Исследование антивирусов 7

**Pili** · 15.12.2008, 19:02

Src=C:\WINDOWS\system32\spool32.exe
Файл avz00001.dta получен 2008.12.15 16:50:28 (CET)

Код:

AhnLab-V3	2008.12.15.3	2008.12.15	-
AntiVir	7.9.0.45	2008.12.15	-
Authentium	5.1.0.4	2008.12.14	-
Avast	4.8.1281.0	2008.12.15	Win32:Oliga
AVG	8.0.0.199	2008.12.15	SHeur2.FKM
BitDefender	7.2	2008.12.15	-
CAT-QuickHeal	10.00	2008.12.15	(Suspicious) - DNAScan
ClamAV	0.94.1	2008.12.15	-
Comodo	754	2008.12.14	-
DrWeb	4.44.0.09170	2008.12.15	-
eSafe	7.0.17.0	2008.12.15	Suspicious File
eTrust-Vet	31.6.6261	2008.12.15	-
Ewido	4.0	2008.12.15	-
F-Prot	4.4.4.56	2008.12.14	-
F-Secure	8.0.14332.0	2008.12.15	Trojan.Win32.Monder.aaxz
Fortinet	3.117.0.0	2008.12.14	suspicious
GData	19	2008.12.15	Win32:Oliga
Ikarus	T3.1.1.45.0	2008.12.15	-
K7AntiVirus	7.10.553	2008.12.13	-
Kaspersky	7.0.0.125	2008.12.15	Trojan.Win32.Monder.aaxz
McAfee	5464	2008.12.14	New Malware.bx
McAfee+Artemis	5464	2008.12.14	New Malware.bx
Microsoft	1.4205	2008.12.15	-
NOD32	3692	2008.12.15	-
Norman	5.80.02	2008.12.12	W32/Vundo.FQN
Panda	9.0.0.4	2008.12.15	Suspicious file
PCTools	4.4.2.0	2008.12.15	-
Prevx1	V2	2008.12.15	-
Rising	21.08.02.00	2008.12.15	-
SecureWeb-Gateway	6.7.6	2008.12.15	Win32.Malware.gen (suspicious)
Sophos	4.36.0	2008.12.15	Mal/EncPk-FS
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.15	-
TheHacker	6.3.1.4.188	2008.12.14	-
TrendMicro	8.700.0.1004	2008.12.15	PAK_Generic.001
VBA32	3.12.8.10	2008.12.15	-
ViRobot	2008.12.15.1518	2008.12.15	-
VirusBuster	4.5.11.0	2008.12.15	-

Дополнительная информация
File size: 140127 bytes
MD5...: e69dd9605856b2ee189e7ab3be0bc83d

Надоело быть жертвой? Стань профи по информационной безопасности, получай самую свежую информацию об угрозах и средствах защиты от ведущего российского аналитического центра Anti-Malware.ru:

**Shu_b** · 16.12.2008, 11:37

File sdllib.dll received on 12.16.2008 08:58:38 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.16.2	2008.12.16	-
AntiVir	7.9.0.45	2008.12.15	-
Authentium	5.1.0.4	2008.12.16	-
Avast	4.8.1281.0	2008.12.15	Win32:Hexzone-U
AVG	8.0.0.199	2008.12.15	Adload_r.FF
BitDefender	7.2	2008.12.16	-
CAT-QuickHeal	10.00	2008.12.16	-
ClamAV	0.94.1	2008.12.16	-
Comodo	760	2008.12.15	-
DrWeb	4.44.0.09170	2008.12.16	Trojan.Blackmailer.origin
eSafe	7.0.17.0	2008.12.15	-
eTrust-Vet	31.6.6262	2008.12.16	-
Ewido	4.0	2008.12.15	-
F-Prot	4.4.4.56	2008.12.15	W32/Hexzone.B.gen!Eldorado
F-Secure	8.0.14332.0	2008.12.16	-
Fortinet	3.117.0.0	2008.12.16	-
GData	19	2008.12.16	Win32:Hexzone-U
Ikarus	T3.1.1.45.0	2008.12.16	Trojan-Ransom.Win32.Hexzone
K7AntiVirus	7.10.554	2008.12.15	-
Kaspersky	7.0.0.125	2008.12.16	-
McAfee	5465	2008.12.15	-
McAfee+Artemis	5465	2008.12.15	-
Microsoft	1.4205	2008.12.16	-
NOD32	3694	2008.12.15	-
Norman	5.80.02	2008.12.15	-
Panda	9.0.0.4	2008.12.15	-
PCTools	4.4.2.0	2008.12.15	-
Prevx1	V2	2008.12.16	-
Rising	21.08.11.00	2008.12.16	-
SecureWeb-Gateway	6.7.6	2008.12.15	-
Sophos	4.36.0	2008.12.16	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.16	-
TheHacker	6.3.1.4.189	2008.12.16	-
TrendMicro	8.700.0.1004	2008.12.16	-
VBA32	3.12.8.10	2008.12.15	-
ViRobot	2008.12.16.1520	2008.12.16	-
VirusBuster	4.5.11.0	2008.12.15	-

Additional information
File size: 316928 bytes
MD5...: 1263fba1d0e14cdabeb3ba4b5796792c

Добавлено через 2 минуты

Src=c:\windows\system32\drivers\winlogon.exe
File winlogon.exe received on 12.16.2008 08:52:59 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.16.2	2008.12.16	Win32/IRCBot.worm.variant
AntiVir	7.9.0.45	2008.12.15	-
Authentium	5.1.0.4	2008.12.16	W32/Backdoor2.DGZN
Avast	4.8.1281.0	2008.12.15	-
AVG	8.0.0.199	2008.12.15	Win32/Heur
BitDefender	7.2	2008.12.16	DeepScan:Generic.Sdbot.936847E5
CAT-QuickHeal	10.00	2008.12.16	Backdoor.SdBot.ifq
ClamAV	0.94.1	2008.12.16	Trojan.SdBot-9776
Comodo	760	2008.12.15	-
DrWeb	4.44.0.09170	2008.12.16	-
eSafe	7.0.17.0	2008.12.15	-
eTrust-Vet	31.6.6262	2008.12.16	-
Ewido	4.0	2008.12.15	-
F-Prot	4.4.4.56	2008.12.15	W32/Backdoor2.DGZN
F-Secure	8.0.14332.0	2008.12.16	Suspicious:W32/Malware!Gemini
Fortinet	3.117.0.0	2008.12.16	-
GData	19	2008.12.16	DeepScan:Generic.Sdbot.936847E5
Ikarus	T3.1.1.45.0	2008.12.16	-
K7AntiVirus	7.10.554	2008.12.15	-
Kaspersky	7.0.0.125	2008.12.16	-
McAfee	5465	2008.12.15	New Poly Win32
McAfee+Artemis	5465	2008.12.15	New Poly Win32
Microsoft	1.4205	2008.12.16	Exploit:Win32/Lsass.gen
NOD32	3694	2008.12.15	probably a variant of Win32/Packed.Themida
Norman	5.80.02	2008.12.15	-
Panda	9.0.0.4	2008.12.15	Suspicious file
PCTools	4.4.2.0	2008.12.15	-
Prevx1	V2	2008.12.16	-
Rising	21.08.11.00	2008.12.16	-
SecureWeb-Gateway	6.7.6	2008.12.15	Win32.Malware.gen!84 (suspicious)
Sophos	4.36.0	2008.12.16	Sus/UnkPacker
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.16	-
TheHacker	6.3.1.4.189	2008.12.16	-
TrendMicro	8.700.0.1004	2008.12.16	-
VBA32	3.12.8.10	2008.12.15	-
ViRobot	2008.12.16.1520	2008.12.16	Backdoor.Win32.IRCBot.709632
VirusBuster	4.5.11.0	2008.12.15	Backdoor.SdBot.ACTL

Additional information
File size: 709632 bytes
MD5...: 3e1923216a98a3624ae0d311293bd47e

Добавлено через 17 минут

File rs32net.exe received on 12.16.2008 09:13:38 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.16.2	2008.12.16	-
AntiVir	7.9.0.45	2008.12.15	TR/Dropper.Gen
Authentium	5.1.0.4	2008.12.16	-
Avast	4.8.1281.0	2008.12.15	-
AVG	8.0.0.199	2008.12.15	-
BitDefender	7.2	2008.12.16	-
CAT-QuickHeal	10.00	2008.12.16	-
ClamAV	0.94.1	2008.12.16	-
Comodo	760	2008.12.15	-
DrWeb	4.44.0.09170	2008.12.16	-
eSafe	7.0.17.0	2008.12.15	-
eTrust-Vet	31.6.6262	2008.12.16	-
Ewido	4.0	2008.12.15	-
F-Prot	4.4.4.56	2008.12.15	-
F-Secure	8.0.14332.0	2008.12.16	Trojan.Win32.Agent.avhd
Fortinet	3.117.0.0	2008.12.16	-
GData	19	2008.12.16	-
Ikarus	T3.1.1.45.0	2008.12.16	Trojan.Win32.Agent
K7AntiVirus	7.10.554	2008.12.15	-
Kaspersky	7.0.0.125	2008.12.16	Trojan.Win32.Agent.avhd
McAfee	5465	2008.12.15	-
McAfee+Artemis	5465	2008.12.15	Generic!Artemis
Microsoft	1.4205	2008.12.16	-
NOD32	3694	2008.12.15	-
Norman	5.80.02	2008.12.15	-
Panda	9.0.0.4	2008.12.15	-
PCTools	4.4.2.0	2008.12.15	-
Prevx1	V2	2008.12.16	Cloaked Malware
Rising	21.08.11.00	2008.12.16	-
SecureWeb-Gateway	6.7.6	2008.12.15	Trojan.Dropper.Gen
Sophos	4.36.0	2008.12.16	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.16	-
TheHacker	6.3.1.4.189	2008.12.16	Trojan/Agent.avhd
TrendMicro	8.700.0.1004	2008.12.16	-
VBA32	3.12.8.10	2008.12.15	Malware-Cryptor.Win32.Kefir
ViRobot	2008.12.16.1520	2008.12.16	-
VirusBuster	4.5.11.0	2008.12.15	Trojan.DR.Protector.A

Additional information
File size: 22528 bytes
MD5...: 7e19ef46397d95497f30432cda342046

Добавлено через 7 минут

File ~tmpc.exe received on 12.16.2008 09:13:08 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.16.2	2008.12.16	-
AntiVir	7.9.0.45	2008.12.15	-
Authentium	5.1.0.4	2008.12.16	-
Avast	4.8.1281.0	2008.12.15	-
AVG	8.0.0.199	2008.12.15	Win32/Cryptor
BitDefender	7.2	2008.12.16	-
CAT-QuickHeal	10.00	2008.12.16	TrojanDownloader.Agent.gen
ClamAV	0.94.1	2008.12.16	-
Comodo	760	2008.12.15	TrojWare.Win32.Trojan.Agent.~
DrWeb	4.44.0.09170	2008.12.16	-
eSafe	7.0.17.0	2008.12.15	-
eTrust-Vet	31.6.6262	2008.12.16	-
Ewido	4.0	2008.12.15	-
F-Prot	4.4.4.56	2008.12.15	-
F-Secure	8.0.14332.0	2008.12.16	-
Fortinet	3.117.0.0	2008.12.16	-
GData	19	2008.12.16	-
Ikarus	T3.1.1.45.0	2008.12.16	-
K7AntiVirus	7.10.554	2008.12.15	-
Kaspersky	7.0.0.125	2008.12.16	Trojan.Win32.FraudPack.hws
McAfee	5465	2008.12.15	-
McAfee+Artemis	5465	2008.12.15	-
Microsoft	1.4205	2008.12.16	TrojanDownloader:Win32/Renos.FM
NOD32	3694	2008.12.15	a variant of Win32/Kryptik.CU
Norman	5.80.02	2008.12.15	-
Panda	9.0.0.4	2008.12.15	-
PCTools	4.4.2.0	2008.12.15	-
Prevx1	V2	2008.12.16	Malware Downloader
Rising	21.08.11.00	2008.12.16	-
SecureWeb-Gateway	6.7.6	2008.12.15	Trojan.LooksLike.Proxy
Sophos	4.36.0	2008.12.16	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.16	Trojan Horse
TheHacker	6.3.1.4.189	2008.12.16	-
TrendMicro	8.700.0.1004	2008.12.16	-
VBA32	3.12.8.10	2008.12.15	-
ViRobot	2008.12.16.1520	2008.12.16	-
VirusBuster	4.5.11.0	2008.12.15	-

Additional information
File size: 81920 bytes
MD5...: edeea2b8b2a6e9de437cf05e4039bbbe

Добавлено через 1 минуту

File ~tmpb.exe received on 12.16.2008 09:12:41 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.16.2	2008.12.16	-
AntiVir	7.9.0.45	2008.12.15	TR/FraudPack.huv
Authentium	5.1.0.4	2008.12.16	-
Avast	4.8.1281.0	2008.12.15	-
AVG	8.0.0.199	2008.12.15	Win32/Cryptor
BitDefender	7.2	2008.12.16	-
CAT-QuickHeal	10.00	2008.12.16	TrojanDownloader.Agent.gen
ClamAV	0.94.1	2008.12.16	-
Comodo	760	2008.12.15	-
DrWeb	4.44.0.09170	2008.12.16	-
eSafe	7.0.17.0	2008.12.15	-
eTrust-Vet	31.6.6262	2008.12.16	-
Ewido	4.0	2008.12.15	-
F-Prot	4.4.4.56	2008.12.14	-
F-Secure	8.0.14332.0	2008.12.16	-
Fortinet	3.117.0.0	2008.12.16	-
GData	19	2008.12.16	-
Ikarus	T3.1.1.45.0	2008.12.16	-
K7AntiVirus	7.10.554	2008.12.15	-
Kaspersky	7.0.0.125	2008.12.16	Trojan.Win32.FraudPack.hvz
McAfee	5465	2008.12.15	-
McAfee+Artemis	5465	2008.12.15	-
Microsoft	1.4205	2008.12.16	TrojanDownloader:Win32/Renos.DZ
NOD32	3694	2008.12.15	a variant of Win32/Kryptik.CU
Norman	5.80.02	2008.12.15	-
Panda	9.0.0.4	2008.12.15	-
PCTools	4.4.2.0	2008.12.15	-
Prevx1	V2	2008.12.16	-
Rising	21.08.11.00	2008.12.16	-
SecureWeb-Gateway	6.7.6	2008.12.15	Trojan.FraudPack.huv
Sophos	4.36.0	2008.12.16	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.16	Downloader
TheHacker	6.3.1.4.189	2008.12.16	-
TrendMicro	8.700.0.1004	2008.12.16	-
VBA32	3.12.8.10	2008.12.15	-
ViRobot	2008.12.16.1520	2008.12.16	-
VirusBuster	4.5.11.0	2008.12.15	-

Additional information
File size: 86020 bytes
MD5...: 047f6fce96752b7d991c4cc178936a7a

