Исследование антивирусов 7

**Erekle** · 10.02.2010, 03:39

Файл CodecPackage [synsql.exe] получен 2010.02.01 16:55:37 (UTC)
Результат: 7/40 (17.50%)

a-squared 4.5.0.50 2010.02.01 Trojan-Ransom.Win32.PornoBlocker!IK
AhnLab-V3 5.0.0.2 2010.02.01 -
AntiVir 7.9.1.154 2010.02.01 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2010.02.01 -
Authentium 5.2.0.5 2010.01.31 -
Avast 4.8.1351.0 2010.02.01 -
AVG 9.0.0.730 2010.02.01 -
BitDefender 7.2 2010.02.01 -
CAT-QuickHeal 10.00 2010.02.01 -
ClamAV 0.96.0.0-git 2010.02.01 -
Comodo 3783 2010.02.01 -
DrWeb 5.0.1.12222 2010.02.01 -
eSafe 7.0.17.0 2010.01.31 -
eTrust-Vet 35.2.7274 2010.02.01 -
F-Prot 4.5.1.85 2010.01.31 -
F-Secure 9.0.15370.0 2010.02.01 -
Fortinet 4.0.14.0 2010.02.01 -
GData 19 2010.02.01 -
Ikarus T3.1.1.80.0 2010.02.01 Trojan-Ransom.Win32.PornoBlocker
Jiangmin 13.0.900 2010.01.28 -
K7AntiVirus 7.10.960 2010.01.29 -
Kaspersky 7.0.0.125 2010.02.01 Trojan-Ransom.Win32.PornoBlocker.lg
McAfee 5879 2010.02.01 -
McAfee+Artemis 5879 2010.02.01 -
McAfee-GW-Edition 6.8.5 2010.02.01 Trojan.Dropper.Gen
Microsoft 1.5406 2010.02.01 -
NOD32 4824 2010.02.01 a variant of Win32/Injector.ATW
Norman 6.04.03 2010.01.31 -
nProtect 2009.1.8.0 2010.02.01 -
Panda 10.0.2.2 2010.02.01 -
PCTools 7.0.3.5 2010.02.01 -
Rising 22.33.00.04 2010.02.01 -
Sophos 4.50.0 2010.02.01 -
Sunbelt 3.2.1858.2 2010.01.31 -
Symantec 20091.2.0.41 2010.02.01 Suspicious.Insight
TheHacker 6.5.1.0.175 2010.02.01 -
TrendMicro 9.120.0.1004 2010.02.01 -
VBA32 3.12.12.1 2010.02.01 -
ViRobot 2010.2.1.2166 2010.02.01 -
VirusBuster 5.0.21.0 2010.02.01 -

Дополнительная информация
File size: 237568 bytes
MD5 : 5eecc2845b92695cc78512894ea288bb
SHA1 : fe235bad7ae66e64c8679e7700e97bffbfb9e643
SHA256: 2658452bd5c199f076b52377aeeedb63e2a519a9625448346b 38c0610d7f7e7e

http://www.virustotal.com/ru/analisi...e7e-1265043337
(я его второго числа, но забыл на флешке

)

Надоело быть жертвой? Стань профи по информационной безопасности, получай самую свежую информацию об угрозах и средствах защиты от ведущего российского аналитического центра Anti-Malware.ru:

**Chizh86** · 10.02.2010, 14:57

Файл MBX_BF0_3435C8.___.vir получен 2010.02.10 11:51:27 (UTC)

Результат: 4/41 (9.76%)

Код:

Антивирус  	Версия  	Обновление  	Результат
a-squared	4.5.0.50	2010.02.10	-
AhnLab-V3	5.0.0.2	2010.02.09	-
AntiVir	7.9.1.160	2010.02.10	-
Antiy-AVL	2.0.3.7	2010.02.09	-
Authentium	5.2.0.5	2010.02.10	W32/SuspPack.BM.gen!Eldorado
Avast	4.8.1351.0	2010.02.10	-
AVG	9.0.0.730	2010.02.10	-
BitDefender	7.2	2010.02.10	-
CAT-QuickHeal	10.00	2010.02.10	-
ClamAV	0.96.0.0-git	2010.02.10	-
Comodo	3886	2010.02.10	-
DrWeb	5.0.1.12222	2010.02.10	-
eSafe	7.0.17.0	2010.02.09	-
eTrust-Vet	35.2.7294	2010.02.10	-
F-Prot	4.5.1.85	2010.02.09	W32/SuspPack.BM.gen!Eldorado
F-Secure	9.0.15370.0	2010.02.10	-
Fortinet	4.0.14.0	2010.02.10	-
GData	19	2010.02.10	-
Ikarus	T3.1.1.80.0	2010.02.10	-
Jiangmin	13.0.900	2010.02.08	-
K7AntiVirus	7.10.969	2010.02.08	-
Kaspersky	7.0.0.125	2010.02.10	-
McAfee	5887	2010.02.09	-
McAfee+Artemis	5887	2010.02.09	-
McAfee-GW-Edition	6.8.5	2010.02.10	-
Microsoft	1.5406	2010.02.10	-
NOD32	4853	2010.02.10	-
Norman	6.04.03	2010.02.10	-
nProtect	2009.1.8.0	2010.02.10	-
Panda	10.0.2.2	2010.02.09	-
PCTools	7.0.3.5	2010.02.10	-
Prevx	3.0	2010.02.10	-
Rising	22.34.01.02	2010.02.10	-
Sophos	4.50.0	2010.02.10	-
Sunbelt	3.2.1858.2	2010.02.10	-
Symantec	20091.2.0.41	2010.02.10	Suspicious.Insight
TheHacker	6.5.1.1.186	2010.02.10	-
TrendMicro	9.120.0.1004	2010.02.10	-
VBA32	3.12.12.2	2010.02.09	-
ViRobot	2010.2.10.2180	2010.02.10	-
VirusBuster	5.0.21.0	2010.02.09	Backdoor.Agent.EHC!Dam

File size: 2048 bytes
MD5...: a0ed3c458f554df78ce80230ca6f2490
SHA1..: 1bbf0d9acda27bad3de80d8cacc08e1769db4eaf
SHA256: 073e0e20420d48190cd727301d664ba0b9c12c400bbfbc3408 4bb1103dc8c687
ssdeep: 6:idqGVg3F+X32QgzfkWl8/cWfmRRoQIXX0DkR:etGSGQgwi80Wu8QuX0Da

**Surfer** · 10.02.2010, 15:33

File file.exe received on 2010.02.10 12:13:57 (UTC)
Result: 7/41 (17.08%)

a-squared 4.5.0.50 2010.02.10 -
AhnLab-V3 5.0.0.2 2010.02.09 -
AntiVir 7.9.1.160 2010.02.10 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2010.02.09 -
Authentium 5.2.0.5 2010.02.10 -
Avast 4.8.1351.0 2010.02.10 -
AVG 9.0.0.730 2010.02.10 -
BitDefender 7.2 2010.02.10 -
CAT-QuickHeal 10.00 2010.02.10 -
ClamAV 0.96.0.0-git 2010.02.10 -
Comodo 3886 2010.02.10 -
DrWeb 5.0.1.12222 2010.02.10 -
eSafe 7.0.17.0 2010.02.09 -
eTrust-Vet 35.2.7294 2010.02.10 -
F-Prot 4.5.1.85 2010.02.09 -
F-Secure 9.0.15370.0 2010.02.10 -
Fortinet 4.0.14.0 2010.02.10 -
GData 19 2010.02.10 -
Ikarus T3.1.1.80.0 2010.02.10 -
Jiangmin 13.0.900 2010.02.08 -
K7AntiVirus 7.10.969 2010.02.08 -
Kaspersky 7.0.0.125 2010.02.10 -
McAfee 5887 2010.02.09 W32/Koobface.worm.gen.ae
McAfee+Artemis 5887 2010.02.09 W32/Koobface.worm.gen.ae
McAfee-GW-Edition 6.8.5 2010.02.10 Trojan.Dropper.Gen
Microsoft 1.5406 2010.02.10 -
NOD32 4853 2010.02.10 -
Norman 6.04.03 2010.02.10 -
nProtect 2009.1.8.0 2010.02.10 -
Panda 10.0.2.2 2010.02.09 Suspicious file
PCTools 7.0.3.5 2010.02.10 -
Prevx 3.0 2010.02.10 -
Rising 22.34.01.02 2010.02.10 -
Sophos 4.50.0 2010.02.10 -
Sunbelt 3.2.1858.2 2010.02.10 -
Symantec 20091.2.0.41 2010.02.10 Suspicious.Insight
TheHacker 6.5.1.1.186 2010.02.10 -
TrendMicro 9.120.0.1004 2010.02.10 PAK_Generic.001
VBA32 3.12.12.2 2010.02.09 -
ViRobot 2010.2.10.2180 2010.02.10 -
VirusBuster 5.0.21.0 2010.02.09 -

http://www.virustotal.com/analisis/3...28e-1265804037

**DefesT** · 10.02.2010, 19:32

File exe.exe received on 2010.02.10 16:05:14 (UTC)
Result: 13/41 (31.71%)

Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.02.10 -
AhnLab-V3 5.0.0.2 2010.02.09 -
AntiVir 7.9.1.160 2010.02.10 TR/Agent.AN.809
Antiy-AVL 2.0.3.7 2010.02.09 -
Authentium 5.2.0.5 2010.02.10 -
Avast 4.8.1351.0 2010.02.10 -
AVG 9.0.0.730 2010.02.10 -
BitDefender 7.2 2010.02.10 -
CAT-QuickHeal 10.00 2010.02.10 -
ClamAV 0.96.0.0-git 2010.02.10 -
Comodo 3887 2010.02.10 TrojWare.Win32.TrojanDownloader.FraudLoad.~GGI
DrWeb 5.0.1.12222 2010.02.10 Trojan.Fakealert.12270
eSafe 7.0.17.0 2010.02.10 -
eTrust-Vet 35.2.7294 2010.02.10 -
F-Prot 4.5.1.85 2010.02.09 -
F-Secure 9.0.15370.0 2010.02.10 -
Fortinet 4.0.14.0 2010.02.10 -
GData 19 2010.02.10 -
Ikarus T3.1.1.80.0 2010.02.10 -
Jiangmin 13.0.900 2010.02.08 -
K7AntiVirus 7.10.969 2010.02.08 -
Kaspersky 7.0.0.125 2010.02.10 Packed.Win32.Krap.an
McAfee 5887 2010.02.09 -
McAfee+Artemis 5887 2010.02.09 -
McAfee-GW-Edition 6.8.5 2010.02.10 Trojan.Agent.AN.809
Microsoft 1.5406 2010.02.10 TrojanDownloader:Win32/Fakeinit
NOD32 4854 2010.02.10 a variant of Win32/Kryptik.CHE
Norman 6.04.03 2010.02.10 -
nProtect 2009.1.8.0 2010.02.10 -
Panda 10.0.2.2 2010.02.09 -
PCTools 7.0.3.5 2010.02.10 -
Prevx 3.0 2010.02.10 -
Rising 22.34.01.02 2010.02.10 -
Sophos 4.50.0 2010.02.10 Mal/FakeAV-BW
Sunbelt 3.2.1858.2 2010.02.10 Trojan.Win32.Generic.pak!cobra
Symantec 20091.2.0.41 2010.02.10 CoreGuardAntivirus2009
TheHacker 6.5.1.1.186 2010.02.10 Trojan/Krap.an
TrendMicro 9.120.0.1004 2010.02.10 PAK_Generic.001
VBA32 3.12.12.2 2010.02.10 -
ViRobot 2010.2.10.2180 2010.02.10 -
VirusBuster 5.0.21.0 2010.02.10 Trojan.Codecpack.Gen

Additional information
File size: 38400 bytes
MD5...: ed5d2cca083f86a8a2c622d04edd1204
SHA1..: 59e0df9814fbb501045236a8f81f0709e4c6dbc6
SHA256: 6ac89a32ee104363663f156f9893a932952305179b69f41797 8df0f00be02e45
http://www.virustotal.com/analisis/6...e45-1265817914

File mur_clan_Elite_.exe received on 2010.02.10 16:05:20 (UTC)
Result: 19/41 (46.35%)

Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.02.10 Trojan.SuspectCRC!IK
AhnLab-V3 5.0.0.2 2010.02.09 -
AntiVir 7.9.1.160 2010.02.10 TR/PSW.Gamania.114
Antiy-AVL 2.0.3.7 2010.02.09 -
Authentium 5.2.0.5 2010.02.10 -
Avast 4.8.1351.0 2010.02.10 -
AVG 9.0.0.730 2010.02.10 PSW.Generic7.AVIW
BitDefender 7.2 2010.02.10 Trojan.Generic.2527480
CAT-QuickHeal 10.00 2010.02.10 Trojan.Agent.ATV
ClamAV 0.96.0.0-git 2010.02.10 Trojan.Spy.Banker-6328
Comodo 3887 2010.02.10 -
DrWeb 5.0.1.12222 2010.02.10 Trojan.PWS.Gamania.19563
eSafe 7.0.17.0 2010.02.10 -
eTrust-Vet 35.2.7294 2010.02.10 -
F-Prot 4.5.1.85 2010.02.09 -
F-Secure 9.0.15370.0 2010.02.10 Trojan.Generic.2527480
Fortinet 4.0.14.0 2010.02.10 PossibleThreat
GData 19 2010.02.10 Trojan.Generic.2527480
Ikarus T3.1.1.80.0 2010.02.10 Trojan.SuspectCRC
Jiangmin 13.0.900 2010.02.08 -
K7AntiVirus 7.10.969 2010.02.08 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2010.02.10 -
McAfee 5887 2010.02.09 -
McAfee+Artemis 5887 2010.02.09 Artemis!52B46B6B6331
McAfee-GW-Edition 6.8.5 2010.02.10 Trojan.PSW.Gamania.114
Microsoft 1.5406 2010.02.10 -
NOD32 4854 2010.02.10 -
Norman 6.04.03 2010.02.10 W32/Suspicious_Gen2.DTJQ
nProtect 2009.1.8.0 2010.02.10 Trojan/W32.Agent.114688.QJ
Panda 10.0.2.2 2010.02.09 -
PCTools 7.0.3.5 2010.02.10 Trojan-PSW.Lineage
Prevx 3.0 2010.02.10 -
Rising 22.34.01.02 2010.02.10 -
Sophos 4.50.0 2010.02.10 -
Sunbelt 3.2.1858.2 2010.02.10 -
Symantec 20091.2.0.41 2010.02.10 Infostealer.Lineage
TheHacker 6.5.1.1.186 2010.02.10 -
TrendMicro 9.120.0.1004 2010.02.10 -
VBA32 3.12.12.2 2010.02.10 -
ViRobot 2010.2.10.2180 2010.02.10 -
VirusBuster 5.0.21.0 2010.02.10 Trojan.PWS.Gamania.AYZ

Additional information
File size: 114688 bytes
MD5...: 52b46b6b63314404edc00e2b648bb2a5
SHA1..: dd5b05d6b31d611fdfc629a4dac57e676fe86613
SHA256: 5a06a83afa5296b37a64181c84cf2fcf2a94d2250d5e193d26 06601e0bd33d47
http://www.virustotal.com/analisis/5...d47-1265817920

**amcenter** · 10.02.2010, 20:50

Файл Install_Flash-Player-10_build9102 получен 2010.02.10 17:34:24 (UTC)
Текущий статус: закончено
Результат: 6/41 (14.64%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.02.10 Trojan.Win32.C2Lop!IK
AhnLab-V3 5.0.0.2 2010.02.09 -
AntiVir 7.9.1.160 2010.02.10 -
Antiy-AVL 2.0.3.7 2010.02.09 -
Authentium 5.2.0.5 2010.02.10 -
Avast 4.8.1351.0 2010.02.10 -
AVG 9.0.0.730 2010.02.10 -
BitDefender 7.2 2010.02.10 -
CAT-QuickHeal 10.00 2010.02.10 -
ClamAV 0.96.0.0-git 2010.02.10 -
Comodo 3887 2010.02.10 -
DrWeb 5.0.1.12222 2010.02.10 Trojan.PWS.Panda.114
eSafe 7.0.17.0 2010.02.10 -
eTrust-Vet 35.2.7294 2010.02.10 -
F-Prot 4.5.1.85 2010.02.09 -
F-Secure 9.0.15370.0 2010.02.10 -
Fortinet 4.0.14.0 2010.02.10 -
GData 19 2010.02.10 -
Ikarus T3.1.1.80.0 2010.02.10 -
Jiangmin 13.0.900 2010.02.08 -
K7AntiVirus 7.10.969 2010.02.08 -
Kaspersky 7.0.0.125 2010.02.10 -
McAfee 5888 2010.02.10 -
McAfee+Artemis 5888 2010.02.10 -
McAfee-GW-Edition 6.8.5 2010.02.10 Heuristic.LooksLike.Trojan.PSW.LdPinch.B
Microsoft 1.5406 2010.02.10 -
NOD32 4854 2010.02.10 a variant of Win32/Kryptik.BZI
Norman 6.04.03 2010.02.10 -
nProtect 2009.1.8.0 2010.02.10 -
Panda 10.0.2.2 2010.02.10 Suspicious file
PCTools 7.0.3.5 2010.02.10 -
Prevx 3.0 2010.02.10 -
Rising 22.34.01.02 2010.02.10 -
Sophos 4.50.0 2010.02.10 -
Sunbelt 3.2.1858.2 2010.02.10 -
Symantec 20091.2.0.41 2010.02.10 Suspicious.Insight
TheHacker 6.5.1.1.186 2010.02.10 -
TrendMicro 9.120.0.1004 2010.02.10 -
VBA32 3.12.12.2 2010.02.10 -
ViRobot 2010.2.10.2180 2010.02.10 -
VirusBuster 5.0.21.0 2010.02.10 -

