Исследование антивирусов 2

[HATTIFNATTOR]

This is a report processed by VirusTotal on 08/29/2005 at 19:43:24 (CET) after scanning the file "updatecfg.exe" file.

Antivirus Version Update Result
AntiVir 6.31.1.0 08.29.2005 Worm/Rbot.103459
Avast 4.6.695.0 08.29.2005 no virus found
AVG 718 08.29.2005 IRC/BackDoor.SdBot.HIY
Avira 6.31.1.0 08.29.2005 Worm/Rbot.103459
BitDefender 7.0 08.29.2005 GenPack:Backdoor.RBot.7CF6C04B
CAT-QuickHeal 8.00 08.28.2005 (Suspicious) - DNAScan
ClamAV devel-20050725 08.29.2005 Worm.Mytob.GH
DrWeb 4.32b 08.29.2005 no virus found
eTrust-Iris 7.1.194.0 08.28.2005 no virus found
eTrust-Vet 11.9.1.0 08.29.2005 no virus found
Fortinet 2.41.0.0 08.27.2005 W32/RBot-bdr
F-Prot 3.16c 08.29.2005 no virus found
Ikarus 0.2.59.0 08.29.2005 Backdoor.Win32.Rbot.Gen
Kaspersky 4.0.2.24 08.29.2005 Backdoor.Win32.Rbot.gen
McAfee 4569 08.29.2005 no virus found
NOD32v2 1.1204 08.29.2005 a variant of Win32/Rbot
Norman 5.70.10 08.29.2005 W32/Suspicious_M.gen
Panda 8.02.00 08.29.2005 no virus found
Sophos 3.97.0 08.29.2005 no virus found
Symantec 8.0 08.28.2005 W32.Spybot.Worm
TheHacker 5.8.2.096 08.28.2005 no virus found
VBA32 3.10.4 08.29.2005 Backdoor.Win32.Rbot.gen

[HATTIFNATTOR]

This is a report processed by VirusTotal on 08/29/2005 at 19:50:59 (CET) after scanning the file "Syg4t3Gtr.exe" file.

Antivirus Version Update Result
AntiVir 6.31.1.0 08.29.2005 no virus found
Avast 4.6.695.0 08.29.2005 no virus found
AVG 718 08.29.2005 no virus found
Avira 6.31.1.0 08.29.2005 no virus found
BitDefender 7.0 08.29.2005 Backdoor.RBot.55ECC44A
CAT-QuickHeal 8.00 08.28.2005 (Suspicious) - DNAScan
ClamAV devel-20050725 08.29.2005 no virus found
DrWeb 4.32b 08.29.2005 Win32.HLLW.MyBot.based
eTrust-Iris 7.1.194.0 08.28.2005 Win32/SDBot!Backdoor!Server.Vari
eTrust-Vet 11.9.1.0 08.29.2005 no virus found
Fortinet 2.41.0.0 08.27.2005 W32/NewThreat!Morphine
F-Prot 3.16c 08.29.2005 no virus found
Ikarus 0.2.59.0 08.29.2005 no virus found
Kaspersky 4.0.2.24 08.29.2005 Backdoor.Win32.Rbot.gen
McAfee 4569 08.29.2005 New Malware.h
NOD32v2 1.1204 08.29.2005 a variant of Win32/Rbot
Norman 5.70.10 08.29.2005 W32/Backdoor
Panda 8.02.00 08.29.2005 W32/Gaobot.gen.worm
Sophos 3.97.0 08.29.2005 W32/Rbot-Fam
Symantec 8.0 08.28.2005 no virus found
TheHacker 5.8.2.096 08.28.2005 no virus found
VBA32 3.10.4 08.29.2005 suspected of Worm.Mytob.9

[Geser]