Добавлено через 2 минуты

File userinit.exe received on 12.16.2008 09:12:11 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.16.2	2008.12.16	-
AntiVir	7.9.0.45	2008.12.15	-
Authentium	5.1.0.4	2008.12.16	-
Avast	4.8.1281.0	2008.12.15	-
AVG	8.0.0.199	2008.12.15	-
BitDefender	7.2	2008.12.16	-
CAT-QuickHeal	10.00	2008.12.16	-
ClamAV	0.94.1	2008.12.16	-
Comodo	760	2008.12.15	-
DrWeb	4.44.0.09170	2008.12.16	-
eSafe	7.0.17.0	2008.12.15	Suspicious File
eTrust-Vet	31.6.6262	2008.12.16	-
Ewido	4.0	2008.12.15	-
F-Prot	4.4.4.56	2008.12.15	-
F-Secure	8.0.14332.0	2008.12.16	-
Fortinet	3.117.0.0	2008.12.16	-
GData	19	2008.12.16	-
Ikarus	T3.1.1.45.0	2008.12.16	-
K7AntiVirus	7.10.554	2008.12.15	-
Kaspersky	7.0.0.125	2008.12.16	-
McAfee	5465	2008.12.15	-
McAfee+Artemis	5465	2008.12.15	-
Microsoft	1.4205	2008.12.16	-
NOD32	3694	2008.12.15	-
Norman	5.80.02	2008.12.15	-
Panda	9.0.0.4	2008.12.15	-
PCTools	4.4.2.0	2008.12.15	-
Prevx1	V2	2008.12.16	Cloaked Malware
Rising	21.08.11.00	2008.12.16	-
SecureWeb-Gateway	6.7.6	2008.12.15	-
Sophos	4.36.0	2008.12.16	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.16	-
TheHacker	6.3.1.4.189	2008.12.16	-
TrendMicro	8.700.0.1004	2008.12.16	-
VBA32	3.12.8.10	2008.12.15	suspected of Malware-Cryptor.Win32.General.4
ViRobot	2008.12.16.1520	2008.12.16	-
VirusBuster	4.5.11.0	2008.12.15	-

Additional information
File size: 32768 bytes
MD5...: d57614424f0b8ce32c238195eece7586

Добавлено через 1 минуту

File svchost.exe received on 12.16.2008 09:11:53 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.16.2	2008.12.16	-
AntiVir	7.9.0.45	2008.12.15	-
Authentium	5.1.0.4	2008.12.16	-
Avast	4.8.1281.0	2008.12.15	-
AVG	8.0.0.199	2008.12.15	-
BitDefender	7.2	2008.12.16	-
CAT-QuickHeal	10.00	2008.12.16	-
ClamAV	0.94.1	2008.12.16	-
Comodo	760	2008.12.15	-
DrWeb	4.44.0.09170	2008.12.16	-
eSafe	7.0.17.0	2008.12.15	Suspicious File
eTrust-Vet	31.6.6262	2008.12.16	-
Ewido	4.0	2008.12.15	-
F-Prot	4.4.4.56	2008.12.15	-
F-Secure	8.0.14332.0	2008.12.16	-
Fortinet	3.117.0.0	2008.12.16	-
GData	19	2008.12.16	-
Ikarus	T3.1.1.45.0	2008.12.16	-
K7AntiVirus	7.10.554	2008.12.15	-
Kaspersky	7.0.0.125	2008.12.16	P2P-Worm.Win32.Agent.hw
McAfee	5465	2008.12.15	-
McAfee+Artemis	5465	2008.12.15	-
Microsoft	1.4205	2008.12.16	-
NOD32	3694	2008.12.15	-
Norman	5.80.02	2008.12.15	-
Panda	9.0.0.4	2008.12.15	-
PCTools	4.4.2.0	2008.12.15	-
Prevx1	V2	2008.12.16	Cloaked Malware
Rising	21.08.11.00	2008.12.16	-
SecureWeb-Gateway	6.7.6	2008.12.15	-
Sophos	4.36.0	2008.12.16	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.16	-
TheHacker	6.3.1.4.189	2008.12.16	-
TrendMicro	8.700.0.1004	2008.12.16	-
VBA32	3.12.8.10	2008.12.15	suspected of Malware-Cryptor.Win32.General.3
ViRobot	2008.12.16.1520	2008.12.16	-
VirusBuster	4.5.11.0	2008.12.15	-

Additional information
File size: 31744 bytes
MD5...: 9c8adb9f7f66f0a88ca866b993f42c22

Добавлено через 1 минуту

File ntndis.exe received on 12.16.2008 09:10:23 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.16.2	2008.12.16	-
AntiVir	7.9.0.45	2008.12.15	TR/Crypt.XPACK.Gen
Authentium	5.1.0.4	2008.12.16	W32/LdPinch.N.gen!Eldorado
Avast	4.8.1281.0	2008.12.15	-
AVG	8.0.0.199	2008.12.15	Worm/AutoRun.CL
BitDefender	7.2	2008.12.16	GenPack:Backdoor.SDBot.DETV
CAT-QuickHeal	10.00	2008.12.16	-
ClamAV	0.94.1	2008.12.16	-
Comodo	760	2008.12.15	-
DrWeb	4.44.0.09170	2008.12.16	-
eSafe	7.0.17.0	2008.12.15	Suspicious File
eTrust-Vet	31.6.6262	2008.12.16	-
Ewido	4.0	2008.12.15	-
F-Prot	4.4.4.56	2008.12.14	W32/LdPinch.N.gen!Eldorado
F-Secure	8.0.14332.0	2008.12.16	Suspicious:W32/Malware!Gemini
Fortinet	3.117.0.0	2008.12.16	suspicious
GData	19	2008.12.16	GenPack:Backdoor.SDBot.DETV
Ikarus	T3.1.1.45.0	2008.12.16	-
K7AntiVirus	7.10.554	2008.12.15	-
Kaspersky	7.0.0.125	2008.12.16	-
McAfee	5465	2008.12.15	-
McAfee+Artemis	5465	2008.12.15	-
Microsoft	1.4205	2008.12.16	-
NOD32	3694	2008.12.15	-
Norman	5.80.02	2008.12.15	-
Panda	9.0.0.4	2008.12.15	-
PCTools	4.4.2.0	2008.12.15	-
Prevx1	V2	2008.12.16	-
Rising	21.08.11.00	2008.12.16	-
SecureWeb-Gateway	6.7.6	2008.12.15	Trojan.Crypt.XPACK.Gen
Sophos	4.36.0	2008.12.16	Mal/Basine-C
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.16	-
TheHacker	6.3.1.4.189	2008.12.16	-
TrendMicro	8.700.0.1004	2008.12.16	-
VBA32	3.12.8.10	2008.12.15	-
ViRobot	2008.12.16.1520	2008.12.16	-
VirusBuster	4.5.11.0	2008.12.15	-

Additional information
File size: 40107 bytes
MD5...: 70ca8199611e79ed9b1422e0df83f628

**Shu_b** · 17.12.2008, 17:25

File KB908665.exe received on 12.17.2008 15:21:39 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.17.3	2008.12.17	-
AntiVir	7.9.0.45	2008.12.17	TR/Dropper.Gen
Authentium	5.1.0.4	2008.12.17	-
Avast	4.8.1281.0	2008.12.17	Win32:Trojan-gen {Other}
AVG	8.0.0.199	2008.12.17	Win32/Heur
BitDefender	7.2	2008.12.17	Trojan.Dropper.Kobcka.FE
CAT-QuickHeal	10.00	2008.12.17	-
ClamAV	0.94.1	2008.12.17	-
Comodo	771	2008.12.17	-
DrWeb	4.44.0.09170	2008.12.17	-
eSafe	7.0.17.0	2008.12.16	-
eTrust-Vet	31.6.6265	2008.12.17	-
Ewido	4.0	2008.12.17	-
F-Prot	4.4.4.56	2008.12.17	-
F-Secure	8.0.14332.0	2008.12.17	-
Fortinet	3.117.0.0	2008.12.17	-
GData	19	2008.12.17	Trojan.Dropper.Kobcka.FE
Ikarus	T3.1.1.45.0	2008.12.17	-
K7AntiVirus	7.10.556	2008.12.17	-
Kaspersky	7.0.0.125	2008.12.17	-
McAfee	5466	2008.12.16	-
McAfee+Artemis	5466	2008.12.16	Generic!Artemis
Microsoft	1.4205	2008.12.17	-
NOD32	3698	2008.12.17	a variant of Win32/Wigon
Norman	5.80.02	2008.12.16	-
Panda	9.0.0.4	2008.12.17	-
PCTools	4.4.2.0	2008.12.17	-
Prevx1	V2	2008.12.17	-
Rising	21.08.22.00	2008.12.17	-
SecureWeb-Gateway	6.7.6	2008.12.17	Trojan.Dropper.Gen
Sophos	4.37.0	2008.12.17	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.17	-
TheHacker	6.3.1.4.189	2008.12.16	-
TrendMicro	8.700.0.1004	2008.12.17	-
VBA32	3.12.8.10	2008.12.16	-
ViRobot	2008.12.17.1523	2008.12.17	-
VirusBuster	4.5.11.0	2008.12.16	-

Additional information
File size: 14848 bytes
MD5...: 9d874acad44489cbf918882a696e9ff4

**Pili** · 18.12.2008, 10:14

Файл services.exe получен 2008.12.18 08:11:07 (CET)

Код:

AhnLab-V3	2008.12.17.3	2008.12.18	-
AntiVir	7.9.0.45	2008.12.17	TR/Dropper.Gen
Authentium	5.1.0.4	2008.12.18	-
Avast	4.8.1281.0	2008.12.17	Win32:Crypt-DGD
AVG	8.0.0.199	2008.12.17	BackDoor.Generic_r.EA
BitDefender	7.2	2008.12.18	Trojan.Spammer.Tedroo.AV
CAT-QuickHeal	10.00	2008.12.18	(Suspicious) - DNAScan
ClamAV	0.94.1	2008.12.18	-
Comodo	771	2008.12.17	-
DrWeb	4.44.0.09170	2008.12.17	-
eSafe	7.0.17.0	2008.12.17	-
eTrust-Vet	31.6.6266	2008.12.18	-
Ewido	4.0	2008.12.17	-
F-Prot	4.4.4.56	2008.12.17	-
F-Secure	8.0.14332.0	2008.12.18	-
Fortinet	3.117.0.0	2008.12.18	-
GData	19	2008.12.18	Win32:Crypt-DGD
Ikarus	T3.1.1.45.0	2008.12.18	-
K7AntiVirus	7.10.556	2008.12.17	-
Kaspersky	7.0.0.125	2008.12.18	-
McAfee	5467	2008.12.17	-
McAfee+Artemis	5467	2008.12.17	-
Microsoft	1.4205	2008.12.18	-
NOD32	3700	2008.12.17	a variant of Win32/Injector.DO
Norman	5.80.02	2008.12.17	-
Panda	9.0.0.4	2008.12.18	-
PCTools	4.4.2.0	2008.12.17	-
Prevx1	V2	2008.12.18	-
Rising	21.08.30.00	2008.12.18	-
SecureWeb-Gateway	6.7.6	2008.12.17	Trojan.Dropper.Gen
Sophos	4.37.0	2008.12.18	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.18	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.18	-
VBA32	3.12.8.10	2008.12.17	-
ViRobot	2008.12.18.1524	2008.12.18	-
VirusBuster	4.5.11.0	2008.12.17	-

Дополнительная информация
File size: 42496 bytes
MD5...: d059090e5fd545e21eaf6f4f0971555e

**Shu_b** · 18.12.2008, 10:49

File rs32net.exe received on 12.18.2008 08:32:15 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.17.3	2008.12.18	-
AntiVir	7.9.0.45	2008.12.17	TR/Dropper.Gen
Authentium	5.1.0.4	2008.12.18	-
Avast	4.8.1281.0	2008.12.17	-
AVG	8.0.0.199	2008.12.17	-
BitDefender	7.2	2008.12.18	-
CAT-QuickHeal	10.00	2008.12.18	-
ClamAV	0.94.1	2008.12.18	-
Comodo	771	2008.12.17	-
DrWeb	4.44.0.09170	2008.12.17	-
eSafe	7.0.17.0	2008.12.17	-
eTrust-Vet	31.6.6266	2008.12.18	-
Ewido	4.0	2008.12.17	-
F-Prot	4.4.4.56	2008.12.17	-
F-Secure	8.0.14332.0	2008.12.18	-
Fortinet	3.117.0.0	2008.12.18	-
GData	19	2008.12.18	-
Ikarus	T3.1.1.45.0	2008.12.18	-
K7AntiVirus	7.10.556	2008.12.17	-
Kaspersky	7.0.0.125	2008.12.18	-
McAfee	5467	2008.12.17	-
McAfee+Artemis	5467	2008.12.17	-
Microsoft	1.4205	2008.12.18	-
NOD32	3700	2008.12.17	-
Norman	5.80.02	2008.12.17	-
Panda	9.0.0.4	2008.12.17	-
PCTools	4.4.2.0	2008.12.17	-
Prevx1	V2	2008.12.18	Cloaked Malware
Rising	21.08.30.00	2008.12.18	-
SecureWeb-Gateway	6.7.6	2008.12.18	Trojan.Dropper.Gen
Sophos	4.37.0	2008.12.18	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.18	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.18	-
VBA32	3.12.8.10	2008.12.17	-
ViRobot	2008.12.18.1524	2008.12.18	-
VirusBuster	4.5.11.0	2008.12.17	-

Additional information
File size: 22528 bytes
MD5...: 3f57bfc5720636570e8d6aebac6f207b

Добавлено через 1 минуту

File vqolquurbqr.dll received on 12.18.2008 08:28:36 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.17.3	2008.12.18	-
AntiVir	7.9.0.45	2008.12.17	-
Authentium	5.1.0.4	2008.12.18	-
Avast	4.8.1281.0	2008.12.17	-
AVG	8.0.0.199	2008.12.17	-
BitDefender	7.2	2008.12.18	-
CAT-QuickHeal	10.00	2008.12.18	-
ClamAV	0.94.1	2008.12.18	-
Comodo	771	2008.12.17	-
DrWeb	4.44.0.09170	2008.12.17	-
eSafe	7.0.17.0	2008.12.17	-
eTrust-Vet	31.6.6266	2008.12.18	-
Ewido	4.0	2008.12.17	-
F-Prot	4.4.4.56	2008.12.17	-
F-Secure	8.0.14332.0	2008.12.18	-
Fortinet	3.117.0.0	2008.12.18	-
GData	19	2008.12.18	-
Ikarus	T3.1.1.45.0	2008.12.18	-
K7AntiVirus	7.10.556	2008.12.17	-
Kaspersky	7.0.0.125	2008.12.18	-
McAfee	5467	2008.12.17	-
McAfee+Artemis	5467	2008.12.17	-
Microsoft	1.4205	2008.12.18	-
NOD32	3700	2008.12.17	-
Norman	5.80.02	2008.12.17	-
Panda	9.0.0.4	2008.12.17	-
PCTools	4.4.2.0	2008.12.17	-
Prevx1	V2	2008.12.18	-
Rising	21.08.30.00	2008.12.18	-
SecureWeb-Gateway	6.7.6	2008.12.18	-
Sophos	4.37.0	2008.12.18	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.18	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.18	-
VBA32	3.12.8.10	2008.12.17	-
ViRobot	2008.12.18.1524	2008.12.18	-
VirusBuster	4.5.11.0	2008.12.17	-

