Исследование антивирусов 3

[HATTIFNATTOR]

This is a report processed by VirusTotal on 02/27/2006 at 15:35:46 (CET) after scanning the file "mssvcc.exe" file.
Antivirus Version Update Result
AntiVir 6.33.1.50 02.27.2006 Worm/IRCBot.OZ
Avast 4.6.695.0 02.27.2006 no virus found
AVG 718 02.24.2006 BackDoor.Generic2.KYG
Avira 6.33.1.50 02.27.2006 Worm/IRCBot.OZ
BitDefender 7.2 02.27.2006 no virus found
CAT-QuickHeal 8.00 02.25.2006 (Suspicious) - DNAScan
ClamAV devel-20060126 02.26.2006 no virus found
DrWeb 4.33 02.27.2006 Win32.HLLW.MyBot
eTrust-InoculateIT 23.71.87 02.26.2006 Win32/RBot.5au!Trojan
eTrust-Vet 12.4.2097 02.27.2006 Win32/Rbot.EQW
Ewido 3.5 02.27.2006 Backdoor.IRCBot.oz
Fortinet 2.71.0.0 02.27.2006 W32/RBot.BJV!wm
F-Prot 3.16c 02.25.2006 security risk named W32/Backdoor.HWJ
Ikarus 0.2.59.0 02.24.2006 Backdoor.Win32.Rbot.AMZ
Kaspersky 4.0.2.24 02.27.2006 Backdoor.Win32.IRCBot.oz
McAfee 4705 02.24.2006 W32/Sdbot.worm.gen.h
NOD32v2 1.1419 02.26.2006 Win32/Rbot
Norman 5.70.10 02.27.2006 W32/Ircbot.AAL
Panda 9.0.0.4 02.26.2006 Suspicious file
Sophos 4.02.0 02.27.2006 W32/Rbot-BJV
Symantec 8.0 02.27.2006 W32.Spybot.Worm
TheHacker 5.9.4.102 02.24.2006 Backdoor/IRCBot.oz
UNA 1.83 02.24.2006 Backdoor.IRCBot
VBA32 3.10.5 02.27.2006 Backdoor.Win32.Rbot.amz

[HATTIFNATTOR]

This is a report processed by VirusTotal on 02/27/2006 at 15:40:07 (CET) after scanning the file "lat.exe" file.
Antivirus Version Update Result
AntiVir 6.33.1.50 02.27.2006 Worm/SdBot.ant
Avast 4.6.695.0 02.27.2006 no virus found
AVG 718 02.24.2006 no virus found
Avira 6.33.1.50 02.27.2006 Worm/SdBot.ant
BitDefender 7.2 02.27.2006 no virus found
CAT-QuickHeal 8.00 02.25.2006 (Suspicious) - DNAScan
ClamAV devel-20060126 02.26.2006 no virus found
DrWeb 4.33 02.27.2006 Win32.HLLW.MyBot
eTrust-InoculateIT 23.71.87 02.26.2006 no virus found
eTrust-Vet 12.4.2097 02.27.2006 no virus found
Ewido 3.5 02.27.2006 Backdoor.SdBot.ant
Fortinet 2.71.0.0 02.27.2006 suspicious
F-Prot 3.16c 02.25.2006 no virus found
Ikarus 0.2.59.0 02.24.2006 no virus found
Kaspersky 4.0.2.24 02.27.2006 Backdoor.Win32.SdBot.ant
McAfee 4705 02.24.2006 no virus found
NOD32v2 1.1419 02.26.2006 a variant of Win32/Rbot
Norman 5.70.10 02.27.2006 W32/Spybot.AHNC
Panda 9.0.0.4 02.26.2006 Suspicious file
Sophos 4.02.0 02.27.2006 no virus found
Symantec 8.0 02.27.2006 no virus found
TheHacker 5.9.4.102 02.24.2006 no virus found
UNA 1.83 02.24.2006 no virus found
VBA32 3.10.5 02.27.2006 Backdoor.Win32.Rbot.aeu

[HATTIFNATTOR]

