Исследование антивирусов 5

[Arhimed]

Complete scanning result of "Update-KB5046-x86.exe", received in VirusTotal at 03.03.2007, 19:23:20 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 03.02.2007 TR/Dldr.Stration.Gen
Authentium 4.93.8 03.02.2007 W32/Warezov.gen!W32DL
Avast 4.7.936.0 03.03.2007 Win32:Warezov-BDJ
AVG 7.5.0.447 03.03.2007 I-Worm/Stration.CHC
BitDefender 7.2 03.03.2007 Win32.Warezov.BE@mm
CAT-QuickHeal 9.00 03.02.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.03.2007 Worm.Stration.pac
DrWeb 4.33 03.03.2007 no virus found
eSafe 7.0.14.0 02.28.2007 Win32.Warezov.gen
eTrust-Vet 30.6.3449 03.03.2007 no virus found
Ewido 4.0 03.03.2007 no virus found
FileAdvisor 1 03.03.2007 no virus found
Fortinet 2.85.0.0 03.03.2007 W32/Stration.JQ@mm
F-Prot 4.3.1.45 03.03.2007 W32/Warezov.gen!W32DL
F-Secure 6.70.13030.0 03.03.2007 Email-Worm.Win32.Warezov.jx
Ikarus T3.1.1.3 03.03.2007 Email-Worm.Win32.Warezov.jq
Kaspersky 4.0.2.24 03.03.2007 Email-Worm.Win32.Warezov.jx
McAfee 4975 03.02.2007 New Malware.n
Microsoft 1.2204 03.03.2007 no virus found
NOD32v2 2093 03.03.2007 Win32/Stration.XW
Norman 5.80.02 03.02.2007 W32/Downloader
Panda 9.0.0.4 03.03.2007 Suspicious file
Prevx1 V2 03.03.2007 Trojan.Update-KB
Sophos 4.14.0 03.03.2007 W32/Strati-Gen
Sunbelt 2.2.907.0 03.01.2007 VIPRE.Suspicious
Symantec 10 03.03.2007 W32.Stration@mm
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.02.2007 no virus found
VBA32 3.11.2 03.03.2007 MalwareScope.Worm.Warezov.6
VirusBuster 4.3.19:9 03.03.2007 I-Worm.Opnis.OK

Aditional Information
File size: 17386 bytes
MD5: 12de945d2141bc21ef7a24b74ff4af64
SHA1: 222b5c02117089c354b52b68d2191fc2ac45598a
packers: Upack
packers: UPACK

[Surfer]

Complete scanning result of "Generator_V.3.0.exe", received in VirusTotal at 03.04.2007, 15:40:55 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 03.04.2007 TR/PSW.LdPinch.bod
Authentium 4.93.8 03.04.2007 Possibly a new variant of W32/HLLI-MewOrleans-based!Maximus
Avast 4.7.936.0 03.03.2007 no virus found
AVG 7.5.0.447 03.03.2007 PSW.Ldpinch.EVE
BitDefender 7.2 03.04.2007 Trojan.PWS.LdPinch.BM
CAT-QuickHeal 9.00 03.02.2007 W32.Brontok.Q
ClamAV devel-20060426 03.04.2007 no virus found
DrWeb 4.33 03.04.2007 no virus found
eSafe 7.0.14.0 03.04.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3449 03.03.2007 no virus found
Ewido 4.0 03.04.2007 no virus found
FileAdvisor 1 03.04.2007 no virus found
Fortinet 2.85.0.0 03.04.2007 SPY/LdPinch
F-Prot 4.3.1.45 03.04.2007 W32/Threat-HLLIM-based!Maximus
F-Secure 6.70.13030.0 03.03.2007 Trojan-PSW.Win32.LdPinch.bod
Ikarus T3.1.1.3 03.04.2007 IM-Worm.Win32.Sumom.C
Kaspersky 4.0.2.24 03.04.2007 Trojan-PSW.Win32.LdPinch.bod
McAfee 4975 03.02.2007 no virus found
Microsoft 1.2204 03.04.2007 no virus found
NOD32v2 2093 03.03.2007 a variant of Win32/PSW.LdPinch.BOB
Norman 5.80.02 03.02.2007 W32/Suspicious_M.gen
Panda 9.0.0.4 03.04.2007 no virus found
Prevx1 V2 03.04.2007 no virus found
Sophos 4.14.0 03.03.2007 Mal/Basine-A
Sunbelt 2.2.907.0 03.01.2007 VIPRE.Suspicious
Symantec 10 03.04.2007 no virus found
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.02.2007 no virus found
VBA32 3.11.2 03.03.2007 MalwareScope.Trojan-PSW.Pinch.36
VirusBuster 4.3.19:9 03.03.2007 Packed/MEW

Aditional Information
File size: 23236 bytes
MD5: 26ae0aa99b74c693b08e28b62cbb0e92
SHA1: 38039d3ca4939a00512044c4cd92f492d0f8352b
packers: MEW
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Shu_b]

Complete scanning result of "flash_postcard.zip", received in VirusTotal at 03.04.2007, 13:52:10 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.38 03.02.2007 no virus found
Authentium 4.93.8 03.04.2007 no virus found
Avast 4.7.936.0 03.03.2007 no virus found
AVG 7.5.0.447 03.03.2007 no virus found
BitDefender 7.2 03.04.2007 no virus found
CAT-QuickHeal 9.00 03.02.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.04.2007 no virus found
DrWeb 4.33 03.04.2007 no virus found
eSafe 7.0.14.0 02.28.2007 no virus found
eTrust-Vet 30.6.3449 03.03.2007 no virus found
Ewido 4.0 03.03.2007 no virus found
FileAdvisor 1 03.04.2007 no virus found
Fortinet 2.85.0.0 03.04.2007 suspicious
F-Prot 4.3.1.45 03.04.2007 no virus found
F-Secure 6.70.13030.0 03.03.2007 no virus found
Ikarus T3.1.1.3 03.04.2007 Trojan-PWS.Win32.Delf.JS
Kaspersky 4.0.2.24 03.04.2007 no virus found
McAfee 4975 03.02.2007 no virus found
Microsoft 1.2204 03.04.2007 no virus found
NOD32v2 2093 03.03.2007 no virus found
Norman 5.80.02 03.02.2007 no virus found
Panda 9.0.0.4 03.03.2007 Suspicious file
Prevx1 V2 03.04.2007 no virus found
Sophos 4.14.0 03.03.2007 no virus found
Sunbelt 2.2.907.0 03.01.2007 Elkern.a (v)
Symantec 10 03.04.2007 W32.Mixor.Q@mm
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.02.2007 no virus found
VBA32 3.11.2 03.03.2007 no virus found
VirusBuster 4.3.19:9 03.03.2007 Trojan.DL.Delf.VWJ

Aditional Information
File size: 22760 bytes
MD5: 6827e32a24784c52633daa1a6d9ea77b
SHA1: 352da594b60947ff307a9359df618d48c907a3be
packers: BINARYRES