Additional information
File size: 384512 bytes
MD5...: 552c752e717efcd9bda0e75e59195c10

Добавлено через 1 минуту

File winhelp32.exe received on 12.18.2008 08:22:44 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.17.3	2008.12.18	-
AntiVir	7.9.0.45	2008.12.17	-
Authentium	5.1.0.4	2008.12.18	W32/NaviPromo.B.gen!Eldorado
Avast	4.8.1281.0	2008.12.17	-
AVG	8.0.0.199	2008.12.17	-
BitDefender	7.2	2008.12.18	-
CAT-QuickHeal	10.00	2008.12.18	(Suspicious) - DNAScan
ClamAV	0.94.1	2008.12.18	-
Comodo	771	2008.12.17	-
DrWeb	4.44.0.09170	2008.12.17	-
eSafe	7.0.17.0	2008.12.17	Suspicious File
eTrust-Vet	31.6.6266	2008.12.18	-
Ewido	4.0	2008.12.17	-
F-Prot	4.4.4.56	2008.12.17	W32/NaviPromo.B.gen!Eldorado
F-Secure	8.0.14332.0	2008.12.18	Trojan-Dropper.Win32.Agent.abph
Fortinet	3.117.0.0	2008.12.18	W32/Agent.ABPH!tr
GData	19	2008.12.18	-
Ikarus	T3.1.1.45.0	2008.12.18	Trojan-Dropper.Agent
K7AntiVirus	7.10.556	2008.12.17	-
Kaspersky	7.0.0.125	2008.12.18	Trojan-Dropper.Win32.Agent.abph
McAfee	5467	2008.12.17	-
McAfee+Artemis	5467	2008.12.17	-
Microsoft	1.4205	2008.12.18	-
NOD32	3700	2008.12.17	-
Norman	5.80.02	2008.12.17	-
Panda	9.0.0.4	2008.12.18	Suspicious file
PCTools	4.4.2.0	2008.12.17	-
Prevx1	V2	2008.12.18	-
Rising	21.08.30.00	2008.12.18	-
SecureWeb-Gateway	6.7.6	2008.12.18	-
Sophos	4.37.0	2008.12.18	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.18	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.18	-
VBA32	3.12.8.10	2008.12.17	-
ViRobot	2008.12.18.1524	2008.12.18	-
VirusBuster	4.5.11.0	2008.12.17	-

Additional information
File size: 359944 bytes

Добавлено через 2 минуты

File tdll.dll received on 12.18.2008 08:22:30 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.17.3	2008.12.18	-
AntiVir	7.9.0.45	2008.12.17	TR/Crypt.XPACK.Gen
Authentium	5.1.0.4	2008.12.18	-
Avast	4.8.1281.0	2008.12.17	Win32:Trojan-gen {Other}
AVG	8.0.0.199	2008.12.17	-
BitDefender	7.2	2008.12.18	Trojan.Inject.IA
CAT-QuickHeal	10.00	2008.12.18	-
ClamAV	0.94.1	2008.12.18	-
Comodo	771	2008.12.17	-
DrWeb	4.44.0.09170	2008.12.17	-
eSafe	7.0.17.0	2008.12.17	Suspicious File
eTrust-Vet	31.6.6266	2008.12.18	-
Ewido	4.0	2008.12.17	-
F-Prot	4.4.4.56	2008.12.17	-
F-Secure	8.0.14332.0	2008.12.18	Trojan.Win32.Inject.lmo
Fortinet	3.117.0.0	2008.12.18	-
GData	19	2008.12.18	Trojan.Inject.IA
Ikarus	T3.1.1.45.0	2008.12.18	Spammer
K7AntiVirus	7.10.556	2008.12.17	-
Kaspersky	7.0.0.125	2008.12.18	Trojan.Win32.Inject.lmo
McAfee	5467	2008.12.17	-
McAfee+Artemis	5467	2008.12.17	-
Microsoft	1.4205	2008.12.18	Spammer:Win32/Cutwail.gen!B
NOD32	3700	2008.12.17	-
Norman	5.80.02	2008.12.17	-
Panda	9.0.0.4	2008.12.18	-
PCTools	4.4.2.0	2008.12.17	-
Prevx1	V2	2008.12.18	-
Rising	21.08.30.00	2008.12.18	-
SecureWeb-Gateway	6.7.6	2008.12.18	Trojan.Crypt.XPACK.Gen
Sophos	4.37.0	2008.12.18	-
Sunbelt	3.2.1801.2	2008.12.11	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.18	-
VBA32	3.12.8.10	2008.12.17	-
ViRobot	2008.12.18.1524	2008.12.18	-
VirusBuster	4.5.11.0	2008.12.17	-

Additional information
File size: 67194 bytes
MD5...: d3a053084671cb4eb145b248aab4e7a3

Добавлено через 1 минуту

File vmmreg32.dll received on 12.18.2008 08:22:13 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.17.3	2008.12.18	-
AntiVir	7.9.0.45	2008.12.17	TR/Drop.Agent.abph
Authentium	5.1.0.4	2008.12.18	-
Avast	4.8.1281.0	2008.12.17	-
AVG	8.0.0.199	2008.12.17	-
BitDefender	7.2	2008.12.18	-
CAT-QuickHeal	10.00	2008.12.18	-
ClamAV	0.94.1	2008.12.18	-
Comodo	771	2008.12.17	-
DrWeb	4.44.0.09170	2008.12.17	-
eSafe	7.0.17.0	2008.12.17	Suspicious File
eTrust-Vet	31.6.6266	2008.12.18	-
Ewido	4.0	2008.12.17	-
F-Prot	4.4.4.56	2008.12.17	-
F-Secure	8.0.14332.0	2008.12.18	Trojan-Dropper.Win32.Agent.abph
Fortinet	3.117.0.0	2008.12.18	W32/Agent.ABPH!tr
GData	19	2008.12.18	-
Ikarus	T3.1.1.45.0	2008.12.18	Trojan-Dropper.Agent
K7AntiVirus	7.10.556	2008.12.17	-
Kaspersky	7.0.0.125	2008.12.18	Trojan-Dropper.Win32.Agent.abph
McAfee	5467	2008.12.17	-
McAfee+Artemis	5467	2008.12.17	-
Microsoft	1.4205	2008.12.18	-
NOD32	3700	2008.12.17	-
Norman	5.80.02	2008.12.17	-
Panda	9.0.0.4	2008.12.17	Suspicious file
PCTools	4.4.2.0	2008.12.17	-
Prevx1	V2	2008.12.18	-
Rising	21.08.30.00	2008.12.18	-
SecureWeb-Gateway	6.7.6	2008.12.18	Trojan.Drop.Agent.abph
Sophos	4.37.0	2008.12.18	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.18	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.18	-
VBA32	3.12.8.10	2008.12.17	-
ViRobot	2008.12.18.1524	2008.12.18	-
VirusBuster	4.5.11.0	2008.12.17	-

Additional information
File size: 219144 bytes
MD5...: 0f06783162341a6f3fe0fba25f310215

Добавлено через 1 минуту

File vmi386.sys received on 12.18.2008 08:21:22 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.17.3	2008.12.18	-
AntiVir	7.9.0.45	2008.12.17	TR/Dropper.Gen
Authentium	5.1.0.4	2008.12.18	-
Avast	4.8.1281.0	2008.12.17	Win32:Trojan-gen {Other}
AVG	8.0.0.199	2008.12.17	-
BitDefender	7.2	2008.12.18	-
CAT-QuickHeal	10.00	2008.12.18	-
ClamAV	0.94.1	2008.12.18	-
Comodo	771	2008.12.17	-
DrWeb	4.44.0.09170	2008.12.17	Trojan.Packed.1228
eSafe	7.0.17.0	2008.12.17	-
eTrust-Vet	31.6.6266	2008.12.18	-
Ewido	4.0	2008.12.17	-
F-Prot	4.4.4.56	2008.12.17	-
F-Secure	8.0.14332.0	2008.12.18	Trojan.Win32.Pakes.mfj
Fortinet	3.117.0.0	2008.12.18	-
GData	19	2008.12.18	Win32:Trojan-gen {Other}
Ikarus	T3.1.1.45.0	2008.12.18	Trojan.Win32.Pakes
K7AntiVirus	7.10.556	2008.12.17	-
Kaspersky	7.0.0.125	2008.12.18	Trojan.Win32.Pakes.mfj
McAfee	5467	2008.12.17	-
McAfee+Artemis	5467	2008.12.17	Generic!Artemis
Microsoft	1.4205	2008.12.18	-
NOD32	3700	2008.12.17	-
Norman	5.80.02	2008.12.17	-
Panda	9.0.0.4	2008.12.18	-
PCTools	4.4.2.0	2008.12.17	-
Prevx1	V2	2008.12.18	Malicious Software
Rising	21.08.30.00	2008.12.18	-
SecureWeb-Gateway	6.7.6	2008.12.18	Trojan.Dropper.Gen
Sophos	4.37.0	2008.12.18	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.18	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.18	-
VBA32	3.12.8.10	2008.12.17	-
ViRobot	2008.12.18.1524	2008.12.18	-
VirusBuster	4.5.11.0	2008.12.17	-

Additional information
File size: 72736 bytes
MD5...: 09e2f34eb7b0872159ba3fe16b23145f

Добавлено через 1 минуту

File VIDEO.sys received on 12.18.2008 08:21:58 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.17.3	2008.12.18	-
AntiVir	7.9.0.45	2008.12.17	TR/PSW.Agent.lii
Authentium	5.1.0.4	2008.12.18	-
Avast	4.8.1281.0	2008.12.17	-
AVG	8.0.0.199	2008.12.17	-
BitDefender	7.2	2008.12.18	-
CAT-QuickHeal	10.00	2008.12.18	-
ClamAV	0.94.1	2008.12.18	-
Comodo	771	2008.12.17	-
DrWeb	4.44.0.09170	2008.12.17	-
eSafe	7.0.17.0	2008.12.17	-
eTrust-Vet	31.6.6266	2008.12.18	-
Ewido	4.0	2008.12.17	-
F-Prot	4.4.4.56	2008.12.17	-
F-Secure	8.0.14332.0	2008.12.18	Trojan-PSW.Win32.Agent.lii
Fortinet	3.117.0.0	2008.12.18	W32/Agent.LII!tr.pws
GData	19	2008.12.18	-
Ikarus	T3.1.1.45.0	2008.12.18	Trojan-PWS.Win32.Agent
K7AntiVirus	7.10.556	2008.12.17	-
Kaspersky	7.0.0.125	2008.12.18	Trojan-PSW.Win32.Agent.lii
McAfee	5467	2008.12.17	-
McAfee+Artemis	5467	2008.12.17	-
Microsoft	1.4205	2008.12.18	-
NOD32	3700	2008.12.17	-
Norman	5.80.02	2008.12.17	-
Panda	9.0.0.4	2008.12.18	-
PCTools	4.4.2.0	2008.12.17	-
Prevx1	V2	2008.12.18	-
Rising	21.08.30.00	2008.12.18	-
SecureWeb-Gateway	6.7.6	2008.12.18	Trojan.PSW.Agent.lii
Sophos	4.37.0	2008.12.18	-
Sunbelt	3.2.1801.2	2008.12.10	-
Symantec	10	2008.12.18	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.18	-
VBA32	3.12.8.10	2008.12.17	-
ViRobot	2008.12.18.1524	2008.12.18	-
VirusBuster	4.5.11.0	2008.12.17	-

Additional information
File size: 28416 bytes
MD5...: f41dde69903b4a1279e8e52308f41339

**Shu_b** · 19.12.2008, 11:51

File disc32.dll received on 12.19.2008 08:24:01 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.19.0	2008.12.19	-
AntiVir	7.9.0.45	2008.12.19	-
Authentium	5.1.0.4	2008.12.18	W32/Heuristic-VFM!Eldorado
Avast	4.8.1281.0	2008.12.18	-
AVG	8.0.0.199	2008.12.18	-
BitDefender	7.2	2008.12.19	-
CAT-QuickHeal	10.00	2008.12.19	-
ClamAV	0.94.1	2008.12.18	-
Comodo	780	2008.12.19	-
DrWeb	4.44.0.09170	2008.12.18	-
eSafe	7.0.17.0	2008.12.18	Suspicious File
eTrust-Vet	31.6.6268	2008.12.18	-
Ewido	4.0	2008.12.18	-
F-Prot	4.4.4.56	2008.12.18	W32/Heuristic-VFM!Eldorado
F-Secure	8.0.14332.0	2008.12.19	Worm.Win32.AutoRun.uwl
Fortinet	3.117.0.0	2008.12.19	-
GData	19	2008.12.19	-
Ikarus	T3.1.1.45.0	2008.12.19	Backdoor.Win32.Bandok
K7AntiVirus	7.10.557	2008.12.18	-
Kaspersky	7.0.0.125	2008.12.19	Worm.Win32.AutoRun.uwl
McAfee	5468	2008.12.18	-
McAfee+Artemis	5468	2008.12.18	-
Microsoft	1.4205	2008.12.19	-
NOD32	3704	2008.12.18	-
Norman	5.80.02	2008.12.18	-
Panda	9.0.0.4	2008.12.19	-
PCTools	4.4.2.0	2008.12.18	-
Prevx1	V2	2008.12.19	-
Rising	21.08.40.00	2008.12.19	-
SecureWeb-Gateway	6.7.6	2008.12.19	Win32.Malware.gen#UPX (suspicious)
Sophos	4.37.0	2008.12.19	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.19	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.19	-
VBA32	3.12.8.10	2008.12.18	-
ViRobot	2008.12.18.1526	2008.12.19	-
VirusBuster	4.5.11.0	2008.12.18	-

Additional information
File size: 14336 bytes
MD5...: c93c8279540aed5051d85b94d95b855d

Добавлено через 2 минуты

File winlogon.exe received on 12.19.2008 08:50:29 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.19.0	2008.12.19	-
AntiVir	7.9.0.45	2008.12.19	-
Authentium	5.1.0.4	2008.12.18	-
Avast	4.8.1281.0	2008.12.18	-
AVG	8.0.0.199	2008.12.18	-
BitDefender	7.2	2008.12.19	-
CAT-QuickHeal	10.00	2008.12.19	-
ClamAV	0.94.1	2008.12.18	-
Comodo	780	2008.12.19	-
DrWeb	4.44.0.09170	2008.12.18	-
eSafe	7.0.17.0	2008.12.18	-
eTrust-Vet	31.6.6268	2008.12.18	-
Ewido	4.0	2008.12.18	-
F-Prot	4.4.4.56	2008.12.18	-
F-Secure	8.0.14332.0	2008.12.19	-
Fortinet	3.117.0.0	2008.12.19	-
GData	19	2008.12.19	-
Ikarus	T3.1.1.45.0	2008.12.19	-
K7AntiVirus	7.10.557	2008.12.18	-
Kaspersky	7.0.0.125	2008.12.19	Trojan-Proxy.Win32.Delf.ki
McAfee	5468	2008.12.18	New Malware.gr
McAfee+Artemis	5468	2008.12.18	New Malware.gr
Microsoft	1.4205	2008.12.19	-
NOD32	3704	2008.12.18	-
Norman	5.80.02	2008.12.18	-
Panda	9.0.0.4	2008.12.19	Suspicious file
PCTools	4.4.2.0	2008.12.18	-
Prevx1	V2	2008.12.19	Malicious Software
Rising	21.08.40.00	2008.12.19	-
SecureWeb-Gateway	6.7.6	2008.12.19	-
Sophos	4.37.0	2008.12.19	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.19	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.19	-
VBA32	3.12.8.10	2008.12.18	-
ViRobot	2008.12.18.1526	2008.12.19	-
VirusBuster	4.5.11.0	2008.12.18	-

