Исследование антивирусов 4

[WaterFish]

Всплывающее жлобство прцветает

Complete scanning result of "perfectcodec.589.exe", received in VirusTotal at 11.16.2006, 18:28:15 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.39 11.16.2006 no virus found
Authentium 4.93.8 11.16.2006 no virus found
Avast 4.7.892.0 11.15.2006 no virus found
AVG 386 11.16.2006 no virus found
BitDefender 7.2 11.16.2006 no virus found
CAT-QuickHeal 8.00 11.16.2006 no virus found
ClamAV devel-20060426 11.16.2006 no virus found
DrWeb 4.33 11.16.2006 Trojan.Popuper
eTrust-InoculateIT 23.73.57 11.16.2006 no virus found
eTrust-Vet 30.3.3195 11.16.2006 no virus found
Ewido 4.0 11.16.2006 no virus found
Fortinet 2.82.0.0 11.16.2006 suspicious
F-Prot 3.16f 11.16.2006 no virus found
F-Prot4 4.2.1.29 11.16.2006 no virus found
Ikarus 0.2.65.0 11.16.2006 no virus found
Kaspersky 4.0.2.24 11.16.2006 Trojan-Downloader.Win32.Zlob.axj
McAfee 4897 11.16.2006 no virus found
Microsoft 1.1609 11.16.2006 no virus found
NOD32v2 1868 11.15.2006 no virus found
Norman 5.80.02 11.16.2006 no virus found
Panda 9.0.0.4 11.16.2006 no virus found
Prevx1 V2 11.16.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.1.119 11.15.2006 no virus found
UNA 1.83 11.15.2006 no virus found
VBA32 3.11.1 11.16.2006 no virus found
VirusBuster 4.3.15:9 11.16.2006 no virus found

Aditional Information
File size: 55209 bytes
MD5: 8c565cb1bf137197fc346e2102de3f5b
SHA1: 205ddb439f07822123278521dc98281a3fae978e
packers: UPX
packers: UPX, BINARYRES, BINARYRES
packers: UPX

[5ergi0]

Из http://virusinfo.info/showthread.php?t=6792
Antivirus Version Update Result
AntiVir 7.2.0.39 11.16.2006 no virus found
Authentium 4.93.8 11.16.2006 no virus found
Avast 4.7.892.0 11.15.2006 Win32:Renos-U
AVG 386 11.16.2006 no virus found
BitDefender 7.2 11.16.2006 no virus found
CAT-QuickHeal 8.00 11.16.2006 no virus found
ClamAV devel-20060426 11.16.2006 no virus found
DrWeb 4.33 11.16.2006 BACKDOOR.Trojan
eTrust-InoculateIT 23.73.57 11.16.2006 no virus found
eTrust-Vet 30.3.3195 11.16.2006 no virus found
Ewido 4.0 11.16.2006 no virus found
Fortinet 2.82.0.0 11.16.2006 no virus found
F-Prot 3.16f 11.16.2006 no virus found
F-Prot4 4.2.1.29 11.16.2006 no virus found
Ikarus 0.2.65.0 11.16.2006 no virus found
Kaspersky 4.0.2.24 11.16.2006 no virus found
McAfee 4897 11.16.2006 no virus found
Microsoft 1.1609 11.16.2006 no virus found
NOD32v2 1868 11.15.2006 no virus found
Norman 5.80.02 11.16.2006 no virus found
Panda 9.0.0.4 11.16.2006 Adware/Adservice
Prevx1 V2 11.16.2006 Polynomial.Code.Exploit
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.120 11.16.2006 no virus found
UNA 1.83 11.16.2006 no virus found
VBA32 3.11.1 11.16.2006 no virus found
VirusBuster 4.3.15:9 11.16.2006 no virus found

File size: 59392 bytes
MD5: 6d163f82aefb0ca40cc8162ff13e32c8
SHA1: c9de6b6f56b6d86653e3b66a4787b168972283cd
packers: PECompact
packers: PECOMPACT
packers: PecBundle, PECompact

[Alex_Goodwin]

STATUS: FINISHEDComplete scanning result of "__1056", received in VirusTotal at 11.17.2006, 08:54:28 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.39 11.17.2006 HEUR/Crypted
Authentium 4.93.8 11.17.2006 could be a corrupted executable file
Avast 4.7.892.0 11.15.2006 no virus found
AVG 386 11.16.2006 no virus found
BitDefender 7.2 11.17.2006 no virus found
CAT-QuickHeal 8.00 11.16.2006 no virus found
ClamAV devel-20060426 11.16.2006 no virus found
DrWeb 4.33 11.16.2006 no virus found
eTrust-InoculateIT 23.73.58 11.17.2006 no virus found
eTrust-Vet 30.3.3197 11.17.2006 no virus found
Ewido 4.0 11.16.2006 no virus found
Fortinet 2.82.0.0 11.17.2006 suspicious
F-Prot 3.16f 11.16.2006 no virus found
F-Prot4 4.2.1.29 11.17.2006 no virus found
Ikarus 0.2.65.0 11.16.2006 no virus found
Kaspersky 4.0.2.24 11.17.2006 no virus found
McAfee 4897 11.16.2006 no virus found
Microsoft 1.1609 11.17.2006 no virus found
NOD32v2 1869 11.16.2006 no virus found
Norman 5.80.02 11.16.2006 no virus found
Panda 9.0.0.4 11.16.2006 no virus found
Prevx1 V2 11.17.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.120 11.17.2006 no virus found
UNA 1.83 11.16.2006 no virus found
VBA32 3.11.1 11.16.2006 no virus found
VirusBuster 4.3.15:9 11.16.2006 no virus found