This is a report processed by VirusTotal on 09/03/2005 at 22:21:02 (CET) after scanning the file "xpjava.exe" file.
Antivirus Version Update Result
AntiVir 6.31.1.0 09.02.2005 no virus found
Avast 4.6.695.0 09.02.2005 no virus found
AVG 718 08.31.2005 no virus found
Avira 6.31.1.0 09.02.2005 no virus found
BitDefender 7.0 09.02.2005 Backdoor.RBot.9777E0B3
CAT-QuickHeal 8.00 09.03.2005 Backdoor.Rbot.gen
ClamAV devel-20050725 09.03.2005 no virus found
DrWeb 4.32b 09.02.2005 Win32.HLLW.MyBot
eTrust-Iris 7.1.194.0 09.02.2005 no virus found
eTrust-Vet 11.9.1.0 09.02.2005 no virus found
Fortinet 2.41.0.0 09.03.2005 W32/RBot-bdr
F-Prot 3.16c 09.02.2005 no virus found
Ikarus 0.2.59.0 09.02.2005 Backdoor.Win32.SdBot.AAD
Kaspersky 4.0.2.24 09.03.2005 Backdoor.Win32.Rbot.gen
McAfee 4573 09.02.2005 W32/Sdbot.worm.gen.bx
NOD32v2 1.1208 09.02.2005 a variant of Win32/Rbot
Norman 5.70.10 09.02.2005 no virus found
Panda 8.02.00 09.03.2005 no virus found
Sophos 3.97.0 09.03.2005 W32/Rbot-Fam
Symantec 8.0 09.03.2005 W32.Spybot.Worm
TheHacker 5.8.2.099 09.02.2005 no virus found
VBA32 3.10.4 09.02.2005 Backdoor.Win32.Rbot.gen

[Geser]

This is a report processed by VirusTotal on 09/08/2005 at 20:05:20 (CET) after scanning the file "cracker.exe" file.
Antivirus Version Update Result
AntiVir 6.31.1.0 09.08.2005 TR/Dldr.IstBar.IT
Avast 4.6.695.0 09.07.2005 Win32:IstBar-AJ
AVG 718 09.07.2005 no virus found
Avira 6.31.1.0 09.08.2005 TR/Dldr.IstBar.IT
BitDefender 7.0 09.02.2005 no virus found
CAT-QuickHeal 8.00 09.08.2005 TrojanDownloader.IstBar.ja
ClamAV devel-20050725 09.07.2005 no virus found
DrWeb 4.32b 09.08.2005 no virus found
eTrust-Iris 7.1.194.0 09.07.2005 no virus found
eTrust-Vet 11.9.1.0 09.08.2005 no virus found
Fortinet 2.41.0.0 09.07.2005 W32/IstBar.JA-dldr
F-Prot 3.16c 09.07.2005 no virus found
Ikarus 0.2.59.0 09.08.2005 Trojan-Downloader.Win32.IstBar.JA
Kaspersky 4.0.2.24 09.08.2005 Trojan-Downloader.Win32.IstBar.ja
McAfee 4577 09.08.2005 no virus found
NOD32v2 1.1212 09.08.2005 no virus found
Norman 5.70.10 09.08.2005 no virus found
Panda 8.02.00 09.08.2005 no virus found
Sophos 3.97.0 09.08.2005 no virus found
Symantec 8.0 09.08.2005 no virus found
TheHacker 5.8.2.102 09.08.2005 Trojan/Downloader.IstBar.ja
VBA32 3.10.4 09.08.2005 no virus found

[Geser]

This is a report processed by VirusTotal on 09/09/2005 at 08:39:28 (CET) after scanning the file "weq.exe" file.
Antivirus Version Update Result
AntiVir 6.31.1.0 09.08.2005 TR/Dldr.Lastad.R
Avast 4.6.695.0 09.07.2005 Win32:Adan-130
AVG 718 09.07.2005 Downloader.Generic.CFM
Avira 6.31.1.0 09.08.2005 TR/Dldr.Lastad.R
BitDefender 7.0 09.02.2005 no virus found
CAT-QuickHeal 8.00 09.08.2005 TrojanDownloader.Lastad.r
ClamAV devel-20050725 09.09.2005 no virus found
DrWeb 4.32b 09.08.2005 no virus found
eTrust-Iris 7.1.194.0 09.08.2005 no virus found
eTrust-Vet 11.9.1.0 09.08.2005 no virus found
Fortinet 2.41.0.0 09.07.2005 W32/Lastad.R-dr
F-Prot 3.16c 09.08.2005 security risk named W32/Downloader.GMN
Ikarus 0.2.59.0 09.08.2005 no virus found
Kaspersky 4.0.2.24 09.09.2005 Trojan-Downloader.Win32.Lastad.r
McAfee 4577 09.08.2005 QLowZones-27
NOD32v2 1.1212 09.08.2005 Win32/TrojanDownloader.Lastad
Norman 5.70.10 09.08.2005 no virus found
Panda 8.02.00 09.08.2005 Adware/Ndware
Sophos 3.97.0 09.08.2005 no virus found
Symantec 8.0 09.09.2005 no virus found
TheHacker 5.8.2.102 09.08.2005 Trojan/Downloader.Lastad.r
VBA32 3.10.4 09.08.2005 Trojan-Downloader.Win32.Lastad.r

[Grey]

This is a report processed by VirusTotal on 09/16/2005 at 09:33:53 (CET) after scanning the file "tb_keygen.zip" file.

