Исследование антивирусов 5

[Winsent]

Complete scanning result of "demo.rar", received in VirusTotal at 01.25.2007, 14:45:39 (CET).


Antivirus Version Update Result

AntiVir 7.3.0.26 01.25.2007 no virus found
Authentium 4.93.8 01.24.2007 no virus found
Avast 4.7.936.0 01.24.2007 no virus found
AVG 386 01.24.2007 no virus found
BitDefender 7.2 01.25.2007 no virus found
CAT-QuickHeal 9.00 01.25.2007 no virus found
ClamAV devel-20060426 01.25.2007 no virus found
DrWeb 4.33 01.25.2007 no virus found
eSafe 7.0.14.0 01.24.2007 no virus found
eTrust-InoculateIT 23.73.123 01.25.2007 no virus found
eTrust-Vet 30.3.3349 01.25.2007 no virus found
Ewido 4.0 01.24.2007 no virus found
Fortinet 2.85.0.0 01.24.2007 suspicious
F-Prot 4.2.1.29 01.25.2007 no virus found
Ikarus T3.1.0.27 01.25.2007 no virus found
Kaspersky 4.0.2.24 01.25.2007 Trojan-Dropper.Win32.Small.abb
McAfee 4948 01.24.2007 W32/NGVCK.a
Microsoft 1.1904 01.25.2007 no virus found
NOD32v2 2005 01.25.2007 probably unknown WIN32 virus
Norman 5.80.02 01.25.2007 no virus found
Panda 9.0.0.4 01.25.2007 Suspicious file
Prevx1 V2 01.25.2007 no virus found
Sophos 4.13.0 01.24.2007 no virus found
Sunbelt 2.2.907.0 01.22.2007 VIPRE.Suspicious
TheHacker 6.0.3.156 01.25.2007 no virus found
UNA 1.83 01.24.2007 Win32.virus
VBA32 3.11.2 01.24.2007 Trojan.PWS.Ragnarok
VirusBuster 4.3.19:9 01.24.2007 no virus found

Aditional Information
File size: 92289 bytes
MD5: 1db342abd759cc8358fda97bdd92e9ed
SHA1: 301453c537e5474da5edcc35bbf7e8db9dcd529c
packers: embedded
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[ALEX(XX)]

Из http://virusinfo.info/showthread.php?t=7646
Complete scanning result of "avz00010.dta", received in VirusTotal at 01.25.2007, 17:12:09 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.26 01.25.2007 HEUR/Crypted
Authentium 4.93.8 01.24.2007 no virus found
Avast 4.7.936.0 01.24.2007 no virus found
AVG 386 01.24.2007 no virus found
BitDefender 7.2 01.25.2007 no virus found
CAT-QuickHeal 9.00 01.25.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 01.25.2007 no virus found
DrWeb 4.33 01.25.2007 no virus found
eSafe 7.0.14.0 01.24.2007 Suspicious Trojan/Worm
eTrust-InoculateIT 23.73.123 01.25.2007 no virus found
eTrust-Vet 30.3.3349 01.25.2007 no virus found
Ewido 4.0 01.24.2007 no virus found
Fortinet 2.85.0.0 01.24.2007 suspicious
F-Prot 4.2.1.29 01.25.2007 no virus found
Ikarus T3.1.0.27 01.25.2007 no virus found
Kaspersky 4.0.2.24 01.25.2007 no virus found
McAfee 4948 01.24.2007 no virus found
Microsoft 1.1904 01.25.2007 TrojanDownloader:Win32/Clagger.gen!B
NOD32v2 2005 01.25.2007 no virus found
Norman 5.80.02 01.25.2007 Suspicious_F.gen
Panda 9.0.0.4 01.25.2007 Suspicious file
Prevx1 V2 01.25.2007 no virus found
Sophos 4.13.0 01.24.2007 no virus found
Sunbelt 2.2.907.0 01.22.2007 VIPRE.Suspicious
TheHacker 6.0.3.156 01.25.2007 no virus found
UNA 1.83 01.24.2007 no virus found
VBA32 3.11.2 01.24.2007 no virus found
VirusBuster 4.3.19:9 01.24.2007 novirusacked/FSG

File size: 27021 bytes
MD5: 4243b966baff1c80fb72ee5485858089
SHA1: 324dd146ca237096acdc78b81a855c9f05f34058
packers: FSG
packers: FSG
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[saicat]

Complete scanning result of "msg.UT79cY", received in VirusTotal at 01.25.2007, 23:09:08 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.26 01.25.2007 HEUR/Crypted.E
Authentium 4.93.8 01.24.2007 could be infected with an unknown virus
Avast 4.7.936.0 01.24.2007 no virus found
AVG 386 01.24.2007 no virus found
BitDefender 7.2 01.25.2007 no virus found
CAT-QuickHeal 9.00 01.25.2007 no virus found
ClamAV devel-20060426 01.25.2007 no virus found
DrWeb 4.33 01.25.2007 no virus found
eSafe 7.0.14.0 01.24.2007 no virus found
eTrust-InoculateIT 23.73.123 01.25.2007 no virus found
eTrust-Vet 30.3.3349 01.25.2007 no virus found
Ewido 4.0 01.24.2007 no virus found
Fortinet 2.85.0.0 01.24.2007 suspicious
F-Prot 4.2.1.29 01.25.2007 generic
Ikarus T3.1.0.27 01.25.2007 no virus found
Kaspersky 4.0.2.24 01.25.2007 no virus found
McAfee 4948 01.24.2007 Downloader-AAP!eml
Microsoft 1.1904 01.25.2007 no virus found
NOD32v2 2005 01.25.2007 error occurred while reading archive
Norman 5.80.02 01.25.2007 Suspicious_F.gen
Panda 9.0.0.4 01.25.2007 Suspicious file
Prevx1 V2 01.25.2007 no virus found
Sophos 4.13.0 01.24.2007 Mal/Packer
Sunbelt 2.2.907.0 01.22.2007 no virus found
TheHacker 6.0.3.156 01.25.2007 no virus found
UNA 1.83 01.24.2007 no virus found
VBA32 3.11.2 01.24.2007 suspected of I-Worm (double extension)
VirusBuster 4.3.19:9 01.24.2007 novirusacked/FSG