Aditional Information
File size: 52326 bytes
MD5: a1c101b839a837a310dc2d3720a0e9b7
SHA1: f896f4bc24595442b960eef91ec86bedfd97636d


STATUS: FINISHEDComplete scanning result of "__1056", received in VirusTotal at 11.19.2006, 11:27:03 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.39 11.17.2006 HEUR/Crypted
Authentium 4.93.8 11.17.2006 could be a corrupted executable file
Avast 4.7.892.0 11.18.2006 no virus found
AVG 386 11.18.2006 no virus found
BitDefender 7.2 11.19.2006 no virus found
CAT-QuickHeal 8.00 11.18.2006 no virus found
ClamAV devel-20060426 11.18.2006 no virus found
DrWeb 4.33 11.18.2006 Trojan.PWS.Wmsender
eSafe 7.0.14.0 11.19.2006 no virus found
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3197 11.17.2006 no virus found
Ewido 4.0 11.18.2006 no virus found
Fortinet 2.82.0.0 11.19.2006 suspicious
F-Prot 3.16f 11.17.2006 no virus found
F-Prot4 4.2.1.29 11.17.2006 no virus found
Ikarus 0.2.65.0 11.17.2006 no virus found
Kaspersky 4.0.2.24 11.19.2006 no virus found
McAfee 4899 11.18.2006 no virus found
Microsoft 1.1609 11.19.2006 no virus found
NOD32v2 1870 11.17.2006 no virus found
Norman 5.80.02 11.17.2006 no virus found
Panda 9.0.0.4 11.18.2006 no virus found
Prevx1 V2 11.19.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.17.2006 no virus found
VBA32 3.11.1 11.19.2006 Trojan.PWS.Wmsender
VirusBuster 4.3.15:9 11.18.2006 no virus found


Aditional Information
File size: 52326 bytes
MD5: a1c101b839a837a310dc2d3720a0e9b7
SHA1: f896f4bc24595442b960eef91ec86bedfd97636d

[DoSTR]

Только что, пришла ссылка на зараженный файл через ICQ-спам :
Complete scanning result of "SexcBertkovoi.exe", received in VirusTotal at 11.18.2006, 13:07:19 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.39 11.17.2006 HEUR/Crypted
Authentium 4.93.8 11.17.2006 could be a corrupted executable file
Avast 4.7.892.0 11.15.2006 no virus found
AVG 386 11.17.2006 no virus found
BitDefender 7.2 11.18.2006 no virus found
CAT-QuickHeal 8.00 11.17.2006 no virus found
ClamAV devel-20060426 11.18.2006 no virus found
DrWeb 4.33 11.18.2006 Trojan.PWS.Wmsender
eSafe 7.0.14.0 11.16.2006 no virus found
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3197 11.17.2006 no virus found
Ewido 4.0 11.17.2006 no virus found
Fortinet 2.82.0.0 11.18.2006 suspicious
F-Prot 3.16f 11.17.2006 no virus found
F-Prot4 4.2.1.29 11.17.2006 no virus found
Ikarus 0.2.65.0 11.17.2006 no virus found
Kaspersky 4.0.2.24 11.18.2006 no virus found
McAfee 4899 11.18.2006 no virus found
Microsoft 1.1609 11.18.2006 no virus found
NOD32v2 1870 11.17.2006 no virus found
Norman 5.80.02 11.17.2006 no virus found
Panda 9.0.0.4 11.17.2006 no virus found
Prevx1 V2 11.18.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.17.2006 no virus found
VBA32 3.11.1 11.17.2006 no virus found
VirusBuster 4.3.15:9 11.17.2006 no virus found

Aditional Information
File size: 52326 bytes
MD5: a1c101b839a837a310dc2d3720a0e9b7
SHA1: f896f4bc24595442b960eef91ec86bedfd97636d

[Winsent]

Complete scanning result of "doser.exe", received in VirusTotal at 11.18.2006, 17:22:50 (CET).


