Исследование антивирусов 5

[Dandy]

Complete scanning result of "out.rar", received in VirusTotal at 03.17.2007, 01:54:32 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.17.0 03.16.2007 no virus found
AntiVir 7.3.1.43 03.16.2007 EXP/Scano
Authentium 4.93.8 03.16.2007 VBS/Scano@dr
Avast 4.7.936.0 03.16.2007 no virus found
AVG 7.5.0.447 03.16.2007 I-Worm/Scano
BitDefender 7.2 03.16.2007 no virus found
CAT-QuickHeal 9.00 03.15.2007 no virus found
ClamAV 0.90.1 03.16.2007 no virus found
DrWeb 4.33 03.16.2007 no virus found
eSafe 7.0.14.0 03.16.2007 no virus found
eTrust-Vet 30.6.3486 03.16.2007 no virus found
Ewido 4.0 03.16.2007 no virus found
FileAdvisor 1 03.17.2007 no virus found
Fortinet 2.85.0.0 03.16.2007 no virus found
F-Prot 4.3.1.45 03.16.2007 VBS/Scano@dr
F-Secure 6.70.13030.0 03.16.2007 VBS/Scano@dr
Ikarus T3.1.1.3 03.16.2007 no virus found
Kaspersky 4.0.2.24 03.17.2007 no virus found
McAfee 4986 03.16.2007 potentially unwanted program Hoax-LocalIFrame
Microsoft 1.2306 03.16.2007 TrojanDropper:VBS/Scano.gen
NOD32v2 2121 03.16.2007 no virus found
Norman 5.80.02 03.16.2007 no virus found
Panda 9.0.0.4 03.16.2007 no virus found
Prevx1 V2 03.17.2007 no virus found
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.16.2007 no virus found
Symantec 10 03.17.2007 no virus found
TheHacker 6.1.6.076 03.15.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.16.2007 no virus found
VirusBuster 4.3.7:9 03.16.2007 VBS.Scano.AU

Aditional Information
File size: 64796 bytes
MD5: 09e469c6292eed8ae0c7e23748f335df
SHA1: d9f611a633e169620665ea9221aa6876866ad2f7

[Dandy]

Complete scanning result of "_30743_1232743078_2.eml", received in VirusTotal at 03.17.2007, 02:06:29 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.17.0 03.16.2007 no virus found
AntiVir 7.3.1.43 03.16.2007 no virus found
Authentium 4.93.8 03.16.2007 VBS/Scano@dr
Avast 4.7.936.0 03.16.2007 no virus found
AVG 7.5.0.447 03.16.2007 no virus found
BitDefender 7.2 03.16.2007 no virus found
CAT-QuickHeal 9.00 03.15.2007 no virus found
ClamAV 0.90.1 03.16.2007 no virus found
DrWeb 4.33 03.16.2007 no virus found
eSafe 7.0.14.0 03.16.2007 no virus found
eTrust-Vet 30.6.3486 03.16.2007 no virus found
Ewido 4.0 03.16.2007 no virus found
FileAdvisor 1 03.17.2007 no virus found
Fortinet 2.85.0.0 03.16.2007 no virus found
F-Prot 4.3.1.45 03.16.2007 VBS/Scano@dr
F-Secure 6.70.13030.0 03.16.2007 no virus found
Ikarus T3.1.1.3 03.16.2007 no virus found
Kaspersky 4.0.2.24 03.17.2007 no virus found
McAfee 4986 03.16.2007 no virus found
Microsoft 1.2306 03.16.2007 TrojanDropper:VBS/Scano.gen
NOD32v2 2121 03.16.2007 no virus found
Norman 5.80.02 03.16.2007 no virus found
Panda 9.0.0.4 03.16.2007 HTML/Areses.gen
Prevx1 V2 03.17.2007 no virus found
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.16.2007 no virus found
Symantec 10 03.17.2007 no virus found
TheHacker 6.1.6.076 03.15.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.16.2007 no virus found
VirusBuster 4.3.7:9 03.16.2007 no virus found

Aditional Information
File size: 110409 bytes
MD5: 7b5c5bd54be36b85950351058a0f0d9e
SHA1: d9b0c04f2acc8cffc50c496c69f9023b6dc71eac

[Kuzz]

