
F-Prot 4.4.4.56 2008.11.24 -
[B]F-Secure 8.0.14332.0 2008.11.25 Trojan.Win32.VB.gzk[/B]
Fortinet 3.117.0.0 2008.11.25 -
GData 19 2008.11.25 -
Ikarus T3.1.1.45.0 2008.11.25 -
K7AntiVirus 7.10.532 2008.11.24 -
[B]Kaspersky 7.0.0.125 2008.11.25 Trojan.Win32.VB.gzk[/B]
McAfee 5444 2008.11.24 -
McAfee+Artemis 5444 2008.11.24 -
Microsoft 1.4104 2008.11.25 -
NOD32 3638 2008.11.25 -
Norman 5.80.02 2008.11.25 -
[B]Panda 9.0.0.4 2008.11.25 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.25 -
Prevx1 V2 2008.11.25 -
Rising 21.05.12.00 2008.11.25 -
SecureWeb-Gateway 6.7.6 2008.11.25 -
Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 3.12.8.9 2008.11.24 -
ViRobot 2008.11.25.1485 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/QUOTE]

Дополнительная информация
File size: 77824 bytes
MD5...: 42c1ae4d7b30882c6ba0bddb7b3f44f3
SHA1..: b18e5f4e85faba16c556f79a55c7765f5406fbaa
SHA256: 9869cc465979cf5ea529443d647ad56880ca8cce715f8b5bd75943e5d56dbf78
SHA512: 040544eb767f3520c21c75a9e151fef389ff5f169295fdec425fb8ef07e35e11
f54c01a54f63bac82fe46a7dd4e092db5524a871fc9ae29ae95039ed46fc33a0
ssdeep: 1536:tbDP3wktXejTL6b4VWL5hU9QMpqrB3RatglP+fDcValMnd:tX3wktujTLkY
WLjKJpaB3ItglgwVaKd
PEiD..: -
26.11.2008, 15:45
Shu_b

File adsl.exe received on 11.26.2008 08:15:16 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.26 Win-Trojan/Avkiller.17920
AntiVir 7.9.0.35 2008.11.26 -
Authentium 5.1.0.4 2008.11.25 -
Avast 4.8.1281.0 2008.11.25 -
AVG 8.0.0.199 2008.11.25 -
BitDefender 7.2 2008.11.26 -
CAT-QuickHeal 10.00 2008.11.26 -
ClamAV 0.94.1 2008.11.26 -
[B]DrWeb 4.44.0.09170 2008.11.26 MULDROP.Trojan
eSafe 7.0.17.0 2008.11.25 Suspicious File[/B]
eTrust-Vet 31.6.6228 2008.11.26 -
Ewido 4.0 2008.11.25 -
F-Prot 4.4.4.56 2008.11.25 -
[B]F-Secure 8.0.14332.0 2008.11.26 Suspicious:W32/Malware!Gemini[/B]
Fortinet 3.117.0.0 2008.11.25 -
GData 19 2008.11.26 -
[B]Ikarus T3.1.1.45.0 2008.11.26 Trojan.Win32.KillAV.ko[/B]
K7AntiVirus 7.10.533 2008.11.25 -
Kaspersky 7.0.0.125 2008.11.26 -
McAfee 5445 2008.11.25 -
McAfee+Artemis 5445 2008.11.25 -
Microsoft 1.4104 2008.11.26 -
NOD32 3641 2008.11.26 -
Norman 5.80.02 2008.11.25 -
[B]Panda 9.0.0.4 2008.11.25 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.25 -
Prevx1 V2 2008.11.26 -
Rising 21.05.12.00 2008.11.25 -
SecureWeb-Gateway 6.7.6 2008.11.25 -
Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1830.2 2008.11.26 -
Symantec 10 2008.11.26 -
TheHacker 6.3.1.1.163 2008.11.25 -
[B]TrendMicro 8.700.0.1004 2008.11.26 PAK_Generic.001
VBA32 3.12.8.9 2008.11.26 Trojan.Win32.KillAV.ko[/B]
ViRobot 2008.11.26.1486 2008.11.26 -
VirusBuster 4.5.11.0 2008.11.25 -[/CODE]
Additional information
File size: 10240 bytes
MD5...: bab9b4a25a879bd14909df4b21bcda48

[size="1"][color="#666686"][B][I]Добавлено через 2 часа 56 минут[/I][/B][/color][/size]

File lsass.exe received on 11.26.2008 11:09:13 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.26 -
AntiVir 7.9.0.35 2008.11.26 -
Authentium 5.1.0.4 2008.11.26 -
Avast 4.8.1281.0 2008.11.25 -
AVG 8.0.0.199 2008.11.25 -
BitDefender 7.2 2008.11.26 -
CAT-QuickHeal 10.00 2008.11.26 -
ClamAV 0.94.1 2008.11.26 -
DrWeb 4.44.0.09170 2008.11.26 -
[B]eSafe 7.0.17.0 2008.11.25 Suspicious File[/B]
eTrust-Vet 31.6.6228 2008.11.26 -
Ewido 4.0 2008.11.25 -
F-Prot 4.4.4.56 2008.11.25 -
F-Secure 8.0.14332.0 2008.11.26 -
Fortinet 3.117.0.0 2008.11.26 -
GData 19 2008.11.26 -
[B]Ikarus T3.1.1.45.0 2008.11.26 Trojan.Win32.Autoit.dt[/B]
K7AntiVirus 7.10.533 2008.11.25 -
Kaspersky 7.0.0.125 2008.11.26 -
McAfee 5445 2008.11.25 -
McAfee+Artemis 5445 2008.11.25 -
Microsoft 1.4104 2008.11.26 -
NOD32 3641 2008.11.26 -
[B]Norman 5.80.02 2008.11.25 W32/Agent.JIIR
Panda 9.0.0.4 2008.11.25 W32/Autoit.AB[/B]
PCTools 4.4.2.0 2008.11.25 -
Prevx1 V2 2008.11.26 -
Rising 21.05.20.00 2008.11.26 -
SecureWeb-Gateway 6.7.6 2008.11.26 -
[B]Sophos 4.35.0 2008.11.26 Sus/Behav-1011[/B]
Sunbelt 3.1.1830.2 2008.11.26 -
Symantec 10 2008.11.26 -
TheHacker 6.3.1.1.163 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.26 -
VBA32 3.12.8.9 2008.11.26 -
ViRobot 2008.11.26.1486 2008.11.26 -
VirusBuster 4.5.11.0 2008.11.25 -[/CODE]
Additional information
File size: 249172 bytes
MD5...: 0a19525f0fdae4376a586f77bf5fcb4d

[size="1"][color="#666686"][B][I]Добавлено через 2 часа 29 минут[/I][/B][/color][/size]

File vmi386.sys received on 11.26.2008 13:36:01 (CET)
[CODE]Antivirus Version Last Update Result
[B]AhnLab-V3 2008.11.24.3 2008.11.26 Win-Trojan/Pakes.26784[/B]
AntiVir 7.9.0.35 2008.11.26 -
Authentium 5.1.0.4 2008.11.26 -
[B]Avast 4.8.1281.0 2008.11.25 Win32:Trojan-gen {Other}
AVG 8.0.0.199 2008.11.26 Generic12.HRL[/B]
BitDefender 7.2 2008.11.26 -
CAT-QuickHeal 10.00 2008.11.26 -
ClamAV 0.94.1 2008.11.26 -
[B]DrWeb 4.44.0.09170 2008.11.26 Trojan.Packed.1228[/B]
eSafe 7.0.17.0 2008.11.25 -
eTrust-Vet 31.6.6228 2008.11.26 -
Ewido 4.0 2008.11.26 -
F-Prot 4.4.4.56 2008.11.25 -
F-Secure 8.0.14332.0 2008.11.26 -
Fortinet 3.117.0.0 2008.11.26 -
[B]GData 19 2008.11.26 Win32:Trojan-gen {Other}[/B]
Ikarus T3.1.1.45.0 2008.11.26 -
[B]K7AntiVirus 7.10.533 2008.11.25 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2008.11.26 -
McAfee 5445 2008.11.25 -
[B]McAfee+Artemis 5445 2008.11.25 Generic!Artemis[/B]
Microsoft 1.4104 2008.11.26 -
[B]NOD32 3642 2008.11.26 Win32/Agent.AMBG[/B]
Norman 5.80.02 2008.11.26 -
Panda 9.0.0.4 2008.11.25 -
PCTools 4.4.2.0 2008.11.26 -
Prevx1 V2 2008.11.26 -
Rising 21.05.22.00 2008.11.26 -
SecureWeb-Gateway 6.7.6 2008.11.26 -
Sophos 4.35.0 2008.11.26 -
Sunbelt 3.1.1830.2 2008.11.26 -
[B]Symantec 10 2008.11.26 Trojan.Dropper[/B]
TheHacker 6.3.1.1.163 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.26 -
VBA32 3.12.8.9 2008.11.26 -
[B]ViRobot 2008.11.26.1487 2008.11.26 Trojan.Win32.Pakes.26784[/B]
VirusBuster 4.5.11.0 2008.11.25 -[/CODE]
Additional information
File size: 26784 bytes
MD5...: 3006e4d347c5bb5767dab0a99ddeb68f
26.11.2008, 16:11
Hanson

Файл [B]winlogon_exe_[/B] получен 2008.11.26 13:56:09 (CET)
Текущий статус: Загрузка ... в очереди ожидание проверка закончено НЕ НАЙДЕНО ОСТАНОВЛЕНО
Результат: 9/37 (24.33%)
[QUOTE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.24.3 2008.11.26 -
[B]AntiVir 7.9.0.35 2008.11.26 DR/Delphi.Gen[/B]
Authentium 5.1.0.4 2008.11.26 -
[B]Avast 4.8.1281.0 2008.11.26 Win32:Delf-LMN
AVG 8.0.0.199 2008.11.26 SHeur2.DTA
BitDefender 7.2 2008.11.26 Trojan.Dropper.LdPinch.AO[/B]
CAT-QuickHeal 10.00 2008.11.26 -
ClamAV 0.94.1 2008.11.26 -
DrWeb 4.44.0.09170 2008.11.26 -
[B]eSafe 7.0.17.0 2008.11.25 Suspicious File[/B]
eTrust-Vet 31.6.6228 2008.11.26 -
Ewido 4.0 2008.11.26 -
F-Prot 4.4.4.56 2008.11.25 -
F-Secure 8.0.14332.0 2008.11.26 -
Fortinet 3.117.0.0 2008.11.26 -
[B]GData 19 2008.11.26 Trojan.Dropper.LdPinch.AO
Ikarus T3.1.1.45.0 2008.11.26 Trojan-Dropper.LdPinch[/B]
K7AntiVirus 7.10.533 2008.11.25 -
Kaspersky 7.0.0.125 2008.11.26 -
McAfee 5445 2008.11.25 -
[B]McAfee+Artemis 5445 2008.11.25 Generic!Artemis[/B]
Microsoft 1.4104 2008.11.26 -
NOD32 3642 2008.11.26 -
Norman 5.80.02 2008.11.26 -
Panda 9.0.0.4 2008.11.25 -
PCTools 4.4.2.0 2008.11.26 -
Prevx1 V2 2008.11.26 -
Rising 21.05.22.00 2008.11.26 -
[B]SecureWeb-Gateway 6.7.6 2008.11.26 Trojan.ATRAPS.Gen[/B]
Sophos 4.35.0 2008.11.26 -
Sunbelt 3.1.1830.2 2008.11.26 -
Symantec 10 2008.11.26 -
TheHacker 6.3.1.1.163 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.26 -
VBA32 3.12.8.9 2008.11.26 -
ViRobot 2008.11.26.1487 2008.11.26 -
VirusBuster 4.5.11.0 2008.11.25 -[/QUOTE]
27.11.2008, 17:50
Shu_b

File icq5e.dll received on 11.27.2008 07:40:25 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.27.1 2008.11.27 -
AntiVir 7.9.0.35 2008.11.26 -
Authentium 5.1.0.4 2008.11.27 -
Avast 4.8.1281.0 2008.11.27 -
AVG 8.0.0.199 2008.11.27 -
BitDefender 7.2 2008.11.27 -
CAT-QuickHeal 10.00 2008.11.27 -
ClamAV 0.94.1 2008.11.27 -
DrWeb 4.44.0.09170 2008.11.27 -
eSafe 7.0.17.0 2008.11.25 -
eTrust-Vet 31.6.6231 2008.11.27 -
Ewido 4.0 2008.11.26 -
F-Prot 4.4.4.56 2008.11.26 -
[B]F-Secure 8.0.14332.0 2008.11.27 Trojan-Downloader.Win32.Agent.arut[/B]
Fortinet 3.117.0.0 2008.11.27 -
GData 19 2008.11.27 -
Ikarus T3.1.1.45.0 2008.11.27 -
K7AntiVirus 7.10.534 2008.11.26 -
[B]Kaspersky 7.0.0.125 2008.11.27 Trojan-Downloader.Win32.Agent.arut[/B]
McAfee 5446 2008.11.26 -
McAfee+Artemis 5446 2008.11.26 -
Microsoft 1.4104 2008.11.27 -
NOD32 3644 2008.11.26 -
Norman 5.80.02 2008.11.26 -
[B]Panda 9.0.0.4 2008.11.27 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.26 -
Prevx1 V2 2008.11.27 -
Rising 21.05.30.00 2008.11.27 -
SecureWeb-Gateway 6.7.6 2008.11.26 -
Sophos 4.35.0 2008.11.27 -
Sunbelt 3.1.1830.2 2008.11.26 -
Symantec 10 2008.11.27 -
TheHacker 6.3.1.1.164 2008.11.27 -
TrendMicro 8.700.0.1004 2008.11.27 -
VBA32 3.12.8.9 2008.11.26 -
ViRobot 2008.11.27.1488 2008.11.27 -
VirusBuster 4.5.11.0 2008.11.26 -[/CODE]
Additional information
File size: 110592 bytes
MD5...: 0ab70f09b36cd6c329f68f3ff06ec5d5

[size="1"][color="#666686"][B][I]Добавлено через 7 часов 53 минуты[/I][/B][/color][/size]

