Исследование антивирусов 5

[Shu_b]

t=8056

Complete scanning result of "tuvsqrs.dll", received in VirusTotal at 02.21.2007, 13:56:11 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.21.2007 TR/Crypt.ULPM.Gen
Authentium 4.93.8 02.21.2007 no virus found
Avast 4.7.936.0 02.21.2007 no virus found
AVG 386 02.20.2007 no virus found
BitDefender 7.2 02.21.2007 MemScan:Adware.VirtuMonde.DY
CAT-QuickHeal 9.00 02.20.2007 no virus found
ClamAV devel-20060426 02.21.2007 no virus found
DrWeb 4.33 02.21.2007 Trojan.Virtumod
eSafe 7.0.14.0 02.20.2007 suspicious Trojan/Worm
eTrust-Vet 30.4.3417 02.21.2007 no virus found
Ewido 4.0 02.21.2007 no virus found
FileAdvisor 1 02.21.2007 no virus found
Fortinet 2.85.0.0 02.21.2007 suspicious
F-Prot 4.2.1.29 02.21.2007 no virus found
F-Secure 6.70.13030.0 02.21.2007 no virus found
Ikarus T3.1.0.31 02.21.2007 not-a-virus:AdWare.Win32.Virtumonde.ha
Kaspersky 4.0.2.24 02.21.2007 not-a-virus:AdWare.Win32.Virtumonde.ha
McAfee 4967 02.20.2007 no virus found
Microsoft 1.2204 02.21.2007 no virus found
NOD32v2 2072 02.20.2007 no virus found
Norman 5.80.02 02.21.2007 no virus found
Panda 9.0.0.4 02.20.2007 Suspicious file
Prevx1 V2 02.21.2007 no virus found
Sophos 4.14.0 02.21.2007 no virus found
Sunbelt 2.2.907.0 02.17.2007 no virus found
Symantec 10 02.21.2007 no virus found
TheHacker 6.1.6.062 02.21.2007 no virus found
UNA 1.83 02.20.2007 no virus found
VBA32 3.11.2 02.20.2007 no virus found
VirusBuster 4.3.19:9 02.20.2007 no virus found

Aditional Information
File size: 26637 bytes
MD5: f88ecb520077b1dbe8fbb4b45b4c455b
SHA1: de6d9f0ec5d06cec4394591409fabfd232183a72


Complete scanning result of "iifef.dll", received in VirusTotal at 02.21.2007, 14:33:14 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.21.2007 no virus found
Authentium 4.93.8 02.21.2007 no virus found
Avast 4.7.936.0 02.21.2007 no virus found
AVG 386 02.20.2007 Downloader.Zlob.FC
BitDefender 7.2 02.21.2007 MemScan:Adware.Virtumonde.EB
CAT-QuickHeal 9.00 02.20.2007 no virus found
ClamAV devel-20060426 02.21.2007 no virus found
DrWeb 4.33 02.21.2007 Trojan.Virtumod
eSafe 7.0.14.0 02.20.2007 suspicious Trojan/Worm
eTrust-Vet 30.4.3417 02.21.2007 no virus found
Ewido 4.0 02.21.2007 no virus found
FileAdvisor 1 02.21.2007 no virus found
Fortinet 2.85.0.0 02.21.2007 suspicious
F-Prot 4.2.1.29 02.21.2007 no virus found
F-Secure 6.70.13030.0 02.21.2007 no virus found
Ikarus T3.1.0.31 02.21.2007 no virus found
Kaspersky 4.0.2.24 02.21.2007 no virus found (not-a-virus:AdWare.Win32.Virtumonde.ha)*
McAfee 4967 02.20.2007 no virus found
Microsoft 1.2204 02.21.2007 no virus found
NOD32v2 2072 02.20.2007 no virus found
Norman 5.80.02 02.21.2007 no virus found
Panda 9.0.0.4 02.20.2007 Suspicious file
Prevx1 V2 02.21.2007 no virus found
Sophos 4.14.0 02.21.2007 no virus found
Sunbelt 2.2.907.0 02.17.2007 no virus found
Symantec 10 02.21.2007 no virus found
TheHacker 6.1.6.062 02.21.2007 no virus found
UNA 1.83 02.20.2007 no virus found
VBA32 3.11.2 02.20.2007 no virus found
VirusBuster 4.3.19:9 02.20.2007 Trojan.DL.Vundo.Gen!Pac.6

Aditional Information
File size: 281652 bytes
MD5: e0874ae53b943bf78ae30a9325235699
SHA1: 670030f9ff6c89762df22f96dd30c72eb181dffd

* по ответу вирлаба KAV

[saicat]

Complete scanning result of "x.exw", received in VirusTotal at 02.21.2007, 22:43:25 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.37 02.21.2007 TR/Rootkit.Gen
Authentium 4.93.8 02.21.2007 no virus found
Avast 4.7.936.0 02.21.2007 Win32:Agent-EXH
AVG 386 02.21.2007 no virus found
BitDefender 7.2 02.21.2007 no virus found
CAT-QuickHeal 9.00 02.21.2007 no virus found
ClamAV devel-20060426 02.21.2007 no virus found
DrWeb 4.33 02.21.2007 no virus found
eSafe 7.0.14.0 02.21.2007 suspicious Trojan/Worm
eTrust-Vet 30.4.3417 02.21.2007 no virus found
Ewido 4.0 02.21.2007 Rootkit.Small
FileAdvisor 1 02.21.2007 no virus found
Fortinet 2.85.0.0 02.21.2007 no virus found
F-Prot 4.2.1.29 02.21.2007 no virus found
F-Secure 6.70.13030.0 02.21.2007 no virus found
Ikarus T3.1.0.31 02.21.2007 no virus found
Kaspersky 4.0.2.24 02.21.2007 no virus found
McAfee 4968 02.21.2007 no virus found
Microsoft 1.2204 02.21.2007 no virus found
NOD32v2 2073 02.21.2007 no virus found
Norman 5.80.02 02.21.2007 no virus found
Panda 9.0.0.4 02.21.2007 Suspicious file
Prevx1 V2 02.21.2007 Downloader.Drev.A
Sophos 4.14.0 02.21.2007 no virus found
Sunbelt 2.2.907.0 02.17.2007 no virus found
Symantec 10 02.21.2007 no virus found
TheHacker 6.1.6.062 02.21.2007 no virus found
UNA 1.83 02.21.2007 no virus found
VBA32 3.11.2 02.20.2007 suspected of Embedded.Backdoor.Win32.Agent.aiu
VirusBuster 4.3.19:9 02.21.2007 no virus found

