Исследование антивирусов 7

[Torvic99]

Файл plugin-flash.swf получен 2010.03.05 15:59:01 (UTC)
Текущий статус: Загрузка ... в очереди ожидание проверка закончено НЕ НАЙДЕНО ОСТАНОВЛЕНО
Результат: 20/42 (47.62%)

Антивирус Версия Обновление Результат

a-squared 4.5.0.50 2010.03.05-Exploit.SWF!IK
AhnLab-V3 5.0.0.2 2010.03.05-Win-Trojan/Swf-exploit
AntiVir 8.2.1.180 2010.03.05-SWF/Drop.Agent.E.10
Antiy-AVL 2.0.3.7 2010.03.05-
Authentium 5.2.0.5 2010.03.05-SWF/Obfusc.A!Camelot
Avast 4.8.1351.0 2010.03.05-SWFownloader-F
Avast5 5.0.332.0 2010.03.05-SWFownloader-F
AVG 9.0.0.730 2010.03.05-
BitDefender 7.2 2010.03.05-Trojan.SWF.Dropper.E
CAT-QuickHeal 10.00 2010.03.05-
ClamAV 0.96.0.0-git 2010.03.05-
Comodo 4091 2010.02.28-UnclassifiedMalware
DrWeb 5.0.1.12222 2010.03.05-
eSafe 7.0.17.0 2010.03.04-
eTrust-Vet3 5.2.7341 2010.03.05-
F-Prot 4.5.1.85 2010.03.04-
F-Secure 9.0.15370.0 2010.03.05-Trojan.SWF.Dropper.E
Fortinet 4.0.14.0 2010.03.04-
GData 19 2010.03.05-Trojan.SWF.Dropper.E
Ikarus T3.1.1.80.0 2010.03.05-Exploit.SWF
Jiangmin 13.0.900 2010.03.05-
K7AntiVirus 7.10.990 2010.03.04-
Kaspersky 7.0.0.125 2010.03.05-
McAfee 5910 2010.03.04-
McAfee+Artemis 5910 2010.03.04-
McAfee-GW-Edition 6.8.5 2010.03.05-SWF.Drop.Agent.E.10
Microsoft 1.5502 2010.03.05-TrojanDownloader:Win32/Swif.gen!A
NOD32 4918 2010.03.05-SWF/TrojanDownloader.Swif.NAL
Norman 6.04.08 2010.03.05-
nProtect 2009.1.8.0 2010.03.05-Trojan-Exploit/W32.SWFlash.16658.HL
Panda 10.0.2.2 2010.03.04-
PCTools 7.0.3.5 2010.03.04-HeurEngine.MaliciousExploit
Prevx 3.0 2010.03.05-
Rising 22.37.04.04 2010.03.05-
Sophos 4.51.0 2010.03.05-Troj/SWFLdr-A
Sunbelt 5759 2010.03.05-
Symantec 20091.2.0.41 2010.03.05-Bloodhound.Exploit.193
TheHacker 6.5.1.7.221 2010.03.05-
TrendMicro 9.120.0.1004 2010.03.05-SWF_DLOADR.AOU
VBA32 3.12.12.2 2010.03.05-
ViRobot 2010.3.5.2214 2010.03.05-SWF.S.Exploit.16658
VirusBuster 5.0.27.0 2010.03.05-

Дополнительная информация
File size: 16658 bytes
MD5...: d1e5c87722e883d30ddf342dfc0e08e9
SHA1..: a4ea20afd0a0c1a27bcbee10573959d6e0aa0167
SHA256: ce2b8fb32259047cded64dc262208497a2dbb575e83c5adf12 d53cbca24aa999ssdeep: 384:YC2/7Np3bJ/SSsD4vPkdexXvmsxC4/urjN1:YC+BprJ/SfMkIxXvXxK
PEiD..: -PEInfo: -RDS...: NSRL Reference Data Set

[Юльча]

притащили на флешке в комплекте с запускающим автораном
Файл USBUtil.exe получен 2010.03.10 08:47:02 (UTC)
Результат: 12/42 (28.57%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.03.10 -
AhnLab-V3 5.0.0.2 2010.03.09 -
AntiVir 8.2.1.180 2010.03.09 TR/ATRAPS.Gen2
Antiy-AVL 2.0.3.7 2010.03.10 -
Authentium 5.2.0.5 2010.03.10 -
Avast 4.8.1351.0 2010.03.09 -
Avast5 5.0.332.0 2010.03.09 -
AVG 9.0.0.787 2010.03.09 -
BitDefender 7.2 2010.03.10 Gen:Trojan.FirewallBypass.jmGfaSJSyXpc
CAT-QuickHeal 10.00 2010.03.10 -
ClamAV 0.96.0.0-git 2010.03.10 -
Comodo 4091 2010.02.28 -
DrWeb 5.0.1.12222 2010.03.10 -
eSafe 7.0.17.0 2010.03.09 -
eTrust-Vet 35.2.7351 2010.03.10 -
F-Prot 4.5.1.85 2010.03.09 -
F-Secure 9.0.15370.0 2010.03.10 Gen:Trojan.FirewallBypass.jmGfaSJSyXpc
Fortinet 4.0.14.0 2010.03.09 -
GData 19 2010.03.10 Gen:Trojan.FirewallBypass.jmGfaSJSyXpc
Ikarus T3.1.1.80.0 2010.03.10 -
Jiangmin 13.0.900 2010.03.10 -
K7AntiVirus 7.10.993 2010.03.09 -
Kaspersky 7.0.0.125 2010.03.10 -
McAfee 5915 2010.03.09 -
McAfee+Artemis 5915 2010.03.09 -
McAfee-GW-Edition 6.8.5 2010.03.10 Trojan.ATRAPS.Gen2
Microsoft 1.5502 2010.03.10 Worm:Win32/SillyShareCopy.gen
NOD32 4930 2010.03.09 -
Norman 6.04.08 2010.03.10 W32/Malware
nProtect 2009.1.8.0 2010.03.10 -
Panda 10.0.2.2 2010.03.09 -
PCTools 7.0.3.5 2010.03.10 -
Prevx 3.0 2010.03.10 -
Rising 22.38.02.03 2010.03.10 Trojan.Win32.DownldrU.a
Sophos 4.51.0 2010.03.10 Mal/SillyFDC-A
Sunbelt 5811 2010.03.10 BehavesLike.Win32.Malware (v)
Symantec 20091.2.0.41 2010.03.10 Suspicious.Insight
TheHacker 6.5.2.0.228 2010.03.10 -
TrendMicro 9.120.0.1004 2010.03.10 PAK_Generic.001
VBA32 3.12.12.2 2010.03.09 -
ViRobot 2010.3.10.2219 2010.03.10 -
VirusBuster 5.0.27.0 2010.03.09 -

Дополнительная информация
File size: 154112 bytes
MD5 : 6884fdc6dc471f4319799deac3fa31eb

http://www.virustotal.com/ru/analisi...ede-1268210822

[Юльча]

Файл Book_2262.exe получен 2010.03.15 13:52:01 (UTC)
Результат: 10/42 (23.81%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.03.15 Trojan-Downloader.Win32.Adload!IK
AhnLab-V3 5.0.0.2 2010.03.15 -
AntiVir 8.2.1.180 2010.03.15 ADSPY/AdSpy.Gen
Antiy-AVL 2.0.3.7 2010.03.15 -
Authentium 5.2.0.5 2010.03.15 -
Avast 4.8.1351.0 2010.03.15 -
Avast5 5.0.332.0 2010.03.15 -
AVG 9.0.0.787 2010.03.15 -
BitDefender 7.2 2010.03.15 -
CAT-QuickHeal 10.00 2010.03.15 -
ClamAV 0.96.0.0-git 2010.03.15 -
Comodo 4273 2010.03.15 ApplicUnsaf.Win32.Adware.Fearads.~J
DrWeb 5.0.1.12222 2010.03.15 Adware.FieryAds.36
eSafe 7.0.17.0 2010.03.14 -
eTrust-Vet 35.2.7363 2010.03.15 -
F-Prot 4.5.1.85 2010.03.15 -
F-Secure 9.0.15370.0 2010.03.15 -
Fortinet 4.0.14.0 2010.03.15 -
GData 19 2010.03.15 -
Ikarus T3.1.1.80.0 2010.03.15 Trojan-Downloader.Win32.Adload
Jiangmin 13.0.900 2010.03.15 -
K7AntiVirus 7.10.997 2010.03.13 -
Kaspersky 7.0.0.125 2010.03.15 -
McAfee 5920 2010.03.14 -
McAfee+Artemis 5920 2010.03.14 -
McAfee-GW-Edition 6.8.5 2010.03.15 Ad-Spyware.AdSpy.Gen
Microsoft 1.5502 2010.03.12 -
NOD32 4946 2010.03.15 a variant of Win32/Adware.FearAds.AA
Norman 6.04.08 2010.03.14 -
nProtect 2009.1.8.0 2010.03.15 -
Panda 10.0.2.2 2010.03.14 -
PCTools 7.0.3.5 2010.03.15 -
Prevx 3.0 2010.03.15 -
Rising 22.39.00.04 2010.03.15 Trojan.DL.Win32.Undef.ryn
Sophos 4.51.0 2010.03.15 -
Sunbelt 5894 2010.03.15 -
Symantec 20091.2.0.41 2010.03.15 Suspicious.Insight
TheHacker 6.5.2.0.233 2010.03.15 -
TrendMicro 9.120.0.1004 2010.03.15 -
VBA32 3.12.12.2 2010.03.14 AdWare.Win32.FearAds.bme
ViRobot 2010.3.15.2228 2010.03.15 -
VirusBuster 5.0.27.0 2010.03.14 -

Добавлено через 1 минуту

http://www.virustotal.com/ru/analisi...f13-1268661121

[Юльча]

