Исследование антивирусов 7

**Winsent** · 26.01.2011, 12:59

File name: avloader_2042-8_tty8.exe
Submission date: 2011-01-26 09:34:52 (UTC)
Current status: queued queued analysing finished
Result: 8/ 42 (19.0%)

Compact Print results Antivirus Version Last Update Result

AhnLab-V3 2011.01.18.00 2011.01.17 -
AntiVir 7.11.1.245 2011.01.25 -
Antiy-AVL 2.0.3.7 2011.01.26 -
Avast 4.8.1351.0 2011.01.25 -
Avast5 5.0.677.0 2011.01.25 -
AVG 10.0.0.1190 2011.01.26 -
BitDefender 7.2 2011.01.26 Trojan.Generic.KD.117686
CAT-QuickHeal 11.00 2011.01.25 -
ClamAV 0.96.4.0 2011.01.26 -
Commtouch 5.2.11.5 2011.01.26 -
Comodo 7504 2011.01.26 Heur.Packed.Unknown
DrWeb 5.0.2.03300 2011.01.26 -
Emsisoft 5.1.0.1 2011.01.26 -
eSafe 7.0.17.0 2011.01.24 -
eTrust-Vet 36.1.8120 2011.01.26 Win32/Renos.D!generic
F-Prot 4.6.2.117 2011.01.25 -
F-Secure 9.0.16160.0 2011.01.26 Trojan.Generic.KD.117686
Fortinet 4.2.254.0 2011.01.26 -
GData 21 2011.01.26 Trojan.Generic.KD.117686
Ikarus T3.1.1.97.0 2011.01.26 -
Jiangmin 13.0.900 2011.01.26 -
K7AntiVirus 9.78.3647 2011.01.25 -
Kaspersky 7.0.0.125 2011.01.26 -
McAfee 5.400.0.1158 2011.01.26 -
McAfee-GW-Edition 2010.1C 2011.01.25 -
Microsoft 1.6502 2011.01.26 Rogue:Win32/FakeXPA
NOD32 5819 2011.01.26 -
Norman 6.06.12 2011.01.26 -
nProtect 2011-01-18.01 2011.01.18 -
Panda 10.0.2.7 2011.01.25 Suspicious file
PCTools 7.0.3.5 2011.01.26 -
Prevx 3.0 2011.01.26 Medium Risk Malware
Rising 23.42.02.03 2011.01.26 -
Sophos 4.61.0 2011.01.26 -
SUPERAntiSpyware 4.40.0.1006 2011.01.26 -
Symantec 20101.3.0.103 2011.01.26 -
TheHacker 6.7.0.1.120 2011.01.26 -
TrendMicro 9.120.0.1004 2011.01.26 -
TrendMicro-HouseCall 9.120.0.1004 2011.01.26 -
VIPRE 8200 2011.01.26 -
ViRobot 2011.1.26.4276 2011.01.26 -
VirusBuster 13.6.164.1 2011.01.25 -

Надоело быть жертвой? Стань профи по информационной безопасности, получай самую свежую информацию об угрозах и средствах защиты от ведущего российского аналитического центра Anti-Malware.ru:

**big_boss** · 31.01.2011, 15:55

File name:
123242235.exe
Submission date:
2011-01-31 12:48:29 (UTC)
Current status:
finished
Result:
7/ 43 (16.3%) VT Community

not reviewed
Safety score: -

Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 2011.01.27.01 2011.01.27 -
AntiVir 7.11.2.37 2011.01.31 -
Antiy-AVL 2.0.3.7 2011.01.28 -
Avast 4.8.1351.0 2011.01.31 -
Avast5 5.0.677.0 2011.01.31 -
AVG 10.0.0.1190 2011.01.31 -
BitDefender 7.2 2011.01.31 Gen:Variant.Kazy.9799
CAT-QuickHeal 11.00 2011.01.31 -
ClamAV 0.96.4.0 2011.01.30 -
Commtouch 5.2.11.5 2011.01.31 -
Comodo 7552 2011.01.31 -
DrWeb 5.0.2.03300 2011.01.31 -
Emsisoft 5.1.0.1 2011.01.31 -
eSafe 7.0.17.0 2011.01.30 -
eTrust-Vet 36.1.8129 2011.01.31 -
F-Prot 4.6.2.117 2011.01.30 -
F-Secure 9.0.16160.0 2011.01.31 Gen:Variant.Kazy.9799
Fortinet 4.2.254.0 2011.01.31 -
GData 21 2011.01.31 Gen:Variant.Kazy.9799
Ikarus T3.1.1.97.0 2011.01.31 -
Jiangmin 13.0.900 2011.01.31 -
K7AntiVirus 9.78.3690 2011.01.31 -
Kaspersky 7.0.0.125 2011.01.31 -
McAfee 5.400.0.1158 2011.01.31 -
McAfee-GW-Edition 2010.1C 2011.01.31 -
Microsoft 1.6502 2011.01.31 -
NOD32 5833 2011.01.31 -
Norman 6.06.12 2011.01.30 -
nProtect 2011-01-31.01 2011.01.31 Gen:Variant.Kazy.9799
Panda 10.0.3.5 2011.01.30 -
PCTools 7.0.3.5 2011.01.29 -
Prevx 3.0 2011.01.31 -
Rising 23.43.00.02 2011.01.31 [Suspicious]
Sophos 4.61.0 2011.01.31 -
SUPERAntiSpyware 4.40.0.1006 2011.01.30 -
Symantec 20101.3.0.103 2011.01.31 -
TheHacker 6.7.0.1.122 2011.01.30 -
TrendMicro 9.120.0.1004 2011.01.31 TROJ_SPYEYE.SMEP
TrendMicro-HouseCall 9.120.0.1004 2011.01.31 TROJ_SPYEYE.SMEP
VBA32 3.12.14.3 2011.01.31 -
VIPRE 8261 2011.01.31 -
ViRobot 2011.1.31.4284 2011.01.31 -
VirusBuster 13.6.173.1 2011.01.31 -

**jurok04** · 01.02.2011, 11:08

SMS блокер, впервые был пойман 05.01.2011 -
сразу послан в ЛК лаб через helpdesk, 19.01.2011
вторичное заражение, отсылка в ЛК и Есет
(после чего в течение 24 часов появился детект Есет).
На сегодня (01.02.2011) ситуация такая:

File name: servercfg.exe
Submission date:
2011-02-01 07:47:04 (UTC)
Current status:
queued queued analysing finished
Result:
30/ 43 (69.8%)

Цитата:
AhnLab-V3 2011.01.27.01 2011.01.27 Trojan/Win32.Gen
AntiVir 7.11.2.39 2011.01.31 TR/Crypt.FKM.Gen
Antiy-AVL 2.0.3.7 2011.01.28 -
Avast 4.8.1351.0 2011.01.31 Win32:Malware-gen
Avast5 5.0.677.0 2011.01.31 Win32:Malware-gen
AVG 10.0.0.1190 2011.02.01 -
BitDefender 7.2 2011.02.01 Trojan.Generic.5358855
CAT-QuickHeal 11.00 2011.02.01 -
ClamAV 0.96.4.0 2011.02.01 -
Commtouch 5.2.11.5 2011.02.01 W32/VBTrojan.Downloader.1D!Maximus
Comodo 7559 2011.01.31 UnclassifiedMalware
DrWeb 5.0.2.03300 2011.02.01 Trojan.Winlock.2804
Emsisoft 5.1.0.1 2011.02.01 Trojan.Crypt!IK
eSafe 7.0.17.0 2011.01.31 Win32.TRCrypt.Fkm
eTrust-Vet 36.1.8132 2011.02.01 -
F-Prot 4.6.2.117 2011.01.31 W32/VBTrojan.Downloader.1D!Maximus
F-Secure 9.0.16160.0 2011.02.01 Trojan.Generic.5358855
Fortinet 4.2.254.0 2011.02.01 -
GData 21 2011.02.01 Trojan.Generic.5358855
Ikarus T3.1.1.97.0 2011.02.01 Trojan.Crypt
Jiangmin 13.0.900 2011.02.01 -
K7AntiVirus 9.79.3702 2011.02.01 Trojan
Kaspersky 7.0.0.125 2011.02.01 -
McAfee 5.400.0.1158 2011.02.01 Suspect-AB!A130EA2EE30C
McAfee-GW-Edition 2010.1C 2011.01.31 Heuristic.BehavesLike.Win32.Downloader.A
Microsoft 1.6502 2011.02.01 Trojan:Win32/Msposer.A
NOD32 5835 2011.01.31 Win32/LockScreen.ACK
Norman 6.06.12 2011.01.31 W32/Suspicious_Gen2.GKTSZ
nProtect 2011-01-31.01 2011.01.31 Trojan.Generic.5358855
Panda 10.0.3.5 2011.01.31 Trj/CI.A
PCTools 7.0.3.5 2011.01.31 Trojan.Gen
Prevx 3.0 2011.02.01 -
Rising 23.43.01.00 2011.02.01 -
Sophos 4.61.0 2011.02.01 Sus/Behav-1021
SUPERAntiSpyware 4.40.0.1006 2011.02.01 Adware.Vundo/Variant-MSFake
Symantec 20101.3.0.103 2011.02.01 Trojan.Gen
TheHacker 6.7.0.1.122 2011.01.30 -
TrendMicro 9.120.0.1004 2011.02.01 TROJ_GEN.R47C3AA
TrendMicro-HouseCall 9.120.0.1004 2011.02.01 TROJ_GEN.R47C3AA
VBA32 3.12.14.3 2011.01.31 -
VIPRE 8271 2011.02.01 Trojan.Win32.Generic!BT
ViRobot 2011.2.1.4285 2011.02.01 -
VirusBuster 13.6.174.0 2011.01.31 Trojan.LockScreen!gBMNhQgt4xg