This is a report processed by VirusTotal on 02/27/2006 at 23:40:49 (CET) after scanning the file "csrss.exe" file.
Antivirus Version Update Result
AntiVir 6.33.1.50 02.27.2006 PCK/MEW
Avast 4.6.695.0 02.27.2006 Win32:Ldpinch-AH
AVG 718 02.27.2006 no virus found
Avira 6.33.1.50 02.27.2006 PCK/MEW
BitDefender 7.2 02.27.2006 no virus found
CAT-QuickHeal 8.00 02.27.2006 (Suspicious) - DNAScan
ClamAV devel-20060126 02.27.2006 no virus found
DrWeb 4.33 02.27.2006 BACKDOOR.PWS.Trojan
eTrust-InoculateIT 23.71.87 02.26.2006 no virus found
eTrust-Vet 12.4.2097 02.27.2006 no virus found
Ewido 3.5 02.27.2006 no virus found
Fortinet 2.71.0.0 02.27.2006 suspicious
F-Prot 3.16c 02.27.2006 no virus found
Ikarus 0.2.59.0 02.27.2006 no virus found
Kaspersky 4.0.2.24 02.27.2006 Trojan-PSW.Win32.PdPinch.gen
McAfee 4706 02.27.2006 no virus found
NOD32v2 1.1420 02.27.2006 a variant of Win32/PSW.LdPinch.RG
Norman 5.70.10 02.27.2006 W32/Suspicious_M.gen
Panda 9.0.0.4 02.27.2006 Suspicious file
Sophos 4.03.0 02.27.2006 Troj/LdPnch-Gen
Symantec 8.0 02.27.2006 no virus found
TheHacker 5.9.4.102 02.24.2006 no virus found
UNA 1.83 02.27.2006 no virus found
VBA32 3.10.5 02.27.2006 suspected of Trojan-PSW.LdPinch.1

[HATTIFNATTOR]

This is a report processed by VirusTotal on 02/27/2006 at 23:41:29 (CET) after scanning the file "win2sys.dll" file.
Antivirus Version Update Result
AntiVir 6.33.1.50 02.27.2006 no virus found
Avast 4.6.695.0 02.27.2006 Win32:Trojano-2441
AVG 718 02.27.2006 Dropper.Generic.BAW
Avira 6.33.1.50 02.27.2006 no virus found
BitDefender 7.2 02.27.2006 no virus found
CAT-QuickHeal 8.00 02.27.2006 no virus found
ClamAV devel-20060126 02.27.2006 no virus found
DrWeb 4.33 02.27.2006 MULDROP.Trojan
eTrust-InoculateIT 23.71.87 02.26.2006 no virus found
eTrust-Vet 12.4.2097 02.27.2006 Win32/Pinteep
Ewido 3.5 02.27.2006 no virus found
Fortinet 2.71.0.0 02.27.2006 no virus found
F-Prot 3.16c 02.27.2006 no virus found
Ikarus 0.2.59.0 02.27.2006 no virus found
Kaspersky 4.0.2.24 02.27.2006 no virus found
McAfee 4706 02.27.2006 MultiDropper-MK
NOD32v2 1.1420 02.27.2006 a variant of Win32/TrojanDropper.Small.AGT
Norman 5.70.10 02.27.2006 no virus found
Panda 9.0.0.4 02.27.2006 no virus found
Sophos 4.03.0 02.27.2006 no virus found
Symantec 8.0 02.27.2006 no virus found
TheHacker 5.9.4.102 02.24.2006 no virus found
UNA 1.83 02.27.2006 no virus found
VBA32 3.10.5 02.27.2006 suspected of Trojan-PSW.LdPinch.1

[Shu_b]

off: драйвер для коврика

This is a report processed by VirusTotal on 03/02/2006 at 19:16:18 (CET) after scanning the file "mousepad._xe" file.

Antivirus Version Update Result
AntiVir 6.33.1.53 03.02.2006 no virus found
Avast 4.6.695.0 03.02.2006 no virus found
AVG 718 03.02.2006 no virus found
Avira 6.33.1.53 03.02.2006 no virus found
BitDefender 7.2 03.02.2006 no virus found
CAT-QuickHeal 8.00 03.02.2006 no virus found
ClamAV devel-20060126 03.02.2006 no virus found
DrWeb 4.33 03.02.2006 Trojan.Click.930
eTrust-InoculateIT 23.71.91 03.02.2006 no virus found
eTrust-Vet 12.4.2102 03.02.2006 no virus found
Ewido 3.5 03.02.2006 no virus found
Fortinet 2.71.0.0 03.02.2006 no virus found
F-Prot 3.16c 03.01.2006 no virus found
Kaspersky 4.0.2.24 03.02.2006 Trojan-Clicker.Win32.VB.li
McAfee 4708 03.01.2006 no virus found
NOD32v2 1.1424 03.02.2006 a variant of Win32/TrojanClicker.VB.LI
Norman 5.70.10 03.02.2006 no virus found
Panda 9.0.0.4 03.02.2006 no virus found
Symantec 8.0 03.02.2006 no virus found
TheHacker 5.9.5.104 03.02.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.02.2006 no virus found

[Geser]

Shu_b отлично сделаны результаты, только не плохо бы их посортировать

[Geser]