[saicat]

Complete scanning result of "virus-20070125-220411-12881", received in VirusTotal at 01.25.2007, 23:16:31 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.26 01.25.2007 no virus found
Authentium 4.93.8 01.24.2007 W32/Tibs.RG
Avast 4.7.936.0 01.24.2007 no virus found
AVG 386 01.24.2007 no virus found
BitDefender 7.2 01.25.2007 no virus found
CAT-QuickHeal 9.00 01.25.2007 no virus found
ClamAV devel-20060426 01.25.2007 no virus found
DrWeb 4.33 01.25.2007 no virus found
eSafe 7.0.14.0 01.24.2007 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.123 01.25.2007 no virus found
eTrust-Vet 30.3.3349 01.25.2007 no virus found
Ewido 4.0 01.24.2007 no virus found
Fortinet 2.85.0.0 01.24.2007 no virus found
F-Prot 4.2.1.29 01.25.2007 W32/Tibs.RG
Ikarus T3.1.0.27 01.25.2007 no virus found
Kaspersky 4.0.2.24 01.25.2007 no virus found
McAfee 4948 01.24.2007 New Malware.j
Microsoft 1.1904 01.25.2007 Win32/Vxidl.gen!B
NOD32v2 2005 01.25.2007 no virus found
Norman 5.80.02 01.25.2007 no virus found
Panda 9.0.0.4 01.25.2007 no virus found
Prevx1 V2 01.25.2007 no virus found
Sophos 4.13.0 01.24.2007 no virus found
Sunbelt 2.2.907.0 01.22.2007 no virus found
TheHacker 6.0.3.156 01.25.2007 no virus found
UNA 1.83 01.24.2007 no virus found
VBA32 3.11.2 01.24.2007 no virus found
VirusBuster 4.3.19:9 01.24.2007 no virus found

Aditional Information
File size: 71755 bytes
MD5: 27400f875229a27d03d00150dfeb7e32
SHA1: 45a7d3723613807532139a9e1f9be0651b9037dd

[Kuzz]

STATUS: FINISHEDComplete scanning result of "axosetup.336.exe", received in VirusTotal at 01.26.2007, 07:57:28 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.26 01.25.2007 DR/Zlob.Gen
Authentium 4.93.8 01.24.2007 no virus found
Avast 4.7.936.0 01.24.2007 no virus found
AVG 386 01.24.2007 no virus found
BitDefender 7.2 01.25.2007 no virus found
CAT-QuickHeal 9.00 01.25.2007 no virus found
ClamAV devel-20060426 01.25.2007 no virus found
DrWeb 4.33 01.25.2007 no virus found
eSafe 7.0.14.0 01.24.2007 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.123 01.25.2007 no virus found
eTrust-Vet 30.3.3349 01.25.2007 no virus found
Ewido 4.0 01.24.2007 no virus found
Fortinet 2.85.0.0 01.24.2007 suspicious
F-Prot 4.2.1.29 01.25.2007 no virus found
Ikarus T3.1.0.27 01.25.2007 no virus found
Kaspersky 4.0.2.24 01.25.2007 no virus found
McAfee 4948 01.24.2007 no virus found
Microsoft 1.1904 01.25.2007 no virus found
NOD32v2 2005 01.25.2007 no virus found
Norman 5.80.02 01.25.2007 W32/Zlob.ACRE
Panda 9.0.0.4 01.25.2007 no virus found
Prevx1 V2 01.26.2007 no virus found
Sophos 4.13.0 01.24.2007 no virus found
Sunbelt 2.2.907.0 01.22.2007 no virus found
TheHacker 6.0.3.156 01.25.2007 no virus found
UNA 1.83 01.24.2007 no virus found
VBA32 3.11.2 01.24.2007 MalwareScope.Downloader.Zlob.1
VirusBuster 4.3.19:9 01.24.2007 no virus found


Aditional Information
File size: 61528 bytes
MD5: 79e86a6a4369ab3b8d830d8998349e1e
SHA1: 9a5636e749bff1326df0eb18bee883c675f1b583
packers: UPX
packers: UPX, BINARYRES, BINARYRES
packers: UPX

[ALEX(XX)]

Complete scanning result of "Keygen_KyivStar.exe", received in VirusTotal at 01.26.2007, 07:46:33 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.26 01.25.2007 no virus found
Authentium 4.93.8 01.24.2007 no virus found
Avast 4.7.936.0 01.24.2007 no virus found
AVG 386 01.24.2007 no virus found
BitDefender 7.2 01.25.2007 no virus found
CAT-QuickHeal 9.00 01.25.2007 no virus found
ClamAV devel-20060426 01.25.2007 no virus found
DrWeb 4.33 01.25.2007 no virus found
eSafe 7.0.14.0 01.24.2007 no virus found
eTrust-InoculateIT 23.73.123 01.25.2007 no virus found
eTrust-Vet 30.3.3349 01.25.2007 no virus found
Ewido 4.0 01.24.2007 no virus found
Fortinet 2.85.0.0 01.24.2007 suspicious
F-Prot 4.2.1.29 01.25.2007 no virus found
Ikarus T3.1.0.27 01.25.2007 Backdoor.Win32.PcClient.GV
Kaspersky 4.0.2.24 01.25.2007 not-virus:Hoax.Win32.KyivStar.b
McAfee 4948 01.24.2007 no virus found
Microsoft 1.1904 01.25.2007 no virus found
NOD32v2 2005 01.25.2007 no virus found
Norman 5.80.02 01.25.2007 no virus found
Panda 9.0.0.4 01.25.2007 no virus found
Prevx1 V2 01.26.2007 no virus found
Sophos 4.13.0 01.24.2007 Mal/Packer
Sunbelt 2.2.907.0 01.22.2007 no virus found
TheHacker 6.0.3.156 01.25.2007 no virus found
UNA 1.83 01.24.2007 no virus found
VBA32 3.11.2 01.24.2007 suspected of Downloader.Banload.16 (paranoid heuristics)
VirusBuster 4.3.19:9 01.24.2007 novirusacked/NSPack

