Исследование антивирусов 3

[Geser]

В каком смысле?

ПОследние 3 файла свежачки, но обнаружили зверей

[HATTIFNATTOR]

Интересно, что до какого-то момента результаты Avira и AntiVir были одинаковыми, а теперь разошлись.

[Ilya_K]

...
Промежуточные:

А чем отличаются "подозрение" и "suspicious" на картинке?

[Alexey P.]

Complete scanning result of "kpem.sys", received in VirusTotal at 05.27.2006, 12:19:58
(CET).

Antivirus Version Update Result
AntiVir 6.34.1.32 05.27.2006 TR/Click.Aplugi.D.3
Authentium 4.93.8 05.26.2006 no virus found
Avast 4.6.695.0 05.26.2006 no virus found
AVG 386 05.26.2006 no virus found
BitDefender 7.2 05.27.2006 Trojan.Duganss.A
CAT-QuickHeal 8.00 05.26.2006 no virus found
ClamAV devel-20060426 05.27.2006 no virus found
DrWeb 4.33 05.26.2006 Trojan.DownLoader.4177
eTrust-InoculateIT 23.72.19 05.26.2006 no virus found
eTrust-Vet 12.6.2229 05.26.2006 no virus found
Ewido 3.5 05.26.2006 Downloader.Small
Fortinet 2.77.0.0 05.27.2006 no virus found
F-Prot 3.16c 05.26.2006 no virus found
Ikarus 0.2.65.0 05.27.2006 no virus found
Kaspersky 4.0.2.24 05.27.2006 no virus found
McAfee 4771 05.26.2006 no virus found
Microsoft 1.1441 05.27.2006 no virus found
NOD32v2 1.1562 05.27.2006 no virus found
Norman 5.90.17 05.26.2006 W32/DLoader.TKL
Panda 9.0.0.4 05.26.2006 Trj/Downloader.IJC
Sophos 4.05.0 05.27.2006 no virus found
Symantec 8.0 05.27.2006 Trojan.Duganss
TheHacker 5.9.8.149 05.26.2006 no virus found
UNA 1.83 05.26.2006 no virus found
VBA32 3.11.0 05.26.2006 Trojan.DownLoader.4177

Aditional Information
File size: 9601 bytes
MD5: ad4295c354ad02ef53abfe32c8a2439f
SHA1: c4f693cb9a4d2f543fd7d79605ee307225550771

Complete scanning result of "msbd32.dll", received in VirusTotal at 05.27.2006,
12:26:16 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.32 05.27.2006 TR/Click.Aplugi.D.1
Authentium 4.93.8 05.26.2006 no virus found
Avast 4.6.695.0 05.26.2006 no virus found
AVG 386 05.26.2006 no virus found
BitDefender 7.2 05.27.2006 no virus found
CAT-QuickHeal 8.00 05.26.2006 no virus found
ClamAV devel-20060426 05.27.2006 no virus found
DrWeb 4.33 05.26.2006 Trojan.DownLoader.8595
eTrust-InoculateIT 23.72.19 05.26.2006 no virus found
eTrust-Vet 12.6.2229 05.26.2006 no virus found
Ewido 3.5 05.26.2006 no virus found
Fortinet 2.77.0.0 05.27.2006 no virus found
F-Prot 3.16c 05.26.2006 no virus found
Ikarus 0.2.65.0 05.27.2006 Trojan.Win32.Agent.HA
Kaspersky 4.0.2.24 05.27.2006 no virus found
McAfee 4771 05.26.2006 Spy-Agent.n
Microsoft 1.1441 05.27.2006 no virus found
NOD32v2 1.1562 05.27.2006 no virus found
Norman 5.90.17 05.26.2006 no virus found
Panda 9.0.0.4 05.26.2006 Trj/Downloader.IJC
Sophos 4.05.0 05.27.2006 no virus found
Symantec 8.0 05.27.2006 no virus found
TheHacker 5.9.8.149 05.26.2006 no virus found
UNA 1.83 05.26.2006 no virus found
VBA32 3.11.0 05.26.2006 suspected of Trojan.Agent.52

Aditional Information
File size: 24576 bytes
MD5: 642d68362a5f0ea548f4fae32685445b
SHA1: 76d2c7f5b75246a8843e73ddd2c2a4d5eb81fad8

Complete scanning result of "winlogon.exe", received in VirusTotal at 05.27.2006,
12:43:11 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.32 05.27.2006 TR/Agent.HA
Authentium 4.93.8 05.26.2006 W32/Agent.AFV
Avast 4.6.695.0 05.26.2006 Win32:Trojano-2423
AVG 386 05.26.2006 no virus found
BitDefender 7.2 05.27.2006 no virus found
CAT-QuickHeal 8.00 05.26.2006 no virus found
ClamAV devel-20060426 05.27.2006 no virus found
DrWeb 4.33 05.26.2006 Trojan.DownLoader.4177
eTrust-InoculateIT 23.72.19 05.26.2006 no virus found
eTrust-Vet 12.6.2229 05.26.2006 no virus found
Ewido 3.5 05.26.2006 no virus found
Fortinet 2.77.0.0 05.27.2006 suspicious
F-Prot 3.16c 05.26.2006 W32/Agent.AFV
Ikarus 0.2.65.0 05.27.2006 Trojan.Win32.Agent.HA
Kaspersky 4.0.2.24 05.27.2006 Trojan.Win32.Agent.ha
McAfee 4771 05.26.2006 Spy-Agent.n
Microsoft 1.1441 05.27.2006 no virus found
NOD32v2 1.1562 05.27.2006 Win32/Agent.HA
Norman 5.90.17 05.26.2006 no virus found
Panda 9.0.0.4 05.26.2006 no virus found
Sophos 4.05.0 05.27.2006 no virus found
Symantec 8.0 05.27.2006 no virus found
TheHacker 5.9.8.149 05.26.2006 no virus found
UNA 1.83 05.26.2006 no virus found
VBA32 3.11.0 05.26.2006 no virus found

Aditional Information
File size: 503808 bytes
MD5: be9e2a6f3cc27c3f020eca2bad36ecc5
SHA1: 58795c51af2038d596aebc3c85d9a649dd34ec58

[Shu_b]

Интересно, что до какого-то момента результаты Avira и AntiVir были одинаковыми, а теперь разошлись.

Avira авира уже отсутствует в листе проверки зато появились новые: Authentium и Microsoft. (до перезда к 4 серии учитываться не будут)

А чем отличаются "подозрение" и "suspicious" на картинке?

http://virusinfo.info/showthread.php?p=68782#post68782
http://virusinfo.info/showthread.php?p=68968#post68968

[Alexey P.]

Complete scanning result of "1.exe", received in VirusTotal at 05.28.2006, 00:15:08
(CET).

Antivirus Version Update Result
AntiVir 6.34.1.34 05.27.2006 Heuristic/Hijacker
Authentium 4.93.8 05.26.2006 no virus found
Avast 4.6.695.0 05.26.2006 Win32:Trojano-3141
AVG 386 05.26.2006 no virus found
BitDefender 7.2 05.27.2006 Dropped:Generic.Malware.Fldld.69478133
CAT-QuickHeal 8.00 05.27.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 05.27.2006 no virus found
DrWeb 4.33 05.26.2006 DLOADER.PWS.Trojan
eTrust-InoculateIT 23.72.19 05.26.2006 no virus found
eTrust-Vet 12.6.2229 05.26.2006 no virus found
Ewido 3.5 05.27.2006 no virus found
Fortinet 2.77.0.0 05.27.2006 suspicious
F-Prot 3.16c 05.26.2006 no virus found
Ikarus 0.2.65.0 05.27.2006 no virus found
Kaspersky 4.0.2.24 05.27.2006 no virus found
McAfee 4771 05.26.2006 no virus found
Microsoft 1.1441 05.27.2006 no virus found
NOD32v2 1.1562 05.27.2006 probably unknown NewHeur_PE virus
Norman 5.90.17 05.26.2006 W32/Suspicious_M.gen
Panda 9.0.0.4 05.27.2006 Suspicious file
Sophos 4.05.0 05.27.2006 no virus found
Symantec 8.0 05.27.2006 no virus found
TheHacker 5.9.8.149 05.26.2006 no virus found
UNA 1.83 05.26.2006 no virus found
VBA32 3.11.0 05.26.2006 no virus found

Aditional Information
File size: 14164 bytes
MD5: 41d60151c8de5fed95e27bc22bf62f31
SHA1: ccf756533123daf0b9e51e62db2e1541c52b0397

[maXmo]

а вба ведь умеет в процентах выдавать степень похожести файла на вирусный, чего не пишет?