http://www.virustotal.com/file-scan/...529-1296546424

**maksimog** · 05.02.2011, 20:39

Нашел на зараженном пк

File name:
pornoplayer.exe
Submission date:
2011-02-05 17:35:46 (UTC)
Current status:
queued queued analysing finished
Result:
2/ 43 (4.7%)

VT Community

malware
Safety score: 0.0%
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2011.01.27.01 2011.01.27 -
AntiVir 7.11.2.80 2011.02.04 -
Antiy-AVL 2.0.3.7 2011.01.28 -
Avast 4.8.1351.0 2011.02.05 -
Avast5 5.0.677.0 2011.02.05 -
AVG 10.0.0.1190 2011.02.05 -
BitDefender 7.2 2011.02.05 -
CAT-QuickHeal 11.00 2011.02.04 -
ClamAV 0.96.4.0 2011.02.05 -
Commtouch 5.2.11.5 2011.02.05 -
Comodo 7595 2011.02.04 -
DrWeb 5.0.2.03300 2011.02.05 -
Emsisoft 5.1.0.2 2011.02.05 -
eSafe 7.0.17.0 2011.02.03 -
eTrust-Vet 36.1.8141 2011.02.04 -
F-Prot 4.6.2.117 2011.02.04 -
F-Secure 9.0.16160.0 2011.02.05 -
Fortinet 4.2.254.0 2011.02.05 -
GData 21 2011.02.05 -
Ikarus T3.1.1.97.0 2011.02.05 -
Jiangmin 13.0.900 2011.02.05 -
K7AntiVirus 9.81.3752 2011.02.05 -
Kaspersky 7.0.0.125 2011.02.05 -
McAfee 5.400.0.1158 2011.02.05 -
McAfee-GW-Edition 2010.1C 2011.02.05 -
Microsoft 1.6502 2011.02.05 -
NOD32 5849 2011.02.05 Win32/Agent.SFM
Norman 6.07.03 2011.02.05 W32/Obfuscated.DP1!genr
nProtect 2011-01-27.01 2011.02.02 -
Panda 10.0.3.5 2011.02.05 -
PCTools 7.0.3.5 2011.02.05 -
Prevx 3.0 2011.02.05 -
Rising 23.43.05.06 2011.02.05 -
Sophos 4.61.0 2011.02.05 -
SUPERAntiSpyware 4.40.0.1006 2011.02.05 -
Symantec 20101.3.0.103 2011.02.05 -
TheHacker 6.7.0.1.124 2011.02.04 -
TrendMicro 9.200.0.1012 2011.02.05 -
TrendMicro-HouseCall 9.200.0.1012 2011.02.05 -
VBA32 3.12.14.3 2011.02.04 -
VIPRE 8317 2011.02.05 -
ViRobot 2011.2.5.4294 2011.02.05 -
VirusBuster 13.6.184.0 2011.02.05 -

**Iron Monk** · 05.02.2011, 22:00

ICQ Trojan & KeyLogger

File name:
MS_Helper.exe
Submission date:
2011-02-05 18:53:06 (UTC)
Current status:
finished
Result:
18/ 43 (41.9%) VT Community

Print results Antivirus Version Last Update Result
AhnLab-V3 2011.01.27.01 2011.01.27 -
AntiVir 7.11.2.80 2011.02.04 TR/Spy.Banker.Gen
Antiy-AVL 2.0.3.7 2011.01.28 Flooder/Win32.ICQBomber.gen
Avast 4.8.1351.0 2011.02.05 Win32:Malware-gen
Avast5 5.0.677.0 2011.02.05 Win32:Malware-gen
AVG 10.0.0.1190 2011.02.05 Generic19.BXMT
BitDefender 7.2 2011.02.05 Backdoor.Generic.529798
CAT-QuickHeal 11.00 2011.02.04 -
ClamAV 0.96.4.0 2011.02.05 BC.Heuristic.Trojan.SusPacked.TMS
Commtouch 5.2.11.5 2011.02.05 W32/Banload.E.gen!Eldorado
Comodo 7596 2011.02.05 -
DrWeb 5.0.2.03300 2011.02.05 -
Emsisoft 5.1.0.2 2011.02.05 IM-Flooder.Win32.ICQBomber!IK
eSafe 7.0.17.0 2011.02.03 -
eTrust-Vet 36.1.8141 2011.02.04 -
F-Prot 4.6.2.117 2011.02.04 W32/Banload.E.gen!Eldorado
F-Secure 9.0.16160.0 2011.02.05 Backdoor.Generic.529798
Fortinet 4.2.254.0 2011.02.05 -
GData 21 2011.02.05 Backdoor.Generic.529798
Ikarus T3.1.1.97.0 2011.02.05 IM-Flooder.Win32.ICQBomber
Jiangmin 13.0.900 2011.02.05 -
K7AntiVirus 9.81.3752 2011.02.05 Trojan
Kaspersky 7.0.0.125 2011.02.05 IM-Flooder.Win32.ICQBomber.js
McAfee 5.400.0.1158 2011.02.05 -
McAfee-GW-Edition 2010.1C 2011.02.05 -
Microsoft 1.6502 2011.02.05 -
NOD32 5849 2011.02.05 probably unknown NewHeur_PE
Norman 6.07.03 2011.02.05 -
nProtect 2011-01-27.01 2011.02.02 -
Panda 10.0.3.5 2011.02.05 Suspicious file
PCTools 7.0.3.5 2011.02.05 -
Prevx 3.0 2011.02.05 -
Rising 23.43.05.06 2011.02.05 -
Sophos 4.61.0 2011.02.05 -
SUPERAntiSpyware 4.40.0.1006 2011.02.05 -
Symantec 20101.3.0.103 2011.02.05 -
TheHacker 6.7.0.1.124 2011.02.04 -
TrendMicro 9.200.0.1012 2011.02.05 -
TrendMicro-HouseCall 9.200.0.1012 2011.02.05 -
VBA32 3.12.14.3 2011.02.04 -
VIPRE 8318 2011.02.05 -
ViRobot 2011.2.5.4294 2011.02.05 -
VirusBuster 13.6.184.0 2011.02.05 Flooder.ICQBomber!fgx5BjLVkWo

**maksimog** · 08.02.2011, 19:14

Пытался загрузится на каком то сайте

File name:
a409deaadc925c4386d12a379ae1cc79.malware
Submission date:
2011-02-08 16:04:55 (UTC)
Current status:
finished
Result:
6 /43 (14.0%)