Antivirus Version Update Result

AntiVir 7.2.0.39 11.17.2006 HEUR/Crypted
Authentium 4.93.8 11.17.2006 could be a corrupted executable file
Avast 4.7.892.0 11.15.2006 no virus found
AVG 386 11.17.2006 no virus found
BitDefender 7.2 11.18.2006 no virus found
CAT-QuickHeal 8.00 11.18.2006 no virus found
ClamAV devel-20060426 11.18.2006 no virus found
DrWeb 4.33 11.18.2006 no virus found
eSafe 7.0.14.0 11.16.2006 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3197 11.17.2006 no virus found
Ewido 4.0 11.18.2006 no virus found
Fortinet 2.82.0.0 11.18.2006 suspicious
F-Prot 3.16f 11.17.2006 no virus found
F-Prot4 4.2.1.29 11.17.2006 no virus found
Ikarus 0.2.65.0 11.17.2006 no virus found
Kaspersky 4.0.2.24 11.18.2006 Trojan-PSW.Win32.LdPinch.bad
McAfee 4899 11.18.2006 no virus found
Microsoft 1.1609 11.18.2006 no virus found
NOD32v2 1870 11.17.2006 no virus found
Norman 5.80.02 11.17.2006 no virus found
Panda 9.0.0.4 11.18.2006 Suspicious file
Prevx1 V2 11.18.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.17.2006 no virus found
VBA32 3.11.1 11.17.2006 no virus found
VirusBuster 4.3.15:9 11.18.2006 no virus found

Aditional Information
File size: 14894 bytes
MD5: b7ba61bb48c021e6ede7595a94cda912
SHA1: e971563c00daebc13e16d8b304b582aba711bab3
packers: UPX

[MOCT]

Complete scanning result of "__1092", received in VirusTotal at 11.19.2006, 13:11:11 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.39 11.17.2006 no virus found
Authentium 4.93.8 11.17.2006 no virus found
Avast 4.7.892.0 11.18.2006 no virus found
AVG 386 11.18.2006 no virus found
BitDefender 7.2 11.19.2006 Adware.Wildtangent.B
CAT-QuickHeal 8.00 11.18.2006 no virus found
ClamAV devel-20060426 11.18.2006 no virus found
DrWeb 4.33 11.19.2006 no virus found
eSafe 7.0.14.0 11.19.2006 no virus found
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3197 11.17.2006 no virus found
Ewido 4.0 11.18.2006 no virus found
Fortinet 2.82.0.0 11.19.2006 no virus found
F-Prot 3.16f 11.17.2006 no virus found
F-Prot4 4.2.1.29 11.17.2006 no virus found
Ikarus 0.2.65.0 11.17.2006 no virus found
Kaspersky 4.0.2.24 11.19.2006 no virus found
McAfee 4899 11.18.2006 no virus found
Microsoft 1.1609 11.19.2006 no virus found
NOD32v2 1870 11.17.2006 no virus found
Norman 5.80.02 11.17.2006 W32/WildTangent.B
Panda 9.0.0.4 11.18.2006 no virus found
Prevx1 V2 11.19.2006 AdWare.WildTangent.b
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.18.2006 Adware/WildTangent.b
UNA 1.83 11.17.2006 Adware.WildTangent.3896
VBA32 3.11.1 11.19.2006 no virus found
VirusBuster 4.3.15:9 11.18.2006 no virus found


Aditional Information
File size: 36864 bytes
MD5: 41a3d940798bdaf5d05208ee0006672b
SHA1: d8fc82499651dcb2fc5c12bf9ec94afe431650b0

[Winsent]

Complete scanning result of "sex.exe", received in VirusTotal at 11.20.2006, 17:59:15 (CET).


Antivirus Version Update Result

AntiVir 7.2.0.39 11.20.2006 HEUR/Crypted
Authentium 4.93.8 11.17.2006 W32/Warezov.gen4
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 no virus found
BitDefender 7.2 11.20.2006 DeepScan:Generic.Malware.FYd!lg.610B4ED7
CAT-QuickHeal 8.00 11.20.2006 no virus found
ClamAV devel-20060426 11.20.2006 no virus found
DrWeb 4.33 11.20.2006 no virus found
eSafe 7.0.14.0 11.20.2006 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3203 11.20.2006 no virus found
Ewido 4.0 11.20.2006 no virus found
Fortinet 2.82.0.0 11.20.2006 suspicious
F-Prot 3.16f 11.17.2006 W32/Warezov.gen4
F-Prot4 4.2.1.29 11.17.2006 W32/Warezov.gen4
Ikarus 0.2.65.0 11.20.2006 no virus found
Kaspersky 4.0.2.24 11.20.2006 no virus found
McAfee 4900 11.20.2006 no virus found
Microsoft 1.1609 11.20.2006 Win32/Ldpinch
NOD32v2 1873 11.20.2006 no virus found
Norman 5.80.02 11.20.2006 no virus found
Panda 9.0.0.4 11.20.2006 Suspicious file
Prevx1 V2 11.20.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.17.2006 no virus found
VBA32 3.11.1 11.20.2006 MalwareScope.Trojan-PSW.LdPinch.1
VirusBuster 4.3.15:9 11.20.2006 no virus found