Antivirus Version Update Result
AntiVir 6.32.0.3 09.15.2005 PCK/MEW
Avast 4.6.695.0 09.14.2005 no virus found
AVG 718 09.15.2005 no virus found
Avira 6.32.0.3 09.15.2005 PCK/MEW
BitDefender 7.2 09.16.2005 no virus found
CAT-QuickHeal 8.00 09.15.2005 (Suspicious) - DNAScan
ClamAV devel-20050725 09.14.2005 Worm.Mytob.GH
DrWeb 4.32b 09.16.2005 no virus found
eTrust-Iris 7.1.194.0 09.16.2005 no virus found
eTrust-Vet 11.9.1.0 09.16.2005 no virus found
Fortinet 2.41.0.0 09.07.2005 suspicious
F-Prot 3.16c 09.15.2005 no virus found
Ikarus 0.2.59.0 09.15.2005 Backdoor.Win32.SdBot.Gen
Kaspersky 4.0.2.24 09.16.2005 no virus found
McAfee 4582 09.15.2005 no virus found
NOD32v2 1.1218 09.15.2005 no virus found
Norman 5.70.10 09.15.2005 W32/Suspicious_M.gen
Panda 8.02.00 09.15.2005 no virus found
Sophos 3.97.0 09.16.2005 no virus found
Symantec 8.0 09.15.2005 no virus found
TheHacker 5.8.2.106 09.14.2005 no virus found
VBA32 3.10.4 09.15.2005 suspected of Net-Worm.Mybot.10

[Shu_b]

Прошло почти 4 часа... (46 пост)
This is a report processed by VirusTotal on 09/16/2005 at 13:22:32 (CET) after scanning the file "tb_keygen.exe" file.

Antivirus Version Update Result
AntiVir 6.32.0.3 09.16.2005 PCK/MEW
Avast 4.6.695.0 09.16.2005 no virus found
AVG 718 09.15.2005 no virus found
Avira 6.32.0.3 09.16.2005 PCK/MEW
BitDefender 7.2 09.16.2005 no virus found
CAT-QuickHeal 8.00 09.15.2005 (Suspicious) - DNAScan
ClamAV devel-20050725 09.16.2005 Worm.Mytob.GH
DrWeb 4.32b 09.16.2005 Trojan.PWS.LDPinch.506
eTrust-Iris 7.1.194.0 09.16.2005 no virus found
eTrust-Vet 11.9.1.0 09.16.2005 no virus found
Fortinet 2.41.0.0 09.07.2005 suspicious
F-Prot 3.16c 09.16.2005 no virus found
Ikarus 0.2.59.0 09.16.2005 Backdoor.Win32.SdBot.Gen
Kaspersky 4.0.2.24 09.16.2005 Trojan-PSW.Win32.PdPinch.ad
McAfee 4582 09.15.2005 no virus found
NOD32v2 1.1218 09.15.2005 no virus found
Norman 5.70.10 09.16.2005 W32/Suspicious_M.gen
Panda 8.02.00 09.16.2005 no virus found
Sophos 3.97.0 09.16.2005 no virus found
Symantec 8.0 09.15.2005 no virus found
TheHacker 5.8.2.106 09.14.2005 no virus found
VBA32 3.10.4 09.15.2005 suspected of Net-Worm.Mybot.10


Прошло почти два дня... (в разделе помогите)
This is a report processed by VirusTotal on 09/16/2005 at 13:19:21 (CET) after scanning the file "zhgwkcamb.exe" file.

