Исследование антивирусов 4

[Alexey P.]

Complete scanning result of "1226345244.exe", received in VirusTotal at 08.08.2006, 22:19:29 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.08.2006 no virus found
Authentium 4.93.8 08.08.2006 no virus found
Avast 4.7.844.0 08.08.2006 no virus found
AVG 386 08.08.2006 no virus found
BitDefender 7.2 08.08.2006 no virus found
CAT-QuickHeal 8.00 08.08.2006 no virus found
ClamAV devel-20060426 08.08.2006 no virus found
DrWeb 4.33 08.08.2006 DLOADER.Trojan
eTrust-InoculateIT 23.72.89 08.08.2006 no virus found
eTrust-Vet 12.6.2329 08.08.2006 no virus found
Ewido 4.0 08.08.2006 no virus found
Fortinet 2.77.0.0 08.08.2006 Adware/RegiFast
F-Prot 3.16f 08.06.2006 no virus found
F-Prot4 4.2.1.29 08.08.2006 no virus found
Ikarus 0.2.65.0 08.08.2006 no virus found
Kaspersky 4.0.2.24 08.08.2006 no virus found
McAfee 4824 08.08.2006 potentially unwanted program Adware-RegiFast
Microsoft 1.1508 08.04.2006 no virus found
NOD32v2 1.1697 08.08.2006 no virus found
Norman 5.90.23 08.08.2006 no virus found
Panda 9.0.0.4 08.08.2006 Suspicious file
Sophos 4.08.0 08.08.2006 no virus found
Symantec 8.0 08.08.2006 no virus found
TheHacker 5.9.8.187 08.07.2006 no virus found
UNA 1.83 08.08.2006 no virus found
VBA32 3.11.0 08.07.2006 no virus found
VirusBuster 4.3.7:9 08.08.2006 no virus found

Aditional Information
File size: 185856 bytes
MD5: 5cdd81a3fd171da3acf047f705e81a43
SHA1: 15908a3f575e8c66e5661d3417af8f499e65e8c2

[Alexey P.]

Complete scanning result of "kaspersky_internet_security_6.0.1", received in VirusTotal at 08.09.2006, 10:52:07 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.09.2006 TR/Drop.Agent.asl.1
Authentium 4.93.8 08.09.2006 no virus found
Avast 4.7.844.0 08.08.2006 Win32:Small-BEM
AVG 386 08.09.2006 Dropper.Agent.BNS
BitDefender 7.2 08.09.2006 Trojan.Downloader.Agent.AGM
CAT-QuickHeal 8.00 08.08.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 08.09.2006 no virus found
DrWeb 4.33 08.09.2006 Trojan.Mezzia
eTrust-InoculateIT 23.72.90 08.09.2006 no virus found
eTrust-Vet 30.3.3006 08.09.2006 no virus found
Ewido 4.0 08.09.2006 Dropper.Agent.asl
Fortinet 2.77.0.0 08.09.2006 W32/Agent.ASL!tr
F-Prot 3.16f 08.08.2006 no virus found
F-Prot4 4.2.1.29 08.08.2006 no virus found
Ikarus 0.2.65.0 08.08.2006 no virus found
Kaspersky 4.0.2.24 08.09.2006 Trojan-Dropper.Win32.Agent.asl
McAfee 4824 08.08.2006 BackDoor-CVT
Microsoft 1.1508 08.04.2006 no virus found
NOD32v2 1.1698 08.08.2006 no virus found
Norman 5.90.23 08.08.2006 no virus found
Panda 9.0.0.4 08.08.2006 Adware/SuperSpider
Sophos 4.08.0 08.09.2006 no virus found
Symantec 8.0 08.09.2006 no virus found
TheHacker 5.9.8.188 08.09.2006 no virus found
UNA 1.83 08.08.2006 TrojanDropper.Win32.Agent.2F7F
VBA32 3.11.0 08.08.2006 Trojan.Mezzia
VirusBuster 4.3.7:9 08.08.2006 no virus found

Aditional Information
File size: 21221 bytes
MD5: 6290c9d490560d305144d02d9e2bf0a7
SHA1: 9396a89ede1a032692e6705eba9f0cf2200dca66

Полное название файла - kaspersky_internet_security_6.0.1.346_keygen.exe

[Alexey P.]

Complete scanning result of "s2_1_.exe", received in VirusTotal at 08.10.2006, 06:55:51 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.09.2006 no virus found
Authentium 4.93.8 08.09.2006 no virus found
Avast 4.7.844.0 08.09.2006 no virus found
AVG 386 08.09.2006 no virus found
BitDefender 7.2 08.10.2006 no virus found
CAT-QuickHeal 8.00 08.09.2006 no virus found
ClamAV devel-20060426 08.10.2006 no virus found
DrWeb 4.33 08.09.2006 Trojan.PWS.Centrix
eTrust-InoculateIT 23.72.92 08.10.2006 no virus found
eTrust-Vet 30.3.3007 08.09.2006 no virus found
Ewido 4.0 08.09.2006 no virus found
Fortinet 2.77.0.0 08.10.2006 no virus found
F-Prot 3.16f 08.09.2006 no virus found
F-Prot4 4.2.1.29 08.09.2006 no virus found
Ikarus 0.2.65.0 08.09.2006 no virus found
Kaspersky 4.0.2.24 08.10.2006 no virus found
McAfee 4825 08.09.2006 no virus found
Microsoft 1.1508 08.04.2006 no virus found
NOD32v2 1.1700 08.10.2006 no virus found
Norman 5.90.23 08.09.2006 no virus found
Panda 9.0.0.4 08.09.2006 Suspicious file
Sophos 4.08.0 08.10.2006 no virus found
Symantec 8.0 08.10.2006 no virus found
TheHacker 5.9.8.189 08.09.2006 no virus found
UNA 1.83 08.09.2006 no virus found
VBA32 3.11.0 08.09.2006 no virus found
VirusBuster 4.3.7:9 08.09.2006 no virus found

Aditional Information
File size: 56832 bytes
MD5: 101176e8830e36172ead19ab02176d55
SHA1: 61b5126505814116c4bca85e96d6d0c46e086129
packers: Aspack

ЗЫ: Не ложное срабатывание и не новый.