Aditional Information
File size: 13824 bytes
MD5: 4c058f13d8bafa55ad8e6499ab0c095d
SHA1: 251fd0028509cb4bc13caad29e602c8aabf264c4
packers: UPX
packers: UPX
packers: UPX, BINARYRES
packers: UPX
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=52c859786634

[Surfer]

Complete scanning result of "setup.exe", received in VirusTotal at 02.23.2007, 18:09:10 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 02.23.2007 DR/Zlob.Gen
Authentium 4.93.8 02.23.2007 no virus found
Avast 4.7.936.0 02.23.2007 no virus found
AVG 386 02.23.2007 no virus found
BitDefender 7.2 02.23.2007 no virus found
CAT-QuickHeal 9.00 02.23.2007 no virus found
ClamAV devel-20060426 02.22.2007 no virus found
DrWeb 4.33 02.23.2007 no virus found
eSafe 7.0.14.0 02.23.2007 suspicious Trojan/Worm
eTrust-Vet 30.4.3424 02.23.2007 no virus found
Ewido 4.0 02.23.2007 no virus found
FileAdvisor 1 02.23.2007 no virus found
Fortinet 2.85.0.0 02.23.2007 suspicious
F-Prot 4.3.1.45 02.22.2007 no virus found
F-Secure 6.70.13030.0 02.23.2007 no virus found
Ikarus T3.1.0.31 02.23.2007 no virus found
Kaspersky 4.0.2.24 02.23.2007 no virus found
McAfee 4969 02.22.2007 no virus found
Microsoft 1.2204 02.23.2007 no virus found
NOD32v2 2077 02.23.2007 no virus found
Norman 5.80.02 02.23.2007 no virus found
Panda 9.0.0.4 02.23.2007 no virus found
Prevx1 V2 02.23.2007 no virus found
Sophos 4.14.0 02.21.2007 no virus found
Sunbelt 2.2.907.0 02.22.2007 no virus found
Symantec 10 02.23.2007 no virus found
TheHacker 6.1.6.063 02.23.2007 no virus found
UNA 1.83 02.22.2007 no virus found
VBA32 3.11.2 02.22.2007 no virus found
VirusBuster 4.3.19:9 02.23.2007 no virus found

Aditional Information
File size: 61146 bytes
MD5: e0c7f961d8e8db449199a93c3b1a3900
SHA1: 172b4e5a32dfe08b177f72186b123641829674e6
packers: UPX
packers: UPX, BINARYRES, BINARYRES
packers: UPX

[urbanangel]

Complete scanning result of "Photo.rar", received in VirusTotal at 02.25.2007,
18:51:54 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 02.25.2007 TR/Crypt.XPACK.Gen
Authentium 4.93.8 02.25.2007 no virus found
Avast 4.7.936.0 02.23.2007 no virus found
AVG 386 02.25.2007 Win32/Ngvck
BitDefender 7.2 02.25.2007 no virus found
CAT-QuickHeal 9.00 02.24.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.25.2007 no virus found
DrWeb 4.33 02.25.2007 no virus found
eSafe 7.0.14.0 02.25.2007 Suspicious Trojan/Worm
eTrust-Vet 30.4.3424 02.23.2007 no virus found
Ewido 4.0 02.25.2007 Trojan.LdPinch.bkg
FileAdvisor 1 02.25.2007 no virus found
Fortinet 2.85.0.0 02.25.2007 W32/LdPinch.BKG!tr.pws
F-Prot 4.3.1.45 02.25.2007 no virus found
F-Secure 6.70.13030.0 02.25.2007 Trojan-PSW.Win32.LdPinch.bkg
Ikarus T3.1.0.31 02.25.2007 Trojan.Win32.Agent.aee
Kaspersky 4.0.2.24 02.25.2007 Trojan-PSW.Win32.LdPinch.bkg
McAfee 4970 02.23.2007 no virus found
Microsoft 1.2204 02.25.2007 no virus found
NOD32v2 2080 02.25.2007 no virus found
Norman 5.80.02 02.23.2007 no virus found
Panda 9.0.0.4 02.25.2007 Suspicious file
Prevx1 V2 02.25.2007 no virus found
Sophos 4.14.0 02.24.2007 no virus found
Sunbelt 2.2.907.0 02.24.2007 VIPRE.Suspicious
Symantec 10 02.25.2007 no virus found
TheHacker 6.1.6.064 02.25.2007 Trojan/PSW.LdPinch.bkg
UNA 1.83 02.23.2007 Trojan.PSW.Win32.LdPinch.C807
VBA32 3.11.2 02.24.2007 suspected of Trojan-PSW.Pinch.7 (paranoid heuristics)
VirusBuster 4.3.19:9 02.25.2007 no virus found

Aditional Information
File size: 32471 bytes
MD5: 2a2be2bafab184dfd68c0f7eeb42a95b
SHA1: dd08f991bbdc67260718cea698c9e412b40789d3
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that
are deemed suspicious through heuristics.

[Kuzz]

Симантек сегодня "порадовал":
Complete scanning result of "autoexec.ex_", received in VirusTotal at 02.26.2007, 16:33:11 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 02.26.2007 HEUR/Crypted
Authentium 4.93.8 02.25.2007 Possibly a new variant of W32/HLLI-MewOrleans-based!Maximus
Avast 4.7.936.0 02.26.2007 no virus found
AVG 386 02.25.2007 no virus found
BitDefender 7.2 02.26.2007 no virus found
CAT-QuickHeal 9.00 02.26.2007 W32.Brontok.Q
ClamAV devel-20060426 02.26.2007 no virus found
DrWeb 4.33 02.26.2007 no virus found
eSafe 7.0.14.0 02.25.2007 suspicious Trojan/Worm
eTrust-Vet 30.4.3434 02.26.2007 no virus found
Ewido 4.0 02.26.2007 no virus found
FileAdvisor 1 02.26.2007 no virus found
Fortinet 2.85.0.0 02.26.2007 no virus found
F-Prot 4.3.1.45 02.26.2007 W32/Threat-HLLIM-based!Maximus
F-Secure 6.70.13030.0 02.26.2007 no virus found
Ikarus T3.1.1.3 02.26.2007 Backdoor.Win32.Ciadoor.N
Kaspersky 4.0.2.24 02.26.2007 no virus found
McAfee 4970 02.23.2007 no virus found
Microsoft 1.2204 02.26.2007 no virus found
NOD32v2 2081 02.26.2007 no virus found
Norman 5.80.02 02.26.2007 W32/Suspicious_M.gen
Panda 9.0.0.4 02.26.2007 Suspicious file
Prevx1 V2 02.26.2007 no virus found
Sophos 4.14.0 02.24.2007 Mal/Basine-A
Sunbelt 2.2.907.0 02.24.2007 VIPRE.Suspicious
Symantec 10 02.26.2007 no virus found
TheHacker 6.1.6.065 02.26.2007 no virus found
UNA 1.83 02.23.2007 no virus found
VBA32 3.11.2 02.25.2007 MalwareScope.Trojan-PSW.Pinch.6
VirusBuster 4.3.19:9 02.26.2007 novirus: Packed/MEW