[Nike]

Complete scanning result of "STrey.exe", received in VirusTotal at 05.29.2006, 18:02:22 (CET).
Antivirus Version Update Result
AntiVir 6.34.1.34 05.29.2006 BDS/RA-based.W
Authentium 4.93.8 05.28.2006 no virus found
Avast 4.6.695.0 05.29.2006 Win32:Trojan-gen. {Delphi}
AVG 386 05.29.2006 no virus found
BitDefender 7.2 05.29.2006 Backdoor.Ra.W
CAT-QuickHeal 8.00 05.29.2006 no virus found
ClamAV devel-20060426 05.29.2006 no virus found
DrWeb 4.33 05.29.2006 BackDoor.Nechto
eTrust-InoculateIT 23.72.20 05.28.2006 no virus found
eTrust-Vet 12.6.2232 05.29.2006 no virus found
Ewido 3.5 05.29.2006 no virus found
Fortinet 2.77.0.0 05.29.2006 no virus found
F-Prot 3.16f 05.29.2006 no virus found
Ikarus 0.2.65.0 05.29.2006 no virus found
Kaspersky 4.0.2.24 05.29.2006 Backdoor.Win32.RA-based.w
McAfee 4772 05.29.2006 potentially unwanted program RemAdm-RemoteAdmin
Microsoft 1.1441 05.29.2006 no virus found
NOD32v2 1.1565 05.29.2006 no virus found
Norman 5.90.17 05.29.2006 no virus found
Panda 9.0.0.4 05.29.2006 Bck/Radmin.W
Sophos 4.05.0 05.29.2006 no virus found
Symantec 8.0 05.29.2006 Infostealer
TheHacker 5.9.8.150 05.29.2006 Backdoor/RA-based.w
UNA 1.83 05.26.2006 Backdoor.RA
VBA32 3.11.0 05.29.2006 no virus found

[Зайцев Олег]

Вот несколько свежих "зверей", отловлены сегодня моей автоматической системой:
AntiVir6.34.1.3405.29.2006 no virus found
Authentium4.93.805.28.2006 no virus found
Avast4.6.695.005.29.2006 no virus found
AVG38605.29.2006 no virus found
BitDefender7.205.29.2006 no virus found
CAT-QuickHeal8.0005.29.2006 no virus found
ClamAVdevel-2006042605.29.2006 no virus found
DrWeb4.3305.29.2006 no virus found
eTrust-InoculateIT23.72.2105.29.2006 no virus found
eTrust-Vet12.6.223205.29.2006 no virus found
Ewido3.505.29.2006 no virus found
Fortinet2.77.0.005.29.2006 no virus found
F-Prot3.16f05.29.2006 no virus found
Ikarus0.2.65.005.29.2006 no virus found
Kaspersky4.0.2.2405.29.2006 no virus found
McAfee477205.29.2006 no virus found
Microsoft1.144105.29.2006 no virus found
NOD32v21.156505.29.2006 no virus found
Norman5.90.1705.29.2006 no virus found
Panda9.0.0.405.29.2006 no virus found
Sophos4.05.005.29.2006 no virus found
Symantec8.005.29.2006 no virus found
TheHacker5.9.8.15005.29.2006 no virus found
UNA1.8305.26.2006 no virus found
VBA323.11.005.29.2006 no virus found
--------
Вот второй экспонат из комплекта:
AntiVir6.34.1.3405.29.2006 no virus found
Authentium4.93.805.28.2006could be infected with an unknown virus
Avast4.6.695.005.29.2006 no virus foundAVG38605.29.2006 no virus foundBitDefender7.205.29.2006 no virus found
CAT-QuickHeal8.0005.29.2006 no virus found
ClamAVdevel-2006042605.29.2006 no virus found
DrWeb4.3305.29.2006 no virus found
eTrust-InoculateIT23.72.2105.29.2006 no virus found
eTrust-Vet12.6.223205.29.2006 no virus found
Ewido3.505.29.2006 no virus found
Fortinet2.77.0.005.29.2006 no virus found
F-Prot3.16f05.29.2006could be infected with an unknown virus
Ikarus0.2.65.005.29.2006 no virus found
Kaspersky4.0.2.2405.29.2006 no virus found
McAfee477205.29.2006 no virus found
Microsoft1.144105.29.2006 no virus found
NOD32v21.156505.29.2006probably a variant of Win32/Locksky
Norman5.90.1705.29.2006W32/Malware
Panda9.0.0.405.29.2006Suspicious file
Sophos4.05.005.29.2006 no virus found
Symantec8.005.29.2006 no virus found
TheHacker5.9.8.15005.29.2006 no virus found
UNA1.8305.26.2006 no virus found
VBA323.11.005.29.2006 no virus found
------
AntiVir 6.34.1.34 05.29.2006 TR/PWS.IExplore.dll
Authentium 4.93.8 05.28.2006 no virus found
Avast 4.6.695.0 05.29.2006 no virus found
AVG 386 05.29.2006 no virus found
BitDefender 7.2 05.29.2006 no virus found
CAT-QuickHeal 8.00 05.29.2006 no virus found
ClamAV devel-20060426 05.29.2006 no virus found
DrWeb 4.33 05.29.2006 no virus found
eTrust-InoculateIT 23.72.21 05.29.2006 no virus found
eTrust-Vet 12.6.2232 05.29.2006 Win32/Fursto.C
Ewido 3.5 05.29.2006 no virus found
Fortinet 2.77.0.0 05.29.2006 no virus found
F-Prot 3.16f 05.29.2006 no virus found
Ikarus 0.2.65.0 05.29.2006 Trojan.PWS.Jetes
Kaspersky 4.0.2.24 05.29.2006 no virus found
McAfee 4772 05.29.2006 no virus found
Microsoft 1.1441 05.29.2006 no virus found
NOD32v2 1.1565 05.29.2006 no virus found
Norman 5.90.17 05.29.2006 no virus found
Panda 9.0.0.4 05.29.2006 Trj/SrchSpy.F
Sophos 4.05.0 05.29.2006 no virus found
Symantec 8.0 05.29.2006 no virus found
TheHacker 5.9.8.150 05.29.2006 no virus found
UNA 1.83 05.26.2006 no virus found
VBA32 3.11.0 05.29.2006 no virus found

[ALEX(XX)]

Мдя. НОД хоть на один файл ругнулся, а VBA&DrWeb смолчали. Интересно...

[Sarg-On]

Странно, почему на вирус-тотал KAV 4.0.2.24; скормил бете KAV-6 тех же зверей, что и на вирус-тотал - в отличии от него, бета-КАВ не распознала только 1 зверя.

[Sanja]

Движот то тотже...
А распознала т.к Олег уже разослай фалй и сегодня были сигнатуры.

[Sarg-On]

вообще-то я о своих зверях говорил; то бишь - на вирустотале кав-4 много чего не распознал, а бета-6 практически в то же время распознала всех кроме одного

[Синауридзе Александр]

Complete scanning result of "Parser.exe", received in VirusTotal at 06.04.2006, 07:42:49 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.37 06.03.2006 TR/Virtl.LdPinch.J.1
Authentium 4.93.8 06.02.2006 no virus found
Avast 4.7.844.0 06.02.2006 no virus found
AVG 386 06.02.2006 no virus found
BitDefender 7.2 06.04.2006 no virus found
CAT-QuickHeal 8.00 06.03.2006 no virus found
ClamAV devel-20060426 06.03.2006 no virus found
DrWeb 4.33 06.03.2006 no virus found
eTrust-InoculateIT 23.72.26 06.03.2006 no virus found
eTrust-Vet 12.6.2240 06.02.2006 no virus found
Ewido 3.5 06.03.2006 Not-A-Virus.VirTool.Win32.LdPinch.j
Fortinet 2.77.0.0 06.03.2006 W32/LDPinch
F-Prot 3.16f 06.02.2006 no virus found
Ikarus 0.2.65.0 06.02.2006 no virus found
Kaspersky 4.0.2.24 06.04.2006 VirTool.Win32.LdPinch.j
McAfee 4776 06.02.2006 potentially unwanted program Generic PUP
Microsoft 1.1441 06.04.2006 no virus found
NOD32v2 1.1577 06.04.2006 no virus found
Norman 5.90.17 06.02.2006 no virus found
Panda 9.0.0.4 06.03.2006 Suspicious file
Sophos 4.05.0 06.03.2006 no virus found
Symantec 8.0 06.04.2006 Hacktool.Keylogger
TheHacker 5.9.8.154 06.01.2006 Trojan/LdPinch.j
UNA 1.83 06.02.2006 VirTool.Win32.LdPinch
VBA32 3.11.0 06.04.2006 suspected of Trojan-PSW.LdPinch.6


Aditional Information
File size: 219136 bytes
MD5: fb7a9174e3159ebe70e2d77fb519336c
SHA1: cd0f722e6c16b2e89c71821fe25d286cbb7a9d13

[Alexey P.]

>Kaspersky 4.0.2.24 06.04.2006 VirTool.Win32.LdPinch.j
Это же инструмент из состава Пинчей (видимо, парсер украденных паролей). К теме треда это никаким боком не относится, не считать.