VT Community

not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2011.02.06.00 2011.02.06 -
AntiVir 7.11.2.102 2011.02.08 -
Antiy-AVL 2.0.3.7 2011.01.28 -
Avast 4.8.1351.0 2011.02.08 -
Avast5 5.0.677.0 2011.02.08 -
AVG 10.0.0.1190 2011.02.08 -
BitDefender 7.2 2011.02.08 -
CAT-QuickHeal 11.00 2011.02.08 -
ClamAV 0.96.4.0 2011.02.08 -
Commtouch 5.2.11.5 2011.02.08 -
Comodo 7618 2011.02.08 -
DrWeb 5.0.2.03300 2011.02.08 -
Emsisoft 5.1.0.2 2011.02.08 -
eSafe 7.0.17.0 2011.02.06 -
eTrust-Vet 36.1.8146 2011.02.08 -
F-Prot 4.6.2.117 2011.02.04 -
F-Secure 9.0.16160.0 2011.02.08 -
Fortinet 4.2.254.0 2011.02.07 -
GData 21 2011.02.08 -
Ikarus T3.1.1.97.0 2011.02.08 -
Jiangmin 13.0.900 2011.02.08 -
K7AntiVirus 9.81.3788 2011.02.08 -
Kaspersky 7.0.0.125 2011.02.08 -
McAfee 5.400.0.1158 2011.02.08 -
McAfee-GW-Edition 2010.1C 2011.02.08 Heuristic.BehavesLike.Win32.ModifiedUPX.C
Microsoft 1.6502 2011.02.08 Trojan:Win32/Whizelgo.A
NOD32 5856 2011.02.08 a variant of Win32/TrojanDownloader.FraudLoad.NAJ
Norman 6.07.03 2011.02.08 -
nProtect 2011-01-27.01 2011.02.02 -
Panda 10.0.3.5 2011.02.08 Trj/CI.A
PCTools 7.0.3.5 2011.02.07 -
Prevx 3.0 2011.02.08 -
Rising 23.44.01.06 2011.02.08 -
Sophos 4.61.0 2011.02.08 -
SUPERAntiSpyware 4.40.0.1006 2011.02.08 -
Symantec 20101.3.0.103 2011.02.08 -
TheHacker 6.7.0.1.126 2011.02.08 -
TrendMicro 9.200.0.1012 2011.02.08 ADW_ZANGO
TrendMicro-HouseCall 9.200.0.1012 2011.02.08 ADW_ZANGO
VBA32 3.12.14.3 2011.02.08 -
VIPRE 8348 2011.02.08 -
ViRobot 2011.2.8.4299 2011.02.08 -
VirusBuster 13.6.189.0 2011.02.08 -
Additional information
Show all
MD5 : a409deaadc925c4386d12a379ae1cc79
SHA1 : 337472df125e40c70e4f23a44b1e0cfecdb1eb5b
SHA256: bf28c2cdbfbb1c951a0c8e5800cbcd6eeaf3f4d7ca290c4658 ab80b94d2c499b

**ZhIV** · 11.02.2011, 11:03

File name: 0.6532615156020773.exe
Submission date: 2011-02-09 13:16:56 (UTC)
Current status: finished
Result: 23 /43 (53.5%)

Antivirus results
AhnLab-V3 - 2011.02.06.00 - 2011.02.06 - Trojan/Win32.Zbot
AntiVir - 7.11.2.107 - 2011.02.09 - TR/Ransom.CP
Antiy-AVL - 2.0.3.7 - 2011.01.28 - -
Avast - 4.8.1351.0 - 2011.02.09 - Win32:Malware-gen
Avast5 - 5.0.677.0 - 2011.02.09 - Win32:Malware-gen
AVG - 10.0.0.1190 - 2011.02.09 - -
BitDefender - 7.2 - 2011.02.09 - Trojan.Generic.KDV.127318
CAT-QuickHeal - 11.00 - 2011.02.09 - -
ClamAV - 0.96.4.0 - 2011.02.09 - -
Commtouch - 5.2.11.5 - 2011.02.09 - -
Comodo - 7627 - 2011.02.09 - -
DrWeb - 5.0.2.03300 - 2011.02.09 - Trojan.Winlock.2953
Emsisoft - 5.1.0.2 - 2011.02.09 - Trojan.Win32.LockScreen!IK
eSafe - 7.0.17.0 - 2011.02.08 - -
eTrust-Vet - 36.1.8149 - 2011.02.09 - -
F-Prot - 4.6.2.117 - 2011.02.04 - -
F-Secure - 9.0.16160.0 - 2011.02.09 - Trojan.Generic.KDV.127318
Fortinet - 4.2.254.0 - 2011.02.09 - -
GData - 21 - 2011.02.09 - Trojan.Generic.KDV.127318
Ikarus - T3.1.1.97.0 - 2011.02.09 - Trojan.Win32.LockScreen
Jiangmin - 13.0.900 - 2011.02.09 - -
K7AntiVirus - 9.81.3796 - 2011.02.09 - -
Kaspersky - 7.0.0.125 - 2011.02.09 - Trojan-Ransom.Win32.PornoCodec.bt
McAfee - 5.400.0.1158 - 2011.02.09 - Artemis!83EB7FC3BE05
McAfee-GW-Edition - 2010.1C - 2011.02.08 - Artemis!83EB7FC3BE05
Microsoft - 1.6502 - 2011.02.09 - Trojan:Win32/Ransom.CP
NOD32 - 5858 - 2011.02.09 - Win32/LockScreen.ACR
Norman - 6.07.03 - 2011.02.09 - W32/Zbot.WTG
nProtect - 2011-01-27.01 - 2011.02.02 - -
Panda - 10.0.3.5 - 2011.02.08 - Trj/CI.A
PCTools - 7.0.3.5 - 2011.02.09 - Trojan.Generic
Prevx - 3.0 - 2011.02.09 - Medium Risk Malware
Rising - 23.44.02.05 - 2011.02.09 - [Suspicious]
Sophos - 4.61.0 - 2011.02.09 - -
SUPERAntiSpyware - 4.40.0.1006 - 2011.02.09 - -
Symantec - 20101.3.0.103 - 2011.02.09 - Trojan Horse
TheHacker - 6.7.0.1.126 - 2011.02.08 - -
TrendMicro - 9.200.0.1012 - 2011.02.09 - -
TrendMicro-HouseCall - 9.200.0.1012 - 2011.02.09 - -
VBA32 - 3.12.14.3 - 2011.02.08 - Trojan-Ransom.ScreenLock.Pn
VIPRE - 8359 - 2011.02.09 - Trojan.Win32.Generic!BT
ViRobot - 2011.2.9.4301 - 2011.02.09 - -
VirusBuster - 13.6.190.0 - 2011.02.09 - -

File info:
MD5: 83eb7fc3be057ca452d66e54d5962f35
SHA1: d41f520c4b393e2763cc241021c49fa8486d77aa
SHA256: 6e2e7838b548370262dd78e45901fd570646990f16524fd1b5 72f4315d7d019b

**Vadim_SVN** · 16.02.2011, 08:42

File name: 0.11796125916210298.exe
Date first seen: 2011-02-15 13:09:32 (UTC)
Result: 4 /43 (9.3%)

AhnLab-V3 2011.02.14.02 2011.02.14 Trojan/Win32.Zbot
AntiVir 7.11.3.93 2011.02.15 -
Antiy-AVL 2.0.3.7 2011.02.15 -
Avast 4.8.1351.0 2011.02.16 -
Avast5 5.0.677.0 2011.02.16 -
AVG 10.0.0.1190 2011.02.16 -
BitDefender 7.2 2011.02.16 -
CAT-QuickHeal 11.00 2011.02.15 -
ClamAV 0.96.4.0 2011.02.16 -
Commtouch 5.2.11.5 2011.02.16 -
Comodo 7703 2011.02.16 -
DrWeb 5.0.2.03300 2011.02.16 -
Emsisoft 5.1.0.2 2011.02.16 -
eSafe 7.0.17.0 2011.02.15 -
eTrust-Vet 36.1.8161 2011.02.15 -
F-Prot 4.6.2.117 2011.02.15 -
F-Secure 9.0.16160.0 2011.02.16 -
Fortinet 4.2.254.0 2011.02.16 -
GData 21 2011.02.16 -
Ikarus T3.1.1.97.0 2011.02.16 -
Jiangmin 13.0.900 2011.02.15 -
K7AntiVirus 9.85.3859 2011.02.15 -
Kaspersky 7.0.0.125 2011.02.16 -
McAfee 5.400.0.1158 2011.02.16 -
McAfee-GW-Edition 2010.1C 2011.02.16 -
Microsoft 1.6502 2011.02.15 Trojan:Win32/LockScreen.AO
NOD32 5878 2011.02.15 a variant of Win32/Kryptik.KSA
Norman 6.07.03 2011.02.15 -
nProtect 2011-02-10.01 2011.02.15 -
Panda 10.0.3.5 2011.02.15 Suspicious file
PCTools 7.0.3.5 2011.02.16 -
Prevx 3.0 2011.02.16 -
Rising 23.45.01.06 2011.02.15 -
Sophos 4.61.0 2011.02.16 -
SUPERAntiSpyware 4.40.0.1006 2011.02.16 -
Symantec 20101.3.0.103 2011.02.16 -
TheHacker 6.7.0.1.131 2011.02.15 -
TrendMicro 9.200.0.1012 2011.02.16 -
TrendMicro-HouseCall 9.200.0.1012 2011.02.15 -
VBA32 3.12.14.3 2011.02.15 -
VIPRE 8435 2011.02.16 -
ViRobot 2011.2.16.4312 2011.02.16 -
VirusBuster 13.6.202.1 2011.02.15 -