[cut] -false alarm

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

File msvcrt48.dll received on 11.27.2008 15:37:38 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.27.4 2008.11.27 -
AntiVir 7.9.0.35 2008.11.27 -
Authentium 5.1.0.4 2008.11.27 -
Avast 4.8.1281.0 2008.11.27 -
[B]AVG 8.0.0.199 2008.11.27 PSW.Agent.WGY[/B]
BitDefender 7.2 2008.11.27 -
CAT-QuickHeal 10.00 2008.11.27 -
ClamAV 0.94.1 2008.11.27 -
[B]DrWeb 4.44.0.09170 2008.11.27 Trojan.PWS.Webmonier.115[/B]
eSafe 7.0.17.0 2008.11.27 -
eTrust-Vet 31.6.6233 2008.11.27 -
Ewido 4.0 2008.11.27 -
F-Prot 4.4.4.56 2008.11.27 -
[B]F-Secure 8.0.14332.0 2008.11.27 Trojan-Spy.Win32.Agent.eyl
Fortinet 3.117.0.0 2008.11.27 Spy/Agent[/B]
GData 19 2008.11.27 -
Ikarus T3.1.1.45.0 2008.11.27 -
K7AntiVirus 7.10.536 2008.11.27 -
[B]Kaspersky 7.0.0.125 2008.11.27 Trojan-Spy.Win32.Agent.eyl[/B]
McAfee 5446 2008.11.26 -
McAfee+Artemis 5446 2008.11.26 -
Microsoft 1.4104 2008.11.27 -
NOD32 3645 2008.11.27 -
Norman 5.80.02 2008.11.26 -
[B]Panda 9.0.0.4 2008.11.27 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.27 -
Prevx1 V2 2008.11.27 -
Rising 21.05.32.00 2008.11.27 -
SecureWeb-Gateway 6.7.6 2008.11.27 -
Sophos 4.35.0 2008.11.27 -
Sunbelt 3.1.1832.2 2008.11.27 -
Symantec 10 2008.11.27 -
TheHacker 6.3.1.1.164 2008.11.27 -
TrendMicro 8.700.0.1004 2008.11.27 -
VBA32 3.12.8.9 2008.11.27 -
ViRobot 2008.11.27.1489 2008.11.27 -
VirusBuster 4.5.11.0 2008.11.26 -[/CODE]
Additional information
File size: 20480 bytes
MD5...: 55d308f64c57e382583eb18757abd535

[size="1"][color="#666686"][B][I]Добавлено через 2 минуты[/I][/B][/color][/size]

File fskahuipymcphgo.sys received on 11.27.2008 15:39:36 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.27.4 2008.11.27 -
[B]AntiVir 7.9.0.35 2008.11.27 TR/Rootkit.Gen[/B]
Authentium 5.1.0.4 2008.11.27 -
[B]Avast 4.8.1281.0 2008.11.27 Win32:Rootkit-gen[/B]
AVG 8.0.0.199 2008.11.27 DDoS.K
BitDefender 7.2 2008.11.27 -
CAT-QuickHeal 10.00 2008.11.27 -
ClamAV 0.94.1 2008.11.27 -
DrWeb 4.44.0.09170 2008.11.27 -
eSafe 7.0.17.0 2008.11.27 -
eTrust-Vet 31.6.6233 2008.11.27 -
Ewido 4.0 2008.11.27 -
F-Prot 4.4.4.56 2008.11.27 -
F-Secure 8.0.14332.0 2008.11.27 -
Fortinet 3.117.0.0 2008.11.27 -
[B]GData 19 2008.11.27 Win32:Rootkit-gen
Ikarus T3.1.1.45.0 2008.11.27 Backdoor.WinNT.Rustock
K7AntiVirus 7.10.536 2008.11.27 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2008.11.27 -
McAfee 5446 2008.11.26 -
[B]McAfee+Artemis 5446 2008.11.26 Generic!Artemis
Microsoft 1.4104 2008.11.27 Backdoor:WinNT/Rustock.H[/B]
NOD32 3645 2008.11.27 -
[B]Norman 5.80.02 2008.11.26 W32/Rootkit.WKA[/B]
Panda 9.0.0.4 2008.11.27 -
PCTools 4.4.2.0 2008.11.27 -
Prevx1 V2 2008.11.27 -
Rising 21.05.32.00 2008.11.27 -
[B]SecureWeb-Gateway 6.7.6 2008.11.27 Trojan.Rootkit.Gen[/B]
Sophos 4.35.0 2008.11.27 -
Sunbelt 3.1.1832.2 2008.11.27 -
Symantec 10 2008.11.27 -
TheHacker 6.3.1.1.164 2008.11.27 -
TrendMicro 8.700.0.1004 2008.11.27 -
VBA32 3.12.8.9 2008.11.27 -
ViRobot 2008.11.27.1489 2008.11.27 -
VirusBuster 4.5.11.0 2008.11.26 -[/CODE]
Additional information
File size: 30848 bytes
MD5...: b0709f0e1517f9a7bf964761c2e47493
28.11.2008, 08:55
zorro84

Файл ntos.exe получен 2008.11.26 06:16:33 (CET)
Текущий статус: закончено
Результат: 11/37 (29.73%)

[CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.24.3 2008.11.26 -
[B]AntiVir 7.9.0.35 2008.11.25 DR/Delphi.Gen[/B]
Authentium 5.1.0.4 2008.11.25 -
[B]Avast 4.8.1281.0 2008.11.25 Win32:Delf-LMN[/B]
[B]AVG 8.0.0.199 2008.11.25 Win32/Heur
BitDefender 7.2 2008.11.26 Trojan.Dropper.LdPinch.AO[/B]
CAT-QuickHeal 10.00 2008.11.25 -
ClamAV 0.94.1 2008.11.26 -
[B]DrWeb 4.44.0.09170 2008.11.26 Trojan.PWS.Panda.17[/B]
eSafe 7.0.17.0 2008.11.25 -
eTrust-Vet 31.6.6228 2008.11.26 -
Ewido 4.0 2008.11.25 -
F-Prot 4.4.4.56 2008.11.25 -
[B]F-Secure 8.0.14332.0 2008.11.26 Trojan.Win32.Agent.aqpj[/B]
Fortinet 3.117.0.0 2008.11.25 -
[B]GData 19 2008.11.26 Trojan.Dropper.LdPinch.AO
Ikarus T3.1.1.45.0 2008.11.26 Trojan-Dropper.LdPinch[/B]
K7AntiVirus 7.10.533 2008.11.25 -
[B]Kaspersky 7.0.0.125 2008.11.26 Trojan.Win32.Agent.aqpj[/B]
McAfee 5445 2008.11.25 -
McAfee+Artemis 5445 2008.11.25 -
Microsoft 1.4104 2008.11.26 -
NOD32 3641 2008.11.26 -
Norman 5.80.02 2008.11.25 -
Panda 9.0.0.4 2008.11.25 -
PCTools 4.4.2.0 2008.11.25 -
Prevx1 V2 2008.11.26 -
Rising 21.05.12.00 2008.11.25 -
[B]SecureWeb-Gateway 6.7.6 2008.11.25 Trojan.Dropper.Delphi.Gen[/B]
Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1823.2 2008.11.22 -
[B]Symantec 10 2008.11.26 Infostealer[/B]
TheHacker 6.3.1.1.163 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.26 -
VBA32 3.12.8.9 2008.11.26 -
ViRobot 2008.11.26.1486 2008.11.26 -
VirusBuster 4.5.11.0 2008.11.25 -[/CODE]
Дополнительная информация
File size: 699392 bytes
MD5...: d48bc81b3ad1acd0b4416ddefe1eea09
SHA1..: 51009421c683bad2a2eb6d7dee324c806632cd67
28.11.2008, 13:09
Shu_b

File msansspc.dll received on 11.28.2008 06:05:23 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.27.4 2008.11.28 -
[B]AntiVir 7.9.0.35 2008.11.27 TR/Agent.aqkz[/B]
Authentium 5.1.0.4 2008.11.28 -
[B]Avast 4.8.1281.0 2008.11.27 Win32:Trojan-gen {Other}
AVG 8.0.0.199 2008.11.27 Agent.AMYR[/B]
BitDefender 7.2 2008.11.28 -
[B]CAT-QuickHeal 10.00 2008.11.28 Trojan.Agent.aqkz[/B]
ClamAV 0.94.1 2008.11.28 -
[B]DrWeb 4.44.0.09170 2008.11.28 Trojan.Botnetlog.1
eSafe 7.0.17.0 2008.11.27 Suspicious File[/B]
eTrust-Vet 31.6.6233 2008.11.27 -
Ewido 4.0 2008.11.27 -
F-Prot 4.4.4.56 2008.11.27 -
F-Secure 8.0.14332.0 2008.11.28 -
Fortinet 3.117.0.0 2008.11.27 -
[B]GData 19 2008.11.28 Win32:Trojan-gen {Other}[/B]
Ikarus T3.1.1.45.0 2008.11.28 -
K7AntiVirus 7.10.536 2008.11.27 -
Kaspersky 7.0.0.125 2008.11.28 -
McAfee 5447 2008.11.27 -
McAfee+Artemis 5447 2008.11.27 -
Microsoft 1.4104 2008.11.28 -
NOD32 3647 2008.11.27 -
Norman 5.80.02 2008.11.27 -
Panda 9.0.0.4 2008.11.28 -
PCTools 4.4.2.0 2008.11.27 -
Prevx1 V2 2008.11.28 -
[B]Rising 21.05.40.00 2008.11.28 Trojan.Win32.Undef.tff
SecureWeb-Gateway 6.7.6 2008.11.27 Trojan.Agent.aqkz[/B]
Sophos 4.36.0 2008.11.28 -
Sunbelt 3.1.1832.2 2008.11.27 -
Symantec 10 2008.11.28 -
TheHacker 6.3.1.1.166 2008.11.28 -
TrendMicro 8.700.0.1004 2008.11.27 -
VBA32 3.12.8.9 2008.11.27 -
ViRobot 2008.11.27.1489 2008.11.27 -
VirusBuster 4.5.11.0 2008.11.27 -[/CODE]
Additional information
File size: 27648 bytes
MD5...: de110803efec6c70e69016f51ed23832

[size="1"][color="#666686"][B][I]Добавлено через 1 час 57 минут[/I][/B][/color][/size]

File mdm.exe received on 11.28.2008 08:58:31 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.27.4 2008.11.28 -
AntiVir 7.9.0.35 2008.11.28 -
Authentium 5.1.0.4 2008.11.28 -
Avast 4.8.1281.0 2008.11.27 -
[B]AVG 8.0.0.199 2008.11.27 SHeur2.DRQ[/B]
BitDefender 7.2 2008.11.28 -
[B]CAT-QuickHeal 10.00 2008.11.28 Backdoor.IRCBot.gqg[/B]
ClamAV 0.94.1 2008.11.28 -
[B]DrWeb 4.44.0.09170 2008.11.28 BackDoor.IRC.Rxbot.26[/B]
eSafe 7.0.17.0 2008.11.27 -
eTrust-Vet 31.6.6233 2008.11.27 -
Ewido 4.0 2008.11.27 -
F-Prot 4.4.4.56 2008.11.27 -
[B]Fortinet 3.117.0.0 2008.11.27 W32/IRCBot.GQG!tr.bdr[/B]
GData 19 2008.11.28 -
Ikarus T3.1.1.45.0 2008.11.28 -
[B]K7AntiVirus 7.10.536 2008.11.27 Backdoor.Win32.IRCBot.gqg
Kaspersky 7.0.0.125 2008.11.28 Backdoor.Win32.IRCBot.gqg[/B]
McAfee 5447 2008.11.27 -
McAfee+Artemis 5447 2008.11.27 -
Microsoft 1.4104 2008.11.28 -
NOD32 3647 2008.11.27 -
Norman 5.80.02 2008.11.27 -
Panda 9.0.0.4 2008.11.28 -
PCTools 4.4.2.0 2008.11.27 -
Prevx1 V2 2008.11.28 -
Rising 21.05.40.00 2008.11.28 -
SecureWeb-Gateway 6.7.6 2008.11.28 -
Sophos 4.36.0 2008.11.28 -
Sunbelt 3.1.1832.2 2008.11.27 -
Symantec 10 2008.11.28 -
TheHacker 6.3.1.1.166 2008.11.28 -
[B]TrendMicro 8.700.0.1004 2008.11.28 WORM_MAINBOT.MCL[/B]
VBA32 3.12.8.9 2008.11.27 -
ViRobot 2008.11.28.1490 2008.11.28 -
VirusBuster 4.5.11.0 2008.11.27 -[/CODE]
Additional information
File size: 35840 bytes
MD5...: dbf6bdddfbe8bb6035e9ae885cbf5d04
28.11.2008, 13:21
Numb

Из раздела "Помогите!":
Файл avz00002.dta получен 2008.11.28 11:06:47 (CET)
(оригинальное имя - C:\Program Files\Microsoft Common\svchost.exe)
[code]AhnLab-V3 2008.11.27.4 2008.11.28 -
AntiVir 7.9.0.35 2008.11.28 -
Authentium 5.1.0.4 2008.11.28 -
Avast 4.8.1281.0 2008.11.27 -
[b]AVG 8.0.0.199 2008.11.27 Win32/Cryptor[/b]
BitDefender 7.2 2008.11.28 -
[b]CAT-QuickHeal 10.00 2008.11.28 (Suspicious) - DNAScan[/b]
ClamAV 0.94.1 2008.11.28 -
DrWeb 4.44.0.09170 2008.11.28 -
eSafe 7.0.17.0 2008.11.27 -
eTrust-Vet 31.6.6234 2008.11.28 -
Ewido 4.0 2008.11.27 -
F-Prot 4.4.4.56 2008.11.27 -
F-Secure 8.0.14332.0 2008.11.28 -
Fortinet 3.117.0.0 2008.11.28 -
GData 19 2008.11.28 -
Ikarus T3.1.1.45.0 2008.11.28 -
K7AntiVirus 7.10.536 2008.11.27 -
Kaspersky 7.0.0.125 2008.11.28 -
McAfee 5447 2008.11.27 -
McAfee+Artemis 5447 2008.11.27 -
[b]Microsoft 1.4104 2008.11.28 TrojanDropper:Win32/Emold.C[/b]
NOD32 3647 2008.11.27 -
Norman 5.80.02 2008.11.27 -
Panda 9.0.0.4 2008.11.28 -
PCTools 4.4.2.0 2008.11.27 -
Prevx1 V2 2008.11.28 -
Rising 21.05.40.00 2008.11.28 -
SecureWeb-Gateway 6.7.6 2008.11.28 -
Sophos 4.36.0 2008.11.28 Mal/EncPk-GH
Sunbelt 3.1.1832.2 2008.11.27 -
Symantec 10 2008.11.28 -
TheHacker 6.3.1.1.166 2008.11.28 -
[b]TrendMicro 8.700.0.1004 2008.11.28 PAK_Generic.001[/b]
[b]VBA32 3.12.8.9 2008.11.27 suspected of Unknown.Win32Virus[/b]
ViRobot 2008.11.28.1490 2008.11.28 -
[b]VirusBuster 4.5.11.0 2008.11.27 Worm.Autorun.Gen!Pac.14[/b][/code]
Дополнительная информация
File size: 28672 bytes
MD5...: b5446b4263b5c3f443bd19f6860bf157
SHA1..: 4e590b3d85ef4e3624915ed8eb28e0aa698ff312