[Синауридзе Александр]

Complete scanning result of "servis.exe", received in VirusTotal at 06.04.2006, 09:33:00 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.37 06.03.2006 TR/Spy.Agent.KF.2
Authentium 4.93.8 06.02.2006 no virus found
Avast 4.7.844.0 06.02.2006 Win32:Trojano-3141
AVG 386 06.02.2006 PSW.Agent.BRB
BitDefender 7.2 06.04.2006 Trojan.Spy.Agent.HB
CAT-QuickHeal 8.00 06.03.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 06.04.2006 no virus found
DrWeb 4.33 06.03.2006 Trojan.PWS.GoldSpy
eTrust-InoculateIT 23.72.26 06.03.2006 no virus found
eTrust-Vet 12.6.2240 06.02.2006 no virus found
Ewido 3.5 06.03.2006 Logger.Agent.kf
Fortinet 2.77.0.0 06.03.2006 Spy/Agent
F-Prot 3.16f 06.02.2006 no virus found
Ikarus 0.2.65.0 06.02.2006 no virus found
Kaspersky 4.0.2.24 06.04.2006 Trojan-Spy.Win32.Agent.kf
McAfee 4776 06.02.2006 no virus found
Microsoft 1.1441 06.04.2006 no virus found
NOD32v2 1.1577 06.04.2006 probably unknown NewHeur_PE virus
Norman 5.90.17 06.02.2006 W32/Agent.ABZW
Panda 9.0.0.4 06.03.2006 Suspicious file
Sophos 4.05.0 06.03.2006 no virus found
Symantec 8.0 06.04.2006 no virus found
TheHacker 5.9.8.154 06.01.2006 no virus found
UNA 1.83 06.02.2006 Trojan.Spy.Win32.Agent
VBA32 3.11.0 06.04.2006 Trojan-Spy.Win32.Agent.kf


Aditional Information
File size: 14164 bytes
MD5: 41d60151c8de5fed95e27bc22bf62f31
SHA1: ccf756533123daf0b9e51e62db2e1541c52b0397

[Sanja]

PPL.. Если кому не трудно - соберите в коллекцию что у вас есть / что нежалко и что не детектит кав. обратитесь ко мне в ПМ.

Дабы ответить вот на этот вопрос -

"А ты не мог бы нам прислать архивчик запароленнный с семплами - так бы мы тебе сказали, сколько у нас "внутри" уже детектиться... новым эвристиком"

[anton_dr]

6 часов назад каспер его еще не знал

STATUS: FINISHEDComplete scanning result of "avz00002.dta", received in VirusTotal at 06.05.2006, 17:49:28 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.37 06.05.2006 Heuristic/Malware.Crypted.PSM
Authentium 4.93.8 06.02.2006 no virus found
Avast 4.7.844.0 06.05.2006 no virus found
AVG 386 06.05.2006 no virus found
BitDefender 7.2 06.05.2006 no virus found
CAT-QuickHeal 8.00 06.05.2006 TrojanProxy.Slaper.c
ClamAV devel-20060426 06.04.2006 no virus found
DrWeb 4.33 06.05.2006 Trojan.Spambot
eTrust-InoculateIT 23.72.28 06.04.2006 no virus found
eTrust-Vet 12.6.2243 06.05.2006 no virus found
Ewido 3.5 06.05.2006 no virus found
Fortinet 2.77.0.0 06.05.2006 suspicious
F-Prot 3.16f 06.02.2006 no virus found
Ikarus 0.2.65.0 06.02.2006 no virus found
Kaspersky 4.0.2.24 06.05.2006 Trojan-Proxy.Win32.Slaper.c
McAfee 4777 06.05.2006 Spam-MailBot
Microsoft 1.1441 06.05.2006 no virus found
NOD32v2 1.1579 06.05.2006 no virus found
Norman 5.90.17 06.05.2006 no virus found
Panda 9.0.0.4 06.04.2006 Trj/Slapened.A
Sophos 4.05.0 06.05.2006 no virus found
Symantec 8.0 06.05.2006 no virus found
TheHacker 5.9.8.155 06.05.2006 no virus found
UNA 1.83 06.02.2006 no virus found
VBA32 3.11.0 06.05.2006 no virus found

[Shu_b]

Complete scanning result of "pmnnk.dll", received in VirusTotal at 06.09.2006, 19:36:46 (CET).

Antivirus Version Update Result
AntiVir 6.35.0.10 06.09.2006 no virus found
Authentium 4.93.8 06.08.2006 no virus found
Avast 4.7.844.0 06.09.2006 no virus found
AVG 386 06.09.2006 no virus found
BitDefender 7.2 06.09.2006 no virus found
CAT-QuickHeal 8.00 06.09.2006 no virus found
ClamAV devel-20060426 06.09.2006 no virus found
DrWeb 4.33 06.09.2006 Trojan.Virtumod
eTrust-InoculateIT 23.72.32 06.09.2006 no virus found
eTrust-Vet 12.6.2250 06.09.2006 Win32/Chisyne!generic
Ewido 3.5 06.09.2006 no virus found
Fortinet 2.77.0.0 06.09.2006 suspicious
F-Prot 3.16f 06.08.2006 no virus found
Ikarus 0.2.65.0 06.09.2006 no virus found
Kaspersky 4.0.2.24 06.09.2006 no virus found
McAfee 4781 06.09.2006 no virus found
Microsoft 1.1441 06.09.2006 no virus found
NOD32v2 1.1589 06.09.2006 no virus found
Norman 5.90.21 06.09.2006 no virus found
Panda 9.0.0.4 06.09.2006 Suspicious file
Sophos 4.06.0 06.09.2006 no virus found
Symantec 8.0 06.09.2006 no virus found
TheHacker 5.9.8.156 06.08.2006 no virus found
UNA 1.83 06.09.2006 no virus found
VBA32 3.11.0 06.09.2006 Trojan.Virtumod

Промежуточные:

[RiC]

Добьём до 150 и начём следующую серию ?

Эти результаты взяты со Spy Killer`a -
Complete scanning result of "CopySoftwareFace.exe", received in VirusTotal at 06.09.2006, 15:56:59 (CET).

Antivirus Version Update Result
AntiVir 6.35.0.10 06.09.2006 Heuristic/Crypted
Authentium 4.93.8 06.08.2006 no virus found
Avast 4.7.844.0 06.09.2006 Win32:Swizzor-gen
AVG 386 06.08.2006 no virus found
BitDefender 7.2 06.09.2006 no virus found
CAT-QuickHeal 8.00 06.08.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 06.09.2006 no virus found
DrWeb 4.33 06.09.2006 no virus found
eTrust-InoculateIT 23.72.32 06.09.2006 no virus found
eTrust-Vet 12.6.2250 06.09.2006 no virus found
Ewido 3.5 06.09.2006 Adware.Lop
Fortinet 2.77.0.0 06.09.2006 Adware/Lop
F-Prot 3.16f 06.08.2006 no virus found
Ikarus 0.2.65.0 06.09.2006 no virus found
Kaspersky 4.0.2.24 06.09.2006 not-a-virus:AdWare.Win32.Lop.bc
McAfee 4780 06.08.2006 no virus found
Microsoft 1.1441 06.09.2006 no virus found
NOD32v2 1.1588 06.09.2006 a variant of Win32/TrojanDownloader.Swizzor
Norman 5.90.21 06.09.2006 no virus found
Panda 9.0.0.4 06.09.2006 Adware/Lop
Sophos 4.06.0 06.09.2006 no virus found
Symantec 8.0 06.09.2006 no virus found
TheHacker 5.9.8.156 06.08.2006 Adware/Lop.bc
UNA 1.83 06.09.2006 Adware.Lop
VBA32 3.11.0 06.09.2006 Trojan.Win32.Agent.uq

Aditional Information
File size: 201314 bytes
MD5: 608378ccb3d672c47d0d1660031e74b9
SHA1: 0b9d93e9e6d9641fe60c7939879a6763ce0bfcaa

Complete scanning result of "mciaipt.dll", received in VirusTotal at 06.09.2006, 15:40:57 (CET).

Antivirus Version Update Result
AntiVir 6.35.0.10 06.09.2006 TR/Dldr.ConHook.AA
Authentium 4.93.8 06.08.2006 no virus found
Avast 4.7.844.0 06.09.2006 Win32:Conhook-K
AVG 386 06.08.2006 no virus found
BitDefender 7.2 06.09.2006 Trojan.Downloader.PV
CAT-QuickHeal 8.00 06.08.2006 no virus found
ClamAV devel-20060426 06.09.2006 no virus found
DrWeb 4.33 06.09.2006 Trojan.DownLoader.10370
eTrust-InoculateIT 23.72.32 06.09.2006 no virus found
eTrust-Vet 12.6.2250 06.09.2006 no virus found
Ewido 3.5 06.09.2006 Downloader.ConHook.aa
Fortinet 2.77.0.0 06.09.2006 no virus found
F-Prot 3.16f 06.08.2006 no virus found
Ikarus 0.2.65.0 06.08.2006 no virus found
Kaspersky 4.0.2.24 06.09.2006 Trojan-Downloader.Win32.ConHook.aa
McAfee 4780 06.08.2006 no virus found
Microsoft 1.1441 06.09.2006 no virus found
NOD32v2 1.1588 06.09.2006 no virus found
Norman 5.90.21 06.09.2006 no virus found
Panda 9.0.0.4 06.09.2006 Suspicious file
Sophos 4.06.0 06.09.2006 Troj/Dloadr-XD
Symantec 8.0 06.09.2006 no virus found
TheHacker 5.9.8.156 06.08.2006 no virus found
UNA 1.83 06.09.2006 no virus found
VBA32 3.11.0 06.08.2006 no virus found

Aditional Information
File size: 23552 bytes
MD5: 1a9abf00ccba7135ac2ae5200b28e2a4
SHA1: f2e0025b74df73b34e15d0dd1a2781fff4322187

Complete scanning result of "dmhmy.exe", received in VirusTotal at 06.09.2006, 05:08:42 (CET).