This is a report processed by VirusTotal on 03/02/2006 at 20:07:58 (CET) after scanning the file "msupdate32.dll" file.
Antivirus Version Update Result
AntiVir 6.33.1.53 03.02.2006 TR/Drop.Agen.abu.23
Avast 4.6.695.0 03.02.2006 Win32:Trojano-2997
AVG 718 03.02.2006 Generic.QLA
Avira 6.33.1.53 03.02.2006 TR/Drop.Agen.abu.23
BitDefender 7.2 03.02.2006 no virus found
CAT-QuickHeal 8.00 03.02.2006 no virus found
ClamAV devel-20060126 03.02.2006 no virus found
DrWeb 4.33 03.02.2006 DLOADER.Trojan
eTrust-InoculateIT 23.71.91 03.02.2006 Win32/Soclaip.L!DLL!Trojan
eTrust-Vet 12.4.2102 03.02.2006 Win32/Soclaip.L
Ewido 3.5 03.02.2006 Backdoor.Delf.aml
Fortinet 2.71.0.0 03.02.2006 Raser.Z!tr
F-Prot 3.16c 03.01.2006 destructive program named W32/Trojan.BBV
Ikarus 0.2.65.0 03.02.2006 no virus found
Kaspersky 4.0.2.24 03.02.2006 no virus found
McAfee 4709 03.02.2006 Proxy-Raser
NOD32v2 1.1424 03.02.2006 no virus found
Norman 5.70.10 03.02.2006 no virus found
Panda 9.0.0.4 03.02.2006 Suspicious file
Sophos 4.03.0 03.02.2006 Troj/Raser-Z
Symantec 8.0 03.02.2006 Backdoor.Trojan
TheHacker 5.9.5.104 03.02.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.02.2006 no virus found

This is a report processed by VirusTotal on 03/02/2006 at 20:15:33 (CET) after scanning the file "gimmysmileys.exe" file.
Antivirus Version Update Result
AntiVir 6.33.1.53 03.02.2006 no virus found
Avast 4.6.695.0 03.02.2006 no virus found
AVG 718 03.02.2006 no virus found
Avira 6.33.1.53 03.02.2006 no virus found
BitDefender 7.2 03.02.2006 no virus found
CAT-QuickHeal 8.00 03.02.2006 no virus found
ClamAV devel-20060126 03.02.2006 no virus found
DrWeb 4.33 03.02.2006 no virus found
eTrust-InoculateIT 23.71.91 03.02.2006 no virus found
eTrust-Vet 12.4.2102 03.02.2006 no virus found
Ewido 3.5 03.02.2006 no virus found
Fortinet 2.71.0.0 03.02.2006 no virus found
F-Prot 3.16c 03.01.2006 no virus found
Ikarus 0.2.65.0 03.02.2006 no virus found
Kaspersky 4.0.2.24 03.02.2006 no virus found
McAfee 4709 03.02.2006 no virus found
NOD32v2 1.1424 03.02.2006 probably a variant of Win32/TrojanDownloader.Adload.NAC
Norman 5.70.10 03.02.2006 no virus found
Panda 9.0.0.4 03.02.2006 no virus found
Sophos 4.03.0 03.02.2006 no virus found
Symantec 8.0 03.02.2006 no virus found
TheHacker 5.9.5.104 03.02.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.02.2006 no virus found

[Tony Montana]

Хм... смотрю, что БД и Каспер че-то лажают в последнее время (судя по этим данным). А кто-нить пробовал эти виры запустить еще раз на следующий день. Просто инетерсно, все дело в обновлении баз?

[HATTIFNATTOR]

This is a report processed by VirusTotal on 03/03/2006 at 10:50:17 (CET) after scanning the file "EGACCESS4_1059.dll" file.
Antivirus Version Update Result
AntiVir 6.33.1.53 03.03.2006 no virus found
Avast 4.6.695.0 03.02.2006 no virus found
AVG 718 03.02.2006 no virus found
Avira 6.33.1.53 03.03.2006 no virus found
BitDefender 7.2 03.03.2006 no virus found
CAT-QuickHeal 8.00 03.02.2006 no virus found
ClamAV devel-20060126 03.02.2006 no virus found
DrWeb 4.33 03.03.2006 no virus found
eTrust-InoculateIT 23.71.92 03.03.2006 no virus found
eTrust-Vet 12.4.2104 03.03.2006 no virus found
Ewido 3.5 03.02.2006 no virus found
Fortinet 2.71.0.0 03.02.2006 suspicious
F-Prot 3.16c 03.03.2006 no virus found
Ikarus 0.2.65.0 03.02.2006 no virus found
Kaspersky 4.0.2.24 03.03.2006 no virus found
McAfee 4709 03.02.2006 no virus found
NOD32v2 1.1426 03.03.2006 no virus found
Norman 5.70.10 03.02.2006 no virus found
Panda 9.0.0.4 03.03.2006 Dialer.GKN
Sophos 4.03.0 03.03.2006 no virus found
Symantec 8.0 03.03.2006 no virus found
TheHacker 5.9.5.105 03.03.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.02.2006 no virus found

[HATTIFNATTOR]

