Исследование антивирусов 6

**wise-wistful** · 05.04.2008, 02:01

Файл vdmdracp.exe получен 2008.04.04 19:45:38 (CET)
Текущий статус: закончено
Результат: 11/32 (34.38%)

Код:

Антивирус	Версия	Обновление	Результат
AhnLab-V3	2008.4.4.1	2008.04.04	-
AntiVir	7.6.0.81	2008.04.04	-
Authentium	4.93.8	2008.04.03	-
Avast	4.7.1098.0	2008.04.04	-
AVG	7.5.0.516	2008.04.04	-
BitDefender	7.2	2008.04.04	-
CAT-QuickHeal	9.50	2008.04.04	I-Worm.Warezov.vs
ClamAV	0.92.1	2008.04.04	-
DrWeb	4.44.0.09170	2008.04.04	-
eSafe	7.0.15.0	2008.04.01	-
eTrust-Vet	31.3.5670	2008.04.04	-
Ewido	4.0	2008.04.04	-
F-Prot	4.4.2.54	2008.04.04	W32/Heuristic-162!Eldorado
F-Secure	6.70.13260.0	2008.04.04	W32/Viking.EQ
FileAdvisor	1	2008.04.04	-
Fortinet	3.14.0.0	2008.04.04	-
Ikarus	T3.1.1.20.0	2008.04.04	Backdoor.Win32.Rbot.AJU
Kaspersky	7.0.0.125	2008.04.04	-
McAfee	5267	2008.04.04	New Malware.n
Microsoft	1.3408	2008.04.03	-
NOD32v2	3003	2008.04.04	-
Norman	5.80.02	2008.04.04	W32/Viking.EQ
Panda	9.0.0.4	2008.04.04	Suspicious file
Prevx1	V2	2008.04.04	-
Rising	20.38.60.00	2008.04.03	-
Sophos	4.28.0	2008.04.04	Mal/EncPk-BW
Sunbelt	3.0.978.0	2008.03.18	VIPRE.Suspicious
Symantec	10	2008.04.04	-
TheHacker	6.2.92.264	2008.04.04	W32/Behav-Heuristic-060
VBA32	3.12.6.3	2008.03.25	-
VirusBuster	4.3.26:9	2008.04.04	-
Webwasher-Gateway	6.6.2	2008.04.04	Win32.Malware.gen#Upack (suspicious)

Дополнительная информация
File size: 92784 bytes
MD5...: 4bbcb7dcac4cc01ceeeb90c019ca1f33
SHA1..: 6e4414a151e28fd9a4578dd011cfc216ec95a970

Файл mciawinr.dll получен 2008.04.04 19:48:32 (CET)
Текущий статус: закончено
Результат: 16/32 (50%)

Код:

Антивирус	Версия	Обновление	Результат
AhnLab-V3	2008.4.4.1	2008.04.04	Win32/Stration.worm.Gen
AntiVir	7.6.0.81	2008.04.04	Worm/Warezov.PZ.2
Authentium	4.93.8	2008.04.03	-
Avast	4.7.1098.0	2008.04.04	Win32:Warezov-BVH
AVG	7.5.0.516	2008.04.04	I-Worm/Stration
BitDefender	7.2	2008.04.04	Worm.Warezov.PZ
CAT-QuickHeal	9.50	2008.04.04	Worm.Warezov.pz
ClamAV	0.92.1	2008.04.04	-
DrWeb	4.44.0.09170	2008.04.04	-
eSafe	7.0.15.0	2008.04.01	-
eTrust-Vet	31.3.5670	2008.04.04	-
Ewido	4.0	2008.04.04	-
F-Prot	4.4.2.54	2008.04.04	-
F-Secure	6.70.13260.0	2008.04.04	-
FileAdvisor	1	2008.04.04	-
Fortinet	3.14.0.0	2008.04.04	W32/Stration.3@mm
Ikarus	T3.1.1.20.0	2008.04.04	Virus.Win32.Warezov.BVH
Kaspersky	7.0.0.125	2008.04.04	-
McAfee	5267	2008.04.04	W32/Stration.gen@MM
Microsoft	1.3408	2008.04.03	Trojan:Win32/Stration.F!dll
NOD32v2	3003	2008.04.04	-
Norman	5.80.02	2008.04.04	W32/Stration.JCV
Panda	9.0.0.4	2008.04.04	-
Prevx1	V2	2008.04.04	I-Worm/Stration
Rising	20.38.60.00	2008.04.03	-
Sophos	4.28.0	2008.04.04	W32/Strati-Gen
Sunbelt	3.0.978.0	2008.03.18	Worm.Warezov.PZ
Symantec	10	2008.04.04	W32.Stration.CX@mm
TheHacker	6.2.92.264	2008.04.04	-
VBA32	3.12.6.3	2008.03.25	-
VirusBuster	4.3.26:9	2008.04.04	-
Webwasher-Gateway	6.6.2	2008.04.04	Worm.Warezov.PZ.2

Дополнительная информация
File size: 32768 bytes
MD5...: c569301e995cdf7bbdceaeacdf5405b0
SHA1..: 0a5e1e8b467b5a21cb823a9c15adf561a06310bc

Добавлено через 3 часа 42 минуты

Файл ikkfwwjq.dll получен 2008.04.04 23:39:35 (CET)
Текущий статус: закончено
Результат: 12/32 (37.5%)

Код:

Антивирус	Версия	Обновление	Результат
AhnLab-V3	2008.4.4.1	2008.04.04	-
AntiVir	7.6.0.81	2008.04.04	TR/Vundo.Gen
Authentium	4.93.8	2008.04.04	-
Avast	4.7.1098.0	2008.04.04	Win32:TratBHO
AVG	7.5.0.516	2008.04.04	Lop
BitDefender	7.2	2008.04.04	-
CAT-QuickHeal	9.50	2008.04.04	-
ClamAV	0.92.1	2008.04.04	-
DrWeb	4.44.0.09170	2008.04.04	-
eSafe	7.0.15.0	2008.04.01	Suspicious File
eTrust-Vet	31.3.5670	2008.04.04	-
Ewido	4.0	2008.04.04	-
F-Prot	4.4.2.54	2008.04.04	W32/Virtumonde.G.gen!Eldorado
F-Secure	6.70.13260.0	2008.04.04	-
FileAdvisor	1	2008.04.04	-
Fortinet	3.14.0.0	2008.04.04	-
Ikarus	T3.1.1.20	2008.04.04	-
Kaspersky	7.0.0.125	2008.04.04	-
McAfee	5267	2008.04.04	-
Microsoft	1.3408	2008.04.03	Trojan:Win32/Vundo.gen!D
NOD32v2	3003	2008.04.04	-
Norman	5.80.02	2008.04.04	Vundo.gen145
Panda	9.0.0.4	2008.04.04	Suspicious file
Prevx1	V2	2008.04.04	-
Rising	20.38.60.00	2008.04.03	AdWare.Win32.Virtumonde.ggu
Sophos	4.28.0	2008.04.04	Troj/Virtum-Gen
Sunbelt	3.0.978.0	2008.03.18	-
Symantec	10	2008.04.04	-
TheHacker	6.2.92.265	2008.04.04	-
VBA32	3.12.6.3	2008.03.25	-
VirusBuster	4.3.26:9	2008.04.04	Adware.Vundo.Gen!Pac.18
Webwasher-Gateway	6.6.2	2008.04.04	Trojan.Vundo.Gen

Дополнительная информация
File size: 85056 bytes
MD5...: bb010e8aaef035aeeac9eb794bba9db8
SHA1..: 120e8b51a5a485ada698e671fa07d947b09280f1

Файл osntlurh.dll получен 2008.04.04 23:40:39 (CET)
Текущий статус: закончено
Результат: 8/32 (25%)

Код:

Антивирус	Версия	Обновление	Результат
AhnLab-V3	2008.4.4.1	2008.04.04	-
AntiVir	7.6.0.81	2008.04.04	TR/Vundo.Gen
Authentium	4.93.8	2008.04.04	-
Avast	4.7.1098.0	2008.04.04	-
AVG	7.5.0.516	2008.04.04	-
BitDefender	7.2	2008.04.04	-
CAT-QuickHeal	9.50	2008.04.04	-
ClamAV	0.92.1	2008.04.04	-
DrWeb	4.44.0.09170	2008.04.04	-
eSafe	7.0.15.0	2008.04.01	Suspicious File
eTrust-Vet	31.3.5670	2008.04.04	-
Ewido	4.0	2008.04.04	-
F-Prot	4.4.2.54	2008.04.04	W32/Virtumonde.G.gen!Eldorado
F-Secure	6.70.13260.0	2008.04.04	-
FileAdvisor	1	2008.04.04	-
Fortinet	3.14.0.0	2008.04.04	-
Ikarus	T3.1.1.20	2008.04.04	-
Kaspersky	7.0.0.125	2008.04.04	-
McAfee	5267	2008.04.04	-
Microsoft	1.3408	2008.04.03	Trojan:Win32/Vundo.gen!D
NOD32v2	3003	2008.04.04	-
Norman	5.80.02	2008.04.04	-
Panda	9.0.0.4	2008.04.04	Suspicious file
Prevx1	V2	2008.04.04	-
Rising	20.38.60.00	2008.04.03	-
Sophos	4.28.0	2008.04.04	Sus/Behav-200
Sunbelt	3.0.978.0	2008.03.18	-
Symantec	10	2008.04.04	-
TheHacker	6.2.92.265	2008.04.04	-
VBA32	3.12.6.3	2008.03.25	-
VirusBuster	4.3.26:9	2008.04.04	Adware.Vundo.Gen!Pac.18
Webwasher-Gateway	6.6.2	2008.04.04	Trojan.Vundo.Gen

Дополнительная информация
File size: 87104 bytes
MD5...: 3702ec0ff8d47a9cebe6a96312235d02
SHA1..: 49c1ce6871a5a0276179bc8df1c08e29271b6398

Файл avz00005.dta получен 2008.04.04 23:45:31 (CET)
Текущий статус: закончено
Результат: 12/32 (37.5%)

Код:

Антивирус	Версия	Обновление	Результат
AhnLab-V3	2008.4.4.1	2008.04.04	-
AntiVir	7.6.0.81	2008.04.04	TR/Vundo.Gen
Authentium	4.93.8	2008.04.04	-
Avast	4.7.1098.0	2008.04.04	Win32:TratBHO
AVG	7.5.0.516	2008.04.04	-
BitDefender	7.2	2008.04.04	Trojan.Vundo.EFK
CAT-QuickHeal	9.50	2008.04.04	-
ClamAV	None	2008.04.04	-
DrWeb	4.44.0.09170	2008.04.04	-
eSafe	7.0.15.0	2008.04.01	-
eTrust-Vet	31.3.5672	2008.04.04	Win32/Vundo.VT
Ewido	4.0	2008.04.04	-
F-Prot	4.4.2.54	2008.04.04	W32/Virtumonde.G.gen!Eldorado
F-Secure	6.70.13260.0	2008.04.04	-
FileAdvisor	1	2008.04.04	-
Fortinet	3.14.0.0	2008.04.04	-
Ikarus	T3.1.1.20	2008.04.04	-
Kaspersky	7.0.0.125	2008.04.04	-
McAfee	5267	2008.04.04	Vundo
Microsoft	1.3408	2008.04.03	Trojan:Win32/Vundo.gen!D
NOD32v2	3003	2008.04.04	-
Norman	5.80.02	2008.04.04	Vundo.gen148
Panda	9.0.0.4	2008.04.04	Spyware/Virtumonde
Prevx1	V2	2008.04.04	-
Rising	20.38.60.00	2008.04.03	AdWare.Win32.Virtumonde.gjw
Sophos	4.28.0	2008.04.04	Troj/Virtum-Gen
Sunbelt	3.0.978.0	2008.03.18	-
Symantec	10	2008.04.04	-
TheHacker	6.2.92.265	2008.04.04	-
VBA32	3.12.6.3	2008.03.25	-
VirusBuster	4.3.26:9	2008.04.04	-
Webwasher-Gateway	6.6.2	2008.04.04	Trojan.Vundo.Gen

Дополнительная информация
File size: 268288 bytes
MD5...: f36ef78d354211b10f1a8531375a30d8
SHA1..: 1135ce57d8e55b16b029f9a3097264817d5c088e

Надоело быть жертвой? Стань профи по информационной безопасности, получай самую свежую информацию об угрозах и средствах защиты от ведущего российского аналитического центра Anti-Malware.ru:

**rubin** · 05.04.2008, 12:45

baseage32.dll

Файл avz00005.dta получен 2008.04.05 10:37:28 (CET)
Текущий статус: закончено
Результат: 8/32 (25%)

Код:

AhnLab-V3	2008.4.4.1	2008.04.04	-
AntiVir	7.6.0.81	2008.04.04	HEUR/Crypted
Authentium	4.93.8	2008.04.05	-
Avast	4.7.1098.0	2008.04.04	-
AVG	7.5.0.516	2008.04.04	Agent.STC
BitDefender	7.2	2008.04.05	Trojan.Inject.GF
CAT-QuickHeal	9.50	2008.04.05	-
ClamAV	0.92.1	2008.04.05	-
DrWeb	4.44.0.09170	2008.04.05	-
eSafe	7.0.15.0	2008.04.01	-
eTrust-Vet	31.3.5672	2008.04.04	-
Ewido	4.0	2008.04.04	-
F-Prot	4.4.2.54	2008.04.04	-
F-Secure	6.70.13260.0	2008.04.05	-
FileAdvisor	1	2008.04.05	-
Fortinet	3.14.0.0	2008.04.05	-
Ikarus	T3.1.1.20	2008.04.05	Trojan.Inject.GF
Kaspersky	7.0.0.125	2008.04.05	-
McAfee	5267	2008.04.04	-
Microsoft	1.3408	2008.04.05	-
NOD32v2	3004	2008.04.05	-
Norman	5.80.02	2008.04.04	-
Panda	9.0.0.4	2008.04.04	Suspicious file
Prevx1	V2	2008.04.05	Generic.Malware
Rising	20.38.60.00	2008.04.03	-
Sophos	4.28.0	2008.04.05	-
Sunbelt	3.0.1032.0	2008.04.05	-
Symantec	10	2008.04.05	-
TheHacker	6.2.92.265	2008.04.04	-
VBA32	3.12.6.3	2008.03.25	-
VirusBuster	4.3.26:9	2008.04.04	Trojan.DL.BServ.Gen
Webwasher-Gateway	6.6.2	2008.04.04	Heuristic.Crypted

File size: 24576 bytes
MD5...: ef035fa27be59e3abdbb46e1299d9803
SHA1..: 3f9a3f2d9a08fe668d06e8a96dbf8c5b185b6958
SHA256: f21b6ac72a943ad9d17eafdaea01704e4e4d6c1a8520cf782c 7da8df61331d49
SHA512: 641ec0147cb0c3877d439d36ec728fdad445eacc08e79c97b4 6409df3a3133b9
f81d7a6078d08e096182aecdddaebc0e4f308790a94a749f65 6c91db89f766aa
PEiD..: -

ntos.exe
Файл avz00008.dta получен 2008.04.05 10:37:46 (CET)

Код:

AhnLab-V3	2008.4.4.1	2008.04.04	-
AntiVir	7.6.0.81	2008.04.04	TR/Crypt.XPACK.Gen
Authentium	4.93.8	2008.04.05	-
Avast	4.7.1098.0	2008.04.04	Win32:Crypt-TN
AVG	7.5.0.516	2008.04.04	-
BitDefender	7.2	2008.04.05	Trojan.Spy.ZBot.AM
CAT-QuickHeal	9.50	2008.04.05	-
ClamAV	0.92.1	2008.04.05	-
DrWeb	4.44.0.09170	2008.04.05	Trojan.Packed.424
eSafe	7.0.15.0	2008.04.01	-
eTrust-Vet	31.3.5672	2008.04.04	-
Ewido	4.0	2008.04.04	Logger.Zbot.alo
F-Prot	4.4.2.54	2008.04.04	-
F-Secure	6.70.13260.0	2008.04.05	Suspicious:W32/Malware!Gemini
FileAdvisor	1	2008.04.05	-
Fortinet	3.14.0.0	2008.04.05	-
Ikarus	T3.1.1.20	2008.04.05	-
Kaspersky	7.0.0.125	2008.04.05	-
McAfee	5267	2008.04.04	-
Microsoft	1.3408	2008.04.05	PWS:Win32/Zbot.gen!A
NOD32v2	3004	2008.04.05	-
Norman	5.80.02	2008.04.04	-
Panda	9.0.0.4	2008.04.04	-
Prevx1	V2	2008.04.05	-
Rising	20.38.60.00	2008.04.03	-
Sophos	4.28.0	2008.04.05	Troj/Zbot-L
Sunbelt	3.0.1032.0	2008.04.05	-
Symantec	10	2008.04.05	-
TheHacker	6.2.92.265	2008.04.04	-
VBA32	3.12.6.3	2008.03.25	-
VirusBuster	4.3.26:9	2008.04.04	-
Webwasher-Gateway	6.6.2	2008.04.04	Trojan.Crypt.XPACK.Gen

File size: 460288 bytes
MD5...: 3ba363e27f85e5b4c60cbec1d37ee82a
SHA1..: 978c5512dca4d8166c359f206a81c2877bbfd422
SHA256: f722e4d2b82460af90e987d9192ebfd4c5c1614d39adda1088 9266495cf78f3f
SHA512: 5d8fdca251bad5d008070becb38db50758c362c822158f4efc 4327049a4d6cff
0b57acd78d4ae63fc3b368b383dc1cac867e2fa1cf68faa6c8 f53882bbca1c25
PEiD..: -

**yu_mor** · 08.04.2008, 13:02

Файл avz00004.dta получен 2008.04.08 03:59:35 (CET)
Текущий статус: закончено

Результат: 16/32 (50.00%)
Форматированные Печать результатов
Антивирус Версия Обновление Результат

Код:

 
AhnLab-V3 2008.4.8.0 2008.04.07 Win-Trojan/Agent.46592.CZ 
AntiVir 7.6.0.81 2008.04.07 TR/Dldr.Agent.mkb.5 
Authentium 4.93.8 2008.04.08 - 
Avast 4.8.1169.0 2008.04.07 - 
AVG 7.5.0.516 2008.04.07 Downloader.Agent.AEWS 
BitDefender 7.2 2008.04.08 DeepScan:Generic.Malware.SFYd.AC1C730F 
CAT-QuickHeal 9.50 2008.04.05 - 
ClamAV 0.92.1 2008.04.08 - 
DrWeb 4.44.0.09170 2008.04.08 Trojan.DownLoader.56617 
eSafe 7.0.15.0 2008.04.01 suspicious Trojan/Worm 
eTrust-Vet 31.3.5680 2008.04.08 Win32/SillyDl.EDE 
Ewido 4.0 2008.04.07 - 
F-Prot 4.4.2.54 2008.04.07 - 
F-Secure 6.70.13260.0 2008.04.08 Trojan-Downloader.Win32.Agent.mkb 
FileAdvisor 1 2008.04.08 - 
Fortinet 3.14.0.0 2008.04.07 - 
Ikarus T3.1.1.26 2008.04.07 Trojan-Downloader.Win32.Agent.mkb 
Kaspersky 7.0.0.125 2008.04.08 Trojan-Downloader.Win32.Agent.mkb 
McAfee 5268 2008.04.07 - 
Microsoft 1.3408 2008.04.06 Spammer:Win32/Newacc.A 
NOD32v2 3008 2008.04.08 - 
Norman 5.80.02 2008.04.07 W32/Agent.FDVK 
Panda 9.0.0.4 2008.04.07 - 
Prevx1 V2 2008.04.08 Generic.Malware 
Rising 20.38.60.00 2008.04.03 - 
Sophos 4.28.0 2008.04.08 Mal/Generic-A 
Sunbelt 3.0.1032.0 2008.04.08 - 
Symantec 10 2008.04.08 Backdoor.Trojan 
TheHacker 6.2.92.267 2008.04.07 - 
VBA32 3.12.6.4 2008.04.06 - 
VirusBuster 4.3.26:9 2008.04.07 - 
Webwasher-Gateway 6.6.2 2008.04.07 Trojan.Dldr.Agent.mkb.5

Дополнительная информация
File size: 46592 bytes
MD5...: 7a211534c048a7d67732e8c29007e95b

**senyak** · 12.04.2008, 00:12

Файл hosts.rar получен 2008.04.11 22:03:50 (CET)
Текущий статус: закончено
Результат: 2/32 (6.25%)

Антивирус Версия Обновление Результат
AhnLab-V3 2008.4.12.0 2008.04.11 -
AntiVir 7.6.0.85 2008.04.11 -
Authentium 4.93.8 2008.04.11 -
Avast 4.8.1169.0 2008.04.11 -
AVG 7.5.0.516 2008.04.11 -
BitDefender 7.2 2008.04.11 -
CAT-QuickHeal 9.50 2008.04.11 -
ClamAV 0.92.1 2008.04.11 -
DrWeb 4.44.0.09170 2008.04.11 -
eSafe 7.0.15.0 2008.04.09 -
eTrust-Vet 31.3.5687 2008.04.10 -
Ewido 4.0 2008.04.11 -
F-Prot 4.4.2.54 2008.04.11 -
F-Secure 6.70.13260.0 2008.04.11 Trojan.Win32.Qhost.tk
FileAdvisor 1 2008.04.11 -
Fortinet 3.14.0.0 2008.04.11 -
Ikarus T3.1.1.26 2008.04.11 -
Kaspersky 7.0.0.125 2008.04.11 Trojan.Win32.Qhost.tk
McAfee 5272 2008.04.11 -
Microsoft 1.3408 2008.04.11 -
NOD32v2 3020 2008.04.11 -
Norman 5.80.02 2008.04.11 -
Panda 9.0.0.4 2008.04.11 -
Prevx1 V2 2008.04.11 -
Rising 20.39.32.00 2008.04.11 -
Sophos 4.28.0 2008.04.11 -
Sunbelt 3.0.1032.0 2008.04.08 -
Symantec 10 2008.04.11 -
TheHacker 6.2.92.273 2008.04.11 -
VBA32 3.12.6.4 2008.04.06 -
VirusBuster 4.3.26:9 2008.04.11 -
Webwasher-Gateway 6.6.2 2008.04.11 -