Complete scanning result of "ibm00002.dll", received in VirusTotal at 03.04.2007, 14:33:40 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.38 03.04.2007 TR/Hijack.Agent.BO
Authentium 4.93.8 03.04.2007 no virus found
Avast 4.7.936.0 03.03.2007 no virus found
AVG 7.5.0.447 03.03.2007 Generic3.FAX
BitDefender 7.2 03.04.2007 no virus found
CAT-QuickHeal 9.00 03.02.2007 no virus found
ClamAV devel-20060426 03.04.2007 no virus found
DrWeb 4.33 03.04.2007 no virus found
eSafe 7.0.14.0 03.04.2007 Suspicious Trojan/Worm
eTrust-Vet 30.6.3449 03.03.2007 no virus found
Ewido 4.0 03.03.2007 no virus found
FileAdvisor 1 03.04.2007 no virus found
Fortinet 2.85.0.0 03.04.2007 suspicious
F-Prot 4.3.1.45 03.04.2007 no virus found
F-Secure 6.70.13030.0 03.03.2007 no virus found
Ikarus T3.1.1.3 03.04.2007 no virus found
Kaspersky 4.0.2.24 03.04.2007 Trojan-PSW.Win32.Sinowal.co
McAfee 4975 03.02.2007 no virus found
Microsoft 1.2204 03.04.2007 no virus found
NOD32v2 2093 03.03.2007 no virus found
Norman 5.80.02 03.02.2007 no virus found
Panda 9.0.0.4 03.04.2007 Suspicious file
Sophos 4.14.0 03.03.2007 no virus found
Sunbelt 2.2.907.0 03.01.2007 no virus found
Symantec 10 03.04.2007 no virus found
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.02.2007 Trojan.PSW.Win32.Sinowal.2500
VBA32 3.11.2 03.03.2007 no virus found
VirusBuster 4.3.19:9 03.03.2007 no virus found

File size: 43008 bytes
MD5: 4429fbc4bff05325b9d754cd466a8bca
SHA1: a3c55c5b9981da09ff330a70d3482dac44809e57


Complete scanning result of "d3ui32.dll", received in VirusTotal at 03.04.2007, 14:33:48 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.38 03.04.2007 no virus found
Authentium 4.93.8 03.04.2007 no virus found
Avast 4.7.936.0 03.03.2007 no virus found
AVG 7.5.0.447 03.03.2007 no virus found
BitDefender 7.2 03.04.2007 no virus found
CAT-QuickHeal 9.00 03.02.2007 no virus found
ClamAV devel-20060426 03.04.2007 no virus found
DrWeb 4.33 03.04.2007 no virus found
eSafe 7.0.14.0 03.04.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3449 03.03.2007 no virus found
Ewido 4.0 03.03.2007 no virus found
FileAdvisor 1 03.04.2007 no virus found
Fortinet 2.85.0.0 03.04.2007 suspicious
F-Prot 4.3.1.45 03.04.2007 no virus found
F-Secure 6.70.13030.0 03.03.2007 no virus found
Ikarus T3.1.1.3 03.04.2007 no virus found
Kaspersky 4.0.2.24 03.04.2007 SpamTool.Win32.Agent.u
McAfee 4975 03.02.2007 no virus found
Microsoft 1.2204 03.04.2007 no virus found
NOD32v2 2093 03.03.2007 no virus found
Norman 5.80.02 03.02.2007 no virus found
Panda 9.0.0.4 03.04.2007 no virus found
Sophos 4.14.0 03.03.2007 no virus found
Sunbelt 2.2.907.0 03.01.2007 no virus found
Symantec 10 03.04.2007 no virus found
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.02.2007 no virus found
VBA32 3.11.2 03.03.2007 no virus found
VirusBuster 4.3.19:9 03.03.2007 no virus found

Aditional Information
File size: 91648 bytes
MD5: 6b656414452aacdb038bb3fbf4d1bec5
SHA1: 87c2ae1f70410bf4e45191cea641de022661c311
packers: UPX

[Dandy]

Вот такой интересный 3-ех метровый дистрибутив пришел по асе...
Complete scanning result of "samp3.1.exe", received in VirusTotal at 03.04.2007, 19:51:35 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 03.04.2007 no virus found
Authentium 4.93.8 03.04.2007 no virus found
Avast 4.7.936.0 03.03.2007 no virus found
AVG 7.5.0.447 03.04.2007 no virus found
BitDefender 7.2 03.04.2007 no virus found
CAT-QuickHeal 9.00 03.02.2007 no virus found
ClamAV devel-20060426 03.04.2007 no virus found
DrWeb 4.33 03.04.2007 no virus found
eSafe 7.0.14.0 03.04.2007 no virus found
eTrust-Vet 30.6.3449 03.03.2007 no virus found
Ewido 4.0 03.04.2007 no virus found
FileAdvisor 1 03.04.2007 no virus found
Fortinet 2.85.0.0 03.04.2007 suspicious
F-Prot 4.3.1.45 03.04.2007 no virus found
F-Secure 6.70.13030.0 03.03.2007 no virus found
Ikarus T3.1.1.3 03.04.2007 no virus found
Kaspersky 4.0.2.24 03.04.2007 no virus found
McAfee 4975 03.02.2007 no virus found
Microsoft 1.2204 03.04.2007 no virus found
NOD32v2 2094 03.04.2007 no virus found
Norman 5.80.02 03.02.2007 no virus found
Panda 9.0.0.4 03.04.2007 Suspicious file
Prevx1 V2 03.04.2007 no virus found
Sophos 4.14.0 03.03.2007 no virus found
Sunbelt 2.2.907.0 03.01.2007 no virus found
Symantec 10 03.04.2007 no virus found
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.02.2007 no virus found
VBA32 3.11.2 03.03.2007 MalwareScope.Trojan-PSW.Pinch.1
VirusBuster 4.3.19:9 03.04.2007 no virus found

Aditional Information
File size: 3900592 bytes
MD5: f26f49585e2b826cd953bb4b852f0791
SHA1: be00bc28b9a63260b7f589392f9683f5a1d600c6
packers: BINARYRES, UPX, UPX

[Winsent]

Complete scanning result of "Photo.scr", received in VirusTotal at 03.04.2007, 21:43:32 (CET).


Antivirus Version Update Result

AntiVir 7.3.1.38 03.04.2007 TR/Crypt.XPACK.Gen
Authentium 4.93.8 03.04.2007 no virus found
Avast 4.7.936.0 03.03.2007 no virus found
AVG 7.5.0.447 03.04.2007 Win32/Ngvck
BitDefender 7.2 03.04.2007 no virus found
CAT-QuickHeal 9.00 03.02.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.04.2007 no virus found
DrWeb 4.33 03.04.2007 Trojan.PWS.LDPinch.1417
eSafe 7.0.14.0 03.04.2007 Win32.LdPinch.bkg
eTrust-Vet 30.6.3449 03.03.2007 no virus found
Ewido 4.0 03.04.2007 Trojan.LdPinch.bkg
FileAdvisor 1 03.04.2007 no virus found
Fortinet 2.85.0.0 03.04.2007 W32/LdPinch.BKG!tr.pws
F-Prot 4.3.1.45 03.04.2007 no virus found
F-Secure 6.70.13030.0 03.03.2007 Trojan-PSW.Win32.LdPinch.bkg
Ikarus T3.1.1.3 03.04.2007 Trojan.Win32.Agent.aee
Kaspersky 4.0.2.24 03.04.2007 Trojan-PSW.Win32.LdPinch.bkg
McAfee 4975 03.02.2007 no virus found
Microsoft 1.2204 03.04.2007 no virus found
NOD32v2 2094 03.04.2007 no virus found
Norman 5.80.02 03.02.2007 no virus found
Panda 9.0.0.4 03.04.2007 Trj/Ldpinch.YG
Prevx1 V2 03.04.2007 no virus found
Sophos 4.14.0 03.03.2007 no virus found
Sunbelt 2.2.907.0 03.01.2007 VIPRE.Suspicious
Symantec 10 03.04.2007 Trojan Horse
TheHacker 6.1.6.067 03.01.2007 Trojan/PSW.LdPinch.bkg
UNA 1.83 03.02.2007 Trojan.PSW.Win32.LdPinch.C807
VBA32 3.11.2 03.03.2007 Trojan-PSW.Win32.LdPinch.bkg
VirusBuster 4.3.19:9 03.04.2007 no virus found

