Исследование антивирусов 7

[zorro84]

a-squared	4.5.0.41	2009.11.12	Trojan-Ransom!IK
AhnLab-V3	5.0.0.2	2009.11.12	-
AntiVir	7.9.1.65	2009.11.12	TR/Agent.314368
Antiy-AVL	2.0.3.7	2009.11.12	Trojan/Win32.PogBlock.gen
Authentium	5.2.0.5	2009.11.12	-
Avast	4.8.1351.0	2009.11.12	-
AVG	8.5.0.425	2009.11.12	SHeur2.BQNF
BitDefender	7.2	2009.11.12	-
CAT-QuickHeal	10.00	2009.11.12	-
ClamAV	0.94.1	2009.11.12	-
Comodo	2931	2009.11.12	-
DrWeb	5.0.0.12182	2009.11.12	Trojan.Winlock.313
eSafe	7.0.17.0	2009.11.11	-
eTrust-Vet	35.1.7117	2009.11.12	-
F-Prot	4.5.1.85	2009.11.12	-
F-Secure	9.0.15370.0	2009.11.11	-
Fortinet	3.120.0.0	2009.11.11	W32/PogBlock.DZ!tr
GData	19	2009.11.12	-
Ikarus	T3.1.1.74.0	2009.11.12	Trojan-Ransom
Jiangmin	11.0.800	2009.11.12	-
K7AntiVirus	7.10.894	2009.11.11	-
Kaspersky	7.0.0.125	2009.11.12	Trojan-Ransom.Win32.PogBlock.dz
McAfee	5800	2009.11.12	-
McAfee+Artemis	5800	2009.11.12	Artemis!36A90A29EE51
McAfee-GW-Edition	6.8.5	2009.11.12	Heuristic.BehavesLike.Win32.Suspicious.I
Microsoft	1.5202	2009.11.12	-
NOD32	4600	2009.11.12	Win32/LockScreen.CW
Norman	6.03.02	2009.11.11	W32/Malware.JUJX
nProtect	2009.1.8.0	2009.11.12	Trojan/W32.PogBlock.314368.B
Panda	10.0.2.2	2009.11.12	Trj/CI.A
PCTools	7.0.3.5	2009.11.12	-
Prevx	3.0	2009.11.12	-
Rising	22.21.03.09	2009.11.12	-
Sophos	4.47.0	2009.11.12	-
Sunbelt	3.2.1858.2	2009.11.12	-
Symantec	1.4.4.12	2009.11.12	-
TheHacker	6.5.0.2.066	2009.11.11	-
TrendMicro	9.0.0.1003	2009.11.12	-
VBA32	3.12.10.11	2009.11.11	-
ViRobot	2009.11.12.2033	2009.11.12	-
VirusBuster	4.6.5.0	2009.11.12	-

File size: 314368 bytes
MD5...: 36a90a29ee5179e1ef66d8b84c30ffe6
SHA1..: 099102dea15df9af983f4a7e256403067546229e
SHA256: 3a226a94a47bbbd1cb32cc906a896fd1e091489d09e9a66ba9 f46bc590284604
ssdeep: 6144:MhWqgRVlAr3NZysba2TBTl7yAOAkW5pW6ms:MhaQr3NZy spTtl7yPW5

[Shu_b]

File chknt32.exe received on 2009.11.13 04:59:03 (UTC)

Antivirus	Version	Last Update	Result
a-squared	4.5.0.41	2009.11.13	-
AhnLab-V3	5.0.0.2	2009.11.12	-
AntiVir	7.9.1.65	2009.11.12	TR/Dropper.Gen
Antiy-AVL	2.0.3.7	2009.11.13	-
Authentium	5.2.0.5	2009.11.13	-
Avast	4.8.1351.0	2009.11.12	-
AVG	8.5.0.425	2009.11.12	-
BitDefender	7.2	2009.11.13	-
CAT-QuickHeal	10.00	2009.11.12	-
ClamAV	0.94.1	2009.11.12	-
Comodo	2935	2009.11.13	-
DrWeb	5.0.0.12182	2009.11.13	-
eSafe	7.0.17.0	2009.11.12	-
eTrust-Vet	35.1.7118	2009.11.12	-
F-Prot	4.5.1.85	2009.11.12	-
F-Secure	9.0.15370.0	2009.11.11	-
Fortinet	3.120.0.0	2009.11.13	-
GData	19	2009.11.13	-
Ikarus	T3.1.1.74.0	2009.11.13	-
Jiangmin	11.0.800	2009.11.12	TrojanSpy.Zbot.srr
K7AntiVirus	7.10.894	2009.11.11	-
Kaspersky	7.0.0.125	2009.11.13	-
McAfee	5800	2009.11.12	-
McAfee+Artemis	5800	2009.11.12	-
McAfee-GW-Edition	6.8.5	2009.11.12	Trojan.Dropper.Gen
Microsoft	1.5202	2009.11.12	-
NOD32	4602	2009.11.13	-
Norman	6.03.02	2009.11.11	-
nProtect	2009.1.8.0	2009.11.13	-
Panda	10.0.2.2	2009.11.13	-
PCTools	7.0.3.5	2009.11.13	-
Prevx	3.0	2009.11.13	-
Rising	22.21.04.01	2009.11.13	-
Sophos	4.47.0	2009.11.13	-
Sunbelt	3.2.1858.2	2009.11.12	-
Symantec	1.4.4.12	2009.11.13	-
TheHacker	6.5.0.2.067	2009.11.12	-
TrendMicro	9.0.0.1003	2009.11.12	-
VBA32	3.12.10.11	2009.11.13	-
ViRobot	2009.11.13.2034	2009.11.13	-
VirusBuster	4.6.5.0	2009.11.12	-

Additional information
File size: 142082 bytes
MD5...: 360f03ee267b52ee1b5b41e5ff65c29e


File svchost.exe received on 2009.11.13 05:02:22 (UTC)

Antivirus	Version	Last Update	Result
a-squared	4.5.0.41	2009.11.10	-
AhnLab-V3	5.0.0.2	2009.11.06	-
AntiVir	7.9.1.61	2009.11.10	-
Antiy-AVL	2.0.3.7	2009.11.10	-
Authentium	5.2.0.5	2009.11.10	-
Avast	4.8.1351.0	2009.11.10	-
AVG	8.5.0.423	2009.11.10	-
BitDefender	7.2	2009.11.10	-
CAT-QuickHeal	10.00	2009.11.10	-
ClamAV	0.94.1	2009.11.10	-
Comodo	2905	2009.11.10	-
DrWeb	5.0.0.12182	2009.11.10	-
eSafe	7.0.17.0	2009.11.10	-
eTrust-Vet	35.1.7113	2009.11.10	-
F-Prot	4.5.1.85	2009.11.10	-
F-Secure	9.0.15370.0	2009.11.09	-
Fortinet	3.120.0.0	2009.11.10	-
GData	19	2009.11.10	-
Ikarus	T3.1.1.74.0	2009.11.10	-
Jiangmin	11.0.800	2009.11.10	-
K7AntiVirus	7.10.892	2009.11.09	-
Kaspersky	7.0.0.125	2009.11.10	-
McAfee	5797	2009.11.09	-
McAfee+Artemis	5797	2009.11.09	-
McAfee-GW-Edition	6.8.5	2009.11.10	-
Microsoft	1.5202	2009.11.10	-
NOD32	4592	2009.11.10	-
Norman	6.03.02	2009.11.09	-
nProtect	2009.1.8.0	2009.11.10	-
Panda	10.0.2.2	2009.11.09	-
PCTools	7.0.3.5	2009.11.10	-
Prevx	3.0	2009.11.13	-
Rising	22.21.01.09	2009.11.10	-
Sophos	4.47.0	2009.11.10	-
Sunbelt	3.2.1858.2	2009.11.10	-
Symantec	1.4.4.12	2009.11.10	-
TheHacker	6.5.0.2.064	2009.11.09	-
TrendMicro	9.0.0.1003	2009.11.10	-
VBA32	3.12.10.11	2009.11.09	-
ViRobot	2009.11.10.2029	2009.11.10	-
VirusBuster	4.6.5.0	2009.11.09	-

Additional information
File size: 460800 bytes
MD5...: 0e2325e8a7a2cc4c2d3964de4f6cc748

[Surfer]