Aditional Information
File size: 24064 bytes
MD5: ab72575342931915ce244f68ba72633d
SHA1: 43194ec5528e6f5f530cbee6b6b5c1e2e3489559
packers: UPX
packers: UPX
packers: UPX
packers: UPX

[Зайцев Олег]

ITW, изловлен моим автоматическим анализатором сегодня.
AntiVir 7.2.0.39 11.20.2006 TR/Spy.Goldun.NA
Authentium 4.93.8 11.17.2006 no virus found
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 no virus found
BitDefender 7.2 11.20.2006 Trojan.Spy.Goldun.NA
CAT-QuickHeal 8.00 11.20.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 11.20.2006 no virus found
DrWeb 4.33 11.20.2006 Trojan.PWS.GoldSpy
eSafe 7.0.14.0 11.20.2006 Suspicious Trojan/Worm
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3203 11.20.2006 no virus found
Ewido 4.0 11.20.2006 Logger.Goldun.hp
Fortinet 2.82.0.0 11.20.2006 suspicious
F-Prot 3.16f 11.17.2006 no virus found
F-Prot4 4.2.1.29 11.17.2006 no virus found
Ikarus 0.2.65.0 11.20.2006 no virus found
Kaspersky 4.0.2.24 11.20.2006 no virus found
McAfee 4900 11.20.2006 no virus found
Microsoft 1.1609 11.20.2006 no virus found
NOD32v2 1873 11.20.2006 probably a variant of Win32/Spy.Goldun.HP
Norman 5.80.02 11.20.2006 Suspicious_F.gen
Panda 9.0.0.4 11.20.2006 Trj/Goldun.MN
Prevx1 V2 11.20.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.20.2006 suspected of Embedded.Trojan.PWS.GoldSpy
VirusBuster 4.3.15:9 11.20.2006 no virus found

Aditional Information
File size: 29559 bytes
MD5: 4698f8bd9ed2aae437ed66f8598b2261
SHA1: d76968f8d9e9a8a9b8d24149e5001add86f39cc8
packers: FSG, PECRYPT

[Зайцев Олег]

ITW, изловлен моим автоматическим анализатором сегодня

AntiVir 7.2.0.39 11.20.2006 TR/Agent.8827
Authentium 4.93.8 11.17.2006 W32/Dropper.gen1
Avast 4.7.892.0 11.20.2006 Win32:Haxdoor-HC
AVG 386 11.20.2006 no virus found
BitDefender 7.2 11.20.2006 Generic.Malware.SFYdld.FE2794A3
CAT-QuickHeal 8.00 11.20.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 11.20.2006 Trojan.Rootkit-6
DrWeb 4.33 11.20.2006 no virus found
eSafe 7.0.14.0 11.20.2006 Suspicious Trojan/Worm
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3203 11.20.2006 Win32/ProcHide!generic
Ewido 4.0 11.20.2006 Logger.Goldun.gu
Fortinet 2.82.0.0 11.20.2006 Haxdor.X!tr
F-Prot 3.16f 11.17.2006 W32/Dropper.gen1
F-Prot4 4.2.1.29 11.17.2006 W32/Dropper.gen1
Ikarus 0.2.65.0 11.20.2006 no virus found
Kaspersky 4.0.2.24 11.20.2006 no virus found
McAfee 4900 11.20.2006 no virus found
Microsoft 1.1609 11.20.2006 Trojan:Win32/HideDrv.gen!sys
NOD32v2 1873 11.20.2006 a variant of Win32/Spy.Goldun.GU
Norman 5.80.02 11.20.2006 Suspicious_F.gen
Panda 9.0.0.4 11.20.2006 Bck/Haxdoor.NQ
Prevx1 V2 11.20.2006 Covert.Code
Sophos 4.11.0 11.16.2006 Troj/Haxdor-Fam
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.20.2006 suspected of Embedded.Backdoor.Win32.Haxdoor.kx
VirusBuster 4.3.15:9 11.20.2006 no virus found

Aditional Information
File size: 8827 bytes
MD5: 95281eb0779dd64b0005258432623d5f
SHA1: 1385ebf84f0828712e6f2aeaee608894899726f5
packers: FSG
packers: FSG
packers: FSG

[Зайцев Олег]

ITW, изловлен моим автоматическим анализатором ...