Aditional Information
File size: 33792 bytes
MD5: 6fc2be0ffeee2faf85b946ca689aca9d
SHA1: 3849e0e8ed73d3d3193c60cb7a4271c79c5961b4
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Winsent]

Complete scanning result of "dengi.exe", received in VirusTotal at 03.04.2007, 21:43:44 (CET).


Antivirus Version Update Result

AntiVir 7.3.1.38 03.04.2007 TR/Crypt.XPACK.Gen
Authentium 4.93.8 03.04.2007 no virus found
Avast 4.7.936.0 03.03.2007 no virus found
AVG 7.5.0.447 03.04.2007 no virus found
BitDefender 7.2 03.04.2007 Trojan.Peed.Gen
CAT-QuickHeal 9.00 03.02.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.04.2007 no virus found
DrWeb 4.33 03.04.2007 no virus found
eSafe 7.0.14.0 03.04.2007 Win32.Polipos.sus
eTrust-Vet 30.6.3449 03.03.2007 no virus found
Ewido 4.0 03.04.2007 no virus found
FileAdvisor 1 03.04.2007 no virus found
Fortinet 2.85.0.0 03.04.2007 suspicious
F-Prot 4.3.1.45 03.04.2007 no virus found
F-Secure 6.70.13030.0 03.03.2007 W32/Malware
Ikarus T3.1.1.3 03.04.2007 no virus found
Kaspersky 4.0.2.24 03.04.2007 no virus found
McAfee 4975 03.02.2007 no virus found
Microsoft 1.2204 03.04.2007 no virus found
NOD32v2 2094 03.04.2007 no virus found
Norman 5.80.02 03.02.2007 W32/Malware
Panda 9.0.0.4 03.04.2007 Suspicious file
Prevx1 V2 03.04.2007 no virus found
Sophos 4.14.0 03.03.2007 no virus found
Sunbelt 2.2.907.0 03.01.2007 VIPRE.Suspicious
Symantec 10 03.04.2007 no virus found
TheHacker 6.1.6.067 03.01.2007 no virus found
UNA 1.83 03.02.2007 no virus found
VBA32 3.11.2 03.03.2007 no virus found
VirusBuster 4.3.19:9 03.04.2007 no virus found

Aditional Information
File size: 52708 bytes
MD5: 130cd97b40bd9a43f1d2fd975a6fce8c
SHA1: 870c3d83f0edd36d5c16831fc7e32f6e76365f0e
norman sandbox: [ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: [email protected] - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* **Locates window "NULL [class AVP.AlertDialog]" on desktop.
* **Locates window "NULL [class AVP.AhAppChangedDialog]" on desktop.
* **Locates window "NULL [class AVP.AhLearnDialog]" on desktop.
* **Locates window "NULL [class AVP.Product_Notification]" on desktop.

[ Network ]
* Bypass installed firewall.

Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Shu_b]

t=8242

Complete scanning result of "lsass.exe", received in VirusTotal at 03.05.2007, 08:32:54 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 03.05.2007 no virus found
Authentium 4.93.8 03.04.2007 Possibly a new variant of W32/Dlr-Trojan-Malware-based!Maximus
Avast 4.7.936.0 03.03.2007 Win32:Agent-BSU
AVG 7.5.0.447 03.04.2007 no virus found
BitDefender 7.2 03.05.2007 Generic.Malware.Bdldprn.453CA4F4
CAT-QuickHeal 9.00 03.05.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.05.2007 Trojan.Downloader-2739
DrWeb 4.33 03.05.2007 no virus found
eSafe 7.0.14.0 03.04.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3455 03.05.2007 no virus found
Ewido 4.0 03.04.2007 no virus found
FileAdvisor 1 03.05.2007 no virus found
Fortinet 2.85.0.0 03.05.2007 suspicious
F-Prot 4.3.1.45 03.04.2007 W32/Dlr-Trojan-Malware-based!Maximus
F-Secure 6.70.13030.0 03.05.2007 no virus found
Ikarus T3.1.1.3 03.05.2007 no virus found
Kaspersky 4.0.2.24 03.05.2007 no virus found
McAfee 4975 03.02.2007 Generic AdClicker.b
Microsoft 1.2204 03.05.2007 TrojanClicker:Win32/Agent.ET
NOD32v2 2094 03.04.2007 a variant of Win32/TrojanDownloader.Small.CYF
Norman 5.80.02 03.02.2007 no virus found
Panda 9.0.0.4 03.04.2007 Suspicious file
Prevx1 V2 03.05.2007 no virus found
Sophos 4.14.0 03.03.2007 Mal/Packer
Sunbelt 2.2.907.0 03.01.2007 VIPRE.Suspicious
Symantec 10 03.05.2007 Downloader
TheHacker 6.1.6.069 03.05.2007 no virus found
UNA 1.83 03.02.2007 no virus found
VBA32 3.11.2 03.03.2007 no virus found
VirusBuster 4.3.19:9 03.04.2007 Packed/FSG

File size: 16112 bytes
MD5: 2a75cecc230587c54f8d3badc6ff27f7
SHA1: 43756d86e53013dcdb8041f7d97ebe7b649acb25
packers: FSG

[Shu_b]

t=8286

Complete scanning result of "lsasss.exe", received in VirusTotal at 03.06.2007, 18:12:17 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.38 03.06.2007 TR/Agent.37320
Authentium 4.93.8 03.05.2007 no virus found
Avast 4.7.936.0 03.06.2007 no virus found
AVG 7.5.0.447 03.06.2007 Downloader.Generic3.VVP
BitDefender 7.2 03.06.2007 DeepScan:Generic.Malware.SP!Pk!.021DF1A8
CAT-QuickHeal 9.00 03.06.2007 no virus found
ClamAV devel-20060426 03.06.2007 no virus found
DrWeb 4.33 03.06.2007 no virus found
eSafe 7.0.14.0 03.06.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3458 03.06.2007 no virus found
Ewido 4.0 03.06.2007 no virus found
FileAdvisor 1 03.06.2007 no virus found
Fortinet 2.85.0.0 03.06.2007 W32/Tibs.gen
F-Prot 4.3.1.45 03.06.2007 no virus found
F-Secure 6.70.13030.0 03.06.2007 no virus found
Ikarus T3.1.1.3 03.06.2007 Trojan-Proxy.Win32.Horst.ls
Kaspersky 4.0.2.24 03.06.2007 no virus found
McAfee 4977 03.06.2007 no virus found
Microsoft 1.2204 03.06.2007 Trojan:Win32/Zonebac.A
NOD32v2 2098 03.06.2007 probably a variant of Win32/TrojanDownloader.Agent.AWF
Norman 5.80.02 03.06.2007 no virus found
Panda 9.0.0.4 03.06.2007 Suspicious file
Prevx1 V2 03.06.2007 no virus found
Sophos 4.15.0 03.06.2007 no virus found
Sunbelt 2.2.907.0 03.05.2007 no virus found
Symantec 10 03.06.2007 no virus found
TheHacker 6.1.6.070 03.06.2007 no virus found
UNA 1.83 03.05.2007 no virus found
VBA32 3.11.2 03.05.2007 no virus found
VirusBuster 4.3.19:9 03.06.2007 no virus found