Дополнительная информация
File size: 609 bytes
MD5...: f98c91c6ea2475d9911cd5094c165fd1
SHA1..: d6e2b8ab38528e568d53a17f6ec09673b3fbeb08
SHA256: 07405a553b2bd3f246bf33265baf2cc8cb6a4080874ab5f715 2d332064ce1071
SHA512: 3f0f161802c4cf2b9f7ea9fbaa489fed8474eb5d29ecdd1463 4470399f8e78cf
7e886014cf27e8f51a9bb447f693320fffd1239ae9c8aec13d 69fbe30bb91761
PEiD..: -
PEInfo: -

**strawser** · 12.04.2008, 22:29

File HTMLInfected.WebPage.Gen.exe received on 04.12.2008 20

47 (CET)

AhnLab-V3 2008.4.12.0 2008.04.11 -
AntiVir 7.6.0.85 2008.04.11 HTML/Infected.WebPage.Gen
Authentium 4.93.8 2008.04.11 -
Avast 4.8.1169.0 2008.04.12 -
AVG 7.5.0.516 2008.04.12 -
BitDefender 7.2 2008.04.12 -
CAT-QuickHeal 9.50 2008.04.12 -
ClamAV 0.92.1 2008.04.12 -
DrWeb 4.44.0.09170 2008.04.12 -
eSafe 7.0.15.0 2008.04.09 -
eTrust-Vet 31.3.5692 2008.04.11 -
Ewido 4.0 2008.04.12 -
F-Prot 4.4.2.54 2008.04.11 -
F-Secure 6.70.13260.0 2008.04.11 Trojan-Downloader.HTML.IFrame.fl
FileAdvisor 1 2008.04.12 -
Fortinet 3.14.0.0 2008.04.12 -
Ikarus T3.1.1.26 2008.04.12 Trojan-Downloader.HTML.IFrame.fl
Kaspersky 7.0.0.125 2008.04.12 Trojan-Downloader.HTML.IFrame.fl
McAfee 5272 2008.04.11 -
Microsoft 1.3408 2008.04.12 -
NOD32v2 3020 2008.04.11 -
Norman 5.80.02 2008.04.12 -
Panda 9.0.0.4 2008.04.12 -
Prevx1 V2 2008.04.12 -
Rising 20.39.52.00 2008.04.12 -
Sophos 4.28.0 2008.04.12 -
Sunbelt 3.0.1041.0 2008.04.12 -
Symantec 10 2008.04.12 -
TheHacker 6.2.92.275 2008.04.12 -
VBA32 3.12.6.4 2008.04.06 -
VirusBuster 4.3.26:9 2008.04.12 -
Webwasher-Gateway 6.6.2 2008.04.11 Script.Infected.WebPage.Gen
Additional information
File size: 3218 bytes
MD5...: a205833ad3b8846526f34cf640479cc4
SHA1..: d41d0e94ec7768c36c99d9413ae754389570bd86
SHA256: e4b370d4d5b64f07e97b3f497f5c5be48d2163c37285adb1cb 153080c69d2274
SHA512: 87077f688effe4c3f1f3686db0e61c8f959ba3eb226450bb36 d0dd08e7c56e70
cd9083027b3bb8936c5f130d85f676e2eb9b811a40e9b33c6d 7aa16a825753a7
PEiD..: -
PEInfo: -

**senyak** · 17.04.2008, 01:08

Файл ECC.exe получен 2008.04.16 22:59:48 (CET)
Текущий статус: закончено
Результат: 12/32 (37.5%)

Антивирус Версия Обновление Результат
AhnLab-V3 2008.4.17.0 2008.04.16 -
AntiVir 7.6.0.85 2008.04.16 TR/Dropper.Gen
Authentium 4.93.8 2008.04.16 -
Avast 4.8.1169.0 2008.04.16 Win32ropper-AQ
AVG 7.5.0.516 2008.04.16 -
BitDefender 7.2 2008.04.16 -
CAT-QuickHeal 9.50 2008.04.16 -
ClamAV 0.92.1 2008.04.16 -
DrWeb 4.44.0.09170 2008.04.16 Trojan.MulDrop.14010
eSafe 7.0.15.0 2008.04.16 suspicious Trojan/Worm
eTrust-Vet 31.3.5703 2008.04.16 -
Ewido 4.0 2008.04.16 -
F-Prot 4.4.2.54 2008.04.16 W32/Heuristic-KPP!Eldorado
F-Secure 6.70.13260.0 2008.04.16 -
FileAdvisor 1 2008.04.16 Low threat detected
Fortinet 3.14.0.0 2008.04.16 -
Ikarus T3.1.1.26 2008.04.16 Trojan-Dropper
Kaspersky 7.0.0.125 2008.04.16 -
McAfee 5275 2008.04.16 -
Microsoft 1.3408 2008.04.14 -
NOD32v2 3031 2008.04.16 -
Norman 5.80.02 2008.04.16 -
Panda 9.0.0.4 2008.04.16 Suspicious file
Prevx1 V2 2008.04.16 Taz
Rising 20.40.22.00 2008.04.16 -
Sophos 4.28.0 2008.04.16 Sus/Dropper-A
Sunbelt 3.0.1041.0 2008.04.12 -
Symantec 10 2008.04.16 -
TheHacker 6.2.92.280 2008.04.16 -
VBA32 3.12.6.4 2008.04.16 Trojan.MulDrop.14010
VirusBuster 4.3.26:9 2008.04.16 -
Webwasher-Gateway 6.6.2 2008.04.16 Trojan.Dropper.Gen

Дополнительная информация
File size: 121882 bytes
MD5...: 122012c37511b5b009473afe6d6a3477
SHA1..: 0ac9e05c2917a1650dde20c99c3122438bc227bc
SHA256: 813649a1af7bea223da8361c81e2e93a30870d2290c12a42e0 67f720849a1fd1
SHA512: 5a95da63534c05232c9ec948f81ff1cdff106935ace38407e0 07cf25b9faa806
d69acbc996b71cb0d50ea61309d24a35da6535b6878663fd42 a8a7b495b02e74
PEiD..: UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser

**mayas** · 19.04.2008, 03:28

File macctl.exe received on 04.19.2008 01:08:08 (CET)

Result: 12/32 (37.5%)

Antivirus Version Last Update Result
AhnLab-V3 2008.4.19.0 2008.04.18 -
AntiVir 7.8.0.8 2008.04.18 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2008.04.18 -
Avast 4.8.1169.0 2008.04.18 Win32:Agent-KIW
AVG 7.5.0.516 2008.04.18 Win32/PolyCrypt
BitDefender 7.2 2008.04.18 -
CAT-QuickHeal 9.50 2008.04.18 (Suspicious) - DNAScan
ClamAV 0.92.1 2008.04.19 -
DrWeb 4.44.0.09170 2008.04.18 -
eSafe 7.0.15.0 2008.04.17 Suspicious File
eTrust-Vet 31.3.5714 2008.04.19 -
Ewido 4.0 2008.04.18 -
F-Prot 4.4.2.54 2008.04.18 -
F-Secure 6.70.13260.0 2008.04.19 Suspicious:W32/Malware!Gemini
FileAdvisor 1 2008.04.19 -
Fortinet 3.14.0.0 2008.04.18 -
Ikarus T3.1.1.26.0 2008.04.18 MalwareScope.Trojan-PWS.Pinch.1
Kaspersky 7.0.0.125 2008.04.19 -
McAfee 5277 2008.04.18 New Malware.bl
Microsoft 1.3408 2008.04.18 -
NOD32v2 3038 2008.04.18 -
Norman 5.80.02 2008.04.18 -
Panda 9.0.0.4 2008.04.18 Suspicious file
Prevx1 V2 2008.04.19 -
Rising 20.40.42.00 2008.04.18 -
Sophos 4.28.0 2008.04.18 Mal/Basine-C
Sunbelt 3.0.1056.0 2008.04.17 VIPRE.Suspicious
Symantec 10 2008.04.19 -
TheHacker 6.2.92.284 2008.04.18 -
VBA32 3.12.6.4 2008.04.16 -
VirusBuster 4.3.26:9 2008.04.18 -
Webwasher-Gateway 6.6.2 2008.04.18 Trojan.Crypt.XPACK.Gen

Добавлено через 15 минут

исчо

File lansetm.exe received on 04.19.2008 01:21:43 (CET)

Result: 7/32 (21.88%)

AhnLab-V3 2008.4.19.0 2008.04.18 -
AntiVir 7.8.0.8 2008.04.18 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2008.04.18 -
Avast 4.8.1169.0 2008.04.18 -
AVG 7.5.0.516 2008.04.18 Pakes
BitDefender 7.2 2008.04.18 -
CAT-QuickHeal 9.50 2008.04.18 (Suspicious) - DNAScan
ClamAV 0.92.1 2008.04.19 -
DrWeb 4.44.0.09170 2008.04.18 -
eSafe 7.0.15.0 2008.04.17 Suspicious File
eTrust-Vet 31.3.5714 2008.04.19 -
Ewido 4.0 2008.04.18 -
F-Prot 4.4.2.54 2008.04.18 -
F-Secure 6.70.13260.0 2008.04.19 Suspicious:W32/Malware!Gemini
FileAdvisor 1 2008.04.19 -
Fortinet 3.14.0.0 2008.04.18 -
Ikarus T3.1.1.26 2008.04.19 -
Kaspersky 7.0.0.125 2008.04.19 -
McAfee 5277 2008.04.18 -
Microsoft 1.3408 2008.04.18 -
NOD32v2 3038 2008.04.18 -
Norman 5.80.02 2008.04.18 -
Panda 9.0.0.4 2008.04.18 -
Prevx1 V2 2008.04.19 -
Rising 20.40.42.00 2008.04.18 -
Sophos 4.28.0 2008.04.18 Mal/Basine-C
Sunbelt 3.0.1056.0 2008.04.17 -
Symantec 10 2008.04.19 -
TheHacker 6.2.92.284 2008.04.18 -
VBA32 3.12.6.4 2008.04.16 -
VirusBuster 4.3.26:9 2008.04.18 -
Webwasher-Gateway 6.6.2 2008.04.18 Trojan.Crypt.XPACK.Gen