Aditional Information
File size: 23884 bytes
MD5: f5d74a9696f24aeafdcde3e09a6eca24
SHA1: 6ad1bad5b2165a3eab1b440fe27273277131ab88
packers: MEW

два раза:

Complete scanning result of "avz00001.dta", received in VirusTotal at 02.26.2007, 16:36:59 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 02.26.2007 TR/Agent.36441
Authentium 4.93.8 02.25.2007 no virus found
Avast 4.7.936.0 02.26.2007 no virus found
AVG 386 02.25.2007 Downloader.Generic3.QQD
BitDefender 7.2 02.26.2007 Trojan.AVKiller.Agent.D
CAT-QuickHeal 9.00 02.26.2007 TrojanDownloader.Agent.awf
ClamAV devel-20060426 02.26.2007 no virus found
DrWeb 4.33 02.26.2007 Trojan.DownLoader.18943
eSafe 7.0.14.0 02.26.2007 Win32.Agent.awf
eTrust-Vet 30.4.3434 02.26.2007 no virus found
Ewido 4.0 02.26.2007 Downloader.Agent.awf
FileAdvisor 1 02.26.2007 no virus found
Fortinet 2.85.0.0 02.26.2007 W32/Tibs.gen
F-Prot 4.3.1.45 02.26.2007 no virus found
F-Secure 6.70.13030.0 02.26.2007 Trojan-Downloader.Win32.Agent.awf
Ikarus T3.1.1.3 02.26.2007 Trojan-Downloader.Win32.Agent.awf
Kaspersky 4.0.2.24 02.26.2007 Trojan-Downloader.Win32.Agent.awf
McAfee 4970 02.23.2007 no virus found
Microsoft 1.2204 02.26.2007 no virus found
NOD32v2 2081 02.26.2007 probably a variant of Win32/TrojanDownloader.Agent.AWF
Norman 5.80.02 02.26.2007 W32/DLoader.CBHX
Panda 9.0.0.4 02.26.2007 Trj/Lozyt.A
Prevx1 V2 02.26.2007 no virus found
Sophos 4.14.0 02.24.2007 no virus found
Sunbelt 2.2.907.0 02.24.2007 no virus found
Symantec 10 02.26.2007 no virus found
TheHacker 6.1.6.065 02.26.2007 Trojan/FakeMsg
UNA 1.83 02.23.2007 TrojanDownloader.Win32.Agent.241C
VBA32 3.11.2 02.25.2007 Trojan-Downloader.Win32.Agent.awf
VirusBuster 4.3.19:9 02.26.2007 Trojan.DL.Agent.SJJ

Aditional Information
File size: 37141 bytes
MD5: 56fa464c5d410675b72089f95f0690d1
SHA1: ea67d4be4d72ef7d18d57609f331fca774fc0522
packers: UPX
packers: UPX
packers: UPX

в результате чего скоропостижно скончался...

[Shu_b]

t=8163
Complete scanning result of "usr32.dll", received in VirusTotal at 02.27.2007, 09:19:16 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 02.27.2007 TR/Agent.AKR.8
Authentium 4.93.8 02.26.2007 no virus found
Avast 4.7.936.0 02.26.2007 Win32:Agent-EQR
AVG 386 02.25.2007 Downloader.Agent.IOY
BitDefender 7.2 02.27.2007 Trojan.Agent.AKR
CAT-QuickHeal 9.00 02.26.2007 no virus found
ClamAV devel-20060426 02.27.2007 no virus found
DrWeb 4.33 02.27.2007 no virus found
eSafe 7.0.14.0 02.27.2007 suspicious Trojan/Worm
eTrust-Vet 30.4.3438 02.27.2007 no virus found
Ewido 4.0 02.26.2007 Downloader.Agent.bga
FileAdvisor 1 02.27.2007 no virus found
Fortinet 2.85.0.0 02.27.2007 suspicious
F-Prot 4.3.1.45 02.26.2007 no virus found
F-Secure 6.70.13030.0 02.27.2007 Trojan-Downloader.Win32.Agent.bga
Ikarus T3.1.1.3 02.27.2007 no virus found
Kaspersky 4.0.2.24 02.27.2007 Trojan-Downloader.Win32.Agent.bga
McAfee 4971 02.26.2007 no virus found
Microsoft 1.2204 02.27.2007 no virus found
NOD32v2 2082 02.26.2007 no virus found
Norman 5.80.02 02.26.2007 W32/DLoader.CAFT
Panda 9.0.0.4 02.27.2007 Suspicious file
Prevx1 V2 02.27.2007 no virus found
Sophos 4.14.0 02.26.2007 Troj/Agent-ECG
Sunbelt 2.2.907.0 02.24.2007 VIPRE.Suspicious
Symantec 10 02.27.2007 no virus found
TheHacker 6.1.6.065 02.26.2007 no virus found
UNA 1.83 02.26.2007 TrojanDownloader.Win32.Agent.F8B6
VBA32 3.11.2 02.26.2007 Trojan-Downloader.Win32.Agent.bga
VirusBuster 4.3.19:9 02.26.2007 novirus:Packed/Upack

Aditional Information
File size: 4995 bytes
MD5: af7fd47b25284e9cda67aa6685ecaa61
SHA1: 0c0efd4dba99b2ab07ca17534e9eca01833561ef
packers: Upack

[Winsent]

Complete scanning result of "britney.rar", received in VirusTotal at 02.27.2007, 11:50:24 (CET).