Aditional Information
File size: 345389 bytes
MD5: ecce86c3458d15930e81486752249b89
SHA1: 9243813916e36b21ffb132c280d42d1194c7891b
packers: NSPACK
packers: RAR, NSPack, PE_Patch

[Kuzz]

STATUS: FINISHEDComplete scanning result of "keygenerator.ex_", received in VirusTotal at 01.26.2007, 08:48:49 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.26 01.25.2007 no virus found
Authentium 4.93.8 01.24.2007 no virus found
Avast 4.7.936.0 01.24.2007 Win32: Zlob-SX
AVG 386 01.24.2007 no virus found
BitDefender 7.2 01.25.2007 no virus found
CAT-QuickHeal 9.00 01.25.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 01.25.2007 Worm.Stration.QR-1
DrWeb 4.33 01.25.2007 no virus found
eSafe 7.0.14.0 01.24.2007 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.123 01.25.2007 no virus found
eTrust-Vet 30.3.3349 01.25.2007 no virus found
Ewido 4.0 01.24.2007 no virus found
Fortinet 2.85.0.0 01.24.2007 no virus found
F-Prot 4.2.1.29 01.25.2007 no virus found
Ikarus T3.1.0.27 01.25.2007 Trojan-Dropper.Win32.ExeBind
Kaspersky 4.0.2.24 01.25.2007 no virus found
McAfee 4948 01.24.2007 no virus found
Microsoft 1.1904 01.25.2007 no virus found
NOD32v2 2005 01.25.2007 no virus found
Norman 5.80.02 01.25.2007 W32/Suspicious_M.gen
Panda 9.0.0.4 01.25.2007 Suspicious file
Prevx1 V2 01.26.2007 Trojan.AccessSetup
Sophos 4.13.0 01.24.2007 no virus found
Sunbelt 2.2.907.0 01.22.2007 VIPRE.Suspicious
TheHacker 6.0.3.156 01.25.2007 no virus found
UNA 1.83 01.24.2007 no virus found
VBA32 3.11.2 01.24.2007 MalwareScope.Downloader.Zlob.1
VirusBuster 4.3.19:9 01.24.2007 novirusacked/MEW


Aditional Information
File size: 11225 bytes
MD5: c97803c2c0155ea96cb0e3d95c2a414f
SHA1: c7ba321a93d3b8481d529b409deb4d0ade543366
packers: MEW
packers: MEW

[Shu_b]

Complete scanning result of "msio32.dll", received in VirusTotal at 01.26.2007, 11:12:10 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.32 01.26.2007 HEUR/Malware
Authentium 4.93.8 01.26.2007 no virus found
Avast 4.7.936.0 01.26.2007 no virus found
AVG 386 01.26.2007 no virus found
BitDefender 7.2 01.26.2007 no virus found
CAT-QuickHeal 9.00 01.26.2007 no virus found
ClamAV devel-20060426 01.26.2007 no virus found
DrWeb 4.33 01.26.2007 no virus found
eSafe 7.0.14.0 01.26.2007 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.124 01.26.2007 no virus found
eTrust-Vet 30.3.3349 01.25.2007 no virus found
Ewido 4.0 01.26.2007 no virus found
Fortinet 2.85.0.0 01.26.2007 suspicious
F-Prot 4.2.1.29 01.25.2007 no virus found
Ikarus T3.1.0.27 01.26.2007 no virus found
Kaspersky 4.0.2.24 01.26.2007 no virus found
McAfee 4949 01.26.2007 no virus found
Microsoft 1.2101 01.26.2007 Spammer:Win32/Mailbot.P
NOD32v2 2008 01.26.2007 a variant of Win32/Spabot.NAC
Norman 5.80.02 01.26.2007 no virus found
Panda 9.0.0.4 01.26.2007 no virus found
Prevx1 V2 01.26.2007 no virus found
Sophos 4.13.0 01.24.2007 no virus found
Sunbelt 2.2.907.0 01.26.2007 no virus found
TheHacker 6.0.3.158 01.26.2007 no virus found
UNA 1.83 01.26.2007 no virus found
VBA32 3.11.2 01.26.2007 no virus found
VirusBuster 4.3.19:9 01.26.2007 Trojan.DL.Obfusc.Gen.4

Aditional Information
File size: 335033 bytes
MD5: df804fd1a5e9fc3836332073ed0ef073
SHA1: 8c6e83f9b51491f422b33c6d48df6e809b1edc40
packers: UPX
packers: UPX, UPX
packers: UPX

[Kuzz]