This is a report processed by VirusTotal on 03/03/2006 at 17:20:08 (CET) after scanning the file "vbsys2.dll" file.
Antivirus Version Update Result
AntiVir 6.33.1.53 03.03.2006 no virus found
Avast 4.6.695.0 03.03.2006 no virus found
AVG 718 03.03.2006 no virus found
Avira 6.33.1.53 03.03.2006 no virus found
BitDefender 7.2 03.03.2006 no virus found
CAT-QuickHeal 8.00 03.02.2006 no virus found
ClamAV devel-20060126 03.03.2006 no virus found
DrWeb 4.33 03.03.2006 no virus found
eTrust-InoculateIT 23.71.92 03.03.2006 no virus found
eTrust-Vet 12.4.2104 03.03.2006 Win32/Pomelo!generic
Ewido 3.5 03.03.2006 no virus found
Fortinet 2.71.0.0 03.03.2006 no virus found
F-Prot 3.16c 03.03.2006 no virus found
Ikarus 0.2.59.0 03.03.2006 no virus found
Kaspersky 4.0.2.24 03.03.2006 no virus found
McAfee 4709 03.02.2006 no virus found
NOD32v2 1.1428 03.03.2006 no virus found
Norman 5.70.10 03.03.2006 no virus found
Panda 9.0.0.4 03.03.2006 Suspicious file
Sophos 4.03.0 03.03.2006 no virus found
Symantec 8.0 03.03.2006 no virus found
TheHacker 5.9.5.105 03.03.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.03.2006 suspected of Malware.Agent.20

[HATTIFNATTOR]

This is a report processed by VirusTotal on 03/03/2006 at 17:21:20 (CET) after scanning the file "EGDACCESS_ASPIV4_1063a.dll" file.
Antivirus Version Update Result
AntiVir 6.33.1.53 03.03.2006 Dial/302237
Avast 4.6.695.0 03.03.2006 no virus found
AVG 718 03.03.2006 Potentially harmful program Dialer.BF
Avira 6.33.1.53 03.03.2006 Dial/302237
BitDefender 7.2 03.03.2006 no virus found
CAT-QuickHeal 8.00 03.02.2006 no virus found
ClamAV devel-20060126 03.03.2006 Dialer-324
DrWeb 4.33 03.03.2006 no virus found
eTrust-InoculateIT 23.71.92 03.03.2006 no virus found
eTrust-Vet 12.4.2104 03.03.2006 no virus found
Ewido 3.5 03.03.2006 Dialer.InstantAccess.f
Fortinet 2.71.0.0 03.03.2006 suspicious
F-Prot 3.16c 03.03.2006 no virus found
Ikarus 0.2.59.0 03.03.2006 no virus found
Kaspersky 4.0.2.24 03.03.2006 no virus found
McAfee 4709 03.02.2006 potentially unwanted program Dialer-Generic
NOD32v2 1.1428 03.03.2006 probably a variant of Win32/Dialer.Egroup
Norman 5.70.10 03.03.2006 no virus found
Panda 9.0.0.4 03.03.2006 Dialer.CTG
Sophos 4.03.0 03.03.2006 no virus found
Symantec 8.0 03.03.2006 no virus found
TheHacker 5.9.5.105 03.03.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.03.2006 Porn-Dialer.Win32.InstantAccess.f

[HATTIFNATTOR]

This is a report processed by VirusTotal on 03/03/2006 at 17:26:24 (CET) after scanning the file "epl.exe" file.
Antivirus Version Update Result
AntiVir 6.33.1.53 03.03.2006 no virus found
Avast 4.6.695.0 03.03.2006 no virus found
AVG 718 03.03.2006 no virus found
Avira 6.33.1.53 03.03.2006 no virus found
BitDefender 7.2 03.03.2006 no virus found
CAT-QuickHeal 8.00 03.02.2006 no virus found
ClamAV devel-20060126 03.03.2006 no virus found
DrWeb 4.33 03.03.2006 Trojan.DownLoader.2163
eTrust-InoculateIT 23.71.92 03.03.2006 no virus found
eTrust-Vet 12.4.2104 03.03.2006 no virus found
Ewido 3.5 03.03.2006 no virus found
Fortinet 2.71.0.0 03.03.2006 suspicious
F-Prot 3.16c 03.03.2006 no virus found
Ikarus 0.2.59.0 03.03.2006 no virus found
Kaspersky 4.0.2.24 03.03.2006 Trojan.Win32.LipGame.l
McAfee 4709 03.02.2006 potentially unwanted program Dialer-RAS
NOD32v2 1.1428 03.03.2006 a variant of Win32/Dialer.EB
Norman 5.70.10 03.03.2006 no virus found
Panda 9.0.0.4 03.03.2006 Suspicious file
Sophos 4.03.0 03.03.2006 no virus found
Symantec 8.0 03.03.2006 no virus found
TheHacker 5.9.5.105 03.03.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.03.2006 suspected of Downloader.Small.16

[Shu_b]

This is a report processed by VirusTotal on 03/06/2006 at 04:47:00 (CET) after scanning the file "WTL32dl.exe" file.