Additional information
File size: 712704 bytes
MD5...: dcac5a14860babc1d3ed514b73467a68

Добавлено через 2 минуты

File xxyxVlJd.dll received on 12.19.2008 09:04:13 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.19.0	2008.12.19	-
AntiVir	7.9.0.45	2008.12.19	TR/Vundo.Gen.6.23
Authentium	5.1.0.4	2008.12.18	-
Avast	4.8.1281.0	2008.12.18	-
AVG	8.0.0.199	2008.12.18	Vundo.CK
BitDefender	7.2	2008.12.19	Trojan.Vundo.Gen.6
CAT-QuickHeal	10.00	2008.12.19	-
ClamAV	0.94.1	2008.12.18	-
Comodo	780	2008.12.19	-
DrWeb	4.44.0.09170	2008.12.18	Trojan.Virtumod.855
eSafe	7.0.17.0	2008.12.18	-
eTrust-Vet	31.6.6268	2008.12.18	Win32/Vundo!generic
Ewido	4.0	2008.12.18	-
F-Prot	4.4.4.56	2008.12.18	W32/Virtumonde.AC.gen!Eldorado
F-Secure	8.0.14332.0	2008.12.19	Trojan:W32/Vundo.EL
Fortinet	3.117.0.0	2008.12.19	-
GData	19	2008.12.19	Trojan.Vundo.Gen.6
Ikarus	T3.1.1.45.0	2008.12.19	-
K7AntiVirus	7.10.557	2008.12.18	-
Kaspersky	7.0.0.125	2008.12.19	-
McAfee	5468	2008.12.18	-
McAfee+Artemis	5468	2008.12.18	-
Microsoft	1.4205	2008.12.19	Trojan:Win32/Vundo.gen!R
NOD32	3704	2008.12.18	Win32/Adware.Virtumonde.FP
Norman	5.80.02	2008.12.18	-
Panda	9.0.0.4	2008.12.19	-
PCTools	4.4.2.0	2008.12.18	-
Prevx1	V2	2008.12.19	-
Rising	21.08.41.00	2008.12.19	Trojan.Win32.VUNDO.cbw
SecureWeb-Gateway	6.7.6	2008.12.19	Trojan.Vundo.Gen.6.23
Sophos	4.37.0	2008.12.19	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.19	Packed.Generic.203
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.19	-
VBA32	3.12.8.10	2008.12.18	-
ViRobot	2008.12.18.1526	2008.12.19	-
VirusBuster	4.5.11.0	2008.12.18	-

Additional information
File size: 235520 bytes
MD5...: 0970f7b9d3927f6b93c8ceb1312a00f8

Добавлено через 2 минуты

File winscenter.exe received on 12.19.2008 09:22:23 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.19.0	2008.12.19	-
AntiVir	7.9.0.45	2008.12.19	-
Authentium	5.1.0.4	2008.12.18	-
Avast	4.8.1281.0	2008.12.18	-
AVG	8.0.0.199	2008.12.18	Win32/Cryptor
BitDefender	7.2	2008.12.19	-
CAT-QuickHeal	10.00	2008.12.19	(Suspicious) - DNAScan
ClamAV	0.94.1	2008.12.18	-
Comodo	780	2008.12.19	-
DrWeb	4.44.0.09170	2008.12.18	-
eSafe	7.0.17.0	2008.12.18	-
eTrust-Vet	31.6.6268	2008.12.18	-
Ewido	4.0	2008.12.18	-
F-Prot	4.4.4.56	2008.12.18	-
F-Secure	8.0.14332.0	2008.12.19	-
Fortinet	3.117.0.0	2008.12.19	-
GData	19	2008.12.19	-
Ikarus	T3.1.1.45.0	2008.12.19	Rootkit.Win32.TDSS
K7AntiVirus	7.10.557	2008.12.18	-
Kaspersky	7.0.0.125	2008.12.19	-
McAfee	5468	2008.12.18	-
McAfee+Artemis	5468	2008.12.18	Generic!Artemis
Microsoft	1.4205	2008.12.19	-
NOD32	3704	2008.12.18	-
Norman	5.80.02	2008.12.18	-
Panda	9.0.0.4	2008.12.19	-
PCTools	4.4.2.0	2008.12.18	-
Prevx1	V2	2008.12.19	Malicious Software
Rising	21.08.41.00	2008.12.19	-
SecureWeb-Gateway	6.7.6	2008.12.19	-
Sophos	4.37.0	2008.12.19	Mal/EncPk-CZ
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.19	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.19	TROJ_FAKEAV.AEA
VBA32	3.12.8.10	2008.12.18	-
ViRobot	2008.12.18.1526	2008.12.19	-
VirusBuster	4.5.11.0	2008.12.18	-

Additional information
File size: 384512 bytes
MD5...: a69de673a56ee3c21f40f3775ea05842

Добавлено через 5 минут

File kqozsbo.sys received on 12.19.2008 09:48:59 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.19.0	2008.12.19	-
AntiVir	7.9.0.45	2008.12.19	TR/Rootkit.Gen
Authentium	5.1.0.4	2008.12.18	-
Avast	4.8.1281.0	2008.12.18	Win32:Rootkit-gen
AVG	8.0.0.199	2008.12.18	DDoS.K
BitDefender	7.2	2008.12.19	-
CAT-QuickHeal	10.00	2008.12.19	-
ClamAV	0.94.1	2008.12.18	-
Comodo	780	2008.12.19	-
DrWeb	4.44.0.09170	2008.12.19	-
eSafe	7.0.17.0	2008.12.18	-
eTrust-Vet	31.6.6268	2008.12.18	-
Ewido	4.0	2008.12.18	-
F-Prot	4.4.4.56	2008.12.18	-
F-Secure	8.0.14332.0	2008.12.19	-
Fortinet	3.117.0.0	2008.12.19	-
GData	19	2008.12.19	Win32:Rootkit-gen
Ikarus	T3.1.1.45.0	2008.12.19	-
K7AntiVirus	7.10.557	2008.12.18	-
Kaspersky	7.0.0.125	2008.12.19	-
McAfee	5468	2008.12.18	-
McAfee+Artemis	5468	2008.12.18	-
Microsoft	1.4205	2008.12.19	Backdoor:WinNT/Rustock.H
NOD32	3704	2008.12.18	-
Norman	5.80.02	2008.12.18	-
Panda	9.0.0.4	2008.12.19	-
PCTools	4.4.2.0	2008.12.18	-
Prevx1	V2	2008.12.19	-
Rising	21.08.41.00	2008.12.19	-
SecureWeb-Gateway	6.7.6	2008.12.19	Trojan.Rootkit.Gen
Sophos	4.37.0	2008.12.19	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.19	-
TheHacker	6.3.1.4.191	2008.12.17	-
TrendMicro	8.700.0.1004	2008.12.19	-
VBA32	3.12.8.10	2008.12.18	-
ViRobot	2008.12.18.1526	2008.12.19	-
VirusBuster	4.5.11.0	2008.12.18	-

Additional information
File size: 30848 bytes
MD5...: 78f59cf8d0d936d24a3b5af5c16114e5

**Shu_b** · 22.12.2008, 17:34

из свежеприсланного (t=36108)

File tpszxyd.sys received on 12.22.2008 15:17:37 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.22.0	2008.12.22	-
AntiVir	7.9.0.45	2008.12.22	-
Authentium	5.1.0.4	2008.12.22	-
Avast	4.8.1281.0	2008.12.21	Win32:Refpron-C
AVG	8.0.0.199	2008.12.22	Agent.4.E
BitDefender	7.2	2008.12.22	-
CAT-QuickHeal	10.00	2008.12.22	-
ClamAV	0.94.1	2008.12.22	-
Comodo	793	2008.12.21	-
DrWeb	4.44.0.09170	2008.12.22	-
eSafe	7.0.17.0	2008.12.21	-
eTrust-Vet	31.6.6271	2008.12.20	-
Ewido	4.0	2008.12.22	-
F-Prot	4.4.4.56	2008.12.22	-
F-Secure	8.0.14332.0	2008.12.22	Suspicious:W32/DVBBS.c!Gemini
Fortinet	3.117.0.0	2008.12.22	-
GData	19	2008.12.22	Win32:Refpron-C
Ikarus	T3.1.1.45.0	2008.12.22	Virus.Win32.DNSChanger.XR
K7AntiVirus	7.10.562	2008.12.22	-
Kaspersky	7.0.0.125	2008.12.22	-
McAfee	5471	2008.12.21	-
McAfee+Artemis	5471	2008.12.21	-
Microsoft	1.4205	2008.12.22	Backdoor:Win32/Refpron.I
NOD32	3710	2008.12.22	-
Norman	5.80.02	2008.12.22	-
Panda	9.0.0.4	2008.12.21	-
PCTools	4.4.2.0	2008.12.22	-
Prevx1	V2	2008.12.22	Cloaked Malware
Rising	21.09.02.00	2008.12.22	-
SecureWeb-Gateway	6.7.6	2008.12.22	-
Sophos	4.37.0	2008.12.22	-
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.22	-
TheHacker	6.3.1.4.195	2008.12.20	-
TrendMicro	8.700.0.1004	2008.12.22	TROJ_REFPRON.E
VBA32	3.12.8.10	2008.12.21	-
ViRobot	2008.12.22.1530	2008.12.22	-
VirusBuster	4.5.11.0	2008.12.21	-

Additional information
File size: 263168 bytes
MD5...: dd69d2f9d2d1709c286cb5fa6ef0ca8f

File system32\reminst\smss.exe received on 12.22.2008 15:17:50 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.22.0	2008.12.22	-
AntiVir	7.9.0.45	2008.12.22	HEUR/Malware
Authentium	5.1.0.4	2008.12.22	-
Avast	4.8.1281.0	2008.12.21	-
AVG	8.0.0.199	2008.12.22	-
BitDefender	7.2	2008.12.22	DeepScan:Generic.Malware.dld!!.98AD12A5
CAT-QuickHeal	10.00	2008.12.22	Win32.Backdoor.PcClient.ZA.3
ClamAV	0.94.1	2008.12.22	-
Comodo	793	2008.12.21	-
DrWeb	4.44.0.09170	2008.12.22	-
eSafe	7.0.17.0	2008.12.21	Suspicious File
eTrust-Vet	31.6.6271	2008.12.20	-
Ewido	4.0	2008.12.22	-
F-Prot	4.4.4.56	2008.12.22	-
F-Secure	8.0.14332.0	2008.12.22	-
Fortinet	3.117.0.0	2008.12.22	-
GData	19	2008.12.22	DeepScan:Generic.Malware.dld!!.98AD12A5
Ikarus	T3.1.1.45.0	2008.12.22	-
K7AntiVirus	7.10.562	2008.12.22	-
Kaspersky	7.0.0.125	2008.12.22	-
McAfee	5471	2008.12.21	New Malware.ac
McAfee+Artemis	5471	2008.12.21	Generic!Artemis
Microsoft	1.4205	2008.12.22	-
NOD32	3710	2008.12.22	-
Norman	5.80.02	2008.12.22	-
Panda	9.0.0.4	2008.12.21	Suspicious file
PCTools	4.4.2.0	2008.12.22	-
Prevx1	V2	2008.12.22	-
Rising	21.09.02.00	2008.12.22	-
SecureWeb-Gateway	6.7.6	2008.12.22	Heuristic.Malware
Sophos	4.37.0	2008.12.22	Sus/Behav-1005
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.22	Downloader
TheHacker	6.3.1.4.195	2008.12.20	-
TrendMicro	8.700.0.1004	2008.12.22	PAK_Generic.001
VBA32	3.12.8.10	2008.12.21	-
ViRobot	2008.12.22.1530	2008.12.22	-
VirusBuster	4.5.11.0	2008.12.21	-

Additional information
File size: 6144 bytes
MD5...: 282e012b74885150185048920b5f4f51

File system32\reminst\csrss.exe received on 12.22.2008 15:23:51 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.22.0	2008.12.22	-
AntiVir	7.9.0.45	2008.12.22	-
Authentium	5.1.0.4	2008.12.22	W32/new-malware!Maximus
Avast	4.8.1281.0	2008.12.21	-
AVG	8.0.0.199	2008.12.22	-
BitDefender	7.2	2008.12.22	-
CAT-QuickHeal	10.00	2008.12.22	Trojan.Siveras.e
ClamAV	0.94.1	2008.12.22	-
Comodo	793	2008.12.21	-
DrWeb	4.44.0.09170	2008.12.22	Trojan.DownLoad.25792
eSafe	7.0.17.0	2008.12.21	Suspicious File
eTrust-Vet	31.6.6271	2008.12.20	-
Ewido	4.0	2008.12.22	-
F-Prot	4.4.4.56	2008.12.22	W32/new-malware!Maximus
F-Secure	8.0.14332.0	2008.12.22	-
Fortinet	3.117.0.0	2008.12.22	-
GData	19	2008.12.22	-
Ikarus	T3.1.1.45.0	2008.12.22	Trojan.Buzus.iij
K7AntiVirus	7.10.562	2008.12.22	-
Kaspersky	7.0.0.125	2008.12.22	-
McAfee	5471	2008.12.21	-
McAfee+Artemis	5471	2008.12.21	-
Microsoft	1.4205	2008.12.22	Exploit:Win32/Siveras.E
NOD32	3710	2008.12.22	-
Norman	5.80.02	2008.12.22	-
Panda	9.0.0.4	2008.12.21	Suspicious file
PCTools	4.4.2.0	2008.12.22	-
Prevx1	V2	2008.12.22	-
Rising	21.09.02.00	2008.12.22	-
SecureWeb-Gateway	6.7.6	2008.12.22	Trojan.Downloader.Win32.Malware.gen (suspicious)
Sophos	4.37.0	2008.12.22	-
Sunbelt	3.2.1801.2	2008.12.11	VIPRE.Suspicious
Symantec	10	2008.12.22	-
TheHacker	6.3.1.4.195	2008.12.20	-
TrendMicro	8.700.0.1004	2008.12.22	PAK_Generic.001
VBA32	3.12.8.10	2008.12.21	-
ViRobot	2008.12.22.1530	2008.12.22	-
VirusBuster	4.5.11.0	2008.12.21	-

Additional information
File size: 43520 bytes
MD5...: f7fcc33c6cf1ae3d006f9f5e41929f71