File config.exe received on 2009.11.13 16:39:47 (UTC)
Result: 12/41 (29.27%)

a-squared 4.5.0.41 2009.11.13 Trojan.Win32.Qhost!IK
AhnLab-V3 5.0.0.2 2009.11.13 -
AntiVir 7.9.1.65 2009.11.13 -
Antiy-AVL 2.0.3.7 2009.11.13 -
Authentium 5.2.0.5 2009.11.13 -
Avast 4.8.1351.0 2009.11.13 -
AVG 8.5.0.425 2009.11.13 -
BitDefender 7.2 2009.11.13 -
CAT-QuickHeal 10.00 2009.11.13 -
ClamAV 0.94.1 2009.11.13 -
Comodo 2943 2009.11.13 Heur.Suspicious
DrWeb 5.0.0.12182 2009.11.13 Trojan.Hoster.355
eSafe 7.0.17.0 2009.11.12 Suspicious File
eTrust-Vet 35.1.7119 2009.11.13 -
F-Prot 4.5.1.85 2009.11.13 -
F-Secure 9.0.15370.0 2009.11.11 -
Fortinet 3.120.0.0 2009.11.13 -
GData 19 2009.11.13 -
Ikarus T3.1.1.74.0 2009.11.13 Trojan.Win32.Qhost
Jiangmin 11.0.800 2009.11.12 -
K7AntiVirus 7.10.896 2009.11.13 -
Kaspersky 7.0.0.125 2009.11.13 Trojan.BAT.Qhost.gy
McAfee 5800 2009.11.12 -
McAfee+Artemis 5800 2009.11.12 Artemis!E1D0EFF13118
McAfee-GW-Edition 6.8.5 2009.11.13 Heuristic.LooksLike.Win32.ModifiedUPX.B
Microsoft 1.5202 2009.11.13 -
NOD32 4604 2009.11.13 -
Norman 6.03.02 2009.11.13 -
nProtect 2009.1.8.0 2009.11.13 -
Panda 10.0.2.2 2009.11.13 Trj/CI.A
PCTools 7.0.3.5 2009.11.13 -
Prevx 3.0 2009.11.13 -
Rising 22.21.04.09 2009.11.13 Dropper.Win32.Agent.zrh
Sophos 4.47.0 2009.11.13 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.11.12 -
Symantec 1.4.4.12 2009.11.13 -
TheHacker 6.5.0.2.067 2009.11.12 -
TrendMicro 9.0.0.1003 2009.11.13 PAK_Generic.001
VBA32 3.12.10.11 2009.11.13 -
ViRobot 2009.11.13.2035 2009.11.13 -
VirusBuster 4.6.5.0 2009.11.13 -

http://www.virustotal.com/analisis/7...abb-1258130387

[gjf]

Файло шлётся в письмах с текстовкой

Dear Microsoft Customer,

Starting 12/11/2009 the ‘Conficker’ worm began infecting Microsoft customers unusually rapidly. Microsoft has been advised by your Internet provider that your network is infected.

To counteract further spread we advise removing the infection using an antispyware program. We are supplying all effected Windows Users with a free system scan in order to clean any files infected by the virus.

Please install attached file to start the scan. The process takes under a minute and will prevent your files from being compromised. We appreciate your prompt cooperation.

Regards,
Microsoft Windows Agent #2 (Hollis)
Microsoft Windows Computer Safety Division

Antivirus 	Version 	Last Update 	Result
a-squared 	4.5.0.41 	2009.11.13 	-
AhnLab-V3 	5.0.0.2 	2009.11.13 	-
AntiVir 	7.9.1.65 	2009.11.13 	TR/Crypt.ZPACK.Gen
Antiy-AVL 	2.0.3.7 	2009.11.13 	-
Authentium 	5.2.0.5 	2009.11.13 	W32/Trojan3.BNG
Avast 	4.8.1351.0 	2009.11.13 	-
AVG 	8.5.0.425 	2009.11.13 	-
BitDefender 	7.2 	2009.11.13 	-
CAT-QuickHeal 	10.00 	2009.11.13 	(Suspicious) - DNAScan
ClamAV 	0.94.1 	2009.11.13 	-
Comodo 	2943 	2009.11.13 	-
DrWeb 	5.0.0.12182 	2009.11.13 	-
eSafe 	7.0.17.0 	2009.11.12 	Suspicious File
eTrust-Vet 	35.1.7119 	2009.11.13 	-
F-Prot 	4.5.1.85 	2009.11.13 	W32/Trojan3.BNG
F-Secure 	9.0.15370.0 	2009.11.11 	Suspicious:W32/Malware!Online
Fortinet 	3.120.0.0 	2009.11.13 	-
GData 	19 	2009.11.13 	-
Ikarus 	T3.1.1.74.0 	2009.11.13 	-
Jiangmin 	11.0.800 	2009.11.12 	-
K7AntiVirus 	7.10.896 	2009.11.13 	-
Kaspersky 	7.0.0.125 	2009.11.13 	-
McAfee 	5800 	2009.11.12 	-
McAfee+Artemis 	5800 	2009.11.12 	Artemis!74500712A6A8
McAfee-GW-Edition 	6.8.5 	2009.11.13 	Trojan.Crypt.ZPACK.Gen
Microsoft 	1.5202 	2009.11.13 	TrojanDownloader:Win32/Cutwail.gen!C
NOD32 	4604 	2009.11.13 	-
Norman 	6.03.02 	2009.11.13 	-
nProtect 	2009.1.8.0 	2009.11.13 	-
Panda 	10.0.2.2 	2009.11.13 	-
PCTools 	7.0.3.5 	2009.11.13 	-
Prevx 	3.0 	2009.11.13 	Medium Risk Malware
Rising 	22.21.04.09 	2009.11.13 	-
Sophos 	4.47.0 	2009.11.13 	Mal/FakeAV-AX
Sunbelt 	3.2.1858.2 	2009.11.12 	-
Symantec 	1.4.4.12 	2009.11.13 	-
TheHacker 	6.5.0.2.067 	2009.11.12 	-
TrendMicro 	9.0.0.1003 	2009.11.13 	-
VBA32 	3.12.10.11 	2009.11.13 	-
ViRobot 	2009.11.13.2035 	2009.11.13 	-
VirusBuster 	4.6.5.0 	2009.11.13 	-

Additional information
File size: 55296 bytes
MD5 : 74500712a6a8a4a5951b96b56edec45a
SHA1 : d01998acf475bce2c2bad9f87cef122d34749e1d
SHA256: 9a497aab1129e85baed8c101a04159770c81084698b81648d2 0215a6901ae364
PEInfo: PE Structure information

[Никита Соловьев]

http://www.virustotal.com/ru/analisi...86c-1258134499

a-squared 4.5.0.41 2009.11.13 -
AhnLab-V3 5.0.0.2 2009.11.13 -
AntiVir 7.9.1.65 2009.11.13 -
Antiy-AVL 2.0.3.7 2009.11.13 -
Authentium 5.2.0.5 2009.11.13 -
Avast 4.8.1351.0 2009.11.13 -
AVG 8.5.0.425 2009.11.13 -
BitDefender 7.2 2009.11.13 -
CAT-QuickHeal 10.00 2009.11.13 TrojanDropper.VB.mre
ClamAV 0.94.1 2009.11.13 PUA.Packed.ASPack212
Comodo 2943 2009.11.13 -
DrWeb 5.0.0.12182 2009.11.13 -
eSafe 7.0.17.0 2009.11.12 Suspicious File
eTrust-Vet 35.1.7119 2009.11.13 -
F-Prot 4.5.1.85 2009.11.13 -
F-Secure 9.0.15370.0 2009.11.11 -
Fortinet 3.120.0.0 2009.11.13 -
GData 19 2009.11.13 -
Ikarus T3.1.1.74.0 2009.11.13 -
Jiangmin 11.0.800 2009.11.12 -
K7AntiVirus 7.10.896 2009.11.13 -
Kaspersky 7.0.0.125 2009.11.13 -
McAfee 5800 2009.11.12 -
McAfee+Artemis 5800 2009.11.12 Artemis!38668580BB61
McAfee-GW-Edition 6.8.5 2009.11.13 Heuristic.LooksLike.Trojan.Crypt.ZPACK.B
Microsoft 1.5202 2009.11.13 -
NOD32 4604 2009.11.13 -
Norman 6.03.02 2009.11.13 -
nProtect 2009.1.8.0 2009.11.13 -
Panda 10.0.2.2 2009.11.13 -
PCTools 7.0.3.5 2009.11.13 -
Prevx 3.0 2009.11.13 Medium Risk Malware
Rising 22.21.04.09 2009.11.13 -
Sophos 4.47.0 2009.11.13 -
Sunbelt 3.2.1858.2 2009.11.12 Trojan.Win32.Generic!BT
Symantec 1.4.4.12 2009.11.13 -
TheHacker 6.5.0.2.067 2009.11.12 -
TrendMicro 9.0.0.1003 2009.11.13 PAK_Generic.001
VBA32 3.12.10.11 2009.11.13 -
ViRobot 2009.11.13.2035 2009.11.13 -
VirusBuster 4.6.5.0 2009.11.13 -

http://www.virustotal.com/ru/analisi...e89-1258134678

a-squared 4.5.0.41 2009.11.10 -
AhnLab-V3 5.0.0.2 2009.11.06 -
AntiVir 7.9.1.61 2009.11.10 -
Antiy-AVL 2.0.3.7 2009.11.10 -
Authentium 5.2.0.5 2009.11.10 -
Avast 4.8.1351.0 2009.11.10 -
AVG 8.5.0.423 2009.11.10 -
BitDefender 7.2 2009.11.10 Gen:Trojan.Heur.bC5@Y2hszUo
CAT-QuickHeal 10.00 2009.11.10 -
ClamAV 0.94.1 2009.11.10 -
Comodo 2905 2009.11.10 -
DrWeb 5.0.0.12182 2009.11.10 -
eSafe 7.0.17.0 2009.11.10 -
eTrust-Vet 35.1.7113 2009.11.10 -
F-Prot 4.5.1.85 2009.11.10 -
F-Secure 9.0.15370.0 2009.11.09 Gen:Trojan.Heur.bC5@Y2hszUo
Fortinet 3.120.0.0 2009.11.10 -
GData 19 2009.11.10 Gen:Trojan.Heur.bC5@Y2hszUo
Ikarus T3.1.1.74.0 2009.11.10 -
Jiangmin 11.0.800 2009.11.10 -
K7AntiVirus 7.10.892 2009.11.09 -
Kaspersky 7.0.0.125 2009.11.10 -
McAfee 5797 2009.11.09 -
McAfee+Artemis 5797 2009.11.09 -
McAfee-GW-Edition 6.8.5 2009.11.10 -
Microsoft 1.5202 2009.11.10 -
NOD32 4592 2009.11.10 -
Norman 6.03.02 2009.11.09 -
nProtect 2009.1.8.0 2009.11.10 -
Panda 10.0.2.2 2009.11.09 -
PCTools 7.0.3.5 2009.11.10 -
Prevx 3.0 2009.11.13 -
Rising 22.21.01.09 2009.11.10 -
Sophos 4.47.0 2009.11.10 -
Sunbelt 3.2.1858.2 2009.11.10 -
Symantec 1.4.4.12 2009.11.10 -
TheHacker 6.5.0.2.064 2009.11.09 -
TrendMicro 9.0.0.1003 2009.11.10 -
VBA32 3.12.10.11 2009.11.09 -
ViRobot 2009.11.10.2029 2009.11.10 -
VirusBuster 4.6.5.0 2009.11.09 -