Antivirus Version Update Result
AntiVir 6.33.1.53 03.05.2006 no virus found
Avast 4.6.695.0 03.03.2006 no virus found
AVG 718 03.03.2006 no virus found
Avira 6.33.1.53 03.05.2006 no virus found
BitDefender 7.2 03.06.2006 no virus found
CAT-QuickHeal 8.00 03.04.2006 no virus found
ClamAV devel-20060126 03.05.2006 no virus found
DrWeb 4.33 03.05.2006 no virus found
eTrust-InoculateIT 23.71.94 03.05.2006 no virus found
eTrust-Vet 12.4.2104 03.03.2006 no virus found
Ewido 3.5 03.05.2006 no virus found
Fortinet 2.71.0.0 03.06.2006 suspicious
F-Prot 3.16c 03.03.2006 no virus found
Ikarus 0.2.59.0 03.03.2006 no virus found
Kaspersky 4.0.2.24 03.06.2006 no virus found
McAfee 4710 03.03.2006 Proxy-Agent.a
NOD32v2 1.1431 03.05.2006 no virus found
Norman 5.70.10 03.03.2006 no virus found
Panda 9.0.0.4 03.06.2006 Suspicious file
Sophos 4.03.0 03.06.2006 no virus found
Symantec 8.0 03.06.2006 no virus found
TheHacker 5.9.5.107 03.06.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.06.2006 suspected of Trojan.Agent.69


This is a report processed by VirusTotal on 03/06/2006 at 04:53:47 (CET) after scanning the file "csrss.exe" file.

Antivirus Version Update Result
AntiVir 6.33.1.53 03.05.2006 PCK/PESpin
Avast 4.6.695.0 03.03.2006 no virus found
AVG 718 03.03.2006 no virus found
Avira 6.33.1.53 03.05.2006 PCK/PESpin
BitDefender 7.2 03.06.2006 GenPack:Generic.Malware.MB.E50D0DE2
CAT-QuickHeal 8.00 03.04.2006 (Suspicious) - DNAScan
ClamAV devel-20060126 03.05.2006 Trojan.Beastdoor.206.G-srv
DrWeb 4.33 03.05.2006 BackDoor.Beast.206
eTrust-InoculateIT 23.71.94 03.05.2006 no virus found
eTrust-Vet 12.4.2104 03.03.2006 no virus found
Ewido 3.5 03.05.2006 no virus found
Fortinet 2.71.0.0 03.06.2006 suspicious
F-Prot 3.16c 03.03.2006 no virus found
Ikarus 0.2.59.0 03.03.2006 no virus found
Kaspersky 4.0.2.24 03.06.2006 no virus found
McAfee 4710 03.03.2006 BackDoor-AMQ
NOD32v2 1.1431 03.05.2006 a variant of Win32/Beastdoor
Norman 5.70.10 03.03.2006 no virus found
Panda 9.0.0.4 03.06.2006 Suspicious file
Sophos 4.03.0 03.06.2006 no virus found
Symantec 8.0 03.06.2006 no virus found
TheHacker 5.9.5.107 03.06.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.06.2006 no virus found

[Shu_b]

This is a report processed by VirusTotal on 03/06/2006 at 08:11:54 (CET) after scanning the file "msdd32.dll" file.

Antivirus Version Update Result
AntiVir 6.33.1.53 03.05.2006 Worm/Feebs.AF.2
Avast 4.6.695.0 03.03.2006 Win32:Feebs-J
AVG 718 03.03.2006 Worm/Feebs.BX
Avira 6.33.1.53 03.05.2006 Worm/Feebs.AF.2
BitDefender 7.2 03.06.2006 Win32.Worm.Feebs.1.Gen
CAT-QuickHeal 8.00 03.06.2006 no virus found
ClamAV devel-20060126 03.05.2006 Worm.Feebs.O-rkit
DrWeb 4.33 03.05.2006 Win32.HLLM.Graz.based
eTrust-InoculateIT 23.71.94 03.05.2006 no virus found
eTrust-Vet 12.4.2106 03.06.2006 Win32/Feeb.AP
Ewido 3.5 03.05.2006 no virus found
Fortinet 2.71.0.0 03.06.2006 W32/Feebs
F-Prot 3.16c 03.03.2006 no virus found
Ikarus 0.2.59.0 03.03.2006 no virus found
Kaspersky 4.0.2.24 03.06.2006 Worm.Win32.Feebs.bx
McAfee 4710 03.03.2006 W32/Feebs!rootkit
NOD32v2 1.1431 03.05.2006 Win32/Mocalo.BC
Norman 5.70.10 03.03.2006 no virus found
Panda 9.0.0.4 03.06.2006 W32/Feebs.AQ.worm
Sophos 4.03.0 03.06.2006 W32/Feebs-Gen
Symantec 8.0 03.06.2006 no virus found
TheHacker 5.9.5.107 03.06.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.06.2006 no virus found

[gines]

This is a report processed by VirusTotal on 03/06/2006 at 12:13:49 (CET) after scanning the file "regsvcdll.exe" file.