File temp\0002.exe received on 12.22.2008 15:18:02 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.22.0	2008.12.22	-
AntiVir	7.9.0.45	2008.12.22	TR/ATRAPS.Gen
Authentium	5.1.0.4	2008.12.22	-
Avast	4.8.1281.0	2008.12.21	-
AVG	8.0.0.199	2008.12.22	Dropper.Bravix
BitDefender	7.2	2008.12.22	-
CAT-QuickHeal	10.00	2008.12.22	Win32.PWS.Gamania.gen!D.8
ClamAV	0.94.1	2008.12.22	-
Comodo	793	2008.12.21	-
DrWeb	4.44.0.09170	2008.12.22	-
eSafe	7.0.17.0	2008.12.21	-
eTrust-Vet	31.6.6271	2008.12.20	-
Ewido	4.0	2008.12.22	-
F-Prot	4.4.4.56	2008.12.22	-
F-Secure	8.0.14332.0	2008.12.22	Suspicious:W32/Malware!Gemini
Fortinet	3.117.0.0	2008.12.22	-
GData	19	2008.12.22	-
Ikarus	T3.1.1.45.0	2008.12.22	-
K7AntiVirus	7.10.562	2008.12.22	-
Kaspersky	7.0.0.125	2008.12.22	-
McAfee	5471	2008.12.21	-
McAfee+Artemis	5471	2008.12.21	-
Microsoft	1.4205	2008.12.22	Trojan:Win32/Adpclient
NOD32	3710	2008.12.22	-
Norman	5.80.02	2008.12.22	-
Panda	9.0.0.4	2008.12.21	Suspicious file
PCTools	4.4.2.0	2008.12.22	-
Prevx1	V2	2008.12.22	-
Rising	21.09.02.00	2008.12.22	-
SecureWeb-Gateway	6.7.6	2008.12.22	Trojan.ATRAPS.Gen
Sophos	4.37.0	2008.12.22	Troj/Sacom-Gen
Sunbelt	3.2.1801.2	2008.12.11	-
Symantec	10	2008.12.22	-
TheHacker	6.3.1.4.195	2008.12.20	-
TrendMicro	8.700.0.1004	2008.12.22	-
VBA32	3.12.8.10	2008.12.21	suspected of Win32 Shadow Driver Install
ViRobot	2008.12.22.1530	2008.12.22	-
VirusBuster	4.5.11.0	2008.12.21	-

Additional information
File size: 60928 bytes
MD5...: 35cd63388a75d9369b241eb19901f02b

**kvit** · 23.12.2008, 08:44

пришло сегодня по icq

Код:

Антивирус  	Версия  	Обновление  	Результат
AhnLab-V3	2008.12.22.0	2008.12.23	Win-Trojan/LdPinch.41984.AH
AntiVir	7.9.0.45	2008.12.22	TR/Spy.Gen
Authentium	5.1.0.4	2008.12.23	W32/LdPinch.A.gen!Eldorado
Avast	4.8.1281.0	2008.12.23	Win32:LdPinch-CYW
AVG	8.0.0.199	2008.12.22	PSW.Ldpinch.OLX
BitDefender	7.2	2008.12.23	Trojan.PWS.LdPinch.TPC
CAT-QuickHeal	10.00	2008.12.23	-
ClamAV	0.94.1	2008.12.22	Trojan.LdPinch-1592
Comodo	800	2008.12.22	TrojWare.Win32.PSW.Ldpinch.~TE
DrWeb	4.44.0.09170	2008.12.22	Trojan.PWS.LDPinch.4182
eSafe	7.0.17.0	2008.12.21	-
eTrust-Vet	31.6.6271	2008.12.20	Win32/Yurist.DD
Ewido	4.0	2008.12.22	Trojan.LdPinch.cdz
F-Prot	4.4.4.56	2008.12.22	W32/LdPinch.A.gen!Eldorado
F-Secure	8.0.14332.0	2008.12.23	Trojan-PSW.Win32.LdPinch.dis
Fortinet	3.117.0.0	2008.12.23	W32/LdPinch.BYX!tr.pws
GData	19	2008.12.23	Trojan.PWS.LdPinch.TPC
Ikarus	T3.1.1.45.0	2008.12.23	Trojan-PWS.Win32.LdPinch
K7AntiVirus	7.10.562	2008.12.22	Trojan-PSW.Win32.LdPinch.cds
Kaspersky	7.0.0.125	2008.12.23	Trojan-PSW.Win32.LdPinch.dis
McAfee	5472	2008.12.22	-
McAfee+Artemis	5472	2008.12.22	Generic!Artemis
Microsoft	1.4205	2008.12.22	PWS:Win32/Ldpinch.gen
NOD32	3712	2008.12.22	a variant of Win32/PSW.LdPinch.NEL
Norman	5.80.02	2008.12.22	LdPinch.gen1
Panda	9.0.0.4	2008.12.22	Trj/Ldpinch.APF
PCTools	4.4.2.0	2008.12.22	Trojan.PWS.LdPinch.CCL
Prevx1	V2	2008.12.23	Malicious Software
Rising	21.09.10.00	2008.12.23	Trojan.PSW.Win32.LdPinch.cds
SecureWeb-Gateway	6.7.6	2008.12.22	Trojan.Spy.Gen
Sophos	4.37.0	2008.12.23	Troj/LDPinch-RG
Sunbelt	3.2.1809.2	2008.12.22	BehavesLike.Win32.Malware (v)
Symantec	10	2008.12.23	Infostealer.Ldpinch
TheHacker	6.3.1.4.195	2008.12.20	-
TrendMicro	8.700.0.1004	2008.12.23	TROJ_LDPINCH.BB
VBA32	3.12.8.10	2008.12.22	Trojan.Win32.Agent.tpa
ViRobot	2008.12.23.1531	2008.12.23	Trojan.Win32.PSWLdPinch.41984.F
VirusBuster	4.5.11.0	2008.12.22	Trojan.PWS.LdPinch.CCL

**Shu_b** · 23.12.2008, 09:33

File userinit.exe received on 12.23.2008 07:06:54 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.22.0	2008.12.23	-
AntiVir	7.9.0.45	2008.12.22	TR/Spy.ZBot.DAB.2
Authentium	5.1.0.4	2008.12.23	-
Avast	4.8.1281.0	2008.12.23	-
AVG	8.0.0.199	2008.12.22	SHeur2.GNW
BitDefender	7.2	2008.12.23	-
CAT-QuickHeal	10.00	2008.12.23	-
ClamAV	0.94.1	2008.12.22	-
Comodo	800	2008.12.22	-
DrWeb	4.44.0.09170	2008.12.22	-
eSafe	7.0.17.0	2008.12.21	Suspicious File
eTrust-Vet	31.6.6274	2008.12.22	-
Ewido	4.0	2008.12.22	-
F-Prot	4.4.4.56	2008.12.22	-
F-Secure	8.0.14332.0	2008.12.23	-
Fortinet	3.117.0.0	2008.12.23	-
GData	19	2008.12.23	-
Ikarus	T3.1.1.45.0	2008.12.23	-
K7AntiVirus	7.10.562	2008.12.22	Trojan.Win32.Malware.1
Kaspersky	7.0.0.125	2008.12.23	-
McAfee	5472	2008.12.22	-
McAfee+Artemis	5472	2008.12.22	Generic!Artemis
Microsoft	1.4205	2008.12.22	VirTool:Win32/Obfuscator.CW
NOD32	3712	2008.12.22	a variant of Win32/Kryptik.DK
Norman	5.80.02	2008.12.22	-
Panda	9.0.0.4	2008.12.22	-
PCTools	4.4.2.0	2008.12.22	-
Rising	21.09.10.00	2008.12.23	-
SecureWeb-Gateway	6.7.6	2008.12.23	-
Sophos	4.37.0	2008.12.23	-
Sunbelt	3.2.1809.2	2008.12.22	-
Symantec	10	2008.12.23	Infostealer
TheHacker	6.3.1.4.195	2008.12.20	-
TrendMicro	8.700.0.1004	2008.12.23	-
VBA32	3.12.8.10	2008.12.22	suspected of Malware-Cryptor.Win32.General.4
ViRobot	2008.12.23.1531	2008.12.23	-
VirusBuster	4.5.11.0	2008.12.22	-

Additional information
File size: 74240 bytes
MD5...: 18789d6b2155e4755feb98b5629babb7
SHA1..: 1e76a4b48299639cd6e2794ef4717876d66f0055

Добавлено через 1 минуту

File im.exe received on 12.23.2008 07:14:51 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.22.0	2008.12.23	-
AntiVir	7.9.0.45	2008.12.22	TR/Crypt.CFI.Gen
Authentium	5.1.0.4	2008.12.23	W32/VB-Backdoor-PSVR-based!Maximus
Avast	4.8.1281.0	2008.12.23	-
AVG	8.0.0.199	2008.12.22	-
BitDefender	7.2	2008.12.23	-
CAT-QuickHeal	10.00	2008.12.23	-
ClamAV	0.94.1	2008.12.22	-
Comodo	800	2008.12.22	-
DrWeb	4.44.0.09170	2008.12.22	-
eSafe	7.0.17.0	2008.12.21	-
eTrust-Vet	31.6.6271	2008.12.20	-
Ewido	4.0	2008.12.22	-
F-Prot	4.4.4.56	2008.12.22	W32/VB-Backdoor-PSVR-based!Maximus
F-Secure	8.0.14332.0	2008.12.23	-
Fortinet	3.117.0.0	2008.12.23	-
GData	19	2008.12.23	-
Ikarus	T3.1.1.45.0	2008.12.23	not-a-virus:AdTool.Win32.VB.a
K7AntiVirus	7.10.562	2008.12.22	-
Kaspersky	7.0.0.125	2008.12.23	-
McAfee	5472	2008.12.22	-
McAfee+Artemis	5472	2008.12.22	Generic!Artemis
Microsoft	1.4205	2008.12.22	-
NOD32	3712	2008.12.22	-
Norman	5.80.02	2008.12.22	-
Panda	9.0.0.4	2008.12.22	-
PCTools	4.4.2.0	2008.12.22	-
Prevx1	V2	2008.12.23	-
Rising	21.09.10.00	2008.12.23	-
SecureWeb-Gateway	6.7.6	2008.12.23	Trojan.Crypt.CFI.Gen
Sophos	4.37.0	2008.12.23	-
Sunbelt	3.2.1809.2	2008.12.22	Backdoor.Win32.VB.PSVR!cobra (v)
Symantec	10	2008.12.23	-
TheHacker	6.3.1.4.195	2008.12.20	-
TrendMicro	8.700.0.1004	2008.12.23	-
VBA32	3.12.8.10	2008.12.22	-
ViRobot	2008.12.23.1531	2008.12.23	-
VirusBuster	4.5.11.0	2008.12.22	-

Additional information
File size: 98304 bytes
MD5...: 26f25a5a029d118623f039398b1f7dee

Добавлено через 2 минуты

File twext.exe received on 12.23.2008 07:19:11 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.22.0	2008.12.23	-
AntiVir	7.9.0.45	2008.12.22	-
Authentium	5.1.0.4	2008.12.23	-
Avast	4.8.1281.0	2008.12.23	Win32:Zbot-AVH
AVG	8.0.0.199	2008.12.22	-
BitDefender	7.2	2008.12.23	-
CAT-QuickHeal	10.00	2008.12.23	-
ClamAV	0.94.1	2008.12.22	-
Comodo	800	2008.12.22	-
DrWeb	4.44.0.09170	2008.12.22	-
eSafe	7.0.17.0	2008.12.21	-
eTrust-Vet	31.6.6274	2008.12.22	-
Ewido	4.0	2008.12.22	-
F-Prot	4.4.4.56	2008.12.22	-
F-Secure	8.0.14332.0	2008.12.23	Trojan-Spy.Win32.Zbot.imd
Fortinet	3.117.0.0	2008.12.23	-
GData	19	2008.12.23	Win32:Zbot-AVH
Ikarus	T3.1.1.45.0	2008.12.23	-
K7AntiVirus	7.10.562	2008.12.22	-
Kaspersky	7.0.0.125	2008.12.23	Trojan-Spy.Win32.Zbot.imd
McAfee	5472	2008.12.22	-
McAfee+Artemis	5472	2008.12.22	-
Microsoft	1.4205	2008.12.22	TrojanSpy:Win32/Zbot.gen!C
NOD32	3712	2008.12.22	a variant of Win32/Kryptik.DB
Norman	5.80.02	2008.12.22	-
Panda	9.0.0.4	2008.12.22	-
PCTools	4.4.2.0	2008.12.22	-
Prevx1	V2	2008.12.23	-
Rising	21.09.10.00	2008.12.23	-
SecureWeb-Gateway	6.7.6	2008.12.23	-
Sophos	4.37.0	2008.12.23	Mal/Zbot-H
Sunbelt	3.2.1809.2	2008.12.22	-
Symantec	10	2008.12.23	-
TheHacker	6.3.1.4.195	2008.12.20	-
TrendMicro	8.700.0.1004	2008.12.23	-
VBA32	3.12.8.10	2008.12.22	-
ViRobot	2008.12.23.1531	2008.12.23	-
VirusBuster	4.5.11.0	2008.12.22	TrojanSpy.ZBot.Gen!Pac.6

Additional information
File size: 575488 bytes
MD5...: e1b79b469184ff37468af1e427500c4b

Добавлено через 52 секунды

File PrivateContent.exe received on 12.23.2008 07:21:43 (CET)

Код:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.12.22.0	2008.12.23	-
AntiVir	7.9.0.45	2008.12.22	-
Authentium	5.1.0.4	2008.12.23	-
Avast	4.8.1281.0	2008.12.23	-
AVG	8.0.0.199	2008.12.22	-
BitDefender	7.2	2008.12.23	-
CAT-QuickHeal	10.00	2008.12.23	-
ClamAV	0.94.1	2008.12.22	-
Comodo	800	2008.12.22	-
DrWeb	4.44.0.09170	2008.12.22	-
eSafe	7.0.17.0	2008.12.21	-
eTrust-Vet	31.6.6274	2008.12.22	-
Ewido	4.0	2008.12.22	-
F-Prot	4.4.4.56	2008.12.22	-
F-Secure	8.0.14332.0	2008.12.23	AdWare.Win32.Cinmus.aiyf
Fortinet	3.117.0.0	2008.12.23	-
GData	19	2008.12.23	-
Ikarus	T3.1.1.45.0	2008.12.23	-
K7AntiVirus	7.10.562	2008.12.22	-
Kaspersky	7.0.0.125	2008.12.23	not-a-virus:AdWare.Win32.Cinmus.aiyf
McAfee	5472	2008.12.22	-
McAfee+Artemis	5472	2008.12.22	-
Microsoft	1.4205	2008.12.22	-
NOD32	3712	2008.12.22	-
Norman	5.80.02	2008.12.22	-
Panda	9.0.0.4	2008.12.22	-
PCTools	4.4.2.0	2008.12.22	-
Prevx1	V2	2008.12.23	-
Rising	21.09.10.00	2008.12.23	-
SecureWeb-Gateway	6.7.6	2008.12.23	-
Sophos	4.37.0	2008.12.23	-
Sunbelt	3.2.1809.2	2008.12.22	-
Symantec	10	2008.12.23	-
TheHacker	6.3.1.4.195	2008.12.20	-
TrendMicro	8.700.0.1004	2008.12.23	-
VBA32	3.12.8.10	2008.12.22	-
ViRobot	2008.12.23.1531	2008.12.23	-
VirusBuster	4.5.11.0	2008.12.22	-