STATUS: FINISHEDComplete scanning result of "teleport.pro.1.29.2050.keygen-rev", received in VirusTotal at 01.26.2007, 16:41:16 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.32 01.26.2007 no virus found
Authentium 4.93.8 01.26.2007 no virus found
Avast 4.7.936.0 01.26.2007 no virus found
AVG 386 01.26.2007 no virus found
BitDefender 7.2 01.26.2007 no virus found
CAT-QuickHeal 9.00 01.26.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 01.26.2007 Worm.Bagle.Gen-1
DrWeb 4.33 01.26.2007 no virus found
eSafe 7.0.14.0 01.26.2007 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.124 01.26.2007 no virus found
eTrust-Vet 30.3.3352 01.26.2007 no virus found
Ewido 4.0 01.26.2007 no virus found
Fortinet 2.85.0.0 01.26.2007 suspicious
F-Prot 4.2.1.29 01.25.2007 no virus found
Ikarus T3.1.0.27 01.26.2007 no virus found
Kaspersky 4.0.2.24 01.26.2007 no virus found
McAfee 4949 01.26.2007 no virus found
Microsoft 1.2101 01.26.2007 no virus found
NOD32v2 2009 01.26.2007 no virus found
Norman 5.80.02 01.26.2007 no virus found
Panda 9.0.0.4 01.26.2007 no virus found
Prevx1 V2 01.26.2007 no virus found
Sophos 4.13.0 01.24.2007 Mal/Packer
Sunbelt 2.2.907.0 01.26.2007 VIPRE.Suspicious
TheHacker 6.0.3.158 01.26.2007 no virus found
UNA 1.83 01.26.2007 no virus found
VBA32 3.11.2 01.26.2007 no virus found
VirusBuster 4.3.19:9 01.26.2007 no virus found


Aditional Information
File size: 44119 bytes
MD5: 727fd57b0bcf9e9adb0239627b70ed64
SHA1: f47d31139549294d5b41b0404d40543e2a6832dc
packers: UPX
packers: PECRYPT, PECRYPT, UPX
packers: UPX
Sunbelt info: VIPRE.Suspicious

[saicat]

Complete scanning result of "virus-20070128-151323-15106", received in VirusTotal at 01.28.2007, 15:30:23 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.32 01.27.2007 TR/Crypt.ULPM.Gen
Authentium 4.93.8 01.26.2007 Possibly a new variant of W32/CodeCru-based!Maximus
Avast 4.7.936.0 01.27.2007 no virus found
AVG 386 01.28.2007 no virus found
BitDefender 7.2 01.28.2007 no virus found
CAT-QuickHeal 9.00 01.27.2007 no virus found
ClamAV devel-20060426 01.28.2007 Trojan.Downloader-749
DrWeb 4.33 01.28.2007 Packed.Generic
eSafe 7.0.14.0 01.26.2007 suspicious Trojan/Worm
eTrust-InoculateIT 23.73.126 01.27.2007 no virus found
eTrust-Vet 30.3.3353 01.27.2007 no virus found
Ewido 4.0 01.28.2007 no virus found
Fortinet 2.85.0.0 01.28.2007 no virus found
F-Prot 4.2.1.29 01.26.2007 W32/CodeCru-based!Maximus
Ikarus T3.1.0.27 01.28.2007 Trojan-Downloader.Win32.Small.gen
Kaspersky 4.0.2.24 01.28.2007 no virus found
McAfee 4950 01.26.2007 New Malware.j
Microsoft 1.2101 01.28.2007 Win32/Vxidl.gen!B
NOD32v2 2014 01.28.2007 no virus found
Norman 5.80.02 01.26.2007 no virus found
Panda 9.0.0.4 01.28.2007 no virus found
Prevx1 V2 01.28.2007 no virus found
Sophos 4.13.0 01.28.2007 Mal/HckPk-A
Sunbelt 2.2.907.0 01.26.2007 no virus found
TheHacker 6.0.3.159 01.28.2007 no virus found
UNA 1.83 01.26.2007 no virus found
VBA32 3.11.2 01.28.2007 no virus found
VirusBuster 4.3.19:9 01.28.2007 Trojan.Tibs.Gen!Pac26

Aditional Information
File size: 70685 bytes
MD5: e119923387453279f2069d6b1313818c
SHA1: 5512d113bd0f07ba0b815cf3559a3735f720cf3c

[Kuzz]

Antivirus Version Update Result
AntiVir 7.3.1.33 01.31.2007 no virus found
Authentium 4.93.8 01.30.2007 could be a corrupted executable file
Avast 4.7.936.0 01.31.2007 no virus found
AVG 386 01.31.2007 no virus found
BitDefender 7.2 01.31.2007 Trojan.Agent.AJJ
CAT-QuickHeal 9.00 01.31.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 01.31.2007 no virus found
DrWeb 4.33 01.31.2007 no virus found
eSafe 7.0.14.0 01.31.2007 suspicious Trojan/Worm
eTrust-InoculateIT 30.4.3361 01.31.2007 no virus found
eTrust-Vet 30.4.3361 01.31.2007 no virus found
Ewido 4.0 01.31.2007 no virus found
Fortinet 2.85.0.0 01.31.2007 suspicious
F-Prot 4.2.1.29 01.30.2007 no virus found
Ikarus T3.1.0.27 01.31.2007 no virus found
Kaspersky 4.0.2.24 01.31.2007 no virus found
McAfee 4953 01.31.2007 no virus found
Microsoft 1.2101 01.31.2007 no virus found
NOD32v2 2023 01.31.2007 no virus found
Norman 5.80.02 01.31.2007 no virus found
Panda 9.0.0.4 01.31.2007 no virus found
Prevx1 V2 01.31.2007 no virus found
Sophos 4.13.0 01.31.2007 no virus found
Sunbelt 2.2.907.0 01.31.2007 VIPRE.Suspicious
Symantec 10 01.30.2007 no virus found
TheHacker 6.0.3.160 01.31.2007 no virus found
UNA 1.83 01.30.2007 no virus found
VBA32 3.11.2 01.31.2007 no virus found
VirusBuster 4.3.19:9 01.31.2007 no virus found


Aditional Information
File size: 12921 bytes
MD5: 83c007180ec47456d90a37e3102bde8c
SHA1: 3a814e86943052ad4fff26862a4f0e49aa25a166
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Winsent]