[Никита Соловьев]

http://www.virustotal.com/ru/analisi...f6f-1258229217

a-squared 4.5.0.41 2009.11.14 -
AhnLab-V3 5.0.0.2 2009.11.13 -
AntiVir 7.9.1.65 2009.11.13 -
Antiy-AVL 2.0.3.7 2009.11.13 -
Authentium 5.2.0.5 2009.11.14 -
Avast 4.8.1351.0 2009.11.14 -
AVG 8.5.0.425 2009.11.14 -
BitDefender 7.2 2009.11.14 -
CAT-QuickHeal 10.00 2009.11.13 -
ClamAV 0.94.1 2009.11.14 -
Comodo 2955 2009.11.14 -
DrWeb 5.0.0.12182 2009.11.14 DLOADER.Trojan
eSafe 7.0.17.0 2009.11.12 -
eTrust-Vet 35.1.7121 2009.11.14 -
F-Prot 4.5.1.85 2009.11.14 -
F-Secure 9.0.15370.0 2009.11.11 -
Fortinet 3.120.0.0 2009.11.14 -
GData 19 2009.11.14 -
Ikarus T3.1.1.74.0 2009.11.14 -
Jiangmin 11.0.800 2009.11.12 Trojan/Scar.dar
K7AntiVirus 7.10.896 2009.11.13 -
Kaspersky 7.0.0.125 2009.11.14 -
McAfee 5802 2009.11.14 -
McAfee+Artemis 5802 2009.11.14 -
McAfee-GW-Edition 6.8.5 2009.11.14 -
Microsoft 1.5202 2009.11.14 -
NOD32 4608 2009.11.14 -
Norman 6.03.02 2009.11.14 -
nProtect 2009.1.8.0 2009.11.14 -
Panda 10.0.2.2 2009.11.14 -
PCTools 7.0.3.5 2009.11.13 -
Prevx 3.0 2009.11.14 -
Rising 22.21.05.04 2009.11.14 -
Sophos 4.47.0 2009.11.14 Sus/Behav-1018
Sunbelt 3.2.1858.2 2009.11.12 -
Symantec 1.4.4.12 2009.11.14 -
TheHacker 6.5.0.2.070 2009.11.14 -
TrendMicro 9.0.0.1003 2009.11.14 Cryp_Xin2
VBA32 3.12.10.11 2009.11.13 -
ViRobot 2009.11.14.2037 2009.11.14 -
VirusBuster 4.6.5.0 2009.11

[senyak]

Файл Book_1019.exe получен 2009.11.15 15:46:55 (UTC)
Текущий статус: закончено
Результат: 6/41 (14.64%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.41 2009.11.10 Trojan-Downloader.Adload!IK
AhnLab-V3 5.0.0.2 2009.11.06 -
AntiVir 7.9.1.61 2009.11.10 ADSPY/AdSpy.Gen
Antiy-AVL 2.0.3.7 2009.11.10 -
Authentium 5.2.0.5 2009.11.10 -
Avast 4.8.1351.0 2009.11.10 -
AVG 8.5.0.423 2009.11.10 -
BitDefender 7.2 2009.11.10 -
CAT-QuickHeal 10.00 2009.11.10 -
ClamAV 0.94.1 2009.11.10 PUA.Packed.ASPack212
Comodo 2905 2009.11.10 -
DrWeb 5.0.0.12182 2009.11.10 Adware.FieryAds.22
eSafe 7.0.17.0 2009.11.10 -
eTrust-Vet 35.1.7113 2009.11.10 -
F-Prot 4.5.1.85 2009.11.10 -
F-Secure 9.0.15370.0 2009.11.09 -
Fortinet 3.120.0.0 2009.11.10 -
GData 19 2009.11.10 -
Ikarus T3.1.1.74.0 2009.11.10 Trojan-Downloader.Adload
Jiangmin 11.0.800 2009.11.10 -
K7AntiVirus 7.10.892 2009.11.09 -
Kaspersky 7.0.0.125 2009.11.10 -
McAfee 5797 2009.11.09 -
McAfee+Artemis 5797 2009.11.09 -
McAfee-GW-Edition 6.8.5 2009.11.10 Ad-Spyware.AdSpy.Gen
Microsoft 1.5202 2009.11.10 -
NOD32 4592 2009.11.10 -
Norman 6.03.02 2009.11.09 -
nProtect 2009.1.8.0 2009.11.10 -
Panda 10.0.2.2 2009.11.09 -
PCTools 7.0.3.5 2009.11.10 -
Prevx 3.0 2009.11.15 -
Rising 22.21.01.09 2009.11.10 -
Sophos 4.47.0 2009.11.10 -
Sunbelt 3.2.1858.2 2009.11.10 -
Symantec 1.4.4.12 2009.11.10 -
TheHacker 6.5.0.2.064 2009.11.09 -
TrendMicro 9.0.0.1003 2009.11.10 -
VBA32 3.12.10.11 2009.11.09 -
ViRobot 2009.11.10.2029 2009.11.10 -
VirusBuster 4.6.5.0 2009.11.09 -

Дополнительная информация
File size: 2840636 bytes
MD5...: c242644ab2195e21c4e12db26d179791
SHA1..: 9a389131e813e78c0ca2ff231536e63e10d524b6
SHA256: 9d03bc6ab21defa3a08321ed3a6a72e7d6f45ee4252c4cbad2 317683e14b7553
ssdeep: 49152:jvuniWVf68YjB6MhLXNA3onW9FtdP2ZQlWnn4Br1i8qh zRxYnVSvmYE8ej
jnMe6:S/Vf6RB6wLXNA3o8Fr+OW4pkhYnYvmqH
PEiD..: -
PEInfo: PE Structure information

http://www.virustotal.com/ru/analisi...553-1258300015

[ALEX(XX)]

Файл opdux.exe получен 2009.11.16 12:15:42 (UTC)

Антивирус	Версия	Обновление	Результат
a-squared	4.5.0.41	2009.11.16	Trojan.Win32.Inhoo!IK
AhnLab-V3	5.0.0.2	2009.11.13	-
AntiVir	7.9.1.65	2009.11.16	TR/Crypt.XPACK.Gen
Antiy-AVL	2.0.3.7	2009.11.16	-
Authentium	5.2.0.5	2009.11.15	-
Avast	4.8.1351.0	2009.11.16	-
AVG	8.5.0.425	2009.11.16	-
BitDefender	7.2	2009.11.16	-
CAT-QuickHeal	10.00	2009.11.16	-
ClamAV	0.94.1	2009.11.15	-
Comodo	2957	2009.11.15	-
DrWeb	5.0.0.12182	2009.11.16	-
eSafe	7.0.17.0	2009.11.16	-
eTrust-Vet	35.1.7122	2009.11.16	-
F-Prot	4.5.1.85	2009.11.15	-
F-Secure	9.0.15370.0	2009.11.11	-
Fortinet	3.120.0.0	2009.11.16	-
GData	19	2009.11.16	-
Ikarus	T3.1.1.74.0	2009.11.16	Trojan.Win32.Inhoo
Jiangmin	11.0.800	2009.11.16	-
K7AntiVirus	7.10.896	2009.11.13	-
Kaspersky	7.0.0.125	2009.11.16	-
McAfee	5803	2009.11.15	-
McAfee+Artemis	5803	2009.11.15	Artemis!45861A208020
McAfee-GW-Edition	6.8.5	2009.11.16	Heuristic.LooksLike.Win32.SuspiciousPE.B
Microsoft	1.5202	2009.11.16	-
NOD32	4611	2009.11.16	-
Norman	6.03.02	2009.11.16	OnLineGames.KGCC
nProtect	2009.1.8.0	2009.11.16	Trojan-PWS/W32.WebGame.116522
Panda	10.0.2.2	2009.11.15	-
PCTools	7.0.3.5	2009.11.16	-
Prevx	3.0	2009.11.16	High Risk Cloaked Malware
Rising	22.22.00.08	2009.11.16	-
Sophos	4.47.0	2009.11.16	Mal/Taterf-A
Sunbelt	3.2.1858.2	2009.11.12	BehavesLike.Win32.Malware (v)
Symantec	1.4.4.12	2009.11.16	-
TheHacker	6.5.0.2.070	2009.11.14	-
TrendMicro	9.0.0.1003	2009.11.16	-
VBA32	3.12.10.11	2009.11.15	Trojan-PSW.Win32.OnlineGames.3
ViRobot	2009.11.16.2039	2009.11.16	-
VirusBuster	4.6.5.0	2009.11.15	-