**rubin** · 19.04.2008, 14:31

новый amvo

Код:

AhnLab-V3	2008.4.19.0	2008.04.18	-
AntiVir	7.8.0.8	2008.04.18	TR/Crypt.XPACK.Gen
Authentium	4.93.8	2008.04.18	W32/PWStealer.OGA
Avast	4.8.1169.0	2008.04.18	-
AVG	7.5.0.516	2008.04.18	-
BitDefender	7.2	2008.04.19	Packer.Malware.NSAnti.AD
CAT-QuickHeal	9.50	2008.04.19	TrojanPSW.OnLineGames.xli
ClamAV	0.92.1	2008.04.19	Trojan.Spy-29186
DrWeb	4.44.0.09170	2008.04.19	Win32.HLLW.Taterf.2
eSafe	7.0.15.0	2008.04.17	suspicious Trojan/Worm
eTrust-Vet	31.3.5714	2008.04.19	Win32/Frethog.APB
Ewido	4.0	2008.04.18	-
F-Prot	4.4.2.54	2008.04.18	W32/PWStealer.OGA
FileAdvisor	1	2008.04.19	-
Fortinet	3.14.0.0	2008.04.19	W32/OnLineGamesEncPK.fam!tr.pws
Ikarus	T3.1.1.26.0	2008.04.19	-
Kaspersky	7.0.0.125	2008.04.19	-
McAfee	5277	2008.04.18	W32/Autorun.worm.bx.gen
Microsoft	1.3408	2008.04.19	Worm:Win32/Taterf.gen!C
NOD32v2	3040	2008.04.19	Win32/PSW.OnLineGames.NMY
Panda	9.0.0.4	2008.04.19	Suspicious file
Prevx1	V2	2008.04.19	Heuristic: Suspicious Self Modifying EXE
Rising	20.40.51.00	2008.04.19	Packer.Win32.Mian007.a
Sophos	4.28.0	2008.04.19	Mal/EncPk-CE
Sunbelt	3.0.1056.0	2008.04.17	VIPRE.Suspicious
TheHacker	6.2.92.284	2008.04.18	Trojan/PSW.OnLineGames.xli
VBA32	3.12.6.4	2008.04.16	Malware-Cryptor.Win32.NSAnti
VirusBuster	4.3.26:9	2008.04.18	Trojan.Lineage.Gen!Pac.3
Webwasher-Gateway	6.6.2	2008.04.18	Trojan.Crypt.XPACK.Gen

File size: 103936 bytes
MD5...: 324d5d34e89f3774d6e6ea5bb13071a6
SHA1..: 59466ad66afc1de5916f0e6c712c1bea074cabb7

Код:

AhnLab-V3	2008.4.19.0	2008.04.18	Win-Trojan/OnlineGameHack.70656.K
AntiVir	7.8.0.8	2008.04.18	TR/Crypt.XPACK.Gen
Authentium	4.93.8	2008.04.18	W32/PWStealer.OGA
Avast	4.8.1169.0	2008.04.18	Win32:OnLineGames-DIK
AVG	7.5.0.516	2008.04.18	PSW.OnlineGames.AW
BitDefender	7.2	2008.04.19	Packer.Malware.NSAnti.AD
CAT-QuickHeal	9.50	2008.04.19	-
ClamAV	0.92.1	2008.04.19	-
DrWeb	4.44.0.09170	2008.04.19	Win32.HLLW.Taterf.2
eSafe	7.0.15.0	2008.04.17	suspicious Trojan/Worm
eTrust-Vet	31.3.5714	2008.04.19	Win32/VMalum.CNDD
Ewido	4.0	2008.04.18	-
F-Prot	4.4.2.54	2008.04.18	W32/PWStealer.OGA
F-Secure	6.70.13260.0	2008.04.19	-
FileAdvisor	1	2008.04.19	-
Fortinet	3.14.0.0	2008.04.19	W32/OnLineGamesEncPK.fam!tr.pws
Ikarus	T3.1.1.26	2008.04.19	Packer.Malware.NSAnti.AA
Kaspersky	7.0.0.125	2008.04.19	-
McAfee	5277	2008.04.18	W32/Autorun.worm.bx.gen.dll
Microsoft	1.3408	2008.04.19	Worm:Win32/Taterf.A.dll
NOD32v2	3040	2008.04.19	Win32/PSW.OnLineGames.NMP
Norman	5.80.02	2008.04.18	W32/NSAnti.HZW
Panda	9.0.0.4	2008.04.19	W32/Lineage.IBZ.worm
Prevx1	V2	2008.04.19	KAVKOP:Payload-A
Rising	20.40.51.00	2008.04.19	Packer.Win32.Mian007.a
Sophos	4.28.0	2008.04.19	Mal/EncPk-CE
Sunbelt	3.0.1056.0	2008.04.17	Trojan.Crypt.XPACK.Gen
Symantec	10	2008.04.19	Packed.Generic.61
TheHacker	6.2.92.284	2008.04.18	-
VBA32	3.12.6.4	2008.04.16	Malware-Cryptor.Win32.NSAnti
VirusBuster	4.3.26:9	2008.04.18	Trojan.Lineage.Gen!Pac.3
Webwasher-Gateway	6.6.2	2008.04.18	Trojan.Crypt.XPACK.Gen

File size: 70656 bytes
MD5...: 6580ab7609b5b00abf90ff06cc772357
SHA1..: 5b7b5b243a1f626569e098707e3ada0af3b887a6

**senyak** · 19.04.2008, 15:59

Файл BitAccelerator.dll получен 2008.04.19 11:23:23 (CET)
Текущий статус: закончено
Результат: 5/32 (15.63%)

Антивирус Версия Обновление Результат
AhnLab-V3 2008.4.19.0 2008.04.18 -
AntiVir 7.8.0.8 2008.04.18 -
Authentium 4.93.8 2008.04.18 -
Avast 4.8.1169.0 2008.04.18 -
AVG 7.5.0.516 2008.04.18 -
BitDefender 7.2 2008.04.19 -
CAT-QuickHeal 9.50 2008.04.19 AdTool.BitAccelerator.m (Not a Virus)
ClamAV 0.92.1 2008.04.19 -
DrWeb 4.44.0.09170 2008.04.19 -
eSafe 7.0.15.0 2008.04.17 -
eTrust-Vet 31.3.5714 2008.04.19 -
Ewido 4.0 2008.04.18 -
F-Prot 4.4.2.54 2008.04.18 -
F-Secure 6.70.13260.0 2008.04.19 -
FileAdvisor 1 2008.04.19 -
Fortinet 3.14.0.0 2008.04.19 -
Ikarus T3.1.1.26 2008.04.19 -
Kaspersky 7.0.0.125 2008.04.19 not-a-virus:AdTool.Win32.BitAccelerator.m
McAfee 5277 2008.04.18 -
Microsoft 1.3408 2008.04.19 -
NOD32v2 3040 2008.04.19 -
Norman 5.80.02 2008.04.18 -
Panda 9.0.0.4 2008.04.19 Suspicious file
Prevx1 V2 2008.04.19 -
Rising 20.40.50.00 2008.04.19 -
Sophos 4.28.0 2008.04.19 BitAccelerator
Sunbelt 3.0.1056.0 2008.04.17 -
Symantec 10 2008.04.19 -
TheHacker 6.2.92.284 2008.04.18 -
VBA32 3.12.6.4 2008.04.16 suspected of Downloader.Small.110 (paranoid heuristics)
VirusBuster 4.3.26:9 2008.04.18 -
Webwasher-Gateway 6.6.2 2008.04.18 -

File size: 90112 bytes
MD5...: 30a75f73869a6dac1e8fdd3c983c11c4
SHA1..: 10aac98994226e11dea9038b245d94f41956e541
SHA256: f484dcf7b659b35e3f05dd4992209d077d1ca7741c01ed06ce bccb431483267e
SHA512: a8878a9e8904b35f1a460e8ce402f820d32f5e43cf7493abee 1a27c10a21c8da
1d8fc50b0cab37ed3ffbd6cbfd08d6c8ceee3f902790790e35 d740bf1fad4f9e
PEiD..: Armadillo v1.xx - v2.xx

Добавлено через 43 минуты

Файл fitW.exe получен 2008.04.19 13:48:05 (CET)
Текущий статус: закончено
Результат: 17/32 (53.13%)

Антивирус Версия Обновление Результат
AhnLab-V3 2008.4.19.0 2008.04.18 -
AntiVir 7.8.0.8 2008.04.18 -
Authentium 4.93.8 2008.04.18 -
Avast 4.8.1169.0 2008.04.18 -
AVG 7.5.0.516 2008.04.18 -
BitDefender 7.2 2008.04.19 -
CAT-QuickHeal 9.50 2008.04.19 (Suspicious) - DNAScan
ClamAV 0.92.1 2008.04.19 PUA.Packed.UPack-2
DrWeb 4.44.0.09170 2008.04.19 -
eSafe 7.0.15.0 2008.04.17 Suspicious File
eTrust-Vet 31.3.5714 2008.04.19 -
Ewido 4.0 2008.04.19 -
F-Prot 4.4.2.54 2008.04.18 W32/Heuristic-162!Eldorado
F-Secure 6.70.13260.0 2008.04.19 Suspicious:W32/Malware!Gemini
FileAdvisor 1 2008.04.19 High threat detected
Fortinet 3.14.0.0 2008.04.19 PossibleThreat
Ikarus T3.1.1.26.0 2008.04.19 Trojan-Downloader.Win32.Zlob.and
Kaspersky 7.0.0.125 2008.04.19 -
McAfee 5277 2008.04.18 New Malware.aj
Microsoft 1.3408 2008.04.19 -
NOD32v2 3040 2008.04.19 -
Norman 5.80.02 2008.04.18 W32/Smalltroj.COMJ
Panda 9.0.0.4 2008.04.19 -
Prevx1 V2 2008.04.19 Generic.Malware
Rising 20.40.51.00 2008.04.19 -
Sophos 4.28.0 2008.04.19 Mal/Packer
Sunbelt 3.0.1056.0 2008.04.17 VIPRE.Suspicious
Symantec 10 2008.04.19 Trojan Horse
TheHacker 6.2.92.284 2008.04.18 W32/Behav-Heuristic-060
VBA32 3.12.6.4 2008.04.16 -
VirusBuster 4.3.26:9 2008.04.18 Packed/Upack
Webwasher-Gateway 6.6.2 2008.04.18 Win32.Malware.gen (suspicious)

**Синауридзе Александр** · 20.04.2008, 07:19

Файл file883.exe получен 2008.04.20 04:57:53 (CET)