Additional information
Show all
MD5 : 9774f3c9e7a3ccca15b4286cb49d651d
SHA1 : 7e39ddade06bb41b76c939cf8bf802bf5eaca1a9
SHA256: 2b12b799fa3bbb882c11a94679140309f9e056057dd3ca71d8 6105566260df0d

http://www.virustotal.com/file-scan/...f0d-1297827462

Сэмпл разослан.
Ответ DrWeb: Угроза: Trojan.Winlock.2741

**amcenter** · 08.03.2011, 01:55

File name: AntiSpyWareSetup.exe
Submission date:
2011-03-07 21:59:27 (UTC)
Current status:
analysing finished
Result:
5/ 43 (11.6%)

Antivirus Version Last Update Result
AhnLab-V3 2011.03.07.06 2011.03.07 -
AntiVir 7.11.4.100 2011.03.07 -
Antiy-AVL 2.0.3.7 2011.03.06 -
Avast 4.8.1351.0 2011.03.07 -
Avast5 5.0.677.0 2011.03.07 -
AVG 10.0.0.1190 2011.03.07 -
BitDefender 7.2 2011.03.07 -
CAT-QuickHeal 11.00 2011.03.07 -
ClamAV 0.96.4.0 2011.03.07 -
Commtouch 5.2.11.5 2011.03.07 -
Comodo 7907 2011.03.07 -
DrWeb 5.0.2.03300 2011.03.07 -
Emsisoft 5.1.0.2 2011.03.07 -
eSafe 7.0.17.0 2011.03.07 -
eTrust-Vet 36.1.8200 2011.03.07 Win32/Kelihos.BR
F-Prot 4.6.2.117 2011.03.07 -
F-Secure 9.0.16440.0 2011.03.07 -
Fortinet 4.2.254.0 2011.03.07 -
GData 21 2011.03.07 -
Ikarus T3.1.1.97.0 2011.03.07 -
Jiangmin 13.0.900 2011.03.07 -
K7AntiVirus 9.92.4048 2011.03.07 -
Kaspersky 7.0.0.125 2011.03.07 -
McAfee 5.400.0.1158 2011.03.07 -
McAfee-GW-Edition 2010.1C 2011.03.07 -
Microsoft 1.6603 2011.03.07 -
NOD32 5934 2011.03.07 a variant of Win32/Kryptik.LKH
Norman 6.07.03 2011.03.07 -
nProtect 2011-02-10.01 2011.02.15 -
Panda 10.0.3.5 2011.03.07 -
PCTools 7.0.3.5 2011.03.07 -
Prevx 3.0 2011.03.07 -
Rising 23.48.00.06 2011.03.07 -
Sophos 4.63.0 2011.03.07 Mal/FakeAV-IH
SUPERAntiSpyware 4.40.0.1006 2011.03.07 Trojan.Agent/Gen-FraudLoad
Symantec 20101.3.0.103 2011.03.07 -
TheHacker 6.7.0.1.145 2011.03.06 -
TrendMicro 9.200.0.1012 2011.03.07 -
TrendMicro-HouseCall 9.200.0.1012 2011.03.07 -
VBA32 3.12.14.3 2011.03.04 -
VIPRE 8630 2011.03.07 FraudTool.Win32.SecurityShield.ek!e (v)
ViRobot 2011.3.7.4345 2011.03.07 -
VirusBuster 13.6.239.0 2011.03.07 -
Additional information
Show all
MD5 : 0103edbd091fc8068dff20175f1657df
SHA1 : 8e7f6a56fccd50432ddf09d792121b73ea11e573
SHA256: 1cd2e25695d085190a841c5a2cf59aff74a537cd89fd45d85b ef631f9af3300f

ThreatExpert стал халтурить с подробным анализом,
от Комодо и Анубиса дали правильные соответствующие заключения.

PS. Что за ерунда с размещением ссылок

Вы не можете размещать ссылки на другие сайты, изображения или видео, у вас пока недостаточно сообщений

, получается нужно флудить?

**Korvelle** · 14.03.2011, 00:18

Мой agnitum не захотел определять. Оказалось, он не один такой.

File name: Nora Roberts - Angel Gabrielya_17258885-3217608.zip.exe
Submission date: 2011-03-13 20:46:56 (UTC)
Current status: finished
Result: 6/ 43 (14.0%)

AhnLab-V3 2011.03.13.00 2011.03.12 -
AntiVir 7.11.4.178 2011.03.13 TR/Crypt.XPACK.Gen3
Antiy-AVL 2.0.3.7 2011.03.12 -
Avast 4.8.1351.0 2011.03.13 -
Avast5 5.0.677.0 2011.03.13 -
AVG 10.0.0.1190 2011.03.13 -
BitDefender 7.2 2011.03.13 Gen:Variant.Adware.SMSHoax.14
CAT-QuickHeal 11.00 2011.03.13 -
ClamAV 0.96.4.0 2011.03.13 -
Commtouch 5.2.11.5 2011.03.12 -
Comodo 7969 2011.03.13 -
DrWeb 5.0.2.03300 2011.03.13 -
Emsisoft 5.1.0.2 2011.03.13 -
eSafe 7.0.17.0 2011.03.13 -
eTrust-Vet 36.1.8211 2011.03.11 -
F-Prot 4.6.2.117 2011.03.13 -
F-Secure 9.0.16440.0 2011.03.13 Gen:Variant.Adware.SMSHoax.14
Fortinet 4.2.254.0 2011.03.13 -
GData 21 2011.03.13 Gen:Variant.Adware.SMSHoax.14
Ikarus T3.1.1.97.0 2011.03.13 -
Jiangmin 13.0.900 2011.03.13 -
K7AntiVirus 9.93.4087 2011.03.11 -
Kaspersky 7.0.0.125 2011.03.13 Hoax.Win32.ArchSMS.hgzl
McAfee 5.400.0.1158 2011.03.13 -
McAfee-GW-Edition 2010.1C 2011.03.13 -
Microsoft 1.6603 2011.03.13 -
NOD32 5950 2011.03.13 a variant of Win32/Hoax.ArchSMS.IK
Norman 6.07.03 2011.03.13 -
nProtect 2011-02-10.01 2011.02.15 -
Panda 10.0.3.5 2011.03.13 -
PCTools 7.0.3.5 2011.03.11 -
Prevx 3.0 2011.03.13 -
Rising 23.48.05.03 2011.03.12 -
Sophos 4.63.0 2011.03.13 -
SUPERAntiSpyware 4.40.0.1006 2011.03.13 -
Symantec 20101.3.0.103 2011.03.13 -
TheHacker 6.7.0.1.149 2011.03.13 -
TrendMicro 9.200.0.1012 2011.03.13 -
TrendMicro-HouseCall 9.200.0.1012 2011.03.13 -
VBA32 3.12.14.3 2011.03.12 -
VIPRE 8693 2011.03.13 -
ViRobot 2011.3.12.4354 2011.03.13 -
VirusBuster 13.6.248.0 2011.03.13 -

**Nexus** · 19.03.2011, 10:47

Выловил пару минут назад.
File name:
avz00001.dta
Submission date:
2011-03-19 07:40:12 (UTC)
Current status:
finished
Result:
7/ 43 (16.3%)