AntiVir 7.2.0.39 11.20.2006 DR/Delphi.Gen
Authentium 4.93.8 11.17.2006 no virus found
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 no virus found
BitDefender 7.2 11.20.2006 no virus found
CAT-QuickHeal 8.00 11.20.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 11.20.2006 no virus found
DrWeb 4.33 11.20.2006 Trojan.DownLoader.14908
eSafe 7.0.14.0 11.20.2006 Suspicious Trojan/Worm
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3203 11.20.2006 no virus found
Ewido 4.0 11.20.2006 no virus found
Fortinet 2.82.0.0 11.20.2006 suspicious
F-Prot 3.16f 11.17.2006 no virus found
F-Prot4 4.2.1.29 11.17.2006 no virus found
Ikarus 0.2.65.0 11.20.2006 no virus found
Kaspersky 4.0.2.24 11.20.2006 no virus found
McAfee 4900 11.20.2006 no virus found
Microsoft 1.1609 11.20.2006 no virus found
NOD32v2 1873 11.20.2006 no virus found
Norman 5.80.02 11.20.2006 Suspicious_F.gen
Panda 9.0.0.4 11.20.2006 Suspicious file
Prevx1 V2 11.20.2006 no virus found
Sophos 4.11.0 11.16.2006 Mal/Packer
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.20.2006 Trojan.DownLoader.14908
VirusBuster 4.3.15:9 11.20.2006 no virus found

Aditional Information
File size: 12405 bytes
MD5: 79a1e1b4c4626977ec406e30a1d45931
SHA1: 7f131495c549c40d056c76c24c24a1833e142fce

[Зайцев Олег]

ITW, изловлен моим автоматическим анализатором ...

AntiVir 7.2.0.39 11.20.2006 TR/Dldr.UltCleaner
Authentium 4.93.8 11.17.2006 Possibly a new variant of W32/Behavior:SelfStarterInternetTrojan!Maximus
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 no virus found
BitDefender 7.2 11.20.2006 no virus found
CAT-QuickHeal 8.00 11.20.2006 no virus found
ClamAV devel-20060426 11.20.2006 no virus found
DrWeb 4.33 11.20.2006 no virus found
eSafe 7.0.14.0 11.20.2006 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3203 11.20.2006 no virus found
Ewido 4.0 11.20.2006 no virus found
Fortinet 2.82.0.0 11.20.2006 suspicious
F-Prot 3.16f 11.17.2006 Possibly a new variant of W32/Behavior:SelfStarterInternetTrojan!Maximus
F-Prot4 4.2.1.29 11.17.2006 W32/Behavior:SelfStarterInternetTrojan!Maximus
Ikarus 0.2.65.0 11.20.2006 no virus found
Kaspersky 4.0.2.24 11.20.2006 no virus found
McAfee 4900 11.20.2006 no virus found
Microsoft 1.1609 11.20.2006 no virus found
NOD32v2 1873 11.20.2006 no virus found
Norman 5.80.02 11.20.2006 no virus found
Panda 9.0.0.4 11.20.2006 Suspicious file
Prevx1 V2 11.20.2006 Spyware.UltimateDefender
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.20.2006 no virus found
VirusBuster 4.3.15:9 11.20.2006 no virus found

Aditional Information
File size: 38912 bytes
MD5: a0b6c66ac7e1f1cafbe16163b94d78a7
SHA1: 5229d73f6ea6d0d22a4e12ab8ed7df7d09e6391d
packers: UPX
packers: UPX
packers: UPX

[Зайцев Олег]

ITW, изловлен моим автоматическим анализатором ...

AntiVir 7.2.0.39 11.20.2006 HEUR/Malware
Authentium 4.93.8 11.17.2006 Possibly a new variant of W32/CrazyCrunch-based!Maximus
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 no virus found
BitDefender 7.2 11.20.2006 no virus found
CAT-QuickHeal 8.00 11.20.2006 no virus found
ClamAV devel-20060426 11.20.2006 no virus found
DrWeb 4.33 11.20.2006 Trojan.Winclean
eSafe 7.0.14.0 11.20.2006 no virus found
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3203 11.20.2006 no virus found
Ewido 4.0 11.20.2006 no virus found
Fortinet 2.82.0.0 11.20.2006 PossibleThreat!015314
F-Prot 3.16f 11.17.2006 Possibly a new variant of W32/CrazyCrunch-based!Maximus
F-Prot4 4.2.1.29 11.17.2006 W32/CrazyCrunch-based!Maximus
Ikarus 0.2.65.0 11.20.2006 no virus found
Kaspersky 4.0.2.24 11.20.2006 no virus found
McAfee 4900 11.20.2006 no virus found
Microsoft 1.1609 11.20.2006 no virus found
NOD32v2 1873 11.20.2006 no virus found
Norman 5.80.02 11.20.2006 no virus found
Panda 9.0.0.4 11.20.2006 Trj/Cimuz.BM
Prevx1 V2 11.20.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.20.2006 no virus found
VirusBuster 4.3.15:9 11.20.2006 no virus found

Aditional Information
File size: 53248 bytes
MD5: f09c44eaece6747644b5295347d244ba
SHA1: 7e526dab23f5efbc5d12d7647f20f54536bd40b8

[Зайцев Олег]

ITW, изловлен моим автоматическим анализатором ...