Complete scanning result of "player-codec1330.exe", received in VirusTotal at 03.17.2007, 0539 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.17.0 03.16.2007 no virus found
AntiVir 7.3.1.43 03.16.2007 no virus found
Authentium 4.93.8 03.16.2007 no virus found
Avast 4.7.936.0 03.16.2007 no virus found
AVG 7.5.0.447 03.16.2007 no virus found
BitDefender 7.2 03.16.2007 Trojan.FakeCodecs.E
CAT-QuickHeal 9.00 03.15.2007 no virus found
ClamAV 0.90.1 03.16.2007 no virus found
DrWeb 4.33 03.16.2007 no virus found
eSafe 7.0.14.0 03.16.2007 no virus found
eTrust-Vet 30.6.3486 03.16.2007 no virus found
Ewido 4.0 03.16.2007 no virus found
FileAdvisor 1 03.17.2007 no virus found
Fortinet 2.85.0.0 03.17.2007 no virus found
F-Prot 4.3.1.45 03.16.2007 no virus found
F-Secure 6.70.13030.0 03.16.2007 no virus found
Ikarus T3.1.1.3 03.16.2007 no virus found
Kaspersky 4.0.2.24 03.17.2007 no virus found
McAfee 4986 03.16.2007 no virus found
Microsoft 1.2306 03.16.2007 no virus found
NOD32v2 2122 03.17.2007 no virus found
Norman 5.80.02 03.16.2007 no virus found
Panda 9.0.0.4 03.16.2007 no virus found
Prevx1 V2 03.17.2007 no virus found
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.16.2007 no virus found
Symantec 10 03.17.2007 no virus found
TheHacker 6.1.6.076 03.15.2007 Trojan/DNSChanger.ik
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.16.2007 no virus found
VirusBuster 4.3.7:9 03.16.2007 no virus found

Aditional Information
File size: 72153 bytes
MD5: 57782a94bbcc11766c51ee7878d1ab37
SHA1: 0e9586d10d9ee7dc71faa752628e294b81177684
packers: BINARYRES, BINARYRES

[Shu_b]

t=8451

Complete scanning result of "cssrss.exe", received in VirusTotal at 03.17.2007, 09:59:46 (CET).
Antivirus Version Update Result
AhnLab-V3 2007.3.17.0 03.16.2007 no virus found
AntiVir 7.3.1.43 03.16.2007 no virus found
Authentium 4.93.8 03.16.2007 no virus found
Avast 4.7.936.0 03.16.2007 Win32:Ldpinch-PR
AVG 7.5.0.447 03.16.2007 no virus found
BitDefender 7.2 03.17.2007 no virus found
CAT-QuickHeal 9.00 03.15.2007 (Suspicious) - DNAScan
ClamAV 0.90.1 03.16.2007 no virus found
DrWeb 4.33 03.16.2007 no virus found
eSafe 7.0.14.0 03.16.2007 no virus found
eTrust-Vet 30.6.3486 03.16.2007 no virus found
Ewido 4.0 03.17.2007 no virus found
FileAdvisor 1 03.17.2007 no virus found
Fortinet 2.85.0.0 03.17.2007 suspicious
F-Prot 4.3.1.45 03.16.2007 no virus found
F-Secure 6.70.13030.0 03.16.2007 W32/Malware.IBH
Ikarus T3.1.1.3 03.17.2007 no virus found
Kaspersky 4.0.2.24 03.17.2007 no virus found
McAfee 4986 03.16.2007 no virus found
Microsoft 1.2306 03.17.2007 no virus found
NOD32v2 2122 03.17.2007 no virus found
Norman 5.80.02 03.16.2007 W32/Malware.IBH
Panda 9.0.0.4 03.16.2007 Trj/Ldpinch.WV
Prevx1 V2 03.17.2007 Trojan.SystemPoser
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.16.2007 no virus found
Symantec 10 03.17.2007 no virus found
TheHacker 6.1.6.076 03.15.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.16.2007 no virus found
VirusBuster 4.3.7:9 03.16.2007 no virus found

Aditional Information
File size: 9733 bytes
MD5: 05fbd2c62d58041f6400c7b2736a0fd7
SHA1: 2bd797a05b025af2460e61cc8ba4ff8eecbab832