Файл jjj.jar получен 2010.03.16 05:58:46 (UTC)
Результат: 13/42 (30.96%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.03.16 Trojan-Downloader.Java.Agent.ak!A2
AhnLab-V3 5.0.0.2 2010.03.16 -
AntiVir 8.2.1.180 2010.03.15 -
Antiy-AVL 2.0.3.7 2010.03.15 -
Authentium 5.2.0.5 2010.03.16 -
Avast 4.8.1351.0 2010.03.15 -
Avast5 5.0.332.0 2010.03.15 -
AVG 9.0.0.787 2010.03.15 -
BitDefender 7.2 2010.03.16 -
CAT-QuickHeal 10.00 2010.03.15 -
ClamAV 0.96.0.0-git 2010.03.16 -
Comodo 4280 2010.03.16 -
DrWeb 5.0.1.12222 2010.03.16 Exploit.CVE2008.5353
eSafe 7.0.17.0 2010.03.15 -
eTrust-Vet 35.2.7365 2010.03.16 Java/ByteVerify!exploit
F-Prot 4.5.1.85 2010.03.15 -
F-Secure 9.0.15370.0 2010.03.16 -
Fortinet 4.0.14.0 2010.03.15 -
GData 19 2010.03.16 -
Ikarus T3.1.1.80.0 2010.03.16 Exploit.Java.CVE-2008-5353
Jiangmin 13.0.900 2010.03.16 -
K7AntiVirus 7.10.998 2010.03.15 -
Kaspersky 7.0.0.125 2010.03.16 Trojan-Downloader.Java.Agent.ak
McAfee 5921 2010.03.15 Exploit-CVE2008-5353
McAfee+Artemis 5921 2010.03.15 Exploit-CVE2008-5353
McAfee-GW-Edition 6.8.5 2010.03.15 -
Microsoft 1.5605 2010.03.16 Exploit:Java/CVE-2008-5353.C
NOD32 4947 2010.03.15 Java/Exploit.CVE-2008-5353.C
Norman 6.04.08 2010.03.15 Java/Exploit.gen.A
nProtect 2009.1.8.0 2010.03.15 -
Panda 10.0.2.2 2010.03.15 -
PCTools 7.0.3.5 2010.03.15 Trojan.Generic
Prevx 3.0 2010.03.16 -
Rising 22.39.01.03 2010.03.16 -
Sophos 4.51.0 2010.03.16 -
Sunbelt 5909 2010.03.16 -
Symantec 20091.2.0.41 2010.03.16 Trojan Horse
TheHacker 6.5.2.0.234 2010.03.16 -
TrendMicro 9.120.0.1004 2010.03.16 -
VBA32 3.12.12.2 2010.03.14 Exploit.Java.CVE-2008-5353
ViRobot 2010.3.16.2229 2010.03.16 -
VirusBuster 5.0.27.0 2010.03.15 -

http://www.virustotal.com/ru/analisi...ae4-1268719126

Добавлено через 2 часа 5 минут

подозрительный файл и есть основания полагать что это вирус..

Файл HUFv.exe получен 2010.03.16 07:38:31 (UTC)
Результат: 4/42 (9.53%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.03.16 -
AhnLab-V3 5.0.0.2 2010.03.16 -
AntiVir 8.2.1.180 2010.03.15 -
Antiy-AVL 2.0.3.7 2010.03.15 -
Authentium 5.2.0.5 2010.03.16 -
Avast 4.8.1351.0 2010.03.15 -
Avast5 5.0.332.0 2010.03.15 -
AVG 9.0.0.787 2010.03.15 -
BitDefender 7.2 2010.03.16 -
CAT-QuickHeal 10.00 2010.03.15 -
ClamAV 0.96.0.0-git 2010.03.16 -
Comodo 4281 2010.03.16 Heur.Packed.Unknown
DrWeb 5.0.1.12222 2010.03.16 -
eSafe 7.0.17.0 2010.03.15 -
eTrust-Vet 35.2.7365 2010.03.16 -
F-Prot 4.5.1.85 2010.03.15 -
F-Secure 9.0.15370.0 2010.03.16 -
Fortinet 4.0.14.0 2010.03.15 -
GData 19 2010.03.16 -
Ikarus T3.1.1.80.0 2010.03.16 -
Jiangmin 13.0.900 2010.03.16 -
K7AntiVirus 7.10.998 2010.03.15 -
Kaspersky 7.0.0.125 2010.03.16 -
McAfee 5921 2010.03.15 -
McAfee+Artemis 5921 2010.03.15 -
McAfee-GW-Edition 6.8.5 2010.03.15 -
Microsoft 1.5605 2010.03.16 -
NOD32 4947 2010.03.15 -
Norman 6.04.08 2010.03.15 -
nProtect 2009.1.8.0 2010.03.16 -
Panda 10.0.2.2 2010.03.15 -
PCTools 7.0.3.5 2010.03.15 -
Prevx 3.0 2010.03.16 -
Rising 22.39.01.04 2010.03.16 -
Sophos 4.51.0 2010.03.16 Mal/Qbot-B
Sunbelt 5909 2010.03.16 -
Symantec 20091.2.0.41 2010.03.16 Suspicious.Insight
TheHacker 6.5.2.0.234 2010.03.16 -
TrendMicro 9.120.0.1004 2010.03.16 TROJ_QAKBOT.SMG
VBA32 3.12.12.2 2010.03.14 -
ViRobot 2010.3.16.2229 2010.03.16 -
VirusBuster 5.0.27.0 2010.03.15 -

Дополнительная информация
File size: 61952 bytes
MD5...: 5ecd9596eec22525c124dda8e392df77

http://www.virustotal.com/ru/analisi...596-1268725111


Добавлено позже
не ошиблась, уже есть ответ от ЛК
Проверенный файл: HUFv.exe - Инфицирован
HUFv.exe - инфицирован Trojan.Win32.Sasfis.ajhj

[ISO]

Якобы я спам рассылаю, "проверили" мои диски за 5 сек))) и нашли кучу бяки, попросили скачать вот это "лекрство"
Мой KIS опять молчит как рыба об лёд((( Придётся им отослать этого зверя.
File Setup_456.exe received on 2010.03.20 15:42:41 (UTC)
Result: 18/42 (42.86%)

Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.03.20 Gen.Trojan!IK
AhnLab-V3 5.0.0.2 2010.03.20 -
AntiVir 8.2.1.196 2010.03.19 -
Antiy-AVL 2.0.3.7 2010.03.19 -
Authentium 5.2.0.5 2010.03.19 -
Avast 4.8.1351.0 2010.03.20 -
Avast5 5.0.332.0 2010.03.20 -
AVG 9.0.0.787 2010.03.20 Generic17.ICN
BitDefender 7.2 2010.03.20 Gen:Trojan.Heur.TP.nOW@bWoILmm
CAT-QuickHeal 10.00 2010.03.19 -
ClamAV 0.96.0.0-git 2010.03.20 -
Comodo 4330 2010.03.20 -
DrWeb 5.0.1.12222 2010.03.20 Trojan.Fakealert.13805
eSafe 7.0.17.0 2010.03.18 -
eTrust-Vet 35.2.7376 2010.03.19 -
F-Prot 4.5.1.85 2010.03.19 -
F-Secure 9.0.15370.0 2010.03.20 Gen:Trojan.Heur.TP.nOW@bWoILmm
Fortinet 4.0.14.0 2010.03.20 W32/Agent.578D!tr.dldr
GData 19 2010.03.20 Gen:Trojan.Heur.TP.nOW@bWoILmm
Ikarus T3.1.1.80.0 2010.03.20 Gen.Trojan
Jiangmin 13.0.900 2010.03.20 -
K7AntiVirus 7.10.1002 2010.03.19 -
Kaspersky 7.0.0.125 2010.03.20 -
McAfee 5926 2010.03.20 Downloader-CEW
McAfee+Artemis 5926 2010.03.20 Downloader-CEW
McAfee-GW-Edition 6.8.5 2010.03.20 Heuristic.LooksLike.Win32.SuspiciousPE.H!90
Microsoft 1.5605 2010.03.20 -
NOD32 4960 2010.03.20 a variant of Win32/Kryptik.DDO
Norman 6.04.09 2010.03.20 -
nProtect 2009.1.8.0 2010.03.20 -
Panda 10.0.2.2 2010.03.20 Suspicious file
PCTools 7.0.3.5 2010.03.20 -
Prevx 3.0 2010.03.20 High Risk Cloaked Malware
Rising 22.39.05.02 2010.03.20 -
Sophos 4.51.0 2010.03.20 Mal/FakeAV-CO
Sunbelt 5989 2010.03.20 -
Symantec 20091.2.0.41 2010.03.20 Downloader.MisleadApp
TheHacker 6.5.2.0.241 2010.03.20 Trojan/Kryptik.ddo
TrendMicro 9.120.0.1004 2010.03.20 TROJ_FAKESPY.AB
VBA32 3.12.12.2 2010.03.19 -
ViRobot 2010.3.19.2236 2010.03.20 -
VirusBuster 5.0.27.0 2010.03.20 -

Additional information
File size: 220672 bytes
MD5...: 910cc0b36286f6550354e85de4872b20
SHA1..: e77c0d80cc4fd32e101931499d27a5ee86e8f371
SHA256: 1759e8ffa6b328fb43e31a7b5b57449f30836fe30ce5caf48b 88556e7b64fc96
ssdeep: 6144:K6j4W3ynIdPnvEVpSc7fWPPhoBYINRlGGkZ/O:AQPvo46qGN/8Z
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x3e47
timedatestamp.....: 0x49d2f176 (Wed Apr 01 04:45:42 2009)
machinetype.......: 0x14c (I386)

[han2er]

Файл activation.exe получен 2010.03.20 16:42:48 (UTC)