Antivirus Version Update Result
AntiVir 6.35.0.10 06.08.2006 TR/Small.AA.9
Authentium 4.93.8 06.08.2006 no virus found
Avast 4.7.844.0 06.08.2006 Win32:Small-EK
AVG 386 06.08.2006 no virus found
BitDefender 7.2 06.09.2006 MemScan:Trojan.Small.AA
CAT-QuickHeal 8.00 06.08.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 06.08.2006 no virus found
DrWeb 4.33 06.08.2006 Trojan.DownLoader.5401
eTrust-InoculateIT 23.72.32 06.09.2006 no virus found
eTrust-Vet 12.6.2248 06.08.2006 Win32/Alureon!generic
Ewido 3.5 06.08.2006 Trojan.Pakes
Fortinet 2.77.0.0 06.09.2006 suspicious
F-Prot 3.16f 06.08.2006 no virus found
Ikarus 0.2.65.0 06.08.2006 no virus found
Kaspersky 4.0.2.24 06.09.2006 no virus found
McAfee 4780 06.08.2006 no virus found
Microsoft 1.1441 06.09.2006 no virus found
NOD32v2 1.1587 06.08.2006 Win32/Small.FB
Norman 5.90.21 06.08.2006 no virus found
Panda 9.0.0.4 06.08.2006 Trj/Domen.A
Sophos 4.06.0 06.08.2006 no virus found
Symantec 8.0 06.09.2006 no virus found
TheHacker 5.9.8.156 06.08.2006 no virus found
UNA 1.83 06.08.2006 no virus found
VBA32 3.11.0 06.08.2006 Trojan.Win32.Small.fb

Aditional Information
File size: 44048 bytes
MD5: 27dc18dc8e85e3c5c4a6c8bf3a2a5628
SHA1: 9a795a9f4934ecb419a7738c65e982a5c5091ee9

Complete scanning result of "csjok.exe", received in VirusTotal at 06.09.2006, 05:13:39 (CET).

Antivirus Version Update Result
AntiVir 6.35.0.10 06.08.2006 TR/Dldr.FFZ.110
Authentium 4.93.8 06.08.2006 W32/Downloader.ZYT
Avast 4.7.844.0 06.08.2006 Win32:Agent-IU
AVG 386 06.08.2006 Downloader.Agent.13.AV
BitDefender 7.2 06.09.2006 Trojan.Downloader.FFZ
CAT-QuickHeal 8.00 06.08.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 06.08.2006 Trojan.Downloader.Agent-262
DrWeb 4.33 06.08.2006 Trojan.DownLoader.9145
eTrust-InoculateIT 23.72.32 06.09.2006 no virus found
eTrust-Vet 12.6.2248 06.08.2006 Win32/Alureon!generic
Ewido 3.5 06.08.2006 Downloader.Agent.uj
Fortinet 2.77.0.0 06.09.2006 W32/Agent.UJ!tr.dldr
F-Prot 3.16f 06.08.2006 security risk named W32/Downloader.ZYT
Ikarus 0.2.65.0 06.08.2006 no virus found
Kaspersky 4.0.2.24 06.09.2006 Trojan-Downloader.Win32.Agent.uj
McAfee 4780 06.08.2006 no virus found
Microsoft 1.1441 06.09.2006 no virus found
NOD32v2 1.1587 06.08.2006 a variant of Win32/Small.FB
Norman 5.90.21 06.08.2006 W32/Agent.ADGS
Panda 9.0.0.4 06.08.2006 Adware/Trebuh
Sophos 4.06.0 06.08.2006 no virus found
Symantec 8.0 06.09.2006 Downloader
TheHacker 5.9.8.156 06.08.2006 no virus found
UNA 1.83 06.08.2006 TrojanDownloader.Win32.Agent
VBA32 3.11.0 06.08.2006 Trojan.DownLoader.4316

Complete scanning result of "LinkOptimizer.dll", received in VirusTotal at 06.06.2006, 19:38:26 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.37 06.06.2006 Heuristic/Crypted.Patched
Authentium 4.93.8 06.05.2006 no virus found
Avast 4.7.844.0 06.06.2006 Win32:Agent-gen
AVG 386 06.06.2006 no virus found
BitDefender 7.2 06.06.2006 no virus found
CAT-QuickHeal 8.00 06.06.2006 no virus found
ClamAV devel-20060426 06.06.2006 no virus found
DrWeb 4.33 06.06.2006 no virus found
eTrust-InoculateIT 23.72.29 06.06.2006 no virus found
eTrust-Vet 12.6.2244 06.06.2006 no virus found
Ewido 3.5 06.06.2006 no virus found
Fortinet 2.77.0.0 06.06.2006 suspicious
F-Prot 3.16f 06.02.2006 no virus found
Ikarus 0.2.65.0 06.06.2006 no virus found
Kaspersky 4.0.2.24 06.06.2006 no virus found
McAfee 4778 06.06.2006 no virus found
Microsoft 1.1441 06.06.2006 no virus found
NOD32v2 1.1581 06.06.2006 probably a variant of Win32/TrojanDownloader.Agent.BQ
Norman 5.90.17 06.06.2006 no virus found
Panda 9.0.0.4 06.05.2006 no virus found
Sophos 4.05.0 06.06.2006 no virus found
Symantec 8.0 06.06.2006 no virus found
TheHacker 5.9.8.155 06.05.2006 no virus found
UNA 1.83 06.06.2006 no virus found
VBA32 3.11.0 06.06.2006 no virus found


Aditional Information
File size: 61599 bytes
MD5: dcf5098cfc72500b3d8722917412fed4
SHA1: 4783f864194e5fb655d508baad4c450ee260de84

Complete scanning result of "Win1145695.exe", received in VirusTotal at 06.01.2006, 05:13:57 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.34 05.31.2006 Worm/VB.EE
Authentium 4.93.8 05.31.2006 no virus found
Avast 4.7.844.0 05.31.2006 no virus found
AVG 386 05.31.2006 Worm/VB.ST
BitDefender 7.2 05.31.2006 Worm.P2P.MsgGone.VB.A
CAT-QuickHeal 8.00 05.31.2006 no virus found
ClamAV devel-20060426 05.31.2006 no virus found
DrWeb 4.33 05.31.2006 WIN.MACRO.SCRIPT.WORM.Virus
eTrust-InoculateIT 23.72.23 06.01.2006 no virus found
eTrust-Vet 12.6.2235 05.31.2006 no virus found
Ewido 3.5 05.31.2006 Worm.VB.ee
Fortinet 2.77.0.0 05.31.2006 W32/Generic!worm.p2p
F-Prot 3.16f 05.31.2006 no virus found
Ikarus 0.2.65.0 05.31.2006 no virus found
Kaspersky 4.0.2.24 06.01.2006 P2P-Worm.Win32.VB.ee
McAfee 4774 05.31.2006 W32/Generic.worm!p2p
Microsoft 1.1441 06.01.2006 no virus found
NOD32v2 1.1571 06.01.2006 probably unknown NewHeur_PE virus
Norman 5.90.17 05.31.2006 no virus found
Panda 9.0.0.4 05.31.2006 W32/VB.NJ.worm
Sophos 4.05.0 05.31.2006 no virus found
Symantec 8.0 06.01.2006 no virus found
TheHacker 5.9.8.152 06.01.2006 W32/VB.ee
UNA 1.83 05.30.2006 no virus found
VBA32 3.11.0 05.31.2006 P2P-Worm.Win32.VB.ee

Aditional Information
File size: 583680 bytes
MD5: 04b7e5bf82398350f27c53aa7b2a6565
SHA1: 3a8c8a1b71aa405036b52622dddbfb42e9d83b5e

Complete scanning result of "shehalx.dll", received in VirusTotal at 06.01.2006, 05:19:17 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.34 05.31.2006 Worm/IRCBot.OD.2
Authentium 4.93.8 05.31.2006 no virus found
Avast 4.7.844.0 05.31.2006 no virus found
AVG 386 05.31.2006 BackDoor.Generic2.QFL
BitDefender 7.2 05.31.2006 Backdoor.IRCBot.HU
CAT-QuickHeal 8.00 05.31.2006 no virus found
ClamAV devel-20060426 05.31.2006 no virus found
DrWeb 4.33 05.31.2006 Trojan.Starter.37
eTrust-InoculateIT 23.72.23 06.01.2006 no virus found
eTrust-Vet 12.6.2235 05.31.2006 no virus found
Ewido 3.5 05.31.2006 Backdoor.IRCBot.od
Fortinet 2.77.0.0 05.31.2006 W32/IRCBot.OD!tr.bdr
F-Prot 3.16f 05.31.2006 no virus found
Ikarus 0.2.65.0 05.31.2006 Backdoor.Win32.IRCBot.od
Kaspersky 4.0.2.24 06.01.2006 Backdoor.Win32.IRCBot.od
McAfee 4774 05.31.2006 no virus found
Microsoft 1.1441 06.01.2006 no virus found
NOD32v2 1.1571 06.01.2006 no virus found
Norman 5.90.17 05.31.2006 no virus found
Panda 9.0.0.4 05.31.2006 no virus found
Sophos 4.05.0 05.31.2006 no virus found
Symantec 8.0 06.01.2006 no virus found
TheHacker 5.9.8.152 06.01.2006 Backdoor/IRCBot.od
UNA 1.83 05.30.2006 Backdoor.IRCBot
VBA32 3.11.0 05.31.2006 Backdoor.Win32.IRCBot.od