Antivirus Version Update Result
AntiVir 6.33.1.53 03.06.2006 SPR/PowerSpy.a.1
Avast 4.6.695.0 03.03.2006 no virus found
AVG 718 03.03.2006 no virus found
Avira 6.33.1.53 03.06.2006 SPR/PowerSpy.a.1
BitDefender 7.2 03.06.2006 no virus found
CAT-QuickHeal 8.00 03.06.2006 Monitor.PowerSpy.a (Not a Virus)
ClamAV devel-20060126 03.05.2006 no virus found
DrWeb 4.33 03.06.2006 no virus found
eTrust-InoculateIT 23.71.94 03.05.2006 no virus found
eTrust-Vet 12.4.2106 03.06.2006 no virus found
Ewido 3.5 03.06.2006 Not-A-Virus.Monitor.Win32.PowerSpy.a
Fortinet 2.71.0.0 03.06.2006 Spy/PCSpy
F-Prot 3.16c 03.03.2006 no virus found
Ikarus 0.2.59.0 03.03.2006 no virus found
Kaspersky 4.0.2.24 03.06.2006 no virus found
McAfee 4710 03.03.2006 no virus found
NOD32v2 1.1431 03.05.2006 no virus found
Norman 5.70.10 03.06.2006 no virus found
Panda 9.0.0.4 03.06.2006 no virus found
Sophos 4.03.0 03.06.2006 no virus found
Symantec 8.0 03.06.2006 no virus found
TheHacker 5.9.5.107 03.06.2006 Aplicacion/PowerSpy.a
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.06.2006 no virus found

[userr]

Файл подозрительный, но реакция слабая. Посмотрим, что завтра будет. У DrWeb на virustotal видимо все еще реакция на adware/spyware стоит ignore .
-----------------------------------------
This is a report processed by VirusTotal on 03/08/2006 at 19:40:05 (CET) after scanning the file "KDP5037.zip" file.
Antivirus Version Update Result
AntiVir 6.34.0.53 03.08.2006 no virus found
Avast 4.6.695.0 03.08.2006 no virus found
AVG 718 03.08.2006 no virus found
Avira 6.33.1.53 03.07.2006 no virus found
BitDefender 7.2 03.08.2006 no virus found
CAT-QuickHeal 8.00 03.08.2006 no virus found
ClamAV devel-20060126 03.07.2006 no virus found
DrWeb 4.33 03.08.2006 no virus found
eTrust-InoculateIT 23.71.96 03.08.2006 no virus found
eTrust-Vet 12.4.2110 03.08.2006 no virus found
Ewido 3.5 03.08.2006 no virus found
Fortinet 2.71.0.0 03.07.2006 no virus found
F-Prot 3.16c 03.08.2006 no virus found
Ikarus 0.2.59.0 03.08.2006 no virus found
Kaspersky 4.0.2.24 03.08.2006 no virus found
McAfee 4713 03.08.2006 no virus found
NOD32v2 1.1434 03.08.2006 no virus found
Norman 5.70.10 03.08.2006 no virus found
Panda 9.0.0.4 03.08.2006 Adware/Veevo
Sophos 4.03.0 03.08.2006 no virus found
Symantec 8.0 03.08.2006 no virus found
TheHacker 5.9.5.108 03.07.2006 no virus found
UNA 1.83 03.07.2006 no virus found
VBA32 3.10.5 03.08.2006 no virus found
-----------------

Jotti's malware scan 2.99-TRANSITION_TO_3.00-R1

File: KDP5037.zip
Scanner results
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found Adware.SafeGuard
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found nothing
-----------------------------------

[K_Mikhail]

This is a report processed by VirusTotal on 03/11/2006 at 11:30:28 (CET) after scanning the file "update.exe" file.
------------------------------------------------------
Antivirus Version Update Result
AntiVir 6.34.0.53 03.10.2006 no virus found
Avast 4.6.695.0 03.10.2006 no virus found
AVG 718 03.10.2006 Dropper.Agent.AOZ
Avira 6.34.0.53 03.10.2006 no virus found
BitDefender 7.2 03.11.2006 MemScan:Trojan.Downloader.DZ
CAT-QuickHeal 8.00 03.10.2006 (Suspicious) - DNAScan
ClamAV devel-20060126 03.11.2006 no virus found
DrWeb 4.33 03.10.2006 DLOADER.Trojan
eTrust-InoculateIT 23.71.99 03.10.2006 no virus found
eTrust-Vet 12.4.2115 03.10.2006 no virus found
Ewido 3.5 03.10.2006 no virus found
Fortinet 2.71.0.0 03.11.2006 no virus found
F-Prot 3.16c 03.09.2006 no virus found
Ikarus 0.2.59.0 03.10.2006 no virus found
Kaspersky 4.0.2.24 03.11.2006 Trojan-Dropper.Win32.Agent.air
McAfee 4716 03.11.2006 no virus found
NOD32v2 1.1438 03.10.2006 probably unknown NewHeur_PE virus
Norman 5.70.10 03.10.2006 no virus found
Panda 9.0.0.4 03.10.2006 Suspicious file
Sophos 4.03.0 03.11.2006 no virus found
Symantec 8.0 03.11.2006 no virus found
TheHacker 5.9.5.110 03.09.2006 no virus found
UNA 1.83 03.10.2006 no virus found
VBA32 3.10.5 03.10.2006 suspected of Embedded.Trojan-Downloader.Win32.Small.ckf
------------------------------------------------------