Файл avz00009.dta получен 2008.11.28 11:10:25 (CET)
(оригинальное имя - c:\windows\system32\msmsg.exe)
[code]AhnLab-V3 2008.11.28.2 2008.11.28 -
[b]AntiVir 7.9.0.35 2008.11.28 TR/ATRAPS.Gen[/b]
Authentium 5.1.0.4 2008.11.28 -
Avast 4.8.1281.0 2008.11.27 -
AVG 8.0.0.199 2008.11.27 -
BitDefender 7.2 2008.11.28 -
CAT-QuickHeal 10.00 2008.11.28 -
ClamAV 0.94.1 2008.11.28 -
DrWeb 4.44.0.09170 2008.11.28 -
[b]eSafe 7.0.17.0 2008.11.27 Suspicious File[/b]
eTrust-Vet 31.6.6234 2008.11.28 -
Ewido 4.0 2008.11.27 -
F-Prot 4.4.4.56 2008.11.27 -
F-Secure 8.0.14332.0 2008.11.28 -
Fortinet 3.117.0.0 2008.11.28 -
GData 19 2008.11.28 -
Ikarus T3.1.1.45.0 2008.11.28 -
K7AntiVirus 7.10.536 2008.11.27 -
Kaspersky 7.0.0.125 2008.11.28 -
McAfee 5447 2008.11.27 -
McAfee+Artemis 5447 2008.11.27 -
[b]Microsoft 1.4104 2008.11.28 Trojan:Win32/Anomaly.gen!A[/b]
NOD32 3647 2008.11.27 -
Norman 5.80.02 2008.11.27 -
Panda 9.0.0.4 2008.11.28 -
PCTools 4.4.2.0 2008.11.27 -
Prevx1 V2 2008.11.28 -
[b]Rising 21.05.40.00 2008.11.28 Packer.RyCrypt[/b]
[b]SecureWeb-Gateway 6.7.6 2008.11.28 Trojan.ATRAPS.Gen[/b]
Sophos 4.36.0 2008.11.28 -
Sunbelt 3.1.1832.2 2008.11.27 -
Symantec 10 2008.11.28 -
TheHacker 6.3.1.1.166 2008.11.28 -
[b]TrendMicro 8.700.0.1004 2008.11.28 Possible_Virus[/b]
VBA32 3.12.8.9 2008.11.27 -
ViRobot 2008.11.28.1490 2008.11.28 -
VirusBuster 4.5.11.0 2008.11.27 -[/code]
Дополнительная информация
File size: 52224 bytes
MD5...: 8e7aa93d943c5022bedeeb7fc3444764
SHA1..: 4a8c3528f304dd96a7884feb7c32908c5e619f91
28.11.2008, 15:58
Shu_b

File fccyaXqn.dll received on 11.28.2008 13:46:49 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.28.2 2008.11.28 -
AntiVir 7.9.0.36 2008.11.28 -
Authentium 5.1.0.4 2008.11.28 -
Avast 4.8.1281.0 2008.11.27 -
[B]AVG 8.0.0.199 2008.11.27 Vundo.AT
BitDefender 7.2 2008.11.28 Trojan.Vundo.FXR[/B]
CAT-QuickHeal 10.00 2008.11.28 -
ClamAV 0.94.1 2008.11.28 -
DrWeb 4.44.0.09170 2008.11.28 -
eSafe 7.0.17.0 2008.11.27 -
eTrust-Vet 31.6.6234 2008.11.28 -
Ewido 4.0 2008.11.28 -
F-Prot 4.4.4.56 2008.11.27 -
Fortinet 3.117.0.0 2008.11.28 -
[B]GData 19 2008.11.28 Trojan.Vundo.FXR[/B]
Ikarus T3.1.1.45.0 2008.11.28 -
K7AntiVirus 7.10.536 2008.11.27 -
Kaspersky 7.0.0.125 2008.11.28 -
McAfee 5447 2008.11.27 -
McAfee+Artemis 5447 2008.11.27 -
[B]Microsoft 1.4104 2008.11.28 Trojan:Win32/Vundo.gen!R
NOD32 3648 2008.11.28 a variant of Win32/Adware.Virtumonde.NDK[/B]
Norman 5.80.02 2008.11.28 -
Panda 9.0.0.4 2008.11.28 -
PCTools 4.4.2.0 2008.11.27 -
Prevx1 V2 2008.11.28 -
Rising 21.05.42.00 2008.11.28 -
[B]SecureWeb-Gateway 6.7.6 2008.11.28 Riskware.LooksLike.Fraud.An[/B]
Sophos 4.36.0 2008.11.28 -
Sunbelt 3.1.1832.2 2008.11.27 -
[B]Symantec 10 2008.11.28 Packed.Generic.201[/B]
TheHacker 6.3.1.1.166 2008.11.28 -
TrendMicro 8.700.0.1004 2008.11.28 -
VBA32 3.12.8.9 2008.11.28 -
ViRobot 2008.11.28.1491 2008.11.28 -
VirusBuster 4.5.11.0 2008.11.27 -[/CODE]
Additional information
File size: 246272 bytes
MD5...: 89088dcede745e1f6cb169207ab58fce

File cBSifEvT.dll received on 11.28.2008 13:50:33 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.28.2 2008.11.28 -
[B]AntiVir 7.9.0.36 2008.11.28 TR/Vundo.fxr.84[/B]
Authentium 5.1.0.4 2008.11.28 -
Avast 4.8.1281.0 2008.11.27 -
[B]AVG 8.0.0.199 2008.11.27 Vundo.AT
BitDefender 7.2 2008.11.28 Trojan.Vundo.FXR
CAT-QuickHeal 10.00 2008.11.28 Win32.Trojan.Vundo.gen!R.3[/B]
ClamAV 0.94.1 2008.11.28 -
[B]DrWeb 4.44.0.09170 2008.11.28 Trojan.Siggen.630[/B]
eSafe 7.0.17.0 2008.11.27 -
eTrust-Vet 31.6.6234 2008.11.28 -
Ewido 4.0 2008.11.28 -
F-Prot 4.4.4.56 2008.11.27 -
[B]F-Secure 8.0.14332.0 2008.11.28 Trojan:W32/Vundo.BV
Fortinet 3.117.0.0 2008.11.28 PossibleThreat
GData 19 2008.11.28 Trojan.Vundo.FXR
Ikarus T3.1.1.45.0 2008.11.28 Trojan.Win32.Monder[/B]
K7AntiVirus 7.10.536 2008.11.27 -
Kaspersky 7.0.0.125 2008.11.28 -
McAfee 5447 2008.11.27 -
[B]McAfee+Artemis 5447 2008.11.27 Generic!Artemis
Microsoft 1.4104 2008.11.28 Trojan:Win32/Vundo.gen!R
NOD32 3648 2008.11.28 a variant of Win32/Adware.Virtumonde.NDI[/B]
Norman 5.80.02 2008.11.28 -
Panda 9.0.0.4 2008.11.28 -
PCTools 4.4.2.0 2008.11.27 -
Prevx1 V2 2008.11.28 -
Rising 21.05.42.00 2008.11.28 -
[B]SecureWeb-Gateway 6.7.6 2008.11.28 Trojan.Vundo.fxr.84[/B]
Sophos 4.36.0 2008.11.28 -
Sunbelt 3.1.1832.2 2008.11.27 -
[B]Symantec 10 2008.11.28 Packed.Generic.201[/B]
TheHacker 6.3.1.1.166 2008.11.28 -
[B]TrendMicro 8.700.0.1004 2008.11.28 PAK_Generic.001[/B]
VBA32 3.12.8.9 2008.11.28 -
ViRobot 2008.11.28.1491 2008.11.28 -
VirusBuster 4.5.11.0 2008.11.27 -[/CODE]
Additional information
File size: 37888 bytes
MD5...: 394ce94ae80941b3676eebcc76668561
30.11.2008, 06:22
Синауридзе Александр

Файл DUpL.exe получен 2008.11.30 01:17:20 (CET)

[QUOTE]AhnLab-V3 2008.11.28.2 2008.11.29 -
AntiVir 7.9.0.36 2008.11.29 -
Authentium 5.1.0.4 2008.11.29 -
Avast 4.8.1281.0 2008.11.29 -
AVG 8.0.0.199 2008.11.29 -
[B]BitDefender 7.2 2008.11.30 Trojan.Generic.694784[/B]
CAT-QuickHeal 10.00 2008.11.29 -
ClamAV 0.94.1 2008.11.29 -
DrWeb 4.44.0.09170 2008.11.29 -
[B]eSafe 7.0.17.0 2008.11.27 Suspicious File[/B]
eTrust-Vet 31.6.6234 2008.11.28 -
Ewido 4.0 2008.11.29 -
[B]F-Prot 4.4.4.56 2008.11.29 W32/Malware.D.dam!Eldorado[/B]
F-Secure 8.0.14332.0 2008.11.29 -
Fortinet 3.117.0.0 2008.11.29 -
[B]GData 19 2008.11.30 Trojan.Generic.694784[/B]
Ikarus T3.1.1.45.0 2008.11.29 -
K7AntiVirus 7.10.538 2008.11.29 -
Kaspersky 7.0.0.125 2008.11.30 -
McAfee 5449 2008.11.29 -
McAfee+Artemis 5449 2008.11.29 -
[B]Microsoft 1.4104 2008.11.30 VirTool:Win32/Obfuscator.BO[/B]
NOD32 3650 2008.11.28 -
Norman 5.80.02 2008.11.28 -
Panda 9.0.0.4 2008.11.29 -
PCTools 4.4.2.0 2008.11.29 -
Prevx1 V2 2008.11.30 -
Rising 21.05.52.00 2008.11.29 -
[B]SecureWeb-Gateway 6.7.6 2008.11.29 Win32.Malware.dam (suspicious)[/B]
Sophos 4.36.0 2008.11.29 -
[B]Sunbelt 3.1.1832.2 2008.11.27 VIPRE.Suspicious[/B]
Symantec 10 2008.11.30 -
TheHacker 6.3.1.1.169 2008.11.29 -
TrendMicro 8.700.0.1004 2008.11.28 -
VBA32 3.12.8.9 2008.11.29 -
ViRobot 2008.11.29.1492 2008.11.29 -
VirusBuster 4.5.11.0 2008.11.29 -[/QUOTE]

Дополнительная информация
File size: 12081 bytes
MD5...: 0bffe2fb6a7f610fae8914a09bcd2987
SHA1..: 4a656493a7d0b3f5c3c920ffe58bbc309cbba3d9
SHA256: 53785632a8650bc766b606ca540c7f97a50d8187de5239233a0e5089271961e4
SHA512: 91bdb0623927bbec83e536cd36b8245e4faafc423f78460c740864d98a6c774d
0b535d01546b853b496de83c6ac4d4972cb5d678a9f2fcc40e932bfcd1d519cd

ssdeep: 192:xQRwiZPCP3xGFFkNugr9fUWcTTuU7vWjZqprZvMb6R+AcgMFSLFBmA:W103x
NuQ8WOTR7OIh6gbLj

PEiD..: -
TrID..: File type identification
Win16/32 Executable Delphi generic (34.0%)
Generic Win/DOS Executable (32.9%)
DOS Executable Generic (32.8%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x4090a0
timedatestamp.....: 0x47ec6ca2 (Fri Mar 28 03:57:22 2008)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.rdata 0x1000 0x1c41 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.data 0x3000 0x4fce 0x2200 7.97 ea7fd029f38a484f214183b938deeffb
.data_ 0x8000 0x1000 0xa00 7.90 88931dcced08016e4ef86ca25f7716e1
.icode 0x9000 0x350 0x400 0.00 d41d8cd98f00b204e9800998ecf8427e
.icode 0xa000 0x2f3 0x400 0.00 d41d8cd98f00b204e9800998ecf8427e

( 0 imports )

( 0 exports )

CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=0bffe2fb6a7f610fae8914a09bcd2987' target='_blank'>http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=0bffe2fb6a7f610fae8914a09bcd2987</a>

[size="1"][color="#666686"][B][I]Добавлено через 4 минуты[/I][/B][/color][/size]

Файл sxkW.exe получен 2008.11.30 01:30:35 (CET)

[QUOTE]AhnLab-V3 2008.11.28.2 2008.11.29 -
[B]AntiVir 7.9.0.36 2008.11.29 TR/Crypt.XPACK.Gen[/B]
Authentium 5.1.0.4 2008.11.30 -
Avast 4.8.1281.0 2008.11.29 -
[B]AVG 8.0.0.199 2008.11.29 Win32/Heur[/B]
BitDefender 7.2 2008.11.30 -
CAT-QuickHeal 10.00 2008.11.29 -
ClamAV 0.94.1 2008.11.29 -
DrWeb 4.44.0.09170 2008.11.29 -
[B]eSafe 7.0.17.0 2008.11.27 Suspicious File[/B]
eTrust-Vet 31.6.6234 2008.11.28 -
Ewido 4.0 2008.11.29 -
F-Prot 4.4.4.56 2008.11.29 -
F-Secure 8.0.14332.0 2008.11.29 -
Fortinet 3.117.0.0 2008.11.29 -
GData 19 2008.11.30 -
Ikarus T3.1.1.45.0 2008.11.29 -
K7AntiVirus 7.10.538 2008.11.29 -
Kaspersky 7.0.0.125 2008.11.30 -
McAfee 5449 2008.11.29 -
McAfee+Artemis 5449 2008.11.29 -
[B]Microsoft 1.4104 2008.11.30 VirTool:Win32/Obfuscator.BO[/B]
NOD32 3650 2008.11.28 -
Norman 5.80.02 2008.11.28 -
Panda 9.0.0.4 2008.11.29 -
PCTools 4.4.2.0 2008.11.29 -
Prevx1 V2 2008.11.30 -
Rising 21.05.52.00 2008.11.29 -
[B]SecureWeb-Gateway 6.7.6 2008.11.29 Trojan.Crypt.XPACK.Gen[/B]
[B]Sophos 4.36.0 2008.11.29 Mal/EncPk-DB[/B]
Sunbelt 3.1.1832.2 2008.11.27 -
Symantec 10 2008.11.30 -
TheHacker 6.3.1.1.169 2008.11.29 -
TrendMicro 8.700.0.1004 2008.11.28 -
[B]VBA32 3.12.8.9 2008.11.29 suspected of Malware-Cryptor.Win32.General.3[/B]
ViRobot 2008.11.29.1492 2008.11.29 -
VirusBuster 4.5.11.0 2008.11.29 -[/QUOTE]

Дополнительная информация
File size: 14208 bytes
MD5...: f356940144bbc710d7e57cbf2af36157
SHA1..: 36baafce982c7cfa0ca7617f3909d537936a10b6
SHA256: c64ddc5e2a7ddb9064cd8819db102db117ec57130ebe985315798b4101017599
SHA512: 1092fd043a1e6e52371a0ca19545f481fda144369cfc8433b07f8a8d968851e5
57bb10cac2e6b6b4418c3a5978b3d247671ecd0af5aef59024df830b66ad1ed7

ssdeep: 384:KcUIcPPOZdRxe2ri1nqAiiMs3t4S2LTNLy:KcUIU+HrGiiH367LR

PEiD..: -
TrID..: File type identification
Win16/32 Executable Delphi generic (34.0%)
Generic Win/DOS Executable (32.9%)
DOS Executable Generic (32.8%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x4090dc
timedatestamp.....: 0x47c10656 (Sun Feb 24 05:53:26 2008)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.code 0x1000 0x1b24 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.share 0x3000 0x47db 0x2200 7.93 de390b5b79bc2344f57f0a4bea25aebb
.rsrc 0x8000 0x1000 0xa00 7.60 005b62737adabeac198f7d9663c09c29
.masm 0x9000 0x392 0x400 7.21 f469f31688506a1d5934baeddf0a428b
.data_ 0xa000 0x363 0x400 4.77 80b5ab88155861b55a37a077c8c6df10

( 1 imports )
> user32.dll: GrayStringA, LoadKeyboardLayoutW, EnumDisplaySettingsExW, SetWindowsHookExA, CreateDialogIndirectParamA

( 0 exports )

CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=f356940144bbc710d7e57cbf2af36157' target='_blank'>http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=f356940144bbc710d7e57cbf2af36157</a>

[size="1"][color="#666686"][B][I]Добавлено через 2 часа 48 минут[/I][/B][/color][/size]

[QUOTE]Здравствуйте,

sxkW.exe_ - Email-Worm.Win32.Zhelatin.aia

Детектирование файла будет добавлено в следующее обновление.