[Shu_b]

t=8418

Complete scanning result of "ipv6mons.dll", received in VirusTotal at 03.17.2007, 18:50:16 (CET).
Antivirus Version Update Result
AhnLab-V3 2007.3.17.0 03.16.2007 no virus found
AntiVir 7.3.1.43 03.17.2007 HEUR/Crypted
Authentium 4.93.8 03.17.2007 no virus found
Avast 4.7.936.0 03.16.2007 no virus found
AVG 7.5.0.447 03.17.2007 no virus found
BitDefender 7.2 03.17.2007 no virus found
CAT-QuickHeal 9.00 03.15.2007 no virus found
ClamAV 0.90.1 03.17.2007 no virus found
DrWeb 4.33 03.17.2007 no virus found
eSafe 7.0.14.0 03.16.2007 Suspicious Trojan/Worm
eTrust-Vet 30.6.3486 03.16.2007 no virus found
Ewido 4.0 03.17.2007 no virus found
FileAdvisor 1 03.17.2007 no virus found
Fortinet 2.85.0.0 03.17.2007 no virus found
F-Prot 4.3.1.45 03.17.2007 no virus found
F-Secure 6.70.13030.0 03.16.2007 no virus found
Ikarus T3.1.1.3 03.17.2007 no virus found
Kaspersky 4.0.2.24 03.17.2007 no virus found
McAfee 4986 03.16.2007 no virus found
Microsoft 1.2306 03.17.2007 no virus found
NOD32v2 2123 03.17.2007 no virus found
Norman 5.80.02 03.16.2007 W32/Vundo.gen7
Panda 9.0.0.4 03.17.2007 Suspicious file
Prevx1 V2 03.17.2007 no virus found
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.16.2007 no virus found
Symantec 10 03.17.2007 no virus found
TheHacker 6.1.6.076 03.15.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.16.2007 MalwareScope.Trojan-Spy.BZub.1
VirusBuster 4.3.7:9 03.17.2007 no virus found

Aditional Information
File size: 48736 bytes
MD5: e30fac4b1f9d01eacbb5b5df37849524
SHA1: 0a9e7aab770eea1d0da46d1a698a7447c33a8d80

[drongo]

T= 8501
Complete scanning result of "avz00004.dta", received in VirusTotal at 03.19.2007, 12:47:07 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.19.0 03.19.2007 no virus found
AntiVir 7.3.1.43 03.19.2007 TR/Vundo.Gen
Authentium 4.93.8 03.17.2007 no virus found
Avast 4.7.936.0 03.19.2007 no virus found
AVG 7.5.0.447 03.18.2007 Lop.BF
BitDefender 7.2 03.19.2007 no virus found
CAT-QuickHeal 9.00 03.15.2007 no virus found
ClamAV devel-20070312 03.19.2007 no virus found
DrWeb 4.33 03.19.2007 Trojan.Virtumod
eSafe 7.0.14.0 03.19.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3491 03.19.2007 Win32/Vundo!generic
Ewido 4.0 03.18.2007 no virus found
FileAdvisor 1 03.19.2007 no virus found
Fortinet 2.85.0.0 03.19.2007 suspicious
F-Prot 4.3.1.45 03.17.2007 no virus found
F-Secure 6.70.13030.0 03.19.2007 no virus found
Ikarus T3.1.1.3 03.19.2007 no virus found
Kaspersky 4.0.2.24 03.19.2007 no virus found
McAfee 4986 03.16.2007 Vundo
Microsoft 1.2306 03.19.2007 no virus found
NOD32v2 2126 03.19.2007 no virus found
Norman 5.80.02 03.16.2007 Vundo.gen7
Panda 9.0.0.4 03.19.2007 Suspicious file
Prevx1 V2 03.19.2007 no virus found
Sophos 4.15.0 03.13.2007 Virtumundo
Sunbelt 2.2.907.0 03.16.2007 no virus found
Symantec 10 03.19.2007 Trojan.Vundo
TheHacker 6.1.6.077 03.19.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.18.2007 no virus found
VirusBuster 4.3.7:9 03.18.2007 Trojan.DL.Vundo.Gen!Pac.6

Aditional Information
File size: 282212 bytes
MD5: 9a322eb1feb3613af9dd94349fcd147a
SHA1: c36353db90cfcd3e6fdbb0d38659d5fbb60d0fb0