Дополнительная информация
File size: 105480 bytes
MD5...: 459743e7c52c19d8d52f0f2f99f74624
SHA1..: cc86addfdb3bc23d8751386c605f884f987b0298
SHA256: 8eed383d899897507f195cdadba9c233aa1098c0a3ec462c27 9774d4656298d3
ssdeep: 3072:y3j7abSTfwN5vX47E9jf01xU9i4LrQ6ows+i5km:y3KbS DwNeA9yUU4LrQn
+iZ
http://www.virustotal.com/ru/analisi...8d3-1265823264

**Юльча** · 11.02.2010, 12:35

Файл kyglnn.exe получен 2010.02.10 17:13:40 (UTC)
Результат: 3/41 (7.32%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.02.10 -
AhnLab-V3 5.0.0.2 2010.02.09 -
AntiVir 7.9.1.160 2010.02.10 -
Antiy-AVL 2.0.3.7 2010.02.09 -
Authentium 5.2.0.5 2010.02.10 -
Avast 4.8.1351.0 2010.02.10 -
AVG 9.0.0.730 2010.02.10 -
BitDefender 7.2 2010.02.10 -
CAT-QuickHeal 10.00 2010.02.10 -
ClamAV 0.96.0.0-git 2010.02.10 -
Comodo 3887 2010.02.10 -
DrWeb 5.0.1.12222 2010.02.10 -
eSafe 7.0.17.0 2010.02.10 -
eTrust-Vet 35.2.7294 2010.02.10 -
F-Prot 4.5.1.85 2010.02.09 -
F-Secure 9.0.15370.0 2010.02.10 -
Fortinet 4.0.14.0 2010.02.10 -
GData 19 2010.02.10 -
Ikarus T3.1.1.80.0 2010.02.10 -
Jiangmin 13.0.900 2010.02.08 -
K7AntiVirus 7.10.969 2010.02.08 -
Kaspersky 7.0.0.125 2010.02.10 Trojan.Win32.Vilsel.smr
McAfee 5888 2010.02.10 -
McAfee+Artemis 5888 2010.02.10 -
McAfee-GW-Edition 6.8.5 2010.02.10 -
Microsoft 1.5406 2010.02.10 -
NOD32 4854 2010.02.10 -
Norman 6.04.03 2010.02.10 -
nProtect 2009.1.8.0 2010.02.10 -
Panda 10.0.2.2 2010.02.10 -
PCTools 7.0.3.5 2010.02.10 -
Prevx 3.0 2010.02.10 -
Rising 22.34.01.02 2010.02.10 -
Sophos 4.50.0 2010.02.10 -
Sunbelt 3.2.1858.2 2010.02.10 -
Symantec 20091.2.0.41 2010.02.10 Suspicious.Insight
TheHacker 6.5.1.1.186 2010.02.10 -
TrendMicro 9.120.0.1004 2010.02.10 -
VBA32 3.12.12.2 2010.02.10 BScope.Crex
ViRobot 2010.2.10.2180 2010.02.10 -
VirusBuster 5.0.21.0 2010.02.10 -
Дополнительная информация
File size: 57344 bytes
MD5 : 7c470053bb28ed5fc52bb1e6bdd395a7

http://www.virustotal.com/ru/analisi...777-1265822020

**amcenter** · 11.02.2010, 20:43

Файл Install_Flash-Player-10_build9102 получен 2010.02.11 17:37:04 (UTC)
Текущий статус: закончено
Результат: 6/41 (14.64%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.02.11 Trojan.Win32.C2Lop!IK
AhnLab-V3 5.0.0.2 2010.02.11 -
AntiVir 7.9.1.160 2010.02.11 -
Antiy-AVL 2.0.3.7 2010.02.11 -
Authentium 5.2.0.5 2010.02.11 -
Avast 4.8.1351.0 2010.02.11 -
AVG 9.0.0.730 2010.02.11 Win32/Heur
BitDefender 7.2 2010.02.11 -
CAT-QuickHeal 10.00 2010.02.11 -
ClamAV 0.96.0.0-git 2010.02.11 -
Comodo 3900 2010.02.11 -
DrWeb 5.0.1.12222 2010.02.11 -
eSafe 7.0.17.0 2010.02.11 -
eTrust-Vet 35.2.7296 2010.02.11 -
F-Prot 4.5.1.85 2010.02.11 -
F-Secure 9.0.15370.0 2010.02.11 -
Fortinet 4.0.14.0 2010.02.11 -
GData 19 2010.02.11 -
Ikarus T3.1.1.80.0 2010.02.11 Trojan.Win32.C2Lop
Jiangmin 13.0.900 2010.02.08 -
K7AntiVirus 7.10.971 2010.02.11 -
Kaspersky 7.0.0.125 2010.02.11 -
McAfee 5889 2010.02.11 -
McAfee+Artemis 5889 2010.02.11 -
McAfee-GW-Edition 6.8.5 2010.02.11 Heuristic.LooksLike.Win32.Trojan.C
Microsoft 1.5406 2010.02.11 -
NOD32 4858 2010.02.11 -
Norman 6.04.08 2010.02.11 -
nProtect 2009.1.8.0 2010.02.11 -
Panda 10.0.2.2 2010.02.10 -
PCTools 7.0.3.5 2010.02.11 -
Prevx 3.0 2010.02.11 -
Rising 22.34.01.03 2010.02.11 -
Sophos 4.50.0 2010.02.11 -
Sunbelt 3.9.2398.2 2010.02.11 -
Symantec 20091.2.0.41 2010.02.11 Suspicious.Insight
TheHacker 6.5.1.1.189 2010.02.11 -
TrendMicro 9.120.0.1004 2010.02.11 PAK_Generic.001
VBA32 3.12.12.2 2010.02.11 -
ViRobot 2010.2.11.2182 2010.02.11 -
VirusBuster 5.0.21.0 2010.02.11 -

Дополнительная информация
File size: 146952 bytes
MD5...: d13a8abd9c6d13071d20e4456d158ad9
SHA1..: ba63caa7fff497898f0c74be2ff0beb945a0ade4
SHA256: de954b7f626ff0f6f7b798cfd0910e9b37492f160b65a0d3be bb5d54441ad15d
ssdeep: 3072:EyxpoPVkvpyLlrFDrP9pGQMtO7uFWm2FDu8Kzu1gD8JCP 3aKjf:EWpQlLHD
gQi4Fa8KuJCfB
http://www.virustotal.com/ru/analisi...15d-1265909824

**gjf** · 14.02.2010, 06:46

http://www.virustotal.com/analisis/d...c98-1266053477

Код:

a-squared 	4.5.0.50 	2010.02.13 	-
AhnLab-V3 	5.0.0.2 	2010.02.12 	-
AntiVir 	7.9.1.160 	2010.02.12 	-
Antiy-AVL 	2.0.3.7 	2010.02.13 	-
Authentium 	5.2.0.5 	2010.02.13 	-
Avast 	4.8.1351.0 	2010.02.12 	-
AVG 	9.0.0.730 	2010.02.12 	SHeur2.CLFS
BitDefender 	7.2 	2010.02.13 	-
CAT-QuickHeal 	10.00 	2010.02.13 	(Suspicious) - DNAScan
ClamAV 	0.96.0.0-git 	2010.02.13 	-
Comodo 	3920 	2010.02.13 	-
DrWeb 	5.0.1.12222 	2010.02.13 	Trojan.Winlock.1077
eSafe 	7.0.17.0 	2010.02.11 	-
eTrust-Vet 	35.2.7300 	2010.02.12 	-
F-Prot 	4.5.1.85 	2010.02.12 	-
F-Secure 	9.0.15370.0 	2010.02.13 	-
Fortinet 	4.0.14.0 	2010.02.13 	-
GData 	19 	2010.02.13 	-
Ikarus 	T3.1.1.80.0 	2010.02.13 	-
Jiangmin 	13.0.900 	2010.02.08 	-
K7AntiVirus 	7.10.972 	2010.02.12 	-
Kaspersky 	7.0.0.125 	2010.02.13 	-
McAfee 	5890 	2010.02.12 	-
McAfee+Artemis 	5890 	2010.02.12 	-
McAfee-GW-Edition 	6.8.5 	2010.02.13 	-
Microsoft 	1.5406 	2010.02.13 	-
NOD32 	4862 	2010.02.12 	Win32/LockScreen.NV
Norman 	6.04.08 	2010.02.12 	-
nProtect 	2009.1.8.0 	2010.02.13 	-
Panda 	10.0.2.2 	2010.02.12 	-
PCTools 	7.0.3.5 	2010.02.13 	-
Prevx 	3.0 	2010.02.13 	-
Rising 	22.34.01.03 	2010.02.11 	Packer.Win32.UnkPacker.a
Sophos 	4.50.0 	2010.02.13 	Mal/FakeAV-AX
Sunbelt 	5675 	2010.02.13 	-
Symantec 	20091.2.0.41 	2010.02.13 	Suspicious.Insight
TheHacker 	6.5.1.4.191 	2010.02.13 	-
TrendMicro 	9.120.0.1004 	2010.02.13 	-
VBA32 	3.12.12.2 	2010.02.12 	-
ViRobot 	2010.2.13.2186 	2010.02.13 	-
VirusBuster 	5.0.21.0 	2010.02.12 	-