Additional information
File size: 88576 bytes
MD5...: 1bbde9abaf1f459143de6844db9ed624

**senyak** · 23.12.2008, 17:43

Файл 49c4f4f6.eml получен 2008.12.23 15:30:54 (CET)
Текущий статус: закончено
Результат: 4/38 (10.53%)

Антивирус Версия Обновление Результат
AhnLab-V3 2008.12.22.0 2008.12.23 -
AntiVir 7.9.0.45 2008.12.23 HEUR/HTML.Malware
Authentium 5.1.0.4 2008.12.23 -
Avast 4.8.1281.0 2008.12.23 -
AVG 8.0.0.199 2008.12.22 -
BitDefender 7.2 2008.12.23 -
CAT-QuickHeal 10.00 2008.12.23 -
ClamAV 0.94.1 2008.12.23 Phishing.Heuristics.Email.SpoofedDomain
Comodo 804 2008.12.23 -
DrWeb 4.44.0.09170 2008.12.23 -
eSafe 7.0.17.0 2008.12.21 -
eTrust-Vet 31.6.6274 2008.12.22 -
Ewido 4.0 2008.12.23 -
F-Prot 4.4.4.56 2008.12.23 -
F-Secure 8.0.14332.0 2008.12.23 Trojan-Spy.HTML.Fraud.gen
Fortinet 3.117.0.0 2008.12.23 -
GData 19 2008.12.23 -
Ikarus T3.1.1.45.0 2008.12.23 -
K7AntiVirus 7.10.563 2008.12.23 -
Kaspersky 7.0.0.125 2008.12.23 Trojan-Spy.HTML.Fraud.gen
McAfee 5472 2008.12.22 -
McAfee+Artemis 5472 2008.12.22 -
Microsoft 1.4205 2008.12.23 -
NOD32 3713 2008.12.23 -
Norman 5.80.02 2008.12.23 -
Panda 9.0.0.4 2008.12.23 -
PCTools 4.4.2.0 2008.12.23 -
Prevx1 V2 2008.12.23 -
Rising 21.09.13.00 2008.12.23 -
SecureWeb-Gateway 6.7.6 2008.12.23 -
Sophos 4.37.0 2008.12.23 -
Sunbelt 3.2.1809.2 2008.12.22 -
Symantec 10 2008.12.23 -
TheHacker 6.3.1.4.195 2008.12.20 -
TrendMicro 8.700.0.1004 2008.12.23 -
VBA32 3.12.8.10 2008.12.22 -
ViRobot 2008.12.23.1532 2008.12.23 -
VirusBuster 4.5.11.0 2008.12.23 -

Дополнительная информация
File size: 4113 bytes
MD5...: 35ab57faa44d9691baa991c2dec704f6
SHA1..: 8753bb9d81121ab07dfbc996c00ca51f838271de
SHA256: 78c274d4bc6fd7998184ee30ebccbb6448872cc9cfccd79bc9 0b8723f639d1d4
SHA512: ca7edaf312f97c7edfd443706d39c00c5fc4deea77a2ca86e0 297a5a61e712c6
55bd2a6ccfc1c4735aa66001e07fa915f71ea860e5c739ec77 149afdcbb6f23d
ssdeep: 48:SC/Ji2tmsNBxAM3T7WpL5AjNux0219IXMyxM8OX/1UKtjDUpICUAixkKHJktv
AnH:F5xF3G5uNux021yMDqEBN9gXq2EQLk
PEiD..: -
TrID..: File type identification
E-Mail message (Var. 1) (100.0%)
PEInfo: -
packers (F-Prot): qp

**Shu_b** · 24.12.2008, 12:16

File qwe received on 12.24.2008 09:05:31 (CET)

Код:

Antivirus	Version	Last Update	Result
a-squared	4.0.0.73	2008.12.24	-
AhnLab-V3	2008.12.22.0	2008.12.24	-
AntiVir	7.9.0.45	2008.12.24	TR/Dropper.Gen
Authentium	5.1.0.4	2008.12.24	-
Avast	4.8.1281.0	2008.12.23	-
AVG	8.0.0.199	2008.12.23	-
BitDefender	7.2	2008.12.24	-
CAT-QuickHeal	10.00	2008.12.24	-
ClamAV	0.94.1	2008.12.24	-
Comodo	804	2008.12.23	-
DrWeb	4.44.0.09170	2008.12.24	-
eSafe	7.0.17.0	2008.12.23	-
eTrust-Vet	31.6.6276	2008.12.24	-
Ewido	4.0	2008.12.23	-
F-Prot	4.4.4.56	2008.12.24	-
F-Secure	8.0.14332.0	2008.12.24	-
Fortinet	3.117.0.0	2008.12.24	-
GData	19	2008.12.24	-
Ikarus	T3.1.1.45.0	2008.12.24	-
K7AntiVirus	7.10.563	2008.12.23	-
Kaspersky	7.0.0.125	2008.12.24	-
McAfee	5473	2008.12.23	-
McAfee+Artemis	5473	2008.12.23	-
Microsoft	1.4205	2008.12.24	-
NOD32	3715	2008.12.24	-
Norman	5.80.02	2008.12.23	-
Panda	9.0.0.4	2008.12.23	-
PCTools	4.4.2.0	2008.12.23	-
Prevx1	V2	2008.12.24	Cloaked Malware
Rising	21.09.21.00	2008.12.24	-
SecureWeb-Gateway	6.7.6	2008.12.24	Trojan.Dropper.Gen
Sophos	4.37.0	2008.12.24	-
Sunbelt	3.2.1809.2	2008.12.22	-
Symantec	10	2008.12.24	-
TheHacker	6.3.1.4.199	2008.12.23	-
TrendMicro	8.700.0.1004	2008.12.24	-
VBA32	3.12.8.10	2008.12.23	-
ViRobot	2008.12.24.1533	2008.12.24	-
VirusBuster	4.5.11.0	2008.12.23	-

Additional information
File size: 22528 bytes
MD5...: 5ad1dc609b765c81a895a1fd42040b73

**ALEX(XX)** · 24.12.2008, 14:12

File 3.exe received on 12.24.2008 10:33:03 (CET)

Код:

Antivirus	Version	Last Update	Result
a-squared	4.0.0.73	2008.12.24	Trojan-PWS.Win32.QQPass!IK
AhnLab-V3	2008.12.22.0	2008.12.24	Packed/Upack
AntiVir	7.9.0.45	2008.12.24	TR/ATRAPS.Gen
Authentium	5.1.0.4	2008.12.24	W32/Heuristic-210!Eldorado
Avast	4.8.1281.0	2008.12.23	-
AVG	8.0.0.199	2008.12.23	-
BitDefender	7.2	2008.12.24	-
CAT-QuickHeal	10.00	2008.12.24	(Suspicious) - DNAScan
ClamAV	0.94.1	2008.12.24	-
Comodo	804	2008.12.23	-
DrWeb	4.44.0.09170	2008.12.24	-
eSafe	7.0.17.0	2008.12.23	-
eTrust-Vet	31.6.6276	2008.12.24	-
Ewido	4.0	2008.12.23	-
F-Prot	4.4.4.56	2008.12.24	W32/Heuristic-210!Eldorado
F-Secure	8.0.14332.0	2008.12.24	W32/Packed_Upack.A
Fortinet	3.117.0.0	2008.12.24	-
GData	19	2008.12.24	-
Ikarus	T3.1.1.45.0	2008.12.24	Trojan-PWS.Win32.QQPass
K7AntiVirus	7.10.563	2008.12.23	-
Kaspersky	7.0.0.125	2008.12.24	-
McAfee	5473	2008.12.23	New Malware.aj
McAfee+Artemis	5473	2008.12.23	New Malware.n
Microsoft	1.4205	2008.12.24	PWS:Win32/QQpass.AA
NOD32	3715	2008.12.24	a variant of Win32/PSW.Delf.NMX
Norman	5.80.02	2008.12.23	W32/Packed_Upack.A
Panda	9.0.0.4	2008.12.23	Suspicious file
PCTools	4.4.2.0	2008.12.23	Packed/Upack
Prevx1	V2	2008.12.24	-
Rising	21.09.22.00	2008.12.24	Trojan.Win32.QQFish.w
SecureWeb-Gateway	6.7.6	2008.12.24	Trojan.ATRAPS.Gen
Sophos	4.37.0	2008.12.24	Sus/ComPack-C
Sunbelt	3.2.1809.2	2008.12.22	VIPRE.Suspicious
Symantec	10	2008.12.24	-
TheHacker	6.3.1.4.199	2008.12.23	W32/Behav-Heuristic-060
TrendMicro	8.700.0.1004	2008.12.24	PAK_Generic.006
VBA32	3.12.8.10	2008.12.23	Trojan-PSW.Win32.QQPass.efy
ViRobot	2008.12.24.1533	2008.12.24	-
VirusBuster	4.5.11.0	2008.12.23	Packed/Upack

Additional information
File size: 48360 bytes
MD5...: 98ce99bb088c252d7d084f87ed2a500c
SHA1..: 70d9bcdefc0e1a23efea874a46e4d80800daf32a
SHA256: d6f414e798bde608b368d0c41aff41737c9b641b4b9a802fd717e1d2864fb9b6
SHA512: 8f0b0281c7e4614e31a345a428ae2e3764ef48c2306fea4f94e658645f695d44<BR>13588dc16e2ad43974bf6ec9cdbc0e61644fe1bd5ec3260074570b3725098957<BR>
ssdeep: 768:uMVvp3w/gocWsGh+V4Aq4cEM/9UyIdkqezAS3COSec2KGr0LjVot0g62KRQY<BR>:uMVvp3w/ghWbkq4NMiy6o6ic2KGrAotm<BR>
PEiD..: -
TrID..: File type identification<BR>DOS Executable Generic (100.0%)
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x261018<BR>timedatestamp.....: 0x2611b0be (Thu Mar 29 06:52:46 1990)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 3 sections )<BR>name        viradd    virsiz   rawdsiz  ntrpy  md5<BR>PS          0x1000   0x69000     0x1f0   5.43  ce40f9782f141f111303501525d8de5e<BR>_Y_        0x6a000   0x13000    0xbae8   7.87  38e69c9cd23df97d12da107e6d2f4a34<BR>__         0x7d000    0x1000     0x1f0   5.43  ce40f9782f141f111303501525d8de5e<BR><BR>( 0 imports )  <BR><BR>( 0 exports ) <BR>
packers (Authentium): UPack
packers (Kaspersky): PE_Patch, UPack
packers (F-Prot): UPack

File 0001.exe received on 12.24.2008 10:34:51 (CET)

Код:

Antivirus	Version	Last Update	Result
a-squared	4.0.0.73	2008.12.24	Backdoor.Bifrose!IK
AhnLab-V3	2008.12.22.0	2008.12.24	-
AntiVir	7.9.0.45	2008.12.24	TR/Crypt.XPACK.Gen
Authentium	5.1.0.4	2008.12.24	-
Avast	4.8.1281.0	2008.12.23	-
AVG	8.0.0.199	2008.12.23	Win32/Heur
BitDefender	7.2	2008.12.24	Trojan.Rincux.AW
CAT-QuickHeal	10.00	2008.12.24	(Suspicious) - DNAScan
ClamAV	0.94.1	2008.12.24	-
Comodo	804	2008.12.23	-
DrWeb	4.44.0.09170	2008.12.24	-
eSafe	7.0.17.0	2008.12.23	Suspicious File
eTrust-Vet	31.6.6276	2008.12.24	-
Ewido	4.0	2008.12.23	-
F-Prot	4.4.4.56	2008.12.24	-
F-Secure	8.0.14332.0	2008.12.24	Suspicious:W32/Malware!Gemini
Fortinet	3.117.0.0	2008.12.24	-
GData	19	2008.12.24	Trojan.Rincux.AW
Ikarus	T3.1.1.45.0	2008.12.24	Backdoor.Bifrose
K7AntiVirus	7.10.563	2008.12.23	-
Kaspersky	7.0.0.125	2008.12.24	-
McAfee	5473	2008.12.23	-
McAfee+Artemis	5473	2008.12.23	Generic!Artemis
Microsoft	1.4205	2008.12.24	Trojan:Win32/Agent
NOD32	3715	2008.12.24	-
Norman	5.80.02	2008.12.23	-
Panda	9.0.0.4	2008.12.23	-
PCTools	4.4.2.0	2008.12.23	-
Prevx1	V2	2008.12.24	-
Rising	21.09.22.00	2008.12.24	Backdoor.Win32.DDOS.ev
SecureWeb-Gateway	6.7.6	2008.12.24	Trojan.Crypt.XPACK.Gen
Sophos	4.37.0	2008.12.24	-
Sunbelt	3.2.1809.2	2008.12.22	-
Symantec	10	2008.12.24	-
TheHacker	6.3.1.4.199	2008.12.23	-
TrendMicro	8.700.0.1004	2008.12.24	-
VBA32	3.12.8.10	2008.12.23	-
ViRobot	2008.12.24.1533	2008.12.24	-
VirusBuster	4.5.11.0	2008.12.23	-

Additional information
File size: 21396 bytes
MD5...: bde49df3cbcf4d06f3a4c245bbae2f0e
SHA1..: 59102419014279f1c39ba91fc2f066aa9a5a7e98
SHA256: e0e3c3d8a1bfee5b907965b2b3616a730e57e79f5b4008ba522ed03afa43b195
SHA512: 282a98a79b5cf7b0f1b0ab6168d51c535115d0a0b4f3bdea9d2914157077f143<BR>eb8d27ad5477f5643a43e2aa493dbca7887bc8e2f2465c6c218e9bb2ea737acd<BR>
ssdeep: 384:XSz2AJknpV5ILyJwhgP8wFYDcV9Vq6EHXnnnnXVmnXXnXXnXXn8MxR8YbcXn<BR>nnnC:XUJkn7TJwhP8aV5nXsXXXXXXrVYnX3nC<BR>
PEiD..: -
TrID..: File type identification<BR>Generic Win/DOS Executable (49.8%)<BR>DOS Executable Generic (49.7%)<BR>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)<BR>Targa bitmap (Original TGA Format) (0.1%)<BR>MS Flight Simulator Aircraft Performance Info (0.0%)
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x4032d6<BR>timedatestamp.....: 0x373898 (Wed Feb 11 21:16:08 1970)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 4 sections )<BR>name        viradd    virsiz   rawdsiz  ntrpy  md5<BR>.text       0x1000    0x2502    0x2600   7.98  6799f3ee1ab99e18a67368b0d8d49822<BR>.rdata      0x4000     0xdba     0xe00   7.97  a5db486c5ed67dba7d0af1d89855f069<BR>.data       0x5000   0x3ce04     0x600   7.95  a01c8037745cacc4261ee87e144f8865<BR>.sdffqw    0x42000    0x1594    0x1594   6.77  1cae004626695a37382f7a9f915895e7<BR><BR>( 1 imports )  <BR>&gt; KERNEL32.dll: ExitProcess, Beep<BR><BR>( 0 exports ) <BR>
ThreatExpert info: <A href="http://www.threatexpert.com/report.aspx?md5=bde49df3cbcf4d06f3a4c245bbae2f0e" target="_blank">http://www.threatexpert.com/report.aspx?md5=bde49df3cbcf4d06f3a4c245bbae2f0e</A>