Complete scanning result of "setup.exe", received in VirusTotal at 02.01.2007, 12:33:20 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.33 02.01.2007 no virus found
Authentium 4.93.8 02.01.2007 no virus found
Avast 4.7.936.0 02.01.2007 Win32:Horst-GV
AVG 386 01.31.2007 no virus found
BitDefender 7.2 02.01.2007 no virus found
CAT-QuickHeal 9.00 01.31.2007 no virus found
ClamAV devel-20060426 02.01.2007 Trojan.Proxy.Horst-438
DrWeb 4.33 02.01.2007 no virus found
eSafe 7.0.14.0 01.31.2007 no virus found
eTrust-InoculateIT 30.4.3363 02.01.2007 no virus found
eTrust-Vet 30.4.3363 02.01.2007 Win32/Boxed!generic
Ewido 4.0 01.31.2007 no virus found
Fortinet 2.85.0.0 02.01.2007 no virus found
F-Prot 4.2.1.29 02.01.2007 no virus found
Ikarus T3.1.0.31 02.01.2007 no virus found
Kaspersky 4.0.2.24 02.01.2007 no virus found
McAfee 4953 01.31.2007 no virus found
Microsoft 1.2101 02.01.2007 no virus found
NOD32v2 2025 02.01.2007 no virus found
Norman 5.80.02 01.31.2007 W32/Malware
Panda 9.0.0.4 02.01.2007 Suspicious file
Prevx1 V2 02.01.2007 no virus found
Sophos 4.13.0 01.31.2007 no virus found
Sunbelt 2.2.907.0 02.01.2007 no virus found
Symantec 10 02.01.2007 no virus found
TheHacker 6.0.3.161 02.01.2007 no virus found
UNA 1.83 01.31.2007 no virus found
VBA32 3.11.2 02.01.2007 suspected of Trojan-Proxy.Horst.170 (paranoid heuristics)
VirusBuster 4.3.19:9 01.31.2007 no virus found

Aditional Information
File size: 49152 bytes
MD5: 66647e9567b366e4ab358b3123e112a2
SHA1: c187a55fb72c81fb15ca9e7d4df67711667d111d
norman sandbox: [ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: [email protected] - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* File length: 49152 bytes.

[ Process/window information ]
* Modifies other process memory.
* Modifies execution flow of a remote process.

[Geser]

AntiVir 7.3.1.34 02.02.2007 BDS/Haxdoor.LQ
Authentium 4.93.8 02.01.2007 W32/Backdoor.ACIC
Avast 4.7.936.0 02.01.2007 no virus found
AVG 386 02.01.2007 BackDoor.Generic4.QBO
BitDefender 7.2 02.02.2007 no virus found
CAT-QuickHeal 9.00 02.02.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.02.2007 no virus found
DrWeb 4.33 02.02.2007 BackDoor.Haxdoor.423
eSafe 7.0.14.0 02.02.2007 Win32.Haxdoor.lq
eTrust-InoculateIT 30.4.3364 02.02.2007 no virus found
eTrust-Vet 30.4.3364 02.02.2007 no virus found
Ewido 4.0 02.01.2007 Backdoor.Haxdoor.lq
Fortinet 2.85.0.0 02.02.2007 W32/Haxdoor.LQ!tr.bdr
F-Prot 4.2.1.29 02.01.2007 W32/Backdoor.ACIC
Ikarus T3.1.0.31 02.02.2007 Backdoor.Win32.Haxdoor.lq
Kaspersky 4.0.2.24 02.02.2007 Backdoor.Win32.Haxdoor.lq
McAfee 4954 02.01.2007 no virus found
Microsoft 1.2101 02.02.2007 no virus found
NOD32v2 2030 02.02.2007 unpack error
Norman 5.80.02 02.02.2007 no virus found
Panda 9.0.0.4 02.02.2007 Bck/BeastDoor.HF
Prevx1 V2 02.02.2007 Covert.Sys.Exec
Sophos 4.13.0 02.02.2007 no virus found
Sunbelt 2.2.907.0 02.01.2007 Haxdoor.Fam
Symantec 10 02.02.2007 no virus found
TheHacker 6.0.3.162 02.02.2007 Backdoor/Haxdoor.lq
UNA 1.83 02.01.2007 Backdoor.Haxdoor.D5A4
VBA32 3.11.2 02.02.2007 MalwareScope.Trojan-PSW.Pinch.2
VirusBuster 4.3.19:9 02.02.2007 novirusacked/FSG

[Winsent]

Complete scanning result of "happy.rar", received in VirusTotal at 02.02.2007, 21:07:37 (CET).


Antivirus Version Update Result

AntiVir 7.3.1.34 02.02.2007 no virus found
Authentium 4.93.8 02.02.2007 could be a corrupted executable file
Avast 4.7.936.0 02.01.2007 no virus found
AVG 386 02.02.2007 no virus found
BitDefender 7.2 02.02.2007 no virus found
CAT-QuickHeal 9.00 02.02.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.02.2007 no virus found
DrWeb 4.33 02.02.2007 BACKDOOR.PWS.Trojan
eSafe 7.0.14.0 02.02.2007 Suspicious Trojan/Worm
eTrust-InoculateIT 30.4.3364 02.02.2007 no virus found
eTrust-Vet 30.4.3364 02.02.2007 no virus found
Ewido 4.0 02.02.2007 no virus found
Fortinet 2.85.0.0 02.02.2007 suspicious
F-Prot 4.2.1.29 02.01.2007 no virus found
Ikarus T3.1.0.31 02.02.2007 no virus found
Kaspersky 4.0.2.24 02.02.2007 no virus found
McAfee 4955 02.02.2007 no virus found
Microsoft 1.2101 02.02.2007 no virus found
NOD32v2 2031 02.02.2007 no virus found
Norman 5.80.02 02.02.2007 no virus found
Panda 9.0.0.4 02.02.2007 Suspicious file
Prevx1 V2 02.02.2007 no virus found
Sophos 4.13.0 02.02.2007 Mal/Packer
Sunbelt 2.2.907.0 02.01.2007 VIPRE.Suspicious
Symantec 10 02.02.2007 no virus found
TheHacker 6.0.3.162 02.02.2007 no virus found
UNA 1.83 02.01.2007 Win32.CRYPT.virus
VBA32 3.11.2 02.02.2007 no virus found
VirusBuster 4.3.19:9 02.02.2007 novirusacked/Yoda

Aditional Information
File size: 280660 bytes
MD5: 54ce29bd8d11567c363765965118b9f8
SHA1: a2e727235ecd92dfc16e46e0256d63411f10a93e
packers: YODA
packers: Yoda
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Winsent]

Complete scanning result of "girl.exe", received in VirusTotal at 02.04.2007, 09:44:35 (CET).