Aditional Information
File size: 14336 bytes
MD5: 6930ced7deffaf575e19abd2c87f923b
SHA1: 90ebec74eeb9d8d6aac49d9b757b5a361ba85ae3

Complete scanning result of "Setup.exe", received in VirusTotal at 05.29.2006, 23:05:52 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.34 05.29.2006 TR/Click.VB.LX.3
Authentium 4.93.8 05.28.2006 no virus found
Avast 4.6.695.0 05.29.2006 Win32:VB-MO
AVG 386 05.29.2006 Clicker.CBL
BitDefender 7.2 05.29.2006 Trojan.Clicker.VB.DF
CAT-QuickHeal 8.00 05.29.2006 no virus found
ClamAV devel-20060426 05.29.2006 no virus found
DrWeb 4.33 05.29.2006 Trojan.Popuper
eTrust-InoculateIT 23.72.21 05.29.2006 no virus found
eTrust-Vet 12.6.2232 05.29.2006 no virus found
Ewido 3.5 05.29.2006 Hijacker.VB.lx
Fortinet 2.77.0.0 05.29.2006 Adware/AdMedia
F-Prot 3.16f 05.29.2006 no virus found
Ikarus 0.2.65.0 05.29.2006 Trojan-Clicker.Win32.VB.lx
Kaspersky 4.0.2.24 05.29.2006 Trojan-Clicker.Win32.VB.lx
McAfee 4772 05.29.2006 no virus found
Microsoft 1.1441 05.29.2006 no virus found
NOD32v2 1.1565 05.29.2006 no virus found
Norman 5.90.17 05.29.2006 no virus found
Panda 9.0.0.4 05.29.2006 Adware/Gmter
Sophos 4.05.0 05.29.2006 Troj/Clicker-CO
Symantec 8.0 05.29.2006 no virus found
TheHacker 5.9.8.150 05.29.2006 Trojan/Clicker.VB.lx
UNA 1.83 05.26.2006 TrojanClicker.Win32.VB
VBA32 3.11.0 05.29.2006 Trojan-Clicker.Win32.VB.lx

Aditional Information
File size: 32768 bytes
MD5: 9e1cf0bd159111f85c6cc616de1106b2
SHA1: 98955f8d84dd76bb5540ad05318b739b1220f180

Complete scanning result of "wuauclt10.exe", received in VirusTotal at 05.28.2006, 18:19:06 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.34 05.28.2006 ADSPY/WinAD.AT.3
Authentium 4.93.8 05.28.2006 no virus found
Avast 4.6.695.0 05.26.2006 Win32:Trojano-1918
AVG 386 05.28.2006 Dropper.Generic.COC
BitDefender 7.2 05.28.2006 Trojan.Dropper.Pakes.P
CAT-QuickHeal 8.00 05.27.2006 TrojanDropper.Pakes
ClamAV devel-20060426 05.28.2006 no virus found
DrWeb 4.33 05.28.2006 Adware.Winad
eTrust-InoculateIT 23.72.20 05.28.2006 no virus found
eTrust-Vet 12.6.2229 05.26.2006 no virus found
Ewido 3.5 05.28.2006 Dropper.Pakes
Fortinet 2.77.0.0 05.28.2006 Adware/WinAd
F-Prot 3.16c 05.26.2006 no virus found
Ikarus 0.2.65.0 05.28.2006 no virus found
Kaspersky 4.0.2.24 05.28.2006 Trojan-Dropper.Win32.Pakes
McAfee 4771 05.26.2006 potentially unwanted program Adware-WinAd
Microsoft 1.1441 05.28.2006 no virus found
NOD32v2 1.1562 05.27.2006 Win32/Adware.WUpd
Norman 5.90.17 05.26.2006 Blazefind.F
Panda 9.0.0.4 05.28.2006 Adware/WUpd
Sophos 4.05.0 05.28.2006 no virus found
Symantec 8.0 05.28.2006 no virus found
TheHacker 5.9.8.149 05.26.2006 Trojan/Dropper.Pakes
UNA 1.83 05.26.2006 TrojanDropper.Win32.Pakes
VBA32 3.11.0 05.28.2006 Trojan-Dropper.Win32.Pakes

Aditional Information
File size: 788189 bytes
MD5: 3d4f4ceda4452bfb1ee079b839070d4d
SHA1: 3eb98cc6add9abd9009001013f369dd4cd478d72

Complete scanning result of "defender23.exe", received in VirusTotal at 05.28.2006, 17:21:41 (CET).
Antivirus Version Update Result
AntiVir 6.34.1.34 05.28.2006 no virus found
Authentium 4.93.8 05.28.2006 no virus found
Avast 4.6.695.0 05.26.2006 no virus found
AVG 386 05.28.2006 no virus found
BitDefender 7.2 05.28.2006 no virus found
CAT-QuickHeal 8.00 05.27.2006 no virus found
ClamAV devel-20060426 05.28.2006 no virus found
DrWeb 4.33 05.28.2006 Trojan.Click.1227
eTrust-InoculateIT 23.72.19 05.26.2006 no virus found
eTrust-Vet 12.6.2229 05.26.2006 no virus found
Ewido 3.5 05.28.2006 no virus found
Fortinet 2.77.0.0 05.28.2006 W32/ADLOAD.EL!tr
F-Prot 3.16c 05.26.2006 no virus found
Ikarus 0.2.65.0 05.28.2006 no virus found
Kaspersky 4.0.2.24 05.28.2006 no virus found
McAfee 4771 05.26.2006 no virus found
Microsoft 1.1441 05.28.2006 no virus found
NOD32v2 1.1562 05.27.2006 probably a variant of Win32/TrojanClicker.VB.LI
Norman 5.90.17 05.26.2006 no virus found
Panda 9.0.0.4 05.28.2006 no virus found
Sophos 4.05.0 05.28.2006 no virus found
Symantec 8.0 05.28.2006 no virus found
TheHacker 5.9.8.149 05.26.2006 no virus found
UNA 1.83 05.26.2006 no virus found
VBA32 3.11.0 05.28.2006 Trojan.Click.1227

Aditional Information
File size: 36864 bytes
MD5: 746235b2635a06d29723ed3632f502a4
SHA1: 14a4df262c66d6aba7c8ede698e581b854df28fb

Complete scanning result of "franc.exe", received in VirusTotal at 05.28.2006, 18:22:32 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.34 05.28.2006 Heuristic/Malware.Crypted.PSM
Authentium 4.93.8 05.28.2006 no virus found
Avast 4.6.695.0 05.26.2006 no virus found
AVG 386 05.28.2006 no virus found
BitDefender 7.2 05.28.2006 Dropped:Generic.Malware.SFYClwdld.14B1DC52
CAT-QuickHeal 8.00 05.27.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 05.28.2006 no virus found
DrWeb 4.33 05.28.2006 no virus found
eTrust-InoculateIT 23.72.20 05.28.2006 Win32/Haxdoor.Variant!Trojan
eTrust-Vet 12.6.2229 05.26.2006 Win32/Haxdoor!generic
Ewido 3.5 05.28.2006 no virus found
Fortinet 2.77.0.0 05.28.2006 Spy/Goldun
F-Prot 3.16c 05.26.2006 no virus found
Ikarus 0.2.65.0 05.28.2006 no virus found
Kaspersky 4.0.2.24 05.28.2006 Trojan-Spy.Win32.Haxspy.ad
McAfee 4771 05.26.2006 PWS-Goldun.dr
Microsoft 1.1441 05.28.2006 no virus found
NOD32v2 1.1562 05.27.2006 a variant of Win32/Spy.Goldun.EP
Norman 5.90.17 05.26.2006 no virus found
Panda 9.0.0.4 05.28.2006 Suspicious file
Sophos 4.05.0 05.28.2006 Troj/Haxdor-Gen
Symantec 8.0 05.28.2006 no virus found
TheHacker 5.9.8.149 05.26.2006 no virus found
UNA 1.83 05.26.2006 no virus found
VBA32 3.11.0 05.28.2006 suspected of Rootkit.Agent.10

Aditional Information
File size: 23790 bytes
MD5: 50fe75374014c941a8c13159766f08c5
SHA1: ca67cd7978dd43bb4741f5501c0606d4444e5453