Пожалуйста, при ответе включайте переписку целиком.
Ответ актуален для последних баз с источников обновлений.

>From: [email]sinauridze[antispam]rambler.ru[/email]
>Sent: Nov 30 2008 3:45AM
>To: "New Virus" <[email protected]>
>Subject:
>
>Здравствуйте!
>
> Отправляю Вам файл для анализа. Заранее спасибо за ответ.
> --
> Александр Синауридзе.
>
С уважением, Михаил Кусачев
Вирусный аналитик[/QUOTE]
01.12.2008, 17:06
Shu_b

Вложений: 1

итого
01.12.2008, 17:48
Shu_b

1

File nttest.sys received on 12.01.2008 15:38:12 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.1.3 2008.12.01 -
AntiVir 7.9.0.36 2008.12.01 -
Authentium 5.1.0.4 2008.12.01 -
Avast 4.8.1281.0 2008.12.01 -
AVG 8.0.0.199 2008.12.01 -
BitDefender 7.2 2008.12.01 -
CAT-QuickHeal 10.00 2008.12.01 -
ClamAV 0.94.1 2008.12.01 -
DrWeb 4.44.0.09170 2008.12.01 -
eSafe 7.0.17.0 2008.11.30 -
eTrust-Vet 31.6.6234 2008.11.28 -
Ewido 4.0 2008.12.01 -
F-Prot 4.4.4.56 2008.11.30 -
F-Secure 8.0.14332.0 2008.12.01 -
Fortinet 3.117.0.0 2008.11.30 -
GData 19 2008.12.01 -
Ikarus T3.1.1.45.0 2008.12.01 -
K7AntiVirus 7.10.539 2008.12.01 -
Kaspersky 7.0.0.125 2008.12.01 -
McAfee 5450 2008.11.30 -
McAfee+Artemis 5450 2008.11.30 -
Microsoft 1.4104 2008.12.01 -
[B]NOD32 3653 2008.12.01 Win32/SpamTool.Agent.NBF[/B]
Norman 5.80.02 2008.12.01 -
Panda 9.0.0.4 2008.12.01 -
PCTools 4.4.2.0 2008.12.01 -
Prevx1 V2 2008.12.01 -
Rising 21.06.02.00 2008.12.01 -
SecureWeb-Gateway 6.7.6 2008.12.01 -
Sophos 4.36.0 2008.12.01 -
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.01 -
TheHacker 6.3.1.1.169 2008.11.29 -
TrendMicro 8.700.0.1004 2008.12.01 -
VBA32 3.12.8.9 2008.12.01 -
ViRobot 2008.12.1.1494 2008.12.01 -
VirusBuster 4.5.11.0 2008.11.30 -[/CODE]
Additional information
File size: 33280 bytes
MD5...: ff07e4d14fcef9dabd1685ddf67d0974
02.12.2008, 11:26
Shu_b

File explorer.ex_ received on 12.02.2008 07:38:15 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.2.0 2008.12.02 -
AntiVir 7.9.0.36 2008.12.01 -
Authentium 5.1.0.4 2008.12.02 -
Avast 4.8.1281.0 2008.12.01 -
[B]AVG 8.0.0.199 2008.12.02 Win32/Small.DO
BitDefender 7.2 2008.12.02 Trojan.Inject.HP[/B]
CAT-QuickHeal 10.00 2008.12.02 -
ClamAV 0.94.1 2008.12.02 -
DrWeb 4.44.0.09170 2008.12.02 -
eSafe 7.0.17.0 2008.11.30 -
eTrust-Vet 31.6.6238 2008.12.02 -
Ewido 4.0 2008.12.01 -
F-Prot 4.4.4.56 2008.12.01 -
[B]F-Secure 8.0.14332.0 2008.12.02 W32/Afgan.C[/B]
Fortinet 3.117.0.0 2008.12.02 -
[B]GData 19 2008.12.02 Trojan.Inject.HP[/B]
Ikarus T3.1.1.45.0 2008.12.02 -
K7AntiVirus 7.10.539 2008.12.01 -
[B]Kaspersky 7.0.0.125 2008.12.02 Heur.Infector[/B]
McAfee 5451 2008.12.01 -
McAfee+Artemis 5451 2008.12.01 -
Microsoft 1.4104 2008.12.02 -
[B]NOD32 3656 2008.12.02 a variant of Win32/Afgan
Norman 5.80.02 2008.12.01 W32/Afgan.C[/B]
Panda 9.0.0.4 2008.12.02 -
PCTools 4.4.2.0 2008.12.01 -
Prevx1 V2 2008.12.02 -
Rising 21.06.10.00 2008.12.02 -
[B]SecureWeb-Gateway 6.7.6 2008.12.01 Win32.Malware.gen!84 (suspicious)[/B]
Sophos 4.36.0 2008.12.02 -
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.02 -
TheHacker 6.3.1.2.171 2008.12.02 -
TrendMicro 8.700.0.1004 2008.12.02 -
VBA32 3.12.8.9 2008.12.01 -
ViRobot 2008.12.2.1495 2008.12.02 -
VirusBuster 4.5.11.0 2008.12.01 -[/CODE]
Additional information
File size: 1056768 bytes
MD5...: bdefbce8919f5b8dffe487942140fa11

[size="1"][color="#666686"][B][I]Добавлено через 59 минут[/I][/B][/color][/size]

File ethxttap.sys ethsqcxl.sys received on 12.02.2008 09:13:38 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.2.0 2008.12.02 -
[B]AntiVir 7.9.0.36 2008.12.02 TR/Rootkit.Gen[/B]
Authentium 5.1.0.4 2008.12.02 -
Avast 4.8.1281.0 2008.12.01 -
[B]AVG 8.0.0.199 2008.12.02 Win32/Rustock.G[/B]
BitDefender 7.2 2008.12.02 -
CAT-QuickHeal 10.00 2008.12.02 -
ClamAV 0.94.1 2008.12.02 -
DrWeb 4.44.0.09170 2008.12.02 -
eSafe 7.0.17.0 2008.11.30 -
eTrust-Vet 31.6.6238 2008.12.02 -
Ewido 4.0 2008.12.01 -
F-Prot 4.4.4.56 2008.12.01 -
F-Secure 8.0.14332.0 2008.12.02 -
Fortinet 3.117.0.0 2008.12.02 -
GData 19 2008.12.02 -
Ikarus T3.1.1.45.0 2008.12.02 -
K7AntiVirus 7.10.539 2008.12.01 -
Kaspersky 7.0.0.125 2008.12.02 -
McAfee 5451 2008.12.01 -
McAfee+Artemis 5451 2008.12.01 -
[B]Microsoft 1.4104 2008.12.02 Spammer:Win32/Rlsloup.B[/B]
NOD32 3656 2008.12.02 -
Norman 5.80.02 2008.12.01 -
Panda 9.0.0.4 2008.12.02 -
PCTools 4.4.2.0 2008.12.01 -
Prevx1 V2 2008.12.02 -
Rising 21.06.10.00 2008.12.02 -
[B]SecureWeb-Gateway 6.7.6 2008.12.02 Trojan.Rootkit.Gen[/B]
Sophos 4.36.0 2008.12.02 -
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.02 -
TheHacker 6.3.1.2.171 2008.12.02 -
TrendMicro 8.700.0.1004 2008.12.02 -
VBA32 3.12.8.9 2008.12.01 -
ViRobot 2008.12.2.1495 2008.12.02 -
VirusBuster 4.5.11.0 2008.12.01 -[/CODE]
Additional information
File size: 135232 bytes
MD5...: 2690ad3b314f9e94d47356171889af67
02.12.2008, 13:48
Hanson

Файл [B]avz00003.dta(vmnetx86.sys)[/B] получен 2008.12.02 09:13:08 (CET)
Текущий статус:закончено
Результат: 5/37 (13.52%)
[QUOTE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.12.2.0 2008.12.02 -
AntiVir 7.9.0.36 2008.12.02 -
Authentium 5.1.0.4 2008.12.02 -
Avast 4.8.1281.0 2008.12.01 -
AVG 8.0.0.199 2008.12.02 -
BitDefender 7.2 2008.12.02 -
CAT-QuickHeal 10.00 2008.12.02 -
ClamAV 0.94.1 2008.12.02 -
DrWeb 4.44.0.09170 2008.12.02 -
eSafe 7.0.17.0 2008.11.30 -
eTrust-Vet 31.6.6238 2008.12.02 -
Ewido 4.0 2008.12.01 -
F-Prot 4.4.4.56 2008.12.01 -
F-Secure 8.0.14332.0 2008.12.02 -
[B][COLOR="Red"]Fortinet 3.117.0.0 2008.12.02 suspicious[/COLOR][/B]
GData 19 2008.12.02 -
Ikarus T3.1.1.45.0 2008.12.02 -
K7AntiVirus 7.10.539 2008.12.01 -
Kaspersky 7.0.0.125 2008.12.02 -
McAfee 5451 2008.12.01 -
[B][COLOR="Red"]McAfee+Artemis 5451 2008.12.01 Generic!Artemis[/COLOR][/B]
Microsoft 1.4104 2008.12.02 -
NOD32 3656 2008.12.02 -
Norman 5.80.02 2008.12.01 -
Panda 9.0.0.4 2008.12.02 -
PCTools 4.4.2.0 2008.12.01 -
Prevx1 V2 2008.12.02 -
[B][COLOR="Red"]Rising 21.06.10.00 2008.12.02 RootKit.Win32.Undef.nb[/COLOR][/B]
SecureWeb-Gateway 6.7.6 2008.12.02 -
Sophos 4.36.0 2008.12.02 -
[COLOR="Red"][B]Sunbelt 3.1.1832.2 2008.12.01 Trojan.DDoS.SITC[/B][/COLOR]
Symantec 10 2008.12.02 -
TheHacker 6.3.1.2.171 2008.12.02 -
TrendMicro 8.700.0.1004 2008.12.02 -
[COLOR="Red"][B]VBA32 3.12.8.9 2008.12.01 Trojan.Win32.DDosBot[/B][/COLOR]
ViRobot 2008.12.2.1495 2008.12.02 -
VirusBuster 4.5.11.0 2008.12.01 -[/QUOTE]
ответ Каспера, через 2 часа после отправки файла
[QUOTE]Здравствуйте,

avz00003.dta - Rootkit.Win32.KernelBot.dn

Детектирование файла будет добавлено в следующее обновление.
[/QUOTE]
др веб ответил через 4 часа,[QUOTE]Trojan.NtRootKit.2400[/QUOTE]
больше никто пока неответил
02.12.2008, 16:15
Shu_b

File Microsoft Common\wuauclt.exe received on 12.02.2008 12:41:26 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.2.2 2008.12.02 -
AntiVir 7.9.0.36 2008.12.02 -
Authentium 5.1.0.4 2008.12.02 -
Avast 4.8.1281.0 2008.12.01 -
[B]AVG 8.0.0.199 2008.12.02 Win32/Heur
BitDefender 7.2 2008.12.02 Trojan.Generic.1023521
CAT-QuickHeal 10.00 2008.12.02 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.12.02 -
DrWeb 4.44.0.09170 2008.12.02 -
[B]eSafe 7.0.17.0 2008.11.30 Suspicious File[/B]
eTrust-Vet 31.6.6238 2008.12.02 -
Ewido 4.0 2008.12.01 -
F-Prot 4.4.4.56 2008.12.01 -
Fortinet 3.117.0.0 2008.12.02 -
[B]GData 19 2008.12.02 Trojan.Generic.1023521[/B]
Ikarus T3.1.1.45.0 2008.12.02 -
K7AntiVirus 7.10.539 2008.12.01 -
Kaspersky 7.0.0.125 2008.12.02 -
[B]McAfee 5451 2008.12.01 New Malware.ix
McAfee+Artemis 5451 2008.12.01 New Malware.ix[/B]
Microsoft 1.4104 2008.12.02 -
NOD32 3657 2008.12.02 -
Norman 5.80.02 2008.12.01 -
Panda 9.0.0.4 2008.12.02 -
PCTools 4.4.2.0 2008.12.01 -
Rising 21.06.12.00 2008.12.02 -
[B]SecureWeb-Gateway 6.7.6 2008.12.02 Virus.Win32.FileInfector.gen (suspicious)
Sophos 4.36.0 2008.12.02 Mal/EncPk-FC[/B]
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.02 -
TheHacker 6.3.1.2.171 2008.12.02 -
TrendMicro 8.700.0.1004 2008.12.02 -
[B]VBA32 3.12.8.9 2008.12.01 suspected of Malware-Cryptor.Win32.General.3[/B]
ViRobot 2008.12.2.1496 2008.12.02 -
VirusBuster 4.5.11.0 2008.12.01 -[/CODE]
Additional information
File size: 24576 bytes
MD5...: 23801a0d48390720d217adba2fe6f9fc