Additional information
File size: 176640 bytes
MD5 : fe0f194082169e86b281d7b404d4539c
SHA1 : f23d48e38f3e9c015057c575306be0be19862bff
SHA256: dd0d4cfdf2f87655ef087cb1c37c453f0ac53b30ad5d33d023 6b5072a7746c98

**alex_555** · 15.02.2010, 21:25

Файл sfcfiles.dll получен 2010.02.15 17:24:57 (UTC)
Текущий статус: закончено
Результат: 10/39 (25.65%)
Форматированные

Код:

Печать результатов  Антивирус	Версия	Обновление	Результат
a-squared	4.5.0.50	2010.02.15	Trojan-Dropper!IK
AhnLab-V3	5.0.0.2	2010.02.15	-
AntiVir	7.9.1.170	2010.02.15	TR/Dropper.Gen
Antiy-AVL	2.0.3.7	2010.02.15	-
Authentium	5.2.0.5	2010.02.15	-
Avast	4.8.1351.0	2010.02.15	-
AVG	9.0.0.730	2010.02.15	-
BitDefender	7.2	2010.02.15	-
CAT-QuickHeal	10.00	2010.02.15	-
ClamAV	0.96.0.0-git	2010.02.15	-
Comodo	3945	2010.02.15	TrojWare.Win32.Small.YBE
DrWeb	5.0.1.12222	2010.02.15	Trojan.WinSpy.570
eSafe	7.0.17.0	2010.02.15	-
eTrust-Vet	35.2.7303	2010.02.15	Win32/Sfcpatched.A
F-Prot	4.5.1.85	2010.02.15	-
Fortinet	4.0.14.0	2010.02.15	-
GData	19	2010.02.15	-
Ikarus	T3.1.1.80.0	2010.02.15	Trojan-Dropper
Jiangmin	13.0.900	2010.02.15	-
K7AntiVirus	7.10.972	2010.02.12	-
Kaspersky	7.0.0.125	2010.02.15	-
McAfee	5893	2010.02.15	-
McAfee+Artemis	5892	2010.02.14	Artemis!078B3E49C898
McAfee-GW-Edition	6.8.5	2010.02.15	Heuristic.LooksLike.Trojan.Dropper.S
Microsoft	1.5406	2010.02.15	-
NOD32	4868	2010.02.15	-
Norman	6.04.08	2010.02.15	-
nProtect	2009.1.8.0	2010.02.15	-
Panda	10.0.2.2	2010.02.14	-
PCTools	7.0.3.5	2010.02.15	-
Prevx	3.0	2010.02.15	-
Rising	22.34.01.03	2010.02.11	-
Sophos	4.50.0	2010.02.15	Mal/Generic-A
Sunbelt	5678	2010.02.15	-
TheHacker	6.5.1.4.194	2010.02.15	-
TrendMicro	9.120.0.1004	2010.02.15	-
VBA32	3.12.12.2	2010.02.15	BScope.Crex
ViRobot	2010.2.13.2186	2010.02.13	-
VirusBuster	5.0.21.0	2010.02.15	-

Дополнительная информация
File size: 973072 bytes
MD5...: 078b3e49c898bf068536459bbbc2e1eb
SHA1..: c82302a3ce6e8c0d40fafc47e2a7dcb2ca177050
SHA256: 5cc2f737c85c7740ffdb65290f6ba07c85db4d31aba584c042 7620735d3a6a01
ssdeep: 1536:kkyGyj81CN+Z0bqROz+Ecl/trA1CZaLHQ37wNoh8XfZY+zBtATPuB7wNC7M
YjhXz:2Gyj5MgqROi3l/trA1CZ4HG+Z3XZk
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x3b44
timedatestamp.....: 0x4b70749d (Mon Feb 08 20:31:25 2010)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2daa 0x2e00 6.41 b01d47706cb3cff58f758aba281bdf21
.rdata 0x4000 0x5db 0x600 4.86 13a4a09ef68bdad98ed38cac6f5d0d6b
.data 0x5000 0x329d 0x200 0.26 14f61491ecd77e5c1844bbf9ef1f5b18
.reloc 0x9000 0x3f8 0x400 6.40 16cdda120f9d9696bd6fd9ac3aa829f7

( 2 imports )
> kernel32.dll: CloseHandle, CreateFileA, CreateProcessA, CreateThread, DeleteFileA, EnterCriticalSection, FormatMessageA, GetCommandLineA, GetCurrentThread, GetDateFormatA, GetEnvironmentVariableA, GetFileSize, GetProcAddress, GetProfileStringA, GetTickCount, GetVersionExW, GlobalAlloc, IsBadReadPtr, LoadLibraryA, LoadLibraryW, LocalAlloc, LocalReAlloc, LocalSize, MapViewOfFile, ReadFile, ResumeThread, Sleep, VirtualAlloc, WaitForSingleObject, lstrcmpA, lstrcmpiA, lstrlenA
> user32.dll: wsprintfA, BeginPaint, CallWindowProcW, CharNextA, DeleteMenu, EndDialog, EndPaint, GetClassInfoExW, GetCursorPos, GetDlgItem, GetFocus, GetKeyState, GetSystemMetrics, GetWindowRect, IsWindow, LoadCursorW, LoadMenuW, PaintDesktop, SendDlgItemMessageW, SetCapture, SetRect, SetTimer, SubtractRect, UnregisterHotKey

( 1 exports )
SfcGetFiles
RDS...: NSRL Reference Data Set

http://www.virustotal.com/ru/analisi...a01-1266254697

**valho** · 17.02.2010, 22:36

Соседи купили два ноута acer в магазине, настройки предустановленные, никто ничего не делал. Было 1 + 18

File aJewelQuestSolitaire.exe received on 2010.02.17 19:18:22 (UTC)
Current status: finished
Result: 10/41 (24.4%)

a-squared 4.5.0.50 2010.02.17 Trojan.Win32.Agent!IK
AhnLab-V3 5.0.0.2 2010.02.17 -
AntiVir 8.2.1.170 2010.02.17 -
Antiy-AVL 2.0.3.7 2010.02.17 -
Authentium 5.2.0.5 2010.02.17 W32/Trojan2.MAER
Avast 4.8.1351.0 2010.02.17 -
AVG 9.0.0.730 2010.02.17 -
BitDefender 7.2 2010.02.17 -
CAT-QuickHeal 10.00 2010.02.17 -
ClamAV 0.96.0.0-git 2010.02.17 -
Comodo 3970 2010.02.17 TrojWare.Win32.Agent.dbdm
DrWeb 5.0.1.12222 2010.02.17 -
eSafe 7.0.17.0 2010.02.17 -
eTrust-Vet 35.2.7308 2010.02.17 -
F-Prot 4.5.1.85 2010.02.16 W32/Trojan2.MAER
F-Secure 9.0.15370.0 2010.02.17 -
Fortinet 4.0.14.0 2010.02.15 -
GData 19 2010.02.17 -
Ikarus T3.1.1.80.0 2010.02.17 Trojan.Win32.Agent
Jiangmin 13.0.900 2010.02.17 -
K7AntiVirus 7.10.976 2010.02.17 -
Kaspersky 7.0.0.125 2010.02.17 -
McAfee 5894 2010.02.16 -
McAfee+Artemis 5894 2010.02.16 Artemis!A6BA1C99BEDA
McAfee-GW-Edition 6.8.5 2010.02.17 -
Microsoft 1.5406 2010.02.17 -
NOD32 4875 2010.02.17 -
Norman 6.04.08 2010.02.17 -
nProtect 2009.1.8.0 2010.02.17 Trojan/W32.Agent.1085440.F
Panda 10.0.2.2 2010.02.17 -
PCTools 7.0.3.5 2010.02.17 -
Prevx 3.0 2010.02.17 -
Rising 22.34.01.03 2010.02.11 -
Sophos 4.50.0 2010.02.17 -
Sunbelt 5682 2010.02.17 -
Symantec 20091.2.0.41 2010.02.17 -
TheHacker 6.5.1.4.197 2010.02.17 Trojan/Agent.cusd
TrendMicro 9.120.0.1004 2010.02.17 -
VBA32 3.12.12.2 2010.02.16 Trojan.Win32.Agent.dbdm
ViRobot 2010.2.17.2190 2010.02.17 -
VirusBuster 5.0.21.0 2010.02.17 Trojan.Agent.LQZM

Additional information
File size: 1085440 bytes
MD5...: a6ba1c99beda774d17e6848a7c511897
SHA1..: 0ef2aeb4625bc9f69e8d2004bd8b66ef70ac81c8
SHA256: fcbb456487839fab6365e31b95ce00266ec2ada040d0d9e9a7 26fb4f5a96231b
ssdeep: 24576:psgJhxlRHVtaeGuwLV7y6MoEXd+hKN6mUWuJT:pJzljG 2dorhKN6mUbJT
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x132000
timedatestamp.....: 0x45397cbb (Sat Oct 21 01:49:47 2006)
machinetype.......: 0x14c (I386)