Antivirus Version Update Result

AntiVir 7.3.1.38 02.27.2007 TR/PSW.LdPinch.boi
Authentium 4.93.8 02.26.2007 no virus found
Avast 4.7.936.0 02.26.2007 no virus found
AVG 386 02.25.2007 no virus found
BitDefender 7.2 02.27.2007 no virus found
CAT-QuickHeal 9.00 02.26.2007 no virus found
ClamAV devel-20060426 02.27.2007 no virus found
DrWeb 4.33 02.27.2007 no virus found
eSafe 7.0.14.0 02.27.2007 no virus found
eTrust-Vet 30.4.3438 02.27.2007 no virus found
Ewido 4.0 02.27.2007 Downloader.Nurech.aa
FileAdvisor 1 02.27.2007 no virus found
Fortinet 2.85.0.0 02.27.2007 no virus found
F-Prot 4.3.1.45 02.26.2007 no virus found
F-Secure 6.70.13030.0 02.27.2007 Trojan-PSW.Win32.LdPinch.boi
Ikarus T3.1.1.3 02.27.2007 MalwareScope.Trojan-Spy.BZub.1
Kaspersky 4.0.2.24 02.27.2007 Trojan-PSW.Win32.LdPinch.boi
McAfee 4971 02.26.2007 MultiDropper-JD
Microsoft 1.2204 02.27.2007 no virus found
NOD32v2 2082 02.26.2007 no virus found
Norman 5.80.02 02.27.2007 no virus found
Panda 9.0.0.4 02.27.2007 no virus found
Prevx1 V2 02.27.2007 no virus found
Sophos 4.14.0 02.26.2007 Mal/Basine-A
Sunbelt 2.2.907.0 02.24.2007 no virus found
Symantec 10 02.27.2007 no virus found
TheHacker 6.1.6.065 02.26.2007 no virus found
UNA 1.83 02.26.2007 no virus found
VBA32 3.11.2 02.26.2007 suspected of Embedded.MalwareScope.Trojan-PSW.Pinch.26
VirusBuster 4.3.19:9 02.26.2007 novirusacked/FSG

Aditional Information
File size: 44179 bytes
MD5: c4b52934d5622deea62edd8ccab5c048
SHA1: 9d683933f7de07c9e2e595629c034d0a5326ee5d
packers: BINARYRES, FSG

[Winsent]

Complete scanning result of "Paris_Hilton.scr", received in VirusTotal at 02.27.2007, 18:12:38 (CET).


Antivirus Version Update Result

AntiVir 7.3.1.38 02.27.2007 TR/PSW.LdPinch.bog
Authentium 4.93.8 02.26.2007 no virus found
Avast 4.7.936.0 02.27.2007 no virus found
AVG 7.5.0.441 02.27.2007 no virus found
BitDefender 7.2 02.27.2007 no virus found
CAT-QuickHeal 9.00 02.27.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.27.2007 no virus found
DrWeb 4.33 02.27.2007 Trojan.PWS.LDPinch.1407
eSafe 7.0.14.0 02.27.2007 Suspicious Trojan/Worm
eTrust-Vet 30.4.3438 02.27.2007 no virus found
Ewido 4.0 02.27.2007 Trojan.LdPinch.bog
FileAdvisor 1 02.27.2007 no virus found
Fortinet 2.85.0.0 02.27.2007 PossibleThreat
F-Prot 4.3.1.45 02.26.2007 no virus found
F-Secure 6.70.13030.0 02.27.2007 Trojan-PSW.Win32.LdPinch.bog
Ikarus T3.1.1.3 02.27.2007 no virus found
Kaspersky 4.0.2.24 02.27.2007 Trojan-PSW.Win32.LdPinch.bog
McAfee 4971 02.26.2007 New Poly Win32
Microsoft 1.2204 02.27.2007 no virus found
NOD32v2 2083 02.27.2007 no virus found
Norman 5.80.02 02.27.2007 no virus found
Panda 9.0.0.4 02.27.2007 Suspicious file
Prevx1 V2 02.27.2007 no virus found
Sophos 4.14.0 02.26.2007 no virus found
Sunbelt 2.2.907.0 02.24.2007 VIPRE.Suspicious
Symantec 10 02.27.2007 Infostealer
TheHacker 6.1.6.065 02.26.2007 no virus found
UNA 1.83 02.26.2007 no virus found
VBA32 3.11.2 02.26.2007 no virus found
VirusBuster 4.3.19:9 02.27.2007 no virus found

Aditional Information
File size: 33758 bytes
MD5: 719e2cc705df87c03826468c7797c2f3
SHA1: 16ec93296530819507ace53c2c62efb5d542a84a
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Dandy]

Пришел по ICQ:

Complete scanning result of "ICQUpdate.exe", received in VirusTotal at 02.27.2007, 20:58:03 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 02.27.2007 TR/Crypt.XDR.Gen
Authentium 4.93.8 02.26.2007 no virus found
Avast 4.7.936.0 02.27.2007 no virus found
AVG 7.5.0.441 02.27.2007 no virus found
BitDefender 7.2 02.27.2007 no virus found
CAT-QuickHeal 9.00 02.27.2007 Trojan.Donn.U
ClamAV devel-20060426 02.27.2007 Trojan.Downloader-88
DrWeb 4.33 02.27.2007 no virus found
eSafe 7.0.14.0 02.27.2007 no virus found
eTrust-Vet 30.4.3438 02.27.2007 no virus found
Ewido 4.0 02.27.2007 no virus found
FileAdvisor 1 02.27.2007 no virus found
Fortinet 2.85.0.0 02.27.2007 suspicious
F-Prot 4.3.1.45 02.26.2007 no virus found
F-Secure 6.70.13030.0 02.27.2007 no virus found
Ikarus T3.1.1.3 02.27.2007 no virus found
Kaspersky 4.0.2.24 02.27.2007 no virus found
McAfee 4972 02.27.2007 no virus found
Microsoft 1.2204 02.27.2007 no virus found
NOD32v2 2083 02.27.2007 no virus found
Norman 5.80.02 02.27.2007 no virus found
Panda 9.0.0.4 02.27.2007 Suspicious file
Prevx1 V2 02.27.2007 no virus found
Sophos 4.14.0 02.26.2007 no virus found
Sunbelt 2.2.907.0 02.24.2007 no virus found
Symantec 10 02.27.2007 no virus found
TheHacker 6.1.6.065 02.26.2007 no virus found
UNA 1.83 02.27.2007 no virus found
VBA32 3.11.2 02.26.2007 suspected of Trojan-PSW.Pinch.23 (paranoid heuristics)
VirusBuster 4.3.19:9 02.27.2007 no virus found

Aditional Information
File size: 60891 bytes
MD5: dbf567de5884e8c18dadc15f02d9680a
SHA1: 70b5869c48469f34673142309ce84e0c035d6c1d
packers: ASPACK
packers: Aspack

[Geser]