AhnLab-V3 2011.03.19.00 2011.03.18 Trojan/Win32.FakeAV
AntiVir 7.11.5.1 2011.03.18 -
Antiy-AVL 2.0.3.7 2011.03.19 -
Avast 4.8.1351.0 2011.03.18 -
Avast5 5.0.677.0 2011.03.18 -
AVG 10.0.0.1190 2011.03.18 -
BitDefender 7.2 2011.03.19 -
CAT-QuickHeal 11.00 2011.03.19 -
ClamAV 0.96.4.0 2011.03.19 -
Commtouch 5.2.11.5 2011.03.18 -
Comodo 8033 2011.03.19 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.2.03300 2011.03.19 BackDoor.Siggen.28461
Emsisoft 5.1.0.2 2011.03.19 -
eSafe 7.0.17.0 2011.03.17 -
eTrust-Vet 36.1.8223 2011.03.18 -
F-Prot 4.6.2.117 2011.03.18 -
F-Secure 9.0.16440.0 2011.03.18 -
Fortinet 4.2.254.0 2011.03.19 -
GData 21 2011.03.19 -
Ikarus T3.1.1.97.0 2011.03.19 -
Jiangmin 13.0.900 2011.03.18 -
K7AntiVirus 9.94.4145 2011.03.18 -
Kaspersky 7.0.0.125 2011.03.19 Trojan.Win32.Agent.hpet
McAfee 5.400.0.1158 2011.03.19 -
McAfee-GW-Edition 2010.1C 2011.03.19 -
Microsoft 1.6603 2011.03.19 -
NOD32 5967 2011.03.18 a variant of Win32/Kryptik.LRF
Norman 6.07.03 2011.03.18 -
nProtect 2011-02-10.01 2011.02.15 -
Panda 10.0.3.5 2011.03.18 -
PCTools 7.0.3.5 2011.03.19 -
Prevx 3.0 2011.03.19 Medium Risk Malware
Rising 23.49.04.05 2011.03.18 -
Sophos 4.63.0 2011.03.19 Mal/FakeAV-IS
SUPERAntiSpyware 4.40.0.1006 2011.03.19 -
Symantec 20101.3.0.103 2011.03.19 -
TheHacker 6.7.0.1.151 2011.03.18 -
TrendMicro 9.200.0.1012 2011.03.19 -
TrendMicro-HouseCall 9.200.0.1012 2011.03.19 -
VBA32 3.12.14.3 2011.03.18 -
VIPRE 8750 2011.03.19 -
ViRobot 2011.3.19.4365 2011.03.19 -
VirusBuster 13.6.256.1 2011.03.18 -

MD5 : 491ff648f66cce66581da477cebe920a
SHA1 : bd83923831e9a879d0923d034a91d0ab0bca7450

http://www.virustotal.com/file-scan/...0c-1300520412#

**Korvelle** · 19.03.2011, 11:39

Странно что справляются с этим не все.

File name: Install_Flash-Player.exe
Submission date: 2011-03-19 08:10:24 (UTC)
Current status: finished
Result: 20 /42 (47.6%)

Antivirus Version Last Update Result
AhnLab-V3 2011.03.19.00 2011.03.18 -
AntiVir 7.11.5.1 2011.03.18 TR/ScreenLogger.A
Antiy-AVL 2.0.3.7 2011.03.19 -
Avast 4.8.1351.0 2011.03.18 Win32:Malware-gen
Avast5 5.0.677.0 2011.03.18 Win32:Malware-gen
AVG 10.0.0.1190 2011.03.18 Generic21.AOVJ
BitDefender 7.2 2011.03.19 Trojan.Generic.KDV.156942
CAT-QuickHeal 11.00 2011.03.19 -
ClamAV 0.96.4.0 2011.03.19 -
Commtouch 5.2.11.5 2011.03.18 -
Comodo 8033 2011.03.19 -
DrWeb 5.0.2.03300 2011.03.19 Trojan.Winlock.3170
eSafe 7.0.17.0 2011.03.17 -
eTrust-Vet 36.1.8223 2011.03.18 Win32/FakeAV.RKH
F-Prot 4.6.2.117 2011.03.18 -
F-Secure 9.0.16440.0 2011.03.18 -
Fortinet 4.2.254.0 2011.03.19 -
GData 21 2011.03.19 Trojan.Generic.KDV.156942
Ikarus T3.1.1.97.0 2011.03.19 Trojan.Win32.Fakewarn
Jiangmin 13.0.900 2011.03.18 -
K7AntiVirus 9.94.4145 2011.03.18 -
Kaspersky 7.0.0.125 2011.03.19 Trojan.Win32.FakeWarn.d
McAfee 5.400.0.1158 2011.03.19 -
McAfee-GW-Edition 2010.1C 2011.03.19 -
Microsoft 1.6603 2011.03.19 Trojan:Win32/Serubsit.A
NOD32 5967 2011.03.18 Win32/LockScreen.AFD
Norman 6.07.03 2011.03.18 W32/LockScreen.R
nProtect 2011-02-10.01 2011.02.15 -
Panda 10.0.3.5 2011.03.18 Generic Trojan
PCTools 7.0.3.5 2011.03.19 Trojan.Gen
Prevx 3.0 2011.03.19 High Risk Cloaked Malware
Rising 23.49.04.05 2011.03.18 -
Sophos 4.63.0 2011.03.19 -
SUPERAntiSpyware 4.40.0.1006 2011.03.19 Trojan.Agent/Gen-Frauder
Symantec 20101.3.0.103 2011.03.19 Trojan.Gen
TheHacker 6.7.0.1.151 2011.03.18 -
TrendMicro 9.200.0.1012 2011.03.19 -
TrendMicro-HouseCall 9.200.0.1012 2011.03.19 -
VBA32 3.12.14.3 2011.03.18 Trojan.FakeWarn.d
VIPRE 8750 2011.03.19 Trojan.Win32.Generic.pak!cobra
ViRobot 2011.3.19.4366 2011.03.19 -
VirusBuster 13.6.256.1 2011.03.18 -

**5ergi0** · 21.03.2011, 18:33

File name: 30E5392F00F8BBDBC0F800059F0FCD0025F7E997.dll
Submission date: 2011-03-21 10:02:08 (UTC)
Current status: finished
Result: 3 /41 (7.3%)

Antivirus results
AhnLab-V3 - 2011.03.21.01 - 2011.03.21 - -
AntiVir - 7.11.5.3 - 2011.03.21 - -
Antiy-AVL - 2.0.3.7 - 2011.03.20 - -
Avast - 4.8.1351.0 - 2011.03.20 - -
Avast5 - 5.0.677.0 - 2011.03.20 - -
AVG - 10.0.0.1190 - 2011.03.20 - -
BitDefender - 7.2 - 2011.03.21 - -
CAT-QuickHeal - 11.00 - 2011.03.21 - -
ClamAV - 0.96.4.0 - 2011.03.20 - -
Commtouch - 5.2.11.5 - 2011.03.21 - -
Comodo - 8055 - 2011.03.21 - -
DrWeb - 5.0.2.03300 - 2011.03.21 - Trojan.Siggen.64625
eSafe - 7.0.17.0 - 2011.03.17 - -
eTrust-Vet - 36.1.8226 - 2011.03.21 - -
F-Prot - 4.6.2.117 - 2011.03.20 - -
F-Secure - 9.0.16440.0 - 2011.03.21 - -
Fortinet - 4.2.254.0 - 2011.03.21 - -
GData - 21 - 2011.03.21 - -
Ikarus - T3.1.1.97.0 - 2011.03.21 - Trojan.Win32.Zapchast
Jiangmin - 13.0.900 - 2011.03.21 - -
K7AntiVirus - 9.94.4155 - 2011.03.19 - -
McAfee - 5.400.0.1158 - 2011.03.21 - -
McAfee-GW-Edition - 2010.1C - 2011.03.21 - -
Microsoft - 1.6603 - 2011.03.21 - -
NOD32 - 5969 - 2011.03.20 - -
Norman - 6.07.03 - 2011.03.20 - -
nProtect - 2011-02-10.01 - 2011.02.15 - -
Panda - 10.0.3.5 - 2011.03.20 - Suspicious file
PCTools - 7.0.3.5 - 2011.03.21 - -
Prevx - 3.0 - 2011.03.21 - -
Rising - 23.50.00.03 - 2011.03.21 - -
Sophos - 4.63.0 - 2011.03.21 - -
SUPERAntiSpyware - 4.40.0.1006 - 2011.03.20 - -
Symantec - 20101.3.0.103 - 2011.03.21 - -
TheHacker - 6.7.0.1.154 - 2011.03.21 - -
TrendMicro - 9.200.0.1012 - 2011.03.21 - -
TrendMicro-HouseCall - 9.200.0.1012 - 2011.03.21 - -
VBA32 - 3.12.14.3 - 2011.03.18 - -
VIPRE - 8769 - 2011.03.21 - -
ViRobot - 2011.3.21.4368 - 2011.03.21 - -
VirusBuster - 13.6.259.2 - 2011.03.20 - -
File info:
MD5: a1bcfa6f36abc360430ee826153a4b92
SHA1: 59fd408dee0a330d37d26b9d702831980f628a26
SHA256: 6f2c3dbcef9bbfb462faef30afd0cc9c063dc5dd3221fb0af3 e81b0ef1b53bf0
File size: 49152 bytes
Scan date: 2011-03-21 10:02:08 (UTC)

**ISO** · 22.03.2011, 07:23

Очередной банер на рабочем столе.
29966592.EXE
Submission date:
2011-03-22 04:09:34 (UTC)
Result:
11/ 43 (25.6%)