File Launch.exe received on 2010.02.17 19:18:55 (UTC)
Current status: finished
Result: 9/41 (21.96%)

a-squared 4.5.0.50 2010.02.17 -
AhnLab-V3 5.0.0.2 2010.02.17 -
AntiVir 8.2.1.170 2010.02.17 GAME/Downloader.Gen
Antiy-AVL 2.0.3.7 2010.02.17 -
Authentium 5.2.0.5 2010.02.17 W32/Launcher.A.gen!Eldorado
Avast 4.8.1351.0 2010.02.17 -
AVG 9.0.0.730 2010.02.17 -
BitDefender 7.2 2010.02.17 -
CAT-QuickHeal 10.00 2010.02.17 Trojan.Inject.kgp
ClamAV 0.96.0.0-git 2010.02.17 -
Comodo 3970 2010.02.17 TrojWare.Win32.Trojan.Inject.~IL
DrWeb 5.0.1.12222 2010.02.17 -
eSafe 7.0.17.0 2010.02.17 -
eTrust-Vet 35.2.7308 2010.02.17 -
F-Prot 4.5.1.85 2010.02.16 W32/Launcher.A.gen!Eldorado
F-Secure 9.0.15370.0 2010.02.17 -
Fortinet 4.0.14.0 2010.02.15 PossibleThreat
GData 19 2010.02.17 -
Ikarus T3.1.1.80.0 2010.02.17 -
Jiangmin 13.0.900 2010.02.17 -
K7AntiVirus 7.10.976 2010.02.17 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2010.02.17 -
McAfee 5894 2010.02.16 -
McAfee+Artemis 5894 2010.02.16 -
McAfee-GW-Edition 6.8.5 2010.02.17 Heuristic.LooksLike.Win32.SuspiciousPE.J
Microsoft 1.5406 2010.02.17 -
NOD32 4875 2010.02.17 -
Norman 6.04.08 2010.02.17 -
nProtect 2009.1.8.0 2010.02.17 -
Panda 10.0.2.2 2010.02.17 -
PCTools 7.0.3.5 2010.02.17 -
Prevx 3.0 2010.02.17 -
Rising 22.34.01.03 2010.02.11 -
Sophos 4.50.0 2010.02.17 -
Sunbelt 5682 2010.02.17 -
Symantec 20091.2.0.41 2010.02.17 -
TheHacker 6.5.1.4.197 2010.02.17 -
TrendMicro 9.120.0.1004 2010.02.17 -
VBA32 3.12.12.2 2010.02.16 -
ViRobot 2010.2.17.2190 2010.02.17 -
VirusBuster 5.0.21.0 2010.02.17 Trojan.Inject.CHX

Additional information
File size: 745472 bytes
MD5...: a5817ba5f103784be6402e1c6dfb69c2
SHA1..: 201c5670bcc78c2ecdad36454eb1cb966af26711
SHA256: 109e69fabb4007dc5635b1a116c840ab732189f07c4a02e99f 80c5f218d61bc1
ssdeep: 12288:OJYu0cCcKtLszw0EVga2WMuCE97NNcHiujDgt5plQsxj P+FQoFBOsD:rck
LJ79JqHiuwLVBdts
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x90000
timedatestamp.....: 0x467a9436 (Thu Jun 21 15:07:34 2007)
machinetype.......: 0x14c (I386)

**Юльча** · 23.02.2010, 09:39

Файл settings.exe получен 2010.02.23 06:36:30 (UTC)
Результат: 9/41 (21.96%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.02.23 -
AhnLab-V3 5.0.0.2 2010.02.23 -
AntiVir 8.2.1.172 2010.02.22 -
Antiy-AVL 2.0.3.7 2010.02.22 -
Authentium 5.2.0.5 2010.02.23 -
Avast 4.8.1351.0 2010.02.22 -
AVG 9.0.0.730 2010.02.22 Vundo.KN
BitDefender 7.2 2010.02.23 -
CAT-QuickHeal 10.00 2010.02.23 -
ClamAV 0.96.0.0-git 2010.02.23 -
Comodo 4032 2010.02.23 -
DrWeb 5.0.1.12222 2010.02.23 -
eSafe 7.0.17.0 2010.02.22 -
eTrust-Vet 35.2.7321 2010.02.23 Win32/TDSS.G!packed
F-Prot 4.5.1.85 2010.02.22 -
F-Secure 9.0.15370.0 2010.02.23 -
Fortinet 4.0.14.0 2010.02.21 -
GData 19 2010.02.23 -
Ikarus T3.1.1.80.0 2010.02.23 -
Jiangmin 13.0.900 2010.02.23 -
K7AntiVirus 7.10.980 2010.02.22 -
Kaspersky 7.0.0.125 2010.02.23 -
McAfee 5900 2010.02.22 -
McAfee+Artemis 5900 2010.02.22 Artemis!14842C51D06E
McAfee-GW-Edition 6.8.5 2010.02.23 Heuristic.LooksLike.Trojan.Monder.B
Microsoft 1.5406 2010.02.23 -
NOD32 4888 2010.02.22 a variant of Win32/Kryptik.COR
Norman 6.04.08 2010.02.22 -
nProtect 2009.1.8.0 2010.02.23 -
Panda 10.0.2.2 2010.02.22 -
PCTools 7.0.3.5 2010.02.23 -
Prevx 3.0 2010.02.23 -
Rising 22.34.01.03 2010.02.11 -
Sophos 4.50.0 2010.02.23 Sus/UnkPack-C
Sunbelt 5694 2010.02.23 -
Symantec 20091.2.0.41 2010.02.23 Packed.Generic.277
TheHacker 6.5.1.6.206 2010.02.23 -
TrendMicro 9.120.0.1004 2010.02.23 Mal_Xed-22
VBA32 3.12.12.2 2010.02.23 -
ViRobot 2010.2.23.2197 2010.02.23 -
VirusBuster 5.0.27.0 2010.02.22 Trojan.Vundo.Gen!Pac.45

Дополнительная информация
File size: 79872 bytes
MD5...: 14842c51d06e61efe8b86d1ae431072d

http://www.virustotal.com/ru/analisi...87f-1266906990

**OSSP2008** · 23.02.2010, 12:29

Файл install_flash_player.rar получен 2010.02.23 09:25:58 (UTC)
Текущий статус: закончено
Результат: 4/41 (9.76%)

a-squared 4.5.0.50 2010.02.23 -
AhnLab-V3 5.0.0.2 2010.02.23 -
AntiVir 8.2.1.172 2010.02.23 -
Antiy-AVL 2.0.3.7 2010.02.23 -
Authentium 5.2.0.5 2010.02.23 -
Avast 4.8.1351.0 2010.02.22 -
AVG 9.0.0.730 2010.02.22 -
BitDefender 7.2 2010.02.23 -
CAT-QuickHeal 10.00 2010.02.23 (Suspicious) - DNAScan
ClamAV 0.96.0.0-git 2010.02.23 -
Comodo 4033 2010.02.23 -
DrWeb 5.0.1.12222 2010.02.23 -
eSafe 7.0.17.0 2010.02.22 -
eTrust-Vet 35.2.7323 2010.02.23 -
F-Prot 4.5.1.85 2010.02.22 -
F-Secure 9.0.15370.0 2010.02.23 -
Fortinet 4.0.14.0 2010.02.21 -
GData 19 2010.02.23 -
Ikarus T3.1.1.80.0 2010.02.23 -
Jiangmin 13.0.900 2010.02.23 -
K7AntiVirus 7.10.980 2010.02.22 -
Kaspersky 7.0.0.125 2010.02.23 Trojan-PSW.Win32.Papras.ux
McAfee 5900 2010.02.22 -
McAfee+Artemis 5900 2010.02.22 -
McAfee-GW-Edition 6.8.5 2010.02.23 -
Microsoft 1.5406 2010.02.23 -
NOD32 4888 2010.02.22 -
Norman 6.04.08 2010.02.23 -
nProtect 2009.1.8.0 2010.02.23 -
Panda 10.0.2.2 2010.02.22 -
PCTools 7.0.3.5 2010.02.23 -
Prevx 3.0 2010.02.23 -
Rising 22.34.01.03 2010.02.11 Packer.Win32.UnkPacker.a
Sophos 4.50.0 2010.02.23 -
Sunbelt 5694 2010.02.23 -
Symantec 20091.2.0.41 2010.02.23 Suspicious.Insight
TheHacker 6.5.1.6.206 2010.02.23 -
TrendMicro 9.120.0.1004 2010.02.23 -
VBA32 3.12.12.2 2010.02.23 -
ViRobot 2010.2.23.2197 2010.02.23 -
VirusBuster 5.0.27.0 2010.02.22 -