Complete scanning result of "avz00003.dta", received in VirusTotal at 03.19.2007, 12:36:52 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.19.0 03.19.2007 no virus found
AntiVir 7.3.1.43 03.19.2007 TR/Vundo.Gen
Authentium 4.93.8 03.17.2007 no virus found
Avast 4.7.936.0 03.19.2007 no virus found
AVG 7.5.0.447 03.18.2007 Lop.BG
BitDefender 7.2 03.19.2007 MemScan:Trojan.Virtumod.GE
CAT-QuickHeal 9.00 03.15.2007 no virus found
ClamAV devel-20070312 03.19.2007 no virus found
DrWeb 4.33 03.19.2007 Trojan.Virtumod
eSafe 7.0.14.0 03.19.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3491 03.19.2007 Win32/Chisyne!generic
Ewido 4.0 03.18.2007 no virus found
FileAdvisor 1 03.19.2007 no virus found
Fortinet 2.85.0.0 03.19.2007 Vundo!tr
F-Prot 4.3.1.45 03.17.2007 no virus found
F-Secure 6.70.13030.0 03.19.2007 no virus found
Ikarus T3.1.1.3 03.19.2007 MemScanTrojan.Virtumod.GE
Kaspersky 4.0.2.24 03.19.2007 no virus found
McAfee 4986 03.16.2007 Vundo
Microsoft 1.2306 03.19.2007 no virus found
NOD32v2 2126 03.19.2007 no virus found
Norman 5.80.02 03.16.2007 no virus found
Panda 9.0.0.4 03.19.2007 Malware Generic
Prevx1 V2 03.19.2007 Polynomial.Code.Exploit
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.16.2007 no virus found
Symantec 10 03.19.2007 Trojan.Vundo
TheHacker 6.1.6.077 03.19.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.18.2007 no virus found
VirusBuster 4.3.7:9 03.18.2007 no virus found

Aditional Information
File size: 26685 bytes
MD5: 1286b221305c9c1f24fcc9e059d317d3
SHA1: 7c0d6f8dcd36dcdb9b268a6e65832caf9ea6bb98
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=945883347023

omplete scanning result of "avz00002.dta", received in VirusTotal at 03.19.2007, 13:03:05 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.19.0 03.19.2007 no virus found
AntiVir 7.3.1.43 03.19.2007 DR/Padonak.A
Authentium 4.93.8 03.17.2007 no virus found
Avast 4.7.936.0 03.19.2007 Win32:Trojan-gen. {VC}
AVG 7.5.0.447 03.18.2007 Collected.10.AI
BitDefender 7.2 03.19.2007 no virus found
CAT-QuickHeal 9.00 03.15.2007 no virus found
ClamAV devel-20070312 03.19.2007 no virus found
DrWeb 4.33 03.19.2007 Trojan.AVKill.248
eSafe 7.0.14.0 03.19.2007 no virus found
eTrust-Vet 30.6.3491 03.19.2007 no virus found
Ewido 4.0 03.19.2007 Worm.Padonak.a
FileAdvisor 1 03.19.2007 no virus found
Fortinet 2.85.0.0 03.19.2007 W32/Padonak.A!worm.p2p
F-Prot 4.3.1.45 03.17.2007 no virus found
F-Secure 6.70.13030.0 03.19.2007 P2P-Worm.Win32.Padonak.a
Ikarus T3.1.1.3 03.19.2007 P2P-Worm.Win32.Padonak.a
Kaspersky 4.0.2.24 03.19.2007 P2P-Worm.Win32.Padonak.a
McAfee 4986 03.16.2007 no virus found
Microsoft 1.2306 03.19.2007 no virus found
NOD32v2 2126 03.19.2007 no virus found
Norman 5.80.02 03.19.2007 no virus found
Panda 9.0.0.4 03.19.2007 no virus found
Prevx1 V2 03.19.2007 no virus found
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.16.2007 no virus found
Symantec 10 03.19.2007 no virus found
TheHacker 6.1.6.077 03.19.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.18.2007 P2P-Worm.Win32.Padonak.a
VirusBuster 4.3.7:9 03.18.2007 no virus found

Aditional Information
File size: 424136 bytes
MD5: df5f260dde744cd6776b059d28624ef1
SHA1: bc247f454ee353f3c1a3276faac11880dace2cb9

[drongo]