Дополнительная информация
File size: 116522 bytes
MD5...: 45861a208020a1d229b0edd08d0e0728
SHA1..: 0816185e69fdc55028436e6ad61f5a0886af544b
SHA256: e3ff27178fa318e0a3d02a72f3e0c57b340e4ac15d6a3ee92cd58ba75104d313
ssdeep: 3072:pSI68HHJiSK8DxrAZfWtNvnDFslJ7gjZPFZLWA:pUK9rDxsZfWDDFs/7CdZ<br>
PEiD..: -
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x10df<br>timedatestamp.....: 0x4ae9205d (Thu Oct 29 04:55:57 2009)<br>machinetype.......: 0x14c (I386)<br><br>( 6 sections )<br>name        viradd    virsiz   rawdsiz  ntrpy  md5<br>.text       0x1000   0x1e000     0x69a   7.85  161cdb2fe51242369d2e1ad76108af32<br>.data      0x1f000   0x1a000   0x19e00   7.93  8a6df4b740fbc2532d922bfabd195250<br>.rsrc      0x39000    0x2000    0x1696   0.73  4d2293991318c4674c148474722c3b75<br>.reloc     0x3b000    0x4000     0x52a   0.08  4d4e2459bb10d0de2d080a7cba5a8524<br>vnpsg      0x3f000    0x1000     0x69a   0.00  d41d8cd98f00b204e9800998ecf8427e<br>           0x40000    0x3000       0x0   0.00  d41d8cd98f00b204e9800998ecf8427e<br><br>( 1 imports )  <br>&gt; KERNEL32.DLL: GetStartupInfoA, FlushFileBuffers, FlushInstructionCache, GetComputerNameExA, GetCommandLineA, GetModuleHandleA, LoadLibraryA, ExitProcess, GetCurrentProcessId, IsBadReadPtr<br><br>( 0 exports ) <br>
RDS...: NSRL Reference Data Set<br>-
pdfid.: -
trid..: Win32 Executable Generic (68.0%)<br>Generic Win/DOS Executable (15.9%)<br>DOS Executable Generic (15.9%)<br>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
&lt;a href='http://info.prevx.com/aboutprogramtext.asp?PX5=CF8A698C2ADF9E45C7D001C9F1596100BAD12C11' target='_blank'&gt;http://info.prevx.com/aboutprogramtext.asp?PX5=CF8A698C2ADF9E45C7D001C9F1596100BAD12C11&lt;/a&gt;
sigcheck:<br>publisher....: n/a<br>copyright....: n/a<br>product......: n/a<br>description..: n/a<br>original name: n/a<br>internal name: n/a<br>file version.: n/a<br>comments.....: n/a<br>signers......: -<br>signing date.: -<br>verified.....: Unsigned<br>

[gjf]

Судя по строкам в коде, некий "СМС-шпион от Martin Pesch"

Antivirus 	Version 	Last Update 	Result
a-squared 	4.5.0.41 	2009.11.16 	-
AhnLab-V3 	5.0.0.2 	2009.11.16 	-
AntiVir 	7.9.1.65 	2009.11.16 	-
Antiy-AVL 	2.0.3.7 	2009.11.16 	-
Authentium 	5.2.0.5 	2009.11.16 	-
Avast 	4.8.1351.0 	2009.11.16 	-
AVG 	8.5.0.425 	2009.11.16 	-
BitDefender 	7.2 	2009.11.16 	-
CAT-QuickHeal 	10.00 	2009.11.16 	-
ClamAV 	0.94.1 	2009.11.16 	-
Comodo 	2958 	2009.11.16 	-
DrWeb 	5.0.0.12182 	2009.11.16 	-
eSafe 	7.0.17.0 	2009.11.16 	-
eTrust-Vet 	35.1.7123 	2009.11.16 	-
F-Prot 	4.5.1.85 	2009.11.16 	-
F-Secure 	9.0.15370.0 	2009.11.11 	-
Fortinet 	3.120.0.0 	2009.11.16 	-
GData 	19 	2009.11.16 	-
Ikarus 	T3.1.1.74.0 	2009.11.16 	-
Jiangmin 	11.0.800 	2009.11.16 	-
K7AntiVirus 	7.10.897 	2009.11.16 	Trojan.Win32.Malware.1
Kaspersky 	7.0.0.125 	2009.11.16 	-
McAfee 	5804 	2009.11.16 	-
McAfee+Artemis 	5804 	2009.11.16 	-
McAfee-GW-Edition 	6.8.5 	2009.11.16 	-
Microsoft 	1.5202 	2009.11.16 	-
NOD32 	4613 	2009.11.16 	-
Norman 	6.03.02 	2009.11.16 	W32/Banker.C!genr
nProtect 	2009.1.8.0 	2009.11.16 	-
Panda 	10.0.2.2 	2009.11.16 	-
PCTools 	7.0.3.5 	2009.11.16 	-
Prevx 	3.0 	2009.11.16 	Medium Risk Malware
Rising 	22.22.00.08 	2009.11.16 	-
Sophos 	4.47.0 	2009.11.16 	-
Sunbelt 	3.2.1858.2 	2009.11.12 	-
Symantec 	1.4.4.12 	2009.11.16 	-
TheHacker 	6.5.0.2.071 	2009.11.16 	Trojan/Buzus.bjcf
TrendMicro 	9.0.0.1003 	2009.11.16 	-
VBA32 	3.12.10.11 	2009.11.15 	-
ViRobot 	2009.11.16.2039 	2009.11.16 	Trojan.Win32.Agent.2558416
VirusBuster 	4.6.5.0 	2009.11.16 	-

[Viver]

Пришло по почте

Антивирус	Версия	Обновление	Результат
a-squared	4.5.0.41	2009.11.17	Email-Worm.Win32.Alcaul!IK
AhnLab-V3	5.0.0.2	2009.11.16	-
AntiVir	7.9.1.65	2009.11.17	-
Antiy-AVL	2.0.3.7	2009.11.17	-
Authentium	5.2.0.5	2009.11.17	-
Avast	4.8.1351.0	2009.11.16	-
AVG	8.5.0.425	2009.11.17	-
BitDefender	7.2	2009.11.17	-
CAT-QuickHeal	10.00	2009.11.17	(Suspicious) - DNAScan
ClamAV	0.94.1	2009.11.17	-
Comodo	2964	2009.11.17	-
DrWeb	5.0.0.12182	2009.11.17	-
eSafe	7.0.17.0	2009.11.16	Win32.Email.Worm.alc
eTrust-Vet	35.1.7124	2009.11.17	-
F-Prot	4.5.1.85	2009.11.16	-
F-Secure	9.0.15370.0	2009.11.17	-
Fortinet	3.120.0.0	2009.11.16	-
GData	19	2009.11.17	-
Ikarus	T3.1.1.74.0	2009.11.17	Email-Worm.Win32.Alcaul
Jiangmin	11.0.800	2009.11.17	-
K7AntiVirus	7.10.897	2009.11.16	-
Kaspersky	7.0.0.125	2009.11.17	-
McAfee	5804	2009.11.16	-
McAfee+Artemis	5804	2009.11.16	-
McAfee-GW-Edition	6.8.5	2009.11.17	-
Microsoft	1.5202	2009.11.17	-
NOD32	4613	2009.11.16	-
Norman	6.03.02	2009.11.17	-
nProtect	2009.1.8.0	2009.11.17	-
Panda	10.0.2.2	2009.11.16	-
PCTools	7.0.3.5	2009.11.17	-
Prevx	3.0	2009.11.17	-
Rising	22.22.01.06	2009.11.17	-
Sophos	4.47.0	2009.11.17	-
Sunbelt	3.2.1858.2	2009.11.12	-
Symantec	1.4.4.12	2009.11.17	-
TheHacker	6.5.0.2.071	2009.11.16	-
TrendMicro	9.0.0.1003	2009.11.17	-
VBA32	3.12.10.11	2009.11.15	-
ViRobot	2009.11.17.2041	2009.11.17	-
VirusBuster	4.6.5.0	2009.11.16	-

Дополнительная информация
File size: 321252 bytes
MD5   : 9495af761e931137c652aa23edfdb8b1
SHA1  : a8834f74c885c899290b046a986f97ab4ffb2ace
SHA256: bc7b5102b4199b2ea4d1da14c719200122d46c159143e8c3e89026479ba9811b
PEInfo: PE Structure information<br> <br> ( base data )<br> entrypointaddress.: 0xA29A0<br> timedatestamp.....: 0x3EC86C8E (Mon May 19 07:33:02 2003)<br> machinetype.......: 0x14C (Intel I386)<br> <br> ( 3 sections )<br> name viradd virsiz rawdsiz ntrpy md5<br> code 0x1000 0x67000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<br>text 0x68000 0x3B000 0x3AC00 7.92 d02a24ba5d833b9df533741aeaf5597d<br>.rsrc 0xA3000 0x7000 0x6A00 4.18 a691aeee67ecb4bd770132f10e1caa78<br> <br> ( 9 imports )<br> <br>&gt; advapi32.dll: RegCloseKey<br>&gt; comctl32.dll: -<br>&gt; comdlg32.dll: GetOpenFileNameA<br>&gt; gdi32.dll: PatBlt<br>&gt; kernel32.dll: LoadLibraryA, GetProcAddress, ExitProcess<br>&gt; ole32.dll: DoDragDrop<br>&gt; oleaut32.dll: -<br>&gt; shlwapi.dll: PathIsURLA<br>&gt; user32.dll: GetDC<br> <br> ( 0 exports )<br>
TrID&nbsp;&nbsp;: File type identification<br>56.9% (.EXE) Win32 EXE Yoda's Crypter (26569/9/4)<br>18.2% (.EXE) Win32 Executable Generic (8527/13/3)<br>16.2% (.DLL) Win32 Dynamic Link Library (generic) (7583/30/2)<br>4.2% (.EXE) Generic Win/DOS Executable (2002/3)<br>4.2% (.EXE) DOS Executable Generic (2000/1)
ssdeep: 6144:HibqIVqfnbpbSdebCVIbY1/JaXxky4BPdlz05pL7ITJcm5DXN2MsQRjx:HIqIWnbhY2Y1/A14B7CpLSN2g9x
PEiD&nbsp;&nbsp;: UPX 2.90 [LZMA] -&gt; Markus Oberhumer, Laszlo Molnar &amp; John Reiser
packers&nbsp;(Kaspersky): UPX
packers&nbsp;(F-Prot): UPX
RDS&nbsp;&nbsp;&nbsp;: NSRL Reference Data Set<br>-