File size: 113469 bytes
MD5...: 517cf4cb2310be265ed1cca63cc2781b
SHA1..: d0eaa3055eebde5a7bd123239b9dc215f3345daa
SHA256: 8126e89581abb0cbef1d047becd0a69f0a26eac1191ba049fe 157272fe4c6e1d
ssdeep: 3072:h0/fm9Vt0zsd6bYxJ/J3qZav/BVky3mHKfd:hi+VtqkDtqOBVky3mHKF
PEiD..: -
PEInfo: -
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: RAR Archive (83.3%)
REALbasic Project (16.6%)

**Korvelle** · 24.02.2010, 00:46

File inlove.exe received on 2010.02.23 19:30:52 (UTC)
Current status: finished
Result: 6/41 (14.63%)
Compact Compact
Print results Print results
Antivirus Version Last Update Result

a-squared 4.5.0.50 2010.02.23 Trojan.Win32.VkHost!IK
AhnLab-V3 5.0.0.2 2010.02.23 -
AntiVir 8.2.1.172 2010.02.23 -
Antiy-AVL 2.0.3.7 2010.02.23 -
Authentium 5.2.0.5 2010.02.23 -
Avast 4.8.1351.0 2010.02.23 -
AVG 9.0.0.730 2010.02.23 unknown virus Win32/DH.AA54534F48
BitDefender 7.2 2010.02.23 -
CAT-QuickHeal 10.00 2010.02.23 -
ClamAV 0.96.0.0-git 2010.02.23 -
Comodo 4038 2010.02.23 -
DrWeb 5.0.1.12222 2010.02.23 -
eSafe 7.0.17.0 2010.02.23 -
eTrust-Vet 35.2.7323 2010.02.23 -
F-Prot 4.5.1.85 2010.02.23 -
F-Secure 9.0.15370.0 2010.02.23 -
Fortinet 4.0.14.0 2010.02.21 -
GData 19 2010.02.23 -
Ikarus T3.1.1.80.0 2010.02.23 Trojan.Win32.VkHost
Jiangmin 13.0.900 2010.02.23 -
K7AntiVirus 7.10.981 2010.02.23 -
Kaspersky 7.0.0.125 2010.02.23 Trojan.Win32.VkHost.rd
McAfee 5901 2010.02.23 -
McAfee+Artemis 5901 2010.02.23 Artemis!4FA977EA91FA
McAfee-GW-Edition 6.8.5 2010.02.23 -
Microsoft 1.5406 2010.02.23 -
NOD32 4891 2010.02.23 -
Norman 6.04.08 2010.02.23 -
nProtect 2009.1.8.0 2010.02.23 -
Panda 10.0.2.2 2010.02.23 -
PCTools 7.0.3.5 2010.02.23 -
Prevx 3.0 2010.02.23 -
Rising 22.34.01.03 2010.02.11 -
Sophos 4.50.0 2010.02.23 -
Sunbelt 5694 2010.02.23 -
Symantec 20091.2.0.41 2010.02.23 Suspicious.Insight
TheHacker 6.5.1.6.206 2010.02.23 -
TrendMicro 9.120.0.1004 2010.02.23 -
VBA32 3.12.12.2 2010.02.23 -
ViRobot 2010.2.23.2198 2010.02.23 -
VirusBuster 5.0.27.0 2010.02.23 -

Additional information
File size: 517632 bytes
MD5 : 4fa977ea91faeb93df668d571fe6932f
SHA1 : 211d875e3649b5981fcc61a87f90c8d6cc76f170
SHA256: f28ec85366d5e60f9f119ba8077a4737ecfdf7d980aa3ede75 8f7c8610d2cb7f
PEInfo: PE Structure information

**Юльча** · 26.02.2010, 20:43

Файл tbvgdbjylq.exe получен 2010.02.26 17:40:57 (UTC)
Результат: 9/41 (21.96%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.02.26 Trojan.Win32.Oflica!IK
AhnLab-V3 5.0.0.2 2010.02.26 -
AntiVir 8.2.1.176 2010.02.26 -
Antiy-AVL 2.0.3.7 2010.02.26 -
Authentium 5.2.0.5 2010.02.26 -
Avast 4.8.1351.0 2010.02.26 Win32ficla-E
Avast5 5.0.332.0 2010.02.26 Win32ficla-E
AVG 9.0.0.730 2010.02.26 -
BitDefender 7.2 2010.02.26 -
CAT-QuickHeal 10.00 2010.02.26 -
ClamAV 0.96.0.0-git 2010.02.26 -
Comodo 4073 2010.02.26 TrojWare.Win32.Sasfis.C
DrWeb 5.0.1.12222 2010.02.26 Trojan.Advload.7
eSafe 7.0.17.0 2010.02.25 -
eTrust-Vet 35.2.7330 2010.02.26 Win32/Oficla.A
F-Prot 4.5.1.85 2010.02.26 -
F-Secure 9.0.15370.0 2010.02.26 -
Fortinet 4.0.14.0 2010.02.26 -
GData 19 2010.02.26 Win32ficla-E
Ikarus T3.1.1.80.0 2010.02.26 Trojan.Win32.Oflica
Jiangmin 13.0.900 2010.02.25 -
K7AntiVirus 7.10.984 2010.02.26 -
Kaspersky 7.0.0.125 2010.02.26 -
McAfee 5903 2010.02.25 -
McAfee+Artemis 5903 2010.02.25 -
McAfee-GW-Edition 6.8.5 2010.02.26 -
Microsoft 1.5502 2010.02.26 -
NOD32 4899 2010.02.26 -
Norman 6.04.08 2010.02.26 -
nProtect 2009.1.8.0 2010.02.26 -
Panda 10.0.2.2 2010.02.26 -
PCTools 7.0.3.5 2010.02.26 -
Rising 22.36.04.04 2010.02.26 -
Sophos 4.50.0 2010.02.26 -
Sunbelt 5700 2010.02.26 -
Symantec 20091.2.0.41 2010.02.26 Suspicious.Insight
TheHacker 6.5.1.6.212 2010.02.26 -
TrendMicro 9.120.0.1004 2010.02.26 -
VBA32 3.12.12.2 2010.02.26 -
ViRobot 2010.2.26.2204 2010.02.26 -
VirusBuster 5.0.27.0 2010.02.26 -

Дополнительная информация
File size: 8192 bytes
MD5...: f0a0fd4b373ba8b36d61b3dc86ad7f2f

http://www.virustotal.com/ru/analisi...dee-1267206057

**ISO** · 27.02.2010, 10:58

Был удивлён, когда KIS никак не отреагировал на эту гадость, лежащую в явном виде на флешке.

File ms232.exe received on 2010.02.27 07:43:47 (UTC)
Result: 24/42 (57.15%)
Antivirus Version Last Update Result

a-squared 4.5.0.50 2010.02.27 Net-Worm.Win32.Kolab!IK
AhnLab-V3 5.0.0.2 2010.02.26 -
AntiVir 8.2.1.176 2010.02.26 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2010.02.26 -
Authentium 5.2.0.5 2010.02.27 W32/VBTrojan.Dropper.4!Maximus
Avast 4.8.1351.0 2010.02.27 Win32:Malware-gen
Avast5 5.0.332.0 2010.02.26 Win32:Malware-gen
AVG 9.0.0.730 2010.02.26 Dropper.Generic.BQRL
BitDefender 7.2 2010.02.27 Trojan.Generic.3147838
CAT-QuickHeal 10.00 2010.02.27 Trojan.Agent.ATV
ClamAV 0.96.0.0-git 2010.02.27 -
Comodo 4080 2010.02.27 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.1.12222 2010.02.27 Win32.HLLW.Autoruner.7244
eSafe 7.0.17.0 2010.02.25 Win32.TRDropper
eTrust-Vet 35.2.7331 2010.02.26 -
F-Prot 4.5.1.85 2010.02.26 W32/VBTrojan.Dropper.4!Maximus
F-Secure 9.0.15370.0 2010.02.27 Trojan.Generic.3147838
Fortinet 4.0.14.0 2010.02.26 -
GData 19 2010.02.27 Trojan.Generic.3147838
Ikarus T3.1.1.80.0 2010.02.27 Net-Worm.Win32.Kolab
Jiangmin 13.0.900 2010.02.27 -
K7AntiVirus 7.10.984 2010.02.26 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2010.02.27 -
McAfee 5904 2010.02.26 -
McAfee+Artemis 5904 2010.02.26 Artemis!1B0CB68A15CF
McAfee-GW-Edition 6.8.5 2010.02.27 Trojan.Dropper.Gen
Microsoft 1.5502 2010.02.27 Trojan:Win32/Ircbrute
NOD32 4899 2010.02.26 probably a variant of Win32/Agent
Norman 6.04.08 2010.02.27 -
nProtect 2009.1.8.0 2010.02.26 -
Panda 10.0.2.2 2010.02.26 Generic Trojan
PCTools 7.0.3.5 2010.02.27 Trojan.Generic
Prevx 3.0 2010.02.27 -
Rising 22.36.05.01 2010.02.27 -
Sophos 4.50.0 2010.02.27 -
Sunbelt 5702 2010.02.27 Trojan.Win32.Generic!BT
Symantec 20091.2.0.41 2010.02.27 Trojan Horse
TheHacker 6.5.1.6.213 2010.02.27 -
TrendMicro 9.120.0.1004 2010.02.27 -
VBA32 3.12.12.2 2010.02.26 -
ViRobot 2010.2.27.2205 2010.02.27 -
VirusBuster 5.0.27.0 2010.02.26 -