This is a report processed by VirusTotal on 03/11/2006 at 11:33:08 (CET) after scanning the file "1726370.exe" file.
------------------------------------------------------
Antivirus Version Update Result
AntiVir 6.34.0.53 03.10.2006 no virus found
Avast 4.6.695.0 03.10.2006 no virus found
AVG 718 03.10.2006 no virus found
Avira 6.34.0.53 03.10.2006 no virus found
BitDefender 7.2 03.11.2006 no virus found
CAT-QuickHeal 8.00 03.10.2006 (Suspicious) - DNAScan
ClamAV devel-20060126 03.11.2006 no virus found
DrWeb 4.33 03.10.2006 no virus found
eTrust-InoculateIT 23.71.99 03.10.2006 no virus found
eTrust-Vet 12.4.2115 03.10.2006 no virus found
Ewido 3.5 03.10.2006 Trojan.DelRegKeys.a
Fortinet 2.71.0.0 03.11.2006 no virus found
F-Prot 3.16c 03.09.2006 no virus found
Ikarus 0.2.59.0 03.10.2006 no virus found
Kaspersky 4.0.2.24 03.11.2006 Trojan.Win32.DelRegKeys.a
McAfee 4716 03.11.2006 no virus found
NOD32v2 1.1438 03.10.2006 no virus found
Norman 5.70.10 03.10.2006 no virus found
Panda 9.0.0.4 03.10.2006 Suspicious file
Sophos 4.03.0 03.11.2006 no virus found
Symantec 8.0 03.11.2006 no virus found
TheHacker 5.9.5.110 03.09.2006 no virus found
UNA 1.83 03.10.2006 no virus found
VBA32 3.10.5 03.10.2006 Trojan.Win32.DelRegKeys.a
------------------------------------------------------

This is a report processed by VirusTotal on 03/11/2006 at 11:34:52 (CET) after scanning the file "1726399.exe" file.
------------------------------------------------------
Antivirus Version Update Result
AntiVir 6.34.0.53 03.10.2006 no virus found
Avast 4.6.695.0 03.10.2006 no virus found
AVG 718 03.10.2006 no virus found
Avira 6.34.0.53 03.11.2006 no virus found
BitDefender 7.2 03.11.2006 MemScan:Trojan.Spy.Small.AW
CAT-QuickHeal 8.00 03.10.2006 (Suspicious) - DNAScan
ClamAV devel-20060126 03.11.2006 no virus found
DrWeb 4.33 03.10.2006 MULDROP.Trojan
eTrust-InoculateIT 23.71.99 03.10.2006 no virus found
eTrust-Vet 12.4.2115 03.10.2006 no virus found
Ewido 3.5 03.10.2006 no virus found
Fortinet 2.71.0.0 03.11.2006 no virus found
F-Prot 3.16c 03.09.2006 no virus found
Ikarus 0.2.59.0 03.10.2006 no virus found
Kaspersky 4.0.2.24 03.11.2006 no virus found
McAfee 4716 03.11.2006 no virus found
NOD32v2 1.1438 03.10.2006 probably a variant of Win32/Spy.Small.DP
Norman 5.70.10 03.10.2006 no virus found
Panda 9.0.0.4 03.10.2006 Suspicious file
Sophos 4.03.0 03.11.2006 no virus found
Symantec 8.0 03.11.2006 no virus found
TheHacker 5.9.5.110 03.09.2006 no virus found
UNA 1.83 03.10.2006 no virus found
VBA32 3.10.5 03.10.2006 suspected of Embedded.Trojan-Spy.Win32.Small.dp
------------------------------------------------------

[K_Mikhail]

This is a report processed by VirusTotal on 03/11/2006 at 14:25:28 (CET) after scanning the file "fif.exe" file.