**senyak** · 25.12.2008, 03:31

Файл InstallAVv_880294.exe получен 2008.12.24 14:52:32 (CET)
Текущий статус: закончено
Результат: 5/39 (12.83%)

Код:

Антивирус	Версия	Обновление	Результат
a-squared	4.0.0.73	2008.12.24	-
AhnLab-V3	2008.12.25.0	2008.12.24	-
AntiVir	7.9.0.45	2008.12.24	TR/Crypt.XPACK.Gen
Authentium	5.1.0.4	2008.12.24	-
Avast	4.8.1281.0	2008.12.24	-
AVG	8.0.0.199	2008.12.24	-
BitDefender	7.2	2008.12.24	-
CAT-QuickHeal	10.00	2008.12.24	-
ClamAV	0.94.1	2008.12.24	-
Comodo	809	2008.12.24	-
DrWeb	4.44.0.09170	2008.12.24	-
eSafe	7.0.17.0	2008.12.23	-
eTrust-Vet	31.6.6276	2008.12.24	-
Ewido	4.0	2008.12.24	-
F-Prot	4.4.4.56	2008.12.24	-
F-Secure	8.0.14332.0	2008.12.24	Trojan-Downloader.Win32.FraudLoad.vepo
Fortinet	3.117.0.0	2008.12.24	-
GData	19	2008.12.24	-
Ikarus	T3.1.1.45.0	2008.12.24	-
K7AntiVirus	7.10.564	2008.12.24	-
Kaspersky	7.0.0.125	2008.12.24	Trojan-Downloader.Win32.FraudLoad.vepo
McAfee	5473	2008.12.23	-
McAfee+Artemis	5473	2008.12.23	-
Microsoft	1.4205	2008.12.24	-
NOD32	3716	2008.12.24	-
Norman	5.80.02	2008.12.23	-
Panda	9.0.0.4	2008.12.24	-
PCTools	4.4.2.0	2008.12.24	-
Prevx1	V2	2008.12.24	Fraudulent Security Program
Rising	21.09.22.00	2008.12.24	-
SecureWeb-Gateway	6.7.6	2008.12.24	Trojan.Crypt.XPACK.Gen
Sophos	4.37.0	2008.12.24	-
Sunbelt	3.2.1809.2	2008.12.22	-
Symantec	10	2008.12.24	-
TheHacker	6.3.1.4.199	2008.12.23	-
TrendMicro	8.700.0.1004	2008.12.24	-
VBA32	3.12.8.10	2008.12.23	-
ViRobot	2008.12.24.1534	2008.12.24	-
VirusBuster	4.5.11.0	2008.12.24	-

Дополнительная информация
File size: 126976 bytes
MD5...: b486518c2aeda4c0dcdbaca4a061bd1e
SHA1..: 77f72f5feb2d1be02049197fb331fcf7e00da8e3
SHA256: 5a21d6f8f556f688e8829ff1c03c08a370aa15febe7174bd44 b35ddc2a10021b
SHA512: 7f293e0150ff4e95a1fd872dd31bf8f57b74fdd0fa47632e0b 8f6945bd373767
497b8d8ee32eb0b5c7219b92261f7525c46d6190aa57be78c3 abe03b0defec77
ssdeep: 1536:rGMf78rLmBMWP4pNm6EaFOk4xuqFIxMIelYu8ksYANGgV 9waPgO:rqLm1x3
kyKfNGs9waP
PEiD..: -
TrID..: File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
VXD Driver (0.1%)
PEInfo: PE Structure information

Добавлено через 10 часов 19 минут

Файл 013 получен 2008.12.25 01:26:40 (CET)
Текущий статус: закончено
Результат: 4/39 (10.26%)

Антивирус Версия Обновление Результат
a-squared 4.0.0.73 2008.12.24 -
AhnLab-V3 2008.12.25.0 2008.12.25 -
AntiVir 7.9.0.45 2008.12.24 -
Authentium 5.1.0.4 2008.12.24 -
Avast 4.8.1281.0 2008.12.24 -
AVG 8.0.0.199 2008.12.24 -
BitDefender 7.2 2008.12.25 -
CAT-QuickHeal 10.00 2008.12.24 -
ClamAV 0.94.1 2008.12.24 -
Comodo 809 2008.12.24 -
DrWeb 4.44.0.09170 2008.12.25 -
eSafe 7.0.17.0 2008.12.24 Suspicious File
eTrust-Vet 31.6.6276 2008.12.24 Win32/Kvol!generic
Ewido 4.0 2008.12.24 -
F-Prot 4.4.4.56 2008.12.24 -
F-Secure 8.0.14332.0 2008.12.24 -
Fortinet 3.117.0.0 2008.12.25 -
GData 19 2008.12.25 -
Ikarus T3.1.1.45.0 2008.12.24 -
K7AntiVirus 7.10.564 2008.12.24 -
Kaspersky 7.0.0.125 2008.12.25 -
McAfee 5474 2008.12.24 -
McAfee+Artemis 5474 2008.12.24 -
Microsoft 1.4205 2008.12.25 Trojan:Win32/Boaxxe.J
NOD32 3716 2008.12.24 -
Norman 5.80.02 2008.12.24 -
Panda 9.0.0.4 2008.12.24 -
PCTools 4.4.2.0 2008.12.24 -
Prevx1 V2 2008.12.25 -
Rising 21.09.22.00 2008.12.24 Trojan.Win32.Undef.vey
SecureWeb-Gateway 6.7.6 2008.12.24 -
Sophos 4.37.0 2008.12.24 -
Sunbelt 3.2.1809.2 2008.12.22 -
Symantec 10 2008.12.25 -
TheHacker 6.3.1.4.199 2008.12.23 -
TrendMicro 8.700.0.1004 2008.12.24 -
VBA32 3.12.8.10 2008.12.24 -
ViRobot 2008.12.24.1534 2008.12.24 -
VirusBuster 4.5.11.0 2008.12.24 -

Дополнительная информация
File size: 123392 bytes
MD5...: b66b6ee78cb727fb2e006ff70ae29c2c
SHA1..: 48c47d6b404b0dfd4b28d1d259b7ad213d2d19b7
SHA256: 919ca217f10841f9850f81ddcd66ab5825c6ccbdda9c4d08c3 83e647df5257cb
SHA512: 9db0b6ba0976cee4ac11153440a8f6bba46fdb0349473fd1bd fbc6f98ae1e6cf
622db784a50e09a4dc65a7030161f52207c4d1732c4814c92a 3b107ad0cdac66
ssdeep: 3072:sXJbIA7dlf/CKmusfsJXflHji57VPJT45Oeakm2Wm8UgQ:sPlfifsZflDW7
VPJUYeC27g
PEiD..: -

Файл 123 получен 2008.12.25 01:28:31 (CET)
Текущий статус: закончено
Результат: 3/39 (7.7%)

Антивирус Версия Обновление Результат
a-squared 4.0.0.73 2008.12.24 -
AhnLab-V3 2008.12.25.0 2008.12.25 -
AntiVir 7.9.0.45 2008.12.24 HEUR/HTML.Malware
Authentium 5.1.0.4 2008.12.24 -
Avast 4.8.1281.0 2008.12.24 -
AVG 8.0.0.199 2008.12.24 -
BitDefender 7.2 2008.12.25 -
CAT-QuickHeal 10.00 2008.12.24 -
ClamAV 0.94.1 2008.12.24 -
Comodo 809 2008.12.24 -
DrWeb 4.44.0.09170 2008.12.25 -
eSafe 7.0.17.0 2008.12.24 -
eTrust-Vet 31.6.6276 2008.12.24 -
Ewido 4.0 2008.12.24 -
F-Prot 4.4.4.56 2008.12.24 -
F-Secure 8.0.14332.0 2008.12.24 -
Fortinet 3.117.0.0 2008.12.25 -
GData 19 2008.12.25 -
Ikarus T3.1.1.45.0 2008.12.24 -
K7AntiVirus 7.10.564 2008.12.24 -
Kaspersky 7.0.0.125 2008.12.25 -
McAfee 5474 2008.12.24 -
McAfee+Artemis 5474 2008.12.24 -
Microsoft 1.4205 2008.12.25 -
NOD32 3716 2008.12.24 -
Norman 5.80.02 2008.12.24 -
Panda 9.0.0.4 2008.12.24 -
PCTools 4.4.2.0 2008.12.24 -
Prevx1 V2 2008.12.25 -
Rising 21.09.22.00 2008.12.24 -
SecureWeb-Gateway 6.7.6 2008.12.24 Heuristic.HTML.Malware
Sophos 4.37.0 2008.12.24 Mal/ObfJS-M
Sunbelt 3.2.1809.2 2008.12.22 -
Symantec 10 2008.12.25 -
TheHacker 6.3.1.4.199 2008.12.23 -
TrendMicro 8.700.0.1004 2008.12.24 -
VBA32 3.12.8.10 2008.12.24 -
ViRobot 2008.12.24.1534 2008.12.24 -
VirusBuster 4.5.11.0 2008.12.24 -

Дополнительная информация
File size: 6337 bytes
MD5...: 811a08c39ec469f69d5fe5707ca75e06
SHA1..: c00815cf1d42cb23f0ab00083df697a46c83bd86
SHA256: 43663188b7bed172bbd04c39d4c16d8b1a7de354c08a97be84 0d47ef2d004d22
SHA512: 9afc18ae38b4719b769f72e391f7a5b8fbc182cbab3eb802b0 ba68cb19b3ce27
146a7bd0f3d91541021d5f771b903ea2f4f1cf75d4444326ad 2cbbf3d0833107
ssdeep: 192:53yPKA6lw/RPTmeX+RJcOR3aS0MCk4sSAq1:/lgIDcOR3aFrbSy
PEiD..: -
TrID..: File type identification
GZipped File (100.0%)
PEInfo: -
packers (F-Prot): packed

**Shu_b** · 25.12.2008, 13:06

File ethtuhbi.sys received on 12.25.2008 10:55:13 (CET)

Код:

Antivirus	Version	Last Update	Result
a-squared	4.0.0.73	2008.12.25	-
AhnLab-V3	2008.12.25.0	2008.12.25	-
AntiVir	7.9.0.45	2008.12.24	-
Authentium	5.1.0.4	2008.12.25	W32/SpamAgent.B.gen!Eldorado
Avast	4.8.1281.0	2008.12.24	-
AVG	8.0.0.199	2008.12.24	-
BitDefender	7.2	2008.12.25	-
CAT-QuickHeal	10.00	2008.12.24	-
ClamAV	0.94.1	2008.12.24	-
Comodo	811	2008.12.25	-
DrWeb	4.44.0.09170	2008.12.25	-
eSafe	7.0.17.0	2008.12.24	-
eTrust-Vet	31.6.6276	2008.12.24	-
Ewido	4.0	2008.12.24	-
F-Prot	4.4.4.56	2008.12.24	W32/SpamAgent.B.gen!Eldorado
F-Secure	8.0.14332.0	2008.12.25	-
Fortinet	3.117.0.0	2008.12.25	-
GData	19	2008.12.25	-
Ikarus	T3.1.1.45.0	2008.12.25	-
K7AntiVirus	7.10.564	2008.12.24	-
Kaspersky	7.0.0.125	2008.12.25	-
McAfee	5474	2008.12.24	-
McAfee+Artemis	5474	2008.12.24	-
Microsoft	1.4205	2008.12.25	Spammer:Win32/Rlsloup.B
NOD32	3716	2008.12.24	-
Norman	5.80.02	2008.12.24	-
Panda	9.0.0.4	2008.12.24	-
PCTools	4.4.2.0	2008.12.24	-
Prevx1	V2	2008.12.25	-
Rising	21.09.32.00	2008.12.25	-
SecureWeb-Gateway	6.7.6	2008.12.24	Win32.LooksLike.NewMalware
Sophos	4.37.0	2008.12.25	-
Sunbelt	3.2.1809.2	2008.12.22	-
Symantec	10	2008.12.25	-
TheHacker	6.3.1.4.199	2008.12.23	-
TrendMicro	8.700.0.1004	2008.12.25	-
VBA32	3.12.8.10	2008.12.24	-
ViRobot	2008.12.24.1534	2008.12.24	-
VirusBuster	4.5.11.0	2008.12.24	-

Additional information
File size: 135616 bytes
MD5...: 16b0de9de1433d3be401c72d128d02ab

**PavelA** · 26.12.2008, 16:49

Из http://virusinfo.info/showthread.php?t=36231
Файл avz00003.dta (c:\windows\system32\iasapi.dll) получен 2008.12.26 14:43:06 (CET)Антивирус Версия Обновление Результат

Код:

 
a-squared 4.0.0.73 2008.12.26 Virus.Win32.Dialer.1313!IK 
AhnLab-V3 2008.12.25.0 2008.12.26 - 
AntiVir 7.9.0.45 2008.12.25 - 
Authentium 5.1.0.4 2008.12.25 W32/Heuristic-KPP!Eldorado 
Avast 4.8.1281.0 2008.12.26 - 
AVG 8.0.0.199 2008.12.25 - 
BitDefender 7.2 2008.12.26 - 
CAT-QuickHeal 10.00 2008.12.26 - 
ClamAV 0.94.1 2008.12.26 - 
Comodo 819 2008.12.26 - 
DrWeb 4.44.0.09170 2008.12.26 - 
eSafe 7.0.17.0 2008.12.24 - 
eTrust-Vet 31.6.6276 2008.12.24 - 
Ewido 4.0 2008.12.26 - 
F-Prot 4.4.4.56 2008.12.24 W32/Heuristic-KPP!Eldorado
F-Secure 8.0.14332.0 2008.12.26 - 
Fortinet 3.117.0.0 2008.12.26 - 
GData 19 2008.12.26 - 
Ikarus T3.1.1.45.0 2008.12.26 Virus.Win32.Dialer.1313 
K7AntiVirus 7.10.567 2008.12.26 - 
Kaspersky 7.0.0.125 2008.12.26 - 
McAfee 5474 2008.12.24 - 
McAfee+Artemis 5474 2008.12.24 - 
Microsoft 1.4205 2008.12.26 - 
NOD32 3718 2008.12.26 - 
Norman 5.80.02 2008.12.26 - 
Panda 9.0.0.4 2008.12.26 Suspicious file 
PCTools 4.4.2.0 2008.12.26 - 
Prevx1 V2 2008.12.26 - 
Rising 21.09.42.00 2008.12.26 Backdoor.Win32.Drwolf.sp 
SecureWeb-Gateway 6.7.6 2008.12.25 - 
Sophos 4.37.0 2008.12.26 - 
Sunbelt 3.2.1809.2 2008.12.22 - 
Symantec 10 2008.12.26 - 
TheHacker 6.3.1.4.199 2008.12.23 - 
TrendMicro 8.700.0.1004 2008.12.26 - 
VBA32 3.12.8.10 2008.12.25 - 
ViRobot 2008.12.26.1536 2008.12.26 - 
VirusBuster 4.5.11.0 2008.12.25 -