Aditional Information
File size: 37722 bytes
MD5: 3db073b042eb6dd1d61a09ab178ce5d4
SHA1: 6ed79641237602ea70795fbab9c54041cbdb4e90
packers: UPX

[Erekle]

Complete scanning result of "index_1_.htm", received in VirusTotal at 03.06.2007, 23:47:22 (CET).

Antivirus Version Update Result

AntiVir 7.3.1.38 03.06.2007 no virus found
Authentium 4.93.8 03.06.2007 no virus found
Avast 4.7.936.0 03.06.2007 no virus found
AVG 7.5.0.447 03.06.2007 no virus found
BitDefender 7.2 03.06.2007 no virus found
CAT-QuickHeal 9.00 03.06.2007 no virus found
ClamAV devel-20060426 03.06.2007 no virus found
DrWeb 4.33 03.06.2007 no virus found
eSafe 7.0.14.0 03.06.2007 no virus found
eTrust-Vet 30.6.3458 03.06.2007 no virus found
Ewido 4.0 03.06.2007 no virus found
FileAdvisor 1 03.06.2007 no virus found
Fortinet 2.85.0.0 03.06.2007 no virus found
F-Prot 4.3.1.45 03.06.2007 no virus found
F-Secure 6.70.13030.0 03.06.2007 no virus found
Ikarus T3.1.1.3 03.06.2007 no virus found
Kaspersky 4.0.2.24 03.06.2007 no virus found
McAfee 4978 03.06.2007 no virus found
Microsoft 1.2204 03.06.2007 no virus found
NOD32v2 2099 03.06.2007 no virus found
Norman 5.80.02 03.06.2007 no virus found
Panda 9.0.0.4 03.06.2007 no virus found
Prevx1 V2 03.06.2007 no virus found
Sophos 4.15.0 03.06.2007 no virus found
Sunbelt 2.2.907.0 03.05.2007 no virus
Symantec 10 03.06.2007 no virus found
TheHacker 6.1.6.070 03.06.2007 no virus found
UNA 1.83 03.06.2007 Exploit.HTML.Agent
VBA32 3.11.2 03.05.2007 no virus found
VirusBuster 4.3.19:9 03.06.2007 no virus found

Aditional Information
File size: 5969 bytes
MD5: 760404a399d821a9dd99fde5bb143bd6
SHA1: b015dd0b6c616f3413e68348f2058de58385badf


Complete scanning result of "gxlaad.exe", received in VirusTotal at 03.07.2007, 00:08:36 (CET).

Antivirus Version Update Result

AntiVir 7.3.1.38 03.06.2007 TR/Crypt.XPACK.Gen
Authentium 4.93.8 03.06.2007 no virus found
Avast 4.7.936.0 03.06.2007 no virus found
AVG 7.5.0.447 03.06.2007 no virus found
BitDefender 7.2 03.06.2007 no virus found
CAT-QuickHeal 9.00 03.06.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.06.2007 no virus found
DrWeb 4.33 03.06.2007 no virus found
eSafe 7.0.14.0 03.06.2007 Suspicious Trojan/Worm
eTrust-Vet 30.6.3458 03.06.2007 no virus found
Ewido 4.0 03.06.2007 no virus found
FileAdvisor 1 03.07.2007 no virus found
Fortinet 2.85.0.0 03.06.2007 suspicious
F-Prot 4.3.1.45 03.06.2007 no virus found
F-Secure 6.70.13030.0 03.06.2007 no virus found
Ikarus T3.1.1.3 03.06.2007 Generic.Dialer
Kaspersky 4.0.2.24 03.06.2007 no virus found
McAfee 4978 03.06.2007 no virus found
Microsoft 1.2204 03.06.2007 no virus found
NOD32v2 2099 03.06.2007 no virus found
Norman 5.80.02 03.06.2007 no virus found
Panda 9.0.0.4 03.06.2007 Suspicious file
Prevx1 V2 03.07.2007 no virus found
Sophos 4.15.0 03.06.2007 no virus found
Sunbelt 2.2.907.0 03.05.2007 no virus found
Symantec 10 03.06.2007 no virus found
TheHacker 6.1.6.070 03.06.2007 no virus found
UNA 1.83 03.06.2007 no virus found
VBA32 3.11.2 03.05.2007 no virus found
VirusBuster 4.3.19:9 03.06.2007 no virus found

Aditional Information
File size: 32768 bytes
MD5: 3ead1e78a2b9d95b0683e6a3bde02dfd
SHA1: 86c5711e87597d892d4ad39a59d8bb179b55740f

[Shu_b]

t=8292

Complete scanning result of "jguyswyr.dll", received in VirusTotal at 03.07.2007, 20:08:10 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.41 03.07.2007 HEUR/Crypted
Authentium 4.93.8 03.07.2007 no virus found
Avast 4.7.936.0 03.07.2007 no virus found
AVG 7.5.0.447 03.07.2007 no virus found
BitDefender 7.2 03.07.2007 no virus found
CAT-QuickHeal 9.00 03.07.2007 no virus found
ClamAV devel-20060426 03.07.2007 no virus found
DrWeb 4.33 03.07.2007 Trojan.Virtumod
eSafe 7.0.14.0 03.07.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3461 03.07.2007 Win32/Vundo!generic
Ewido 4.0 03.07.2007 no virus found
FileAdvisor 1 03.07.2007 no virus found
Fortinet 2.85.0.0 03.07.2007 suspicious
F-Prot 4.3.1.45 03.07.2007 no virus found
F-Secure 6.70.13030.0 03.07.2007 no virus found
Ikarus T3.1.1.3 03.07.2007 no virus found
Kaspersky 4.0.2.24 03.07.2007 no virus found
McAfee 4979 03.07.2007 no virus found
Microsoft 1.2204 03.07.2007 no virus found
NOD32v2 2101 03.07.2007 no virus found
Norman 5.80.02 03.07.2007 no virus found
Panda 9.0.0.4 03.07.2007 no virus found
Prevx1 V2 03.07.2007 no virus found
Sophos 4.15.0 03.07.2007 Virtumundo
Sunbelt 2.2.907.0 03.05.2007 no virus found
Symantec 10 03.07.2007 no virus found
TheHacker 6.1.6.072 03.07.2007 no virus found
UNA 1.83 03.07.2007 no virus found
VBA32 3.11.2 03.07.2007 no virus found
VirusBuster 4.3.19:9 03.07.2007 no virus found

Aditional Information
File size: 123412 bytes
MD5: d63b74f7f8d82d652b4565fabb7e69dd
SHA1: a856c93ed46830c5a857c19827ddfee98fbded37