T=8511
Complete scanning result of " jkklk.dll", received in VirusTotal at 03.20.2007, 10:57:17 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.20.1 03.20.2007 no virus found
AntiVir 7.3.1.43 03.20.2007 TR/Vundo.AH
Authentium 4.93.8 03.20.2007 no virus found
Avast 4.7.936.0 03.19.2007 no virus found
AVG 7.5.0.447 03.20.2007 Lop.AX
BitDefender 7.2 03.20.2007 MemScan:Trojan.Virtumod.IX
CAT-QuickHeal 9.00 03.20.2007 no virus found
ClamAV devel-20070312 03.20.2007 no virus found
DrWeb 4.33 03.20.2007 Trojan.Virtumod
eSafe 7.0.14.0 03.19.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3494 03.20.2007 Win32/Vundo!generic
Ewido 4.0 03.19.2007 no virus found
FileAdvisor 1 03.20.2007 no virus found
Fortinet 2.85.0.0 03.20.2007 suspicious
F-Prot 4.3.1.45 03.19.2007 no virus found
F-Secure 6.70.13030.0 03.20.2007 no virus found
Ikarus T3.1.1.3 03.20.2007 MemScanTrojan.Virtumod.IX
Kaspersky 4.0.2.24 03.20.2007 no virus found
McAfee 4987 03.19.2007 Vundo
Microsoft 1.2306 03.20.2007 no virus found
NOD32v2 2128 03.19.2007 no virus found
Norman 5.80.02 03.19.2007 no virus found
Panda 9.0.0.4 03.20.2007 Suspicious file
Prevx1 V2 03.20.2007 no virus found
Sophos 4.15.0 03.13.2007 Virtumundo
Sunbelt 2.2.907.0 03.16.2007 no virus found
Symantec 10 03.20.2007 Trojan.Vundo
TheHacker 6.1.6.078 03.20.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.19.2007 no virus found
VirusBuster 4.3.7:9 03.19.2007 Trojan.DL.Vundo.Gen!Pac.6
Webwasher-Gateway 6.0.1 03.20.2007 Trojan.Vundo.AH

Aditional Information
File size: 282212 bytes
MD5: f6eee9825892179ca467c0afce9d9095
SHA1: e1bc77fd71b638fa423682945a906bec2fd92b6a

[Exxx]

Complete scanning result of "setup.exe", received in VirusTotal at 03.23.2007, 00:34:00 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.23.0 03.22.2007 no virus found
AntiVir 7.3.1.44 03.22.2007 DR/Zlob.Gen
Authentium 4.93.8 03.22.2007 no virus found
Avast 4.7.936.0 03.22.2007 no virus found
AVG 7.5.0.447 03.22.2007 no virus found
BitDefender 7.2 03.23.2007 no virus found
CAT-QuickHeal 9.00 03.22.2007 no virus found
ClamAV devel-20070312 03.22.2007 no virus found
DrWeb 4.33 03.22.2007 no virus found
eSafe 7.0.14.0 03.22.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3501 03.22.2007 no virus found
Ewido 4.0 03.22.2007 no virus found
FileAdvisor 1 03.23.2007 no virus found
Fortinet 2.85.0.0 03.22.2007 suspicious
F-Prot 4.3.1.45 03.22.2007 no virus found
F-Secure 6.70.13030.0 03.22.2007 no virus found
Ikarus T3.1.1.3 03.22.2007 Trojan-Downloader.Win32.Zlob.bpg
Kaspersky 4.0.2.24 03.23.2007 Trojan-Downloader.Win32.Zlob.bqp
McAfee 4990 03.22.2007 no virus found
Microsoft 1.2306 03.22.2007 no virus found
NOD32v2 2137 03.22.2007 no virus found
Norman 5.80.02 03.22.2007 no virus found
Panda 9.0.0.4 03.22.2007 no virus found
Prevx1 V2 03.23.2007 no virus found
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.22.2007 no virus found
Symantec 10 03.23.2007 no virus found
TheHacker 6.1.6.079 03.22.2007 Trojan/Downloader.Zlob.bpl
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.22.2007 no virus found
VirusBuster 4.3.7:9 03.22.2007 no virus found
Webwasher-Gateway 6.0.1 03.22.2007 Trojan.Zlob.Gen

Aditional Information
File size: 60766 bytes
MD5: 2ebfc9c0c23eb0785767cb3cc6931174
SHA1: 75853e5d30a5a27eb30b54895fc96315aaef92f1
packers: UPX
packers: UPX, BINARYRES, BINARYRES
packers: UPX