AntiVir 7.2.0.39 11.20.2006 no virus found
Authentium 4.93.8 11.17.2006 no virus found
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 Proxy.25.P
BitDefender 7.2 11.20.2006 no virus found
CAT-QuickHeal 8.00 11.20.2006 no virus found
ClamAV devel-20060426 11.20.2006 no virus found
DrWeb 4.33 11.20.2006 no virus found
eSafe 7.0.14.0 11.20.2006 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3203 11.20.2006 no virus found
Ewido 4.0 11.20.2006 no virus found
Fortinet 2.82.0.0 11.20.2006 no virus found
F-Prot 3.16f 11.17.2006 no virus found
F-Prot4 4.2.1.29 11.17.2006 no virus found
Ikarus 0.2.65.0 11.20.2006 no virus found
Kaspersky 4.0.2.24 11.20.2006 no virus found
McAfee 4900 11.20.2006 no virus found
Microsoft 1.1609 11.20.2006 no virus found
NOD32v2 1873 11.20.2006 no virus found
Norman 5.80.02 11.20.2006 no virus found
Panda 9.0.0.4 11.20.2006 Suspicious file
Prevx1 V2 11.20.2006 no virus found
Sophos 4.11.0 11.16.2006 Mal/Behav-080
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.20.2006 no virus found
VirusBuster 4.3.15:9 11.20.2006 no virus found

Aditional Information
File size: 38912 bytes
MD5: abb6837abe0384231990c32a229f2593
SHA1: c79a1282a55f5fac3b741162e8b93058c8c52cc3
packers: UPX

[Зайцев Олег]

ITW, изловлен моим автоматическим анализатором ...

AntiVir 7.2.0.39 11.20.2006 TR/Crypt.F.Gen
Authentium 4.93.8 11.17.2006 no virus found
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 Win32/PEPatch
BitDefender 7.2 11.20.2006 no virus found
CAT-QuickHeal 8.00 11.20.2006 no virus found
ClamAV devel-20060426 11.20.2006 Trojan.Spambot-16
DrWeb 4.33 11.20.2006 Win32.Dref
eSafe 7.0.14.0 11.20.2006 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3203 11.20.2006 Win32/Sinteri!downloader
Ewido 4.0 11.20.2006 no virus found
Fortinet 2.82.0.0 11.20.2006 suspicious
F-Prot 3.16f 11.17.2006 no virus found
F-Prot4 4.2.1.29 11.17.2006 no virus found
Ikarus 0.2.65.0 11.20.2006 no virus found
Kaspersky 4.0.2.24 11.20.2006 no virus found
McAfee 4900 11.20.2006 no virus found
Microsoft 1.1609 11.20.2006 Win32/Vxidl.gen!encrypted
NOD32v2 1873 11.20.2006 no virus found
Norman 5.80.02 11.20.2006 no virus found
Panda 9.0.0.4 11.20.2006 no virus found
Prevx1 V2 11.20.2006 Dropper.Payload
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.20.2006 MalwareScope.Worm.Nuwar-Glowa.1
VirusBuster 4.3.15:9 11.20.2006 Cryptor.Xorpack.D

Aditional Information
File size: 6010 bytes
MD5: 712563c248819624a1400c0916adaf63
SHA1: 3b20d31b47f74607e72830d2db513029830463ad

[Зайцев Олег]

ITW, изловлен моим автоматическим анализатором ...

AntiVir 7.2.0.39 11.20.2006 TR/Spy.Goldun.NA
Authentium 4.93.8 11.17.2006 no virus found
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 no virus found
BitDefender 7.2 11.20.2006 Trojan.Spy.Goldun.NA
CAT-QuickHeal 8.00 11.20.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 11.20.2006 no virus found
DrWeb 4.33 11.20.2006 Trojan.PWS.GoldSpy
eSafe 7.0.14.0 11.20.2006 Suspicious Trojan/Worm
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3203 11.20.2006 no virus found
Ewido 4.0 11.20.2006 Logger.Goldun.hp
Fortinet 2.82.0.0 11.20.2006 suspicious
F-Prot 3.16f 11.17.2006 no virus found
F-Prot4 4.2.1.29 11.17.2006 no virus found
Ikarus 0.2.65.0 11.20.2006 no virus found
Kaspersky 4.0.2.24 11.20.2006 no virus found
McAfee 4900 11.20.2006 no virus found
Microsoft 1.1609 11.20.2006 no virus found
NOD32v2 1873 11.20.2006 probably a variant of Win32/Spy.Goldun.HP
Norman 5.80.02 11.20.2006 Suspicious_F.gen
Panda 9.0.0.4 11.20.2006 Trj/Goldun.MN
Prevx1 V2 11.20.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.20.2006 suspected of Embedded.Trojan.PWS.GoldSpy
VirusBuster 4.3.15:9 11.20.2006 no virus found


Aditional Information
File size: 29559 bytes
MD5: 4698f8bd9ed2aae437ed66f8598b2261
SHA1: d76968f8d9e9a8a9b8d24149e5001add86f39cc8
packers: FSG, PECRYPT

[Зайцев Олег]

ITW, изловлен моим автоматическим анализатором ...