Antivirus Version Last Update Result
AhnLab-V3 2011.03.22.01 2011.03.22 -
AntiVir 7.11.5.21 2011.03.22 -
Antiy-AVL 2.0.3.7 2011.03.22 -
Avast 4.8.1351.0 2011.03.22 Win32bot-MZQ
Avast5 5.0.677.0 2011.03.22 Win32bot-MZQ
AVG 10.0.0.1190 2011.03.21 -
BitDefender 7.2 2011.03.22 Gen:Variant.Oficla.11
CAT-QuickHeal 11.00 2011.03.22 -
ClamAV 0.96.4.0 2011.03.22 -
Commtouch 5.2.11.5 2011.03.22 -
Comodo 8062 2011.03.22 -
DrWeb 5.0.2.03300 2011.03.21 Trojan.Packed.1905
Emsisoft 5.1.0.4 2011.03.22 -
eSafe 7.0.17.0 2011.03.21 -
eTrust-Vet 36.1.8228 2011.03.21 -
F-Prot 4.6.2.117 2011.03.22 -
F-Secure 9.0.16440.0 2011.03.22 Gen:Variant.Oficla.11
Fortinet 4.2.254.0 2011.03.22 -
GData 21 2011.03.22 Gen:Variant.Oficla.11
Ikarus T3.1.1.97.0 2011.03.22 -
Jiangmin 13.0.900 2011.03.21 -
K7AntiVirus 9.94.4169 2011.03.21 -
Kaspersky 7.0.0.125 2011.03.22 -
McAfee 5.400.0.1158 2011.03.22 -
McAfee-GW-Edition 2010.1C 2011.03.22 -
Microsoft 1.6603 2011.03.21 VirTool:Win32/Obfuscator.DO
NOD32 5973 2011.03.22 a variant of Win32/Kryptik.LOD
Norman 6.07.03 2011.03.20 -
nProtect 2011-02-10.01 2011.02.15 -
Panda 10.0.3.5 2011.03.21 Suspicious file
PCTools 7.0.3.5 2011.03.21 -
Prevx 3.0 2011.03.22 -
Rising 23.50.00.05 2011.03.21 -
Sophos 4.63.0 2011.03.22 Mal/FakeAV-GQ
SUPERAntiSpyware 4.40.0.1006 2011.03.22 -
Symantec 20101.3.0.103 2011.03.22 Suspicious.Cloud
TheHacker 6.7.0.1.154 2011.03.21 -
TrendMicro 9.200.0.1012 2011.03.21 -
TrendMicro-HouseCall 9.200.0.1012 2011.03.22 -
VBA32 3.12.14.3 2011.03.21 -
VIPRE 8779 2011.03.22 -
ViRobot 2011.3.22.4369 2011.03.22 -
VirusBuster 13.6.261.0 2011.03.21 -

Additional information
Show all
MD5 : fdc223e81a4c60391f8b7422181aec0a
SHA1 : 146e82414ce508721fe63af6e2a6f374da034f21
http://www.virustotal.com/file-scan/...d21-1300766974

**Vadim_SVN** · 28.03.2011, 09:37

На 25.03.2011
File name: WBVBZQC.DLL._BD09E6201922B14C02C8DA599E9B85B412E3D CB6
Submission date: 2011-03-25 12:42:40 (UTC)
Result: 3 /41 (7.3%)

Полное имя C:\WINDOWS\SYSTEM32\WBVBZQC.DLL
Имя файла WBVBZQC.DLL
Статус АКТИВНЫЙ ?ВИРУС? ВНЕДРЯЕМЫЙ ПОДОЗРИТЕЛЬНЫЙ DLL в автозапуске
Размер 49152 байт
Создан 24.03.2011 в 20:40:10
Изменен 24.03.2011 в 20:40:10
Тип файла 32-х битный ИСПОЛНЯЕМЫЙ
Цифр. подпись проверка не производилась

Статус ПОДОЗРИТЕЛЬНЫЙ ОБЪЕКТ
Автозапуск Неизвестный файл использует ключ реестра часто используемый вирусами

Доп. информация на момент обновления списка
SHA1 BD09E6201922B14C02C8DA599E9B85B412E3DCB6

Процессы на момент обновления списка
Процесс C:\WINDOWS\SYSTEM32\WINLOGON.EXE
Процесс C:\WINDOWS\SYSTEM32\SERVICES.EXE
Процесс C:\WINDOWS\SYSTEM32\LSASS.EXE
Процесс C:\WINDOWS\SYSTEM32\SVCHOST.EXE
Процесс C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
Процесс C:\WINDOWS\EXPLORER.EXE
Процесс C:\WINDOWS\RTHDCPL.EXE
Процесс C:\WINDOWS\SYSTEM32\IGFXTRAY.EXE
Процесс C:\WINDOWS\SYSTEM32\HKCMD.EXE
Процесс C:\WINDOWS\SYSTEM32\IGFXPERS.EXE
Процесс C:\WINDOWS\SYSTEM32\IGFXSRVC.EXE
Процесс C:\WINDOWS\SYSTEM32\CTFMON.EXE
Процесс C:\WINDOWS\SYSTEM32\MMC.EXE
Процесс C:\PROGRAM FILES\ICQ6TOOLBAR\ICQ SERVICE.EXE
Процесс C:\WINDOWS\SYSTEM32\ALG.EXE

www.virustotal.com 2011-03-24 23:07:57 (UTC)
Panda Suspicious file
VIPRE Trojan-Downloader.Win32.Vundo.hiy (v)

Ссылки на объект
Ссылка HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls
Appinit_Dlls C:\WINDOWS\system32\wbvbzqc.dll

Код:

Antivirus 	Version 	Last Update 	Result
AhnLab-V3 	2011.03.25.01 	2011.03.25 	-
AntiVir 	7.11.5.70 	2011.03.25 	-
Antiy-AVL 	2.0.3.7 	2011.03.25 	-
Avast 	4.8.1351.0 	2011.03.25 	-
Avast5 	5.0.677.0 	2011.03.25 	-
AVG 	10.0.0.1190 	2011.03.25 	-
BitDefender 	7.2 	2011.03.25 	-
CAT-QuickHeal 	11.00 	2011.03.25 	-
ClamAV 	0.96.4.0 	2011.03.25 	-
Commtouch 	5.2.11.5 	2011.03.24 	-
Comodo 	8100 	2011.03.25 	-
DrWeb 	5.0.2.03300 	2011.03.25 	Trojan.Siggen.64625
eSafe 	7.0.17.0 	2011.03.24 	-
eTrust-Vet 	36.1.8235 	2011.03.25 	-
F-Prot 	4.6.2.117 	2011.03.24 	-
F-Secure 	9.0.16440.0 	2011.03.23 	-
Fortinet 	4.2.254.0 	2011.03.25 	-
GData 	21 	2011.03.25 	-
Ikarus 	T3.1.1.97.0 	2011.03.25 	-
Jiangmin 	13.0.900 	2011.03.25 	-
K7AntiVirus 	9.94.4211 	2011.03.25 	-
McAfee 	5.400.0.1158 	2011.03.25 	-
McAfee-GW-Edition 	2010.1C 	2011.03.25 	-
Microsoft 	1.6702 	2011.03.25 	-
NOD32 	5984 	2011.03.25 	-
Norman 	6.07.03 	2011.03.24 	-
nProtect 	2011-02-10.01 	2011.02.15 	-
Panda 	10.0.3.5 	2011.03.24 	Suspicious file
PCTools 	7.0.3.5 	2011.03.25 	-
Prevx 	3.0 	2011.03.25 	-
Rising 	23.50.04.06 	2011.03.25 	-
Sophos 	4.64.0 	2011.03.25 	-
SUPERAntiSpyware 	4.40.0.1006 	2011.03.25 	-
Symantec 	20101.3.0.103 	2011.03.25 	-
TheHacker 	6.7.0.1.156 	2011.03.24 	-
TrendMicro 	9.200.0.1012 	2011.03.25 	-
TrendMicro-HouseCall 	9.200.0.1012 	2011.03.25 	-
VBA32 	3.12.14.3 	2011.03.24 	-
VIPRE 	8814 	2011.03.25 	Trojan-Downloader.Win32.Vundo.hiy (v)
ViRobot 	2011.3.25.4376 	2011.03.25 	-
VirusBuster 	13.6.269.0 	2011.03.25 	-

Additional information
MD5   : 46efe97461bbc760d6c7e63434f860ae
SHA1  : bd09e6201922b14c02c8da599e9b85b412e3dcb6
SHA256: 5f7cda113ce3c7acc84b8229afb1a425b4301dd6190ba30c78d4d9794e7442a7

Сэмпл разослан.
На 28.03.2011:

Код:

File name: WBVBZQC.DLL._BD09E6201922B14C02C8DA599E9B85B412E3DCB6
Submission date: 2011-03-28 05:32:27 (UTC)
Result: 8/ 41 (19.5%)

**ragalt** · 25.04.2011, 14:58

File name:
avz00001.dta (ex. C:\ProgramData\22CC6C32.exe)
Submission date:
2011-04-25 10:55:35 (UTC)
Current status:
finished
Result:
8/ 42 (19.0%)
Antivirus Version Last Update Result
AhnLab-V3 2011.04.25.02 2011.04.25 -
AntiVir 7.11.7.4 2011.04.25 -
Antiy-AVL 2.0.3.7 2011.04.25 -
Avast 4.8.1351.0 2011.04.24 -
Avast5 5.0.677.0 2011.04.25 Win32:Malware-gen
AVG 10.0.0.1190 2011.04.24 Generic22.STV
BitDefender 7.2 2011.04.25 -
CAT-QuickHeal 11.00 2011.04.24 -
ClamAV 0.97.0.0 2011.04.25 -
Commtouch 5.3.2.6 2011.04.25 -
Comodo 8468 2011.04.25 Heur.Suspicious
DrWeb 5.0.2.03300 2011.04.25 -
Emsisoft 5.1.0.5 2011.04.25 -
eSafe 7.0.17.0 2011.04.24 -
eTrust-Vet 36.1.8289 2011.04.25 -
F-Prot 4.6.2.117 2011.04.25 -
F-Secure 9.0.16440.0 2011.04.25 -
Fortinet 4.2.257.0 2011.04.25 -
GData 22 2011.04.25 -
Ikarus T3.1.1.103.0 2011.04.25 -
Jiangmin 13.0.900 2011.04.24 -
K7AntiVirus 9.98.4458 2011.04.23 -
Kaspersky 9.0.0.837 2011.04.25 Trojan-Ransom.Win32.Agent.pv
McAfee 5.400.0.1158 2011.04.25 -
McAfee-GW-Edition 2010.1D 2011.04.24 -
Microsoft 1.6802 2011.04.25 -
NOD32 6068 2011.04.25 -
Norman 6.07.07 2011.04.25 -
Panda 10.0.3.5 2011.04.24 Suspicious file
PCTools 7.0.3.5 2011.04.21 -
Prevx 3.0 2011.04.25 -
Rising 23.54.06.06 2011.04.24 -
Sophos 4.64.0 2011.04.25 Mal/Generic-L
SUPERAntiSpyware 4.40.0.1006 2011.04.25 -
Symantec 20101.3.2.89 2011.04.25 Suspicious.Cloud
TheHacker 6.7.0.1.182 2011.04.24 -
TrendMicro 9.200.0.1012 2011.04.25 -
TrendMicro-HouseCall 9.200.0.1012 2011.04.25 -
VBA32 3.12.16.0 2011.04.22 -
VIPRE 9112 2011.04.25 Trojan.Win32.Generic!BT
ViRobot 2011.4.25.4427 2011.04.25 -
VirusBuster 13.6.319.2 2011.04.24 -

**grobik** · 05.05.2011, 04:50

File name: pack107_2112.exe

Submission date: 2011-05-05 00:33:25 (UTC)
Current status: finished

Result: 2/ 41 (4.9%)

AhnLab-V3 2011.05.05.00 2011.05.04 -
AntiVir 7.11.7.150 2011.05.04 -
Antiy-AVL 2.0.3.7 2011.05.05 -
Avast 4.8.1351.0 2011.05.04 -
Avast5 5.0.677.0 2011.05.04 -
AVG 10.0.0.1190 2011.05.04 -
BitDefender 7.2 2011.05.04 -
CAT-QuickHeal 11.00 2011.05.04 -
ClamAV 0.97.0.0 2011.05.04 -
Commtouch 5.3.2.6 2011.05.04 -
Comodo 8584 2011.05.05 -
DrWeb 5.0.2.03300 2011.05.05 -
eSafe 7.0.17.0 2011.05.04 -
eTrust-Vet 36.1.8307 2011.05.04 -
F-Prot 4.6.2.117 2011.05.04 -
F-Secure 9.0.16440.0 2011.05.04 -
Fortinet 4.2.257.0 2011.05.05 W32/Injector.fam!tr
GData 22 2011.05.05 -
Ikarus T3.1.1.103.0 2011.05.05 -
Jiangmin 13.0.900 2011.05.03 -
K7AntiVirus 9.100.4563 2011.05.04 -
Kaspersky 9.0.0.837 2011.05.05 -
McAfee 5.400.0.1158 2011.05.05 -
McAfee-GW-Edition 2010.1D 2011.05.05 -
Microsoft 1.6802 2011.05.04 -
NOD32 6095 2011.05.05 -
Norman 6.07.07 2011.05.04 -
Panda 10.0.3.5 2011.05.04 Suspicious file
PCTools 7.0.3.5 2011.05.04 -
Prevx 3.0 2011.05.05 -
Rising 23.56.02.06 2011.05.04 -
Sophos 4.64.0 2011.05.05 -
SUPERAntiSpyware 4.40.0.1006 2011.05.05 -
Symantec 20101.3.2.89 2011.05.04 -
TheHacker 6.7.0.1.187 2011.05.03 -
TrendMicro 9.200.0.1012 2011.05.04 -
TrendMicro-HouseCall 9.200.0.1012 2011.05.05 -
VBA32 3.12.16.0 2011.05.04 -
VIPRE 9193 2011.05.04 -
ViRobot 2011.5.4.4446 2011.05.05 -
VirusBuster 13.6.336.0 2011.05.04 -

MD5 : 6ab4e45ea9436cfef7353dd5f558fa48
SHA1 : 70bd3957c5ef45e773ff8c2a2437601e3b0c9dfb
SHA256: a28967aeea711fb66f1b6ad6797a8224f095100c7757de351e 9107859931c702
ssdeep: 6144:cdz8D9j6LDKRajieMpgfdEiCATSxiqlo5CPIYfQbQKjFG ep7:cVyjTbGfqATSM9CgFV
File size : 279552 bytes

First seen: 2011-05-05 00:33:25
Last seen : 2011-05-05 00:33:25

http://www.virustotal.com/file-scan/...702-1304555605

**ragalt** · 08.05.2011, 13:28

File name:
virus
Submission date:
2011-05-08 09:22:40 (UTC)
Current status:
finished
Result:
4/ 41 (9.8%)
Antivirus Version Last Update Result
AhnLab-V3 2011.05.08.00 2011.05.07 -
AntiVir 7.11.7.176 2011.05.06 -
Antiy-AVL 2.0.3.7 2011.05.08 -
Avast 4.8.1351.0 2011.05.07 -
Avast5 5.0.677.0 2011.05.07 -
AVG 10.0.0.1190 2011.05.07 -
BitDefender 7.2 2011.05.08 Gen:Variant.Kazy.22259
CAT-QuickHeal 11.00 2011.05.08 -
ClamAV 0.97.0.0 2011.05.07 -
Commtouch 5.3.2.6 2011.05.07 -
Comodo 8623 2011.05.08 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.2.03300 2011.05.08 -
eSafe 7.0.17.0 2011.05.05 -
eTrust-Vet 36.1.8312 2011.05.06 -
F-Prot 4.6.2.117 2011.05.08 -
F-Secure 9.0.16440.0 2011.05.08 Gen:Variant.Kazy.22259
Fortinet 4.2.257.0 2011.05.08 -
GData 22 2011.05.08 Gen:Variant.Kazy.22259
Ikarus T3.1.1.103.0 2011.05.08 -
Jiangmin 13.0.900 2011.05.05 -
K7AntiVirus 9.102.4584 2011.05.06 -
Kaspersky 9.0.0.837 2011.05.08 -
McAfee 5.400.0.1158 2011.05.08 -
McAfee-GW-Edition 2010.1D 2011.05.07 -
Microsoft 1.6802 2011.05.08 -
NOD32 6103 2011.05.08 -
Norman 6.07.07 2011.05.07 -
Panda 10.0.3.5 2011.05.07 -
PCTools 7.0.3.5 2011.05.06 -
Prevx 3.0 2011.05.08 -
Rising 23.56.05.03 2011.05.07 -
Sophos 4.65.0 2011.05.08 -
SUPERAntiSpyware 4.40.0.1006 2011.05.08 -
Symantec 20101.3.2.89 2011.05.08 -
TheHacker 6.7.0.1.191 2011.05.08 -
TrendMicro 9.200.0.1012 2011.05.08 -
TrendMicro-HouseCall 9.200.0.1012 2011.05.08 -
VBA32 3.12.16.0 2011.05.08 -
VIPRE 9220 2011.05.08 -
ViRobot 2011.5.7.4450 2011.05.07 -
VirusBuster 13.6.342.0 2011.05.07 -
Additional information
MD5 : cf9d54b50fd05a33551229a6d8c60182
SHA1 : cd777dfc1b98fb3fb38896d7fdf5725dc75d2452
SHA256: 659d7a1ea3131339333493d2f6fe51374c49d9fbbbf28c3fb7 69855c4fd57934
ssdeep: 3072:bquGM723Pa6DKL1Wm5mFWp7GnCdEhB6uSDpKxfNyWbWK1 e8I01dMCMlz:bbl2/X2xWYmFW
Vh86uSDpgfNyWBtKCQ
File size : 196096 bytes
First seen: 2011-05-08 09:22:40
Last seen : 2011-05-08 09:22:40
TrID:
Win64 Executable Generic (80.9%)
Win32 Executable Generic (8.0%)
Win32 Dynamic Link Library (generic) (7.1%)
Generic Win/DOS Executable (1.8%)
DOS Executable Generic (1.8%)
sigcheck:
publisher....: Panda Security, S.L.
copyright....: titmal
product......: Torpescence
description..: Norsk
original name: n/a
internal name: n/a
file version.: 5.1.7.2
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEInfo: PE structure information