**senyak** · 27.12.2008, 22:23

Файл spyprotector_install.exe получен 2008.12.27 20:19:25 (CET)
Текущий статус: закончено
Результат: 8/39 (20.52%)

Код:

Антивирус	Версия	Обновление	Результат
a-squared	4.0.0.73	2008.12.27	Trojan.Win32.FakePowav!IK
AhnLab-V3	2008.12.25.0	2008.12.27	-
AntiVir	7.9.0.45	2008.12.27	-
Authentium	5.1.0.4	2008.12.27	-
Avast	4.8.1281.0	2008.12.27	-
AVG	8.0.0.199	2008.12.26	-
BitDefender	7.2	2008.12.27	-
CAT-QuickHeal	10.00	2008.12.27	-
ClamAV	0.94.1	2008.12.27	-
Comodo	826	2008.12.27	-
DrWeb	4.44.0.09170	2008.12.27	-
eSafe	7.0.17.0	2008.12.24	-
eTrust-Vet	31.6.6276	2008.12.24	-
Ewido	4.0	2008.12.27	-
F-Prot	4.4.4.56	2008.12.26	-
F-Secure	8.0.14332.0	2008.12.27	-
Fortinet	3.117.0.0	2008.12.27	-
GData	19	2008.12.27	-
Ikarus	T3.1.1.45.0	2008.12.27	Trojan.Win32.FakePowav
K7AntiVirus	7.10.568	2008.12.27	-
Kaspersky	7.0.0.125	2008.12.27	Trojan-Downloader.Win32.FraudLoad.veuz
McAfee	5476	2008.12.27	-
McAfee+Artemis	5476	2008.12.27	Generic!Artemis
Microsoft	1.4205	2008.12.27	Trojan:Win32/FakePowav
NOD32	3719	2008.12.27	-
Norman	5.80.02	2008.12.26	-
Panda	9.0.0.4	2008.12.27	Suspicious file
PCTools	4.4.2.0	2008.12.27	-
Prevx1	V2	2008.12.27	-
Rising	21.09.52.00	2008.12.27	-
SecureWeb-Gateway	6.7.6	2008.12.27	-
Sophos	4.37.0	2008.12.27	-
Sunbelt	3.2.1809.2	2008.12.22	SpyProtector
Symantec	10	2008.12.27	-
TheHacker	6.3.1.4.200	2008.12.26	-
TrendMicro	8.700.0.1004	2008.12.26	-
VBA32	3.12.8.10	2008.12.27	suspected of Win32.Trojan.Downloader (http://...)
ViRobot	2008.12.26.1536	2008.12.26	-
VirusBuster	4.5.11.0	2008.12.27	-

Дополнительная информация
File size: 40960 bytes
MD5...: 40679e7b2a24ce3d77c03cab6825afd3
SHA1..: 6d69883bbe07c5299d4bb451fde1b15e2043e089
SHA256: 0cbaa8bd54a9e128b0d9ca8abc97625c6bfbfd6bbe00125976 89786e7083900e
SHA512: 48d855acff787c54e3dedd8a5039d71358e925fac61dbbc701 b62c66c997c1bc
c7681e86baa50745ded62fe83ddbaacd15b6811f2814b2b76d a7ac548894887b
ssdeep: 384:Xd9gNeB1Gn3yRdYlr9EWvwsbsGmlBDAQ0F21xulpdGagoe raMDUdlCy:s4B1
G3Yd2r9F490F21xOpUZollC
PEiD..: Armadillo v1.71
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
PEInfo: PE Structure information

**PavelA** · 30.12.2008, 12:30

userinit.exe вот такой попался в "Помогите!"

Код:

Антивирус Версия Обновление Результат 
a-squared 4.0.0.73 2008.12.30 - 
AhnLab-V3 2008.12.30.2 2008.12.30 - 
AntiVir 7.9.0.45 2008.12.30 TR/Crypt.FKM.Gen 
Authentium 5.1.0.4 2008.12.29 - 
Avast 4.8.1281.0 2008.12.29 - 
AVG 8.0.0.199 2008.12.29 - 
BitDefender 7.2 2008.12.30 DeepScan:Generic.Malware.FPB.E71D9A1E 
CAT-QuickHeal 10.00 2008.12.30 (Suspicious) - DNAScan 
ClamAV 0.94.1 2008.12.30 - 
Comodo 837 2008.12.29 - 
DrWeb 4.44.0.09170 2008.12.30 - 
eSafe 7.0.17.0 2008.12.28 Suspicious File 
eTrust-Vet 31.6.6281 2008.12.29 - 
Ewido 4.0 2008.12.30 - 
F-Prot 4.4.4.56 2008.12.29 - 
F-Secure 8.0.14470.0 2008.12.30 - 
Fortinet 3.117.0.0 2008.12.30 - 
GData 19 2008.12.30 DeepScan:Generic.Malware.FPB.E71D9A1E 
Ikarus T3.1.1.45.0 2008.12.30 - 
K7AntiVirus 7.10.569 2008.12.29 - 
Kaspersky 7.0.0.125 2008.12.30 - 
McAfee 5478 2008.12.29 - 
McAfee+Artemis 5478 2008.12.29 - 
Microsoft 1.4205 2008.12.30 - 
NOD32 3722 2008.12.29 - 
Norman 5.80.02 2008.12.29 - 
Panda 9.0.0.4 2008.12.29 - 
PCTools 4.4.2.0 2008.12.29 Packed/Execryptor 
Prevx1 V2 2008.12.30 - 
Rising 21.10.12.00 2008.12.30 - 
SecureWeb-Gateway 6.7.6 2008.12.30 Trojan.Crypt.FKM.Gen 
Sophos 4.37.0 2008.12.30 - 
Sunbelt 3.2.1809.2 2008.12.22 - 
Symantec 10 2008.12.30 - 
TheHacker 6.3.1.4.202 2008.12.30 - 
TrendMicro 8.700.0.1004 2008.12.30 - 
VBA32 3.12.8.10 2008.12.30 BScope.Trojan-PSW.OnlineGames 
ViRobot 2008.12.30.1540 2008.12.30 - 
VirusBuster 4.5.11.0 2008.12.29 Packed

**Shu_b** · 31.12.2008, 13:03

File msqpdxymrdbbml.sys received on 12.31.2008 10:50:27 (CET)

Код:

Antivirus	Version	Last Update	Result
a-squared	4.0.0.73	2008.12.31	-
AhnLab-V3	2008.12.31.0	2008.12.31	-
AntiVir	7.9.0.45	2008.12.31	-
Authentium	5.1.0.4	2008.12.30	-
Avast	4.8.1281.0	2008.12.30	-
AVG	8.0.0.199	2008.12.30	-
BitDefender	7.2	2008.12.31	-
CAT-QuickHeal	10.00	2008.12.31	-
ClamAV	0.94.1	2008.12.31	-
Comodo	851	2008.12.31	-
DrWeb	4.44.0.09170	2008.12.31	-
eSafe	7.0.17.0	2008.12.30	Suspicious File
eTrust-Vet	31.6.6284	2008.12.31	-
Ewido	4.0	2008.12.30	-
F-Prot	4.4.4.56	2008.12.30	-
F-Secure	8.0.14470.0	2008.12.31	-
Fortinet	3.117.0.0	2008.12.31	-
GData	19	2008.12.31	-
Ikarus	T3.1.1.45.0	2008.12.31	-
K7AntiVirus	7.10.571	2008.12.30	-
Kaspersky	7.0.0.125	2008.12.31	Trojan.Win32.Pakes.mmb
McAfee	5479	2008.12.30	-
McAfee+Artemis	5479	2008.12.30	-
Microsoft	1.4205	2008.12.31	Trojan:WinNT/Alureon.C
NOD32	3725	2008.12.31	-
Norman	5.80.02	2008.12.30	-
Panda	9.0.0.4	2008.12.30	-
PCTools	4.4.2.0	2008.12.30	-
Prevx1	V2	2008.12.31	-
Rising	21.10.22.00	2008.12.31	-
SecureWeb-Gateway	6.7.6	2008.12.31	Trojan.LooksLike.Agent
Sophos	4.37.0	2008.12.31	-
Sunbelt	3.2.1809.2	2008.12.22	-
Symantec	10	2008.12.31	-
TheHacker	6.3.1.4.202	2008.12.30	-
TrendMicro	8.700.0.1004	2008.12.31	-
VBA32	3.12.8.10	2008.12.30	-
ViRobot	2008.12.30.1540	2008.12.31	-
VirusBuster	4.5.11.0	2008.12.30	-

Additional information
File size: 71680 bytes
MD5...: 22bab406e1d25cb3dd45480e96cd3dd7

Добавлено через 2 минуты

File twex.exe received on 12.31.2008 10:58:38 (CET)

Код:

Antivirus	Version	Last Update	Result
a-squared	4.0.0.73	2008.12.31	-
AhnLab-V3	2008.12.31.0	2008.12.31	-
AntiVir	7.9.0.45	2008.12.31	-
Authentium	5.1.0.4	2008.12.30	-
Avast	4.8.1281.0	2008.12.30	-
AVG	8.0.0.199	2008.12.30	Win32/Cryptor
BitDefender	7.2	2008.12.31	-
CAT-QuickHeal	10.00	2008.12.31	-
ClamAV	0.94.1	2008.12.31	-
Comodo	851	2008.12.31	-
DrWeb	4.44.0.09170	2008.12.31	-
eTrust-Vet	31.6.6284	2008.12.31	-
Ewido	4.0	2008.12.30	-
F-Prot	4.4.4.56	2008.12.30	-
F-Secure	8.0.14470.0	2008.12.31	-
Fortinet	3.117.0.0	2008.12.31	-
GData	19	2008.12.31	-
Ikarus	T3.1.1.45.0	2008.12.31	-
K7AntiVirus	7.10.571	2008.12.30	-
Kaspersky	7.0.0.125	2008.12.31	Trojan-Spy.Win32.Zbot.jbq
McAfee	5479	2008.12.30	-
McAfee+Artemis	5479	2008.12.30	-
Microsoft	1.4205	2008.12.31	Trojan:Win32/Zbot.BX
NOD32	3725	2008.12.31	-
Norman	5.80.02	2008.12.30	W32/Malware.EXHS
Panda	9.0.0.4	2008.12.30	-
PCTools	4.4.2.0	2008.12.30	-
Prevx1	V2	2008.12.31	-
Rising	21.10.22.00	2008.12.31	-
SecureWeb-Gateway	6.7.6	2008.12.31	-
Sophos	4.37.0	2008.12.31	-
Sunbelt	3.2.1809.2	2008.12.22	RiskTool.Win32.ProcessPatcher.Nor!cobra (v)
Symantec	10	2008.12.31	Infostealer.Banker.C
TheHacker	6.3.1.4.202	2008.12.30	-
TrendMicro	8.700.0.1004	2008.12.31	-
VBA32	3.12.8.10	2008.12.30	Trojan-Spy.Win32.Zbot.iva
ViRobot	2008.12.30.1540	2008.12.31	-
VirusBuster	4.5.11.0	2008.12.30	-

Additional information
File size: 313344 bytes
MD5...: 0f01dcbbbf388a636a6126aa27a7eefd

**senyak** · 31.12.2008, 14:22

Файл keymaker.exe получен 2008.12.31 12:14:14 (CET)
Текущий статус: закончено
Результат: 19/38 (50%)

Антивирус Версия Обновление Результат
a-squared 4.0.0.73 2008.12.31 Trojan.Crypt!IK
AhnLab-V3 2008.12.31.0 2008.12.31 -
AntiVir 7.9.0.45 2008.12.31 TR/PCK.Black.A.1550
Authentium 5.1.0.4 2008.12.30 -
Avast 4.8.1281.0 2008.12.30 Win32:Trojan-gen {Other}
AVG 8.0.0.199 2008.12.31 Win32/Themida
BitDefender 7.2 2008.12.31 Trojan.Packed.45180
CAT-QuickHeal 10.00 2008.12.31 -
ClamAV 0.94.1 2008.12.31 -
Comodo 851 2008.12.31 TrojWare.Win32.Trojan.Black.~DW
DrWeb 4.44.0.09170 2008.12.31 Trojan.Packed.650
eTrust-Vet 31.6.6284 2008.12.31 -
Ewido 4.0 2008.12.31 -
F-Prot 4.4.4.56 2008.12.30 -
F-Secure 8.0.14470.0 2008.12.31 Packed.Win32.Black.a
Fortinet 3.117.0.0 2008.12.31 W32/Black.A
GData 19 2008.12.31 Trojan.Packed.45180
Ikarus T3.1.1.45.0 2008.12.31 Trojan.Crypt
K7AntiVirus 7.10.571 2008.12.30 -
Kaspersky 7.0.0.125 2008.12.31 Packed.Win32.Black.a
McAfee 5479 2008.12.30 New Malware.jn
McAfee+Artemis 5479 2008.12.30 New Malware.jn
Microsoft 1.4205 2008.12.31 -
NOD32 3725 2008.12.31 -
Norman 5.80.02 2008.12.30 -
Panda 9.0.0.4 2008.12.31 Trj/Downloader.MDW
PCTools 4.4.2.0 2008.12.30 -
Prevx1 V2 2008.12.31 -
Rising 21.10.22.00 2008.12.31 -
SecureWeb-Gateway 6.7.6 2008.12.31 Trojan.PCK.Black.A.1550
Sophos 4.37.0 2008.12.31 Mal/Generic-A
Sunbelt 3.2.1809.2 2008.12.22 -
Symantec 10 2008.12.31 -
TheHacker 6.3.1.4.202 2008.12.30 W32/Behav-Heuristic-064
TrendMicro 8.700.0.1004 2008.12.31 -
VBA32 3.12.8.10 2008.12.30 -
ViRobot 2008.12.30.1540 2008.12.31 Spyware.Black.Packed.3548672
VirusBuster 4.5.11.0 2008.12.30 -

Дополнительная информация
File size: 3548672 bytes
MD5...: 3af1caa3206f513a77da611090f40aaf
SHA1..: 118e9d68783914b1c43514b1e9ea1f4b47c3a2de
SHA256: 910aefe6873d1927c88a5ab5a325112c69365031793d063aa1 1c2482081bd801
SHA512: e7ce86335b5d601273b21af12102531846463be3fe69e996ca 3d5f14254db4f6
d65edddb4a98b89af63cac122b1eb20d87be7f83b3f5eef977 7d3d9f98d1a1de
ssdeep: 98304:7IHZSbtE2IikOAY9Q5BzxYWZlV+tG5JhiyTcrBb5p:UH ZSy2Ii/9ABNV+t
Gp89b5p
PEiD..: -