[Alexey P.]

Complete scanning result of "9_1_.exe", received in VirusTotal at 08.12.2006, 20:16:21 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.12.2006 TR/PSW.Lmir.azc
Authentium 4.93.8 08.12.2006 could be infected with an unknown virus
Avast 4.7.844.0 08.10.2006 Win32mir-CL
AVG 386 08.11.2006 no virus found
BitDefender 7.2 08.12.2006 Trojan.PWS.Lmir.AZC
CAT-QuickHeal 8.00 08.12.2006 TrojanPSW.Lmir.azc
ClamAV devel-20060426 08.12.2006 Trojan.Lmir-177
DrWeb 4.33 08.12.2006 Trojan.PWS.Legmir.543
eTrust-InoculateIT 23.72.94 08.12.2006 no virus found
eTrust-Vet 30.3.3012 08.11.2006 no virus found
Ewido 4.0 08.12.2006 Trojan.Lmir.ayd
Fortinet 2.77.0.0 08.11.2006 LegMir!tr
F-Prot 3.16f 08.11.2006 could be infected with an unknown virus
F-Prot4 4.2.1.29 08.11.2006 Possibly a new unknown PE_Virus!Maximus
Ikarus 0.2.65.0 08.11.2006 no virus found
Kaspersky 4.0.2.24 08.12.2006 Trojan-PSW.Win32.Lmir.azc
McAfee 4827 08.11.2006 no virus found
Microsoft 1.1508 08.04.2006 no virus found
NOD32v2 1.1704 08.11.2006 a variant of Win32/PSW.Legendmir.AVG
Norman 5.90.23 08.11.2006 no virus found
Panda 9.0.0.4 08.12.2006 Suspicious file
Sophos 4.08.0 08.12.2006 Troj/LegMir-Gen
Symantec 8.0 08.12.2006 no virus found
TheHacker 5.9.8.190 08.10.2006 no virus found
UNA 1.83 08.11.2006 no virus found
VBA32 3.11.0 08.11.2006 no virus found
VirusBuster 4.3.7:9 08.12.2006 no virus found

Aditional Information
File size: 71473 bytes
MD5: 4fe1cb44210bb45328b7bc4fb567b38a
SHA1: 2c3747e26d693d4f86596bda5e1ecbd2b36eb688
packers: UPX
packers: UPX

[Alexey P.]

Complete scanning result of "pipiska___.exe", received in VirusTotal at 08.12.2006, 22:28:22 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.12.2006 HEUR/Crypted.Modified
Authentium 4.93.8 08.12.2006 no virus found
Avast 4.7.844.0 08.10.2006 no virus found
AVG 386 08.11.2006 no virus found
BitDefender 7.2 08.12.2006 BehavesLike:Trojan.FirewallBypass
CAT-QuickHeal 8.00 08.12.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 08.12.2006 no virus found
DrWeb 4.33 08.12.2006 Trojan.PWS.LDPinch.1088
eTrust-InoculateIT 23.72.94 08.12.2006 no virus found
eTrust-Vet 30.3.3012 08.11.2006 no virus found
Ewido 4.0 08.12.2006 no virus found
Fortinet 2.77.0.0 08.12.2006 no virus found
F-Prot 3.16f 08.11.2006 no virus found
F-Prot4 4.2.1.29 08.11.2006 no virus found
Ikarus 0.2.65.0 08.11.2006 Backdoor.Win32.Ciadoor.N
Kaspersky 4.0.2.24 08.12.2006 Trojan-PSW.Win32.LdPinch.arm
McAfee 4827 08.11.2006 no virus found
Microsoft 1.1508 08.04.2006 no virus found
NOD32v2 1.1704 08.11.2006 no virus found
Norman 5.90.23 08.11.2006 W32/Suspicious_M.gen
Panda 9.0.0.4 08.12.2006 no virus found
Sophos 4.08.0 08.12.2006 no virus found
Symantec 8.0 08.12.2006 no virus found
TheHacker 5.9.8.190 08.10.2006 no virus found
UNA 1.83 08.11.2006 no virus found
VBA32 3.11.0 08.11.2006 suspected of Trojan-PSW.PdPinch.1
VirusBuster 4.3.7:9 08.12.2006 no virus found

Aditional Information
File size: 25319 bytes
MD5: 01323c326f249e41286fa83f045dbcf3
SHA1: f85e06478924e743abbc314c6c79470049ddd11c
packers: MEW

[Alexey P.]