AntiVir 7.2.0.39 11.20.2006 TR/Dldr.Lineage.DN
Authentium 4.93.8 11.17.2006 no virus found
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 no virus found
BitDefender 7.2 11.20.2006 BehavesLike:Win32.AV-Killer
CAT-QuickHeal 8.00 11.20.2006 no virus found
ClamAV devel-20060426 11.20.2006 no virus found
DrWeb 4.33 11.20.2006 Trojan.PWS.Lineage
eSafe 7.0.14.0 11.20.2006 no virus found
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3203 11.20.2006 Win32/Lineage!generic
Ewido 4.0 11.20.2006 no virus found
Fortinet 2.82.0.0 11.20.2006 Lineage!tr.pws
F-Prot 3.16f 11.17.2006 no virus found
F-Prot4 4.2.1.29 11.17.2006 no virus found
Ikarus 0.2.65.0 11.20.2006 Backdoor.Win32.HacDef.084
Kaspersky 4.0.2.24 11.20.2006 Trojan-PSW.Win32.Delf.sv
McAfee 4900 11.20.2006 PWS-Lineage.dll
Microsoft 1.1609 11.20.2006 no virus found
NOD32v2 1873 11.20.2006 probably a variant of Win32/PSW.Lineage.DN
Norman 5.80.02 11.20.2006 W32/Lineage.ANTG
Panda 9.0.0.4 11.20.2006 Suspicious file
Prevx1 V2 11.20.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.18.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.20.2006 suspected of Trojan-PSW.Lineage.1
VirusBuster 4.3.15:9 11.20.2006 no virus found


Aditional Information
File size: 79360 bytes
MD5: 696183e1d1c6fa494bd69477c090d7db
SHA1: 23f6e4d437d9525e7c8939603de08947775a8452

[mvlab]

Complete scanning result of "sex.exe", received in VirusTotal at 11.20.2006, 22:04:47 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.39 11.20.2006 HEUR/Crypted
Authentium 4.93.8 11.20.2006 W32/Warezov.gen4
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 no virus found
BitDefender 7.2 11.20.2006 DeepScan:Generic.Malware.FYd!lg.610B4ED7
CAT-QuickHeal 8.00 11.20.2006 no virus found
ClamAV devel-20060426 11.20.2006 no virus found
DrWeb 4.33 11.20.2006 no virus found
eSafe 7.0.14.0 11.20.2006 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.59 11.18.2006 no virus found
eTrust-Vet 30.3.3203 11.20.2006 no virus found
Ewido 4.0 11.20.2006 no virus found
Fortinet 2.82.0.0 11.20.2006 suspicious
F-Prot 3.16f 11.20.2006 W32/Warezov.gen4
F-Prot4 4.2.1.29 11.20.2006 W32/Warezov.gen4
Ikarus 0.2.65.0 11.20.2006 no virus found
Kaspersky 4.0.2.24 11.20.2006 no virus found
McAfee 4900 11.20.2006 no virus found
Microsoft 1.1804 11.20.2006 Win32/Ldpinch
NOD32v2 1874 11.20.2006 no virus found
Norman 5.80.02 11.20.2006 no virus found
Panda 9.0.0.4 11.20.2006 Suspicious file
Prevx1 V2 11.20.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.20.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.20.2006 MalwareScope.Trojan-PSW.LdPinch.1
VirusBuster 4.3.15:9 11.20.2006 no virus found


Aditional Information
File size: 24064 bytes
MD5: ab72575342931915ce244f68ba72633d
SHA1: 43194ec5528e6f5f530cbee6b6b5c1e2e3489559
packers: UPX
packers: UPX
packers: UPX
packers: UPX

[drongo]

Complete scanning result of "avz00001.dta", received in VirusTotal at 11.21.2006, 08:16:56 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.39 11.20.2006 no virus found
Authentium 4.93.8 11.20.2006 could be a corrupted executable file
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 BackDoor.Generic3.SWE
BitDefender 7.2 11.21.2006 no virus found
CAT-QuickHeal 8.00 11.20.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 11.20.2006 no virus found
DrWeb 4.33 11.21.2006 no virus found
eSafe 7.0.14.0 11.20.2006 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.62 11.21.2006 no virus found
eTrust-Vet 30.3.3205 11.21.2006 no virus found
Ewido 4.0 11.20.2006 no virus found
Fortinet 2.82.0.0 11.21.2006 no virus found
F-Prot 3.16f 11.20.2006 no virus found
F-Prot4 4.2.1.29 11.20.2006 no virus found
Ikarus 0.2.65.0 11.21.2006 no virus found
Kaspersky 4.0.2.24 11.21.2006 no virus found
McAfee 4900 11.20.2006 no virus found
Microsoft 1.1804 11.21.2006 no virus found
NOD32v2 1874 11.20.2006 no virus found
Norman 5.80.02 11.20.2006 W32/Smalldoor.KVE
Panda 9.0.0.4 11.20.2006 Suspicious file
Prevx1 V2 11.21.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.21.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.21.2006 no virus found
VirusBuster 4.3.15:9 11.20.2006 no virus found

Aditional Information
File size: 108179 bytes
MD5: 61f2864c04b1da1d4c44f467b0012739
SHA1: e7509421353bcfe25f62a445ebca6d0fb6828270

[DoSTR]

Complete scanning result of "Photo_dcs_11.09.06.exe", received in VirusTotal at 11.21.2006, 18:05:15 (CET).