Complete scanning result of "TFTP3232", received in VirusTotal at 05.28.2006, 18:22:43 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.34 05.28.2006 no virus found
Authentium 4.93.8 05.28.2006 could be a corrupted executable file
Avast 4.6.695.0 05.26.2006 no virus found
AVG 386 05.28.2006 no virus found
BitDefender 7.2 05.28.2006 no virus found
CAT-QuickHeal 8.00 05.27.2006 no virus found
ClamAV devel-20060426 05.28.2006 no virus found
DrWeb 4.33 05.28.2006 no virus found
eTrust-InoculateIT 23.72.20 05.28.2006 no virus found
eTrust-Vet 12.6.2229 05.26.2006 no virus found
Ewido 3.5 05.28.2006 no virus found
Fortinet 2.77.0.0 05.28.2006 no virus found
F-Prot 3.16c 05.26.2006 no virus found
Ikarus 0.2.65.0 05.28.2006 no virus found
Kaspersky 4.0.2.24 05.28.2006 no virus found
McAfee 4771 05.26.2006 no virus found
Microsoft 1.1441 05.28.2006 no virus found
NOD32v2 1.1562 05.27.2006 no virus found
Norman 5.90.17 05.26.2006 no virus found
Panda 9.0.0.4 05.28.2006 W32/Gaobot.MSG.worm
Sophos 4.05.0 05.28.2006 no virus found
Symantec 8.0 05.28.2006 no virus found
TheHacker 5.9.8.149 05.26.2006 no virus found
UNA 1.83 05.26.2006 no virus found
VBA32 3.11.0 05.28.2006 no virus found

Aditional Information
File size: 19456 bytes
MD5: edfc06439c377c126686a88afa38283d
SHA1: f9fc9b13a190b591f78af1d0d99757ad71e240ba

Complete scanning result of "uvmw1.exe", received in VirusTotal at 05.28.2006, 17:57:46 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.34 05.28.2006 Heuristic/Crypted.Patched
Authentium 4.93.8 05.28.2006 no virus found
Avast 4.6.695.0 05.26.2006 Win32:Agent-gen
AVG 386 05.28.2006 no virus found
BitDefender 7.2 05.28.2006 no virus found
CAT-QuickHeal 8.00 05.27.2006 no virus found
ClamAV devel-20060426 05.28.2006 no virus found
DrWeb 4.33 05.28.2006 Dialer.Silent
eTrust-InoculateIT 23.72.20 05.28.2006 no virus found
eTrust-Vet 12.6.2229 05.26.2006 no virus found
Ewido 3.5 05.28.2006 no virus found
Fortinet 2.77.0.0 05.28.2006 suspicious
F-Prot 3.16c 05.26.2006 no virus found
Ikarus 0.2.65.0 05.28.2006 no virus found
Kaspersky 4.0.2.24 05.28.2006 Trojan-Downloader.Win32.Agent.akq
McAfee 4771 05.26.2006 New Malware.q
Microsoft 1.1441 05.28.2006 no virus found
NOD32v2 1.1562 05.27.2006 probably unknown NewHeur_PE virus
Norman 5.90.17 05.26.2006 no virus found
Panda 9.0.0.4 05.28.2006 Suspicious file
Sophos 4.05.0 05.28.2006 no virus found
Symantec 8.0 05.28.2006 no virus found
TheHacker 5.9.8.149 05.26.2006 no virus found
UNA 1.83 05.26.2006 no virus found
VBA32 3.11.0 05.28.2006 no virus found

Aditional Information
File size: 15991 bytes
MD5: e4700f26f574aa2bec4f08ec1fe1ad67
SHA1: f572abfb39635264b0127abb28f4f4274cf50e04

Complete scanning result of "5.tmp", received in VirusTotal at 05.28.2006, 17:58:02 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.34 05.28.2006 no virus found
Authentium 4.93.8 05.28.2006 no virus found
Avast 4.6.695.0 05.26.2006 no virus found
AVG 386 05.28.2006 no virus found
BitDefender 7.2 05.28.2006 no virus found
CAT-QuickHeal 8.00 05.27.2006 no virus found
ClamAV devel-20060426 05.28.2006 no virus found
DrWeb 4.33 05.28.2006 MULDROP.Trojan
eTrust-InoculateIT 23.72.20 05.28.2006 no virus found
eTrust-Vet 12.6.2229 05.26.2006 no virus found
Ewido 3.5 05.28.2006 no virus found
Fortinet 2.77.0.0 05.28.2006 no virus found
F-Prot 3.16c 05.26.2006 no virus found
Ikarus 0.2.65.0 05.28.2006 no virus found
Kaspersky 4.0.2.24 05.28.2006 no virus found
McAfee 4771 05.26.2006 no virus found
Microsoft 1.1441 05.28.2006 no virus found
NOD32v2 1.1562 05.27.2006 probably a variant of Win32/TrojanDownloader.Agent.BQ
Norman 5.90.17 05.26.2006 no virus found
Panda 9.0.0.4 05.28.2006 no virus found
Sophos 4.05.0 05.28.2006 no virus found
Symantec 8.0 05.28.2006 no virus found
TheHacker 5.9.8.149 05.26.2006 no virus found
UNA 1.83 05.26.2006 no virus found
VBA32 3.11.0 05.28.2006 no virus found

Aditional Information
File size: 77824 bytes
MD5: b7f48a8002cfabb7bbe6ceb228553fd4
SHA1: 3c59225b6b4a7e4016cbe2e58d8f911bd6d88553

Complete scanning result of "INFOELSE.exe", received in VirusTotal at 05.28.2006, 17:51:59 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.34 05.28.2006 Heuristic/Crypted
Authentium 4.93.8 05.28.2006 no virus found
Avast 4.6.695.0 05.26.2006 Win32:Swizzor-gen
AVG 386 05.28.2006 no virus found
BitDefender 7.2 05.28.2006 no virus found
CAT-QuickHeal 8.00 05.27.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 05.28.2006 no virus found
DrWeb 4.33 05.28.2006 no virus found
eTrust-InoculateIT 23.72.20 05.28.2006 no virus found
eTrust-Vet 12.6.2229 05.26.2006 no virus found
Ewido 3.5 05.28.2006 no virus found
Fortinet 2.77.0.0 05.28.2006 suspicious
F-Prot 3.16c 05.26.2006 no virus found
Ikarus 0.2.65.0 05.28.2006 no virus found
Kaspersky 4.0.2.24 05.28.2006 Trojan-Downloader.Win32.Swizzor.fh
McAfee 4771 05.26.2006 no virus found
Microsoft 1.1441 05.28.2006 no virus found
NOD32v2 1.1562 05.27.2006 a variant of Win32/TrojanDownloader.Swizzor
Norman 5.90.17 05.26.2006 no virus found
Panda 9.0.0.4 05.28.2006 Adware/Lop
Sophos 4.05.0 05.28.2006 no virus found
Symantec 8.0 05.28.2006 no virus found
TheHacker 5.9.8.149 05.26.2006 no virus found
UNA 1.83 05.26.2006 no virus found
VBA32 3.11.0 05.28.2006 no virus found

Aditional Information
File size: 202346 bytes
MD5: 3747cd2ca86f96f68f16f2b0db58684b
SHA1: f17cc9c2cf81ba174d49c015dca793af6f651ab5

Complete scanning result of "SDVita.exe", received in VirusTotal at 05.22.2006, 21:42:52 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.27 05.22.2006 no virus found
Authentium 4.93.8 05.22.2006 no virus found
Avast 4.6.695.0 05.22.2006 no virus found
AVG 386 05.22.2006 no virus found
BitDefender 7.2 05.22.2006 no virus found
CAT-QuickHeal 8.00 05.21.2006 no virus found
ClamAV devel-20060426 05.22.2006 no virus found
DrWeb 4.33 05.22.2006 no virus found
eTrust-InoculateIT 23.72.14 05.21.2006 no virus found
eTrust-Vet 12.4.2221 05.22.2006 no virus found
Ewido 3.5 05.22.2006 no virus found
Fortinet 2.77.0.0 05.22.2006 no virus found
F-Prot 3.16c 05.22.2006 no virus found
Ikarus 0.2.65.0 05.22.2006 no virus found
Kaspersky 4.0.2.24 05.22.2006 not-a-virus:AdWare.Win32.CASClient.f
McAfee 4767 05.22.2006 no virus found
Microsoft 1.1440 05.22.2006 no virus found
NOD32v2 1.1553 05.22.2006 no virus found
Norman 5.90.17 05.22.2006 no virus found
Panda 9.0.0.4 05.22.2006 Adware/FCHelp
Sophos 4.05.0 05.22.2006 no virus found
Symantec 8.0 05.22.2006 no virus found
TheHacker 5.9.8.146 05.22.2006 no virus found
UNA 1.83 05.22.2006 no virus found
VBA32 3.11.0 05.22.2006 no virus found

Сomplete scanning result of "AXVenore.exe", received in VirusTotal at 05.22.2006, 21:50:41 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.27 05.22.2006 ADSPY/SurfSide.AQ
Authentium 4.93.8 05.22.2006 no virus found
Avast 4.6.695.0 05.22.2006 no virus found
AVG 386 05.22.2006 no virus found
BitDefender 7.2 05.22.2006 Trojan.Agent.LM
CAT-QuickHeal 8.00 05.21.2006 no virus found
ClamAV devel-20060426 05.22.2006 no virus found
DrWeb 4.33 05.22.2006 Adware.Newads
eTrust-InoculateIT 23.72.14 05.21.2006 no virus found
eTrust-Vet 12.4.2221 05.22.2006 no virus found
Ewido 3.5 05.22.2006 no virus found
Fortinet 2.77.0.0 05.22.2006 Adware/CasClient
F-Prot 3.16c 05.22.2006 no virus found
Ikarus 0.2.65.0 05.22.2006 no virus found
Kaspersky 4.0.2.24 05.22.2006 no virus found
McAfee 4767 05.22.2006 potentially unwanted program Adware-CasClient
Microsoft 1.1440 05.22.2006 no virus found
NOD32v2 1.1553 05.22.2006 no virus found
Norman 5.90.17 05.22.2006 W32/Cmapp.A
Panda 9.0.0.4 05.22.2006 Spyware/SurfSideKick
Sophos 4.05.0 05.22.2006 no virus found
Symantec 8.0 05.22.2006 Trojan.Cmapp
TheHacker 5.9.8.146 05.22.2006 no virus found
UNA 1.83 05.22.2006 no virus found
VBA32 3.11.0 05.22.2006 no virus found