Complete scanning result of "1.exe", received in VirusTotal at 08.13.2006, 13:33:12
(CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.12.2006 TR/PSW.LdPinch.atu
Authentium 4.93.8 08.13.2006 no virus found
Avast 4.7.844.0 08.10.2006 no virus found
AVG 386 08.11.2006 no virus found
BitDefender 7.2 08.13.2006 no virus found
CAT-QuickHeal 8.00 08.12.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 08.13.2006 no virus found
DrWeb 4.33 08.13.2006 Trojan.PWS.LDPinch.1092
eTrust-InoculateIT 23.72.94 08.12.2006 no virus found
eTrust-Vet 30.3.3016 08.13.2006 no virus found
Ewido 4.0 08.13.2006 Trojan.LdPinch.atu
Fortinet 2.77.0.0 08.12.2006 W32/LdPinch.ATU!tr.pws
F-Prot 3.16f 08.13.2006 no virus found
F-Prot4 4.2.1.29 08.13.2006 no virus found
Ikarus 0.2.65.0 08.11.2006 no virus found
Kaspersky 4.0.2.24 08.13.2006 Trojan-PSW.Win32.LdPinch.atu
McAfee 4827 08.11.2006 no virus found
Microsoft 1.1508 08.04.2006 no virus found
NOD32v2 1.1704 08.11.2006 a variant of Win32/PSW.LdPinch
Norman 5.90.23 08.11.2006 no virus found
Panda 9.0.0.4 08.12.2006 Suspicious file
Sophos 4.08.0 08.13.2006 no virus found
Symantec 8.0 08.13.2006 no virus found
TheHacker 5.9.8.191 08.13.2006 no virus found
UNA 1.83 08.11.2006 Trojan.PSW.Win32.LdPinch.484B
VBA32 3.11.0 08.13.2006 Trojan-PSW.Win32.LdPinch.atu
VirusBuster 4.3.7:9 08.12.2006 no virus found

Aditional Information
File size: 228352 bytes
MD5: 69f4a353c3114b433227724472ea331a
SHA1: 5386e559515cd83fba67a8ccefc0f6ce700879fd

[MOCT]

Complete scanning result of "Html_Help_File.hta", received in VirusTotal at 08.13.2006, 14:24:39 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.13.2006 HTML/Feebs.Gen
Authentium 4.93.8 08.13.2006 no virus found
Avast 4.7.844.0 08.10.2006 no virus found
AVG 386 08.11.2006 Worm/Feebs
BitDefender 7.2 08.13.2006 no virus found
CAT-QuickHeal 8.00 08.12.2006 no virus found
ClamAV devel-20060426 08.13.2006 JS.Feebs.AT
DrWeb 4.33 08.13.2006 Win32.HLLM.Graz
eTrust-InoculateIT 23.72.94 08.12.2006 JScript/Feeb.B1!Worm
eTrust-Vet 30.3.3016 08.13.2006 no virus found
Ewido 4.0 08.13.2006 no virus found
Fortinet 2.77.0.0 08.12.2006 no virus found
F-Prot 3.16f 08.13.2006 no virus found
F-Prot4 4.2.1.29 08.13.2006 no virus found
Ikarus 0.2.65.0 08.11.2006 no virus found
Kaspersky 4.0.2.24 08.13.2006 no virus found
McAfee 4827 08.11.2006 JS/Feebs.gen
Microsoft 1.1508 08.04.2006 JS/Feebs.gen@mm
NOD32v2 1.1704 08.11.2006 JS/TrojanDropper.Tivso.gen
Norman 5.90.23 08.11.2006 no virus found
Panda 9.0.0.4 08.13.2006 no virus found
Sophos 4.08.0 08.13.2006 no virus found
Symantec 8.0 08.13.2006 W32.Feebs
TheHacker 5.9.8.191 08.13.2006 no virus found
UNA 1.83 08.11.2006 no virus found
VBA32 3.11.0 08.13.2006 no virus found
VirusBuster 4.3.7:9 08.12.2006 JS.KMax.AI.Gen

[Alexey P.]

Complete scanning result of "ztt.exe", received in VirusTotal at 08.13.2006, 20:11:21
(CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.13.2006 no virus found
Authentium 4.93.8 08.13.2006 no virus found
Avast 4.7.844.0 08.10.2006 Win32:Small-UD
AVG 386 08.11.2006 no virus found
BitDefender 7.2 08.13.2006 no virus found
CAT-QuickHeal 8.00 08.13.2006 no virus found
ClamAV devel-20060426 08.13.2006 no virus found
DrWeb 4.33 08.13.2006 Trojan.MulDrop.4085
eTrust-InoculateIT 23.72.95 08.13.2006 no virus found
eTrust-Vet 30.3.3016 08.13.2006 no virus found
Ewido 4.0 08.13.2006 no virus found
Fortinet 2.77.0.0 08.12.2006 no virus found
F-Prot 3.16f 08.13.2006 no virus found
F-Prot4 4.2.1.29 08.13.2006 no virus found
Ikarus 0.2.65.0 08.11.2006 no virus found
Kaspersky 4.0.2.24 08.13.2006 no virus found
McAfee 4828 08.13.2006 no virus found
Microsoft 1.1508 08.04.2006 no virus found
NOD32v2 1.1704 08.11.2006 probably a variant of Win32/PSW.Legendmir.AYK
Norman 5.90.23 08.11.2006 no virus found
Panda 9.0.0.4 08.13.2006 Suspicious file
Sophos 4.08.0 08.13.2006 no virus found
Symantec 8.0 08.13.2006 no virus found
TheHacker 5.9.8.191 08.13.2006 no virus found
UNA 1.83 08.11.2006 no virus found
VBA32 3.11.0 08.13.2006 no virus found
VirusBuster 4.3.7:9 08.13.2006 no virus found

Aditional Information
File size: 56625 bytes
MD5: 1b04a29de1702c5db5c9612aa08d47d3
SHA1: 975911aed9bc79f17cea443b84514446dcacbccd
packers: UPX

нод правильно подозревает, оно и есть внутри, плюс загрузчик.
Вообще часто верно определяет названия эвристиком. Haxdoor, к примеру.