Additional information
File size: 135168 bytes
MD5...: 1b0cb68a15cfd2e134c42889c3d443b0
SHA1..: 3c97c6c0295b6b8d8fcaf370e1981fb6a7782232
SHA256: 320bbf50d9b9ab18731938d737f5b79ad9da7b205d966d641e 1ab94304e633c3

**Erekle** · 01.03.2010, 18:15

Файл winesm32.exe получен 2010.03.01 12:04:20 (UTC)
Результат: 14/41 (34.15%)

a-squared 4.5.0.50 2010.03.01 Packed.Win32.Krap!IK
AhnLab-V3 5.0.0.2 2010.02.28 -
AntiVir 8.2.1.176 2010.03.01 -
Antiy-AVL 2.0.3.7 2010.03.01 -
Authentium 5.2.0.5 2010.03.01 -
Avast 4.8.1351.0 2010.03.01 -
AVG 9.0.0.730 2010.02.28 -
BitDefender 7.2 2010.03.01 -
CAT-QuickHeal 10.00 2010.03.01 -
ClamAV 0.96.0.0-git 2010.03.01 -
Comodo 4091 2010.02.28 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.1.12222 2010.03.01 Trojan.Botnetlog.126
eSafe 7.0.17.0 2010.02.28 -
eTrust-Vet 35.2.7334 2010.03.01 -
F-Prot 4.5.1.85 2010.03.01 -
F-Secure 9.0.15370.0 2010.03.01 -
Fortinet 4.0.14.0 2010.02.28 -
GData 19 2010.03.01 -
Ikarus T3.1.1.80.0 2010.03.01 Packed.Win32.Krap
Jiangmin 13.0.900 2010.03.01 -
K7AntiVirus 7.10.984 2010.02.26 -
Kaspersky 7.0.0.125 2010.03.01 Packed.Win32.Krap.ar
McAfee 5906 2010.02.28 -
McAfee+Artemis 5906 2010.02.28 Artemis!157F7CF2E5EE
McAfee-GW-Edition 6.8.5 2010.03.01 -
Microsoft 1.5502 2010.03.01 TrojanDownloader:Win32/Bredolab.AA
NOD32 4904 2010.03.01 -
Norman 6.04.08 2010.03.01 W32/Crypt.SGL
nProtect 2009.1.8.0 2010.03.01 -
Panda 10.0.2.2 2010.02.28 Trj/CI.A
PCTools 7.0.3.5 2010.02.28 -
Prevx 3.0 2010.03.01 -
Rising 22.37.00.04 2010.03.01 Trojan.Win32.Generic.51FA2802
Sophos 4.50.0 2010.03.01 Mal/Generic-A
Sunbelt 5714 2010.03.01 Trojan.Win32.Generic!BT
Symantec 20091.2.0.41 2010.03.01 Suspicious.Insight
TheHacker 6.5.1.7.216 2010.03.01 -
TrendMicro 9.120.0.1004 2010.03.01 TROJ_MALWARE.VTG
VBA32 3.12.12.2 2010.03.01 -
ViRobot 2010.2.27.2206 2010.02.27 -
VirusBuster 5.0.27.0 2010.02.28 -

http://www.virustotal.com/ru/analisi...e7a-1267445060

**Korvelle** · 02.03.2010, 21:33

Фэйкалерт, просит слать смс.
Файл bradarsetup1.exe получен 2010.03.02 18:26:49 (UTC)
Антивирус Версия Обновление Результат

a-squared 4.5.0.50 2010.03.02 -
AhnLab-V3 5.0.0.2 2010.03.02 -
AntiVir 8.2.1.180 2010.03.02 -
Antiy-AVL 2.0.3.7 2010.03.02 -
Authentium 5.2.0.5 2010.03.02 -
Avast 4.8.1351.0 2010.03.02 -
Avast5 5.0.332.0 2010.03.02 -
AVG 9.0.0.730 2010.03.02 -
BitDefender 7.2 2010.03.02 -
CAT-QuickHeal 10.00 2010.03.02 -
ClamAV 0.96.0.0-git 2010.03.02 -
Comodo 4091 2010.02.28 -
DrWeb 5.0.1.12222 2010.03.02 -
eSafe 7.0.17.0 2010.03.02 -
eTrust-Vet 35.2.7335 2010.03.02 -
F-Prot 4.5.1.85 2010.03.02 -
F-Secure 9.0.15370.0 2010.03.02 -
Fortinet 4.0.14.0 2010.02.28 -
GData 19 2010.03.02 -
Ikarus T3.1.1.80.0 2010.03.02 -
Jiangmin 13.0.900 2010.03.02 -
K7AntiVirus 7.10.987 2010.03.02 -
Kaspersky 7.0.0.125 2010.03.02 -
McAfee 5908 2010.03.02 -
McAfee+Artemis 5908 2010.03.02 -
McAfee-GW-Edition 6.8.5 2010.03.02 -
Microsoft 1.5502 2010.03.02 -
NOD32 4910 2010.03.02 -
Norman 6.04.08 2010.03.02 -
nProtect 2009.1.8.0 2010.03.02 -
Panda 10.0.2.2 2010.03.02 -
PCTools 7.0.3.5 2010.03.02 -
Prevx 3.0 2010.03.02 -
Rising 22.37.01.04 2010.03.02 -
Sophos 4.50.0 2010.03.02 -
Sunbelt 5727 2010.03.02 -
Symantec 20091.2.0.41 2010.03.02 Suspicious.Insight
TheHacker 6.5.1.7.218 2010.03.02 -
TrendMicro 9.120.0.1004 2010.03.02 -
VBA32 3.12.12.2 2010.03.02 -
ViRobot 2010.3.2.2208 2010.03.02 -
VirusBuster 5.0.27.0 2010.03.02 -

Дополнительная информация
File size: 1058778 bytes
MD5...: 282c6696d02acdf8ab15c8f46ad38323
SHA1..: 47b6ef37be6a437f28b8ded1c7d4d67538e13ca9
SHA256: b4e88799a70744c64f8ed49cebbaff3557e95d69adb4df84b6 b9677aeec678d2
ssdeep: 24576:v2UENSHnjkVdhWaUO6Ipie0jUnoqvU4wmpmh38YaXag: v2tYjKQaUa0ImS<br>caV<br>
PEiD..: -

**DefesT** · 02.03.2010, 23:53

File winlogon.exe received on 2010.03.02 20:38:38 (UTC)
Result: 10/42 (23.81%)

Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.03.02 -
AhnLab-V3 5.0.0.2 2010.03.02 -
AntiVir 8.2.1.180 2010.03.02 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2010.03.02 -
Authentium 5.2.0.5 2010.03.02 -
Avast 4.8.1351.0 2010.03.02 -
Avast5 5.0.332.0 2010.03.02 -
AVG 9.0.0.730 2010.03.02 -
BitDefender 7.2 2010.03.02 Trojan.Generic.3260872
CAT-QuickHeal 10.00 2010.03.02 Backdoor.SdBot.roa
ClamAV 0.96.0.0-git 2010.03.02 -
Comodo 4091 2010.02.28 -
DrWeb 5.0.1.12222 2010.03.02 -
eSafe 7.0.17.0 2010.03.02 -
eTrust-Vet 35.2.7335 2010.03.02 -
F-Prot 4.5.1.85 2010.03.02 -
F-Secure 9.0.15370.0 2010.03.02 Trojan.Generic.3260872
Fortinet 4.0.14.0 2010.02.28 -
GData 19 2010.03.02 Trojan.Generic.3260872
Ikarus T3.1.1.80.0 2010.03.02 -
Jiangmin 13.0.900 2010.03.02 Backdoor/SdBot.oum
K7AntiVirus 7.10.987 2010.03.02 -
Kaspersky 7.0.0.125 2010.03.02 -
McAfee 5908 2010.03.02 -
McAfee+Artemis 5908 2010.03.02 -
McAfee-GW-Edition 6.8.5 2010.03.02 Heuristic.LooksLike.Win32.Suspicious.H!92
Microsoft 1.5502 2010.03.02 -
NOD32 4910 2010.03.02 -
Norman 6.04.08 2010.03.02 W32/Inject.dam
nProtect 2009.1.8.0 2010.03.02 -
Panda 10.0.2.2 2010.03.02 Suspicious file
PCTools 7.0.3.5 2010.03.02 -
Prevx 3.0 2010.03.02 -
Rising 22.37.01.04 2010.03.02 -
Sophos 4.50.0 2010.03.02 -
Sunbelt 5729 2010.03.02 -
Symantec 20091.2.0.41 2010.03.02 Suspicious.Insight
TheHacker 6.5.1.7.218 2010.03.02 -
TrendMicro 9.120.0.1004 2010.03.02 -
VBA32 3.12.12.2 2010.03.02 -
ViRobot 2010.3.2.2208 2010.03.02 -
VirusBuster 5.0.27.0 2010.03.02 -