Antivirus Version Update Result
AntiVir 6.32.0.3 09.16.2005 Worm/Rbot.abl
Avast 4.6.695.0 09.14.2005 no virus found
AVG 718 09.15.2005 no virus found
Avira 6.32.0.3 09.16.2005 Worm/Rbot.abl
BitDefender 7.2 09.16.2005 Backdoor.Rbot.ABL
CAT-QuickHeal 8.00 09.15.2005 Backdoor.Rbot.abl
ClamAV devel-20050725 09.16.2005 no virus found
DrWeb 4.32b 09.16.2005 Win32.HLLW.MyBot
eTrust-Iris 7.1.194.0 09.16.2005 no virus found
eTrust-Vet 11.9.1.0 09.16.2005 no virus found
Fortinet 2.41.0.0 09.07.2005 no virus found
F-Prot 3.16c 09.16.2005 no virus found
Ikarus 0.2.59.0 09.16.2005 no virus found
Kaspersky 4.0.2.24 09.16.2005 Backdoor.Win32.Rbot.abl
McAfee 4582 09.15.2005 no virus found
NOD32v2 1.1218 09.15.2005 no virus found
Norman 5.70.10 09.16.2005 no virus found
Panda 8.02.00 09.16.2005 no virus found
Sophos 3.97.0 09.16.2005 no virus found
Symantec 8.0 09.15.2005 no virus found
TheHacker 5.8.2.106 09.14.2005 no virus found
VBA32 3.10.4 09.15.2005 Backdoor.Win32.Rbot.abl

[Geser]

Ну, видно БитДефендер разбирает файлы которые им пересылаются от нас

[Iceman]

А все остальные? ;-))). Раз проверка через форму перенаправляет для всех производителей, значит, детектировать должны все.

[Shu_b]

Разбираем *.CHM (этот экземпляр) virusscan.jotti.org

File: x.chm
Status: INFECTED/MALWARE
MD5 ef27e1186ed2ef9b6866443cc11785ac
Packers detected: FSG
Scanner results
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Exploit.Html.Codebase.Exec.Gen, BehavesLike:Trojan.Downloader (probable variant)
ClamAV Found Exploit.HTML.Codebase.Exec.gen-2
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found Trojan-Downloader.Win32.Apher.gen, Exploit.HTML.ObjData
NOD32 Found probably unknown NewHeur_PE (probable variant)
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found Win32.Trojan.Downloader (hххp://***/openpass.exe) (probable variant)

[azza]

This is a report processed by VirusTotal on 09/19/2005 at 18:07:45 (CET) after scanning the file "WIWSHOST.zip" file.
Antivirus Version Update Result
AntiVir 6.32.0.3 09.19.2005 Worm/Bagle.CQ.1
Avast 4.6.695.0 09.19.2005 no virus found
AVG 718 09.19.2005 no virus found
Avira 6.32.0.3 09.19.2005 Worm/Bagle.CQ.1
BitDefender 7.2 09.19.2005 Win32.Bagle.CJ@mm
CAT-QuickHeal 8.00 09.19.2005 I-Worm.Bagle.EC1B
ClamAV devel-20050917 09.19.2005 no virus found
DrWeb 4.32b 09.19.2005 Win32.HLLM.Beagle.36864
eTrust-Iris 7.1.194.0 09.18.2005 no virus found
eTrust-Vet 11.9.1.0 09.19.2005 no virus found
Fortinet 2.41.0.0 09.07.2005 suspicious
F-Prot 3.16c 09.19.2005 security risk named W32/Mitglieder.FE
Ikarus 0.2.59.0 09.19.2005 no virus found
Kaspersky 4.0.2.24 09.19.2005 Email-Worm.Win32.Bagle.cy
McAfee 4583 09.16.2005 no virus found
NOD32v2 1.1220 09.19.2005 Win32/Bagle.BI
Norman 5.70.10 09.19.2005 no virus found
Panda 8.02.00 09.19.2005 no virus found
Sophos 3.97.0 09.19.2005 Troj/BagleDl-U
Symantec 8.0 09.18.2005 no virus found
TheHacker 5.8.2.109 09.19.2005 no virus found
VBA32 3.10.4 09.19.2005 no virus found

[Sanja]

This is a report processed by VirusTotal on 09/20/2005 at 19:02:40 (CET) after scanning the file "price_09.zip" file.
Antivirus Version Update Result
AntiVir 6.32.0.6 09.20.2005 TR/Bagle.CW
Avast 4.6.695.0 09.20.2005 Win32:Beagle-EC
AVG 718 09.19.2005 I-Worm/Bagle
Avira 6.32.0.6 09.20.2005 TR/Bagle.CW
BitDefender 7.2 09.20.2005 Win32.Bagle.DD@mm
CAT-QuickHeal 8.00 09.19.2005 (Suspicious) - DNAScan
ClamAV devel-20050917 09.20.2005 Worm.Bagle.Gen-3
DrWeb 4.32b 09.20.2005 Win32.HLLM.Beagle.35146
eTrust-Iris 7.1.194.0 09.20.2005 no virus found
eTrust-Vet 11.9.1.0 09.20.2005 no virus found
Fortinet 2.41.0.0 09.07.2005 suspicious
F-Prot 3.16c 09.20.2005 security risk named W32/Mitglieder.FK
Ikarus 0.2.59.0 09.20.2005 no virus found
Kaspersky 4.0.2.24 09.20.2005 Email-Worm.Win32.Bagle.dg
McAfee 4586 09.20.2005 W32/Bagle.gen
NOD32v2 1.1224 09.20.2005 no virus found
Norman 5.70.10 09.20.2005 no virus found
Panda 8.02.00 09.20.2005 no virus found
Sophos 3.97.0 09.20.2005 Troj/BagleDl-U
Symantec 8.0 09.19.2005 no virus found
TheHacker 5.8.2.111 09.20.2005 W32/Bagle.dg
VBA32 3.10.4 09.20.2005 no virus found