Результат: 14/42 (33.34%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.03.20 -
AhnLab-V3 5.0.0.2 2010.03.20 -
AntiVir 8.2.1.196 2010.03.19 TR/Spy.26624.22
Antiy-AVL 2.0.3.7 2010.03.19 -
Authentium 5.2.0.5 2010.03.19 -
Avast 4.8.1351.0 2010.03.20 -
Avast5 5.0.332.0 2010.03.20 -
AVG 9.0.0.787 2010.03.20 Win32/Heur
BitDefender 7.2 2010.03.20 Gen:Trojan.Heur.GZ.bSWbbWT!L1h
CAT-QuickHeal 10.00 2010.03.19 -
ClamAV 0.96.0.0-git 2010.03.20 PUA.Packed.ASPack
Comodo 4330 2010.03.20 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.1.12222 2010.03.20 -
eSafe 7.0.17.0 2010.03.18 -
eTrust-Vet 35.2.7376 2010.03.19 -
F-Prot 4.5.1.85 2010.03.19 -
F-Secure 9.0.15370.0 2010.03.20 Gen:Trojan.Heur.GZ.bSWbbWT!L1h
Fortinet 4.0.14.0 2010.03.20 -
GData 19 2010.03.20 Gen:Trojan.Heur.GZ.bSWbbWT!L1h
Ikarus T3.1.1.80.0 2010.03.20 -
Jiangmin 13.0.900 2010.03.20 -
K7AntiVirus 7.10.1002 2010.03.19 -
Kaspersky 7.0.0.125 2010.03.20 -
McAfee 5926 2010.03.20 -
McAfee+Artemis 5926 2010.03.20 Artemis!95E01A2631D5
McAfee-GW-Edition 6.8.5 2010.03.20 Heuristic.LooksLike.Win32.Suspicious.B
Microsoft 1.5605 2010.03.20 -
NOD32 4960 2010.03.20 -
Norman 6.04.09 2010.03.20 -
nProtect 2009.1.8.0 2010.03.20 -
Panda 10.0.2.2 2010.03.20 -
PCTools 7.0.3.5 2010.03.20 Trojan.PWS
Prevx 3.0 2010.03.20 Medium Risk Malware
Rising 22.39.05.02 2010.03.20 Dropper.Win32.Undef.GEN
Sophos 4.51.0 2010.03.20 Mal/EncPk-GC
Sunbelt 5990 2010.03.20 -
Symantec 20091.2.0.41 2010.03.20 Trojan.PWS.QQPass
TheHacker 6.5.2.0.241 2010.03.20 -
TrendMicro 9.120.0.1004 2010.03.20 -
VBA32 3.12.12.2 2010.03.19 -
ViRobot 2010.3.19.2236 2010.03.20 -
VirusBuster 5.0.27.0 2010.03.20 -

Дополнительная информация
File size: 26624 bytes
MD5...: 95e01a2631d51f50527708bee9d42f75
SHA1..: 1631c8558be2879939f92acce5d432ee5be05f44
SHA256: cf332684d679e848dd97ec4d852c748a76fe0fa97739dbccd4 92c610e0b20711
ssdeep: 768:2k+zy7R41kfxf0r/k4zJcLz0QJGjJxcLoI:Gzyjf8/diz0QJB<br>

[Korvelle]

Фэйкалерт заблокировал машину.
Файл 54527427.exe получен 2010.03.21 06:52:39 (UTC)
Текущий статус: закончено
Результат: 7/42 (16.67%)
Форматированные

Печать результатов Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.03.21 -
AhnLab-V3 5.0.0.2 2010.03.20 -
AntiVir 8.2.1.196 2010.03.19 -
Antiy-AVL 2.0.3.7 2010.03.19 -
Authentium 5.2.0.5 2010.03.21 -
Avast 4.8.1351.0 2010.03.20 -
Avast5 5.0.332.0 2010.03.20 -
AVG 9.0.0.787 2010.03.20 -
BitDefender 7.2 2010.03.21 -
CAT-QuickHeal 10.00 2010.03.19 -
ClamAV 0.96.0.0-git 2010.03.20 -
Comodo 4337 2010.03.21 -
DrWeb 5.0.1.12222 2010.03.21 -
eSafe 7.0.17.0 2010.03.18 -
eTrust-Vet 35.2.7376 2010.03.19 -
F-Prot 4.5.1.85 2010.03.21 -
F-Secure 9.0.15370.0 2010.03.21 Suspicious:W32/Malware!Gemini
Fortinet 4.0.14.0 2010.03.20 -
GData 19 2010.03.21 -
Ikarus T3.1.1.80.0 2010.03.21 -
Jiangmin 13.0.900 2010.03.21 -
K7AntiVirus 7.10.1002 2010.03.19 -
Kaspersky 7.0.0.125 2010.03.21 -
McAfee 5926 2010.03.20 FakeAlert-KW.e
McAfee+Artemis 5926 2010.03.20 FakeAlert-KW.e
McAfee-GW-Edition 6.8.5 2010.03.20 heuristic.LooksLike.Win32.Suspicious.K!92
Microsoft 1.5605 2010.03.21 -
NOD32 4961 2010.03.20 a variant of Win32/Kryptik.DEN
Norman 6.04.09 2010.03.20 -
nProtect 2009.1.8.0 2010.03.20 -
Panda 10.0.2.2 2010.03.20 -
PCTools 7.0.3.5 2010.03.21 -
Prevx 3.0 2010.03.21 -
Rising 22.39.06.01 2010.03.21 -
Sophos 4.51.0 2010.03.21 -
Sunbelt 6002 2010.03.21 -
Symantec 20091.2.0.41 2010.03.21 Suspicious.Insight
TheHacker 6.5.2.0.241 2010.03.21 Trojan/FakeAV.gen
TrendMicro 9.120.0.1004 2010.03.21 -
VBA32 3.12.12.2 2010.03.19 -
ViRobot 2010.3.19.2236 2010.03.20 -
VirusBuster 5.0.27.0 2010.03.20 -

Дополнительная информация
File size: 1040384 bytes
MD5...: 0c5271f5172892de1ba2853d117f4b1e
SHA1..: c3a944a5dac592c598538ba07276f6f020829dc7
SHA256: e54b1042d66f1c45c8612b8dafb01e30f3736842d00c519366 20452744444a8b
ssdeep: 24576:jIHXDIY8lUqtEo1PuWQKX1/DH59azCbpB5zq0dki99s+:E3kYjd8XJbpBh

[Юльча]

Файл 111 получен 2010.03.24 08:55:35 (UTC)
Результат: 10/42 (23.81%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.03.24 Virus.Win32.Injector!IK
AhnLab-V3 5.0.0.2 2010.03.24 -
AntiVir 8.2.1.196 2010.03.23 -
Antiy-AVL 2.0.3.7 2010.03.24 -
Authentium 5.2.0.5 2010.03.24 -
Avast 4.8.1351.0 2010.03.23 -
Avast5 5.0.332.0 2010.03.23 -
AVG 9.0.0.787 2010.03.23 -
BitDefender 7.2 2010.03.24 Gen:Trojan.Heur.hGZ@tDHN1bjaY
CAT-QuickHeal 10.00 2010.03.24 -
ClamAV 0.96.0.0-git 2010.03.24 -
Comodo 4366 2010.03.24 Backdoor.Win32.Delf.~DD
DrWeb 5.0.1.12222 2010.03.24 -
eSafe 7.0.17.0 2010.03.23 -
eTrust-Vet 35.2.7385 2010.03.23 -
F-Prot 4.5.1.85 2010.03.23 -
F-Secure 9.0.15370.0 2010.03.24 Gen:Trojan.Heur.hGZ@tDHN1bjaY
Fortinet 4.0.14.0 2010.03.24 -
GData 19 2010.03.24 Gen:Trojan.Heur.hGZ@tDHN1bjaY
Ikarus T3.1.1.80.0 2010.03.24 Virus.Win32.Injector
Jiangmin 13.0.900 2010.03.24 -
K7AntiVirus 7.10.1004 2010.03.22 -
Kaspersky 7.0.0.125 2010.03.24 -
McAfee 5929 2010.03.23 -
McAfee+Artemis 5929 2010.03.23 -
McAfee-GW-Edition 6.8.5 2010.03.24 -
Microsoft 1.5605 2010.03.24 -
NOD32 4969 2010.03.23 a variant of Win32/Injector.BDL
Norman 6.04.10 2010.03.23 -
nProtect 2009.1.8.0 2010.03.24 -
Panda 10.0.2.2 2010.03.23 Suspicious file
PCTools 7.0.3.5 2010.03.24 -
Prevx 3.0 2010.03.24 -
Rising 22.40.02.03 2010.03.24 -
Sophos 4.51.0 2010.03.24 -
Sunbelt 6031 2010.03.22 -
Symantec 20091.2.0.41 2010.03.24 Suspicious.Insight
TheHacker 6.5.2.0.242 2010.03.24 -
TrendMicro 9.120.0.1004 2010.03.24 -
VBA32 3.12.12.2 2010.03.23 suspected of Trojan-Dropper.Agent.109
ViRobot 2010.3.24.2241 2010.03.24 -
VirusBuster 5.0.27.0 2010.03.23 -

[ISO]

File uKvbEPtAuuFLQaG.dll received on 2010.03.26 15:13:05 (UTC)
Result: 13/42 (30.96%)

Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.03.26 Trojan-Ransom.Win32.Hexzone!IK
AhnLab-V3 5.0.0.2 2010.03.26 -
AntiVir 7.10.5.230 2010.03.26 TR/Ransom.20480
Antiy-AVL 2.0.3.7 2010.03.26 -
Authentium 5.2.0.5 2010.03.26 -
Avast 4.8.1351.0 2010.03.25 -
Avast5 5.0.332.0 2010.03.25 -
AVG 9.0.0.787 2010.03.26 Ransom.B
BitDefender 7.2 2010.03.26 -
CAT-QuickHeal 10.00 2010.03.26 -
ClamAV 0.96.0.0-git 2010.03.26 -
Comodo 4392 2010.03.26 -
DrWeb 5.0.1.12222 2010.03.26 Trojan.BrowseBan.252
eSafe 7.0.17.0 2010.03.25 -
eTrust-Vet 35.2.7390 2010.03.26 -
F-Prot 4.5.1.85 2010.03.26 -
F-Secure 9.0.15370.0 2010.03.26 -
Fortinet 4.0.14.0 2010.03.26 -
GData 19 2010.03.26 -
Ikarus T3.1.1.80.0 2010.03.26 Trojan-Ransom.Win32.Hexzone
Jiangmin 13.0.900 2010.03.26 Trojan/Hexzone.akd
K7AntiVirus 7.10.1004 2010.03.22 -
Kaspersky 7.0.0.125 2010.03.26 -
McAfee 5931 2010.03.25 -
McAfee+Artemis 5931 2010.03.25 Artemis!7C655F4CEF28
McAfee-GW-Edition 6.8.5 2010.03.26 Trojan.Ransom.20480
Microsoft 1.5605 2010.03.26 -
NOD32 4977 2010.03.26 Win32/Ransom.AC
Norman 6.04.10 2010.03.26 W32/BrowseBan.A
nProtect 2009.1.8.0 2010.03.26 -
Panda 10.0.2.2 2010.03.26 Suspicious file
PCTools 7.0.3.5 2010.03.26 -
Prevx 3.0 2010.03.26 -
Rising 22.40.04.04 2010.03.26 -
Sophos 4.52.0 2010.03.26 Troj/HexZon-Gen
Sunbelt 6098 2010.03.26 -
Symantec 20091.2.0.41 2010.03.26 Suspicious.Insight
TheHacker 6.5.2.0.245 2010.03.26 -
TrendMicro 9.120.0.1004 2010.03.26 -
VBA32 3.12.12.2 2010.03.25 -
ViRobot 2010.3.26.2246 2010.03.26 -
VirusBuster 5.0.27.0 2010.03.26 -

Additional information
File size: 19968 bytes
MD5...: 7c655f4cef28390e156b6d9d89d74be4
SHA1..: 2af1eb6ec10b0b9b5a2ae52c5aa88dbca65377a7
SHA256: 6d3b703510bea7b56a0ac5bec94f7f3b4918ce8123b3512989 e3ace5a3ce7d87
ssdeep: 384:c5m3QCvlOJKxVw/VES840AxYi1PgBBrx6yJXty6J:c51MlOnx81wSpJXtLJ
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x4f87
timedatestamp.....: 0x4baa4cfb (Wed Mar 24 17:33:47 2010)
machinetype.......: 0x14c (I386)

File termsrv.dll received on 2010.03.26 15:12:50 (UTC)
Result: 2/42 (4.77%)

Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.03.26 -
AhnLab-V3 5.0.0.2 2010.03.26 -
AntiVir 7.10.5.230 2010.03.26 -
Antiy-AVL 2.0.3.7 2010.03.26 -
Authentium 5.2.0.5 2010.03.26 -
Avast 4.8.1351.0 2010.03.25 -
Avast5 5.0.332.0 2010.03.25 -
AVG 9.0.0.787 2010.03.26 -
BitDefender 7.2 2010.03.26 -
CAT-QuickHeal 10.00 2010.03.26 -
ClamAV 0.96.0.0-git 2010.03.26 -
Comodo 4392 2010.03.26 -
DrWeb 5.0.1.12222 2010.03.26 -
eSafe 7.0.17.0 2010.03.25 -
eTrust-Vet 35.2.7390 2010.03.26 -
F-Prot 4.5.1.85 2010.03.26 -
F-Secure 9.0.15370.0 2010.03.26 -
Fortinet 4.0.14.0 2010.03.26 -
GData 19 2010.03.26 -
Ikarus T3.1.1.80.0 2010.03.26 -
Jiangmin 13.0.900 2010.03.26 Backdoor/Huigezi.akaa
K7AntiVirus 7.10.1004 2010.03.22 Trojan.Win32.Agent2.cnig
Kaspersky 7.0.0.125 2010.03.26 -
McAfee 5931 2010.03.25 -
McAfee+Artemis 5931 2010.03.25 -
McAfee-GW-Edition 6.8.5 2010.03.26 -
Microsoft 1.5605 2010.03.26 -
NOD32 4977 2010.03.26 -
Norman 6.04.10 2010.03.26 -
nProtect 2009.1.8.0 2010.03.26 -
Panda 10.0.2.2 2010.03.26 -
PCTools 7.0.3.5 2010.03.26 -
Prevx 3.0 2010.03.26 -
Rising 22.40.04.04 2010.03.26 -
Sophos 4.52.0 2010.03.26 -
Sunbelt 6098 2010.03.26 -
Symantec 20091.2.0.41 2010.03.26 -
TheHacker 6.5.2.0.245 2010.03.26 -
TrendMicro 9.120.0.1004 2010.03.26 -
VBA32 3.12.12.2 2010.03.25 -
ViRobot 2010.3.26.2246 2010.03.26 -
VirusBuster 5.0.27.0 2010.03.26 -

Additional information
File size: 215552 bytes
MD5...: a77219a971029dc2fb683e8513713803
SHA1..: 1c456520a7b7faf71900c71167038185f5a7d312
SHA256: 1eba9a909641e64e935090956b03182335d298cad78052cef3 b3f75691eb3f50
ssdeep: 3072tNuBp/YIDqobOlqVLBBjAg79G1T65ZF8p5LGvPEDRRQLUMPZU2GdH8CN 9u
iecdtNuBSID4AVdVAWF8p5L2ECPZzCN1
PEiD..: -
PEInfo: PE Structure information

[Юльча]

Файл ff.exe получен 2010.03.26 16:13:06 (UTC)
Результат: 5/42 (11.91%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.03.26 -
AhnLab-V3 5.0.0.2 2010.03.26 -
AntiVir 7.10.5.230 2010.03.26 -
Antiy-AVL 2.0.3.7 2010.03.26 -
Authentium 5.2.0.5 2010.03.26 -
Avast 4.8.1351.0 2010.03.25 -
Avast5 5.0.332.0 2010.03.25 -
AVG 9.0.0.787 2010.03.26 unknown virus Win32/DH.CAFF82025D
BitDefender 7.2 2010.03.26 -
CAT-QuickHeal 10.00 2010.03.26 -
ClamAV 0.96.0.0-git 2010.03.26 -
Comodo 4392 2010.03.26 -
DrWeb 5.0.1.12222 2010.03.26 -
eSafe 7.0.17.0 2010.03.25 -
eTrust-Vet 35.2.7390 2010.03.26 -
F-Prot 4.5.1.85 2010.03.26 -
F-Secure 9.0.15370.0 2010.03.26 -
Fortinet 4.0.14.0 2010.03.26 -
GData 19 2010.03.26 -
Ikarus T3.1.1.80.0 2010.03.26 -
Jiangmin 13.0.900 2010.03.26 -
K7AntiVirus 7.10.1004 2010.03.22 -
Kaspersky 7.0.0.125 2010.03.26 Packed.Win32.Krap.x
McAfee 5931 2010.03.25 -
McAfee+Artemis 5931 2010.03.25 -
McAfee-GW-Edition 6.8.5 2010.03.26 -
Microsoft 1.5605 2010.03.26 -
NOD32 4977 2010.03.26 -
Norman 6.04.10 2010.03.26 -
nProtect 2009.1.8.0 2010.03.26 -
Panda 10.0.2.2 2010.03.26 Suspicious file
PCTools 7.0.3.5 2010.03.26 -
Prevx 3.0 2010.03.26 -
Rising 22.40.04.04 2010.03.26 -
Sophos 4.52.0 2010.03.26 -
Sunbelt 6099 2010.03.26 Trojan.Win32.Generic.pak!cobra
Symantec 20091.2.0.41 2010.03.26 Suspicious.Insight
TheHacker 6.5.2.0.245 2010.03.26 -
TrendMicro 9.120.0.1004 2010.03.26 -
VBA32 3.12.12.2 2010.03.25 -
ViRobot 2010.3.26.2246 2010.03.26 -
VirusBuster 5.0.27.0 2010.03.26 -

http://www.virustotal.com/ru/analisi...e49-1269619986

[Vadim_SVN]