[size="1"][color="#666686"][B][I]Добавлено через 50 минут[/I][/B][/color][/size]

File kdmpq.exe received on 12.02.2008 13:24:41 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.2.2 2008.12.02 -
AntiVir 7.9.0.36 2008.12.02 -
[B]Authentium 5.1.0.4 2008.12.02 W32/Sinowal-based!Maximus
Avast 4.8.1281.0 2008.12.01 Win32:FaDrop[/B]
AVG 8.0.0.199 2008.12.02 -
BitDefender 7.2 2008.12.02 -
[B]CAT-QuickHeal 10.00 2008.12.02 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.12.02 -
DrWeb 4.44.0.09170 2008.12.02 -
[B]eSafe 7.0.17.0 2008.11.30 Suspicious File[/B]
eTrust-Vet 31.6.6238 2008.12.02 -
Ewido 4.0 2008.12.01 -
[B]F-Prot 4.4.4.56 2008.12.01 W32/Sinowal-based!Maximus
F-Secure 8.0.14332.0 2008.12.02 Suspicious:W32/Malware!Gemini[/B]
Fortinet 3.117.0.0 2008.12.02 -
[B]GData 19 2008.12.02 Win32:FaDrop[/B]
Ikarus T3.1.1.45.0 2008.12.02 -
K7AntiVirus 7.10.539 2008.12.01 -
Kaspersky 7.0.0.125 2008.12.02 -
McAfee 5451 2008.12.01 -
McAfee+Artemis 5451 2008.12.01 -
[B]Microsoft 1.4104 2008.12.02 Trojan:Win32/Alureon.gen
NOD32 3657 2008.12.02 a variant of Win32/Kryptik.BT[/B]
Norman 5.80.02 2008.12.01 -
Panda 9.0.0.4 2008.12.02 -
PCTools 4.4.2.0 2008.12.01 -
Prevx1 V2 2008.12.02 -
Rising 21.06.12.00 2008.12.02 -
SecureWeb-Gateway 6.7.6 2008.12.02 -
Sophos 4.36.0 2008.12.02 -
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.02 -
TheHacker 6.3.1.2.171 2008.12.02 -
TrendMicro 8.700.0.1004 2008.12.02 -
VBA32 3.12.8.9 2008.12.01 -
ViRobot 2008.12.2.1496 2008.12.02 -
VirusBuster 4.5.11.0 2008.12.01 -[/CODE]
Additional information
File size: 76800 bytes
MD5...: 41b8e54b145f0b509870b2c91756d5b7

[size="1"][color="#666686"][B][I]Добавлено через 32 минуты[/I][/B][/color][/size]

File autorun.inf\sgucjl.exe received on 12.02.2008 14:02:45 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.2.2 2008.12.02 -
AntiVir 7.9.0.36 2008.12.02 -
Authentium 5.1.0.4 2008.12.02 -
[B]Avast 4.8.1281.0 2008.12.01 Win32:Trojan-gen {Other}[/B]
AVG 8.0.0.199 2008.12.02 -
BitDefender 7.2 2008.12.02 -
CAT-QuickHeal 10.00 2008.12.02 -
ClamAV 0.94.1 2008.12.02 -
DrWeb 4.44.0.09170 2008.12.02 -
[B]eSafe 7.0.17.0 2008.11.30 Suspicious File[/B]
eTrust-Vet 31.6.6238 2008.12.02 -
Ewido 4.0 2008.12.01 -
F-Prot 4.4.4.56 2008.12.01 -
F-Secure 8.0.14332.0 2008.12.02 -
Fortinet 3.117.0.0 2008.12.02 -
[B]GData 19 2008.12.02 Win32:Trojan-gen {Other}[/B]
Ikarus T3.1.1.45.0 2008.12.02 -
K7AntiVirus 7.10.539 2008.12.01 -
Kaspersky 7.0.0.125 2008.12.02 -
McAfee 5451 2008.12.01 -
McAfee+Artemis 5451 2008.12.01 -
Microsoft 1.4104 2008.12.02 -
[B]NOD32 3657 2008.12.02 Win32/Packed.Autoit.Gen[/B]
Norman 5.80.02 2008.12.01 -
Panda 9.0.0.4 2008.12.02 -
PCTools 4.4.2.0 2008.12.02 -
Prevx1 V2 2008.12.02 -
Rising 21.06.12.00 2008.12.02 -
SecureWeb-Gateway 6.7.6 2008.12.02 -
Sophos 4.36.0 2008.12.02 -
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.02 -
TheHacker 6.3.1.2.171 2008.12.02 -
TrendMicro 8.700.0.1004 2008.12.02 -
VBA32 3.12.8.9 2008.12.01 -
ViRobot 2008.12.2.1496 2008.12.02 -
VirusBuster 4.5.11.0 2008.12.01 -[/CODE]
Additional information
File size: 484488 bytes
MD5...: 11ba1cec8e6f3c7a6d064f0c53bc4510

[size="1"][color="#666686"][B][I]Добавлено через 5 минут[/I][/B][/color][/size]

File kavo0.dll received on 12.02.2008 14:06:32 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.2.2 2008.12.02 -
AntiVir 7.9.0.36 2008.12.02 -
Authentium 5.1.0.4 2008.12.02 -
Avast 4.8.1281.0 2008.12.01 -
[B]AVG 8.0.0.199 2008.12.02 Win32/Heur[/B]
BitDefender 7.2 2008.12.02 -
CAT-QuickHeal 10.00 2008.12.02 -
ClamAV 0.94.1 2008.12.02 -
DrWeb 4.44.0.09170 2008.12.02 -
[B]eSafe 7.0.17.0 2008.11.30 Suspicious File[/B]
eTrust-Vet 31.6.6238 2008.12.02 -
Ewido 4.0 2008.12.02 -
F-Prot 4.4.4.56 2008.12.01 -
F-Secure 8.0.14332.0 2008.12.02 -
Fortinet 3.117.0.0 2008.12.02 -
[B]GData 19 2008.12.02 Packer.Malware.NSAnti.1[/B]
Ikarus T3.1.1.45.0 2008.12.02 -
K7AntiVirus 7.10.539 2008.12.01 -
Kaspersky 7.0.0.125 2008.12.02 -
McAfee 5451 2008.12.01 -
[B]McAfee+Artemis 5451 2008.12.01 Generic!Artemis
Microsoft 1.4104 2008.12.02 PWS:Win32/Frethog.D[/B]
NOD32 3657 2008.12.02 -
Norman 5.80.02 2008.12.01 -
[B]Panda 9.0.0.4 2008.12.02 Suspicious file[/B]
PCTools 4.4.2.0 2008.12.02 -
Prevx1 V2 2008.12.02 -
Rising 21.06.12.00 2008.12.02 -
[B]SecureWeb-Gateway 6.7.6 2008.12.02 Virus.Win32.FileInfector.gen!84 (suspicious)
Sophos 4.36.0 2008.12.02 Troj/Virtum-Gen[/B]
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.02 -
TheHacker 6.3.1.2.171 2008.12.02 -
TrendMicro 8.700.0.1004 2008.12.02 -
VBA32 3.12.8.9 2008.12.01 -
ViRobot 2008.12.2.1496 2008.12.02 -
VirusBuster 4.5.11.0 2008.12.01 -[/CODE]
Additional information
File size: 147456 bytes
MD5...: e3cefe9cf6bf9400fec3912a24dfae7b

File autorun.inf \eeqt.exe received on 12.02.2008 14:06:45 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.2.2 2008.12.02 -
AntiVir 7.9.0.36 2008.12.02 -
Authentium 5.1.0.4 2008.12.02 -
Avast 4.8.1281.0 2008.12.01 -
[B]AVG 8.0.0.199 2008.12.02 PSW.OnlineGames_r.K[/B]
BitDefender 7.2 2008.12.02 -
[B]CAT-QuickHeal 10.00 2008.12.02 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.12.02 -
DrWeb 4.44.0.09170 2008.12.02 -
[B]eSafe 7.0.17.0 2008.11.30 Suspicious File[/B]
eTrust-Vet 31.6.6238 2008.12.02 -
Ewido 4.0 2008.12.02 -
F-Prot 4.4.4.56 2008.12.01 -
Fortinet 3.117.0.0 2008.12.02 -
[B]GData 19 2008.12.02 Packer.Malware.NSAnti.1[/B]
Ikarus T3.1.1.45.0 2008.12.02 -
K7AntiVirus 7.10.539 2008.12.01 -
Kaspersky 7.0.0.125 2008.12.02 -
[B]McAfee 5451 2008.12.01 New Malware.bx
McAfee+Artemis 5451 2008.12.01 New Malware.bx
Microsoft 1.4104 2008.12.02 PWS:Win32/Frethog.AJ[/B]
NOD32 3657 2008.12.02 -
Norman 5.80.02 2008.12.01 -
Panda 9.0.0.4 2008.12.02 -
PCTools 4.4.2.0 2008.12.02 -
Prevx1 V2 2008.12.02 -
Rising 21.06.12.00 2008.12.02 -
[B]SecureWeb-Gateway 6.7.6 2008.12.02 Trojan.Crypt.LooksLike.XPACK[/B]
Sophos 4.36.0 2008.12.02 -
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.02 -
TheHacker 6.3.1.2.171 2008.12.02 -
TrendMicro 8.700.0.1004 2008.12.02 -
VBA32 3.12.8.9 2008.12.01 -
ViRobot 2008.12.2.1496 2008.12.02 -
VirusBuster 4.5.11.0 2008.12.01 -[/CODE]
Additional information
File size: 109788 bytes
MD5...: fc7f4c670fad604211bf890a70365d6b
05.12.2008, 16:00
Shu_b

File \Temp\init.exe received on 12.05.2008 12:01:28 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.5.0 2008.12.05 -
AntiVir 7.9.0.41 2008.12.05 -
Authentium 5.1.0.4 2008.12.05 -
[B]Avast 4.8.1281.0 2008.12.04 Win32:Fabot[/B]
AVG 8.0.0.199 2008.12.05 -
BitDefender 7.2 2008.12.05 -
[B]CAT-QuickHeal 10.00 2008.12.05 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.12.05 -
Comodo 682 2008.12.04 -
DrWeb 4.44.0.09170 2008.12.05 -
eSafe 7.0.17.0 2008.12.04 -
eTrust-Vet 31.6.6243 2008.12.04 -
Ewido 4.0 2008.12.04 -
F-Prot 4.4.4.56 2008.12.04 -
F-Secure 8.0.14332.0 2008.12.05 -
Fortinet 3.117.0.0 2008.12.05 -
[B]GData 19 2008.12.05 Win32:Fabot[/B]
Ikarus T3.1.1.45.0 2008.12.05 -
K7AntiVirus 7.10.543 2008.12.04 -
Kaspersky 7.0.0.125 2008.12.05 -
McAfee 5454 2008.12.04 -
McAfee+Artemis 5454 2008.12.04 -
Microsoft 1.4205 2008.12.05 -
NOD32 3666 2008.12.05 -
Norman 5.80.02 2008.12.04 -
Panda 9.0.0.4 2008.12.04 -
PCTools 4.4.2.0 2008.12.04 -
Prevx1 V2 2008.12.05 -
Rising 21.06.42.00 2008.12.05 -
SecureWeb-Gateway 6.7.6 2008.12.05 -
Sophos 4.36.0 2008.12.05 -
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.05 -
TheHacker 6.3.1.2.176 2008.12.05 -
TrendMicro 8.700.0.1004 2008.12.05 -
VBA32 3.12.8.10 2008.12.05 -
ViRobot 2008.12.5.1502 2008.12.05 -
VirusBuster 4.5.11.0 2008.12.04 -[/CODE]
Additional information
File size: 36864 bytes
MD5...: 592ee0ae2fce5633e5b37186453e79b1

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

File services.exe received on 12.05.2008 12:04:15 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.5.0 2008.12.05 -
[B]AntiVir 7.9.0.41 2008.12.05 TR/Drop.SQH.31[/B]
Authentium 5.1.0.4 2008.12.05 -
[B]Avast 4.8.1281.0 2008.12.04 Win32:Fabot[/B]
AVG 8.0.0.199 2008.12.05 -
[B]BitDefender 7.2 2008.12.05 Trojan.Dropper.SQH
CAT-QuickHeal 10.00 2008.12.05 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.12.05 -
Comodo 682 2008.12.04 -
DrWeb 4.44.0.09170 2008.12.05 -
eSafe 7.0.17.0 2008.12.04 -
eTrust-Vet 31.6.6243 2008.12.04 -
Ewido 4.0 2008.12.04 -
F-Prot 4.4.4.56 2008.12.04 -
F-Secure 8.0.14332.0 2008.12.05 -
Fortinet 3.117.0.0 2008.12.05 -
[B]GData 19 2008.12.05 Trojan.Dropper.SQH[/B]
Ikarus T3.1.1.45.0 2008.12.05 -
K7AntiVirus 7.10.543 2008.12.04 -
Kaspersky 7.0.0.125 2008.12.05 -
McAfee 5454 2008.12.04 -
McAfee+Artemis 5454 2008.12.04 -
Microsoft 1.4205 2008.12.05 -
NOD32 3666 2008.12.05 -
Norman 5.80.02 2008.12.04 -
Panda 9.0.0.4 2008.12.04 -
PCTools 4.4.2.0 2008.12.04 -
Prevx1 V2 2008.12.05 -
Rising 21.06.42.00 2008.12.05 -
[B]SecureWeb-Gateway 6.7.6 2008.12.05 Trojan.Drop.SQH.31[/B]
Sophos 4.36.0 2008.12.05 -
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.05 -
TheHacker 6.3.1.2.176 2008.12.05 -
TrendMicro 8.700.0.1004 2008.12.05 -
VBA32 3.12.8.10 2008.12.05 -
ViRobot 2008.12.5.1502 2008.12.05 -
VirusBuster 4.5.11.0 2008.12.04 -[/CODE]
Additional information
File size: 43008 bytes
MD5...: dc03a966df53d8bba045895a11a18957

[size="1"][color="#666686"][B][I]Добавлено через 1 час 52 минуты[/I][/B][/color][/size]