[Alexey P.]

Complete scanning result of "ray.exe", received in VirusTotal at 08.14.2006, 13:51:14
(CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.14.2006 HEUR/Hijacker
Authentium 4.93.8 08.13.2006 no virus found
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 no virus found
BitDefender 7.2 08.14.2006 Generic.Malware.BE!dld.424B1B91
CAT-QuickHeal 8.00 08.13.2006 no virus found
ClamAV devel-20060426 08.14.2006 no virus found
DrWeb 4.33 08.14.2006 MULDROP.Trojan packed by BINARYRES
eTrust-InoculateIT 23.72.94 08.14.2006 no virus found
eTrust-Vet 30.3.3019 08.14.2006 no virus found
Ewido 4.0 08.14.2006 no virus found
Fortinet 2.77.0.0 08.13.2006 suspicious
F-Prot 3.16f 08.13.2006 no virus found
F-Prot4 4.2.1.29 08.13.2006 no virus found
Ikarus 0.2.65.0 08.14.2006 no virus found
Kaspersky 4.0.2.24 08.14.2006 no virus found
McAfee 4828 08.13.2006 no virus found
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1705 08.14.2006 no virus found
Norman 5.90.23 08.14.2006 W32/Downloader
Panda 9.0.0.4 08.14.2006 Suspicious file
Sophos 4.08.0 08.14.2006 no virus found
Symantec 8.0 08.14.2006 no virus found
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.11.2006 no virus found
VBA32 3.11.0 08.13.2006 suspected of Win32.Trojan.Downloader (http://{removed}/vip/ie_75550663.exe)
VirusBuster 4.3.7:9 08.13.2006 no virus found

Aditional Information
File size: 21504 bytes
MD5: 5f53570977e1f39d631a0afeb8b9c18f
SHA1: a8a250e9227815c80e11181962dfd55917b0a72f
packers: UPX
Norman SandBox:
[ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: [email protected] - REMEMBER TO
ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* Decompressing UPX.
* **Locates window "Dow IDE [class Dow]" on desktop.
* Accesses executable file from resource section.
* File length: 21504 bytes.

[ Changes to filesystem ]
* Deletes file C:WINDOWSSYSTEM32Downdll.dll.
* Creates file C:WINDOWSSYSTEM32Downdll.dll.
* Creates file C:ie_75550663.exe.

[ Network services ]
* Downloads file from хттp://tanip.cn/vip/ie_75550663.exe as c:ie_75550663.exe.

[ Security issues ]
* Starting downloaded file - potential security problem.

[ Process/window information ]
* Enumerates running processes.
* Modifies other process memory.
* Creates a remote thread.



Complete scanning result of "ie_75550663.exe", received in VirusTotal at 08.14.2006,
14:10:59 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.14.2006 no virus found
Authentium 4.93.8 08.13.2006 no virus found
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 no virus found
BitDefender 7.2 08.14.2006 no virus found
CAT-QuickHeal 8.00 08.13.2006 no virus found
ClamAV devel-20060426 08.14.2006 no virus found
DrWeb 4.33 08.14.2006 BACKDOOR.Trojan packed by BINARYRES
eTrust-InoculateIT 23.72.94 08.14.2006 no virus found
eTrust-Vet 30.3.3019 08.14.2006 no virus found
Ewido 4.0 08.13.2006 no virus found
Fortinet 2.77.0.0 08.13.2006 no virus found
F-Prot 3.16f 08.13.2006 no virus found
F-Prot4 4.2.1.29 08.13.2006 no virus found
Ikarus 0.2.65.0 08.14.2006 no virus found
Kaspersky 4.0.2.24 08.14.2006 no virus found
McAfee 4828 08.13.2006 no virus found
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1705 08.14.2006 no virus found
Norman 5.90.23 08.14.2006 no virus found
Panda 9.0.0.4 08.14.2006 Suspicious file
Sophos 4.08.0 08.14.2006 no virus found
Symantec 8.0 08.14.2006 no virus found
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.11.2006 no virus found
VBA32 3.11.0 08.13.2006 Trojan-Spy.Win32.Agent.nz
VirusBuster 4.3.7:9 08.13.2006 no virus found

Aditional Information
File size: 442880 bytes
MD5: 8d5bd813166e06418450b41b05ba691e
SHA1: 7ad02dbf87f188a3f8376572c4b656cec62b85cc
packers: Aspack

[mvlab]