Antivirus Version Update Result

AntiVir 7.3.1.34 02.03.2007 TR/Crypt.XPACK.Gen
Authentium 4.93.8 02.03.2007 no virus found
Avast 4.7.936.0 02.03.2007 no virus found
AVG 386 02.04.2007 no virus found
BitDefender 7.2 02.04.2007 Trojan.Dropper.Zlob.C
CAT-QuickHeal 9.00 02.03.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.03.2007 no virus found
DrWeb 4.33 02.04.2007 no virus found
eSafe 7.0.14.0 02.03.2007 Suspicious Trojan/Worm
eTrust-InoculateIT 30.4.3364 02.02.2007 no virus found
eTrust-Vet 30.3.3366 02.03.2007 no virus found
Ewido 4.0 02.03.2007 no virus found
Fortinet 2.85.0.0 02.04.2007 suspicious
F-Prot 4.2.1.29 02.03.2007 no virus found
Ikarus T3.1.0.31 02.04.2007 no virus found
Kaspersky 4.0.2.24 02.04.2007 Trojan.Win32.Crypt.g
McAfee 4955 02.02.2007 W32/NGVCK.a
Microsoft 1.2101 02.04.2007 no virus found
NOD32v2 2035 02.03.2007 no virus found
Norman 5.80.02 02.02.2007 no virus found
Panda 9.0.0.4 02.04.2007 Suspicious file
Prevx1 V2 02.04.2007 no virus found
Sophos 4.13.0 02.02.2007 no virus found
Sunbelt 2.2.907.0 02.02.2007 VIPRE.Suspicious
Symantec 10 02.04.2007 no virus found
TheHacker 6.0.3.162 02.02.2007 no virus found
UNA 1.83 02.03.2007 no virus found
VBA32 3.11.2 02.03.2007 Trojan-PSW.Win32.LdPinch.bgi
VirusBuster 4.3.19:9 02.03.2007 no virus found

Aditional Information
File size: 28672 bytes
MD5: 32c1c78019c2225ff4806cf6bc8643c5
SHA1: c5ee4f6f1a704c2d61720440755bf6416c347e30
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Surfer]

Complete scanning result of "happy.exe", received in VirusTotal at 02.06.2007, 1739 (CET).

AntiVir 7.3.1.34 02.06.2007 no virus found
Authentium 4.93.8 02.06.2007 no virus found
Avast 4.7.936.0 02.06.2007 no virus found
AVG 386 02.06.2007 no virus found
BitDefender 7.2 02.05.2007 Win32.Worm.IM.Sramota.G
CAT-QuickHeal 9.00 02.06.2007 no virus found
ClamAV devel-20060426 02.06.2007 no virus found
DrWeb 4.33 02.06.2007 Win32.HLLM.Fire
eSafe 7.0.14.0 02.06.2007 no virus found
eTrust-InoculateIT 30.4.3372 02.06.2007 no virus found
eTrust-Vet 30.4.3372 02.06.2007 no virus found
Ewido 4.0 02.06.2007 Worm.Sramota.e
Fortinet 2.85.0.0 02.06.2007 no virus found
F-Prot 4.2.1.29 02.06.2007 no virus found
Ikarus T3.1.0.31 02.06.2007 no virus found
Kaspersky 4.0.2.24 02.06.2007 no virus found
McAfee 4956 02.05.2007 no virus found
Microsoft 1.2101 02.06.2007 no virus found
NOD32v2 2040 02.06.2007 a variant of Win32/Sramota
Norman 5.80.02 02.06.2007 no virus found
Panda 9.0.0.4 02.06.2007 Suspicious file
Prevx1 V2 02.06.2007 no virus found
Sophos 4.13.0 02.05.2007 no virus found
Sunbelt 2.2.907.0 02.02.2007 no virus found
Symantec 10 02.06.2007 no virus found
TheHacker 6.1.6.052 02.05.2007 no virus found
UNA 1.83 02.06.2007 no virus found
VBA32 3.11.2 02.06.2007 no virus found
VirusBuster 4.3.19:9 02.06.2007 no virus found

Aditional Information
File size: 380416 bytes
MD5: bbf4c002e6a8a877b7868e5fed6e93aa
SHA1: 835e6b28673b5f26b0d8493a84a607114430b689

[Geser]

Antivirus Version Update Result
AntiVir 7.3.1.34 02.06.2007 TR/Agent.5120.30
Authentium 4.93.8 02.06.2007 Possibly a new variant of W32/new-malware!Maximus
Avast 4.7.936.0 02.06.2007 Win32:BZub-AU
AVG 386 02.06.2007 no virus found
BitDefender 7.2 02.05.2007 DeepScan:Generic.Malware.dld!!.866D5D22
CAT-QuickHeal 9.00 02.06.2007 no virus found
ClamAV devel-20060426 02.06.2007 no virus found
DrWeb 4.33 02.06.2007 no virus found
eSafe 7.0.14.0 02.06.2007 suspicious Trojan/Worm
eTrust-InoculateIT 30.4.3372 02.06.2007 no virus found
eTrust-Vet 30.4.3372 02.06.2007 no virus found
Ewido 4.0 02.06.2007 no virus found
Fortinet 2.85.0.0 02.06.2007 suspicious
F-Prot 4.2.1.29 02.06.2007 W32/new-malware!Maximus
Ikarus T3.1.0.31 02.06.2007 MalwareScope.Trojan-Spy.BZub.3
Kaspersky 4.0.2.24 02.06.2007 no virus found
McAfee 4957 02.06.2007 no virus found
Microsoft 1.2101 02.06.2007 PWS:Win32/Bzup.gen
NOD32v2 2041 02.06.2007 a variant of Win32/Spy.BZub
Norman 5.80.02 02.06.2007 no virus found
Panda 9.0.0.4 02.06.2007 Suspicious file
Prevx1 V2 02.06.2007 no virus found
Sophos 4.13.0 02.05.2007 Mal/Cimuz-A
Sunbelt 2.2.907.0 02.02.2007 VIPRE.Suspicious
Symantec 10 02.06.2007 no virus found
TheHacker 6.1.6.052 02.05.2007 no virus found
UNA 1.83 02.06.2007 no virus found
VBA32 3.11.2 02.06.2007 MalwareScope.Trojan-Spy.BZub.3
VirusBuster 4.3.19:9 02.06.2007 Trojan.DR.BZub.Gen.5