Complete scanning result of "avz00001.dta", received in VirusTotal at 02.28.2007, 18:43:38 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 02.28.2007 TR/PSW.Small.BS.52
Authentium 4.93.8 02.27.2007 could be infected with an unknown virus
Avast 4.7.936.0 02.28.2007 no virus found
AVG 7.5.0.447 02.28.2007 PSW.Generic3.ESQ
BitDefender 7.2 02.28.2007 Trojan.PWS.Pinch.A
CAT-QuickHeal 9.00 02.28.2007 TrojanPSW.Small.bs
ClamAV devel-20060426 02.28.2007 no virus found
DrWeb 4.33 02.28.2007 Trojan.PWS.Haiuy
eSafe 7.0.14.0 02.28.2007 Win32.Polipos.sus
eTrust-Vet 30.6.3441 02.28.2007 Win32/Ursnif!generic
Ewido 4.0 02.28.2007 Trojan.Small.bs
FileAdvisor 1 02.28.2007 no virus found
Fortinet 2.85.0.0 02.28.2007 suspicious
F-Prot 4.3.1.45 02.28.2007 no virus found
F-Secure 6.70.13030.0 02.28.2007 Trojan-PSW.Win32.Small.bs
Ikarus T3.1.1.3 02.28.2007 Trojan-Downloader.Win32.Zlob.and
Kaspersky 4.0.2.24 02.28.2007 Trojan-PSW.Win32.Small.bs
McAfee 4972 02.27.2007 New Malware.aj
Microsoft 1.2204 02.28.2007 PWS:Win32/Agent.BC
NOD32v2 2085 02.28.2007 no virus found
Norman 5.80.02 02.28.2007 W32/Smalltroj.ZWV
Panda 9.0.0.4 02.28.2007 Trj/Spyforms.H
Prevx1 V2 02.28.2007 Malware.Trojan.Backdoor.Gen
Sophos 4.14.0 02.26.2007 Mal/Behav-027
Sunbelt 2.2.907.0 02.24.2007 VIPRE.Suspicious
Symantec 10 02.28.2007 Infostealer.Snifula.B
TheHacker 6.1.6.065 02.26.2007 no virus found
UNA 1.83 02.27.2007 Win32.virus
VBA32 3.11.2 02.27.2007 MalwareScope.Trojan-PSW.Pinch.1
VirusBuster 4.3.19:9 02.28.2007 Packed/Upack

[Winsent]

Complete scanning result of "fail.exe", received in VirusTotal at 02.28.2007, 20:19:51 (CET).


Antivirus Version Update Result

AntiVir 7.3.1.38 02.28.2007 TR/Crypt.XPACK.Gen
Authentium 4.93.8 02.27.2007 no virus found
Avast 4.7.936.0 02.28.2007 no virus found
AVG 7.5.0.447 02.28.2007 no virus found
BitDefender 7.2 02.28.2007 no virus found
CAT-QuickHeal 9.00 02.28.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 02.28.2007 no virus found
DrWeb 4.33 02.28.2007 no virus found
eSafe 7.0.14.0 02.28.2007 no virus found
eTrust-Vet 30.6.3441 02.28.2007 no virus found
Ewido 4.0 02.28.2007 no virus found
FileAdvisor 1 02.28.2007 no virus found
Fortinet 2.85.0.0 02.28.2007 suspicious
F-Prot 4.3.1.45 02.28.2007 no virus found
F-Secure 6.70.13030.0 02.28.2007 W32/Malware
Ikarus T3.1.1.3 02.28.2007 no virus found
Kaspersky 4.0.2.24 02.28.2007 no virus found
McAfee 4973 02.28.2007 no virus found
Microsoft 1.2204 02.28.2007 no virus found
NOD32v2 2085 02.28.2007 probably a variant of Win32/PSW.LdPinch
Norman 5.80.02 02.28.2007 W32/Malware
Panda 9.0.0.4 02.28.2007 Suspicious file
Prevx1 V2 02.28.2007 no virus found
Sophos 4.14.0 02.26.2007 no virus found
Sunbelt 2.2.907.0 02.24.2007 VIPRE.Suspicious
Symantec 10 02.28.2007 no virus found
TheHacker 6.1.6.065 02.26.2007 no virus found
UNA 1.83 02.27.2007 no virus found
VBA32 3.11.2 02.27.2007 no virus found
VirusBuster 4.3.19:9 02.28.2007 no virus found

Aditional Information
File size: 52190 bytes
MD5: 838e6db101a1774b6b8079d2d4474b74
SHA1: 779078906b99ab7502b536f777b87cb45663790b
norman sandbox: [ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: [email protected] - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* **Locates window "NULL [class AVP.AlertDialog]" on desktop.
* **Locates window "NULL [class AVP.AhAppChangedDialog]" on desktop.
* **Locates window "NULL [class AVP.AhLearnDialog]" on desktop.
* **Locates window "NULL [class AVP.Product_Notification]" on desktop.

[ Network ]
* Bypass installed firewall.

Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

опять пинчи...

Complete scanning result of "britney1._xe", received in VirusTotal at 02.28.2007, 07:37:14 (CET).

Повтор...

[Shu] Спасибо, убрал.

[Winsent]

Complete scanning result of "Sex_Uniform.scr", received in VirusTotal at 03.01.2007, 05:18:35 (CET).


Antivirus Version Update Result

AntiVir 7.3.1.38 02.28.2007 TR/Crypt.XPACK.Gen
Authentium 4.93.8 02.28.2007 no virus found
Avast 4.7.936.0 02.28.2007 no virus found
AVG 7.5.0.447 02.28.2007 no virus found
BitDefender 7.2 03.01.2007 no virus found
CAT-QuickHeal 9.00 02.28.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.01.2007 no virus found
DrWeb 4.33 02.28.2007 Trojan.PWS.LDPinch.1417
eSafe 7.0.14.0 02.28.2007 Suspicious Trojan/Worm
eTrust-Vet 30.6.3443 02.28.2007 no virus found
Ewido 4.0 02.28.2007 no virus found
FileAdvisor 1 03.01.2007 no virus found
Fortinet 2.85.0.0 02.28.2007 suspicious
F-Prot 4.3.1.45 02.28.2007 no virus found
F-Secure 6.70.13030.0 02.28.2007 Trojan-PSW.Win32.LdPinch.bex
Ikarus T3.1.1.3 02.28.2007 no virus found
Kaspersky 4.0.2.24 03.01.2007 Trojan-PSW.Win32.LdPinch.bex
McAfee 4973 02.28.2007 New Poly Win32
Microsoft 1.2204 03.01.2007 no virus found
NOD32v2 2085 02.28.2007 a variant of Win32/PSW.LdPinch.NCB
Norman 5.80.02 02.28.2007 no virus found
Panda 9.0.0.4 02.28.2007 Suspicious file
Prevx1 V2 03.01.2007 no virus found
Sophos 4.14.0 03.01.2007 no virus found
Sunbelt 2.2.907.0 03.01.2007 VIPRE.Suspicious
Symantec 10 03.01.2007 Bloodhound.W32.1
TheHacker 6.1.6.066 03.01.2007 no virus found
UNA 1.83 02.28.2007 no virus found
VBA32 3.11.2 02.28.2007 no virus found
VirusBuster 4.3.19:9 02.28.2007 no virus found

Aditional Information
File size: 24542 bytes
MD5: 8733c4c4e8b1c8e30294f0ca1bbc3d65
SHA1: 2c86ad5be6de42e359741af72df8f111592884b5
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Erekle]

STATUS: FINISHEDComplete scanning result of "svcipa.exe", received in VirusTotal at 03.01.2007, 05:23:48 (CET).