[Grey]

This is a report processed by VirusTotal on 09/21/2005 at 11:39:58 (CET) after scanning the file "avz3.zip" file.

Antivirus Version Update Result
AntiVir 6.32.0.6 09.21.2005 no virus found
Avast 4.6.695.0 09.20.2005 no virus found
AVG 718 09.19.2005 no virus found
Avira 6.32.0.6 09.21.2005 no virus found
BitDefender 7.2 09.21.2005 no virus found
CAT-QuickHeal 8.00 09.21.2005 no virus found
ClamAV devel-20050917 09.21.2005 no virus found
DrWeb 4.32b 09.20.2005 no virus found
eTrust-Iris 7.1.194.0 09.20.2005 no virus found
eTrust-Vet 11.9.1.0 09.21.2005 no virus found
Fortinet 2.41.0.0 09.07.2005 no virus found
F-Prot 3.16c 09.21.2005 no virus found
Ikarus 0.2.59.0 09.21.2005 no virus found
Kaspersky 4.0.2.24 09.21.2005 no virus found
McAfee 4586 09.20.2005 no virus found
NOD32v2 1.1228 09.21.2005 no virus found
Norman 5.70.10 09.20.2005 no virus found
Panda 8.02.00 09.21.2005 no virus found
Sophos 3.97.0 09.21.2005 no virus found
Symantec 8.0 09.21.2005 no virus found
TheHacker 5.8.2.113 09.21.2005 no virus found
VBA32 3.10.4 09.21.2005 MalwareScope.Trojan-Spy.Banker.128

AVZ3.zip - это вчерашняя версия AVZ от Олега Зайцева.

[RiC]

Jotty -
File: price_new.zip
Status: INFECTED/MALWARE
MD5 a27110ff7ef6525565cbc9d23f6f9e9b
Packers detected:
-
Scanner results
AntiVir Found Trojan/Bagle.CU
ArcaVir Found Worm.Beagle.De
Avast Found Win32:Beagle-DY
AVG Antivirus Found I-Worm/Bagle
BitDefender Found Win32.Bagle.CZ@mm
ClamAV Found Worm.Bagle.BR-1
Dr.Web Found Win32.HLLM.Beagle.35146
F-Prot Antivirus Found W32/Mitglieder.FI
Fortinet Found W32/Bagle.DA-mm
Kaspersky Anti-Virus Found Email-Worm.Win32.Bagle.de
NOD32 Found nothing
Norman Virus Control Found W32/Bagle.DR
UNA Found nothing
VBA32 Found Email-Worm.Win32.Bagle.de

Да от NOD`a я не ожидал

PS: Уже ловит.

[Geser]

AntiVir Found Backdoor-Server/HacDef.BO
ArcaVir Found Trojan.Hacdef.Bo
Avast Found nothing
AVG Antivirus Found BackDoor.Generic.NHO
BitDefender Found Backdoor.Hacdef.BO
ClamAV Found nothing
Dr.Web Found BackDoor.HackDef.138
F-Prot Antivirus Found nothing
Fortinet Found W32/HacDef.BO-bdr
Kaspersky Anti-Virus Found Backdoor.Win32.HacDef.bo
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found Backdoor.Win32.HacDef.bo