AhnLab-V3 2008.4.19.0 2008.04.18 -
AntiVir 7.8.0.8 2008.04.18 TR/Agent.97280.2
Authentium 4.93.8 2008.04.19 -
Avast 4.8.1169.0 2008.04.19 -
AVG 7.5.0.516 2008.04.19 Generic10.LUK
BitDefender 7.2 2008.04.20 Generic.Malware.SQwg.455789D3
CAT-QuickHeal 9.50 2008.04.19 -
ClamAV 0.92.1 2008.04.20 Worm.Mytob.AS
DrWeb 4.44.0.09170 2008.04.19 BACKDOOR.Trojan
eSafe 7.0.15.0 2008.04.17 Suspicious File
eTrust-Vet 31.3.5714 2008.04.19 -
Ewido 4.0 2008.04.19 Heuristic.Win32.HostFile
F-Prot 4.4.2.54 2008.04.20 -
F-Secure 6.70.13260.0 2008.04.19 -
FileAdvisor 1 2008.04.20 -
Fortinet 3.14.0.0 2008.04.20 -
Ikarus T3.1.1.26 2008.04.20 Win32.SuspectCrc
Kaspersky 7.0.0.125 2008.04.20 Email-Worm.Win32.Anker.n
McAfee 5277 2008.04.18 -
Microsoft 1.3408 2008.04.20 Trojan:Win32/Meredrop
NOD32v2 3041 2008.04.19 probably unknown NewHeur_PE virus
Norman 5.80.02 2008.04.18 -
Panda 9.0.0.4 2008.04.19 -
Prevx1 V2 2008.04.20 -
Rising 20.40.52.00 2008.04.19 -
Sophos 4.28.0 2008.04.19 Mal/Generic-A
Sunbelt 3.0.1056.0 2008.04.17 -
TheHacker 6.2.92.285 2008.04.19 -
VBA32 3.12.6.4 2008.04.16 suspected of MalwareScope.Trojan-PSW.Pinch.3 (paranoid heuristics)
VirusBuster 4.3.26:9 2008.04.19 -
Webwasher-Gateway 6.6.2 2008.04.18 Trojan.Agent.97280.2

Дополнительная информация
File size: 97280 bytes
MD5...: c75679d4bfc020afba3cd11d3dddd80a
SHA1..: 5046691d53ff7c180c13cc84e6fe3b0c4a946817
SHA256: da01983f8fb96d266c3a560d93df131b9062619880ee36afc1 0229c97d096afd
SHA512: 8551420f913cb70110fbee0cd5307914563170f5dca8884405 31b54023a54068
5e383dfdf8c53baa85dae231b5634c549b925bf99aad579b27 5db1363f625ab7
PEiD..: ASPack v2.12 -> Alexey Solodovnikov
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x435001
timedatestamp.....: 0x48050fab (Tue Apr 15 20:27:23 200

machinetype.......: 0x14c (I386)

( 6 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x28000 0x13000 8.00 df9bf69f65d64712f3b616fbee4e2de5
.rdata 0x29000 0x7000 0x2400 7.97 e301ea0fe1337897c53f7a6bf54a060c
.data 0x30000 0x4000 0x800 7.83 8fb79af6bb5aa0f21183a24089b8dd9f
.rsrc 0x34000 0x1000 0x200 1.68 d59201a6e7ea249416fcd5bd39985275
.aspack 0x35000 0x2000 0x1800 5.66 621d7157e3fe7609137e67c88975b448
.adata 0x37000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e

( 8 imports )
> kernel32.dll: GetProcAddress, GetModuleHandleA, LoadLibraryA
> shell32.dll: -
> user32.dll: TranslateMessage
> advapi32.dll: SetServiceStatus
> ole32.dll: OleInitialize
> oleaut32.dll: -
> iphlpapi.dll: GetIpAddrTable
> ws2_32.dll: -

( 0 exports )
packers: Aspack
packers: ASPack

**rubin** · 20.04.2008, 22:10

Файл avz00006.dta получен 2008.04.20 20:02:19 (CET)

Код:

AhnLab-V3	2008.4.19.0	2008.04.18	-
AntiVir	7.8.0.8	2008.04.18	TR/BHO.Delf.M.2
Authentium	4.93.8	2008.04.20	-
Avast	4.8.1169.0	2008.04.20	-
AVG	7.5.0.516	2008.04.20	Downloader.Delf.12.AN
BitDefender	7.2	2008.04.20	-
CAT-QuickHeal	9.50	2008.04.19	-
ClamAV	0.92.1	2008.04.20	-
DrWeb	4.44.0.09170	2008.04.20	-
eSafe	7.0.15.0	2008.04.17	suspicious Trojan/Worm
eTrust-Vet	31.3.5714	2008.04.19	Win32/Kvol!generic
Ewido	4.0	2008.04.20	-
F-Prot	4.4.2.54	2008.04.20	-
F-Secure	6.70.13260.0	2008.04.20	-
FileAdvisor	1	2008.04.20	-
Fortinet	3.14.0.0	2008.04.20	-
Ikarus	T3.1.1.26.0	2008.04.20	Virus.Trojan.Win32.Pakes.cdw
Kaspersky	7.0.0.125	2008.04.20	-
McAfee	5277	2008.04.18	-
Microsoft	1.3408	2008.04.20	Trojan:Win32/Boaxxe.B
NOD32v2	3041	2008.04.19	-
Norman	5.80.02	2008.04.18	-
Panda	9.0.0.4	2008.04.20	Suspicious file
Prevx1	V2	2008.04.20	Generic.Malware
Rising	20.40.62.00	2008.04.20	Trojan.Clicker.Win32.Delf.mm
Sophos	4.28.0	2008.04.20	-
Sunbelt	3.0.1056.0	2008.04.17	Trojan.BHO.Delf.M.2
Symantec	10	2008.04.20	Trojan Horse
TheHacker	6.2.92.285	2008.04.19	-
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.20	-
Webwasher-Gateway	6.6.2	2008.04.18	Trojan.BHO.Delf.M.2

File size: 88064 bytes
MD5...: 37edd55bd4703156aeedeaab59c2c62c
SHA1..: 2c92342bc798ea129bfe4916b19c35450059c689
SHA256: b86041cc4578b6a3a0ab88ed0ed87a763624ab98c8e63dee6f fa73316ed36bee
SHA512: 619a93e415d70a61265d7840c7d61277b6a0870081c08a8a6a ea9d31f97e840d
b4937e7490da274b826dee59a4d459752ccccfdbc8b71e5862 778a6ed6b83fab

Файл avz00009.dta получен 2008.04.20 20:02:31 (CET)

Код:

AhnLab-V3	2008.4.19.0	2008.04.18	-
AntiVir	7.8.0.8	2008.04.18	TR/Crypt.XPACK.Gen
Authentium	4.93.8	2008.04.20	-
Avast	4.8.1169.0	2008.04.20	-
AVG	7.5.0.516	2008.04.20	-
BitDefender	7.2	2008.04.20	-
CAT-QuickHeal	9.50	2008.04.19	-
ClamAV	0.92.1	2008.04.20	-
DrWeb	4.44.0.09170	2008.04.20	-
eSafe	7.0.15.0	2008.04.17	-
eTrust-Vet	31.3.5714	2008.04.19	-
Ewido	4.0	2008.04.20	-
F-Prot	4.4.2.54	2008.04.20	-
F-Secure	6.70.13260.0	2008.04.20	-
FileAdvisor	1	2008.04.20	-
Fortinet	3.14.0.0	2008.04.20	-
Ikarus	T3.1.1.26.0	2008.04.20	Trojan.Crypt.XPACK
Kaspersky	7.0.0.125	2008.04.20	-
McAfee	5277	2008.04.18	-
Microsoft	1.3408	2008.04.20	-
NOD32v2	3041	2008.04.19	-
Norman	5.80.02	2008.04.18	-
Panda	9.0.0.4	2008.04.20	-
Prevx1	V2	2008.04.20	Trojan.Downloader
Rising	20.40.62.00	2008.04.20	-
Sophos	4.28.0	2008.04.20	-
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.20	-
TheHacker	6.2.92.285	2008.04.19	-
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.20	-
Webwasher-Gateway	6.6.2	2008.04.18	Trojan.Crypt.XPACK.Gen

File size: 16384 bytes
MD5...: 1b92b1958e6de9e412de9c210e8b9bff
SHA1..: 612c03d2c0d3d1829be27f8679a6971d18850f5e
SHA256: 510078045b4b2e2820d9ebcc639492ff59d20b80421eb4e401 e61e9d7a2d152f
SHA512: 169a2948f24b8b84f93dd40c2333e52c6674db5fd60344f960 24b610917ff633
297a2fc9ac1f28f8fe2fafdb3f9466404ec7af1ff2bcdfb0f7 385bcf699964a7

Файл avz00004.dta получен 2008.04.20 20:03:50 (CET)

Код:

AhnLab-V3	2008.4.19.0	2008.04.18	-
AntiVir	7.8.0.8	2008.04.18	TR/Crypt.XPACK.Gen
Authentium	4.93.8	2008.04.20	-
Avast	4.8.1169.0	2008.04.20	Win32:Pakes-AJN
AVG	7.5.0.516	2008.04.20	-
BitDefender	7.2	2008.04.20	-
CAT-QuickHeal	9.50	2008.04.19	-
ClamAV	0.92.1	2008.04.20	-
DrWeb	4.44.0.09170	2008.04.20	-
eSafe	7.0.15.0	2008.04.17	-
eTrust-Vet	31.3.5714	2008.04.19	-
Ewido	4.0	2008.04.20	-
F-Prot	4.4.2.54	2008.04.20	-
F-Secure	6.70.13260.0	2008.04.20	Suspicious:W32/Malware!Gemini
FileAdvisor	1	2008.04.20	-
Fortinet	3.14.0.0	2008.04.20	-
Ikarus	T3.1.1.26.0	2008.04.20	-
Kaspersky	7.0.0.125	2008.04.20	Heur.Trojan.Generic
McAfee	5277	2008.04.18	-
Microsoft	1.3408	2008.04.20	Spammer:Win32/Tedroo.C
NOD32v2	3041	2008.04.19	-
Norman	5.80.02	2008.04.18	-
Panda	9.0.0.4	2008.04.20	-
Rising	20.40.62.00	2008.04.20	-
Sophos	4.28.0	2008.04.20	-
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.20	Packed.Generic.57
TheHacker	6.2.92.285	2008.04.19	-
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.20	-
Webwasher-Gateway	6.6.2	2008.04.18	Trojan.Crypt.XPACK.Gen

File size: 38912 bytes
MD5...: 2c64bd2e321e519c8cf51005b3996c36
SHA1..: b0f2f32e48e7c733584a263e6442100c121f956c
SHA256: 414703f5c44d0621e8a5c0b3ff500834bb75034a03e15857dc bdc2c76e7d9a47
SHA512: 935f71b55096b491ba5c8de63b52ba08e19f23c4383007b04e 49fafa9da7aa2c
02a4f0b899fd40e00154e945497f2134dbf57f48a8bc3726c4 6450180e2aac81

Файл avz00010.dta получен 2008.04.20 20:02:44 (CET)

Код:

AhnLab-V3	2008.4.19.0	2008.04.18	-
AntiVir	7.8.0.8	2008.04.18	TR/Crypt.XPACK.Gen
Authentium	4.93.8	2008.04.20	-
Avast	4.8.1169.0	2008.04.20	-
AVG	7.5.0.516	2008.04.20	-
BitDefender	7.2	2008.04.20	-
CAT-QuickHeal	9.50	2008.04.19	-
ClamAV	0.92.1	2008.04.20	-
DrWeb	4.44.0.09170	2008.04.20	-
eSafe	7.0.15.0	2008.04.17	Suspicious File
eTrust-Vet	31.3.5714	2008.04.19	-
Ewido	4.0	2008.04.20	-
F-Prot	4.4.2.54	2008.04.20	-
F-Secure	6.70.13260.0	2008.04.20	-
FileAdvisor	1	2008.04.20	-
Fortinet	3.14.0.0	2008.04.20	-
Ikarus	T3.1.1.26	2008.04.20	-
Kaspersky	7.0.0.125	2008.04.20	-
McAfee	5277	2008.04.18	-
Microsoft	1.3408	2008.04.20	Backdoor:Win32/Momibot.gen!C
NOD32v2	3041	2008.04.19	-
Norman	5.80.02	2008.04.18	-
Panda	9.0.0.4	2008.04.20	-
Prevx1	V2	2008.04.20	Generic.Malware
Rising	20.40.62.00	2008.04.20	-
Sophos	4.28.0	2008.04.20	-
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.20	-
TheHacker	6.2.92.285	2008.04.19	-
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.20	-
Webwasher-Gateway	6.6.2	2008.04.18	Trojan.Crypt.XPACK.Gen

File size: 22016 bytes
MD5...: 4758b3488d1282856d7deea4bff5724d
SHA1..: c62588ef0dd542fbdec6055e9753220d78f10ceb
SHA256: 07346fd86b7dbd298dfde4ab054f5826179a0a6a1019720236 1a1e1509c774c2
SHA512: 465d7f44976b3ac327a0dc3b1d7f0bf82b89f6fa20643e5ccc c8a82de24407ab
410636bdaf53824930db28f871fd59810db637edfa43a5d5b4 43960ac01c6b7d

**Shu_b** · 22.04.2008, 09:35

t-21868

Код:

File svchost.exe received on 04.22.2008 07:27:42 (CET)
Antivirus	Version	Last Update	Result
AhnLab-V3	2008.4.22.0	2008.04.21	-
AntiVir	7.8.0.8	2008.04.21	TR/Crypt.XPACK.Gen
Authentium	4.93.8	2008.04.22	-
Avast	4.8.1169.0	2008.04.21	-
AVG	7.5.0.516	2008.04.21	Win32/PolyCrypt
BitDefender	7.2	2008.04.22	BehavesLike:Win32.Malware
CAT-QuickHeal	9.50	2008.04.21	Trojan.Inject.bbr
ClamAV	0.92.1	2008.04.22	-
DrWeb	4.44.0.09170	2008.04.22	-
eSafe	7.0.15.0	2008.04.21	-
eTrust-Vet	31.3.5723	2008.04.22	-
Ewido	4.0	2008.04.21	-
F-Prot	4.4.2.54	2008.04.21	-
F-Secure	6.70.13260.0	2008.04.22	Suspicious:W32/Malware!Gemini
FileAdvisor	1	2008.04.22	-
Fortinet	3.14.0.0	2008.04.22	-
Ikarus	T3.1.1.26.0	2008.04.22	-
Kaspersky	7.0.0.125	2008.04.22	Heur.Trojan.Generic
McAfee	5278	2008.04.21	-
Microsoft	1.3408	2008.04.22	-
NOD32v2	3044	2008.04.21	-
Norman	5.80.02	2008.04.21	W32/Smalltroj.EAUK
Panda	9.0.0.4	2008.04.21	-
Prevx1	V2	2008.04.22	-
Rising	20.41.10.00	2008.04.22	-
Sophos	4.28.0	2008.04.22	-
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.22	-
TheHacker	6.2.92.286	2008.04.21	-
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.21	-
Webwasher-Gateway	6.6.2	2008.04.21	Trojan.Crypt.XPACK.Gen
Additional information
File size: 13825 bytes

**Гриша** · 22.04.2008, 13:56

Файл Photo.exe получен 2008.04.22 11:44:48 (CET)

Антивирус Версия Обновление Результат
AhnLab-V3 2008.4.22.0 2008.04.22 -
AntiVir 7.8.0.8 2008.04.22 PCK/Obsidium
Authentium 4.93.8 2008.04.22 W32/SdbotP.BK
Avast 4.8.1169.0 2008.04.21 Win32:Krotten-C
AVG 7.5.0.516 2008.04.21 -
BitDefender 7.2 2008.04.22 Trojan.Krotten.EF
CAT-QuickHeal 9.50 2008.04.21 (Suspicious) - DNAScan
ClamAV 0.92.1 2008.04.22 -
DrWeb 4.44.0.09170 2008.04.22 -
eSafe 7.0.15.0 2008.04.21 suspicious Trojan/Worm
eTrust-Vet 31.3.5723 2008.04.22 -
Ewido 4.0 2008.04.21 -
F-Prot 4.4.2.54 2008.04.21 W32/SdbotP.BK
F-Secure 6.70.13260.0 2008.04.22 W32/Krotten.CI
FileAdvisor 1 2008.04.22 -
Fortinet 3.14.0.0 2008.04.22 -
Ikarus T3.1.1.26 2008.04.22 -
Kaspersky 7.0.0.125 2008.04.22 -
McAfee 5278 2008.04.21 StartPage-IP
Microsoft 1.3408 2008.04.22 -
NOD32v2 3044 2008.04.21 -
Norman 5.80.02 2008.04.21 W32/Krotten.CI
Panda 9.0.0.4 2008.04.21 Suspicious file
Prevx1 V2 2008.04.22 Heuristic: Suspicious Self Modifying EXE
Rising 20.41.10.00 2008.04.22 Trojan.Krotten.GEN
Sophos 4.28.0 2008.04.22 Sus/UnkPacker
Sunbelt 3.0.1056.0 2008.04.17 VIPRE.Suspicious
Symantec 10 2008.04.22 -
TheHacker 6.2.92.286 2008.04.21 -
VBA32 3.12.6.4 2008.04.16 -
VirusBuster 4.3.26:9 2008.04.21 -
Webwasher-Gateway 6.6.2 2008.04.22 Packer.Obsidium

**mayas** · 22.04.2008, 14:51

File 7ad0k32n.exe received on 04.22.2008 12:48:06 (CET)

Result: 5/32 (15.63%)

Antivirus Version Last Update Result
AhnLab-V3 2008.4.22.0 2008.04.22 -
AntiVir 7.8.0.8 2008.04.22 HEUR/Malware
Authentium 4.93.8 2008.04.22 -
Avast 4.8.1169.0 2008.04.21 -
AVG 7.5.0.516 2008.04.21 -
BitDefender 7.2 2008.04.22 -
CAT-QuickHeal 9.50 2008.04.21 -
ClamAV 0.92.1 2008.04.22 -
DrWeb 4.44.0.09170 2008.04.22 -
eSafe 7.0.15.0 2008.04.21 -
eTrust-Vet 31.3.5723 2008.04.22 -
Ewido 4.0 2008.04.21 -
F-Prot 4.4.2.54 2008.04.21 -
F-Secure 6.70.13260.0 2008.04.22 Worm.Win32.AutoRun.dlf
FileAdvisor 1 2008.04.22 -
Fortinet 3.14.0.0 2008.04.22 -
Ikarus T3.1.1.26.0 2008.04.22 -
Kaspersky 7.0.0.125 2008.04.22 Worm.Win32.AutoRun.dlf
McAfee 5278 2008.04.21 New Malware.d
Microsoft 1.3408 2008.04.22 -
NOD32v2 3044 2008.04.21 -
Norman 5.80.02 2008.04.21 -
Panda 9.0.0.4 2008.04.21 -
Prevx1 V2 2008.04.22 -
Rising 20.41.10.00 2008.04.22 -
Sophos 4.28.0 2008.04.22 -
Sunbelt 3.0.1056.0 2008.04.17 -
Symantec 10 2008.04.22 -
TheHacker 6.2.92.286 2008.04.21 -
VBA32 3.12.6.4 2008.04.16 -
VirusBuster 4.3.26:9 2008.04.21 -
Webwasher-Gateway 6.6.2 2008.04.22 Heuristic.Malware

**Surfer** · 22.04.2008, 17:23

File video.exe received on 04.22.2008 14:37:59 (CET)
Result: 11/32 (34.38%)

AhnLab-V3 2008.4.22.0 2008.04.22 -
AntiVir 7.8.0.8 2008.04.22 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2008.04.22 -
Avast 4.8.1169.0 2008.04.21 -
AVG 7.5.0.516 2008.04.21 Downloader.Zlob.12.AH
BitDefender 7.2 2008.04.22 -
CAT-QuickHeal 9.50 2008.04.21 (Suspicious) - DNAScan
ClamAV 0.92.1 2008.04.22 -
DrWeb 4.44.0.09170 2008.04.22 -
eSafe 7.0.15.0 2008.04.21 Suspicious File
eTrust-Vet 31.3.5723 2008.04.22 -
Ewido 4.0 2008.04.22 -
F-Prot 4.4.2.54 2008.04.21 -
F-Secure 6.70.13260.0 2008.04.22 Trojan-Downloader:W32/Tibs.UE
FileAdvisor 1 2008.04.22 -
Fortinet 3.14.0.0 2008.04.22 W32/PolyZlob!tr.dldr
Ikarus T3.1.1.26 2008.04.22 -
Kaspersky 7.0.0.125 2008.04.22 -
McAfee 5278 2008.04.21 Tibs-Packed
Microsoft 1.3408 2008.04.22 TrojanDropper:Win32/Nuwar.gen!lds
NOD32v2 3045 2008.04.22 -
Norman 5.80.02 2008.04.21 -
Panda 9.0.0.4 2008.04.21 -
Prevx1 V2 2008.04.22 -
Rising 20.41.10.00 2008.04.22 -
Sophos 4.28.0 2008.04.22 Troj/Tibs-UG
Sunbelt 3.0.1056.0 2008.04.17 -
Symantec 10 2008.04.22 -
TheHacker 6.2.92.286 2008.04.21 -
VBA32 3.12.6.4 2008.04.16 Trojan.Win32.Revelation
VirusBuster 4.3.26:9 2008.04.21 -
Webwasher-Gateway 6.6.2 2008.04.22 Trojan.Crypt.XPACK.Gen

**Shu_b** · 23.04.2008, 13:42

t 21927

Код:

File icf.exe received on 04.23.2008 11:09:34 (CET)
Antivirus	Version	Last Update	Result
AhnLab-V3	2008.4.23.0	2008.04.22	-
AntiVir	7.8.0.8	2008.04.23	BDS/Backdoor.Gen
Authentium	4.93.8	2008.04.22	-
Avast	4.8.1169.0	2008.04.23	Win32:Obfuscated-EJC
AVG	7.5.0.516	2008.04.23	Pakes.N
BitDefender	7.2	2008.04.23	Dropped:Trojan.Ozdok.F
CAT-QuickHeal	9.50	2008.04.22	-
ClamAV	0.92.1	2008.04.23	-
DrWeb	4.44.0.09170	2008.04.23	-
eSafe	7.0.15.0	2008.04.21	suspicious Trojan/Worm
eTrust-Vet	31.3.5728	2008.04.23	-
Ewido	4.0	2008.04.22	-
F-Prot	4.4.2.54	2008.04.22	-
F-Secure	6.70.13260.0	2008.04.23	-
FileAdvisor	1	2008.04.23	-
Fortinet	3.14.0.0	2008.04.23	-
Ikarus	T3.1.1.26.0	2008.04.23	DroppedBackdoor.Agent.ZCI
Kaspersky	7.0.0.125	2008.04.23	Heur.Trojan.Generic
McAfee	5279	2008.04.23	-
Microsoft	1.3408	2008.04.22	Trojan:Win32/Pugeju.A
NOD32v2	3047	2008.04.23	-
Norman	5.80.02	2008.04.22	-
Panda	9.0.0.4	2008.04.23	-
Prevx1	V2	2008.04.23	Covert.Code
Rising	20.41.12.00	2008.04.22	Trojan.Win32.Undef.dti
Sophos	4.28.0	2008.04.23	Mal/Behav-150
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.23	Trojan Horse
TheHacker	6.2.92.288	2008.04.23	-
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.22	-
Webwasher-Gateway	6.6.2	2008.04.23	Trojan.Backdoor.Backdoor.Gen
Additional information
File size: 28162 bytes

Добавлено через 28 минут

t 21931

Код:

File ntos.exe received on 04.23.2008 11:26:30 (CET)
Antivirus	Version	Last Update	Result
AhnLab-V3	2008.4.23.0	2008.04.23	-
AntiVir	7.8.0.8	2008.04.23	TR/Spy.ZBot.bcn
Authentium	4.93.8	2008.04.22	-
Avast	4.8.1169.0	2008.04.23	-
AVG	7.5.0.516	2008.04.23	-
BitDefender	7.2	2008.04.23	Trojan.Spy.Wsnpoem.BA
CAT-QuickHeal	9.50	2008.04.23	TrojanSpy.Zbot.bcn
ClamAV	None	2008.04.23	-
DrWeb	4.44.0.09170	2008.04.23	Trojan.Proxy.2842
eSafe	7.0.15.0	2008.04.21	-
eTrust-Vet	31.3.5728	2008.04.23	-
Ewido	4.0	2008.04.22	-
F-Prot	4.4.2.54	2008.04.22	-
F-Secure	6.70.13260.0	2008.04.23	Trojan-Spy.Win32.Zbot.bcn
FileAdvisor	1	2008.04.23	-
Fortinet	3.14.0.0	2008.04.23	-
Ikarus	T3.1.1.26	2008.04.23	Trojan-Spy.Win32.Zbot.bcn
Kaspersky	7.0.0.125	2008.04.23	Trojan-Spy.Win32.Zbot.bcn
McAfee	5279	2008.04.23	-
Microsoft	1.3408	2008.04.22	-
NOD32v2	3047	2008.04.23	-
Norman	5.80.02	2008.04.22	W32/Zbot.KU
Panda	9.0.0.4	2008.04.23	-
Prevx1	V2	2008.04.23	Infostealer
Rising	20.41.12.00	2008.04.22	-
Sophos	4.28.0	2008.04.23	Mal/EncPk-DI
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.23	-
TheHacker	6.2.92.288	2008.04.23	Trojan/Spy.Zbot.bcn
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.22	-
Webwasher-Gateway	6.6.2	2008.04.23	Trojan.Spy.ZBot.bcn
Additional information
File size: 473600 bytes

Код:

File temp\winlogon.exe received on 04.23.2008 11:26:49 (CET)
Antivirus	Version	Last Update	Result
AhnLab-V3	2008.4.23.0	2008.04.23	-
AntiVir	7.8.0.8	2008.04.23	DR/Delphi.Gen
Authentium	4.93.8	2008.04.22	-
Avast	4.8.1169.0	2008.04.23	-
AVG	7.5.0.516	2008.04.23	SHeur.BGTB
BitDefender	7.2	2008.04.23	-
CAT-QuickHeal	9.50	2008.04.23	-
ClamAV	0.92.1	2008.04.23	-
DrWeb	4.44.0.09170	2008.04.23	-
eSafe	7.0.15.0	2008.04.21	suspicious Trojan/Worm
eTrust-Vet	31.3.5728	2008.04.23	-
Ewido	4.0	2008.04.22	-
F-Prot	4.4.2.54	2008.04.22	-
F-Secure	6.70.13260.0	2008.04.23	-
FileAdvisor	1	2008.04.23	-
Fortinet	3.14.0.0	2008.04.23	-
Ikarus	T3.1.1.26.0	2008.04.23	Virus.Win32.Zapchast.DA
Kaspersky	7.0.0.125	2008.04.23	-
McAfee	5279	2008.04.23	-
Microsoft	1.3408	2008.04.22	Trojan:Win32/Delfobfus.A
NOD32v2	3047	2008.04.23	a variant of Win32/Injector.Z
Norman	5.80.02	2008.04.22	-
Panda	9.0.0.4	2008.04.23	-
Prevx1	V2	2008.04.23	Generic.Malware
Rising	20.41.12.00	2008.04.22	Trojan.DL.Win32.Agent.bxw
Sophos	4.28.0	2008.04.23	-
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.23	-
TheHacker	6.2.92.288	2008.04.23	-
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.22	-
Webwasher-Gateway	6.6.2	2008.04.23	Trojan.Dropper.Delphi.Gen
Additional information
File size: 39424 bytes

Ложное срабатывание:

Код:

File Beep.sys received on 04.23.2008 11:27:08 (CET)
Antivirus	Version	Last Update	Result
AhnLab-V3	2008.4.23.0	2008.04.23	-
AntiVir	7.8.0.8	2008.04.23	TR/Crypt.XDR.Gen
Authentium	4.93.8	2008.04.22	-
Avast	4.8.1169.0	2008.04.23	Win32:Agent-LSV
AVG	7.5.0.516	2008.04.23	-
BitDefender	7.2	2008.04.23	-
CAT-QuickHeal	9.50	2008.04.23	-
ClamAV	None	2008.04.23	-
DrWeb	4.44.0.09170	2008.04.23	-
eSafe	7.0.15.0	2008.04.21	-
eTrust-Vet	31.3.5728	2008.04.23	-
Ewido	4.0	2008.04.22	-
F-Prot	4.4.2.54	2008.04.22	-
F-Secure	6.70.13260.0	2008.04.23	-
FileAdvisor	1	2008.04.23	-
Fortinet	3.14.0.0	2008.04.23	-
Ikarus	T3.1.1.26	2008.04.23	Virus.Win32.Agent.LSV
Kaspersky	7.0.0.125	2008.04.23	-
McAfee	5279	2008.04.23	-
Microsoft	1.3408	2008.04.22	-
NOD32v2	3047	2008.04.23	-
Norman	5.80.02	2008.04.22	-
Panda	9.0.0.4	2008.04.23	-
Prevx1	V2	2008.04.23	Generic.Malware
Rising	20.41.12.00	2008.04.22	-
Sophos	4.28.0	2008.04.23	-
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.23	-
TheHacker	6.2.92.288	2008.04.23	-
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.22	-
Webwasher-Gateway	6.6.2	2008.04.23	Trojan.Crypt.XDR.Gen
Additional information
File size: 65536 bytes

Код:

File baselhi32.dll received on 04.23.2008 11:27:29 (CET)
Antivirus	Version	Last Update	Result
AhnLab-V3	2008.4.23.0	2008.04.23	-
AntiVir	7.8.0.8	2008.04.23	HEUR/Crypted
Authentium	4.93.8	2008.04.22	-
Avast	4.8.1169.0	2008.04.23	-
AVG	7.5.0.516	2008.04.23	-
BitDefender	7.2	2008.04.23	Trojan.Agent.AGKK
CAT-QuickHeal	9.50	2008.04.23	-
ClamAV	None	2008.04.23	-
DrWeb	4.44.0.09170	2008.04.23	-
eSafe	7.0.15.0	2008.04.21	-
eTrust-Vet	31.3.5728	2008.04.23	-
Ewido	4.0	2008.04.22	-
F-Prot	4.4.2.54	2008.04.22	W32/Agent.AZ.gen!Eldorado
F-Secure	6.70.13260.0	2008.04.23	-
FileAdvisor	1	2008.04.23	-
Fortinet	3.14.0.0	2008.04.23	-
Ikarus	T3.1.1.26	2008.04.23	-
Kaspersky	7.0.0.125	2008.04.23	-
McAfee	5279	2008.04.23	-
Microsoft	1.3408	2008.04.22	-
NOD32v2	3047	2008.04.23	-
Norman	5.80.02	2008.04.22	-
Panda	9.0.0.4	2008.04.23	Suspicious file
Prevx1	V2	2008.04.23	-
Rising	20.41.12.00	2008.04.22	-
Sophos	4.28.0	2008.04.23	-
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.23	-
TheHacker	6.2.92.288	2008.04.23	-
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.22	-
Webwasher-Gateway	6.6.2	2008.04.23	Heuristic.Crypted
Additional information
File size: 24576 bytes

Код:

File clbdriver.sys received on 04.23.2008 11:39:06 (CET)
Antivirus	Version	Last Update	Result
AhnLab-V3	2008.4.23.0	2008.04.23	-
AntiVir	7.8.0.8	2008.04.23	Rkit/Agent.aii
Authentium	4.93.8	2008.04.22	-
Avast	4.8.1169.0	2008.04.23	-
AVG	7.5.0.516	2008.04.23	BackDoor.Generic9.AHXS
BitDefender	7.2	2008.04.23	-
CAT-QuickHeal	9.50	2008.04.23	-
ClamAV	0.92.1	2008.04.23	-
DrWeb	4.44.0.09170	2008.04.23	-
eSafe	7.0.15.0	2008.04.21	-
eTrust-Vet	31.3.5728	2008.04.23	-
Ewido	4.0	2008.04.22	-
F-Prot	4.4.2.54	2008.04.22	-
F-Secure	6.70.13260.0	2008.04.23	Rootkit.Win32.Agent.aii
FileAdvisor	1	2008.04.23	-
Fortinet	3.14.0.0	2008.04.23	-
Ikarus	T3.1.1.26.0	2008.04.23	Rkit.Agent.aii
Kaspersky	7.0.0.125	2008.04.23	Rootkit.Win32.Agent.aii
McAfee	5279	2008.04.23	-
Microsoft	1.3408	2008.04.22	-
NOD32v2	3048	2008.04.23	probably unknown NewHeur_PE virus
Norman	5.80.02	2008.04.22	-
Panda	9.0.0.4	2008.04.23	-
Prevx1	V2	2008.04.23	BACKDOOR.DIMPY.WIN32VBSY.Q
Rising	20.41.12.00	2008.04.22	-
Sophos	4.28.0	2008.04.23	-
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.23	-
TheHacker	6.2.92.288	2008.04.23	Trojan/Agent.aii
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.22	-
Webwasher-Gateway	6.6.2	2008.04.23	Rootkit.Agent.aii
Additional information
File size: 6656 bytes