Antivirus Version Update Result
AntiVir 7.2.0.44 11.21.2006 HEUR/Crypted
Authentium 4.93.8 11.20.2006 Possibly a new variant of W32/HLLI-MewOrleans-based!Maximus
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 no virus found
BitDefender 7.2 11.21.2006 DeepScan:Generic.Malware.FYd!lg.43A0FC84
CAT-QuickHeal 8.00 11.21.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 11.21.2006 no virus found
DrWeb 4.33 11.21.2006 Trojan.PWS.LDPinch.1306
eSafe 7.0.14.0 11.20.2006 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.62 11.21.2006 no virus found
eTrust-Vet 30.3.3205 11.21.2006 no virus found
Ewido 4.0 11.21.2006 no virus found
Fortinet 2.82.0.0 11.21.2006 no virus found
F-Prot 3.16f 11.20.2006 Possibly a new variant of W32/HLLI-MewOrleans-based!Maximus
F-Prot4 4.2.1.29 11.20.2006 W32/HLLI-MewOrleans-based!Maximus
Ikarus 0.2.65.0 11.21.2006 no virus found
Kaspersky 4.0.2.24 11.21.2006 no virus found
McAfee 4901 11.21.2006 no virus found
Microsoft 1.1804 11.21.2006 Win32/Ldpinch
NOD32v2 1876 11.21.2006 no virus found
Norman 5.80.02 11.21.2006 W32/Suspicious_M.gen
Panda 9.0.0.4 11.21.2006 Suspicious file
Prevx1 V2 11.21.2006 no virus found
Sophos 4.11.0 11.16.2006 Mal/Packer
TheHacker 6.0.3.122 11.21.2006 no virus found
UNA 1.83 11.20.2006 no virus found
VBA32 3.11.1 11.21.2006 MalwareScope.Trojan-PSW.LdPinch.2
VirusBuster 4.3.15:9 11.21.2006 no virus found

Aditional Information
File size: 29703 bytes
MD5: 1d10a9ff177a9e8ab6fe6a785455192b
SHA1: f916aeeb0ef15870e302ba49525f66a2631ac3e7
packers: MEW
packers: MEW

[Winsent]

Complete scanning result of "doser.exe", received in VirusTotal at 11.22.2006, 05:32:09 (CET).


Antivirus Version Update Result

AntiVir 7.2.0.44 11.21.2006 HEUR/Crypted
Authentium 4.93.8 11.22.2006 no virus found
Avast 4.7.892.0 11.20.2006 no virus found
AVG 386 11.20.2006 no virus found
BitDefender 7.2 11.22.2006 DeepScan:Generic.Malware.FPYVdlPkg.67E21543
CAT-QuickHeal 8.00 11.21.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 11.21.2006 no virus found
DrWeb 4.33 11.21.2006 BACKDOOR.PWS.Trojan
eSafe 7.0.14.0 11.20.2006 Suspicious Trojan/Worm
eTrust-InoculateIT 23.73.63 11.22.2006 no virus found
eTrust-Vet 30.3.3205 11.21.2006 no virus found
Ewido 4.0 11.21.2006 no virus found
Fortinet 2.82.0.0 11.22.2006 suspicious
F-Prot 3.16f 11.22.2006 no virus found
F-Prot4 4.2.1.29 11.22.2006 no virus found
Ikarus 0.2.65.0 11.21.2006 no virus found
Kaspersky 4.0.2.24 11.22.2006 Trojan-PSW.Win32.LdPinch.bdm
McAfee 4901 11.21.2006 no virus found
Microsoft 1.1804 11.22.2006 no virus found
NOD32v2 1876 11.21.2006 a variant of Win32/PSW.LdPinch.RG
Norman 5.80.02 11.21.2006 no virus found
Panda 9.0.0.4 11.21.2006 no virus found
Prevx1 V2 11.22.2006 no virus found
Sophos 4.11.0 11.16.2006 no virus found
TheHacker 6.0.3.122 11.21.2006 no virus found
UNA 1.83 11.21.2006 no virus found
VBA32 3.11.1 11.21.2006 MalwareScope.Trojan-PSW.LdPinch.1
VirusBuster 4.3.15:9 11.21.2006 no virus found

Aditional Information
File size: 19211 bytes
MD5: 564cf13006ea7c2c0d32783dfd701fd3
SHA1: daaa77f466496bb39b3a68682a4f998fd9512e35
packers: YZPACK