Antivirus Version Update Result

AntiVir 7.3.1.38 02.28.2007 TR/Agent.36441
Authentium 4.93.8 02.28.2007 is a security risk or a "backdoor" program
Avast 4.7.936.0 02.28.2007 no virus found
AVG 7.5.0.447 02.28.2007 Downloader.Generic3.QQD
BitDefender 7.2 03.01.2007 Trojan.AVKiller.Agent.D
CAT-QuickHeal 9.00 02.28.2007 TrojanDownloader.Agent.awf
ClamAV devel-20060426 03.01.2007 no virus found
DrWeb 4.33 02.28.2007 Trojan.DownLoader.18943
eSafe 7.0.14.0 02.28.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3443 02.28.2007 Win32/Pidyay.A
Ewido 4.0 02.28.2007 Downloader.Agent.awf
FileAdvisor 1 03.01.2007 no virus found
Fortinet 2.85.0.0 02.28.2007 W32/Tibs.gen
F-Prot 4.3.1.45 02.28.2007 W32/Downloader
F-Secure 6.70.13030.0 02.28.2007 Trojan-Downloader.Win32.Agent.awf
Ikarus T3.1.1.3 02.28.2007 no virus found
Kaspersky 4.0.2.24 03.01.2007 Trojan-Downloader.Win32.Agent.awf
McAfee 4973 02.28.2007 no virus found
Microsoft 1.2204 03.01.2007 Trojan:Win32/Zonebac.A
NOD32v2 2085 02.28.2007 probably a variant of Win32/TrojanDownloader.Agent.AWF
Norman 5.80.02 02.28.2007 W32/DLoader.CBHX
Panda 9.0.0.4 02.28.2007 Trj/Lozyt.A
Prevx1 V2 03.01.2007 no virus found
Sophos 4.14.0 03.01.2007 Troj/Agent-ECV
Sunbelt 2.2.907.0 03.01.2007 no virus found
Symantec 10 03.01.2007 Trojan.Zonebac (а имеющийся "на страже" не замечает, хотя файл в памяти)
TheHacker 6.1.6.066 03.01.2007 Trojan/FakeMsg
UNA 1.83 02.28.2007 TrojanDownloader.Win32.Agent.241C
VBA32 3.11.2 02.28.2007 Trojan-Downloader.Win32.Agent.awf
VirusBuster 4.3.19:9 02.28.2007 Trojan.DL.Agent.SJJ

Aditional Information
File size: 36736 bytes
MD5: 60159534ec7ce9da0b55c98895ae3e00
SHA1: e54abed2d30ab4451505a06ddb56994ca248d291
packers: UPX
packers: UPX

[anton_dr]

Из темы http://virusinfo.info/showthread.php?t=8200

Complete scanning result of "avz00003.dta", received in VirusTotal at 03.01.2007, 18:03:46 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 03.01.2007 TR/Spy.Vundo.AF
Authentium 4.93.8 02.28.2007 no virus found
Avast 4.7.936.0 03.01.2007 no virus found
AVG 7.5.0.447 03.01.2007 Downloader.Zlob.FC
BitDefender 7.2 03.01.2007 MemScan:Trojan.Vundo.AF
CAT-QuickHeal 9.00 03.01.2007 no virus found
ClamAV devel-20060426 03.01.2007 no virus found
DrWeb 4.33 03.01.2007 Trojan.Virtumod
eSafe 7.0.14.0 02.28.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3444 03.01.2007 no virus found
Ewido 4.0 03.01.2007 no virus found
FileAdvisor 1 03.01.2007 no virus found
Fortinet 2.85.0.0 03.01.2007 suspicious
F-Prot 4.3.1.45 02.28.2007 no virus found
F-Secure 6.70.13030.0 03.01.2007 no virus found
Ikarus T3.1.1.3 03.01.2007 MemScanTrojan.Vundo.AF
Kaspersky 4.0.2.24 03.01.2007 no virus found
McAfee 4973 02.28.2007 no virus found
Microsoft 1.2204 03.01.2007 no virus found
NOD32v2 2087 03.01.2007 probably a variant of Win32/Adware.Virtumonde.O
Norman 5.80.02 03.01.2007 no virus found
Panda 9.0.0.4 03.01.2007 Suspicious file
Prevx1 V2 03.01.2007 no virus found
Sophos 4.14.0 03.01.2007 Virtumundo
Sunbelt 2.2.907.0 03.01.2007 no virus found
Symantec 10 03.01.2007 Trojan.Vundo
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 02.28.2007 no virus found
VBA32 3.11.2 02.28.2007 no virus found
VirusBuster 4.3.19:9 03.01.2007 Trojan.DL.Vundo.Gen!Pac.6

Aditional Information
File size: 281652 bytes
MD5: a20cafe5da9b51d58a5d7f3384cd23fc
SHA1: 88795b7dbb9d17a04c7aa994212561e5332ee535

[anton_dr]