Antivirus Version Update Result
AntiVir 6.34.0.53 03.11.2006 no virus found
Avast 4.6.695.0 03.10.2006 no virus found
AVG 718 03.10.2006 no virus found
Avira 6.34.0.53 03.11.2006 no virus found
BitDefender 7.2 03.11.2006 BehavesLike:Win32.ExplorerHijack
CAT-QuickHeal 8.00 03.10.2006 (Suspicious) - DNAScan
ClamAV devel-20060126 03.11.2006 Worm.Mytob.Gen-6
DrWeb 4.33 03.11.2006 no virus found
eTrust-InoculateIT 23.71.99 03.10.2006 no virus found
eTrust-Vet 12.4.2115 03.10.2006 no virus found
Ewido 3.5 03.10.2006 no virus found
Fortinet 2.71.0.0 03.11.2006 suspicious
F-Prot 3.16c 03.09.2006 no virus found
Ikarus 0.2.59.0 03.10.2006 no virus found
Kaspersky 4.0.2.24 03.11.2006 no virus found
McAfee 4716 03.11.2006 New Malware.n
NOD32v2 1.1439 03.11.2006 no virus found
Norman 5.70.10 03.10.2006 no virus found
Panda 9.0.0.4 03.11.2006 Suspicious file
Sophos 4.03.0 03.11.2006 no virus found
Symantec 8.0 03.11.2006 no virus found
TheHacker 5.9.5.110 03.09.2006 no virus found
UNA 1.83 03.10.2006 no virus found
VBA32 3.10.5 03.10.2006 no virus found

[K_Mikhail]

This is a report processed by VirusTotal on 03/11/2006 at 19:40:21 (CET) after scanning the file "main.exe" file.

Antivirus Version Update Result
AntiVir 6.34.0.53 03.11.2006 no virus found
Avast 4.6.695.0 03.10.2006 no virus found
AVG 718 03.10.2006 no virus found
Avira 6.34.0.53 03.11.2006 no virus found
BitDefender 7.2 03.11.2006 BehavesLike:Win32.ExplorerHijack
CAT-QuickHeal 8.00 03.10.2006 no virus found
ClamAV devel-20060126 03.11.2006 no virus found
DrWeb 4.33 03.11.2006 no virus found
eTrust-InoculateIT 23.71.99 03.10.2006 no virus found
eTrust-Vet 12.4.2115 03.10.2006 no virus found
Ewido 3.5 03.11.2006 no virus found
Fortinet 2.71.0.0 03.11.2006 no virus found
F-Prot 3.16c 03.09.2006 no virus found
Ikarus 0.2.59.0 03.10.2006 no virus found
Kaspersky 4.0.2.24 03.11.2006 no virus found
McAfee 4716 03.11.2006 no virus found
NOD32v2 1.1439 03.11.2006 no virus found
Norman 5.70.10 03.10.2006 no virus found
Panda 9.0.0.4 03.11.2006 Suspicious file
Sophos 4.03.0 03.11.2006 no virus found
Symantec 8.0 03.11.2006 no virus found
TheHacker 5.9.5.111 03.09.2006 no virus found
UNA 1.83 03.10.2006 no virus found
VBA32 3.10.5 03.10.2006 no virus found

[K_Mikhail]

Отличие от проверки fif.exe (который уже стал детектироваться Dr.Web как Trojan.PWS.Lineage), этот троян совсем свежий.
This is a report processed by VirusTotal on 03/11/2006 at 19:51:48 (CET) after scanning the file "ver_3.exe" file.

Antivirus Version Update Result
AntiVir 6.34.0.53 03.11.2006 no virus found
Avast 4.6.695.0 03.10.2006 no virus found
AVG 718 03.10.2006 no virus found
Avira 6.34.0.53 03.11.2006 no virus found
BitDefender 7.2 03.11.2006 BehavesLike:Win32.ExplorerHijack
CAT-QuickHeal 8.00 03.10.2006 (Suspicious) - DNAScan
ClamAV devel-20060126 03.11.2006 Worm.Mytob.Gen-6
DrWeb 4.33 03.11.2006 no virus found
eTrust-InoculateIT 23.71.99 03.10.2006 no virus found
eTrust-Vet 12.4.2115 03.10.2006 no virus found
Ewido 3.5 03.11.2006 no virus found
Fortinet 2.71.0.0 03.11.2006 suspicious
F-Prot 3.16c 03.09.2006 no virus found
Ikarus 0.2.59.0 03.10.2006 no virus found
Kaspersky 4.0.2.24 03.11.2006 no virus found
McAfee 4716 03.11.2006 New Malware.n
NOD32v2 1.1439 03.11.2006 no virus found
Norman 5.70.10 03.10.2006 no virus found
Panda 9.0.0.4 03.11.2006 Suspicious file
Sophos 4.03.0 03.11.2006 no virus found
Symantec 8.0 03.11.2006 no virus found
TheHacker 5.9.5.111 03.11.2006 no virus found
UNA 1.83 03.10.2006 no virus found
VBA32 3.10.5 03.10.2006 no virus found