This is a report processed by VirusTotal on 09/30/2005 at 12:28:02 (CET) after scanning the file "mxdefdrv.sys" file.
Antivirus Version Update Result
AntiVir 6.32.0.6 09.30.2005 BDS/HacDef.BO
Avast 4.6.695.0 09.29.2005 no virus found
AVG 718 09.29.2005 BackDoor.Generic.NHO
Avira 6.32.0.6 09.30.2005 BDS/HacDef.BO
BitDefender 7.2 09.30.2005 Backdoor.Hacdef.BO
CAT-QuickHeal 8.00 09.29.2005 Backdoor.HacDef.bo
ClamAV devel-20050917 09.29.2005 no virus found
DrWeb 4.32b 09.30.2005 BackDoor.HackDef.138
eTrust-Iris 7.1.194.0 09.29.2005 no virus found
eTrust-Vet 11.9.1.0 09.30.2005 no virus found
Fortinet 2.48.0.0 09.30.2005 W32/HacDef.BO-bdr
F-Prot 3.16c 09.29.2005 no virus found
Ikarus 0.2.59.0 09.29.2005 no virus found
Kaspersky 4.0.2.24 09.30.2005 Backdoor.Win32.HacDef.bo
McAfee 4593 09.29.2005 no virus found
NOD32v2 1.1237 09.29.2005 no virus found
Norman 5.70.10 09.29.2005 no virus found
Panda 8.02.00 09.29.2005 Bck/HacDef.DT
Sophos 3.98.0 09.30.2005 Troj/HacDef-Gen
Symantec 8.0 09.29.2005 no virus found
TheHacker 5.8.2.116 09.28.2005 no virus found
VBA32 3.10.4 09.29.2005 Backdoor.Win32.HacDef.bo

[Geser]

AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Adware.HideOne.ABM
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found nothing

This is a report processed by VirusTotal on 09/30/2005 at 12:30:52 (CET) after scanning the file "bho.dll" file.
Antivirus Version Update Result
AntiVir 6.32.0.6 09.30.2005 no virus found
Avast 4.6.695.0 09.29.2005 no virus found
AVG 718 09.29.2005 no virus found
Avira 6.32.0.6 09.30.2005 no virus found
BitDefender 7.2 09.30.2005 Adware.HideOne.ABM
CAT-QuickHeal 8.00 09.29.2005 no virus found
ClamAV devel-20050917 09.29.2005 no virus found
DrWeb 4.32b 09.30.2005 no virus found
eTrust-Iris 7.1.194.0 09.29.2005 no virus found
eTrust-Vet 11.9.1.0 09.30.2005 no virus found
Fortinet 2.48.0.0 09.30.2005 no virus found
F-Prot 3.16c 09.29.2005 no virus found
Ikarus 0.2.59.0 09.29.2005 no virus found
Kaspersky 4.0.2.24 09.30.2005 no virus found
McAfee 4593 09.29.2005 no virus found
NOD32v2 1.1237 09.29.2005 no virus found
Norman 5.70.10 09.29.2005 no virus found
Panda 8.02.00 09.29.2005 no virus found
Sophos 3.98.0 09.30.2005 no virus found
Symantec 8.0 09.29.2005 no virus found
TheHacker 5.8.2.116 09.28.2005 no virus found
VBA32 3.10.4 09.29.2005 no virus found

[Geser]

AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found Toolbar/Mywebsearch
Kaspersky Anti-Virus Found not-a-virus:AdWare.Win32.MyWebSearch
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found AdWare.ToolBar.MyWebSearch

This is a report processed by VirusTotal on 09/30/2005 at 12:39:52 (CET) after scanning the file "eied_s7_c_7.exe" file.
Antivirus Version Update Result
AntiVir 6.32.0.6 09.30.2005 no virus found
Avast 4.6.695.0 09.29.2005 no virus found
AVG 718 09.29.2005 no virus found
Avira 6.32.0.6 09.30.2005 no virus found
BitDefender 7.2 09.30.2005 no virus found
CAT-QuickHeal 8.00 09.29.2005 TrojanDownloader.Mediket.bc
ClamAV devel-20050917 09.29.2005 no virus found
DrWeb 4.32b 09.30.2005 Trojan.DownLoader.4447
eTrust-Iris 7.1.194.0 09.29.2005 no virus found
eTrust-Vet 11.9.1.0 09.30.2005 no virus found
Fortinet 2.48.0.0 09.30.2005 W32/Mediket.BC-tr
F-Prot 3.16c 09.29.2005 no virus found
Ikarus 0.2.59.0 09.29.2005 no virus found
Kaspersky 4.0.2.24 09.30.2005 Trojan-Downloader.Win32.Mediket.bg
McAfee 4593 09.29.2005 Generic Downloader.u
NOD32v2 1.1237 09.29.2005 a variant of Win32/TrojanDownloader.Mediket
Norman 5.70.10 09.29.2005 no virus found
Panda 8.02.00 09.29.2005 Adware/MediaTickets
Sophos 3.98.0 09.30.2005 no virus found
Symantec 8.0 09.29.2005 no virus found
TheHacker 5.8.2.116 09.28.2005 no virus found
VBA32 3.10.4 09.29.2005 suspected of Trojan-Downloader.Win32.Mediket.1

AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found W32/Mediket.BC-tr
Kaspersky Anti-Virus Found Trojan-Downloader.Win32.Mediket.bg
NOD32 Found a variant of Win32/TrojanDownloader.Mediket
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found Trojan-Downloader.Win32.Mediket.1 (probable variant)

[Geser]

This is a report processed by VirusTotal on 09/30/2005 at 12:46:35 (CET) after scanning the file "EGDACCESS_1064.dll" file.
Antivirus Version Update Result
AntiVir 6.32.0.6 09.30.2005 DIAL/302254
Avast 4.6.695.0 09.29.2005 no virus found
AVG 718 09.29.2005 Dialer.ANW
Avira 6.32.0.6 09.30.2005 DIAL/302254
BitDefender 7.2 09.30.2005 Dialer.BAX
CAT-QuickHeal 8.00 09.29.2005 PornDialer.InstantAccess.f (Not a Virus)
ClamAV devel-20050917 09.29.2005 Dialer-324
DrWeb 4.32b 09.30.2005 no virus found
eTrust-Iris 7.1.194.0 09.29.2005 no virus found
eTrust-Vet 11.9.1.0 09.30.2005 no virus found
Fortinet 2.48.0.0 09.30.2005 Dial/Generic
F-Prot 3.16c 09.29.2005 no virus found
Ikarus 0.2.59.0 09.29.2005 no virus found
Kaspersky 4.0.2.24 09.30.2005 not-a-virusorn-Dialer.Win32.InstantAccess.f
McAfee 4593 09.29.2005 potentially unwanted program Dialer-Generic
NOD32v2 1.1237 09.29.2005 probably a variant of Win32/Dialer.Egroup
Norman 5.70.10 09.29.2005 no virus found
Panda 8.02.00 09.29.2005 Dialer.DCT
Sophos 3.98.0 09.30.2005 no virus found
Symantec 8.0 09.29.2005 no virus found
TheHacker 5.8.2.116 09.28.2005 Trojan/Dialer.InstantAccess.f
VBA32 3.10.4 09.29.2005 Porn-Dialer.Win32.InstantAccess.f


AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found Dialer.ANW
BitDefender Found Dialer.BAX
ClamAV Found Dialer-324
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found Dial/Generic
Kaspersky Anti-Virus Found not-a-virusorn-Dialer.Win32.InstantAccess.f
NOD32 Found probably a variant of Win32/Dialer.Egroup application (probable variant)
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found Porn-Dialer.Win32.InstantAccess.f

AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found not-a-virus:AdWare.Win32.NaviPromo.c
NOD32 Found a variant of Win32/Adware.NaviPromo application
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found AdWare.Win32.NaviPromo.c

This is a report processed by VirusTotal on 09/30/2005 at 12:49:12 (CET) after scanning the file "zdemuqsc.exe" file.
Antivirus Version Update Result
AntiVir 6.32.0.6 09.30.2005 ADSPY/NaviPromo.C.41
Avast 4.6.695.0 09.29.2005 no virus found
AVG 718 09.29.2005 no virus found
Avira 6.32.0.6 09.30.2005 ADSPY/NaviPromo.C.41
BitDefender 7.2 09.30.2005 no virus found
CAT-QuickHeal 8.00 09.29.2005 (Suspicious) - DNAScan
ClamAV devel-20050917 09.29.2005 no virus found
DrWeb 4.32b 09.30.2005 no virus found
eTrust-Iris 7.1.194.0 09.29.2005 no virus found
eTrust-Vet 11.9.1.0 09.30.2005 no virus found
Fortinet 2.48.0.0 09.30.2005 suspicious
F-Prot 3.16c 09.29.2005 no virus found
Ikarus 0.2.59.0 09.29.2005 no virus found
Kaspersky 4.0.2.24 09.30.2005 not-a-virus:AdWare.Win32.NaviPromo.c
McAfee 4593 09.29.2005 no virus found
NOD32v2 1.1237 09.29.2005 a variant of Win32/Adware.NaviPromo
Norman 5.70.10 09.29.2005 no virus found
Panda 8.02.00 09.29.2005 Adware/NaviPromo
Sophos 3.98.0 09.30.2005 no virus found
Symantec 8.0 09.29.2005 no virus found
TheHacker 5.8.2.116 09.28.2005 no virus found
VBA32 3.10.4 09.29.2005 AdWare.Win32.NaviPromo.c