File runsql.exe svzip.exe received on 12.05.2008 13:49:29 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.5.0 2008.12.05 -
[B]AntiVir 7.9.0.41 2008.12.05 TR/Dropper.Gen[/B]
Authentium 5.1.0.4 2008.12.05 -
[B]Avast 4.8.1281.0 2008.12.04 Win32:Lighty-I
AVG 8.0.0.199 2008.12.05 Win32/Heur[/B]
BitDefender 7.2 2008.12.05 -
CAT-QuickHeal 10.00 2008.12.05 -
ClamAV 0.94.1 2008.12.05 -
Comodo 682 2008.12.04 -
DrWeb 4.44.0.09170 2008.12.05 -
eSafe 7.0.17.0 2008.12.04 -
eTrust-Vet 31.6.6243 2008.12.04 -
Ewido 4.0 2008.12.05 -
F-Prot 4.4.4.56 2008.12.04 -
F-Secure 8.0.14332.0 2008.12.05 -
Fortinet 3.117.0.0 2008.12.05 -
[B]GData 19 2008.12.05 Win32:Lighty-I[/B]
Ikarus T3.1.1.45.0 2008.12.05 -
K7AntiVirus 7.10.543 2008.12.04 -
Kaspersky 7.0.0.125 2008.12.05 -
[B]McAfee 5454 2008.12.04 Olmarik
McAfee+Artemis 5454 2008.12.04 Olmarik
Microsoft 1.4205 2008.12.05 TrojanDownloader:Win32/Renos.FJ
NOD32 3666 2008.12.05 a variant of Win32/Kryptik.CM[/B]
Norman 5.80.02 2008.12.05 -
Panda 9.0.0.4 2008.12.05 -
PCTools 4.4.2.0 2008.12.05 -
[B]Prevx1 V2 2008.12.05 Cloaked Malware[/B]
Rising 21.06.43.00 2008.12.05 -
[B]SecureWeb-Gateway 6.7.6 2008.12.05 Trojan.Dropper.Gen[/B]
Sophos 4.36.0 2008.12.05 -
Sunbelt 3.1.1832.2 2008.12.01 -
[B]Symantec 10 2008.12.05 Trojan.Fakeavalert[/B]
TheHacker 6.3.1.2.176 2008.12.05 -
TrendMicro 8.700.0.1004 2008.12.05 -
VBA32 3.12.8.10 2008.12.05 -
ViRobot 2008.12.5.1502 2008.12.05 -
[B]VirusBuster 4.5.11.0 2008.12.04 Trojan.FakeAlert.Gen!Pac.3[/B][/CODE]
Additional information
File size: 279040 bytes
MD5...: 979c3771126466704cc8ca49bb8bd4ec
07.12.2008, 23:21
Groft

Файл tmp1.tmp получен 2008.12.07 21:13:51 (CET)
Текущий статус: закончено
Результат: 9/38 (23.69%)
Форматированные
Печать результатов [CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.12.6.0 2008.12.06 -
AntiVir 7.9.0.42 2008.12.07 -
Authentium 5.1.0.4 2008.12.06 -
[B]Avast 4.8.1281.0 2008.12.06 Win32:Trojan-gen {Other}
AVG 8.0.0.199 2008.12.06 Downloader.Generic7.AXDR
BitDefender 7.2 2008.12.07 Trojan.Downloader.ConHook.BK
CAT-QuickHeal 10.00 2008.12.06 TrojanDownloader.Cavitate.e[/B]
ClamAV 0.94.1 2008.12.07 -
Comodo 698 2008.12.06 -
DrWeb 4.44.0.09170 2008.12.07 -
eSafe 7.0.17.0 2008.12.07 -
eTrust-Vet 31.6.6246 2008.12.05 -
Ewido 4.0 2008.12.07 -
F-Prot 4.4.4.56 2008.12.04 -
F-Secure 8.0.14332.0 2008.12.07 -
Fortinet 3.117.0.0 2008.12.07 -
[B]GData 19 2008.12.07 Trojan.Downloader.ConHook.BK
Ikarus T3.1.1.45.0 2008.12.07 Trojan-Downloader.Win32.Injecter[/B]
K7AntiVirus 7.10.547 2008.12.06 -
Kaspersky 7.0.0.125 2008.12.07 -
McAfee 5456 2008.12.06 -
McAfee+Artemis 5456 2008.12.06 -
[B]Microsoft 1.4205 2008.12.07 TrojanDownloader:Win32/Cavitate.gen!E
NOD32 3668 2008.12.06 probably a variant of Win32/TrojanDownloader.Agent.NXY[/B]
Norman 5.80.02 2008.12.05 -
Panda 9.0.0.4 2008.12.07 -
PCTools 4.4.2.0 2008.12.06 -
Prevx1 V2 2008.12.07 -
Rising 21.06.62.00 2008.12.07 -
SecureWeb-Gateway 6.7.6 2008.12.07 -
Sophos 4.36.0 2008.12.07 -
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.07 -
TheHacker 6.3.1.2.179 2008.12.06 -
TrendMicro 8.700.0.1004 2008.12.05 -
[B]VBA32 3.12.8.10 2008.12.07 suspected of Downloader.Small.48[/B]
ViRobot 2008.12.6.1504 2008.12.06 -
VirusBuster 4.5.11.0 2008.12.05 -[/CODE]
Дополнительная информация
File size: 34304 bytes
MD5...: d7688fb077e20b86aa73754a52521038
[url]http://www.virustotal.com/ru/analisis/b3abd972edac4bc473817575ac7b18ce[/url]
08.12.2008, 19:57
ISO

Очередной порноинформер
File glwlib.dll received on 12.08.2008 16:31:07 (CET)
Result: [COLOR=red]7[/COLOR]/38 (18.43%)

[code]
Antivirus Version Last Update Result AhnLab-V32008.12.6.02008.12.06-
AntiVir7.9.0.422008.12.08-
Authentium5.1.0.42008.12.08-
[B]Avast4.8.1281.02008.12.08Win32:Hexzone-U
AVG8.0.0.1992008.12.07Adload_r.FF[/B]
BitDefender7.22008.12.07-
CAT-QuickHeal10.002008.12.08-
ClamAV0.94.12008.12.07-
Comodo7082008.12.08-
[B]DrWeb4.44.0.091702008.12.07Trojan.Blackmailer.origine[/B]
Safe7.0.17.02008.12.08-
eTrust-
Vet31.6.62462008.12.05-
Ewido4.02008.12.07-
F-Prot4.4.4.562008.12.04-
[B]F-Secure8.0.14332.02008.12.08Trojan-Ransom.Win32.Hexzone.giz[/B]
Fortinet3.117.0.02008.12.07-
[B]GData192008.12.07Win32:Hexzone-U
IkarusT3.1.1.45.02008.12.08Trojan-Ransom.Win32.Hexzone[/B]
K7AntiVirus7.10.5482008.12.08-
[B]Kaspersky7.0.0.1252008.12.07Trojan-Ransom.Win32.Hexzone.giz[/B]
McAfee54562008.12.06-
McAfee+Artemis54562008.12.06-
Microsoft1.42052008.12.08-
NOD3236702008.12.08-
Norman5.80.022008.12.05-
Panda9.0.0.42008.12.07-
PCTools4.4.2.02008.12.08-
Prevx1V22008.12.08-
Rising21.06.62.002008.12.07-
SecureWeb-
Gateway6.7.62008.12.08-
Sophos4.36.02008.12.07-
Sunbelt3.1.1832.22008.12.01-
Symantec102008.12.07-
TheHacker6.3.1.2.1792008.12.06-
TrendMicro8.700.0.10042008.12.08-
VBA323.12.8.102008.12.07-
ViRobot2008.12.6.15042008.12.06-
VirusBuster4.5.11.02008.12.08-
[/code]

File conmgr.exe received on 12.09.2008 05:44:27 (CET)
Result: 16/38 (42.11%)
[code]
Antivirus Version Last Update Result
AhnLab-V3 2008.12.8.1 2008.12.09 -
[B]AntiVir 7.9.0.43 2008.12.08 TR/Crypt.XPACK.Gen[/B]
Authentium 5.1.0.4 2008.12.08 -
[B]Avast 4.8.1281.0 2008.12.08 Win32:Trojan-gen {Other}[/B]
AVG 8.0.0.199 2008.12.08 -
[B]BitDefender 7.2 2008.12.09 Packer.Krunchy.B
CAT-QuickHeal 10.00 2008.12.09 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.12.09 -
Comodo 711 2008.12.08 -
DrWeb 4.44.0.09170 2008.12.09 -
eSafe 7.0.17.0 2008.12.08 -
eTrust-Vet 31.6.6246 2008.12.05 -
Ewido 4.0 2008.12.08 -
F-Prot 4.4.4.56 2008.12.08 -
[B]F-Secure 8.0.14332.0 2008.12.09 W32/Packed_Krunchy.A
Fortinet 3.117.0.0 2008.12.09 PossibleThreat
GData 19 2008.12.09 Packer.Krunchy.B
Ikarus T3.1.1.45.0 2008.12.08 Packer.Krunchy.B
K7AntiVirus 7.10.548 2008.12.08 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2008.12.09 -
[B]McAfee 5458 2008.12.08 Generic.dx
McAfee+Artemis 5458 2008.12.09 Generic.dx[/B]
Microsoft 1.4205 2008.12.09 -
NOD32 3674 2008.12.09 -
[B]Norman 5.80.02 2008.12.08 W32/Packed_Krunchy.A
Panda 9.0.0.4 2008.12.08 Generic Trojan[/B]
PCTools 4.4.2.0 2008.12.08 -
Prevx1 V2 2008.12.09 -
Rising 21.07.02.00 2008.12.08 -
[B]SecureWeb-Gateway 6.7.6 2008.12.09 Trojan.Crypt.XPACK.Gen
Sophos 4.36.0 2008.12.09 Mal/Generic-A
Sunbelt 3.1.1832.2 2008.12.01 VIPRE.Suspicious[/B]
Symantec 10 2008.12.09 -
TheHacker 6.3.1.2.180 2008.12.09 -
TrendMicro 8.700.0.1004 2008.12.08 -
VBA32 3.12.8.10 2008.12.09 -
ViRobot 2008.12.9.1507 2008.12.09 -
VirusBuster 4.5.11.0 2008.12.08 -
[/code]
09.12.2008, 11:04
ALEX(XX)

File rxzwug.exe received on 12.09.2008 08:29:07 (CET)

[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.8.1 2008.12.09 -
[B]AntiVir 7.9.0.43 2008.12.08 TR/Autoit.FN[/B]
Authentium 5.1.0.4 2008.12.08 -
[B]Avast 4.8.1281.0 2008.12.08 Win32:Trojan-gen {Other}[/B]
AVG 8.0.0.199 2008.12.08 -
[B]BitDefender 7.2 2008.12.09 Trojan.Generic.1175909
CAT-QuickHeal 10.00 2008.12.09 Trojan.Agent.arqp
ClamAV 0.94.1 2008.12.09 Worm.Autorun-1793[/B]
Comodo 713 2008.12.09 -
DrWeb 4.44.0.09170 2008.12.09 -
[B]eSafe 7.0.17.0 2008.12.08 Suspicious File[/B]
eTrust-Vet 31.6.6246 2008.12.05 -
Ewido 4.0 2008.12.08 -
F-Prot 4.4.4.56 2008.12.08 -
[B]F-Secure 8.0.14332.0 2008.12.09 Trojan.Win32.Autoit.fn[/B]
Fortinet 3.117.0.0 2008.12.09 -
[B]GData 19 2008.12.09 Trojan.Generic.1175909
Ikarus T3.1.1.45.0 2008.12.08 Trojan.Win32.Autoit.dt[/B]
K7AntiVirus 7.10.548 2008.12.08 -
[B]Kaspersky 7.0.0.125 2008.12.09 Trojan.Win32.Autoit.fn
McAfee 5458 2008.12.08 W32/Autorun.worm.zf.gen
McAfee+Artemis 5458 2008.12.09 W32/Autorun.worm.zf.gen
Microsoft 1.4205 2008.12.09 Worm:AutoIt/Renocide.gen!A
NOD32 3675 2008.12.09 Win32/Packed.Autoit.Gen
Norman 5.80.02 2008.12.08 W32/Agent.JIIR
Panda 9.0.0.4 2008.12.08 W32/Autoit.AB[/B]
PCTools 4.4.2.0 2008.12.08 -
Prevx1 V2 2008.12.09 -
Rising 21.07.02.00 2008.12.08 -
[B]SecureWeb-Gateway 6.7.6 2008.12.09 Trojan.Autoit.FN[/B]
Sophos 4.36.0 2008.12.09 Sus/Behav-1011
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.09 -
[B]TheHacker 6.3.1.2.180 2008.12.09 Trojan/Autoit.gs[/B]
TrendMicro 8.700.0.1004 2008.12.09 -
VBA32 3.12.8.10 2008.12.09 -
ViRobot 2008.12.9.1507 2008.12.09 -
VirusBuster 4.5.11.0 2008.12.08 -

Additional information
File size: 420320 bytes
MD5...: 0a41d1c04d74329667594d85b054542f
SHA1..: 1b4b46d5804812f3a921e06a4179bd46e05e586a
SHA256: 4bcfb65ca251580266878b92a1c4c01063e765bc5ded930fa19d7c3dc053c577
SHA512: 88f041a876d13ae04e24e3960e8947eeb898f4c3e59cfabcf1a9efc2f79f9d80 ce6554009b497f7c88318c8ab0977f0aaacd28ccf95ff19c6a6598313aa894a5 
ssdeep: 12288:mnNhuBoY8SorxgmA+nlvVluyVsMDCTHEs9K:mPatCg7EP8yqMDOkgK 
PEiD..: -
TrID..: File type identification UPX compressed Win32 Executable (39.5%) Win32 EXE Yoda's Crypter (34.3%) Win32 Executable Generic (11.0%) Win32 Dynamic Link Library (generic) (9.8%) Generic Win/DOS Executable (2.5%)
PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x490490 timedatestamp.....: 0x4850e379 (Thu Jun 12 08:51:05 2008) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 UPX0 0x1000 0x58000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e UPX1 0x59000 0x38000 0x37800 7.93 c8cb0c68e090a662ba2868cc32095c1b .rsrc 0x91000 0x1000 0x600 3.31 d013d2373cc18dfe81eb1acfaa18d88b ( 13 imports ) > KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess > ADVAPI32.dll: RegCloseKey > COMCTL32.dll: ImageList_Create > comdlg32.dll: GetSaveFileNameW > GDI32.dll: LineTo > MPR.dll: WNetUseConnectionW > ole32.dll: CoInitialize > OLEAUT32.dll: - > SHELL32.dll: DragFinish > USER32.dll: GetDC > VERSION.dll: VerQueryValueW > WINMM.dll: timeGetTime > WSOCK32.dll: - ( 0 exports ) 
packers (Kaspersky): PE_Patch.UPX, UPX
packers (F-Prot): UPX[/CODE]

[size="1"][color="#666686"][B][I]Добавлено через 7 минут[/I][/B][/color][/size]

Файл autorun.inf получен 2008.12.09 08:59:40 (CET)

[CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.12.8.1 2008.12.09 -
AntiVir 7.9.0.43 2008.12.09 -
Authentium 5.1.0.4 2008.12.08 -
Avast 4.8.1281.0 2008.12.08 -
[B]AVG 8.0.0.199 2008.12.08 Worm/AutoRun[/B]
BitDefender 7.2 2008.12.09 -
CAT-QuickHeal 10.00 2008.12.09 -
[B]ClamAV 0.94.1 2008.12.09 Worm.Autorun-1792[/B]
Comodo 713 2008.12.09 -
DrWeb 4.44.0.09170 2008.12.09 -
eSafe 7.0.17.0 2008.12.08 -
[B]eTrust-Vet 31.6.6246 2008.12.05 INF/SillyAutorun[/B]
Ewido 4.0 2008.12.08 -
F-Prot 4.4.4.56 2008.12.08 -
[B]F-Secure 8.0.14332.0 2008.12.09 BAT/AutoRun.AE[/B]
Fortinet 3.117.0.0 2008.12.09 -
GData 19 2008.12.09 -
Ikarus T3.1.1.45.0 2008.12.08 -
K7AntiVirus 7.10.548 2008.12.08 -
Kaspersky 7.0.0.125 2008.12.09 -
McAfee 5458 2008.12.08 -
McAfee+Artemis 5458 2008.12.09 -
Microsoft 1.4205 2008.12.09 -
[B]NOD32 3675 2008.12.09 INF/Autorun.gen[/B]
[B]Norman 5.80.02 2008.12.08 BAT/AutoRun.AE[/B]
Panda 9.0.0.4 2008.12.08 -
PCTools 4.4.2.0 2008.12.08 -
Prevx1 V2 2008.12.09 -
Rising 21.07.02.00 2008.12.08 -
SecureWeb-Gateway 6.7.6 2008.12.09 -
Sophos 4.36.0 2008.12.09 W32/Yahlov-A
[B]Sunbelt 3.1.1832.2 2008.12.01 INF.Autorun (v)[/B]
Symantec 10 2008.12.09 -
TheHacker 6.3.1.2.180 2008.12.09 -
[B]TrendMicro 8.700.0.1004 2008.12.09 Mal_Otorun1[/B]
VBA32 3.12.8.10 2008.12.09 -
ViRobot 2008.12.9.1507 2008.12.09 -
[B]VirusBuster 4.5.11.0 2008.12.08 INF.Autorun.Gen[/B]

Дополнительная информация
File size: 329 bytes
MD5...: 75f1ea0c347a2181a360a9304678379c
SHA1..: 24bcea875b855efcaf7d17b8b794506cd1ad9140
SHA256: 7be18c48eb4bcb971925d33d98804acd233d507950044a037bfebfd32757ae76
SHA512: 72c49d94e3d7c2a7ab8cc7556b18c7dac4636934d182d61f132f97cabef75fdf 2dd92b30eda731db98895c366ddf8db2cdde149088fdb4cc4e60098dd5e81ff8 
ssdeep: 6:ic5hu37Kxg7oQq0TMvc3WA8ziQDG243Dqea8XWVLXJZJggTwZew7n:i2uLKm7P Mvc3WA8zfGDKLlggcQw7 
PEiD..: -
TrID..: File type identification Unknown!
PEInfo: -[/CODE]
10.12.2008, 16:55
Shu_b

File ntos.exe received on 12.10.2008 12:28:27 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.10.2 2008.12.10 -
AntiVir 7.9.0.43 2008.12.10 -
Authentium 5.1.0.4 2008.12.10 -
[B]Avast 4.8.1281.0 2008.12.10 Win32:Lighty-J
AVG 8.0.0.199 2008.12.09 SHeur2.FKG
BitDefender 7.2 2008.12.10 Packer.Malware.Lighty.E[/B]
CAT-QuickHeal 10.00 2008.12.10 -
ClamAV 0.94.1 2008.12.10 -
Comodo 718 2008.12.10 -
DrWeb 4.44.0.09170 2008.12.10 -
[B]eSafe 7.0.17.0 2008.12.09 Suspicious File[/B]
eTrust-Vet 31.6.6253 2008.12.10 -
Ewido 4.0 2008.12.09 -
F-Prot 4.4.4.56 2008.12.10 -
F-Secure 8.0.14332.0 2008.12.10 -
Fortinet 3.117.0.0 2008.12.10 -
[B]GData 19 2008.12.10 Packer.Malware.Lighty.E
Ikarus T3.1.1.45.0 2008.12.10 Packer.Malware.Lighty[/B]
K7AntiVirus 7.10.549 2008.12.09 -
Kaspersky 7.0.0.125 2008.12.10 -
McAfee 5459 2008.12.09 -
McAfee+Artemis 5459 2008.12.09 -
[B]Microsoft 1.4205 2008.12.10 TrojanSpy:Win32/Zbot.gen!C[/B]
NOD32 3681 2008.12.10 -
Norman 5.80.02 2008.12.09 -
Panda 9.0.0.4 2008.12.09 -
PCTools 4.4.2.0 2008.12.09 -
Prevx1 V2 2008.12.10 -
Rising 21.07.22.00 2008.12.10 -
SecureWeb-Gateway 6.7.6 2008.12.10 -
[B]Sophos 4.36.0 2008.12.10 Mal/EncPk-EQ[/B]
Sunbelt 3.2.1801.2 2008.12.10 -
[B]Symantec 10 2008.12.10 Trojan.Fakeavalert[/B]
TheHacker 6.3.1.2.182 2008.12.10 -
TrendMicro 8.700.0.1004 2008.12.10 -
VBA32 3.12.8.10 2008.12.09 -
ViRobot 2008.12.10.1511 2008.12.10 -
VirusBuster 4.5.11.0 2008.12.09 -[/CODE]
Additional information
File size: 177664 bytes
MD5...: faa00352c59d47f98ddfb742f563480d

[size="1"][color="#666686"][B][I]Добавлено через 16 минут[/I][/B][/color][/size]

File twext.exe received on 12.10.2008 12:50:56 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.10.2 2008.12.10 -
AntiVir 7.9.0.43 2008.12.10 -
Authentium 5.1.0.4 2008.12.10 -
[B]Avast 4.8.1281.0 2008.12.10 Win32:Zbot-AVH[/B]
AVG 8.0.0.199 2008.12.10 -
BitDefender 7.2 2008.12.10 -
CAT-QuickHeal 10.00 2008.12.10 -
ClamAV 0.94.1 2008.12.10 -
Comodo 718 2008.12.10 -
[B]DrWeb 4.44.0.09170 2008.12.10 Trojan.PWS.Panda.31[/B]
eSafe 7.0.17.0 2008.12.09 -
eTrust-Vet 31.6.6252 2008.12.09 -
Ewido 4.0 2008.12.09 -
F-Prot 4.4.4.56 2008.12.10 -
[B]F-Secure 8.0.14332.0 2008.12.10 Trojan-Spy.Win32.Zbot.hrc[/B]
Fortinet 3.117.0.0 2008.12.10 -
[B]GData 19 2008.12.10 Win32:Zbot-AVH
Ikarus T3.1.1.45.0 2008.12.10 Trojan-Spy.Win32.Zbot[/B]
K7AntiVirus 7.10.549 2008.12.09 -
[B]Kaspersky 7.0.0.125 2008.12.10 Trojan-Spy.Win32.Zbot.hrc[/B]
McAfee 5459 2008.12.09 -
[B]McAfee+Artemis 5459 2008.12.09 Generic!Artemis[/B]
Microsoft 1.4205 2008.12.10 -
NOD32 3681 2008.12.10 -
[B]Norman 5.80.02 2008.12.09 W32/Malware.EQSW[/B]
Panda 9.0.0.4 2008.12.09 -
PCTools 4.4.2.0 2008.12.10 -
Prevx1 V2 2008.12.10 -
Rising 21.07.22.00 2008.12.10 -
SecureWeb-Gateway 6.7.6 2008.12.10 -
Sophos 4.36.0 2008.12.10 -
Sunbelt 3.2.1801.2 2008.12.10 -
Symantec 10 2008.12.10 -
TheHacker 6.3.1.2.182 2008.12.10 -
TrendMicro 8.700.0.1004 2008.12.10 -
[B]VBA32 3.12.8.10 2008.12.09 Trojan-Spy.Win32.Zbot.hme[/B]
ViRobot 2008.12.10.1511 2008.12.10 -
VirusBuster 4.5.11.0 2008.12.09 -[/CODE]
Additional information
File size: 588288 bytes
MD5...: 6c6802f0928c25ec068fc8cf33c4c9ba

[size="1"][color="#666686"][B][I]Добавлено через 1 час 28 минут[/I][/B][/color][/size]

File msqpdxmqltoity.sys received on 12.10.2008 13:47:55 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.10.2 2008.12.10 -
AntiVir 7.9.0.43 2008.12.10 -
Authentium 5.1.0.4 2008.12.10 -
Avast 4.8.1281.0 2008.12.10 -
AVG 8.0.0.199 2008.12.10 -
BitDefender 7.2 2008.12.10 -
CAT-QuickHeal 10.00 2008.12.10 -
ClamAV 0.94.1 2008.12.10 -
Comodo 718 2008.12.10 -
DrWeb 4.44.0.09170 2008.12.10 -
[B]eSafe 7.0.17.0 2008.12.09 Suspicious File[/B]
eTrust-Vet 31.6.6253 2008.12.10 -
Ewido 4.0 2008.12.10 -
F-Prot 4.4.4.56 2008.12.10 -
F-Secure 8.0.14332.0 2008.12.10 -
Fortinet 3.117.0.0 2008.12.10 -
GData 19 2008.12.10 -
Ikarus T3.1.1.45.0 2008.12.10 -
K7AntiVirus 7.10.549 2008.12.09 -
Kaspersky 7.0.0.125 2008.12.10 -
McAfee 5459 2008.12.09 -
McAfee+Artemis 5459 2008.12.09 -
Microsoft 1.4205 2008.12.10 -
NOD32 3681 2008.12.10 -
Norman 5.80.02 2008.12.09 -
Panda 9.0.0.4 2008.12.09 -
PCTools 4.4.2.0 2008.12.10 -
[B]Prevx1 V2 2008.12.10 Malicious Software[/B]
Rising 21.07.22.00 2008.12.10 -
SecureWeb-Gateway 6.7.6 2008.12.10 -
Sophos 4.36.0 2008.12.10 -
Sunbelt 3.2.1801.2 2008.12.10 -
Symantec 10 2008.12.10 -
TheHacker 6.3.1.2.182 2008.12.10 -
TrendMicro 8.700.0.1004 2008.12.10 -
VBA32 3.12.8.10 2008.12.09 -
ViRobot 2008.12.10.1511 2008.12.10 -
VirusBuster 4.5.11.0 2008.12.09 -[/CODE]
Additional information
File size: 62464 bytes
MD5...: 7d0c76addaa22a5cb5b3407d5a78b211

[size="1"][color="#666686"][B][I]Добавлено через 32 минуты[/I][/B][/color][/size]

File nttest.sys received on 12.10.2008 14:49:14 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.12.10.2 2008.12.10 -
[B]AntiVir 7.9.0.43 2008.12.10 TR/Spy.Agent.sad[/B]
Authentium 5.1.0.4 2008.12.10 -
[B]Avast 4.8.1281.0 2008.12.10 Win32:Rootkit-gen[/B]
AVG 8.0.0.199 2008.12.10 -
BitDefender 7.2 2008.12.10 -
CAT-QuickHeal 10.00 2008.12.10 -
ClamAV 0.94.1 2008.12.10 -
Comodo 718 2008.12.10 -
DrWeb 4.44.0.09170 2008.12.10 -
eSafe 7.0.17.0 2008.12.10 -
eTrust-Vet 31.6.6253 2008.12.10 -
Ewido 4.0 2008.12.10 -
F-Prot 4.4.4.56 2008.12.10 -
Fortinet 3.117.0.0 2008.12.10 -
[B]GData 19 2008.12.10 Win32:Rootkit-gen[/B]
Ikarus T3.1.1.45.0 2008.12.10 -
K7AntiVirus 7.10.550 2008.12.10 -
[B]Kaspersky 7.0.0.125 2008.12.10 Rootkit.Win32.Agent.fiy[/B]
McAfee 5459 2008.12.09 -
McAfee+Artemis 5459 2008.12.09 -
Microsoft 1.4205 2008.12.10 -
NOD32 3681 2008.12.10 -
Norman 5.80.02 2008.12.10 -
Panda 9.0.0.4 2008.12.09 -
PCTools 4.4.2.0 2008.12.10 -
Prevx1 V2 2008.12.10 -
Rising 21.07.22.00 2008.12.10 -
[B]SecureWeb-Gateway 6.7.6 2008.12.10 Trojan.Spy.Agent.sad[/B]
Sophos 4.36.0 2008.12.10 -
Sunbelt 3.2.1801.2 2008.12.10 -
Symantec 10 2008.12.10 -
TheHacker 6.3.1.2.182 2008.12.10 -
TrendMicro 8.700.0.1004 2008.12.10 -
VBA32 3.12.8.10 2008.12.09 -
ViRobot 2008.12.10.1511 2008.12.10 -
VirusBuster 4.5.11.0 2008.12.09 -[/CODE]
Additional information
File size: 33792 bytes
MD5...: ecaa2fbb9a7ea227cce882ffe31351b4
10.12.2008, 18:07
PavelA

Тема:[url]http://virusinfo.info/showthread.php?t=35469[/url]

Src=\??\C:\WINDOWS\system32\drivers\ethvfbgq.sys

Файл bcqr00004.dta получен 2008.12.10 16:01:05 (CET)[CODE]Антивирус Версия Обновление Результат
[B]AhnLab-V3 2008.12.10.2 2008.12.10 Win-Trojan/Agent.137792 [/B]
[B]AntiVir 7.9.0.43 2008.12.10 TR/Rootkit.Gen [/B]
Authentium 5.1.0.4 2008.12.10 -
Avast 4.8.1281.0 2008.12.10 -
[B]AVG 8.0.0.199 2008.12.10 Win32/Rustock.G [/B]
BitDefender 7.2 2008.12.10 -
[B]CAT-QuickHeal 10.00 2008.12.10 Rootkit.Agent.epv [/B]
ClamAV 0.94.1 2008.12.10 -
Comodo 718 2008.12.10 -
DrWeb 4.44.0.09170 2008.12.10 -
eSafe 7.0.17.0 2008.12.10 -
eTrust-Vet 31.6.6253 2008.12.10 -
Ewido 4.0 2008.12.10 -
F-Prot 4.4.4.56 2008.12.10 -
F-Secure 8.0.14332.0 2008.12.10 -
Fortinet 3.117.0.0 2008.12.10 -
GData 19 2008.12.10 -
Ikarus T3.1.1.45.0 2008.12.10 -
K7AntiVirus 7.10.550 2008.12.10 -
Kaspersky 7.0.0.125 2008.12.10 -
McAfee 5459 2008.12.09 -
McAfee+Artemis 5459
[B]Microsoft 1.4205 2008.12.10 Spammer:Win32/Rlsloup.B [/B]
NOD32 3682 2008.12.10 -
Norman 5.80.02 2008.12.10 -
Panda 9.0.0.4 2008.12.09 -
PCTools 4.4.2.0 2008.12.10 -
Prevx1 V2 2008.12.10 -
Rising 21.07.22.00 2008.12.10 -
[B]SecureWeb-Gateway 6.7.6 2008.12.10 Trojan.Rootkit.Gen [/B]
Sophos 4.36.0 2008.12.10 -
Sunbelt 3.2.1801.2 2008.12.10 -
Symantec 10 2008.12.10 -
TheHacker 6.3.1.2.182 2008.12.10 -
TrendMicro 8.700.0.1004 2008.12.10 -
[B]VBA32 3.12.8.10 2008.12.09 Rootkit.Win32.Agent.epv
ViRobot 2008.12.10.1511 2008.12.10 Trojan.Win32.RT-Agent.137792 [/B]
VirusBuster 4.5.11.0 2008.12.10
[/CODE]
Фалса или действительно Русток пожаловал в "Помогите!"
11.12.2008, 21:33
Синауридзе Александр