[Shu_b]

t-8600

Complete scanning result of "65exgmail2.9.exe", received in VirusTotal at 03.24.2007, 12:57:17 (CET).
Antivirus Version Update Result
AhnLab-V3 2007.3.24.1 03.24.2007 no virus found
AntiVir 7.3.1.44 03.23.2007 TR/Proxy.Horst.Gen
Authentium 4.93.8 03.23.2007 no virus found
Avast 4.7.936.0 03.23.2007 no virus found
AVG 7.5.0.447 03.23.2007 no virus found
BitDefender 7.2 03.24.2007 Generic.Malware.Yd!dld.EC36A030
CAT-QuickHeal 9.00 03.23.2007 no virus found
ClamAV devel-20070312 03.24.2007 no virus found
DrWeb 4.33 03.24.2007 Win32.HLLW.Medbod
eSafe 7.0.14.0 03.22.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3506 03.23.2007 no virus found
Ewido 4.0 03.24.2007 no virus found
FileAdvisor 1 03.24.2007 no virus found
Fortinet 2.85.0.0 03.24.2007 suspicious
F-Prot 4.3.1.45 03.23.2007 no virus found
F-Secure 6.70.13030.0 03.24.2007 no virus found
Ikarus T3.1.1.3 03.24.2007 no virus found
Kaspersky 4.0.2.24 03.24.2007 no virus found
McAfee 4991 03.23.2007 no virus found
Microsoft 1.2306 03.24.2007 no virus found
NOD32v2 2142 03.24.2007 no virus found
Norman 5.80.02 03.23.2007 no virus found
Panda 9.0.0.4 03.23.2007 Suspicious file
Prevx1 V2 03.24.2007 no virus found
Sophos 4.15.0 03.23.2007 no virus found
Sunbelt 2.2.907.0 03.24.2007 no virus found
Symantec 10 03.24.2007 no virus found
TheHacker 6.1.6.080 03.23.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.24.2007 no virus found
VirusBuster 4.3.7:9 03.23.2007 no virus found
Webwasher-Gateway 6.0.1 03.24.2007 Trojan.Proxy.Horst.Gen

Aditional Information
File size: 26112 bytes
MD5: 735848a0cc218ec009639d573be78628
SHA1: 16216012a92675ddcd6815d712a3a9b248626b90
packers: UPX


Complete scanning result of "12excontenter8.exe", received in VirusTotal at 03.24.2007, 12:55:58 (CET).
Antivirus Version Update Result
AhnLab-V3 2007.3.24.1 03.24.2007 no virus found
AntiVir 7.3.1.44 03.23.2007 no virus found
Authentium 4.93.8 03.23.2007 no virus found
Avast 4.7.936.0 03.23.2007 no virus found
AVG 7.5.0.447 03.23.2007 no virus found
BitDefender 7.2 03.24.2007 no virus found
CAT-QuickHeal 9.00 03.23.2007 no virus found
ClamAV devel-20070312 03.24.2007 no virus found
DrWeb 4.33 03.24.2007 no virus found
eSafe 7.0.14.0 03.22.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3506 03.23.2007 no virus found
Ewido 4.0 03.24.2007 no virus found
FileAdvisor 1 03.24.2007 no virus found
Fortinet 2.85.0.0 03.24.2007 suspicious
F-Prot 4.3.1.45 03.23.2007 no virus found
F-Secure 6.70.13030.0 03.24.2007 no virus found
Ikarus T3.1.1.3 03.24.2007 no virus found
Kaspersky 4.0.2.24 03.24.2007 no virus found
McAfee 4991 03.23.2007 no virus found
Microsoft 1.2306 03.24.2007 no virus found
NOD32v2 2142 03.24.2007 no virus found
Norman 5.80.02 03.23.2007 no virus found
Panda 9.0.0.4 03.23.2007 no virus found
Prevx1 V2 03.24.2007 no virus found
Sophos 4.15.0 03.23.2007 no virus found
Sunbelt 2.2.907.0 03.24.2007 no virus found
Symantec 10 03.24.2007 no virus found
TheHacker 6.1.6.080 03.23.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.24.2007 no virus found
VirusBuster 4.3.7:9 03.23.2007 no virus found
Webwasher-Gateway 6.0.1 03.24.2007 Worm.Win32.ModifiedUPX.gen!90 (suspicious)
Aditional Information
File size: 20480 bytes
MD5: bb1d0b8558ed3589f05fef4c25ad25cd
SHA1: c0523d7601cc531511fcc3c4cbb293f16a24cd49
packers: UPX

[Winsent]

Complete scanning result of "vzlom.exe", received in VirusTotal at 03.24.2007, 17:40:15 (CET).