[Surfer]

File hot.html received on 2009.11.18 15:59:35 (UTC)
Result: 8/41 (19.52%)

a-squared 4.5.0.41 2009.11.18 Trojan-Downloader.JS.Shadraem!IK
AhnLab-V3 5.0.0.2 2009.11.18 -
AntiVir 7.9.1.70 2009.11.18 HTML/Crypted.Gen
Antiy-AVL 2.0.3.7 2009.11.18 -
Authentium 5.2.0.5 2009.11.18 -
Avast 4.8.1351.0 2009.11.18 HTML:IFrame-KP
AVG 8.5.0.425 2009.11.18 -
BitDefender 7.2 2009.11.18 -
CAT-QuickHeal 10.00 2009.11.17 -
ClamAV 0.94.1 2009.11.18 -
Comodo 2979 2009.11.18 -
DrWeb 5.0.0.12182 2009.11.18 -
eSafe 7.0.17.0 2009.11.18 -
eTrust-Vet 35.1.7127 2009.11.18 -
F-Prot 4.5.1.85 2009.11.17 -
F-Secure 9.0.15370.0 2009.11.17 -
Fortinet 3.120.0.0 2009.11.18 -
GData 19 2009.11.18 HTML:IFrame-KP
Ikarus T3.1.1.74.0 2009.11.18 Trojan-Downloader.JS.Shadraem
Jiangmin 11.0.800 2009.11.18 -
K7AntiVirus 7.10.899 2009.11.18 -
Kaspersky 7.0.0.125 2009.11.18 Trojan-Downloader.JS.Shadraem.a
McAfee 5805 2009.11.17 -
McAfee+Artemis 5805 2009.11.17 -
McAfee-GW-Edition 6.8.5 2009.11.18 Heuristic.Script.Crypted
Microsoft 1.5202 2009.11.18 -
NOD32 4618 2009.11.18 -
Norman 6.03.02 2009.11.18 -
nProtect 2009.1.8.0 2009.11.18 -
Panda 10.0.2.2 2009.11.18 -
PCTools 7.0.3.5 2009.11.18 -
Prevx 3.0 2009.11.18 -
Rising 22.22.02.08 2009.11.18 -
Sophos 4.47.0 2009.11.18 Mal/ObfJS-CB
Sunbelt 3.2.1858.2 2009.11.17 -
Symantec 1.4.4.12 2009.11.18 -
TheHacker 6.5.0.2.072 2009.11.18 -
TrendMicro 9.0.0.1003 2009.11.18 -
VBA32 3.12.12.0 2009.11.18 -
ViRobot 2009.11.18.2043 2009.11.18 -
VirusBuster 5.0.21.0 2009.11.17 -

http://www.virustotal.com/analisis/9...f7a-1258559975

[ISO]

File userlib.dll received on 2009.11.19 16:18:09 (UTC)
Result: 3/41 (7.32%)

Antivirus 	Version 	Last Update 	Result
a-squared	4.5.0.41	2009.11.19	-
AhnLab-V3	5.0.0.2	2009.11.19	-
AntiVir	7.9.1.72	2009.11.19	-
Antiy-AVL	2.0.3.7	2009.11.19	-
Authentium	5.2.0.5	2009.11.19	-
Avast	4.8.1351.0	2009.11.19	-
AVG	8.5.0.425	2009.11.19	-
BitDefender	7.2	2009.11.19	-
CAT-QuickHeal	10.00	2009.11.19	-
ClamAV	0.94.1	2009.11.19	-
Comodo	2979	2009.11.18	-
DrWeb	5.0.0.12182	2009.11.19	Trojan.Winlock.341
eSafe	7.0.17.0	2009.11.19	-
eTrust-Vet	35.1.7130	2009.11.19	-
F-Prot	4.5.1.85	2009.11.19	-
F-Secure	9.0.15370.0	2009.11.17	-
Fortinet	3.120.0.0	2009.11.19	-
GData	19	2009.11.19	-
Ikarus	T3.1.1.74.0	2009.11.19	-
Jiangmin	11.0.800	2009.11.19	-
K7AntiVirus	7.10.900	2009.11.19	Trojan.Win32.Malware.1
Kaspersky	7.0.0.125	2009.11.19	-
McAfee	5806	2009.11.18	-
McAfee+Artemis	5806	2009.11.18	-
McAfee-GW-Edition	6.8.5	2009.11.19	-
Microsoft	1.5302	2009.11.19	-
NOD32	4622	2009.11.19	Win32/LockScreen.CZ
Norman	6.03.02	2009.11.19	-
nProtect	2009.1.8.0	2009.11.19	-
Panda	10.0.2.2	2009.11.18	-
PCTools	7.0.3.5	2009.11.19	-
Prevx	3.0	2009.11.19	-
Rising	22.22.03.09	2009.11.19	-
Sophos	4.47.0	2009.11.19	-
Sunbelt	3.2.1858.2	2009.11.19	-
Symantec	1.4.4.12	2009.11.19	-
TheHacker	6.5.0.2.073	2009.11.18	-
TrendMicro	9.0.0.1003	2009.11.19	-
VBA32	3.12.12.0	2009.11.19	-
ViRobot	2009.11.19.2045	2009.11.19	-
VirusBuster	5.0.21.0	2009.11.19	-

Additional information
File size: 114688 bytes
MD5...: c06063a7028d3b68df9b295fc56cdfc8
SHA1..: aed50512acf6ce6816e95f7892cd50fe51ca88e7
SHA256: a9d095bd1b6b25ea83483c71fcb650390929bd8a567a12f9c6 50303980dd6d1b
ssdeep: 1536:EEwtiCTKB56FSRxa0kGU7c+gV0Up33ZNgk8VSlpVS2tkB :ofK36FSuXKNMV
sV3tk
PEiD..: -


File pno0001.exe received on 2009.11.19 16:29:08 (UTC)
Result: 14/41 (34.15%)

Antivirus 	Version 	Last Update 	Result
a-squared	4.5.0.41	2009.11.19	Trojan.Win32.Pakes!A2
AhnLab-V3	5.0.0.2	2009.11.19	Win-Trojan/Pakes.97280
AntiVir	7.9.1.72	2009.11.19	-
Antiy-AVL	2.0.3.7	2009.11.19	-
Authentium	5.2.0.5	2009.11.19	-
Avast	4.8.1351.0	2009.11.19	-
AVG	8.5.0.425	2009.11.19	-
BitDefender	7.2	2009.11.19	-
CAT-QuickHeal	10.00	2009.11.19	Trojan.Agent.ATV
ClamAV	0.94.1	2009.11.19	-
Comodo	2979	2009.11.18	TrojWare.Win32.Trojan.Agent.~HDM
DrWeb	5.0.0.12182	2009.11.19	-
eSafe	7.0.17.0	2009.11.19	Win32.TRCrypt.XPACK
eTrust-Vet	35.1.7130	2009.11.19	-
F-Prot	4.5.1.85	2009.11.19	-
F-Secure	9.0.15370.0	2009.11.17	Suspicious:W32/Malware!Gemini
Fortinet	3.120.0.0	2009.11.19	-
GData	19	2009.11.19	-
Ikarus	T3.1.1.74.0	2009.11.19	-
Jiangmin	11.0.800	2009.11.19	-
K7AntiVirus	7.10.900	2009.11.19	Trojan.Win32.Malware.1
Kaspersky	7.0.0.125	2009.11.19	-
McAfee	5806	2009.11.18	potentially unwanted program Kkrunchy Packed
McAfee+Artemis	5806	2009.11.18	potentially unwanted program Kkrunchy Packed
McAfee-GW-Edition	6.8.5	2009.11.19	Heuristic.LooksLike.Win32.Dropper.B
Microsoft	1.5302	2009.11.19	-
NOD32	4622	2009.11.19	-
Norman	6.03.02	2009.11.19	-
nProtect	2009.1.8.0	2009.11.19	-
Panda	10.0.2.2	2009.11.18	-
PCTools	7.0.3.5	2009.11.19	-
Prevx	3.0	2009.11.19	-
Rising	22.22.03.09	2009.11.19	Packer.Win32.Agent.GEN
Sophos	4.47.0	2009.11.19	-
Sunbelt	3.2.1858.2	2009.11.19	Trojan.Win32.Pakes
Symantec	1.4.4.12	2009.11.19	-
TheHacker	6.5.0.2.073	2009.11.18	Trojan/Pakes
TrendMicro	9.0.0.1003	2009.11.19	-
VBA32	3.12.12.0	2009.11.19	-
ViRobot	2009.11.19.2045	2009.11.19	Spyware.Pakes.97280
VirusBuster	5.0.21.0	2009.11.19	-