Из темы http://virusinfo.info/showthread.php?t=8200

Complete scanning result of "livemsgr.exe", received in VirusTotal at 03.01.2007, 19:56:27 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 03.01.2007 Worm/Sdbot.223232.3
Authentium 4.93.8 03.01.2007 no virus found
Avast 4.7.936.0 03.01.2007 no virus found
AVG 7.5.0.447 03.01.2007 Generic3.FZL
BitDefender 7.2 03.01.2007 DeepScan:Generic.Sdbot.2A3939A7
CAT-QuickHeal 9.00 03.01.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.01.2007 no virus found
DrWeb 4.33 03.01.2007 no virus found
eSafe 7.0.14.0 02.28.2007 no virus found
eTrust-Vet 30.6.3444 03.01.2007 no virus found
Ewido 4.0 03.01.2007 no virus found
FileAdvisor 1 03.01.2007 no virus found
Fortinet 2.85.0.0 03.01.2007 suspicious
F-Prot 4.3.1.45 02.28.2007 no virus found
F-Secure 6.70.13030.0 03.01.2007 no virus found
Ikarus T3.1.1.3 03.01.2007 no virus found
Kaspersky 4.0.2.24 03.01.2007 no virus found
McAfee 4974 03.01.2007 no virus found
Microsoft 1.2204 03.01.2007 no virus found
NOD32v2 2087 03.01.2007 probably unknown NewHeur_PE virus
Norman 5.80.02 03.01.2007 no virus found
Panda 9.0.0.4 03.01.2007 W32/Gaobot.PGR.worm
Prevx1 V2 03.01.2007 Malware.Trojan.Backdoor.Gen
Sophos 4.14.0 03.01.2007 no virus found
Sunbelt 2.2.907.0 03.01.2007 VIPRE.Suspicious
Symantec 10 03.01.2007 no virus found
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.01.2007 no virus found
VBA32 3.11.2 02.28.2007 suspected of Backdoor.Hupigon.14 (paranoid heuristics)
VirusBuster 4.3.19:9 03.01.2007 no virus found

Aditional Information
File size: 226304 bytes
MD5: 70c7860b65f1f5119858ce4f39b28e09
SHA1: 7bf42148ddc7dc42c45f7e751c222f5f4ef1ce76
packers: PE-Armor
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=51f679492710
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[silky-one]

Привет всем, выловила тут очередной, уже третий за последний год вирус. avast установленый по случаю поимки, ничего не отдетектил (нашёл правда в system32 пару библиотек давно удалённых троянов, брутфорс и т.п. ). Это кстати камень в огород тому, кто высказывался тут в том духе что антивирус на компьютере должен быть обязательно, пару разделов назад. За сим прошу откланятся. Спасибо что вы есть.

Complete scanning result of "itunesff.exe", received in VirusTotal at 03.02.2007, 01:12:32 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 03.01.2007 DIAL/Generic
Authentium 4.93.8 03.01.2007 no virus found
Avast 4.7.936.0 03.01.2007 no virus found
AVG 7.5.0.447 03.01.2007 Potentially harmful program Dialer.DXX
BitDefender 7.2 03.02.2007 no virus found
CAT-QuickHeal 9.00 03.01.2007 no virus found
ClamAV devel-20060426 03.02.2007 no virus found
DrWeb 4.33 03.01.2007 no virus found
eSafe 7.0.14.0 02.28.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3446 03.02.2007 no virus found
Ewido 4.0 03.01.2007 Dialer.Delf.i
FileAdvisor 1 03.02.2007 no virus found
Fortinet 2.85.0.0 03.01.2007 Dial/Delf
F-Prot 4.3.1.45 03.01.2007 no virus found
F-Secure 6.70.13030.0 03.01.2007 W32/Dialer.BECS
Ikarus T3.1.1.3 03.01.2007 not-a-virusialer.Win32.Delf.i
Kaspersky 4.0.2.24 03.02.2007 not-a-virusialer.Win32.Delf.i
McAfee 4974 03.01.2007 no virus found
Microsoft 1.2204 03.01.2007 no virus found
NOD32v2 2087 03.01.2007 no virus found
Norman 5.80.02 03.01.2007 W32/Dialer.BECS
Panda 9.0.0.4 03.01.2007 Suspicious file
Prevx1 V2 03.02.2007 no virus found
Sophos 4.14.0 03.01.2007 no virus found
Sunbelt 2.2.907.0 03.01.2007 no virus found
Symantec 10 03.02.2007 no virus found
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.01.2007 Dialer.Delf.F3C0
VBA32 3.11.2 03.01.2007 Dialer.Win32.Delf.i
VirusBuster 4.3.19:9 03.01.2007 no virus found

Aditional Information
File size: 29696 bytes
MD5: 1ecb1da7d037d1fce4037450c1b15a7d
SHA1: 55134fa1073412423ebc46d173b3ea18caa1af49
packers: UPX

[Erekle]

STATUS: FINISHEDComplete scanning result of "counter_1_.htm", received in VirusTotal at 03.01.2007, 19:35:10 (CET).

Antivirus Version Update Result

AntiVir 7.3.1.38 03.01.2007 no virus found
Authentium 4.93.8 03.01.2007 no virus found
Avast 4.7.936.0 03.01.2007 no virus found
AVG 7.5.0.447 03.01.2007 no virus found
BitDefender 7.2 03.01.2007 no virus found
CAT-QuickHeal 9.00 03.01.2007 no virus found
ClamAV devel-20060426 03.01.2007 no virus found
DrWeb 4.33 03.01.2007 Trojan.DownLoader.18376
eSafe 7.0.14.0 02.28.2007 Win32.VBS.Agent.n
eTrust-Vet 30.6.3444 03.01.2007 VBS/Petch
Ewido 4.0 03.01.2007 Downloader.Agent.n
FileAdvisor 1 03.01.2007 no virus found
Fortinet 2.85.0.0 03.01.2007 VBS/Agent.N!tr.dldr
F-Prot 4.3.1.45 02.28.2007 no virus found
F-Secure 6.70.13030.0 03.01.2007 Trojan-Downloader.VBS.Agent.n
Ikarus T3.1.1.3 03.01.2007 Trojan-Downloader.VBS.Agent.n
Kaspersky 4.0.2.24 03.01.2007 Trojan-Downloader.VBS.Agent.n
McAfee 4974 03.01.2007 no virus found
Microsoft 1.2204 03.01.2007 TrojanDownloader:VBS/Agent.B
NOD32v2 2087 03.01.2007 no virus found
Norman 5.80.02 03.01.2007 no virus found
Panda 9.0.0.4 03.01.2007 Trj/Downloader.NBT
Prevx1 V2 03.01.2007 no virus found
Sophos 4.14.0 03.01.2007 no virus found
Sunbelt 2.2.907.0 03.01.2007 no virus found
Symantec 10 03.01.2007 Downloader
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.01.2007 no virus found
VBA32 3.11.2 02.28.2007 no virus found
VirusBuster 4.3.19:9 03.01.2007 JS.Psyme.CT

Aditional Information
File size: 1899 bytes
MD5: e5d265c972c3001345e41b1d83ffeba0
SHA1: 65b1e6b635db74b1012d8b21b798bb47ff50b70b
packers: ENCODED SCRIPT

--------------------------
P.S. Погрешил на домашний Симантек в предыдущем сообщении. Он всё прекрасно видит, - если восстановить повторной (поверх) инсталляцией функции, покореженные упомянутым там трояном.