[saicat]

Complete scanning result of "server.exw", received in VirusTotal at 03.08.2007, 12:42:19 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.41 03.08.2007 TR/Hijack.Explor.2175
Authentium 4.93.8 03.07.2007 Possibly a new variant of W32/VB-Backdoor-ESVR-based!Maximus
Avast 4.7.936.0 03.07.2007 no virus found
AVG 7.5.0.447 03.07.2007 no virus found
BitDefender 7.2 03.08.2007 BehavesLike:Win32.ExplorerHijack
CAT-QuickHeal 9.00 03.07.2007 no virus found
ClamAV devel-20060426 03.08.2007 no virus found
DrWeb 4.33 03.08.2007 no virus found
eSafe 7.0.14.0 03.07.2007 no virus found
eTrust-Vet 30.6.3464 03.08.2007 no virus found
Ewido 4.0 03.07.2007 no virus found
FileAdvisor 1 03.08.2007 no virus found
Fortinet 2.85.0.0 03.08.2007 PossibleThreat
F-Prot 4.3.1.45 03.07.2007 W32/VB-Backdoor-ESVR-based!Maximus
F-Secure 6.70.13030.0 03.08.2007 no virus found
Ikarus T3.1.1.3 03.08.2007 BehavesLikeWin32.ExplorerHijack
Kaspersky 4.0.2.24 03.08.2007 no virus found
McAfee 4979 03.07.2007 no virus found
Microsoft 1.2204 03.08.2007 no virus found
NOD32v2 2102 03.08.2007 no virus found
Norman 5.80.02 03.07.2007 no virus found
Panda 9.0.0.4 03.08.2007 Suspicious file
Prevx1 V2 03.08.2007 no virus found
Sophos 4.15.0 03.07.2007 no virus found
Sunbelt 2.2.907.0 03.07.2007 Win32.ExplorerHijack
Symantec 10 03.08.2007 no virus found
TheHacker 6.1.6.072 03.07.2007 no virus found
UNA 1.83 03.07.2007 no virus found
VBA32 3.11.2 03.07.2007 Backdoor.ESVR
VirusBuster 4.3.19:9 03.07.2007 no virus found

Aditional Information
File size: 24620 bytes
MD5: 07956680a35d44ce625483dd2f0eb27a
SHA1: 519afd053d278eeeef0e303a805122d0ccbec16a

[yu_mor]

всё больше хочу поставить себе немца AntiVir или белоруса VBA..

Complete scanning result of "activedsj.exe", received in VirusTotal at 03.09.2007, 08:48:45 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.41 03.09.2007 HEUR/Crypted
Authentium 4.93.8 03.08.2007 no virus found
Avast 4.7.936.0 03.08.2007 no virus found
AVG 7.5.0.447 03.08.2007 no virus found
BitDefender 7.2 03.09.2007 no virus found
CAT-QuickHeal 9.00 03.08.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.09.2007 no virus found
DrWeb 4.33 03.09.2007 Trojan.Proxy.1405
eSafe 7.0.14.0 03.08.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3467 03.09.2007 no virus found
Ewido 4.0 03.07.2007 no virus found
FileAdvisor 1 03.09.2007 no virus found
Fortinet 2.85.0.0 03.09.2007 PossibleThreat!025469
F-Prot 4.3.1.45 03.08.2007 no virus found
F-Secure 6.70.13030.0 03.09.2007 Trojan-PSW.Win32.Ceda.d
Ikarus T3.1.1.3 03.09.2007 Trojan-PWS.Win32.Ceda.c
Kaspersky 4.0.2.24 03.09.2007 Trojan-PSW.Win32.Ceda.d
McAfee 4980 03.08.2007 no virus found
Microsoft 1.2204 03.09.2007 no virus found
NOD32v2 2104 03.08.2007 no virus found
Norman 5.80.02 03.07.2007 Suspicious_F.gen
Panda 9.0.0.4 03.08.2007 Trj/PWSteal.BU
Prevx1 V2 03.09.2007 Spyware.Spy.Sheriff
Sophos 4.15.0 03.09.2007 Mal/Packer
Sunbelt 2.2.907.0 03.07.2007 VIPRE.Suspicious
Symantec 10 03.09.2007 no virus found
TheHacker 6.1.6.073 03.09.2007 no virus found
UNA 1.83 03.07.2007 no virus found
VBA32 3.11.2 03.08.2007 Trojan-PSW.Win32.Ceda.c
VirusBuster 4.3.19:9 03.08.2007 Packed/FSG

File size: 29297 bytes
MD5: 9e5e1deddc40214c51cdd0d1476c43d0
SHA1: ea70c581363190f835484ddd22c25edafb835f7b


Complete scanning result of "msnetax.dll", received in VirusTotal at 03.09.2007, 09:09:08 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.41 03.09.2007 TR/Agent.afg
Authentium 4.93.8 03.08.2007 W32/Trojan.YKC
Avast 4.7.936.0 03.08.2007 Win32:Agent-ERY
AVG 7.5.0.447 03.08.2007 Generic3.MX
BitDefender 7.2 03.09.2007 Trojan.Agent.AFG
CAT-QuickHeal 9.00 03.08.2007 Trojan.Agent.afg
ClamAV devel-20060426 03.09.2007 no virus found
DrWeb 4.33 03.09.2007 Trojan.Sender
eSafe 7.0.14.0 03.08.2007 Win32.Agent.afg
eTrust-Vet 30.6.3467 03.09.2007 no virus found
Ewido 4.0 03.07.2007 Trojan.Agent.afg
FileAdvisor 1 03.09.2007 no virus found
Fortinet 2.85.0.0 03.09.2007 W32/Agent.AFG!tr
F-Prot 4.3.1.45 03.08.2007 W32/Trojan.YKC
F-Secure 6.70.13030.0 03.09.2007 Trojan.Win32.Agent.afg
Ikarus T3.1.1.3 03.09.2007 Trojan.Win32.Agent.afg
Kaspersky 4.0.2.24 03.09.2007 Trojan.Win32.Agent.afg
McAfee 4980 03.08.2007 no virus found
Microsoft 1.2204 03.09.2007 TrojanDownloader:Win32/Agent.B (threat-c)
NOD32v2 2104 03.08.2007 no virus found
Norman 5.80.02 03.07.2007 no virus found
Panda 9.0.0.4 03.08.2007 Trj/Spammer.ZO
Prevx1 V2 03.09.2007 Malicious
Sophos 4.15.0 03.09.2007 no virus found
Sunbelt 2.2.907.0 03.07.2007 Trojan.Win32.Agent.afg
Symantec 10 03.09.2007 Trojan Horse
TheHacker 6.1.6.073 03.09.2007 no virus found
UNA 1.83 03.07.2007 Trojan.Win32.Agent.EDFA
VBA32 3.11.2 03.08.2007 Trojan.Sender
VirusBuster 4.3.19:9 03.08.2007 Trojan.Agent.SCY

Aditional Information
File size: 20480 bytes
MD5: e9858c5c723dadfa8825383b0847b164
SHA1: 022b3e782a4ea879e0b37cc7ed1f4a1655118647