Additional information
File size: 97280 bytes
MD5...: 0630f5f61bbd95dd28c2558c7092bc07
SHA1..: 29413afbc3a5b5fb03de428a546235559e3170b5
SHA256: ac2192b740c57125067a29d2e0ea6d95b222543398188c5f67 bbf01157622685
ssdeep: 1536:1Y0Fv5UEX+k/uR61CxyT/k4ce044gWO9tCFkKE/K/plMCqisOARp6+RyhWL
fh:dFv5UEC6WJje044dytCFlqK/7MCsOAxD
PEiD..: -
PEInfo: PE Structure information

[Surfer]

File Supernatural_S05E10_Abandon_All_H received on 2009.11.20 10:19:02 (UTC)
Result: 12/41 (29.27%)

a-squared 4.5.0.41 2009.11.20 Riskware.Win32.Vbinder!IK
AhnLab-V3 5.0.0.2 2009.11.19 -
AntiVir 7.9.1.72 2009.11.20 -
Antiy-AVL 2.0.3.7 2009.11.20 -
Authentium 5.2.0.5 2009.11.19 -
Avast 4.8.1351.0 2009.11.20 -
AVG 8.5.0.425 2009.11.20 -
BitDefender 7.2 2009.11.20 Gen:Trojan.Heur.hm0@dfocoJfi
CAT-QuickHeal 10.00 2009.11.20 -
ClamAV 0.94.1 2009.11.20 -
Comodo 2983 2009.11.19 -
DrWeb 5.0.0.12182 2009.11.20 -
eSafe 7.0.17.0 2009.11.19 -
eTrust-Vet 35.1.7132 2009.11.20 Win32/VBInject!generic
F-Prot 4.5.1.85 2009.11.19 -
F-Secure 9.0.15370.0 2009.11.20 Packed:W32/Vbinder.gen!M
Fortinet 3.120.0.0 2009.11.20 -
GData 19 2009.11.20 Gen:Trojan.Heur.hm0@dfocoJfi
Ikarus T3.1.1.74.0 2009.11.20 VirTool.Win32.Vbinder
Jiangmin 11.0.800 2009.11.20 -
K7AntiVirus 7.10.900 2009.11.19 -
Kaspersky 7.0.0.125 2009.11.20 -
McAfee 5807 2009.11.19 -
McAfee+Artemis 5807 2009.11.19 Artemis!4DA16394F226
McAfee-GW-Edition 6.8.5 2009.11.20 -
Microsoft 1.5302 2009.11.20 VirTool:Win32/Vbinder.gen!GL
NOD32 4624 2009.11.20 -
Norman 6.03.02 2009.11.20 W32/Obfuscated.C!genr
nProtect 2009.1.8.0 2009.11.20 -
Panda 10.0.2.2 2009.11.20 Suspicious file
PCTools 7.0.3.5 2009.11.20 -
Prevx 3.0 2009.11.20 Medium Risk Malware
Rising 22.22.04.04 2009.11.20 -
Sophos 4.47.0 2009.11.20 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.11.19 -
Symantec 1.4.4.12 2009.11.20 -
TheHacker 6.5.0.2.074 2009.11.19 -
TrendMicro 9.0.0.1003 2009.11.20 -
VBA32 3.12.12.0 2009.11.20 -
ViRobot 2009.11.20.2047 2009.11.20 -
VirusBuster 5.0.21.0 2009.11.19 -

http://www.virustotal.com/analisis/d...671-1258712342

[Surfer]

File VKMaster.exe received on 2009.11.25 06:06:50 (UTC)
Result: 10/41 (24.4%)

a-squared 4.5.0.43 2009.11.25 Trojan.Win32.VkHost!IK
AhnLab-V3 5.0.0.2 2009.11.24 -
AntiVir 7.9.1.70 2009.11.24 -
Antiy-AVL 2.0.3.7 2009.11.24 Trojan/Win32.VkHost
Authentium 5.2.0.5 2009.11.24 -
Avast 4.8.1351.0 2009.11.24 -
AVG 8.5.0.425 2009.11.24 -
BitDefender 7.2 2009.11.25 -
CAT-QuickHeal 10.00 2009.11.25 -
ClamAV 0.94.1 2009.11.25 -
Comodo 3026 2009.11.25 Heur.Suspicious
DrWeb 5.0.0.12182 2009.11.25 -
eSafe 7.0.17.0 2009.11.24 -
eTrust-Vet 35.1.7140 2009.11.24 -
F-Prot 4.5.1.85 2009.11.24 -
F-Secure 9.0.15370.0 2009.11.24 -
Fortinet 4.0.14.0 2009.11.24 -
GData 19 2009.11.25 -
Ikarus T3.1.1.74.0 2009.11.25 Trojan.Win32.VkHost
Jiangmin 11.0.800 2009.11.24 Trojan/StartPage.bim
K7AntiVirus 7.10.903 2009.11.23 -
Kaspersky 7.0.0.125 2009.11.25 Trojan.Win32.VkHost.ej
McAfee 5812 2009.11.24 -
McAfee+Artemis 5812 2009.11.24 Artemis!4918AE2ACCD8
McAfee-GW-Edition 6.8.5 2009.11.24 -
Microsoft 1.5302 2009.11.24 -
NOD32 4634 2009.11.24 -
Norman 6.03.02 2009.11.24 -
nProtect 2009.1.8.0 2009.11.24 -
Panda 10.0.2.2 2009.11.24 Suspicious file
PCTools 7.0.3.5 2009.11.25 -
Prevx 3.0 2009.11.25 High Risk Cloaked Malware
Rising 22.23.02.03 2009.11.25 -
Sophos 4.47.0 2009.11.25 -
Sunbelt 3.2.1858.2 2009.11.25 -
Symantec 1.4.4.12 2009.11.25 -
TheHacker 6.5.0.2.076 2009.11.23 -
TrendMicro 9.0.0.1003 2009.11.25 -
VBA32 3.12.12.0 2009.11.25 Trojan.Win32.VkHost.vmn
ViRobot 2009.11.25.2052 2009.11.25 -
VirusBuster 5.0.21.0 2009.11.24 -

http://www.virustotal.com/analisis/0...c3e-1259129210

[Ingener]

Файл js1.js получен 2009.11.26 00:12:04 (UTC)
Текущий статус: закончено
Результат: 4/41 (9.76%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.43 2009.11.25 -
AhnLab-V3 5.0.0.2 2009.11.25 -
AntiVir 7.9.1.78 2009.11.25 JS/iFrame.ZP
Antiy-AVL 2.0.3.7 2009.11.25 -
Authentium 5.2.0.5 2009.11.25 -
Avast 4.8.1351.0 2009.11.25 HTML:Iframe-inf
AVG 8.5.0.425 2009.11.25 -
BitDefender 7.2 2009.11.26 -
CAT-QuickHeal 10.00 2009.11.25 -
ClamAV 0.94.1 2009.11.25 -
Comodo 3036 2009.11.25 -
DrWeb 5.0.0.12182 2009.11.25 -
eSafe 7.0.17.0 2009.11.24 -
eTrust-Vet 35.1.7142 2009.11.25 -
F-Prot 4.5.1.85 2009.11.25 -
F-Secure 9.0.15370.0 2009.11.24 -
Fortinet 4.0.14.0 2009.11.25 -
GData 19 2009.11.25 HTML:Iframe-inf
Ikarus T3.1.1.74.0 2009.11.25 -
Jiangmin 11.0.800 2009.11.25 -
K7AntiVirus 7.10.905 2009.11.25 -
Kaspersky 7.0.0.125 2009.11.25 -
McAfee 5813 2009.11.25 -
McAfee+Artemis 5813 2009.11.25 -
McAfee-GW-Edition 6.8.5 2009.11.25 Script.iFrame.ZP
Microsoft 1.5302 2009.11.25 -
NOD32 4637 2009.11.25 -
Norman 6.03.02 2009.11.25 -
nProtect 2009.1.8.0 2009.11.25 -
Panda 10.0.2.2 2009.11.25 -
PCTools 7.0.3.5 2009.11.26 -
Prevx 3.0 2009.11.26 -
Rising 22.23.02.09 2009.11.25 -
Sophos 4.47.0 2009.11.26 -
Sunbelt 3.2.1858.2 2009.11.26 -
Symantec 1.4.4.12 2009.11.26 -
TheHacker 6.5.0.2.078 2009.11.25 -
TrendMicro 9.100.0.1001 2009.11.25 -
VBA32 3.12.12.0 2009.11.25 -
ViRobot 2009.11.25.2053 2009.11.25 -
VirusBuster 5.0.21.0 2009.11.25 -