[Geser]

This is a report processed by VirusTotal on 09/30/2005 at 12:52:23 (CET) after scanning the file "avz00001.dta" file.
Antivirus Version Update Result
AntiVir 6.32.0.6 09.30.2005 TR/Rootkit.Agent.AB
Avast 4.6.695.0 09.29.2005 Win32:Trojano-2365
AVG 718 09.29.2005 no virus found
Avira 6.32.0.6 09.30.2005 TR/Rootkit.Agent.AB
BitDefender 7.2 09.30.2005 Trojan.Rootkit.Agent.AB
CAT-QuickHeal 8.00 09.29.2005 TrojanRootkit.Agent.ae
ClamAV devel-20050917 09.29.2005 no virus found
DrWeb 4.32b 09.30.2005 BackDoor.IRC.Sdbot.122
eTrust-Iris 7.1.194.0 09.29.2005 Win32/Efewe.H!Trojan
eTrust-Vet 11.9.1.0 09.30.2005 Win32.Efewe.H
Fortinet 2.48.0.0 09.30.2005 W32/Rootkit.AA-tr
F-Prot 3.16c 09.29.2005 security risk named W32/FUrootkit.F
Ikarus 0.2.59.0 09.29.2005 no virus found
Kaspersky 4.0.2.24 09.30.2005 Rootkit.Win32.Agent.ab
McAfee 4593 09.29.2005 FURootkit
NOD32v2 1.1237 09.29.2005 Win32/Rootkit.Agent.AB
Norman 5.70.10 09.29.2005 W32/Rootkit.B
Panda 8.02.00 09.29.2005 Hacktool/Rootkit.AG
Sophos 3.98.0 09.30.2005 Troj/RKFu-A
Symantec 8.0 09.29.2005 Hacktool.Rootkit
TheHacker 5.8.2.116 09.28.2005 no virus found
VBA32 3.10.4 09.29.2005 BackDoor.IRC.Sdbot.122


AntiVir Found nothing
ArcaVir Found nothing
Avast Found Win32:Trojano-2365
AVG Antivirus Found nothing
BitDefender Found Trojan.Rootkit.Agent.AB
ClamAV Found nothing
Dr.Web Found BackDoor.IRC.Sdbot.122
F-Prot Antivirus Found W32/FUrootkit.F
Fortinet Found W32/Rootkit.AA-tr
Kaspersky Anti-Virus Found Rootkit.Win32.Agent.ab
NOD32 Found Win32/Rootkit.Agent.AB
Norman Virus Control Found W32/Rootkit.B
UNA Found nothing
VBA32 Found BackDoor.IRC.Sdbot.122

[Grey]

This is a report processed by VirusTotal on 09/30/2005 at 14:27:12 (CET) after scanning the file "RemoveKAV.exe" file.

Antivirus Version Update Result
AntiVir 6.32.0.6 09.30.2005 no virus found
Avast 4.6.695.0 09.29.2005 no virus found
AVG 718 09.29.2005 no virus found
Avira 6.32.0.6 09.30.2005 no virus found
BitDefender 7.2 09.30.2005 no virus found
CAT-QuickHeal 8.00 09.30.2005 no virus found
ClamAV devel-20050917 09.29.2005 no virus found
DrWeb 4.32b 09.30.2005 Trojan.AVKill.123
eTrust-Iris 7.1.194.0 09.29.2005 no virus found
eTrust-Vet 11.9.1.0 09.30.2005 no virus found
Fortinet 2.48.0.0 09.30.2005 suspicious
F-Prot 3.16c 09.29.2005 no virus found
Ikarus 0.2.59.0 09.29.2005 no virus found
Kaspersky 4.0.2.24 09.30.2005 no virus found
McAfee 4593 09.29.2005 no virus found
NOD32v2 1.1237 09.29.2005 no virus found
Norman 5.70.10 09.29.2005 no virus found
Panda 8.02.00 09.30.2005 no virus found
Sophos 3.98.0 09.30.2005 no virus found
Symantec 8.0 09.29.2005 no virus found
TheHacker 5.8.2.116 09.28.2005 no virus found
VBA32 3.10.4 09.29.2005 no virus found

P.S. пароль на аттач virus.
RemoveKAV.exe - тулзень для нормального удаления Каспера.