Complete scanning result of "lsp.dll", received in VirusTotal at 03.09.2007, 0907 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.41 03.09.2007 no virus found
Authentium 4.93.8 03.08.2007 no virus found
Avast 4.7.936.0 03.08.2007 no virus found
AVG 7.5.0.447 03.08.2007 no virus found
BitDefender 7.2 03.09.2007 no virus found
CAT-QuickHeal 9.00 03.08.2007 no virus found
ClamAV devel-20060426 03.09.2007 no virus found
DrWeb 4.33 03.09.2007 no virus found
eSafe 7.0.14.0 03.08.2007 no virus found
eTrust-Vet 30.6.3467 03.09.2007 no virus found
Ewido 4.0 03.07.2007 no virus found
FileAdvisor 1 03.09.2007 no virus found
Fortinet 2.85.0.0 03.09.2007 no virus found
F-Prot 4.3.1.45 03.08.2007 no virus found
F-Secure 6.70.13030.0 03.09.2007 no virus found
Ikarus T3.1.1.3 03.09.2007 no virus found
Kaspersky 4.0.2.24 03.09.2007 no virus found
McAfee 4980 03.08.2007 no virus found
Microsoft 1.2204 03.09.2007 no virus found
NOD32v2 2104 03.08.2007 no virus found
Norman 5.80.02 03.07.2007 no virus found
Panda 9.0.0.4 03.08.2007 no virus found
Prevx1 V2 03.09.2007 no virus found
Sophos 4.15.0 03.09.2007 no virus found
Sunbelt 2.2.907.0 03.07.2007 no virus found
Symantec 10 03.09.2007 no virus found
TheHacker 6.1.6.073 03.09.2007 no virus found
UNA 1.83 03.07.2007 no virus found
VBA32 3.11.2 03.08.2007 suspected of Trojan-PSW.Lmir.4 (paranoid heuristics)
VirusBuster 4.3.19:9 03.08.2007 no virus found

Aditional Information
File size: 45056 bytes
MD5: 0cb0c6a562da8f4e8154854e77a23ae6
SHA1: f0fafc879f2b10a23b838186709f83ab9daa77ca

Complete scanning result of "svshost.dll", received in VirusTotal at 03.09.2007, 10:00:39 (CET).
Antivirus Version Update Result
AntiVir 7.3.1.41 03.09.2007 no virus found
Authentium 4.93.8 03.08.2007 W32/Backdoor.AIGG
Avast 4.7.936.0 03.08.2007 Win32:Small-CHC
AVG 7.5.0.447 03.08.2007 no virus found
BitDefender 7.2 03.09.2007 no virus found
CAT-QuickHeal 9.00 03.08.2007 no virus found
ClamAV devel-20060426 03.09.2007 no virus found
DrWeb 4.33 03.09.2007 no virus found
eSafe 7.0.14.0 03.08.2007 no virus found
eTrust-Vet 30.6.3467 03.09.2007 no virus found
Ewido 4.0 03.07.2007 no virus found
FileAdvisor 1 03.09.2007 no virus found
Fortinet 2.85.0.0 03.09.2007 no virus found
F-Prot 4.3.1.45 03.08.2007 W32/Backdoor.AIGG
F-Secure 6.70.13030.0 03.09.2007 Backdoor.Win32.Small.ls
Ikarus T3.1.1.3 03.09.2007 no virus found
Kaspersky 4.0.2.24 03.09.2007 Backdoor.Win32.Small.ls
McAfee 4980 03.08.2007 no virus found
Microsoft 1.2204 03.09.2007 no virus found
NOD32v2 2104 03.08.2007 no virus found
Norman 5.80.02 03.07.2007 no virus found
Panda 9.0.0.4 03.08.2007 no virus found
Prevx1 V2 03.09.2007 no virus found
Sophos 4.15.0 03.09.2007 no virus found
Sunbelt 2.2.907.0 03.07.2007 no virus found
Symantec 10 03.09.2007 no virus found
TheHacker 6.1.6.073 03.09.2007 no virus found
UNA 1.83 03.07.2007 Backdoor.Small.F4DA
VBA32 3.11.2 03.08.2007 no virus found
VirusBuster 4.3.19:9 03.08.2007 no virus found

Aditional Information
File size: 2560 bytes
MD5: 9a0d958283e67487384d719c43981e04
SHA1: d14358364c3886b5236848620ebbff0a7df62fc3

[anton_dr]

АВЗ - Src=C:\WINDOWS\himem.exe
Complete scanning result of "avz00012.dta", received in VirusTotal at 03.13.2007, 12:48:02 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.41 03.13.2007 WORM/Stration.Gen
Authentium 4.93.8 03.13.2007 no virus found
Avast 4.7.936.0 03.12.2007 no virus found
AVG 7.5.0.447 03.12.2007 no virus found
BitDefender 7.2 03.13.2007 Win32.Stration.Gen@mm
CAT-QuickHeal 9.00 03.12.2007 no virus found
ClamAV devel-20060426 03.13.2007 no virus found
DrWeb 4.33 03.13.2007 no virus found
eSafe 7.0.14.0 03.12.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3474 03.13.2007 no virus found
Ewido 4.0 03.13.2007 no virus found
FileAdvisor 1 03.13.2007 no virus found
Fortinet 2.85.0.0 03.13.2007 no virus found
F-Prot 4.3.1.45 03.13.2007 no virus found
F-Secure 6.70.13030.0 03.13.2007 no virus found
Ikarus T3.1.1.3 03.13.2007 no virus found
Kaspersky 4.0.2.24 03.13.2007 no virus found
McAfee 4982 03.12.2007 no virus found
Microsoft 1.2306 03.13.2007 no virus found
NOD32v2 2111 03.13.2007 a variant of Win32/Stration
Norman 5.80.02 03.13.2007 no virus found
Panda 9.0.0.4 03.12.2007 no virus found
Prevx1 V2 03.13.2007 Win32.Malware.gen
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.10.2007 no virus found
Symantec 10 03.13.2007 no virus found
TheHacker 6.1.6.074 03.12.2007 no virus found
UNA 1.83 03.12.2007 no virus found
VBA32 3.11.2 03.13.2007 MalwareScope.Worm.Warezov.1
VirusBuster 4.3.19:9 03.12.2007 no virus found

Aditional Information
File size: 192000 bytes
MD5: 28dce299b307e1bd794138a19e3733f3
SHA1: a02df953d67d9b638a80f8ce095c3cc77d43355a
packers: UPX
packers: UPX
packers: UPX
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=e1cd82553318

[anton_dr]