[Shu_b]

Герои дня...

Complete scanning result of "svchost.exe", received in VirusTotal at 02.07.2007, 13:44:19 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.34 02.07.2007 no virus found
Authentium 4.93.8 02.07.2007 no virus found
Avast 4.7.936.0 02.06.2007 no virus found
AVG 386 02.06.2007 no virus found
BitDefender 7.2 02.05.2007 no virus found
CAT-QuickHeal 9.00 02.07.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.07.2007 no virus found
DrWeb 4.33 02.07.2007 no virus found
eSafe 7.0.14.0 02.07.2007 suspicious Trojan/Worm
eTrust-InoculateIT 30.4.3374 02.07.2007 no virus found
eTrust-Vet 30.4.3374 02.07.2007 no virus found
Ewido 4.0 02.06.2007 no virus found
Fortinet 2.85.0.0 02.07.2007 suspicious
F-Prot 4.2.1.29 02.07.2007 no virus found
F-Secure 6.70.13030.0 02.07.2007 W32/Suspicious_F.gen
Ikarus T3.1.0.31 02.07.2007 no virus found
Kaspersky 4.0.2.24 02.07.2007 no virus found
McAfee 4957 02.06.2007 no virus found
Microsoft 1.2101 02.07.2007 no virus found
NOD32v2 2043 02.07.2007 no virus found
Norman 5.80.02 02.06.2007 W32/Suspicious_F.gen
Panda 9.0.0.4 02.07.2007 Suspicious file
Prevx1 V2 02.07.2007 no virus found
Sophos 4.13.0 02.05.2007 Mal/Packer
Sunbelt 2.2.907.0 02.02.2007 VIPRE.Suspicious
Symantec 10 02.07.2007 no virus found
TheHacker 6.1.6.053 02.07.2007 no virus found
UNA 1.83 02.06.2007 no virus found
VBA32 3.11.2 02.07.2007 no virus found
VirusBuster 4.3.19:9 02.06.2007 novirus:Packed/FSG

Aditional Information
File size: 5000 bytes
MD5: d202d3700618b409f70302b89e7e7962
SHA1: 7430bba46aa68f04b56c8d66fd89d3c19f83b687
packers: FSG

Complete scanning result of "partnership.dll", received in VirusTotal at 02.07.2007, 13:44:19 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.34 02.07.2007 HEUR/Malware
Authentium 4.93.8 02.07.2007 no virus found
Avast 4.7.936.0 02.06.2007 no virus found
AVG 386 02.06.2007 no virus found
BitDefender 7.2 02.05.2007 no virus found
CAT-QuickHeal 9.00 02.07.2007 no virus found
ClamAV devel-20060426 02.07.2007 no virus found
DrWeb 4.33 02.07.2007 BACKDOOR.Trojan
eSafe 7.0.14.0 02.07.2007 suspicious Trojan/Worm
eTrust-InoculateIT 30.4.3374 02.07.2007 no virus found
eTrust-Vet 30.4.3374 02.07.2007 Win32/Hsow!generic
Ewido 4.0 02.06.2007 no virus found
Fortinet 2.85.0.0 02.07.2007 suspicious
F-Prot 4.2.1.29 02.07.2007 no virus found
F-Secure 6.70.13030.0 02.07.2007 no virus found
Ikarus T3.1.0.31 02.07.2007 Trojan-Spy.Win32.Banker.ahy
Kaspersky 4.0.2.24 02.07.2007 no virus found
McAfee 4957 02.06.2007 Proxy-Agent.ai
Microsoft 1.2101 02.07.2007 no virus found
NOD32v2 2043 02.07.2007 a variant of Win32/TrojanProxy.Xorpix
Norman 5.80.02 02.06.2007 W32/Suspicious_U.gen
Panda 9.0.0.4 02.07.2007 Suspicious file
Prevx1 V2 02.07.2007 no virus found
Sophos 4.13.0 02.05.2007 Mal/Packer
Sunbelt 2.2.907.0 02.02.2007 VIPRE.Suspicious
Symantec 10 02.07.2007 no virus found
TheHacker 6.1.6.053 02.07.2007 no virus found
UNA 1.83 02.06.2007 no virus found
VBA32 3.11.2 02.07.2007 no virus found
VirusBuster 4.3.19:9 02.06.2007 novirus:Packed/Upack

Aditional Information
File size: 13351 bytes
MD5: d37c87bb8cd8229c4c878e752e46eeeb
SHA1: 6074ddf6e898dd19c145e2d201bca5928b3ff6e8
packers: UPACK