http://www.virustotal.com/file-scan/...934-1304846560

**Winsent** · 22.05.2011, 19:41

Antivirus results

AhnLab-V3 - 2011.05.23.00 - 2011.05.22 - Trojan/Win32.FakeAV
AntiVir - 7.11.8.89 - 2011.05.21 - -
Antiy-AVL - 2.0.3.7 - 2011.05.22 - -
Avast - 4.8.1351.0 - 2011.05.22 - -
Avast5 - 5.0.677.0 - 2011.05.22 - -
AVG - 10.0.0.1190 - 2011.05.22 - -
BitDefender - 7.2 - 2011.05.22 - -
CAT-QuickHeal - 11.00 - 2011.05.22 - (Suspicious) - DNAScan
ClamAV - 0.97.0.0 - 2011.05.22 - -
Commtouch - 5.3.2.6 - 2011.05.22 - -
Comodo - 8794 - 2011.05.22 - -
DrWeb - 5.0.2.03300 - 2011.05.22 - -
Emsisoft - 5.1.0.5 - 2011.05.22 - -
eSafe - 7.0.17.0 - 2011.05.19 - -
eTrust-Vet - 36.1.8339 - 2011.05.20 - -
F-Prot - 4.6.2.117 - 2011.05.22 - -
F-Secure - 9.0.16440.0 - 2011.05.22 - -
Fortinet - 4.2.257.0 - 2011.05.22 - -
GData - 22 - 2011.05.22 - -
Ikarus - T3.1.1.104.0 - 2011.05.22 - -
Jiangmin - 13.0.900 - 2011.05.22 - -
K7AntiVirus - 9.103.4693 - 2011.05.20 - -
Kaspersky - 9.0.0.837 - 2011.05.22 - -
McAfee - 5.400.0.1158 - 2011.05.22 - -
McAfee-GW-Edition - 2010.1D - 2011.05.21 - -
Microsoft - 1.6903 - 2011.05.22 - -
NOD32 - 6142 - 2011.05.22 - -
Norman - 6.07.07 - 2011.05.22 - -
nProtect - 2011-05-22.01 - 2011.05.22 - -
Panda - 10.0.3.5 - 2011.05.22 - -
PCTools - 7.0.3.5 - 2011.05.19 - -
Prevx - 3.0 - 2011.05.22 - -
Rising - 23.58.06.03 - 2011.05.22 - -
Sophos - 4.65.0 - 2011.05.22 - -
SUPERAntiSpyware - 4.40.0.1006 - 2011.05.22 - Trojan.Agent/Gen-FakeAV
Symantec - 20111.1.0.186 - 2011.05.22 - -
TheHacker - 6.7.0.1.202 - 2011.05.20 - -
TrendMicro - 9.200.0.1012 - 2011.05.22 - -
TrendMicro-HouseCall - 9.200.0.1012 - 2011.05.22 - -
VBA32 - 3.12.16.0 - 2011.05.20 - -
VIPRE - 9355 - 2011.05.22 - Trojan.Win32.Generic.pak!cobra
ViRobot - 2011.5.21.4472 - 2011.05.22 - -
VirusBuster - 13.6.367.0 - 2011.05.22 - -

File info:
MD5: 0b316fb4ba1d367f629eacefc37a4fca
SHA1: 1d7154e00ae0d1fb71147cbf428d6e43c73a1700
SHA256: 88356f5066bc1e5a6d695de95e8aaee2bf35596bf85929abb5 c569e56ea340ce
File size: 331776 bytes

**Nexus** · 02.06.2011, 15:55

Очередной бесплатный подарок вконтакте...

File name:
VkGift.exe
Submission date:
2011-06-02 11:00:13 (UTC)
Current status:
finished
Result:
4 /42 (9.5%)

Antivirus results
AhnLab-V3 - 2011.06.02.01 - 2011.06.02 - -
AntiVir - 7.11.8.245 - 2011.06.02 - -
Antiy-AVL - 2.0.3.7 - 2011.06.02 - -
Avast - 4.8.1351.0 - 2011.06.02 - -
Avast5 - 5.0.677.0 - 2011.06.02 - -
AVG - 10.0.0.1190 - 2011.06.02 - -
BitDefender - 7.2 - 2011.06.02 - -
CAT-QuickHeal - 11.00 - 2011.06.02 - -
ClamAV - 0.97.0.0 - 2011.06.02 - -
Commtouch - 5.3.2.6 - 2011.06.02 - -
Comodo - 8917 - 2011.06.02 - -
DrWeb - 5.0.2.03300 - 2011.06.02 - -
eSafe - 7.0.17.0 - 2011.05.31 - -
eTrust-Vet - 36.1.8361 - 2011.06.01 - -
F-Prot - 4.6.2.117 - 2011.06.01 - -
F-Secure - 9.0.16440.0 - 2011.06.02 - -
Fortinet - 4.2.257.0 - 2011.06.02 - -
GData - 22 - 2011.06.02 - -
Ikarus - T3.1.1.104.0 - 2011.06.02 - -
Jiangmin - 13.0.900 - 2011.06.01 - TrojanDownloader.Generic.cuk
K7AntiVirus - 9.104.4750 - 2011.06.01 - -
Kaspersky - 9.0.0.837 - 2011.06.02 - Trojan.Win32.VkHost.fy
McAfee - 5.400.0.1158 - 2011.06.02 - -
McAfee-GW-Edition - 2010.1D - 2011.06.02 - Heuristic.BehavesLike.Win32.ModifiedUPX.J!87
Microsoft - 1.6903 - 2011.06.02 - -
NOD32 - 6173 - 2011.06.02 - -
Norman - 6.07.07 - 2011.06.02 - -
nProtect - 2011-06-02.01 - 2011.06.02 - -
Panda - 10.0.3.5 - 2011.06.01 - -
PCTools - 7.0.3.5 - 2011.06.01 - -
Prevx - 3.0 - 2011.06.02 - -
Rising - 23.60.03.03 - 2011.06.02 - Suspicious
Sophos - 4.65.0 - 2011.06.02 - -
SUPERAntiSpyware - 4.40.0.1006 - 2011.06.02 - -
Symantec - 20111.1.0.186 - 2011.06.02 - -
TheHacker - 6.7.0.1.215 - 2011.06.02 - -
TrendMicro - 9.200.0.1012 - 2011.06.02 - -
TrendMicro-HouseCall - 9.200.0.1012 - 2011.06.02 - -
VBA32 - 3.12.16.0 - 2011.06.02 - -
VIPRE - 9461 - 2011.06.02 - -
ViRobot - 2011.6.2.4492 - 2011.06.02 - -
VirusBuster - 14.0.63.0 - 2011.06.02 - -

File info:
MD5: 319e97f2b1a0286f4f0eef9324bf55a9
SHA1: 8254f2e248fb63a176734c0f9b898e557e94514a
SHA256: 6ecaa64e0190c509c92c98a99c11669d9c3f1a85e42efb03d9 7447cc3b96593a
File size: 388096 bytes
Scan date: 2011-06-02 11:00:13 (UTC)

Исследование антивирусов 7

Опции темы

Похожие темы

Исследование антивирусов 6

Исследование антивирусов 5

Исследование антивирусов 4

Исследование антивирусов 3

Исследование антивирусов 2

Метки для этой темы

Ваши права в разделе