Complete scanning result of "kernels8._xe", received in VirusTotal at 08.15.2006, 09:05:19 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 TR/Crypt.F.Gen
Authentium 4.93.8 08.14.2006 no virus found
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 Downloader.Tibs
BitDefender 7.2 08.15.2006 no virus found
CAT-QuickHeal 8.00 08.14.2006 no virus found
ClamAV devel-20060426 08.15.2006 Trojan.Downloader.Tibs-9
DrWeb 4.33 08.14.2006 Trojan.DownLoader.10891
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3019 08.14.2006 Win32/Vxidl!generic
Ewido 4.0 08.14.2006 Downloader.Tibs.gu
Fortinet 2.77.0.0 08.15.2006 W32/Tibs.GU!tr.dldr!01
F-Prot 3.16f 08.14.2006 no virus found
F-Prot4 4.2.1.29 08.14.2006 no virus found
Ikarus 0.2.65.0 08.14.2006 Trojan-Downloader.Win32.Tibs.gu
Kaspersky 4.0.2.24 08.15.2006 Trojan-Downloader.Win32.Tibs.gu
McAfee 4829 08.14.2006 no virus found
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1706 08.14.2006 probably unknown NewHeur_PE virus
Norman 5.90.23 08.14.2006 no virus found
Panda 9.0.0.4 08.14.2006 Suspicious file
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 Trojan.Galapoper.A
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 TrojanDownloader.Win32.Tibs.B5C40
VBA32 3.11.0 08.14.2006 no virus found
VirusBuster 4.3.7:9 08.14.2006 Trojan.DL.Tibs.Gen!Pac3

Aditional Information
File size: 7618 bytes
MD5: 120642c94e421db088e12cd960c2a520
SHA1: eb449adad459b46abab41ccec9aef964b4ff3698

[mvlab]

Complete scanning result of "spoolsvv._xe", received in VirusTotal at 08.15.2006, 09:11:27 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 TR/Crypt.F.Gen
Authentium 4.93.8 08.14.2006 no virus found
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 Proxy.ECJ
BitDefender 7.2 08.15.2006 Trojan.Downloader.Agent.AEP
CAT-QuickHeal 8.00 08.14.2006 no virus found
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.14.2006 Trojan.Spambot
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3019 08.14.2006 Win32/Vxidl!generic
Ewido 4.0 08.14.2006 Proxy.Agent.ji
Fortinet 2.77.0.0 08.15.2006 W32/Agent.AEP!tr
F-Prot 3.16f 08.14.2006 no virus found
F-Prot4 4.2.1.29 08.14.2006 no virus found
Ikarus 0.2.65.0 08.14.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 Trojan-Proxy.Win32.Agent.ji
McAfee 4829 08.14.2006 Proxy-Agent.at
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1706 08.14.2006 probably unknown NewHeur_PE virus
Norman 5.90.23 08.14.2006 W32/Smalltroj.HTA
Panda 9.0.0.4 08.14.2006 Trj/RootkitDrop.B
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 no virus found
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 TrojanProxy.Win32.Agent
VBA32 3.11.0 08.14.2006 Trojan.Spambot
VirusBuster 4.3.7:9 08.14.2006 no virus found

Aditional Information
File size: 28967 bytes
MD5: 1e2d57e28b7c11e08711da74996b286b
SHA1: 693e6f55edae62bd2a6c7423838ce50f0ed7c1ca
packers: Tibcryp, UPX

[mvlab]

Complete scanning result of "taskdir._xe", received in VirusTotal at 08.15.2006, 09:16:05 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 TR/Crypt.F.Gen
Authentium 4.93.8 08.14.2006 no virus found
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 Proxy.EBH
BitDefender 7.2 08.15.2006 Win32.FpuJunk.2
CAT-QuickHeal 8.00 08.14.2006 TrojanProxy.Lager.cg
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.14.2006 Trojan.Spambot
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3019 08.14.2006 Win32/Vxidl!generic
Ewido 4.0 08.13.2006 Proxy.Lager.cg
Fortinet 2.77.0.0 08.15.2006 W32/Lager.CG!tr
F-Prot 3.16f 08.14.2006 no virus found
F-Prot4 4.2.1.29 08.14.2006 no virus found
Ikarus 0.2.65.0 08.14.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 Trojan-Proxy.Win32.Lager.cg
McAfee 4829 08.14.2006 Downloader-ZQ
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1706 08.14.2006 probably unknown NewHeur_PE virus
Norman 5.90.23 08.14.2006 W32/Lager.CG
Panda 9.0.0.4 08.14.2006 Trj/Gagar.P
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 Trojan.Abwiz.F
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 TrojanProxy.Win32.Lager
VBA32 3.11.0 08.14.2006 Trojan-Proxy.Win32.Lager.cg
VirusBuster 4.3.7:9 08.14.2006 Trojan.PR.Lager.Gen!Pac2

Aditional Information
File size: 63780 bytes
MD5: 1b45409a3cbdcdc29ee1dfdf8d4c8b31
SHA1: c20950b9409a3e9fbd053e33f8db15e88bc505d0
packers: Tibcryp, UPX

[mvlab]

Complete scanning result of "taskdir_._xe", received in VirusTotal at 08.15.2006, 09:18:52 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 TR/Crypt.F.Gen
Authentium 4.93.8 08.14.2006 Possibly a new variant of W32/Threat-HLLSI-based!Maximus
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 PSW.Generic2.DPI
BitDefender 7.2 08.15.2006 Win32.FpuJunk.2
CAT-QuickHeal 8.00 08.14.2006 no virus found
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.14.2006 Trojan.EmailSpy
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3019 08.14.2006 no virus found
Ewido 4.0 08.13.2006 Logger.EmailSpy.b
Fortinet 2.77.0.0 08.15.2006 Spy/EmailSpy
F-Prot 3.16f 08.14.2006 Possibly a new variant of W32/Threat-HLLSI-based!Maximus
F-Prot4 4.2.1.29 08.14.2006 W32/Threat-HLLSI-based!Maximus
Ikarus 0.2.65.0 08.14.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 Trojan-Spy.Win32.EmailSpy.b
McAfee 4829 08.14.2006 Generic Uploader.a
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1706 08.14.2006 probably unknown NewHeur_PE virus
Norman 5.90.23 08.14.2006 W32/Smalltroj.HPL
Panda 9.0.0.4 08.14.2006 Trj/Gagar.P
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 Infostealer
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 Trojan.Spy.Win32.EmailSpy
VBA32 3.11.0 08.14.2006 Trojan-Spy.Win32.EmailSpy.b
VirusBuster 4.3.7:9 08.14.2006 TrojanSpy.EmailSpy.A