Файл avz00001.dta получен 2010.04.01 11:07:30 (UTC)
Результат: 16/42 (38.1%)

a-squared 4.5.0.50 2010.04.01 Trojan.Win32.SuspectCRC!IK
AhnLab-V3 5.0.0.2 2010.03.31 -
AntiVir 7.10.6.13 2010.04.01 -
Antiy-AVL 2.0.3.7 2010.04.01 -
Authentium 5.2.0.5 2010.04.01 -
Avast 4.8.1351.0 2010.03.31 Win32:Rootkit-gen
Avast5 5.0.332.0 2010.03.31 Win32:Rootkit-gen
AVG 9.0.0.787 2010.04.01 SHeur3.LWD
BitDefender 7.2 2010.04.01 -
CAT-QuickHeal 10.00 2010.04.01 (Suspicious) - DNAScan
ClamAV 0.96.0.0-git 2010.04.01 -
Comodo 4461 2010.04.01 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.2.03300 2010.04.01 Trojan.Packed.19855
eSafe 7.0.17.0 2010.03.31 -
eTrust-Vet 35.2.7401 2010.04.01 -
F-Prot 4.5.1.85 2010.04.01 -
F-Secure 9.0.15370.0 2010.04.01 -
Fortinet 4.0.14.0 2010.04.01 PossibleThreat
GData 19 2010.04.01 Win32:Rootkit-gen
Ikarus T3.1.1.80.0 2010.04.01 Trojan.Win32.SuspectCRC
Jiangmin 13.0.900 2010.04.01 -
K7AntiVirus 7.10.1004 2010.03.22 -
Kaspersky 7.0.0.125 2010.04.01 -
McAfee 5937 2010.03.31 -
McAfee+Artemis 5937 2010.03.31 -
McAfee-GW-Edition 6.8.5 2010.04.01 -
Microsoft 1.5605 2010.03.31 -
NOD32 4991 2010.04.01 Win32/Spy.Shiz.NAI
Norman 6.04.10 2010.03.31 -
nProtect 2009.1.8.0 2010.04.01 -
Panda 10.0.2.2 2010.04.01 Suspicious file
PCTools 7.0.3.5 2010.04.01 -
Prevx 3.0 2010.04.01 -
Rising 22.41.03.04 2010.04.01 Trojan.Win32.Generic.51FCAE35
Sophos 4.52.0 2010.04.01 -
Sunbelt 6124 2010.04.01 Trojan.Win32.Generic!SB.0
Symantec 20091.2.0.41 2010.04.01 Suspicious.Insight
TheHacker 6.5.2.0.248 2010.03.31 -
TrendMicro 9.120.0.1004 2010.04.01 -
VBA32 3.12.12.4 2010.04.01 Win32.Spy.Shiz.NAI
ViRobot 2010.4.1.2256 2010.04.01 -
VirusBuster 5.0.27.0 2010.04.01 -

http://www.virustotal.com/ru/analisi...858-1270120050

[DefesT]

File patch.exe received on 2010.04.01 16:46:36 (UTC)
Result: 10/42 (23.81%)

Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.04.01 -
AhnLab-V3 5.0.0.2 2010.04.01 -
AntiVir 7.10.6.16 2010.04.01 TR/Rootkit.Gen
Antiy-AVL 2.0.3.7 2010.04.01 -
Authentium 5.2.0.5 2010.04.01 -
Avast 4.8.1351.0 2010.04.01 -
Avast5 5.0.332.0 2010.04.01 -
AVG 9.0.0.787 2010.04.01 -
BitDefender 7.2 2010.04.01 Gen:Win32.Malware.bmW@aKexpncc
CAT-QuickHeal 10.00 2010.04.01 -
ClamAV 0.96.0.0-git 2010.04.01 -
Comodo 4461 2010.04.01 -
DrWeb 5.0.2.03300 2010.04.01 -
eSafe 7.0.17.0 2010.04.01 -
eTrust-Vet 35.2.7401 2010.04.01 -
F-Prot 4.5.1.85 2010.04.01 -
F-Secure 9.0.15370.0 2010.04.01 Gen:Win32.Malware.bmW@aKexpncc
Fortinet 4.0.14.0 2010.04.01 -
GData 19 2010.04.01 Gen:Win32.Malware.bmW@aKexpncc
Ikarus T3.1.1.80.0 2010.04.01 -
Jiangmin 13.0.900 2010.04.01 -
K7AntiVirus 7.10.1004 2010.03.22 -
Kaspersky 7.0.0.125 2010.04.01 -
McAfee 5937 2010.03.31 -
McAfee+Artemis 5937 2010.03.31 -
McAfee-GW-Edition 6.8.5 2010.04.01 Trojan.Rootkit.Gen
Microsoft 1.5605 2010.03.31 -
NOD32 4993 2010.04.01 -
Norman 6.04.10 2010.04.01 -
nProtect 2009.1.8.0 2010.04.01 Gen:Win32.Malware.bmW@aKexpncc
Panda 10.0.2.2 2010.04.01 -
PCTools 7.0.3.5 2010.04.01 -
Prevx 3.0 2010.04.01 -
Rising 22.41.03.04 2010.04.01 -
Sophos 4.52.0 2010.04.01 Troj/FakeAle-FJ
Sunbelt 6124 2010.04.01 BehavesLike.Win32.Malware (v)
Symantec 20091.2.0.41 2010.04.01 Suspicious.Insight
TheHacker 6.5.2.0.249 2010.04.01 -
TrendMicro 9.120.0.1004 2010.04.01 PAK_Generic.001
VBA32 3.12.12.4 2010.04.01 -
ViRobot 2010.4.1.2256 2010.04.01 -
VirusBuster 5.0.27.0 2010.04.01 -

Additional information
File size: 16896 bytes
MD5...: 174a637539cf5d031e007f69a8f04e61
SHA1..: f7bb6b1611a92362d2e76e19ef125e8cd5a0e486
SHA256: 95ee666f96c3929e9e430308f1d5d3210bab387efe12c1ff16 de8c536fb26b8a
http://www.virustotal.com/analisis/9...b8a-1270140396

File _install.exe received on 2010.04.01 16:48:00 (UTC)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 32/42 (76.2%)

Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.04.01 Trojan-Downloader.Win32.PassAlert.r!IK
AhnLab-V3 5.0.0.2 2010.04.01 -
AntiVir 7.10.6.16 2010.04.01 HEUR/Crypted
Antiy-AVL 2.0.3.7 2010.04.01 Trojan/Win32.heuristic
Authentium 5.2.0.5 2010.04.01 W32/Heuristic-210!Eldorado
Avast 4.8.1351.0 2010.04.01 Win32:Malware-gen
Avast5 5.0.332.0 2010.04.01 Win32:Malware-gen
AVG 9.0.0.787 2010.04.01 Generic15.CEYF
BitDefender 7.2 2010.04.01 Trojan.Agent.ANPG
CAT-QuickHeal 10.00 2010.04.01 (Suspicious) - DNAScan
ClamAV 0.96.0.0-git 2010.04.01 -
Comodo 4462 2010.04.01 Heur.Packed.Unknown
DrWeb 5.0.2.03300 2010.04.01 Trojan.Winlock.275
eSafe 7.0.17.0 2010.04.01 Win32.Stration
eTrust-Vet 35.2.7401 2010.04.01 -
F-Prot 4.5.1.85 2010.04.01 W32/Heuristic-210!Eldorado
F-Secure 9.0.15370.0 2010.04.01 Trojan.Agent.ANPG
Fortinet 4.0.14.0 2010.04.01 -
GData 19 2010.04.01 Trojan.Agent.ANPG
Ikarus T3.1.1.80.0 2010.04.01 Trojan-Downloader.Win32.PassAlert.r
Jiangmin 13.0.900 2010.04.01 Backdoor/RBot.njz
K7AntiVirus 7.10.1004 2010.03.22 -
Kaspersky 7.0.0.125 2010.04.01 Heur.Trojan.Generic
McAfee 5937 2010.03.31 -
McAfee+Artemis 5937 2010.03.31 Artemis!7C957776E1F1
McAfee-GW-Edition 6.8.5 2010.04.01 Heuristic.LooksLike.Win32.Suspicious.H
Microsoft 1.5605 2010.03.31 -
NOD32 4993 2010.04.01 a variant of Win32/Small.NGO
Norman 6.04.10 2010.04.01 Suspicious_M.gen
nProtect 2009.1.8.0 2010.04.01 Trojan.Agent.ANPG
Panda 10.0.2.2 2010.04.01 Trj/CI.A
PCTools 7.0.3.5 2010.04.01 HeurEngine.ZeroDayThreat
Prevx 3.0 2010.04.01 -
Rising 22.41.03.04 2010.04.01 -
Sophos 4.52.0 2010.04.01 Mal/EncPk-BA
Sunbelt 6124 2010.04.01 Trojan.Win32.Generic!BT
Symantec 20091.2.0.41 2010.04.01 Suspicious.MLApp
TheHacker 6.5.2.0.249 2010.04.01 W32/Behav-Heuristic-066
TrendMicro 9.120.0.1004 2010.04.01 Cryp_MEW-11
VBA32 3.12.12.4 2010.04.01 Trojan.Win32.Scar.akln
ViRobot 2010.4.1.2256 2010.04.01 -
VirusBuster 5.0.27.0 2010.04.01 Packed/MEW

Additional information
File size: 2290 bytes
MD5...: 7c957776e1f1f18d80240f9c366fa7bb
SHA1..: f156ca0d2507fef7e080860ea38ecede574b6f52
SHA256: d3fd1d0b92787898d34836ec22bea675ddefb1ce5c6725576c fc5df6d31a0ad3
http://www.virustotal.com/analisis/d...ad3-1270140480

[AlexGOMEL]