Additional information
File size: 71140 bytes
MD5...: 65ba50906815d6b8565408dfe39c0e2e
SHA1..: 49fac2a11d2501abadb9a5fbffb2d40b10ef6007
SHA256: 3abbe03b160ce4d09ba4a9b077036b23700d81d7d9a52ab704 fa55584b3171d6
http://www.virustotal.com/analisis/3...1d6-1267562318

File Podarok.exe received on 2010.03.02 20:47:48 (UTC)
Result: 7/42 (16.67%)

Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.03.02 Trojan-Dropper!IK
AhnLab-V3 5.0.0.2 2010.03.02 -
AntiVir 8.2.1.180 2010.03.02 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2010.03.02 -
Authentium 5.2.0.5 2010.03.02 -
Avast 4.8.1351.0 2010.03.02 -
Avast5 5.0.332.0 2010.03.02 -
AVG 9.0.0.730 2010.03.02 -
BitDefender 7.2 2010.03.02 -
CAT-QuickHeal 10.00 2010.03.02 -
ClamAV 0.96.0.0-git 2010.03.02 -
Comodo 4091 2010.02.28 UnclassifiedMalware
DrWeb 5.0.1.12222 2010.03.02 -
eSafe 7.0.17.0 2010.03.02 Win32.TRDropper
eTrust-Vet 35.2.7335 2010.03.02 -
F-Prot 4.5.1.85 2010.03.02 -
F-Secure 9.0.15370.0 2010.03.02 -
Fortinet 4.0.14.0 2010.02.28 -
GData 19 2010.03.02 -
Ikarus T3.1.1.80.0 2010.03.02 Trojan-Dropper
Jiangmin 13.0.900 2010.03.02 -
K7AntiVirus 7.10.987 2010.03.02 -
Kaspersky 7.0.0.125 2010.03.02 -
McAfee 5908 2010.03.02 -
McAfee+Artemis 5908 2010.03.02 -
McAfee-GW-Edition 6.8.5 2010.03.02 Trojan.Dropper.Gen
Microsoft 1.5502 2010.03.02 -
NOD32 4910 2010.03.02 -
Norman 6.04.08 2010.03.02 -
nProtect 2009.1.8.0 2010.03.02 -
Panda 10.0.2.2 2010.03.02 -
PCTools 7.0.3.5 2010.03.02 -
Prevx 3.0 2010.03.02 -
Rising 22.37.01.04 2010.03.02 -
Sophos 4.50.0 2010.03.02 -
Sunbelt 5729 2010.03.02 -
Symantec 20091.2.0.41 2010.03.02 Suspicious.Insight
TheHacker 6.5.1.7.218 2010.03.02 -
TrendMicro 9.120.0.1004 2010.03.02 -
VBA32 3.12.12.2 2010.03.02 -
ViRobot 2010.3.2.2208 2010.03.02 -
VirusBuster 5.0.27.0 2010.03.02 -

Additional information
File size: 114894 bytes
MD5...: 14c2fdb629004eebbcb941072dd0e224
SHA1..: c8784a7017b904437d383bfa9e5e71a05d32b3ad
SHA256: c658babff3efb790bc9ca4feeed3f9ca329cfd9a9c65e97375 e5466262d31661
http://www.virustotal.com/analisis/c...661-1267562868

**Юльча** · 05.03.2010, 15:03

Файл Setup_295.exe получен 2010.03.05 10:31:47 (UTC)
Результат: 7/42 (16.67%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.03.05 Trojan.Win32.FakeAV!IK
AhnLab-V3 5.0.0.2 2010.03.05 -
AntiVir 8.2.1.180 2010.03.05 -
Antiy-AVL 2.0.3.7 2010.03.05 -
Authentium 5.2.0.5 2010.03.05 -
Avast 4.8.1351.0 2010.03.04 -
Avast5 5.0.332.0 2010.03.04 -
AVG 9.0.0.730 2010.03.04 -
BitDefender 7.2 2010.03.05 -
CAT-QuickHeal 10.00 2010.03.05 -
ClamAV 0.96.0.0-git 2010.03.05 -
Comodo 4091 2010.02.28 -
DrWeb 5.0.1.12222 2010.03.05 -
eSafe 7.0.17.0 2010.03.04 -
eTrust-Vet 35.2.7341 2010.03.05 -
F-Prot 4.5.1.85 2010.03.04 -
F-Secure 9.0.15370.0 2010.03.05 -
Fortinet 4.0.14.0 2010.03.04 -
GData 19 2010.03.05 -
Ikarus T3.1.1.80.0 2010.03.05 Trojan.Win32.FakeAV
Jiangmin 13.0.900 2010.03.05 -
K7AntiVirus 7.10.990 2010.03.04 -
Kaspersky 7.0.0.125 2010.03.05 -
McAfee 5910 2010.03.04 -
McAfee+Artemis 5910 2010.03.04 Artemis!950EAFE9AF9C
McAfee-GW-Edition 6.8.5 2010.03.05 Heuristic.LooksLike.Win32.SuspiciousPE.H!85
Microsoft 1.5502 2010.03.05 -
NOD32 4917 2010.03.05 -
Norman 6.04.08 2010.03.04 -
nProtect 2009.1.8.0 2010.03.05 -
Panda 10.0.2.2 2010.03.04 -
PCTools 7.0.3.5 2010.03.04 -
Prevx 3.0 2010.03.05 High Risk Cloaked Malware
Rising 22.37.04.04 2010.03.05 -
Sophos 4.51.0 2010.03.05 Sus/UnkPack-C
Sunbelt 5756 2010.03.05 -
Symantec 20091.2.0.41 2010.03.05 Suspicious.Insight
TheHacker 6.5.1.7.221 2010.03.05 -
TrendMicro 9.120.0.1004 2010.03.05 -
VBA32 3.12.12.2 2010.03.05 -
ViRobot 2010.3.5.2214 2010.03.05 -
VirusBuster 5.0.27.0 2010.03.04 -

http://www.virustotal.com/ru/analisi...454-1267785107

**mayas** · 05.03.2010, 18:10

File update_flash_player.exe
Current status: finished
Result: 4/42 (9.53%)

a-squared 4.5.0.50 2010.03.05 Trojan-Ransom.Win32.PinkBlocker!IK
AhnLab-V3 5.0.0.2 2010.03.05 -
AntiVir 8.2.1.180 2010.03.05 -
Antiy-AVL 2.0.3.7 2010.03.05 -
Authentium 5.2.0.5 2010.03.05 -
Avast 4.8.1351.0 2010.03.05 -
Avast5 5.0.332.0 2010.03.05 -
AVG 9.0.0.730 2010.03.05 -
BitDefender 7.2 2010.03.05 -
CAT-QuickHeal 10.00 2010.03.05 -
ClamAV 0.96.0.0-git 2010.03.05 -
Comodo 4091 2010.02.28 -
DrWeb 5.0.1.12222 2010.03.05 -
eSafe 7.0.17.0 2010.03.04 -
eTrust-Vet 35.2.7341 2010.03.05 -
F-Prot 4.5.1.85 2010.03.04 -
F-Secure 9.0.15370.0 2010.03.05 -
Fortinet 4.0.14.0 2010.03.04 -
GData 19 2010.03.05 -
Ikarus T3.1.1.80.0 2010.03.05 Trojan-Ransom.Win32.PinkBlocker
Jiangmin 13.0.900 2010.03.05 -
K7AntiVirus 7.10.990 2010.03.04 -
Kaspersky 7.0.0.125 2010.03.05 -
McAfee 5910 2010.03.04 -
McAfee+Artemis 5910 2010.03.04 -
McAfee-GW-Edition 6.8.5 2010.03.05 -
Microsoft 1.5502 2010.03.05 -
NOD32 4918 2010.03.05 probably a variant of Win32/LockScreen.OW
Norman 6.04.08 2010.03.05 -
nProtect 2009.1.8.0 2010.03.05 -
Panda 10.0.2.2 2010.03.04 -
PCTools 7.0.3.5 2010.03.04 -
Prevx 3.0 2010.03.05 -
Rising 22.37.04.04 2010.03.05 -
Sophos 4.51.0 2010.03.05 -
Sunbelt 5758 2010.03.05 -
Symantec 20091.2.0.41 2010.03.05 Suspicious.Insight
TheHacker 6.5.1.7.221 2010.03.05 -
TrendMicro 9.120.0.1004 2010.03.05 -
VBA32 3.12.12.2 2010.03.05 -
ViRobot 2010.3.5.2214 2010.03.05 -
VirusBuster 5.0.27.0 2010.03.05 -

Исследование антивирусов 7

Опции темы

Похожие темы

Исследование антивирусов 6

Исследование антивирусов 5

Исследование антивирусов 4

Исследование антивирусов 3

Исследование антивирусов 2

Метки для этой темы

Ваши права в разделе