Aditional Information
File size: 8982 bytes
MD5: c4ef70983415145f79e0a65a493cb7eb
SHA1: af6fbd1940ec69f5391b1cc4ca748127f9abdb84

[mvlab]

Complete scanning result of "vxgame1._xe", received in VirusTotal at 08.15.2006, 09:27:11 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 BDS/Newartm.A
Authentium 4.93.8 08.14.2006 no virus found
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 Proxy.ECX
BitDefender 7.2 08.15.2006 Backdoor.Newartm.A
CAT-QuickHeal 8.00 08.14.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.14.2006 BackDoor.Uragan
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3021 08.15.2006 no virus found
Ewido 4.0 08.14.2006 Proxy.Xorpix.ai
Fortinet 2.77.0.0 08.15.2006 W32/Xorpix.AI!tr
F-Prot 3.16f 08.14.2006 no virus found
F-Prot4 4.2.1.29 08.14.2006 no virus found
Ikarus 0.2.65.0 08.14.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 Trojan-Proxy.Win32.Xorpix.ai
McAfee 4829 08.14.2006 Generic Dropper.ad
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1706 08.14.2006 a variant of Win32/Agent.OH
Norman 5.90.23 08.14.2006 no virus found
Panda 9.0.0.4 08.14.2006 Bck/Eterok.B
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 no virus found
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 TrojanProxy.Win32.Xorpix.88CE
VBA32 3.11.0 08.14.2006 Trojan-Proxy.Win32.Xorpix.ai
VirusBuster 4.3.7:9 08.14.2006 no virus found

Aditional Information
File size: 15675 bytes
MD5: 28d914fa04398ccfb27bbbd25ad76a34
SHA1: 178c39b89f6c590a164f17bde2ceebf5396bea90

[mvlab]

Complete scanning result of "zlbw._ll", received in VirusTotal at 08.15.2006, 09:35:04 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 no virus found
Authentium 4.93.8 08.14.2006 no virus found
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 no virus found
BitDefender 7.2 08.15.2006 no virus found
CAT-QuickHeal 8.00 08.14.2006 TrojanProxy.Lager.aq
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.14.2006 no virus found
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3021 08.15.2006 no virus found
Ewido 4.0 08.13.2006 no virus found
Fortinet 2.77.0.0 08.15.2006 suspicious
F-Prot 3.16f 08.14.2006 no virus found
F-Prot4 4.2.1.29 08.14.2006 no virus found
Ikarus 0.2.65.0 08.14.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 no virus found
McAfee 4829 08.14.2006 no virus found
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1706 08.14.2006 no virus found
Norman 5.90.23 08.14.2006 no virus found
Panda 9.0.0.4 08.14.2006 no virus found
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 no virus found
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 TrojanProxy.Win32.Lager.73C3
VBA32 3.11.0 08.14.2006 no virus found
VirusBuster 4.3.7:9 08.14.2006 Trojan.PR.Lager.BI

Aditional Information
File size: 46592 bytes
MD5: f42601d4ac18bb06d830b6f8e4500adf
SHA1: 66ff00d72ed68fa417638b514610c7cf611ddb90

[mvlab]

Complete scanning result of "SYSLIB32._LL", received in VirusTotal at 08.15.2006, 09:54:14 (CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 W32/Krepper.30760
Authentium 4.93.8 08.14.2006 no virus found
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 no virus found
BitDefender 7.2 08.15.2006 no virus found
CAT-QuickHeal 8.00 08.14.2006 no virus found
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.14.2006 Win32.HLLP.Sector.30760
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3021 08.15.2006 no virus found
Ewido 4.0 08.13.2006 no virus found
Fortinet 2.77.0.0 08.15.2006 W32/Krepper.30760
F-Prot 3.16f 08.14.2006 no virus found
F-Prot4 4.2.1.29 08.14.2006 no virus found
Ikarus 0.2.65.0 08.15.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 Virus.Win32.Krepper.30760
McAfee 4829 08.14.2006 W32/Sality.dll
Microsoft 1.1560 08.14.2006 Win32/Krepper.30760
NOD32v2 1.1706 08.14.2006 Win32/Sality.H
Norman 5.90.23 08.14.2006 no virus found
Panda 9.0.0.4 08.14.2006 W32/Sality.J
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 W32.HLLP.Sality
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 Win32.Krepper.30760
VBA32 3.11.0 08.14.2006 Win32.HLLP.Sector.30760
VirusBuster 4.3.7:9 08.14.2006 no virus found

Aditional Information
File size: 4608 bytes
MD5: 055779439a7ffa33d18b3fcbbfcce1b3
SHA1: c24fed0aebe45b34e5038a7e5e341961abe6858b

[MOCT]