Complete scanning result of "Vga_Tick.exe", received in VirusTotal at 05.22.2006, 21:57:29 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.27 05.22.2006 ADSPY/Lop.ad.24
Authentium 4.93.8 05.22.2006 no virus found
Avast 4.6.695.0 05.22.2006 Win32:Swizzor-gen
AVG 386 05.22.2006 no virus found
BitDefender 7.2 05.22.2006 no virus found
CAT-QuickHeal 8.00 05.21.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 05.22.2006 Adware.Lop-130
DrWeb 4.33 05.22.2006 Trojan.Swizzor
eTrust-InoculateIT 23.72.14 05.21.2006 no virus found
eTrust-Vet 12.4.2221 05.22.2006 Win32/Swizzor
Ewido 3.5 05.22.2006 no virus found
Fortinet 2.77.0.0 05.22.2006 suspicious
F-Prot 3.16c 05.22.2006 no virus found
Ikarus 0.2.65.0 05.22.2006 no virus found
Kaspersky 4.0.2.24 05.22.2006 not-a-virus:AdWare.Win32.Lop.ag
McAfee 4767 05.22.2006 Swizzor.gen
Microsoft 1.1440 05.22.2006 no virus found
NOD32v2 1.1553 05.22.2006 a variant of Win32/TrojanDownloader.Swizzor
Norman 5.90.17 05.22.2006 Swizzor.gen
Panda 9.0.0.4 05.22.2006 Adware/Lop
Sophos 4.05.0 05.22.2006 no virus found
Symantec 8.0 05.22.2006 no virus found
TheHacker 5.9.8.146 05.22.2006 Trojan/Downloader.Swizzor
UNA 1.83 05.22.2006 no virus found
VBA32 3.11.0 05.22.2006 Trojan.Swizzor

Complete scanning result of "memoone.exe", received in VirusTotal at 05.22.2006, 22:01:17 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.27 05.22.2006 ADSPY/Lop.ad.24
Authentium 4.93.8 05.22.2006 no virus found
Avast 4.6.695.0 05.22.2006 Win32:Swizzor-gen
AVG 386 05.22.2006 no virus found
BitDefender 7.2 05.22.2006 no virus found
CAT-QuickHeal 8.00 05.21.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 05.22.2006 Adware.Lop-130
DrWeb 4.33 05.22.2006 Trojan.Swizzor
eTrust-InoculateIT 23.72.14 05.21.2006 no virus found
eTrust-Vet 12.4.2221 05.22.2006 Win32/Swizzor
Ewido 3.5 05.22.2006 no virus found
Fortinet 2.77.0.0 05.22.2006 suspicious
F-Prot 3.16c 05.22.2006 no virus found
Ikarus 0.2.65.0 05.22.2006 no virus found
Kaspersky 4.0.2.24 05.22.2006 not-a-virus:AdWare.Win32.Lop.ag
McAfee 4767 05.22.2006 Swizzor.gen
Microsoft 1.1440 05.22.2006 no virus found
NOD32v2 1.1553 05.22.2006 a variant of Win32/TrojanDownloader.Swizzor
Norman 5.90.17 05.22.2006 Swizzor.gen
Panda 9.0.0.4 05.22.2006 Adware/Lop
Sophos 4.05.0 05.22.2006 no virus found
Symantec 8.0 05.22.2006 no virus found
TheHacker 5.9.8.146 05.22.2006 Trojan/Downloader.Swizzor
UNA 1.83 05.22.2006 no virus found
VBA32 3.11.0 05.22.2006 Trojan.Swizzor

Complete scanning result of "w0019bed.dll.bac_a01412", received in VirusTotal at 05.22.2006, 22:21:42 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.27 05.22.2006 no virus found
Authentium 4.93.8 05.22.2006 W32/Downloader.VMT
Avast 4.6.695.0 05.22.2006 no virus found
AVG 386 05.22.2006 no virus found
BitDefender 7.2 05.22.2006 Trojan.Downloader.Agent.NQ
CAT-QuickHeal 8.00 05.21.2006 no virus found
ClamAV devel-20060426 05.22.2006 no virus found
DrWeb 4.33 05.22.2006 no virus found
eTrust-InoculateIT 23.72.14 05.21.2006 no virus found
eTrust-Vet 12.4.2221 05.22.2006 no virus found
Ewido 3.5 05.22.2006 no virus found
Fortinet 2.77.0.0 05.22.2006 no virus found
F-Prot 3.16c 05.22.2006 security risk named W32/Downloader.VMT
Ikarus 0.2.65.0 05.22.2006 no virus found
Kaspersky 4.0.2.24 05.22.2006 Trojan-Downloader.Win32.Agent.ahv
McAfee 4767 05.22.2006 no virus found
Microsoft 1.1440 05.22.2006 no virus found
NOD32v2 1.1553 05.22.2006 no virus found
Norman 5.90.17 05.22.2006 no virus found
Panda 9.0.0.4 05.22.2006 no virus found
Sophos 4.05.0 05.22.2006 no virus found
Symantec 8.0 05.22.2006 no virus found
TheHacker 5.9.8.146 05.22.2006 no virus found
UNA 1.83 05.22.2006 TrojanDownloader.Win32.Agent
VBA32 3.11.0 05.22.2006 no virus found

Complete scanning result of "hopebold.exe", received in VirusTotal at 05.22.2006, 22:06:50 (CET).

Antivirus Version Update Result
AntiVir 6.34.1.27 05.22.2006 Heuristic/Crypted
Authentium 4.93.8 05.22.2006 no virus found
Avast 4.6.695.0 05.22.2006 Win32:Swizzor-gen
AVG 386 05.22.2006 no virus found
BitDefender 7.2 05.22.2006 no virus found
CAT-QuickHeal 8.00 05.21.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 05.22.2006 no virus found
DrWeb 4.33 05.22.2006 no virus found
eTrust-InoculateIT 23.72.14 05.21.2006 no virus found
eTrust-Vet 12.4.2221 05.22.2006 no virus found
Ewido 3.5 05.22.2006 no virus found
Fortinet 2.77.0.0 05.22.2006 suspicious
F-Prot 3.16c 05.22.2006 no virus found
Ikarus 0.2.65.0 05.22.2006 no virus found
Kaspersky 4.0.2.24 05.22.2006 no virus found
McAfee 4767 05.22.2006 no virus found
Microsoft 1.1440 05.22.2006 no virus found
NOD32v2 1.1553 05.22.2006 a variant of Win32/TrojanDownloader.Swizzor
Norman 5.90.17 05.22.2006 no virus found
Panda 9.0.0.4 05.22.2006 Adware/Lop
Sophos 4.05.0 05.22.2006 no virus found
Symantec 8.0 05.22.2006 no virus found
TheHacker 5.9.8.146 05.22.2006 no virus found
UNA 1.83 05.22.2006 no virus found
VBA32 3.11.0 05.22.2006 no virus found

C:\WINDOWS\xfsqdenm.dll

Antivirus Version Update Result
AntiVir 6.34.1.32 05.25.2006 ADSPY/BookedSpace.G.4
Avast 4.6.695.0 05.24.2006 Win32:Startpage-175
AVG 386 05.25.2006 Adware Generic.MDE
DrWeb 4.33 05.25.2006 Adware.Bkspace
Ewido 3.5 05.25.2006 Adware.BookedSpace
Ikarus 0.2.65.0 05.24.2006 AdWare.BookedSpace.G
Kaspersky 4.0.2.24 05.25.2006 not-a-virus:AdWare.Win32.BookedSpace.g
McAfee 4770 05.25.2006 potentially unwanted program Adware-BkdSpace
Norman 5.90.17 05.24.2006 W32/BookedSpace.S
Panda 9.0.0.4 05.25.2006 Adware/BookedSpace
UNA 1.83 05.24.2006 Adware.BookedSpace

Aditional Information
File size: 537273 bytes
MD5: 742e4373b3611f8e9076482f34ac2bf4
SHA1: be8d9139ea881a0facf550d3d13083e64da18bdd