Complete scanning result of "svchctrl.exe", received in VirusTotal at 02.07.2007, 13:38:39 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.34 02.07.2007 TR/Crypt.ULPM.Gen
Authentium 4.93.8 02.07.2007 no virus found
Avast 4.7.936.0 02.06.2007 no virus found
AVG 386 02.06.2007 BackDoor.Generic4.XY
BitDefender 7.2 02.05.2007 no virus found
CAT-QuickHeal 9.00 02.07.2007 no virus found
ClamAV devel-20060426 02.07.2007 no virus found
DrWeb 4.33 02.07.2007 no virus found
eSafe 7.0.14.0 02.07.2007 suspicious Trojan/Worm
eTrust-InoculateIT 30.4.3374 02.07.2007 no virus found
eTrust-Vet 30.4.3374 02.07.2007 no virus found
Ewido 4.0 02.06.2007 no virus found
Fortinet 2.85.0.0 02.07.2007 BDoor.CYL!tr.bdr
F-Prot 4.2.1.29 02.07.2007 no virus found
F-Secure 6.70.13030.0 02.07.2007 W32/Smalldoor.NWU
Ikarus T3.1.0.31 02.07.2007 Backdoor.Win32.ShBot.b
Kaspersky 4.0.2.24 02.07.2007 no virus found
McAfee 4957 02.06.2007 BackDoor-CYL
Microsoft 1.2101 02.07.2007 no virus found
NOD32v2 2043 02.07.2007 probably unknown NewHeur_PE virus
Norman 5.80.02 02.06.2007 W32/Smalldoor.NWU
Panda 9.0.0.4 02.07.2007 Trj/Shellbot.AK
Prevx1 V2 02.07.2007 no virus found
Sophos 4.13.0 02.05.2007 no virus found
Sunbelt 2.2.907.0 02.02.2007 no virus found
Symantec 10 02.07.2007 Backdoor.Shellbot
TheHacker 6.1.6.053 02.07.2007 no virus found
UNA 1.83 02.06.2007 no virus found
VBA32 3.11.2 02.07.2007 no virus found
VirusBuster 4.3.19:9 02.06.2007 no virus found

Aditional Information
File size: 11264 bytes
MD5: ffd07878b6e9b88dde0e69646432eaab
SHA1: 6b7450171ef185bc53771010e19298480fd8bd09
packers: UPX

[Geser]

Complete scanning result of "avz00001.dta", received in VirusTotal at 02.07.2007, 20:01:54 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.34 02.07.2007 no virus found
Authentium 4.93.8 02.07.2007 no virus found
Avast 4.7.936.0 02.07.2007 no virus found
AVG 386 02.07.2007 no virus found
BitDefender 7.2 02.07.2007 no virus found
CAT-QuickHeal 9.00 02.07.2007 no virus found
ClamAV devel-20060426 02.07.2007 no virus found
DrWeb 4.33 02.07.2007 Trojan.Sender
eSafe 7.0.14.0 02.07.2007 no virus found
eTrust-InoculateIT 30.4.3374 02.07.2007 no virus found
eTrust-Vet 30.4.3374 02.07.2007 no virus found
Ewido 4.0 02.06.2007 no virus found
Fortinet 2.85.0.0 02.07.2007 no virus found
F-Prot 4.2.1.29 02.07.2007 no virus found
F-Secure 6.70.13030.0 02.07.2007 no virus found
Ikarus T3.1.0.31 02.07.2007 Trojan.Sender
Kaspersky 4.0.2.24 02.07.2007 no virus found
McAfee 4958 02.07.2007 no virus found
Microsoft 1.2101 02.07.2007 no virus found
NOD32v2 2043 02.07.2007 no virus found
Norman 5.80.02 02.07.2007 no virus found
Panda 9.0.0.4 02.07.2007 no virus found
Prevx1 V2 02.07.2007 no virus found
Sophos 4.13.0 02.05.2007 no virus found
Sunbelt 2.2.907.0 02.02.2007 no virus found
Symantec 10 02.07.2007 no virus found
TheHacker 6.1.6.053 02.07.2007 no virus found
UNA 1.83 02.07.2007 no virus found
VBA32 3.11.2 02.07.2007 Trojan.Sender
VirusBuster 4.3.19:9 02.07.2007 no virus found

[CENT]

Complete scanning result of "SetupDurakFull.exe", received in VirusTotal at 02.10.2007, 06:38:11 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.36 02.09.2007 no virus found
Authentium 4.93.8 02.09.2007 no virus found
Avast 4.7.936.0 02.09.2007 no virus found
AVG 386 02.09.2007 no virus found
BitDefender 7.2 02.10.2007 no virus found
CAT-QuickHeal 9.00 02.09.2007 no virus found
ClamAV devel-20060426 02.09.2007 no virus found
DrWeb 4.33 02.09.2007 no virus found
eSafe 7.0.14.0 02.09.2007 no virus found
eTrust-Vet 30.4.3384 02.10.2007 no virus found
Ewido 4.0 02.09.2007 no virus found
Fortinet 2.85.0.0 02.10.2007 no virus found
F-Prot 4.2.1.29 02.09.2007 no virus found
F-Secure 6.70.13030.0 02.10.2007 no virus found
Ikarus T3.1.0.31 02.10.2007 Backdoor.Win32.Nerte.76
Kaspersky 4.0.2.24 02.10.2007 no virus found
McAfee 4960 02.09.2007 no virus found
Microsoft 1.2204 02.10.2007 no virus found
NOD32v2 2049 02.10.2007 no virus found
Norman 5.80.02 02.09.2007 no virus found
Panda 9.0.0.4 02.09.2007 no virus found
Prevx1 V2 02.10.2007 no virus found
Sophos 4.13.0 02.08.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 no virus found
Symantec 10 02.10.2007 no virus found
TheHacker 6.1.6.055 02.09.2007 no virus found
UNA 1.83 02.09.2007 no virus found
VBA32 3.11.2 02.09.2007 no virus found
VirusBuster 4.3.19:9 02.09.2007 no virus found

Aditional Information
File size: 6583701 bytes
MD5: cb5a66732e2e3172fca141bd6a620fec
SHA1: 2282dfb8299fd63ff3ff731bcb5c17295ae5cf59