Файл netrazis.exe получен 2010.04.01 16:40:38 (UTC)
Текущий статус: закончено
Результат: 9/42 (21.43%)
Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.04.01 -
AhnLab-V3 5.0.0.2 2010.04.01 -
AntiVir 7.10.6.16 2010.04.01 -
Antiy-AVL 2.0.3.7 2010.04.01 -
Authentium 5.2.0.5 2010.04.01 -
Avast 4.8.1351.0 2010.04.01 Win32:MalOb-AI
Avast5 5.0.332.0 2010.04.01 Win32:MalOb-AI
AVG 9.0.0.787 2010.04.01 -
BitDefender 7.2 2010.04.01 -
CAT-QuickHeal 10.00 2010.04.01 -
ClamAV 0.96.0.0-git 2010.04.01 -
Comodo 4461 2010.04.01 -
DrWeb 5.0.2.03300 2010.04.01 -
eSafe 7.0.17.0 2010.04.01 -
eTrust-Vet 35.2.7401 2010.04.01 -
F-Prot 4.5.1.85 2010.04.01 -
F-Secure 9.0.15370.0 2010.04.01 -
Fortinet 4.0.14.0 2010.04.01 -
GData 19 2010.04.01 Win32:MalOb-AI
Ikarus T3.1.1.80.0 2010.04.01 -
Jiangmin 13.0.900 2010.04.01 -
K7AntiVirus 7.10.1004 2010.03.22 -
Kaspersky 7.0.0.125 2010.04.01 -
McAfee 5937 2010.03.31 W32/Palevo.gen.a
McAfee+Artemis 5937 2010.03.31 W32/Palevo.gen.a
McAfee-GW-Edition 6.8.5 2010.04.01 -
Microsoft 1.5605 2010.03.31 -
NOD32 4993 2010.04.01 a variant of Win32/Peerfrag.GR
Norman 6.04.10 2010.04.01 -
nProtect 2009.1.8.0 2010.04.01 -
Panda 10.0.2.2 2010.04.01 -
PCTools 7.0.3.5 2010.04.01 -
Prevx 3.0 2010.04.01 High Risk Cloaked Malware
Rising 22.41.03.04 2010.04.01 -
Sophos 4.52.0 2010.04.01 -
Sunbelt 6124 2010.04.01 -
Symantec 20091.2.0.41 2010.04.01 Suspicious.Insight
TheHacker 6.5.2.0.249 2010.04.01 -
TrendMicro 9.120.0.1004 2010.04.01 TROJ_BREDLAB.SMD
VBA32 3.12.12.4 2010.04.01 -
ViRobot 2010.4.1.2256 2010.04.01 -
VirusBuster 5.0.27.0 2010.04.01 -

Дополнительная информация
File size: 108032 bytes
MD5 : dded5ca3e5d2899aeed5c54371866f38
SHA1 : dacc50134ea7a8e223c7d13c4304c10e6f4fb166
SHA256: 5a8847eb917eb16a00dbcd853048d1615a922a4284c209ec53 222859e88588ea

[Shu_b]

Народное тестирование. Что прислали - посчитали. Февраль - Март:
(ну и вчерашние тоже прихватил)

[senyak]

Во какая гадость ломится в Скайп уже второй день

Файл Mario_Kolaricjpg.zip получен 2010.04.05 14:07:41 (UTC)
Текущий статус: закончено
Результат: 6/39 (15.38%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.04.05 -
AhnLab-V3 5.0.0.2 2010.04.05 -
AntiVir 7.10.6.24 2010.04.03 TR/Dropper.Gen
Antiy-AVL 2.0.3.7 2010.04.02 -
Authentium 5.2.0.5 2010.04.05 -
Avast 4.8.1351.0 2010.04.05 -
Avast5 5.0.332.0 2010.04.05 -
AVG 9.0.0.787 2010.04.05 -
BitDefender 7.2 2010.04.05 -
CAT-QuickHeal 10.00 2010.04.05 -
ClamAV 0.96.0.3-git 2010.04.05 -
Comodo 4506 2010.04.05 -
DrWeb 5.0.2.03300 2010.04.05 Win32.HLLW.SpyNet
eSafe 7.0.17.0 2010.04.01 -
eTrust-Vet 35.2.7408 2010.04.05 -
F-Prot 4.5.1.85 2010.04.05 -
F-Secure 9.0.15370.0 2010.04.05 -
Fortinet 4.0.14.0 2010.04.04 -
GData 19 2010.04.05 -
Ikarus T3.1.1.80.0 2010.04.05 -
Jiangmin 13.0.900 2010.04.05 -
Kaspersky 7.0.0.125 2010.04.05 -
McAfee-GW-Edition 6.8.5 2010.04.03 Trojan.Dropper.Gen
Microsoft 1.5605 2010.04.05 -
NOD32 5001 2010.04.05 -
Norman 6.04.10 2010.04.05 -
nProtect 2009.1.8.0 2010.04.05 -
Panda 10.0.2.2 2010.04.05 Bck/Bifrost.gen
PCTools 7.0.3.5 2010.04.05 -
Prevx 3.0 2010.04.05 -
Rising 22.41.04.05 2010.04.02 -
Sophos 4.52.0 2010.04.05 -
Sunbelt 6139 2010.04.05 Virtool.Win32.VBInject.gen (v)
Symantec 20091.2.0.41 2010.04.05 Suspicious.Insight
TheHacker 6.5.2.0.253 2010.04.05 -
TrendMicro 9.120.0.1004 2010.04.05 -
VBA32 3.12.12.4 2010.04.05 -
ViRobot 2010.4.5.2261 2010.04.05 -
VirusBuster 5.0.27.0 2010.04.04 -

Дополнительная информация
File size: 40395 bytes
MD5 : af7d11e9bdab6e39b3b8530b7711de06
SHA1 : 7b1000a284ae08a7c810ec2a58930698b09428cb
SHA256: 1c1b7e719c01c36552a945c54c28dfd7532eece7e1c4151217 726dfa8fc256c3
TrID : File type identification
ZIP compressed archive (100.0%)

http://www.virustotal.com/ru/analisi...6c3-1270476461

[Юльча]

Файл install_flash_player.exe получен 2010.04.06 05:18:42 (UTC)
Результат: 10/39 (25.65%)

Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.04.06 Trojan-Dropper.Win32.Sirefef!IK
AhnLab-V3 5.0.0.2 2010.04.05 -
AntiVir 7.10.6.25 2010.04.05 TR/Crypt.ZPACK.Gen
Antiy-AVL 2.0.3.7 2010.04.02 -
Authentium 5.2.0.5 2010.04.06 -
Avast 4.8.1351.0 2010.04.05 -
Avast5 5.0.332.0 2010.04.05 -
AVG 9.0.0.787 2010.04.05 -
BitDefender 7.2 2010.04.06 -
CAT-QuickHeal 10.00 2010.04.06 -
ClamAV 0.96.0.3-git 2010.04.06 -
Comodo 4513 2010.04.06 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.2.03300 2010.04.06 -
eSafe 7.0.17.0 2010.04.01 -
eTrust-Vet 35.2.7409 2010.04.05 -
F-Prot 4.5.1.85 2010.04.05 -
F-Secure 9.0.15370.0 2010.04.06 -
Fortinet 4.0.14.0 2010.04.04 -
GData 19 2010.04.06 -
Ikarus T3.1.1.80.0 2010.04.06 Trojan-Dropper.Win32.Sirefef
Jiangmin 13.0.900 2010.04.06 -
Kaspersky 7.0.0.125 2010.04.06 -
McAfee-GW-Edition 6.8.5 2010.04.05 Trojan.Crypt.ZPACK.Gen
Microsoft 1.5605 2010.04.06 TrojanDropper:Win32/Sirefef.B
NOD32 5002 2010.04.05 a variant of Win32/Kryptik.DMJ
Norman 6.04.10 2010.04.05 -
nProtect 2009.1.8.0 2010.04.05 -
Panda 10.0.2.2 2010.04.05 Suspicious file
PCTools 7.0.3.5 2010.04.06 -
Prevx 3.0 2010.04.06 -
Rising 22.42.01.01 2010.04.06 -
Sophos 4.52.0 2010.04.06 -
Sunbelt 6142 2010.04.06 -
Symantec 20091.2.0.41 2010.04.06 Suspicious.Insight
TheHacker 6.5.2.0.254 2010.04.05 -
TrendMicro 9.120.0.1004 2010.04.06 -
VBA32 3.12.12.4 2010.04.05 Trojan.Win32.Waledac.45
ViRobot 2010.4.6.2262 2010.04.06 -
VirusBuster 5.0.27.0 2010.04.05 -

http://www.virustotal.com/ru/analisi...ca1-1270531122

[AlexGOMEL]

Файл avz00007.dta получен 2010.04.08 18:10:49 (UTC)Антивирус Версия Обновление Результат
a-squared 4.5.0.50 2010.04.08 -
AhnLab-V3 5.0.0.2 2010.04.08 -
AntiVir 7.10.6.49 2010.04.08 -
Antiy-AVL 2.0.3.7 2010.04.08 -
Authentium 5.2.0.5 2010.04.08 -
Avast 4.8.1351.0 2010.04.08 -
Avast5 5.0.332.0 2010.04.08 -
AVG 9.0.0.787 2010.04.08 -
BitDefender 7.2 2010.04.08 -
CAT-QuickHeal 10.00 2010.04.08 -
ClamAV 0.96.0.3-git 2010.04.08 -
Comodo 4540 2010.04.08 -
DrWeb 5.0.2.03300 2010.04.08 -
eSafe 7.0.17.0 2010.04.08 -
eTrust-Vet 35.2.7414 2010.04.08 -
F-Prot 4.5.1.85 2010.04.07 -
F-Secure 9.0.15370.0 2010.04.08 -
Fortinet 4.0.14.0 2010.04.08 -
GData 19 2010.04.08 -
Ikarus T3.1.1.80.0 2010.04.08 -
Jiangmin 13.0.900 2010.04.08 -
Kaspersky 7.0.0.125 2010.04.08 -
McAfee-GW-Edition 6.8.5 2010.04.08 -
Microsoft 1.5605 2010.04.08 -
NOD32 5011 2010.04.08 -
Norman 6.04.11 2010.04.08 -
nProtect 2009.1.8.0 2010.04.06 -
Panda 10.0.2.2 2010.04.08 -
PCTools 7.0.3.5 2010.04.08 -
Prevx 3.0 2010.04.08 -
Rising 22.42.03.03 2010.04.08 -
Sophos 4.52.0 2010.04.08 -
Sunbelt 6151 2010.04.08 -
Symantec 20091.2.0.41 2010.04.08 Suspicious.Insight
TheHacker 6.5.2.0.258 2010.04.08 -
TrendMicro 9.120.0.1004 2010.04.08 -
VBA32 3.12.12.4 2010.04.05 suspected of Malware-Cryptor.Win32.MTA.gen
ViRobot 2010.4.8.2267 2010.04.08 -
VirusBuster 5.0.27.0 2010.04.08 -

Дополнительная информация
File size: 183296 bytes
MD5 : 6238e5fc8c4d2c5cef3368a6112ca3b9
SHA1 : 1b4e65878d64b36d93a4bd6c017412234115dbf5
SHA256: a98d45e6cb1e5601169eb9614ba58c96048ea396d6d64f63a0 d9ad2002ec3c85

Два подозрения, но....