Дополнительная информация
File size: 464 bytes
MD5 : c8d70b689752d07fb6b4129960565ea9
SHA1 : 54900c914e777bdfc465d28955979eddd539ef7c
SHA256: 73b0a813fab7c0f758e346994db022da4b2bfe7f7b81f21f69 87c2a477398d02
TrID : File type identification
file seems to be plain text/ASCII (0.0%)
ssdeep: 12:SFBt5PBLU5M5vQnDzLMXFF91I193MLDIqJmWJcTrVMbu:SF Bt5FU5CvmDWFF0XkD3SHVMq
PEiD : -
RDS : NSRL Reference Data Set

http://www.virustotal.com/ru/analisi...d02-1259194324

***

Файл js2.js получен 2009.11.26 0022 (UTC)
Текущий статус: закончено
Результат: 1/41 (2.44%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.43 2009.11.25 -
AhnLab-V3 5.0.0.2 2009.11.25 -
AntiVir 7.9.1.78 2009.11.25 -
Antiy-AVL 2.0.3.7 2009.11.25 -
Authentium 5.2.0.5 2009.11.25 -
Avast 4.8.1351.0 2009.11.25 -
AVG 8.5.0.425 2009.11.25 -
BitDefender 7.2 2009.11.26 -
CAT-QuickHeal 10.00 2009.11.25 -
ClamAV 0.94.1 2009.11.25 -
Comodo 3037 2009.11.26 -
DrWeb 5.0.0.12182 2009.11.25 -
eSafe 7.0.17.0 2009.11.24 -
eTrust-Vet 35.1.7142 2009.11.25 -
F-Prot 4.5.1.85 2009.11.25 -
F-Secure 9.0.15370.0 2009.11.24 -
Fortinet 4.0.14.0 2009.11.25 -
GData 19 2009.11.26 -
Ikarus T3.1.1.74.0 2009.11.25 -
Jiangmin 11.0.800 2009.11.25 -
K7AntiVirus 7.10.905 2009.11.25 -
Kaspersky 7.0.0.125 2009.11.26 Trojan-Downloader.JS.Agent.etc
McAfee 5813 2009.11.25 -
McAfee+Artemis 5813 2009.11.25 -
McAfee-GW-Edition 6.8.5 2009.11.26 -
Microsoft 1.5302 2009.11.25 -
NOD32 4637 2009.11.25 -
Norman 6.03.02 2009.11.25 -
nProtect 2009.1.8.0 2009.11.25 -
Panda 10.0.2.2 2009.11.25 -
PCTools 7.0.3.5 2009.11.26 -
Prevx 3.0 2009.11.26 -
Rising 22.23.02.09 2009.11.25 -
Sophos 4.47.0 2009.11.26 -
Sunbelt 3.2.1858.2 2009.11.26 -
Symantec 1.4.4.12 2009.11.26 -
TheHacker 6.5.0.2.078 2009.11.25 -
TrendMicro 9.100.0.1001 2009.11.25 -
VBA32 3.12.12.0 2009.11.25 -
ViRobot 2009.11.25.2053 2009.11.25 -
VirusBuster 5.0.21.0 2009.11.25 -

Дополнительная информация
File size: 972 bytes
MD5...: f93215e92417e29ec5be1f246399678d
SHA1..: d3a576835a39c82a2813532abc7dca8c27889c32
SHA256: 42fe4ef2a7a270c04bb93d136d37041d9d2fb4e92e8f26aa7f 9c11eed46b5f07
ssdeep: 24:QZFWLOPVGO8lP9T3lDaYLCKjMtd/5yfXk61M5:vLd9T3lGYLCKjMt94/kH
PEiD..: -
PEInfo: -
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Text - UTF-16 (LE) encoded (64.4%)
MP3 audio (32.2%)
Lumena CEL bitmap (2.0%)
Corel Photo Paint (1.3%)
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
packers (F-Prot): Unicode

http://www.virustotal.com/ru/analisi...f07-1259194822

***

Файл js3.js получен 2009.11.26 00:23:56 (UTC)
Текущий статус: закончено
Результат: 6/41 (14.64%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.43 2009.11.25 Generic.XPL.ADODB!IK
AhnLab-V3 5.0.0.2 2009.11.25 -
AntiVir 7.9.1.78 2009.11.25 -
Antiy-AVL 2.0.3.7 2009.11.25 -
Authentium 5.2.0.5 2009.11.25 -
Avast 4.8.1351.0 2009.11.25 -
AVG 8.5.0.425 2009.11.25 -
BitDefender 7.2 2009.11.26 -
CAT-QuickHeal 10.00 2009.11.25 -
ClamAV 0.94.1 2009.11.25 -
Comodo 3037 2009.11.26 -
DrWeb 5.0.0.12182 2009.11.25 -
eSafe 7.0.17.0 2009.11.24 -
eTrust-Vet 35.1.7142 2009.11.25 -
F-Prot 4.5.1.85 2009.11.25 -
F-Secure 9.0.15370.0 2009.11.24 -
Fortinet 4.0.14.0 2009.11.25 -
GData 19 2009.11.26 -
Ikarus T3.1.1.74.0 2009.11.25 Generic.XPL.ADODB
Jiangmin 11.0.800 2009.11.25 -
K7AntiVirus 7.10.905 2009.11.25 -
Kaspersky 7.0.0.125 2009.11.26 -
McAfee 5813 2009.11.25 -
McAfee+Artemis 5813 2009.11.25 -
McAfee-GW-Edition 6.8.5 2009.11.26 Heuristic.BehavesLike.JS.Exploit.B
Microsoft 1.5302 2009.11.25 -
NOD32 4637 2009.11.25 -
Norman 6.03.02 2009.11.25 -
nProtect 2009.1.8.0 2009.11.25 -
Panda 10.0.2.2 2009.11.25 -
PCTools 7.0.3.5 2009.11.26 HTML.Psyme.Gen
Prevx 3.0 2009.11.26 -
Rising 22.23.02.09 2009.11.25 -
Sophos 4.47.0 2009.11.26 Sus/Psyme-A
Sunbelt 3.2.1858.2 2009.11.26 -
Symantec 1.4.4.12 2009.11.26 -
TheHacker 6.5.0.2.078 2009.11.25 -
TrendMicro 9.100.0.1001 2009.11.25 -
VBA32 3.12.12.0 2009.11.25 -
ViRobot 2009.11.25.2053 2009.11.25 -
VirusBuster 5.0.21.0 2009.11.25 HTML.Psyme.Gen

Дополнительная информация
File size: 5100 bytes
MD5...: e31525943fdef580361a8ad018f71736
SHA1..: 2bf16f831abf05139815fa4d5cad7c275224aeae
SHA256: e097e355c51ae57845ba6c346c34bc4489baa0104f955f2a0f c74a6686570e39
ssdeep: 96:0PANgC4OwWJrHa69caEiOHdMlBKgBg+4S:++43WJrHaocaE ikMDp
PEiD..: -
PEInfo: -
RDS...: NSRL Reference Data Set
-
pdfid.: -
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
trid..: Unknown!

http://www.virustotal.com/ru/analisi...e39-1259195036

[senyak]

В VBA, DrWeb и Symantec файл ушел

Файл tcwoa8mp.scr.part получен 2009.11.27 16:09:24 (UTC)
Текущий статус: Загрузка ... в очереди ожидание проверка закончено НЕ НАЙДЕНО ОСТАНОВЛЕНО
Результат: 8/41 (19.52%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.43 2009.11.26 -
AhnLab-V3 5.0.0.2 2009.11.26 -
AntiVir 7.9.1.78 2009.11.26 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2009.11.26 -
Authentium 5.2.0.5 2009.11.26 -
Avast 4.8.1351.0 2009.11.26 -
AVG 8.5.0.425 2009.11.26 -
BitDefender 7.2 2009.11.26 -
CAT-QuickHeal 10.00 2009.11.26 -
ClamAV 0.94.1 2009.11.26 -
Comodo 3044 2009.11.26 Heur.Packed.Unknown
DrWeb 5.0.0.12182 2009.11.26 -
eSafe 7.0.17.0 2009.11.24 -
eTrust-Vet 35.1.7143 2009.11.26 -
F-Prot 4.5.1.85 2009.11.25 -
F-Secure 9.0.15370.0 2009.11.24 Suspicious:W32/Malware!Gemini
Fortinet 4.0.14.0 2009.11.26 -
GData 19 2009.11.26 -
Ikarus T3.1.1.74.0 2009.11.26 -
Jiangmin 11.0.800 2009.11.26 -
K7AntiVirus 7.10.905 2009.11.25 -
Kaspersky 7.0.0.125 2009.11.26 -
McAfee 5813 2009.11.25 -
McAfee+Artemis 5813 2009.11.25 -
McAfee-GW-Edition 6.8.5 2009.11.26 Trojan.Dropper.Gen
Microsoft 1.5302 2009.11.26 -
NOD32 4639 2009.11.26 -
Norman 6.03.02 2009.11.25 W32/Obfuscated.V
nProtect 2009.1.8.0 2009.11.26 -
Panda 10.0.2.2 2009.11.26 -
PCTools 7.0.3.5 2009.11.26 -
Prevx 3.0 2009.11.27 -
Rising 22.23.03.10 2009.11.26 -
Sophos 4.48.0 2009.11.26 Sus/UnkPack-C
Sunbelt 3.2.1858.2 2009.11.26 Trojan-Ransom.Win32.SMSer.jk (v)
Symantec 1.4.4.12 2009.11.26 Suspicious.MH690.A
TheHacker 6.5.0.2.079 2009.11.26 -
TrendMicro 9.100.0.1001 2009.11.26 -
VBA32 3.12.12.0 2009.11.26 -
ViRobot 2009.11.26.2056 2009.11.26 -
VirusBuster 5.0.21.0 2009.11.25 -