АВЗ - Src=C:\WINDOWS\system32\sgdqfuod.dll

Complete scanning result of "avz00009.dta", received in VirusTotal at 03.13.2007, 12:47:50 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.41 03.13.2007 WORM/Stration.Gen
Authentium 4.93.8 03.13.2007 Possibly a new variant of W32/Bongler-based
Avast 4.7.936.0 03.12.2007 no virus found
AVG 7.5.0.447 03.12.2007 no virus found
BitDefender 7.2 03.13.2007 no virus found
CAT-QuickHeal 9.00 03.12.2007 no virus found
ClamAV devel-20060426 03.13.2007 no virus found
DrWeb 4.33 03.13.2007 no virus found
eSafe 7.0.14.0 03.12.2007 no virus found
eTrust-Vet 30.6.3474 03.13.2007 no virus found
Ewido 4.0 03.13.2007 no virus found
FileAdvisor 1 03.13.2007 no virus found
Fortinet 2.85.0.0 03.13.2007 no virus found
F-Prot 4.3.1.45 03.13.2007 W32/Bongler-based
F-Secure 6.70.13030.0 03.13.2007 no virus found
Ikarus T3.1.1.3 03.13.2007 no virus found
Kaspersky 4.0.2.24 03.13.2007 no virus found
McAfee 4982 03.12.2007 no virus found
Microsoft 1.2306 03.13.2007 Trojan:Win32/Stration.A!dll
NOD32v2 2111 03.13.2007 a variant of Win32/Stration
Norman 5.80.02 03.13.2007 no virus found
Panda 9.0.0.4 03.12.2007 no virus found
Prevx1 V2 03.13.2007 no virus found
Sophos 4.15.0 03.13.2007 W32/Strati-Gen
Sunbelt 2.2.907.0 03.10.2007 no virus found
Symantec 10 03.13.2007 W32.Stration@mm
TheHacker 6.1.6.074 03.12.2007 no virus found
UNA 1.83 03.12.2007 no virus found
VBA32 3.11.2 03.13.2007 MalwareScope.Worm.Warezov.1
VirusBuster 4.3.19:9 03.12.2007 no virus found

Aditional Information
File size: 65536 bytes
MD5: c65c6a61ea71b92b738671c901e3cd97
SHA1: 710e74a0003546a593f7e3efef67a09f3a15eee2

[anton_dr]

АВЗ - Src=C:\WINDOWS\system32\cer6ge.exe

Complete scanning result of "avz00003.dta", received in VirusTotal at 03.13.2007, 12:47:13 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.41 03.13.2007 no virus found
Authentium 4.93.8 03.13.2007 no virus found
Avast 4.7.936.0 03.12.2007 no virus found
AVG 7.5.0.447 03.12.2007 no virus found
BitDefender 7.2 03.13.2007 Win32.Stration.Gen@mm
CAT-QuickHeal 9.00 03.12.2007 no virus found
ClamAV devel-20060426 03.13.2007 no virus found
DrWeb 4.33 03.13.2007 no virus found
eSafe 7.0.14.0 03.12.2007 no virus found
eTrust-Vet 30.6.3474 03.13.2007 no virus found
Ewido 4.0 03.13.2007 no virus found
FileAdvisor 1 03.13.2007 no virus found
Fortinet 2.85.0.0 03.13.2007 no virus found
F-Prot 4.3.1.45 03.13.2007 no virus found
F-Secure 6.70.13030.0 03.13.2007 no virus found
Ikarus T3.1.1.3 03.13.2007 no virus found
Kaspersky 4.0.2.24 03.13.2007 no virus found
McAfee 4982 03.12.2007 no virus found
Microsoft 1.2306 03.13.2007 no virus found
NOD32v2 2111 03.13.2007 a variant of Win32/Stration
Norman 5.80.02 03.13.2007 no virus found
Panda 9.0.0.4 03.12.2007 no virus found
Prevx1 V2 03.13.2007 Malicious
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.10.2007 no virus found
Symantec 10 03.13.2007 no virus found
TheHacker 6.1.6.074 03.12.2007 no virus found
UNA 1.83 03.12.2007 no virus found
VBA32 3.11.2 03.13.2007 MalwareScope.Worm.Warezov.1
VirusBuster 4.3.19:9 03.12.2007 no virus found

Aditional Information
File size: 45056 bytes
MD5: e13bdb0698209bd517b6faa7d110e7b2
SHA1: 5e81b9ed135288a165e970fa1065866755583ebe
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=364982554304



Надо отметить, что эти три вырисовались после чистки карантина Касперским.

[saicat]

Complete scanning result of "server.exw", received in VirusTotal at 03.13.2007, 13:30:02 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.41 03.13.2007 no virus found
Authentium 4.93.8 03.13.2007 no virus found
Avast 4.7.936.0 03.12.2007 no virus found
AVG 7.5.0.447 03.12.2007 Downloader.Generic3.YOO
BitDefender 7.2 03.13.2007 no virus found
CAT-QuickHeal 9.00 03.12.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.13.2007 no virus found
DrWeb 4.33 03.13.2007 no virus found
eSafe 7.0.14.0 03.12.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3474 03.13.2007 no virus found
Ewido 4.0 03.13.2007 Downloader.VB.aug
FileAdvisor 1 03.13.2007 no virus found
Fortinet 2.85.0.0 03.13.2007 suspicious
F-Prot 4.3.1.45 03.13.2007 no virus found
F-Secure 6.70.13030.0 03.13.2007 Trojan-Downloader.Win32.VB.aug
Ikarus T3.1.1.3 03.13.2007 no virus found
Kaspersky 4.0.2.24 03.13.2007 Trojan-Downloader.Win32.VB.aug
McAfee 4982 03.12.2007 no virus found
Microsoft 1.2306 03.13.2007 no virus found
NOD32v2 2111 03.13.2007 Win32/TrojanDownloader.VB.AUG
Norman 5.80.02 03.13.2007 Suspicious_F.gen
Panda 9.0.0.4 03.12.2007 Suspicious file
Prevx1 V2 03.13.2007 no virus found
Sophos 4.15.0 03.13.2007 Mal/Packer
Sunbelt 2.2.907.0 03.10.2007 VIPRE.Suspicious
Symantec 10 03.13.2007 no virus found
TheHacker 6.1.6.074 03.12.2007 no virus found
UNA 1.83 03.12.2007 no virus found
VBA32 3.11.2 03.13.2007 Trojan-Downloader.Win32.VB.aug
VirusBuster 4.3.19:9 03.12.2007 Packed/FSG

Aditional Information
File size: 3913 bytes
MD5: b025e1a31974a3b9813b593cbb70b23a
SHA1: d62e18d50f9e4187cd90333b1198807f3e8c0af3
packers: FSG
packers: FSG
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[mvlab]

Complete scanning result of "qknqump.777", received in VirusTotal at 03.16.2007, 00:33:45 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.15.0 03.15.2007 no virus found
AntiVir 7.3.1.43 03.15.2007 no virus found
Authentium 4.93.8 03.15.2007 W32/Downloader.gen10
Avast 4.7.936.0 03.15.2007 no virus found
AVG 7.5.0.447 03.15.2007 no virus found
BitDefender 7.2 03.16.2007 no virus found
CAT-QuickHeal 9.00 03.15.2007 no virus found
ClamAV 0.90.1 03.15.2007 no virus found
DrWeb 4.33 03.15.2007 no virus found
eSafe 7.0.14.0 03.15.2007 no virus found
eTrust-Vet 30.6.3481 03.15.2007 no virus found
Ewido 4.0 03.15.2007 no virus found
FileAdvisor 1 03.16.2007 no virus found
Fortinet 2.85.0.0 03.15.2007 PossibleThreat
F-Prot 4.3.1.45 03.15.2007 W32/Downloader.gen10
F-Secure 6.70.13030.0 03.15.2007 W32/Downloader.UJ
Ikarus T3.1.1.3 03.15.2007 no virus found
Kaspersky 4.0.2.24 03.15.2007 no virus found
McAfee 4985 03.15.2007 no virus found
Microsoft 1.2306 03.15.2007 no virus found
NOD32v2 2117 03.15.2007 no virus found
Norman 5.80.02 03.15.2007 W32/Downloader.UJ
Panda 9.0.0.4 03.15.2007 no virus found
Prevx1 V2 03.16.2007 Malicious
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.15.2007 no virus found
Symantec 10 03.16.2007 no virus found
TheHacker 6.1.6.076 03.15.2007 no virus found
UNA 1.83 03.15.2007 no virus found
VBA32 3.11.2 03.15.2007 no virus found
VirusBuster 4.3.7:9 03.15.2007 no virus found