**senyak** · 23.04.2008, 18:10

Файл avz00001.dta получен 2008.04.23 16:14:20 (CET)
Текущий статус: закончено
Результат: 6/32 (18.75%)

Антивирус Версия Обновление Результат
AhnLab-V3 2008.4.23.0 2008.04.23 -
AntiVir 7.8.0.8 2008.04.23 -
Authentium 4.93.8 2008.04.22 -
Avast 4.8.1169.0 2008.04.23 -
AVG 7.5.0.516 2008.04.23 -
BitDefender 7.2 2008.04.23 -
CAT-QuickHeal 9.50 2008.04.23 -
ClamAV 0.92.1 2008.04.23 -
DrWeb 4.44.0.09170 2008.04.23 -
eSafe 7.0.15.0 2008.04.21 -
eTrust-Vet 31.3.5728 2008.04.23 -
Ewido 4.0 2008.04.23 -
F-Prot 4.4.2.54 2008.04.22 -
F-Secure 6.70.13260.0 2008.04.23 -
FileAdvisor 1 2008.04.23 High threat detected
Fortinet 3.14.0.0 2008.04.23 Adware/_0126C5F5
Ikarus T3.1.1.26 2008.04.23 Dialer.Win32.Agent.aj
Kaspersky 7.0.0.125 2008.04.23 -
McAfee 5279 2008.04.23 -
Microsoft 1.3408 2008.04.22 -
NOD32v2 3049 2008.04.23 -
Norman 5.80.02 2008.04.23 W32/VirtuaGirl.A
Panda 9.0.0.4 2008.04.23 Generic Malware
Prevx1 V2 2008.04.23 -
Rising 20.41.22.00 2008.04.23 -
Sophos 4.28.0 2008.04.23 -
Sunbelt 3.0.1056.0 2008.04.17 -
Symantec 10 2008.04.23 -
TheHacker 6.2.92.288 2008.04.23 -
VBA32 3.12.6.4 2008.04.16 Dialer.Win32.Agent.aj
VirusBuster 4.3.26:9 2008.04.23 -
Webwasher-Gateway 6.6.2 2008.04.23 -

File size: 57344 bytes
MD5...: 04ca42243277208426101dc31d09ffec
SHA1..: 7387d6df398e933fda1a18dc4d1c317ddd624393
SHA256: b1532f85f704a61dbbf1ba552af6dd272eb80235e5259eb19d 095da68a258a04
SHA512: ad4a79530af8c44425d0ef1121450b8be7c81173313d019fca 0daf17f7aaf7da
f6792f9ea4df3ab5d6d813f89074e37bacc1ddf50036bb8049 d6c1770e5800c1
PEiD..: Armadillo v1.71

**mayas** · 24.04.2008, 00:07

File 2zd0r32k.exe received on 04.23.2008 22:01:25 (CET)

Result: 15/32 (46.88%)

Antivirus Version Last Update Result
AhnLab-V3 2008.4.23.0 2008.04.23 -
AntiVir 7.8.0.8 2008.04.23 TR/Spy.Gen

Authentium 4.93.8 2008.04.22 -
Avast 4.8.1169.0 2008.04.23 -
AVG 7.5.0.516 2008.04.23 Packed.AverCrypt
BitDefender 7.2 2008.04.23 Packer.Pohernah.C
CAT-QuickHeal 9.50 2008.04.23 (Suspicious) - DNAScan
ClamAV 0.92.1 2008.04.23 -
DrWeb 4.44.0.09170 2008.04.23 Trojan.PWS.LDPinch.1417
eSafe 7.0.15.0 2008.04.21 1753616902
eTrust-Vet 31.3.5728 2008.04.23 -
Ewido 4.0 2008.04.23 -
F-Prot 4.4.2.54 2008.04.23 W32/LdPinch.H.gen!Eldorado
F-Secure 6.70.13260.0 2008.04.23 Trojan-PSW.Win32.LdPinch.dsq
FileAdvisor 1 2008.04.23 -
Fortinet 3.14.0.0 2008.04.23 -
Ikarus T3.1.1.26 2008.04.23 Trojan.Peed
Kaspersky 7.0.0.125 2008.04.23 Trojan-PSW.Win32.LdPinch.dsq
McAfee 5279 2008.04.23 -
Microsoft 1.3408 2008.04.22 -
NOD32v2 3049 2008.04.23 -
Norman 5.80.02 2008.04.23 -
Panda 9.0.0.4 2008.04.23 Suspicious file
Prevx1 V2 2008.04.23 -
Rising 20.41.22.00 2008.04.23 Trojan.Win32.Undef.dzd
Sophos 4.28.0 2008.04.23 Mal/Basine-C
Sunbelt 3.0.1056.0 2008.04.17 -
Symantec 10 2008.04.23 -
TheHacker 6.2.92.289 2008.04.23 -
VBA32 3.12.6.4 2008.04.16 MalwareScope.Trojan-PSW.Pinch.1
VirusBuster 4.3.26:9 2008.04.23 -
Webwasher-Gateway 6.6.2 2008.04.23 Trojan.Spy.Gen

**Kuzz** · 24.04.2008, 09:16

Файл index.html получен 2008.04.23 19:18:10 (CET)
Текущий статус: закончено
Результат: 13/32 (40.62%)

Код:

Антивирус 	Версия 	Обновление 	Результат
AhnLab-V3 	2008.4.23.0 	2008.04.23 	-
AntiVir 	7.8.0.8 	2008.04.23 	HEUR/Exploit.HTML
Authentium 	4.93.8 	2008.04.22 	-
Avast 	4.8.1169.0 	2008.04.23 	VBS:Malware-gen
AVG 	7.5.0.516 	2008.04.23 	HTML/Framer.Z
BitDefender 	7.2 	2008.04.23 	-
CAT-QuickHeal 	9.50 	2008.04.23 	HTM/Agent.IJ1
ClamAV 	0.92.1 	2008.04.23 	HTML.IFrame-10
DrWeb 	4.44.0.09170 	2008.04.23 	Trojan.DownLoader.33840
eSafe 	7.0.15.0 	2008.04.21 	JS.Agent.hdd
eTrust-Vet 	31.3.5728 	2008.04.23 	-
Ewido 	4.0 	2008.04.23 	-
F-Prot 	4.4.2.54 	2008.04.22 	-
F-Secure 	6.70.13260.0 	2008.04.23 	JS/Agent.B
FileAdvisor 	1 	2008.04.23 	-
Fortinet 	3.14.0.0 	2008.04.23 	-
Ikarus 	T3.1.1.26 	2008.04.23 	-
Kaspersky 	7.0.0.125 	2008.04.23 	Trojan-Downloader.HTML.Agent.ij
McAfee 	5279 	2008.04.23 	-
Microsoft 	1.3408 	2008.04.22 	-
NOD32v2 	3049 	2008.04.23 	-
Norman 	5.80.02 	2008.04.23 	JS/Agent.B
Panda 	9.0.0.4 	2008.04.23 	-
Prevx1 	V2 	2008.04.23 	-
Rising 	20.41.22.00 	2008.04.23 	-
Sophos 	4.28.0 	2008.04.23 	Troj/Unif-B
Sunbelt 	3.0.1056.0 	2008.04.17 	-
Symantec 	10 	2008.04.23 	Trojan.Webkit!html
TheHacker 	6.2.92.288 	2008.04.23 	-
VBA32 	3.12.6.4 	2008.04.16 	-
VirusBuster 	4.3.26:9 	2008.04.23 	-
Webwasher-Gateway 	6.6.2 	2008.04.23 	Heuristic.Exploit.HTML
Дополнительная информация
File size: 9501 bytes
MD5...: dd3062170ffdbf2adf686660a61ed487
SHA1..: 088d89a30105a9c9a346316b424c731a60cf496d
SHA256: 91e61d36a2ac895b4d78261fdc3b4d5b0b3fa7298782758f85035feff3bcb510
SHA512: e397664def584cb3e69a6bcecb3deca68ce6285791dcf3fd828f9c58c9a0c508
ec620a67d8fafabcfc4800db01432b53c2e05fce027bb4c8588717154b63cb1e

**mayas** · 24.04.2008, 14:08

File __________________.bat received on 04.24.2008 12:00:45 (CET)

Result: 3/32 (9.38%)

Antivirus Version Last Update Result
AhnLab-V3 2008.4.24.0 2008.04.24 -
AntiVir 7.8.0.8 2008.04.24 -
Authentium 4.93.8 2008.04.24 -
Avast 4.8.1169.0 2008.04.24 -
AVG 7.5.0.516 2008.04.23 -
BitDefender 7.2 2008.04.24 Trojan.BAT.DelAll.R
CAT-QuickHeal 9.50 2008.04.23 -
ClamAV 0.92.1 2008.04.24 -
DrWeb 4.44.0.09170 2008.04.24 Trojan.DelAll
eSafe 7.0.15.0 2008.04.21 -
eTrust-Vet 31.3.5731 2008.04.24 -
Ewido 4.0 2008.04.23 -
F-Prot 4.4.2.54 2008.04.23 -
F-Secure 6.70.13260.0 2008.04.24 -
FileAdvisor 1 2008.04.24 -
Fortinet 3.14.0.0 2008.04.23 -
Ikarus T3.1.1.26 2008.04.24 -
Kaspersky 7.0.0.125 2008.04.24 -
McAfee 5280 2008.04.24 -
Microsoft 1.3408 2008.04.22 -
NOD32v2 3051 2008.04.24 -
Norman 5.80.02 2008.04.23 -
Panda 9.0.0.4 2008.04.23 -
Prevx1 V2 2008.04.24 -
Rising 20.41.30.00 2008.04.24 -
Sophos 4.28.0 2008.04.24 -
Sunbelt 3.0.1056.0 2008.04.17 -
Symantec 10 2008.04.24 -
TheHacker 6.2.92.290 2008.04.24 -
VBA32 3.12.6.5 2008.04.24 -
VirusBuster 4.3.26:9 2008.04.23 BAT.Delall.R
Webwasher-Gateway 6.6.2 2008.04.24 -

Исследование антивирусов 6

Опции темы

Похожие темы

Исследование антивирусов 7

Исследование антивирусов 5

Исследование антивирусов 4

Исследование антивирусов 3

Исследование антивирусов 2

Ваши права в разделе