[gjf]

File TDSS.new.exe received on 2010.04.09 10:14:58 (UTC)
Result: 7/39 (17.95%)

a-squared 4.5.0.50 2010.04.09 -
AhnLab-V3 5.0.0.2 2010.04.09 -
AntiVir 7.10.6.52 2010.04.09 -
Antiy-AVL 2.0.3.7 2010.04.09 -
Authentium 5.2.0.5 2010.04.09 -
Avast 4.8.1351.0 2010.04.09 -
Avast5 5.0.332.0 2010.04.09 -
AVG 9.0.0.787 2010.04.09 Win32/Heur
BitDefender 7.2 2010.04.09 -
CAT-QuickHeal 10.00 2010.04.09 -
ClamAV 0.96.0.3-git 2010.04.09 -
Comodo 4547 2010.04.09 -
DrWeb 5.0.2.03300 2010.04.09 -
eSafe 7.0.17.0 2010.04.08 -
eTrust-Vet 35.2.7417 2010.04.09 -
F-Prot 4.5.1.85 2010.04.08 -
F-Secure 9.0.15370.0 2010.04.09 Suspicious:W32/Malware!Gemini
Fortinet 4.0.14.0 2010.04.08 -
GData 19 2010.04.09 -
Ikarus T3.1.1.80.0 2010.04.09 -
Jiangmin 13.0.900 2010.04.09 -
Kaspersky 7.0.0.125 2010.04.09 -
McAfee-GW-Edition 6.8.5 2010.04.09 Heuristic.LooksLike.Trojan.TDss.B
Microsoft 1.5605 2010.04.09 -
NOD32 5012 2010.04.09 a variant of Win32/Kryptik.DON
Norman 6.04.11 2010.04.09 -
nProtect 2009.1.8.0 2010.04.06 -
Panda 10.0.2.2 2010.04.08 Suspicious file
PCTools 7.0.3.5 2010.04.09 -
Prevx 3.0 2010.04.09 -
Rising 22.42.04.03 2010.04.09 -
Sophos 4.52.0 2010.04.09 Sus/UnkPack-C
Sunbelt 6155 2010.04.09 -
Symantec 20091.2.0.41 2010.04.09 Packed.Generic.295
TheHacker 6.5.2.0.258 2010.04.09 -
TrendMicro 9.120.0.1004 2010.04.09 -
VBA32 3.12.12.4 2010.04.09 -
ViRobot 2010.4.9.2269 2010.04.09 -
VirusBuster 5.0.27.0 2010.04.08 -

http://www.virustotal.com/analisis/7...a68-1270808098

P.S. И это очень печально.

Добавлено через 24 минуты

File 3.safe received on 2010.04.09 10:40:56 (UTC)
Result: 7/39 (17.95%)

a-squared 4.5.0.50 2010.04.09 Trojan.Win32.Hiloti!IK
AhnLab-V3 5.0.0.2 2010.04.09 -
AntiVir 7.10.6.52 2010.04.09 -
Antiy-AVL 2.0.3.7 2010.04.09 -
Authentium 5.2.0.5 2010.04.09 -
Avast 4.8.1351.0 2010.04.09 -
Avast5 5.0.332.0 2010.04.09 -
AVG 9.0.0.787 2010.04.09 -
BitDefender 7.2 2010.04.09 -
CAT-QuickHeal 10.00 2010.04.09 -
ClamAV 0.96.0.3-git 2010.04.09 -
Comodo 4547 2010.04.09 TrojWare.Win32.Downloader.Mufanom.I
DrWeb 5.0.2.03300 2010.04.09 -
eSafe 7.0.17.0 2010.04.08 -
eTrust-Vet 35.2.7417 2010.04.09 Win32/Hiloti.B!generic
F-Prot 4.5.1.85 2010.04.08 -
F-Secure 9.0.15370.0 2010.04.09 -
Fortinet 4.0.14.0 2010.04.08 -
GData 19 2010.04.09 -
Ikarus T3.1.1.80.0 2010.04.09 Trojan.Win32.Hiloti
Jiangmin 13.0.900 2010.04.09 -
Kaspersky 7.0.0.125 2010.04.09 -
McAfee-GW-Edition 6.8.5 2010.04.09 -
Microsoft 1.5605 2010.04.09 -
NOD32 5012 2010.04.09 -
Norman 6.04.11 2010.04.09 -
nProtect 2009.1.8.0 2010.04.06 -
Panda 10.0.2.2 2010.04.08 Suspicious file
PCTools 7.0.3.5 2010.04.09 -
Prevx 3.0 2010.04.09 -
Rising 22.42.04.03 2010.04.09 -
Sophos 4.52.0 2010.04.09 Mal/Hiloti-C
Sunbelt 6155 2010.04.09 -
Symantec 20091.2.0.41 2010.04.09 -
TheHacker 6.5.2.0.258 2010.04.09 -
TrendMicro 9.120.0.1004 2010.04.09 -
VBA32 3.12.12.4 2010.04.09 Bscope.Malware-Cryptor.Tip
ViRobot 2010.4.9.2269 2010.04.09 -
VirusBuster 5.0.27.0 2010.04.08 -

http://www.virustotal.com/analisis/a...a51-1270809656

Интересно, что даёт анпак того же файла:

File dump.safe received on 2010.04.09 10:44:08 (UTC)
Result: 11/39 (28.21%)

a-squared 4.5.0.50 2010.04.09 Trojan-Downloader.Win32.Mufanom!IK
AhnLab-V3 5.0.0.2 2010.04.09 -
AntiVir 7.10.6.52 2010.04.09 -
Antiy-AVL 2.0.3.7 2010.04.09 -
Authentium 5.2.0.5 2010.04.09 W32/Mufanom.A.gen!Eldorado
Avast 4.8.1351.0 2010.04.09 -
Avast5 5.0.332.0 2010.04.09 -
AVG 9.0.0.787 2010.04.09 Generic17.GST
BitDefender 7.2 2010.04.09 -
CAT-QuickHeal 10.00 2010.04.09 -
ClamAV 0.96.0.3-git 2010.04.09 -
Comodo 4547 2010.04.09 -
DrWeb 5.0.2.03300 2010.04.09 Trojan.DownLoad1.43052
eSafe 7.0.17.0 2010.04.08 -
eTrust-Vet 35.2.7417 2010.04.09 -
F-Prot 4.5.1.85 2010.04.08 W32/Mufanom.A.gen!Eldorado
F-Secure 9.0.15370.0 2010.04.09 Trojan-Downloader:W32/Mufanom.B
Fortinet 4.0.14.0 2010.04.08 -
GData 19 2010.04.09 -
Ikarus T3.1.1.80.0 2010.04.09 Trojan-Downloader.Win32.Mufanom
Jiangmin 13.0.900 2010.04.09 -
Kaspersky 7.0.0.125 2010.04.09 Trojan-Downloader.Win32.Mufanom.pgq
McAfee-GW-Edition 6.8.5 2010.04.09 -
Microsoft 1.5605 2010.04.09 Trojan:Win32/Hiloti.gen!D
NOD32 5012 2010.04.09 probably a variant of Win32/Cimag.W
Norman 6.04.11 2010.04.09 -
nProtect 2009.1.8.0 2010.04.06 -
Panda 10.0.2.2 2010.04.08 -
PCTools 7.0.3.5 2010.04.09 -
Prevx 3.0 2010.04.09 -
Rising 22.42.04.03 2010.04.09 Trojan.DL.Win32.Downloader.GEN
Sophos 4.52.0 2010.04.09 -
Sunbelt 6155 2010.04.09 -
Symantec 20091.2.0.41 2010.04.09 -
TheHacker 6.5.2.0.258 2010.04.09 -
TrendMicro 9.120.0.1004 2010.04.09 -
VBA32 3.12.12.4 2010.04.09 -
ViRobot 2010.4.9.2269 2010.04.09 -
VirusBuster 5.0.27.0 2010.04.08 -

Добавлено через 1 час 36 минут

Как только не называют Black Energy 2.1+! А некоторые - вообще никак не называют
File rootkit.ex1 received on 2010.04.09 12:19:39 (UTC)
Result: 26/39 (66.67%)