Вот такой дроппер (То, что было внутри него, вообще не детектируется):
Complete scanning result of "kitsuisse.exe", received in VirusTotal at 08.15.2006, 11:12:53 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 DIAL/Generic
Authentium 4.93.8 08.14.2006 no virus found
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 no virus found
BitDefender 7.2 08.15.2006 no virus found
CAT-QuickHeal 8.00 08.14.2006 no virus found
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.14.2006 no virus found
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3021 08.15.2006 no virus found
Ewido 4.0 08.14.2006 no virus found
Fortinet 2.77.0.0 08.15.2006 no virus found
F-Prot 3.16f 08.14.2006 no virus found
F-Prot4 4.2.1.29 08.14.2006 no virus found
Ikarus 0.2.65.0 08.15.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 no virus found
McAfee 4829 08.14.2006 no virus found
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1706 08.14.2006 no virus found
Norman 5.90.23 08.14.2006 no virus found
Panda 9.0.0.4 08.14.2006 no virus found
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 no virus found
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 no virus found
VBA32 3.11.0 08.14.2006 no virus found
VirusBuster 4.3.7:9 08.14.2006 no virus found

Aditional Information
File size: 148176 bytes
MD5: ef1a7119b2b7f56d106d94fd982c7778
SHA1: 800b6119c560a53fff594ca000697636ab048861
Еще один файл с того же сайта (видимо AsPack знаком далеко не всем АВ):
Complete scanning result of "femmeschaudes.exe", received in VirusTotal at 08.15.2006, 1145 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 no virus found
Authentium 4.93.8 08.14.2006 no virus found
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 no virus found
BitDefender 7.2 08.15.2006 no virus found
CAT-QuickHeal 8.00 08.14.2006 no virus found
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.14.2006 no virus found
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3021 08.15.2006 no virus found
Ewido 4.0 08.14.2006 no virus found
Fortinet 2.77.0.0 08.15.2006 no virus found
F-Prot 3.16f 08.14.2006 no virus found
F-Prot4 4.2.1.29 08.14.2006 no virus found
Ikarus 0.2.65.0 08.15.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 no virus found
McAfee 4829 08.14.2006 no virus found
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1706 08.14.2006 no virus found
Norman 5.90.23 08.14.2006 no virus found
Panda 9.0.0.4 08.14.2006 Suspicious file
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 no virus found
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 no virus found
VBA32 3.11.0 08.14.2006 no virus found
VirusBuster 4.3.7:9 08.14.2006 no virus found

Aditional Information
File size: 101704 bytes
MD5: 2b1d8c1080ddc77e44552ae464ec6760
SHA1: f809bc8d836994f4c9ebe17bffb4386027c67666
packers: Aspack

[MOCT]

Complete scanning result of "iRcHaTaN_Ps.exe", received in VirusTotal at 08.15.2006, 12:14:32 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 TR/PSW.Yahoo.VB.I
Authentium 4.93.8 08.14.2006 W32/Pws.AKM
Avast 4.7.844.0 08.14.2006 Win32:Trojan-gen. {UPX!}
AVG 386 08.14.2006 PSW.Generic.QKQ
BitDefender 7.2 08.15.2006 Trojan.Pws.Yahoo.Vb.I
CAT-QuickHeal 8.00 08.14.2006 no virus found
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.14.2006 no virus found
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3021 08.15.2006 no virus found
Ewido 4.0 08.15.2006 Trojan.VB.i
Fortinet 2.77.0.0 08.15.2006 W32/Yahoo_VB.I!tr.pws
F-Prot 3.16f 08.14.2006 security risk named W32/Pws.AKM
F-Prot4 4.2.1.29 08.14.2006 W32/Pws.AKM
Ikarus 0.2.65.0 08.15.2006 Trojan-PSW.Win32.Yahoo.VB.I
Kaspersky 4.0.2.24 08.15.2006 Trojan-PSW.Win32.Yahoo.VB.i
McAfee 4829 08.14.2006 Generic.cd
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1706 08.14.2006 Win32/PSW.Yahoo.VB.I
Norman 5.90.23 08.15.2006 W32/YahooVB.A
Panda 9.0.0.4 08.14.2006 Trojan Horse.AP2
Sophos 4.08.0 08.15.2006 Troj/YahooVB-I
Symantec 8.0 08.15.2006 Infostealer
TheHacker 5.9.8.192 08.14.2006 Trojan/PSW.Yahoo.VB.i
UNA 1.83 08.14.2006 Trojan.PSW.Win32.Yahoo.VB.5CBF
VBA32 3.11.0 08.14.2006 Trojan-PSW.Win32.Yahoo.VB.i
VirusBuster 4.3.7:9 08.14.2006 no virus found

Aditional Information
File size: 12288 bytes
MD5: 90036802d0b3af9d591708379e12ed44
SHA1: 36c51be16c5a90408291f17f34746b203cec7b99
Complete scanning result of "Toxic-Ps2.2.exe", received in VirusTotal at 08.15.2006, 12:19:21 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 TR/PSW.Agent.AY.23
Authentium 4.93.8 08.14.2006 could be a corrupted executable file
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 no virus found
BitDefender 7.2 08.15.2006 Trojan.PWS.Agent.AY
CAT-QuickHeal 8.00 08.14.2006 no virus found
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.14.2006 no virus found
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3021 08.15.2006 no virus found
Ewido 4.0 08.15.2006 no virus found
Fortinet 2.77.0.0 08.15.2006 suspicious
F-Prot 3.16f 08.14.2006 no virus found
F-Prot4 4.2.1.29 08.14.2006 no virus found
Ikarus 0.2.65.0 08.15.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 no virus found
McAfee 4829 08.14.2006 no virus found
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1706 08.14.2006 no virus found
Norman 5.90.23 08.15.2006 no virus found
Panda 9.0.0.4 08.14.2006 no virus found
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 no virus found
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 no virus found
VBA32 3.11.0 08.14.2006 no virus found
VirusBuster 4.3.7:9 08.14.2006 no virus found