Файл angel.exe получен 2008.12.11 19:21:58 (CET)

[QUOTE]AhnLab-V3 2008.12.12.0 2008.12.11 -
AntiVir 7.9.0.43 2008.12.11 -
Authentium 5.1.0.4 2008.12.11 -
Avast 4.8.1281.0 2008.12.10 -
AVG 8.0.0.199 2008.12.11 -
BitDefender 7.2 2008.12.11 -
CAT-QuickHeal 10.00 2008.12.11 -
ClamAV 0.94.1 2008.12.11 -
Comodo 733 2008.12.11 -
[B]DrWeb 4.44.0.09170 2008.12.11 BackDoor.Zany.17[/B]
eSafe 7.0.17.0 2008.12.11 -
eTrust-Vet 31.6.6256 2008.12.11 -
Ewido 4.0 2008.12.11 -
F-Prot 4.4.4.56 2008.12.11 -
[B]F-Secure 8.0.14332.0 2008.12.11 Trojan:W32/Reggol.A[/B]
Fortinet 3.117.0.0 2008.12.11 -
GData 19 2008.12.11 -
Ikarus T3.1.1.45.0 2008.12.11 -
K7AntiVirus 7.10.551 2008.12.11 -
Kaspersky 7.0.0.125 2008.12.11 -
McAfee 5460 2008.12.10 -
[B]McAfee+Artemis 5460 2008.12.10 Generic!Artemis[/B]
Microsoft 1.4205 2008.12.10 -
NOD32 3684 2008.12.11 -
Norman 5.80.02 2008.12.11 -
Panda 9.0.0.4 2008.12.11 -
PCTools 4.4.2.0 2008.12.11 -
Prevx1 V2 2008.12.11 -
Rising 21.07.32.00 2008.12.11 -
SecureWeb-Gateway 6.7.6 2008.12.11 -
Sophos 4.36.0 2008.12.11 -
Sunbelt 3.2.1801.2 2008.12.11 -
Symantec 10 2008.12.11 -
TheHacker 6.3.1.2.183 2008.12.11 -
TrendMicro 8.700.0.1004 2008.12.11 -
[B]VBA32 3.12.8.10 2008.12.11 BackDoor.Zany.17 [/B]
ViRobot 2008.12.11.1513 2008.12.11 -
VirusBuster 4.5.11.0 2008.12.11 -[/QUOTE]

Дополнительная информация
File size: 747008 bytes
MD5...: c0a16d7987903267becffbf82f82a99b
15.12.2008, 13:25
AlexGOMEL

Файл AVZ00002.DTA получен [B]2008.09.22[/B] 06:21:59 (CET)

[color=#CC0000]moderated by Shu_b[/color]: Сентябрьское исследование неинтересно.
15.12.2008, 14:05
ISO

File adsldpcx.exe received on 12.15.2008 11:33:52 (CET)
[CODE]
AhnLab-V3 2008.12.12.2 2008.12.15 -
AntiVir 7.9.0.45 2008.12.15 -
Authentium 5.1.0.4 2008.12.14 -
Avast 4.8.1281.0 2008.12.14 -
AVG 8.0.0.199 2008.12.14 -
BitDefender 7.2 2008.12.15 -
CAT-QuickHeal 10.00 2008.12.15 -
ClamAV 0.94.1 2008.12.15 -
Comodo 754 2008.12.14 -
DrWeb 4.44.0.09170 2008.12.15 -
[B]eSafe 7.0.17.0 2008.12.14 Suspicious File[/B]
eTrust-Vet 31.6.6258 2008.12.12 -
Ewido 4.0 2008.12.14 -
F-Prot 4.4.4.56 2008.12.14 -
F-Secure 8.0.14332.0 2008.12.15 -
Fortinet 3.117.0.0 2008.12.14 -
GData 19 2008.12.15 -
[B]Ikarus T3.1.1.45.0 2008.12.15 Trojan-Clicker.Win32.Klik[/B]
K7AntiVirus 7.10.553 2008.12.13 -
Kaspersky 7.0.0.125 2008.12.15 -
[B]McAfee 5464 2008.12.14 Generic FakeAlert.f
McAfee+Artemis 5464 2008.12.14 Generic FakeAlert.f
Microsoft 1.4205 2008.12.15 VirTool:Win32/Obfuscator.DO[/B]
NOD32 3691 2008.12.14 -
Norman 5.80.02 2008.12.12 -
Panda 9.0.0.4 2008.12.14 -
PCTools 4.4.2.0 2008.12.14 -
[B]Prevx1 V2 2008.12.15 Cloaked Malware[/B]
Rising 21.08.01.00 2008.12.15 -
SecureWeb-Gateway 6.7.6 2008.12.15 -
[B]Sophos 4.36.0 2008.12.15 Mal/EncPk-EQ[/B]
Sunbelt 3.2.1801.2 2008.12.11 -
[B]Symantec 10 2008.12.15 Trojan.Fakeavalert[/B]
TheHacker 6.3.1.4.188 2008.12.14 -
TrendMicro 8.700.0.1004 2008.12.15 -
VBA32 3.12.8.10 2008.12.14 -
ViRobot 2008.12.15.1518 2008.12.15 -
[B]VirusBuster 4.5.11.0 2008.12.14 Trojan.FakeAlert.Gen!Pac.3[/B]
[/CODE]

File wndutl32.dll received on 12.15.2008 11:46:11 (CET)
[CODE]
Antivirus Version Last Update Result
AhnLab-V3 2008.12.12.2 2008.12.15 -
AntiVir 7.9.0.45 2008.12.15 -
Authentium 5.1.0.4 2008.12.14 -
Avast 4.8.1281.0 2008.12.14 -
AVG 8.0.0.199 2008.12.14 -
[B]BitDefender 7.2 2008.12.15 Packer.Malware.Lighty.F[/B]
CAT-QuickHeal 10.00 2008.12.15 -
ClamAV 0.94.1 2008.12.15 -
Comodo 754 2008.12.14 -
DrWeb 4.44.0.09170 2008.12.15 -
[B]eSafe 7.0.17.0 2008.12.14 Suspicious File[/B]
eTrust-Vet 31.6.6261 2008.12.15 -
Ewido 4.0 2008.12.14 -
F-Prot 4.4.4.56 2008.12.14 -
F-Secure 8.0.14332.0 2008.12.15 -
Fortinet 3.117.0.0 2008.12.14 -
[B]GData 19 2008.12.15 Packer.Malware.Lighty.F
Ikarus T3.1.1.45.0 2008.12.15 Trojan-Clicker.Win32.Klik[/B]
K7AntiVirus 7.10.553 2008.12.13 -
Kaspersky 7.0.0.125 2008.12.15 -
McAfee 5464 2008.12.14 -
McAfee+Artemis 5464 2008.12.14 -
[B]Microsoft 1.4205 2008.12.15 TrojanDownloader:Win32/Renos[/B]
NOD32 3691 2008.12.14 -
Norman 5.80.02 2008.12.12 -
Panda 9.0.0.4 2008.12.14 -
PCTools 4.4.2.0 2008.12.14 -
[B]Prevx1 V2 2008.12.15 Malicious Software[/B]
Rising 21.08.01.00 2008.12.15 -
SecureWeb-Gateway 6.7.6 2008.12.15 -
[B]Sophos 4.36.0 2008.12.15 Mal/EncPk-EQ[/B]
Sunbelt 3.2.1801.2 2008.12.10 -
[B]Symantec 10 2008.12.15 Trojan.Fakeavalert[/B]
TheHacker 6.3.1.4.188 2008.12.14 -
TrendMicro 8.700.0.1004 2008.12.15 -
VBA32 3.12.8.10 2008.12.14 -
ViRobot 2008.12.15.1518 2008.12.15 -
[B]VirusBuster 4.5.11.0 2008.12.14 Trojan.FakeAlert.Gen!Pac.3[/B]
[/CODE]

File a.exe received on 12.15.2008 11:50:48 (CET)
[CODE]
AhnLab-V3 2008.12.12.2 2008.12.15 -
[B]AntiVir 7.9.0.45 2008.12.15 TR/Dropper.Gen[/B]
Authentium 5.1.0.4 2008.12.14 -
Avast 4.8.1281.0 2008.12.15 -
AVG 8.0.0.199 2008.12.14 -
BitDefender 7.2 2008.12.15 -
CAT-QuickHeal 10.00 2008.12.15 -
ClamAV 0.94.1 2008.12.15 -
Comodo 754 2008.12.14 -
DrWeb 4.44.0.09170 2008.12.15 -
[B]eSafe 7.0.17.0 2008.12.14 Suspicious File[/B]
eTrust-Vet 31.6.6261 2008.12.15 -
Ewido 4.0 2008.12.14 -
F-Prot 4.4.4.56 2008.12.14 -
F-Secure 8.0.14332.0 2008.12.15 -
Fortinet 3.117.0.0 2008.12.14 -
GData 19 2008.12.15 -
[B]Ikarus T3.1.1.45.0 2008.12.15 Trojan-Clicker.Win32.Klik[/B]
K7AntiVirus 7.10.553 2008.12.13 -
Kaspersky 7.0.0.125 2008.12.15 -
[B]McAfee 5464 2008.12.14 Generic FakeAlert.f
McAfee+Artemis 5464 2008.12.14 Generic FakeAlert.f
Microsoft 1.4205 2008.12.15 TrojanDropper:Win32/Rooter.B[/B]
NOD32 3691 2008.12.14 -
Norman 5.80.02 2008.12.12 -
Panda 9.0.0.4 2008.12.14 -
PCTools 4.4.2.0 2008.12.14 -
[B]Prevx1 V2 2008.12.15 Malicious Software[/B]
Rising 21.08.01.00 2008.12.15 -
[B]SecureWeb-Gateway 6.7.6 2008.12.15 Trojan.Dropper.Gen
Sophos 4.36.0 2008.12.15 Mal/EncPk-EQ[/B]
Sunbelt 3.2.1801.2 2008.12.10 -
[B]Symantec 10 2008.12.15 Trojan.Fakeavalert[/B]
TheHacker 6.3.1.4.188 2008.12.14 -
TrendMicro 8.700.0.1004 2008.12.15 -
VBA32 3.12.8.10 2008.12.14 -
ViRobot 2008.12.15.1518 2008.12.15 -
VirusBuster 4.5.11.0 2008.12.14 -
[/CODE]
15.12.2008, 16:20
PavelA

Тема:[url]http://virusinfo.info/showthread.php?t=35666[/url]
Ответ из ЛК: smss.exe_ - Trojan-Downloader.Win32.Small.ahfw (свежий)

Файл avz00002.dta получен 2008.12.15 10:22:32 (CET)[CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.12.12.2 2008.12.15 -
[B]AntiVir 7.9.0.45 2008.12.15 TR/Crypt.XPACK.Gen
Authentium 5.1.0.4 2008.12.14 W32/Heuristic-210!Eldorado [/B]
Avast 4.8.1281.0 2008.12.14 -
[B]AVG 8.0.0.199 2008.12.14 Win32/Heur [/B]
BitDefender 7.2 2008.12.15 -
CAT-QuickHeal 10.00 2008.12.15 -
[B]ClamAV 0.94.1 2008.12.15 Trojan.Delf-6581 [/B]
Comodo 754 2008.12.14 -
DrWeb 4.44.0.09170 2008.12.15 -
[B]eSafe 7.0.17.0 2008.12.14 Suspicious File [/B]
eTrust-Vet 31.6.6258 2008.12.12 -
Ewido 4.0 2008.12.14 -
[B]F-Prot 4.4.4.56 2008.12.14 W32/Heuristic-210!Eldorado
F-Secure 8.0.14332.0 2008.12.15 Suspicious:W32/Malware!Gemini [/B]
Fortinet 3.117.0.0 2008.12.14 -
GData 19 2008.12.15 -
Ikarus T3.1.1.45.0 2008.12.15 -
K7AntiVirus 7.10.553 2008.12.13 -
Kaspersky 7.0.0.125 2008.12.15 -
[B]McAfee 5464 2008.12.14 New Malware.ac
McAfee+Artemis 5464 2008.12.14 New Malware.ac
Microsoft 1.4205 2008.12.15 TrojanDownloader:Win32/VB.EE
NOD32 3691 2008.12.14 probably unknown NewHeur_PE [/B]
Norman 5.80.02 2008.12.12 -
[B]Panda 9.0.0.4 2008.12.14 Suspicious file [/B]
PCTools 4.4.2.0 2008.12.14 -
[B]Prevx1 V2 2008.12.15 Malicious Software [/B]
Rising 21.08.01.00 2008.12.15 -
[B]SecureWeb-Gateway 6.7.6 2008.12.15 Trojan.Crypt.XPACK.Gen
Sophos 4.36.0 2008.12.15 Mal/EncPk-EW [/B]
Sunbelt 3.2.1801.2 2008.12.11 -
Symantec 10 2008.12.15 -
TheHacker 6.3.1.4.188 2008.12.14 -
TrendMicro 8.700.0.1004 2008.12.15 -
VBA32 3.12.8.10 2008.12.14 -
ViRobot 2008.12.15.1517 2008.12.15 -
VirusBuster 4.5.11.0 2008.12.14 - [/CODE]

Дополнительная информация
File size: 13312 bytes
MD5...: 64fabb64d37b0fa3d6852b6a2bd9fed1

Показывать 40 сообщений этой темы на одной странице

Текущее время: 04:32. Часовой пояс GMT +3.

Page generated in 0.01602 seconds with 10 queries