[Синауридзе Александр]

Complete scanning result of "___1059", received in VirusTotal at 03.03.2007, 09:44:27 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 03.02.2007 no virus found
Authentium 4.93.8 03.02.2007 no virus found
Avast 4.7.936.0 03.02.2007 Win32:Tibs-AFH
AVG 7.5.0.447 03.02.2007 no virus found
BitDefender 7.2 03.03.2007 no virus found
CAT-QuickHeal 9.00 03.02.2007 no virus found
ClamAV devel-20060426 03.03.2007 no virus found
DrWeb 4.33 03.02.2007 no virus found
eSafe 7.0.14.0 02.28.2007 no virus found
eTrust-Vet 30.6.3449 03.03.2007 no virus found
Ewido 4.0 03.02.2007 no virus found
FileAdvisor 1 03.03.2007 no virus found
Fortinet 2.85.0.0 03.03.2007 no virus found
F-Prot 4.3.1.45 03.03.2007 no virus found
F-Secure 6.70.13030.0 03.03.2007 Trojan-Downloader.Win32.Small.dam
Ikarus T3.1.1.3 03.03.2007 no virus found
Kaspersky 4.0.2.24 03.03.2007 Trojan-Downloader.Win32.Small.dam
McAfee 4975 03.02.2007 no virus found
Microsoft 1.2204 03.03.2007 no virus found
NOD32v2 2091 03.03.2007 Win32/Fuclip.A
Norman 5.80.02 03.02.2007 no virus found
Panda 9.0.0.4 03.03.2007 no virus found
Prevx1 V2 03.03.2007 no virus found
Sophos 4.14.0 03.03.2007 Troj/Small-DOR
Sunbelt 2.2.907.0 03.01.2007 no virus found
Symantec 10 03.03.2007 no virus found
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.02.2007 no virus found
VBA32 3.11.2 03.03.2007 OScope.Worm.GSDA.Nuwar
VirusBuster 4.3.19:9 03.02.2007 Trojan.DL.Tibs.Gen!Pac13

Aditional Information
File size: 839627 bytes
MD5: 6a2dadad633bcb7ec825f52ea2cc9381
SHA1: efb11f4fb4ec7e311d0b34481ec4f471470cb746

[Dandy]

File "serv.exe" received on 03.03.2007 at 11:49:20 (CET) is being scanned by VirusTotal in this moment. Results will be shown as they're generated.

Antivirus Version Update Result
AntiVir 7.3.1.38 03.02.2007 TR/Crypt.XDR.Gen
Authentium 4.93.8 03.02.2007 no virus found
Avast 4.7.936.0 03.03.2007 Win32:Warezov-BDI
AVG 7.5.0.447 03.03.2007 I-Worm/Stration
BitDefender 7.2 03.03.2007 DeepScan:Generic.Stration.12101348
CAT-QuickHeal 9.00 03.02.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.03.2007 no virus found
DrWeb 4.33 03.03.2007 no virus found
eSafe 7.0.14.0 02.28.2007 Suspicious Trojan/Worm
eTrust-Vet 30.6.3449 03.03.2007 no virus found
Ewido 4.0 03.03.2007 no virus found
FileAdvisor 1 03.03.2007 no virus found
Fortinet 2.85.0.0 03.03.2007 suspicious
F-Prot 4.3.1.45 03.03.2007 no virus found
F-Secure 6.70.13030.0 03.03.2007 no virus found
Ikarus T3.1.1.3 03.03.2007 Backdoor.Win32.Agobot.NQ
Kaspersky 4.0.2.24 03.03.2007 no virus found
McAfee 4975 03.02.2007 New Malware.n
Microsoft 1.2204 03.03.2007 no virus found
NOD32v2 2091 03.03.2007 a variant of Win32/Stration.XJ
Norman 5.80.02 03.02.2007 no virus found
Panda 9.0.0.4 03.03.2007 Suspicious file
Prevx1 V2 03.03.2007 no virus found
Sophos 4.14.0 03.03.2007 Mal/Packer
Sunbelt 2.2.907.0 03.01.2007 VIPRE.Suspicious

Aditional Information
File size: 111190 bytes
MD5: 117e94346705cafc71d233f4a757ad68
SHA1: 18f4de893227db557739bcc1621eac9948053571
packers: Upack
packers: UPACK
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Kuzz]

Complete scanning result of "setup.ex_", received in VirusTotal at 03.03.2007, 13:08:36 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 03.02.2007 no virus found
Authentium 4.93.8 03.02.2007 no virus found
Avast 4.7.936.0 03.03.2007 no virus found
AVG 7.5.0.447 03.03.2007 no virus found
BitDefender 7.2 03.03.2007 Trojan.Zlob.Y
CAT-QuickHeal 9.00 03.02.2007 no virus found
ClamAV devel-20060426 03.03.2007 no virus found
DrWeb 4.33 03.03.2007 no virus found
eSafe 7.0.14.0 02.28.2007 no virus found
eTrust-Vet 30.6.3449 03.03.2007 no virus found
Ewido 4.0 03.03.2007 no virus found
FileAdvisor 1 03.03.2007 no virus found
Fortinet 2.85.0.0 03.03.2007 suspicious
F-Prot 4.3.1.45 03.03.2007 no virus found
F-Secure 6.70.13030.0 03.03.2007 Trojan-Downloader.Win32.Zlob.bpl
Ikarus T3.1.1.3 03.03.2007 no virus found
Kaspersky 4.0.2.24 03.03.2007 Trojan-Downloader.Win32.Zlob.bpl
McAfee 4975 03.02.2007 no virus found
Microsoft 1.2204 03.03.2007 no virus found
NOD32v2 2091 03.03.2007 Win32/TrojanDownloader.Zlob.ASV
Norman 5.80.02 03.02.2007 no virus found
Panda 9.0.0.4 03.03.2007 no virus found
Prevx1 V2 03.03.2007 no virus found
Sophos 4.14.0 03.03.2007 no virus found
Sunbelt 2.2.907.0 03.01.2007 no virus found
Symantec 10 03.03.2007 Trojan.Emcodec
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.02.2007 no virus found
VBA32 3.11.2 03.03.2007 suspected of Downloader.Zlob.16 (paranoid heuristics)
VirusBuster 4.3.19:9 03.02.2007 no virus found

Aditional Information
File size: 72447 bytes
MD5: 3ba70123c97b4a1faa14103052a54e9c
SHA1: c4cb7148e73c2070627ff21888a1371b83502705
packers: BINARYRES, BINARYRES