Aditional Information
File size: 19552 bytes
MD5: 1af27fe9b553cb6e3743fcde654cb95c
SHA1: 0004ed12a966cc283d3a6f527d794e37280ff3c6
Complete scanning result of "Find-Password.exe", received in VirusTotal at 08.15.2006, 12:26:34 (CET).
Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 no virus found
Authentium 4.93.8 08.14.2006 no virus found
Avast 4.7.844.0 08.14.2006 no virus found
AVG 386 08.14.2006 no virus found
BitDefender 7.2 08.15.2006 no virus found
CAT-QuickHeal 8.00 08.14.2006 (Suspicious) - DNAScan
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.14.2006 no virus found
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3021 08.15.2006 no virus found
Ewido 4.0 08.15.2006 no virus found
Fortinet 2.77.0.0 08.15.2006 suspicious
F-Prot 3.16f 08.14.2006 no virus found
F-Prot4 4.2.1.29 08.14.2006 no virus found
Ikarus 0.2.65.0 08.15.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 no virus found
McAfee 4829 08.14.2006 no virus found
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1706 08.14.2006 unpack error
Norman 5.90.23 08.15.2006 no virus found
Panda 9.0.0.4 08.14.2006 no virus found
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 no virus found
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 no virus found
VBA32 3.11.0 08.14.2006 no virus found
VirusBuster 4.3.7:9 08.14.2006 no virus found

Aditional Information
File size: 84464 bytes
MD5: 673e6d4dc2915d899310a599f3479aad
SHA1: b8060306c2a03788fca4a118b478d6521d7d987f
packers: FSG

[Alexey P.]

Complete scanning result of "ipod.raw.exe", received in VirusTotal at 08.15.2006, 14:39:03
(CET).

Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 TR/Crypt.F.Gen
Authentium 4.93.8 08.14.2006 no virus found
Avast 4.7.844.0 08.15.2006 no virus found
AVG 386 08.15.2006 no virus found
BitDefender 7.2 08.15.2006 Win32.FpuJunk.2
CAT-QuickHeal 8.00 08.14.2006 no virus found
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.15.2006 Trojan.Spambot
eTrust-InoculateIT 23.72.97 08.15.2006 no virus found
eTrust-Vet 30.3.3021 08.15.2006 no virus found
Ewido 4.0 08.15.2006 no virus found
Fortinet 2.77.0.0 08.15.2006 no virus found
F-Prot 3.16f 08.14.2006 no virus found
F-Prot4 4.2.1.29 08.14.2006 no virus found
Ikarus 0.2.65.0 08.15.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 no virus found
McAfee 4829 08.14.2006 no virus found
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1707 08.15.2006 probably unknown NewHeur_PE virus
Norman 5.90.23 08.15.2006 no virus found
Panda 9.0.0.4 08.15.2006 Suspicious file
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 no virus found
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.14.2006 no virus found
VBA32 3.11.0 08.14.2006 no virus found
VirusBuster 4.3.7:9 08.14.2006 Trojan.PR.Lager.Gen!Pac2

Aditional Information
File size: 64228 bytes
MD5: 8cfb5e3e34fc1b386e9bb7ee45318b18
SHA1: ec9a5c1d4d3e8e53e745227fa5caa7cc084075c9

ЗЫ: Не новый, точно известен всем. Так криптуют.

[Exxx]

Antivirus Version Update Result
AntiVir 6.35.1.0 08.15.2006 no virus found
Authentium 4.93.8 08.15.2006 no virus found
Avast 4.7.844.0 08.15.2006 Win32:Adan-144
AVG 386 08.15.2006 no virus found
BitDefender 7.2 08.15.2006 no virus found
CAT-QuickHeal 8.00 08.14.2006 no virus found
ClamAV devel-20060426 08.15.2006 no virus found
DrWeb 4.33 08.15.2006 no virus found
eTrust-InoculateIT 23.72.98 08.15.2006 no virus found
eTrust-Vet 30.3.3021 08.15.2006 no virus found
Ewido 4.0 08.15.2006 no virus found
Fortinet 2.77.0.0 08.15.2006 suspicious
F-Prot 3.16f 08.15.2006 no virus found
F-Prot4 4.2.1.29 08.15.2006 no virus found
Ikarus 0.2.65.0 08.15.2006 no virus found
Kaspersky 4.0.2.24 08.15.2006 no virus found
McAfee 4830 08.15.2006 no virus found
Microsoft 1.1560 08.14.2006 no virus found
NOD32v2 1.1707 08.15.2006 no virus found
Norman 5.90.23 08.15.2006 no virus found
Panda 9.0.0.4 08.15.2006 no virus found
Sophos 4.08.0 08.15.2006 no virus found
Symantec 8.0 08.15.2006 no virus found
TheHacker 5.9.8.192 08.14.2006 no virus found
UNA 1.83 08.15.2006 no virus found
VBA32 3.11.0 08.15.2006 no virus found
VirusBuster 4.3.7:9 08.15.2006 no virus found

Aditional Information
File size: 782788 bytes
MD5: 94c685be1d63b19a8dc029e020257d64
SHA1: b494867d07cf3c2355c7581a4fd4de8c7fd4f1b1
packers: UPX, RAR

P.S. Your request has been analyzed. New virus record has been added.
Trojan.MobileCrack
Thank you for the cooperation.
--
Yours sincerely,
Virus Monitoring Service Doctor Web Ltd.