Aditional Information
File size: 3108 bytes
MD5: 09db522508fdd11bcabad415f317c6ef
SHA1: 8d1f817d2993211057737d2a6050b14c8dca93c8
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=102c82858505

[Shu_b]

t=8438
Complete scanning result of "fccbxvs.dll", received in VirusTotal at 03.16.2007, 07:45:19 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.15.0 03.16.2007 no virus found
AntiVir 7.3.1.43 03.15.2007 TR/Vundo.Gen
Authentium 4.93.8 03.15.2007 no virus found
Avast 4.7.936.0 03.15.2007 no virus found
AVG 7.5.0.447 03.15.2007 no virus found
BitDefender 7.2 03.16.2007 no virus found
CAT-QuickHeal 9.00 03.15.2007 no virus found
ClamAV 0.90.1 03.16.2007 no virus found
DrWeb 4.33 03.15.2007 Trojan.Virtumod
eSafe 7.0.14.0 03.15.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3484 03.16.2007 Win32/Chisyne!generic
Ewido 4.0 03.15.2007 no virus found
FileAdvisor 1 03.16.2007 no virus found
Fortinet 2.85.0.0 03.16.2007 no virus found
F-Prot 4.3.1.45 03.15.2007 no virus found
F-Secure 6.70.13030.0 03.16.2007 no virus found
Ikarus T3.1.1.3 03.16.2007 no virus found
Kaspersky 4.0.2.24 03.16.2007 no virus found
McAfee 4985 03.15.2007 Vundo
Microsoft 1.2306 03.16.2007 no virus found
NOD32v2 2118 03.16.2007 no virus found
Norman 5.80.02 03.15.2007 no virus found
Panda 9.0.0.4 03.15.2007 Suspicious file
Prevx1 V2 03.16.2007 no virus found
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.15.2007 no virus found
Symantec 10 03.16.2007 Trojan.Vundo
TheHacker 6.1.6.076 03.15.2007 no virus found
UNA 1.83 03.15.2007 no virus found
VBA32 3.11.2 03.15.2007 no virus found
VirusBuster 4.3.7:9 03.15.2007 no virus found

Aditional Information
File size: 26685 bytes
MD5: 1286b221305c9c1f24fcc9e059d317d3
SHA1: 7c0d6f8dcd36dcdb9b268a6e65832caf9ea6bb98

[Shu_b]

t=8439

Complete scanning result of "dbahcjji.dll", received in VirusTotal at 03.16.2007, 09:06:14 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.15.0 03.16.2007 Win-Trojan/Jmcodec.137728
AntiVir 7.3.1.43 03.16.2007 TR/JMCodec.A.2
Authentium 4.93.8 03.15.2007 no virus found
Avast 4.7.936.0 03.15.2007 no virus found
AVG 7.5.0.447 03.15.2007 Adware Generic.VRT
BitDefender 7.2 03.16.2007 MemScan:Trojan.JMCodec.A
CAT-QuickHeal 9.00 03.15.2007 no virus found
ClamAV 0.90.1 03.16.2007 no virus found
DrWeb 4.33 03.16.2007 no virus found
eSafe 7.0.14.0 03.15.2007 Win32.Polipos.sus
eTrust-Vet 30.6.3484 03.16.2007 no virus found
Ewido 4.0 03.15.2007 Trojan.JMCodec.a
FileAdvisor 1 03.16.2007 Not analyzed yet
Fortinet 2.85.0.0 03.16.2007 suspicious
F-Prot 4.3.1.45 03.15.2007 no virus found
F-Secure 6.70.13030.0 03.16.2007 no virus found
Ikarus T3.1.1.3 03.16.2007 MemScanTrojan.JMCodec.A
Kaspersky 4.0.2.24 03.16.2007 no virus found
McAfee 4985 03.15.2007 no virus found
Microsoft 1.2306 03.16.2007 no virus found
NOD32v2 2118 03.16.2007 Win32/Adware.JMCodec
Norman 5.80.02 03.15.2007 no virus found
Panda 9.0.0.4 03.15.2007 Suspicious file
Prevx1 V2 03.16.2007 no virus found
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.15.2007 VIPRE.Suspicious
Symantec 10 03.16.2007 no virus found
TheHacker 6.1.6.076 03.15.2007 no virus found
UNA 1.83 03.15.2007 no virus found
VBA32 3.11.2 03.15.2007 no virus found
VirusBuster 4.3.7:9 03.15.2007 no virus found

Aditional Information
File size: 137728 bytes
MD5: ca87f20354b8226cf55c05ecb024b781
SHA1: d38259910cf4aaef9d3f0793ad00613af410bddf

[Dandy]

Complete scanning result of "regger.exe", received in VirusTotal at 03.16.2007, 17:17:19 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.17.0 03.16.2007 no virus found
AntiVir 7.3.1.43 03.16.2007 HEUR/Crypted
Authentium 4.93.8 03.15.2007 no virus found
Avast 4.7.936.0 03.16.2007 no virus found
AVG 7.5.0.447 03.16.2007 no virus found
BitDefender 7.2 03.16.2007 no virus found
CAT-QuickHeal 9.00 03.15.2007 (Suspicious) - DNAScan
ClamAV 0.90.1 03.16.2007 no virus found
DrWeb 4.33 03.16.2007 no virus found
eSafe 7.0.14.0 03.16.2007 no virus found
eTrust-Vet 30.6.3484 03.16.2007 no virus found
Ewido 4.0 03.16.2007 Trojan.LdPinch.bjx
FileAdvisor 1 03.16.2007 no virus found
Fortinet 2.85.0.0 03.16.2007 suspicious
F-Prot 4.3.1.45 03.16.2007 no virus found
F-Secure 6.70.13030.0 03.16.2007 no virus found
Ikarus T3.1.1.3 03.16.2007 no virus found
Kaspersky 4.0.2.24 03.16.2007 no virus found
McAfee 4985 03.15.2007 no virus found
Microsoft 1.2306 03.16.2007 no virus found
NOD32v2 2121 03.16.2007 no virus found
Norman 5.80.02 03.16.2007 no virus found
Panda 9.0.0.4 03.15.2007 Suspicious file
Prevx1 V2 03.16.2007 no virus found
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.15.2007 VIPRE.Suspicious
Symantec 10 03.16.2007 no virus found
TheHacker 6.1.6.076 03.15.2007 no virus found
UNA 1.83 03.15.2007 no virus found
VBA32 3.11.2 03.15.2007 MalwareScope.Trojan-PSW.Pinch.1
VirusBuster 4.3.7:9 03.16.2007 no virus found

Aditional Information
File size: 51634 bytes
MD5: 1df8658f645e0fe988b5e9a9a0230e10
SHA1: b053da1a69114ac1a67d05225ae293d97f4686cf
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.