C:\WINDOWS\yzltfjsf.dll

Antivirus Version Update Result
AntiVir 6.34.1.32 05.25.2006 ADSPY/BookedSpace.G.4
Avast 4.6.695.0 05.24.2006 Win32:Startpage-175
AVG 386 05.25.2006 Adware Generic.MDE
DrWeb 4.33 05.25.2006 Adware.Bkspace
Ewido 3.5 05.25.2006 Adware.BookedSpace
Ikarus 0.2.65.0 05.24.2006 AdWare.BookedSpace.G
Kaspersky 4.0.2.24 05.25.2006 not-a-virus:AdWare.Win32.BookedSpace.g
McAfee 4770 05.25.2006 potentially unwanted program Adware-BkdSpace
Norman 5.90.17 05.24.2006 W32/BookedSpace.S
Panda 9.0.0.4 05.25.2006 Adware/BookedSpace
UNA 1.83 05.24.2006 Adware.BookedSpace

Aditional Information
File size: 562848 bytes
MD5: f9ca0f3257707e99e93fd907682961f0
SHA1: cde703a9a174c4f9f3e69a8a39d55c2eeb6db143

C:\Dokumente und Einstellungen\Alex\Lokale Einstellungen\Temp\Tspd.exe

Antivirus Version Update Result
AntiVir 6.34.1.32 05.25.2006 DR/Cmapp.A.1
BitDefender 7.2 05.25.2006 Dropped:Adware.Agent.E
DrWeb 4.33 05.25.2006 Adware.WildMedia
Fortinet 2.77.0.0 05.24.2006 Adware/Agent
Kaspersky 4.0.2.24 05.25.2006 not-a-virus:AdWare.Win32.Agent.e
Norman 5.90.17 05.24.2006 W32/Agent.ABLB.dropper
Panda 9.0.0.4 05.25.2006 Adware/NewAds
Symantec 8.0 05.25.2006 Trojan.Cmapp

Aditional Information
File size: 66817 bytes
MD5: 36ead56ebdb0655df8aeeef4e561530d
SHA1: f9f4ec6cf1381dd229e33ce4b5809177846c22e3

C:\Dokumente und Einstellungen\Alex\Lokale Einstellungen\Temp\sdexe.exe

Antivirus Version Update Result
AntiVir 6.34.1.32 05.25.2006 TR/Dldr.PurityScan.CL.3
Avast 4.6.695.0 05.24.2006 Win32urityScan-P
AVG 386 05.25.2006 Downloader.Generic.ZMJ
DrWeb 4.33 05.25.2006 Trojan.PurityAd
eTrust-InoculateIT 23.72.17 05.25.2006 Win32/Clspring.Variant!Trojan
Ewido 3.5 05.25.2006 Downloader.PurityScan.cl
Fortinet 2.77.0.0 05.24.2006 W32/EV!tr.dldr
Ikarus 0.2.65.0 05.24.2006 Trojan-Downloader.Win32.PurityScan.cl
Kaspersky 4.0.2.24 05.25.2006 Trojan-Downloader.Win32.PurityScan.cl
McAfee 4770 05.25.2006 Downloader-EV
NOD32v2 1.1558 05.25.2006 probably a variant of Win32/Adware.MediaTickets
Norman 5.90.17 05.24.2006 W32/PurityScan.VP
Panda 9.0.0.4 05.25.2006 Adware/PurityScan
UNA 1.83 05.24.2006 TrojanDownloader.Win32.PurityScan

Aditional Information
File size: 71168 bytes
MD5: 998638b9e8af170f95dc2b124c294266
SHA1: 82e328e70e888a6d31564da9493956abdf18f499

C:\Dokumente und Einstellungen\Alex\Lokale Einstellungen\Temp\contexapp.exe

Antivirus Version Update Result
BitDefender 7.2 05.25.2006 Dropped:Adware.Casclient.G
DrWeb 4.33 05.25.2006 Adware.Casclient
Fortinet 2.77.0.0 05.24.2006 Adware/CasClient
Kaspersky 4.0.2.24 05.25.2006 not-a-virus:AdWare.Win32.CASClient.g
NOD32v2 1.1558 05.25.2006 Win32/Adware.CASClient
Norman 5.90.17 05.24.2006 W32/CASClient.W.dropper

Aditional Information
File size: 236560 bytes
MD5: 8829b17f0320a29ba99de3e38fbc0a95
SHA1: 1dff05667b8e3e3a8aaf3e3c2a448cd0e9128b3e

C:\Dokumente und Einstellungen\Alex\Lokale Einstellungen\Temp\minisetup2.exe

Antivirus Version Update Result
BitDefender 7.2 05.25.2006 Trojan.Agent.LM
DrWeb 4.33 05.25.2006 Adware.FContext
Fortinet 2.77.0.0 05.24.2006 Adware/CasClient
Kaspersky 4.0.2.24 05.25.2006 not-a-virus:AdWare.Win32.CASClient.l
Panda 9.0.0.4 05.25.2006 Adware/FCHelp

Aditional Information
File size: 156063 bytes
MD5: 80163082bd473693b3022753b5218b5a
SHA1: 022c088f9ff0e62c9c244d6b2f61329651e6692b

C:\Dokumente und Einstellungen\Alex\Lokale Einstellungen\Temp\minisetup1.exe

Antivirus Version Update Result
BitDefender 7.2 05.25.2006 Trojan.Agent.LM
DrWeb 4.33 05.25.2006 Adware.FContext
Fortinet 2.77.0.0 05.24.2006 Adware/CasClient
Kaspersky 4.0.2.24 05.25.2006 not-a-virus:AdWare.Win32.CASClient.l
Norman 5.90.17 05.24.2006 W32/CASClient.Y.dropper
Panda 9.0.0.4 05.25.2006 Adware/Dyfuca

Aditional Information
File size: 174667 bytes
MD5: f2bcf37de4a32b50308627706fc65b4e
SHA1: 24f1cd006381858254d0a49705b621e920f74e59

C:\Dokumente und Einstellungen\Alex\Lokale Einstellungen\Temp\JLDist.exe

Antivirus Version Update Result
AntiVir 6.34.1.32 05.25.2006 DR/Clicker.Small.G.5
BitDefender 7.2 05.25.2006 Dropped:Trojan.Clicker.Small.G
DrWeb 4.33 05.25.2006 Adware.Dh
eTrust-InoculateIT 23.72.17 05.25.2006 no virus found
Fortinet 2.77.0.0 05.24.2006 Adware/Small
Kaspersky 4.0.2.24 05.25.2006 Trojan-Clicker.Win32.Small.jf
McAfee 4770 05.25.2006 Zquest
NOD32v2 1.1558 05.25.2006 Win32/TrojanClicker.Small.JF
Norman 5.90.17 05.24.2006 W32/Agent.NMH.dropper
Panda 9.0.0.4 05.25.2006 Adware/Deskwizz
Sophos 4.05.0 05.25.2006 Troj/Dloadr-NQ

Aditional Information
File size: 38035 bytes
MD5: f664c5520dabbc68521eca7fd615e8f6
SHA1: a086ccb604fa860b10321d24318ea360426e7c58

C:\Dokumente und Einstellungen\Alex\Lokale Einstellungen\Temp\Tspd.dll

Antivirus Version Update Result
AntiVir 6.34.1.32 05.25.2006 ADSPY/Agent.E
AVG 386 05.25.2006 Adware Generic.NFF
BitDefender 7.2 05.25.2006 Adware.Agent.E
DrWeb 4.33 05.25.2006 Adware.WildMedia
Ewido 3.5 05.25.2006 Adware.Agent
Fortinet 2.77.0.0 05.24.2006 Adware/Agent
Ikarus 0.2.65.0 05.24.2006 AdWare.Agent.E
Kaspersky 4.0.2.24 05.25.2006 not-a-virus:AdWare.Win32.Agent.e
McAfee 4770 05.25.2006 potentially unwanted program Adware-CasClient
Norman 5.90.17 05.24.2006 W32/Agent.ABLB
Panda 9.0.0.4 05.25.2006 Adware/NewAds
Symantec 8.0 05.25.2006 Trojan.Cmapp
TheHacker 5.9.8.147 05.24.2006 Adware/Agent.e
UNA 1.83 05.24.2006 Adware.Agent


Aditional Information
File size: 69632 bytes
MD5: f0fb7af63b0cea31027b5e01a717c546

STATUS: FINISHEDComplete scanning result of "vbsys2.dll", received in VirusTotal at 05.25.2006, 23:17:15 (CET).

Antivirus Version Update Result

AntiVir 6.34.1.32 05.25.2006 TR/Click.Agent.AC
Authentium 4.93.8 05.25.2006 W32/Downloader.YKO
AVG 386 05.25.2006 Clicker.CAU
DrWeb 4.33 05.25.2006 Trojan.Click.1140
eTrust-Vet 12.6.2227 05.25.2006 Win32/Pomelo!generic
Ewido 3.5 05.25.2006 Hijacker.Small
Fortinet 2.77.0.0 05.24.2006 Adware/Agent
F-Prot 3.16c 05.25.2006 security risk named W32/Downloader.YKO
Kaspersky 4.0.2.24 05.25.2006 Trojan-Clicker.Win32.Agent.ac
Norman 5.90.17 05.24.2006 W32/Agent.AAMZ
Panda 9.0.0.4 05.25.2006 Adware/PurityScan
UNA 1.83 05.24.2006 TrojanClicker.Win32.Agent

Aditional Information
File size: 90112 bytes
MD5: 1d7583679957ce77207774def687e1e9
SHA1: eb00ccb938b94bd4fc29b004404a3e87613d2556