Дополнительная информация
File size: 141312 bytes
MD5...: 2089ab41530c6394c60009f822228444
SHA1..: fbac52fe484d8752a30eeb41911966bf51a1ab76
SHA256: 3f36cf53d21c4e74ab3373f39eb859f5d885d197fbf348007d 79c23e5df116e2
ssdeep: 3072:i98xzIsP/3Dsv7TFMz9wbhH9QI7npj1jNz6N+00D:HznX3gjTFU9tILNz6N
+00D
PEiD..: -
PEInfo: PE Structure information

http://www.virustotal.com/ru/analisi...6e2-1259338164

[ISO]

Файл fsuwdm.exe получен 2009.12.01 04:22:19 (UTC)
Текущий статус: закончено
Результат: 19/41 (46.34%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.43 2009.12.01 Worm.Autorun!IK
AhnLab-V3 5.0.0.2 2009.12.01 -
AntiVir 7.9.1.88 2009.11.30 Worm/Autorun.esq
Antiy-AVL 2.0.3.7 2009.12.01 -
Authentium 5.2.0.5 2009.11.30 -
Avast 4.8.1351.0 2009.11.30 -
AVG 8.5.0.426 2009.12.01 -
BitDefender 7.2 2009.12.01 Trojan.Generic.IS.548711
CAT-QuickHeal 10.00 2009.12.01 -
ClamAV 0.94.1 2009.12.01 -
Comodo 3096 2009.12.01 -
DrWeb 5.0.0.12182 2009.12.01 -
eSafe 7.0.17.0 2009.11.30 Win32.Worm.AutoRun.u
eTrust-Vet 35.1.7149 2009.12.01 -
F-Prot 4.5.1.85 2009.11.30 -
F-Secure 9.0.15370.0 2009.11.29 Trojan.Generic.IS.548711
Fortinet 4.0.14.0 2009.12.01 -
GData 19 2009.12.01 Trojan.Generic.IS.548711
Ikarus T3.1.1.74.0 2009.12.01 Worm.Autorun
Jiangmin 11.0.800 2009.11.29 -
K7AntiVirus 7.10.906 2009.11.27 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2009.12.01 -
McAfee 5818 2009.11.30 Generic.dx!gdd
McAfee+Artemis 5818 2009.11.30 Generic.dx!gdd
McAfee-GW-Edition 6.8.5 2009.11.30 Heuristic.LooksLike.Worm.Autorun.L
Microsoft 1.5302 2009.12.01 -
NOD32 4650 2009.11.30 -
Norman 6.03.02 2009.11.30 W32/Suspicious_Gen.AFVN
nProtect 2009.1.8.0 2009.11.28 Trojan/W32.Agent.101887
Panda 10.0.2.2 2009.11.30 Trj/CI.A
PCTools 7.0.3.5 2009.12.01 Trojan.Generic
Prevx 3.0 2009.12.01 -
Rising 22.24.01.01 2009.12.01 -
Sophos 4.48.0 2009.12.01 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.12.01 Trojan.Win32.Generic!BT
Symantec 1.4.4.12 2009.12.01 Trojan Horse
TheHacker 6.5.0.2.082 2009.11.30 W32/AutoRun.esq
TrendMicro 9.100.0.1001 2009.11.30 -
VBA32 3.12.12.0 2009.11.30 -
ViRobot 2009.12.1.2063 2009.12.01 -
VirusBuster 5.0.21.0 2009.11.30 -

Дополнительная информация
File size: 101887 bytes
MD5 : fb9e6b5ecf70319a9265160366758d40
SHA1 : fad215f0578e1d1e7d8bc56947e2aec81db9aea8
SHA256: 29df2d237385b30f2152b7bfd5b8f138182b2874a0b278e9b4 ca24dbc5725a6d
PEInfo: PE Structure information

[Shu_b]

Очередные промежуточные итоги народного тестирования Октябрь-Ноябрь:

[senyak]

Пришел по скайпу

Файл DCS00006.scr получен 2009.12.02 11:13:26 (UTC)
Текущий статус: закончено
Результат: 10/41 (24.4%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.43 2009.12.02 Riskware.Win32.VBInject!IK
AhnLab-V3 5.0.0.2 2009.12.02 -
AntiVir 7.9.1.92 2009.12.02 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2009.12.02 -
Authentium 5.2.0.5 2009.12.02 W32/Trojan-Gypikon-based.DM2!Maximus
Avast 4.8.1351.0 2009.12.02 -
AVG 8.5.0.426 2009.12.02 BackDoor.Generic12.MNM
BitDefender 7.2 2009.12.02 -
CAT-QuickHeal 10.00 2009.12.02 -
ClamAV 0.94.1 2009.12.02 -
Comodo 3103 2009.12.01 -
DrWeb 5.0.0.12182 2009.12.02 -
eSafe 7.0.17.0 2009.12.01 -
eTrust-Vet 35.1.7152 2009.12.02 -
F-Prot 4.5.1.85 2009.12.01 W32/Trojan-Gypikon-based.DM2!Maximus
F-Secure 9.0.15370.0 2009.11.29 -
Fortinet 4.0.14.0 2009.12.02 -
GData 19 2009.12.02 -
Ikarus T3.1.1.74.0 2009.12.02 VirTool.Win32.VBInject
Jiangmin 13.0.900 2009.12.02 -
K7AntiVirus 7.10.906 2009.11.27 -
Kaspersky 7.0.0.125 2009.12.02 -
McAfee 5819 2009.12.01 -
McAfee+Artemis 5819 2009.12.01 -
McAfee-GW-Edition 6.8.5 2009.12.02 Trojan.Dropper.Gen
Microsoft 1.5302 2009.12.02 VirTool:Win32/VBInject.gen!BA
NOD32 4654 2009.12.02 -
Norman 6.03.02 2009.12.02 W32/Obfuscated.A!genr
nProtect 2009.1.8.0 2009.12.02 -
Panda 10.0.2.2 2009.12.01 Bck/Bifrost.gen
PCTools 7.0.3.5 2009.12.02 -
Prevx 3.0 2009.12.02 -
Rising 22.24.02.07 2009.12.02 -
Sophos 4.48.0 2009.12.02 -
Sunbelt 3.2.1858.2 2009.12.02 -
Symantec 1.4.4.12 2009.12.02 -
TheHacker 6.5.0.2.083 2009.12.01 -
TrendMicro 9.100.0.1001 2009.12.02 -
VBA32 3.12.12.0 2009.12.02 -
ViRobot 2009.12.2.2068 2009.12.02 -
VirusBuster 5.0.21.0 2009.12.01 -

Дополнительная информация
File size: 127853 bytes
MD5...: 53392b9a43e84ba983287a394d26fdee
SHA1..: 3b13ca048572602d8a572036fc3fb968949f0d3d
SHA256: df0088568531f9265eb3e56fdd546a42d66256d32788d2c66b 76230eee71137b
ssdeep: 3072:c8JzVjHbmp5JsZ1prgZWHJTJK5DcSXIeUSJU5MQyBDc2: c8rmZETgZqJTJ9
cvuH2
PEiD..: -
PEInfo: PE Structure information

http://www.virustotal.com/ru/analisi...37b-1259752406

[Surfer]

File setup.exe received on 2009.12.03 14:47:53 (UTC)
Result: 8/41 (19.52%)

a-squared 4.5.0.43 2009.12.03 -
AhnLab-V3 5.0.0.2 2009.12.03 -
AntiVir 7.9.1.92 2009.12.03 -
Antiy-AVL 2.0.3.7 2009.12.03 -
Authentium 5.2.0.5 2009.12.02 -
Avast 4.8.1351.0 2009.12.03 -
AVG 8.5.0.426 2009.12.03 -
BitDefender 7.2 2009.12.03 -
CAT-QuickHeal 10.00 2009.12.03 Trojan.VkHost.is
ClamAV 0.94.1 2009.12.03 -
Comodo 3103 2009.12.01 Heur.Packed.Unknown
DrWeb 5.0.0.12182 2009.12.03 -
eSafe 7.0.17.0 2009.12.02 -
eTrust-Vet 35.1.7155 2009.12.03 -
F-Prot 4.5.1.85 2009.12.02 -
F-Secure 9.0.15370.0 2009.12.03 -
Fortinet 4.0.14.0 2009.12.03 -
GData 19 2009.12.03 -
Ikarus T3.1.1.74.0 2009.12.03 -
Jiangmin 13.0.900 2009.12.02 -
K7AntiVirus 7.10.910 2009.12.03 -
Kaspersky 7.0.0.125 2009.12.03 Trojan.Win32.VkHost.iz
McAfee 5819 2009.12.01 PWS-Banker.gen.ec
McAfee+Artemis 5819 2009.12.01 PWS-Banker.gen.ec
McAfee-GW-Edition 6.8.5 2009.12.03 Heuristic.LooksLike.Win32.QQpass.H
Microsoft 1.5302 2009.12.03 -
NOD32 4658 2009.12.03 -
Norman 6.03.02 2009.12.03 -
nProtect 2009.1.8.0 2009.12.03 -
Panda 10.0.2.2 2009.12.03 Trj/Downloader.MDW
PCTools 7.0.3.5 2009.12.03 -
Prevx 3.0 2009.12.03 -
Rising 22.24.03.06 2009.12.03 -
Sophos 4.48.0 2009.12.03 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.12.03 -
Symantec 1.4.4.12 2009.12.03 -
TheHacker 6.5.0.2.083 2009.12.01 -
TrendMicro 9.100.0.1001 2009.12.03 -
VBA32 3.12.12.0 2009.12.03 -
ViRobot 2009.12.3.2070 2009.12.03 -
VirusBuster 5.0.21.0 2009.12.02 -

http://www.virustotal.com/analisis/b...db3-1259851673