a-squared 4.5.0.50 2010.04.09 Trojan.SuspectCRC!IK
AhnLab-V3 5.0.0.2 2010.04.09 -
AntiVir 7.10.6.53 2010.04.09 TR/Obfuscated.GQ.10
Antiy-AVL 2.0.3.7 2010.04.09 Trojan/Win32.Agent.gen
Authentium 5.2.0.5 2010.04.09 -
Avast 4.8.1351.0 2010.04.09 Win32bot-LYA
Avast5 5.0.332.0 2010.04.09 Win32bot-LYA
AVG 9.0.0.787 2010.04.09 Generic16.BYLT
BitDefender 7.2 2010.04.09 Trojan.Generic.3256916
CAT-QuickHeal 10.00 2010.04.09 Backdoor.Rustock.e
ClamAV 0.96.0.3-git 2010.04.09 -
Comodo 4548 2010.04.09 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.2.03300 2010.04.09 Trojan.Winlock.1110
eSafe 7.0.17.0 2010.04.08 -
eTrust-Vet 35.2.7417 2010.04.09 -
F-Prot 4.5.1.85 2010.04.08 -
F-Secure 9.0.15370.0 2010.04.09 Trojan.Generic.3256916
Fortinet 4.0.14.0 2010.04.08 W32/Bancos.E
GData 19 2010.04.09 Trojan.Generic.3256916
Ikarus T3.1.1.80.0 2010.04.09 Trojan.SuspectCRC
Jiangmin 13.0.900 2010.04.09 -
Kaspersky 7.0.0.125 2010.04.09 -
McAfee-GW-Edition 6.8.5 2010.04.09 Heuristic.LooksLike.Win32.Suspicious.B!85
Microsoft 1.5605 2010.04.09 Backdoor:Win32/Rustock.E
NOD32 5012 2010.04.09 probably a variant of Win32/Kryptik.BRT
Norman 6.04.11 2010.04.09 W32/Obfuscated.V
nProtect 2009.1.8.0 2010.04.06 -
Panda 10.0.2.2 2010.04.08 Trj/CI.A
PCTools 7.0.3.5 2010.04.09 Trojan-PSW.Generic
Prevx 3.0 2010.04.09 -
Rising 22.42.04.03 2010.04.09 -
Sophos 4.52.0 2010.04.09 Mal/Bancos-E
Sunbelt 6155 2010.04.09 Trojan.Win32.Generic!BT
Symantec 20091.2.0.41 2010.04.09 Infostealer
TheHacker 6.5.2.0.258 2010.04.09 -
TrendMicro 9.120.0.1004 2010.04.09 TROJ_Gen.BA33L9
VBA32 3.12.12.4 2010.04.09 Malware-Cryptor.Win32.Vals.22
ViRobot 2010.4.9.2269 2010.04.09 -
VirusBuster 5.0.27.0 2010.04.09 Trojan.Obfuscated.DXYU

http://www.virustotal.com/analisis/5...4a0-1270815579

[Surfer]

File vk-__o______a.exe received on 2010.04.13 10:42:41 (UTC)
Result: 10/40 (25%)

a-squared 4.5.0.50 2010.04.13 -
AhnLab-V3 5.0.0.2 2010.04.12 -
AntiVir 7.10.6.65 2010.04.13 -
Antiy-AVL 2.0.3.7 2010.04.13 -
Authentium 5.2.0.5 2010.04.12 -
Avast 4.8.1351.0 2010.04.13 -
Avast5 5.0.332.0 2010.04.13 -
AVG 9.0.0.787 2010.04.13 -
BitDefender 7.2 2010.04.13 -
CAT-QuickHeal 10.00 2010.04.13 -
ClamAV 0.96.0.3-git 2010.04.13 Trojan.Magania-9679
Comodo 4585 2010.04.13 TrojWare.Win32.TrojanDropper.Delf.~HP
DrWeb 5.0.2.03300 2010.04.13 -
eSafe 7.0.17.0 2010.04.12 -
eTrust-Vet 35.2.7421 2010.04.12 -
F-Prot 4.5.1.85 2010.04.12 -
F-Secure 9.0.15370.0 2010.04.13 -
Fortinet 4.0.14.0 2010.04.12 -
GData 19 2010.04.13 -
Ikarus T3.1.1.80.0 2010.04.13 -
Jiangmin 13.0.900 2010.04.13 Worm.VBS.ew
Kaspersky 7.0.0.125 2010.04.13 Type_Script
McAfee 5.400.0.1158 2010.04.13 -
McAfee-GW-Edition 6.8.5 2010.04.13 Heuristic.LooksLike.Win32.Suspicious.H
Microsoft 1.5605 2010.04.13 -
NOD32 5024 2010.04.13 -
Norman 6.04.11 2010.04.13 W32/Agent.TXES
nProtect 2009.1.8.0 2010.04.06 Trojan/W32.Agent.180736.K
Panda 10.0.2.7 2010.04.13 -
PCTools 7.0.3.5 2010.04.13 -
Prevx 3.0 2010.04.13 High Risk Worm
Rising 22.43.01.01 2010.04.13 Trojan.Win32.GyBird.c
Sophos 4.52.0 2010.04.13 -
Sunbelt 6170 2010.04.13 -
Symantec 20091.2.0.41 2010.04.13 -
TheHacker 6.5.2.0.259 2010.04.12 -
TrendMicro 9.120.0.1004 2010.04.13 -
VBA32 3.12.12.4 2010.04.09 -
ViRobot 2010.4.13.2273 2010.04.13 Trojan.Win32.Delf.180224.B
VirusBuster 5.0.27.0 2010.04.12 -

http://www.virustotal.com/analisis/7...3e1-1271155361

[zalman]

Файл autorun.in получен 2010.04.14 03:54:13 (UTC)

a-squared 4.5.0.50 2010.04.14 -
AhnLab-V3 5.0.0.2 2010.04.13 -
AntiVir 7.10.6.69 2010.04.13 TR/AutorunINF.633
Antiy-AVL 2.0.3.7 2010.04.13 -
Authentium 5.2.0.5 2010.04.14 -
Avast 4.8.1351.0 2010.04.13 -
Avast5 5.0.332.0 2010.04.13 -
AVG 9.0.0.787 2010.04.14 -
BitDefender 7.2 2010.04.14 Trojan.AutorunINF.Gen
CAT-QuickHeal 10.00 2010.04.14 -
ClamAV 0.96.0.3-git 2010.04.13 Worm.Autorun-1792
Comodo 4593 2010.04.14 -
DrWeb 5.0.2.03300 2010.04.14 -
eSafe 7.0.17.0 2010.04.13 -
eTrust-Vet 35.2.7423 2010.04.13 -
F-Prot 4.5.1.85 2010.04.13 -
F-Secure 9.0.15370.0 2010.04.14 Trojan.AutorunINF.Gen
Fortinet 4.0.14.0 2010.04.12 -
GData 19 2010.04.14 Trojan.AutorunINF.Gen
Ikarus T3.1.1.80.0 2010.04.14 -
Jiangmin 13.0.900 2010.04.13 -
Kaspersky 7.0.0.125 2010.04.14 -
McAfee 5.400.0.1158 2010.04.14 Generic!atr.b
McAfee-GW-Edition 6.8.5 2010.04.13 Trojan.AutorunINF.633
Microsoft 1.5605 2010.04.14 VirTool:INF/Autorun.gen
NOD32 5026 2010.04.13 -
Norman 6.04.11 2010.04.13 -
nProtect 2009.1.8.0 2010.04.06 Trojan.AutorunINF.Gen
Panda 10.0.2.7 2010.04.13 W32/Harakit.D.worm
PCTools 7.0.3.5 2010.04.14 -
Prevx 3.0 2010.04.14 -
Rising 22.43.02.01 2010.04.14 -
Sophos 4.52.0 2010.04.14 -
Sunbelt 6174 2010.04.14 INF.Autorun (v)
Symantec 20091.2.0.41 2010.04.14 -
TheHacker 6.5.2.0.260 2010.04.13 Trojan/Autorun.gen
TrendMicro 9.120.0.1004 2010.04.13 -
VBA32 3.12.12.4 2010.04.09 -
ViRobot 2010.4.13.2274 2010.04.13 -
VirusBuster 5.0.27.0 2010.04.13 -

http://www.virustotal.com/ru/analisi...cef-1271217253

Добавлено через 5 минут

айл autorun.i получен 2010.04.14 04:04:34 (UTC)
Результат: 12/40 (30%)

a-squared 4.5.0.50 2010.04.14 -
AhnLab-V3 5.0.0.2 2010.04.13 -
AntiVir 7.10.6.69 2010.04.13 -
Antiy-AVL 2.0.3.7 2010.04.13 -
Authentium 5.2.0.5 2010.04.14 -
Avast 4.8.1351.0 2010.04.13 BV:AutoRun-AK
Avast5 5.0.332.0 2010.04.13 BV:AutoRun-AK
AVG 9.0.0.787 2010.04.14 -
BitDefender 7.2 2010.04.14 Trojan.AutorunINF.Gen
CAT-QuickHeal 10.00 2010.04.14 -
ClamAV 0.96.0.3-git 2010.04.13 Worm.Autorun-1792
Comodo 4593 2010.04.14 -
DrWeb 5.0.2.03300 2010.04.14 -
eSafe 7.0.17.0 2010.04.13 -
eTrust-Vet 35.2.7423 2010.04.13 -
F-Prot 4.5.1.85 2010.04.13 -
F-Secure 9.0.15370.0 2010.04.14 Trojan.AutorunINF.Gen
Fortinet 4.0.14.0 2010.04.12 -
GData 19 2010.04.14 Trojan.AutorunINF.Gen
Ikarus T3.1.1.80.0 2010.04.14 -
Jiangmin 13.0.900 2010.04.13 -
Kaspersky 7.0.0.125 2010.04.14 -
McAfee 5.400.0.1158 2010.04.14 Generic!atr.b
McAfee-GW-Edition 6.8.5 2010.04.13 -
Microsoft 1.5605 2010.04.14 VirTool:INF/Autorun.gen
NOD32 5026 2010.04.13 -
Norman 6.04.11 2010.04.13 -
nProtect 2009.1.8.0 2010.04.06 Trojan.AutorunINF.Gen
Panda 10.0.2.7 2010.04.13 W32/Harakit.D.worm
PCTools 7.0.3.5 2010.04.14 -
Prevx 3.0 2010.04.14 -
Rising 22.43.02.01 2010.04.14 -
Sophos 4.52.0 2010.04.14 -
Sunbelt 6174 2010.04.14 INF.Autorun (v)
Symantec 20091.2.0.41 2010.04.14 -
TheHacker 6.5.2.0.260 2010.04.13 Trojan/Autorun.gen
TrendMicro 9.120.0.1004 2010.04.13 -
VBA32 3.12.12.4 2010.04.09 -
ViRobot 2010.4.13.2274 2010.04.13 -
VirusBuster 5.0.27.0 2010.04.13 -

http://www.virustotal.com/ru/analisi...c6d-1271217874