Antivirus Version Update Result

AhnLab-V3 2007.3.24.1 03.24.2007 no virus found
AntiVir 7.3.1.44 03.23.2007 HEUR/Crypted
Authentium 4.93.8 03.24.2007 no virus found
Avast 4.7.936.0 03.23.2007 no virus found
AVG 7.5.0.447 03.23.2007 no virus found
BitDefender 7.2 03.24.2007 MemScan:Trojan.PWS.PdPinch.L
CAT-QuickHeal 9.00 03.23.2007 (Suspicious) - DNAScan
ClamAV devel-20070312 03.24.2007 no virus found
DrWeb 4.33 03.24.2007 no virus found
eSafe 7.0.14.0 03.22.2007 no virus found
eTrust-Vet 30.6.3506 03.23.2007 no virus found
Ewido 4.0 03.24.2007 no virus found
FileAdvisor 1 03.24.2007 no virus found
Fortinet 2.85.0.0 03.24.2007 suspicious
F-Prot 4.3.1.45 03.23.2007 no virus found
F-Secure 6.70.13030.0 03.24.2007 no virus found
Ikarus T3.1.1.3 03.24.2007 no virus found
Kaspersky 4.0.2.24 03.24.2007 no virus found
McAfee 4991 03.23.2007 no virus found
Microsoft 1.2306 03.24.2007 no virus found
NOD32v2 2142 03.24.2007 a variant of Win32/PSW.LdPinch.NCB
Norman 5.80.02 03.23.2007 no virus found
Panda 9.0.0.4 03.24.2007 Suspicious file
Prevx1 V2 03.24.2007 no virus found
Sophos 4.15.0 03.23.2007 no virus found
Sunbelt 2.2.907.0 03.24.2007 no virus found
Symantec 10 03.24.2007 no virus found
TheHacker 6.1.6.080 03.23.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.24.2007 MalwareScope.Trojan-PSW.Pinch.1
VirusBuster 4.3.7:9 03.24.2007 no virus found
Webwasher-Gateway 6.0.1 03.24.2007 Heuristic.Crypted

Aditional Information
File size: 40725 bytes
MD5: 04d517fe5e81e8afe725b717d100bbb2
SHA1: 4b7c623ceb24e721a3a184ddaf25d8aaa7a666cd

[drongo]

Complete scanning result of "avz00015.dta", received in VirusTotal at 03.30.2007, 17:28:49 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.30.0 03.30.2007 Win-Trojan/Pakes.29184.D
AntiVir 7.3.1.46 03.30.2007 HEUR/Malware
Authentium 4.93.8 03.30.2007 no virus found
Avast 4.7.936.0 03.30.2007 no virus found
AVG 7.5.0.447 03.30.2007 Generic3.NLG
BitDefender 7.2 03.30.2007 no virus found
CAT-QuickHeal 9.00 03.29.2007 no virus found
ClamAV devel-20070312 03.30.2007 no virus found
DrWeb 4.33 03.30.2007 no virus found
eSafe 7.0.15.0 03.29.2007 no virus found
eTrust-Vet 30.6.3524 03.30.2007 Win32/Cutwail!generic
Ewido 4.0 03.30.2007 Trojan.Pakes
FileAdvisor 1 03.30.2007 no virus found
Fortinet 2.85.0.0 03.30.2007 no virus found
F-Prot 4.3.1.45 03.30.2007 no virus found
F-Secure 6.70.13030.0 03.30.2007 Trojan.Win32.Pakes
Ikarus T3.1.1.3 03.30.2007 no virus found
Kaspersky 4.0.2.24 03.30.2007 Trojan.Win32.Pakes
McAfee 4995 03.29.2007 no virus found
Microsoft 1.2306 03.30.2007 no virus found
NOD32v2 2157 03.30.2007 Win32/Wigon.R
Norman 5.80.02 03.30.2007 no virus found
Panda 9.0.0.4 03.30.2007 W32/Sdbot.KBB.worm
Prevx1 V2 03.30.2007 no virus found
Sophos 4.16.0 03.30.2007 no virus found
Sunbelt 2.2.907.0 03.29.2007 no virus found
Symantec 10 03.30.2007 Trojan.Pandex
TheHacker 6.1.6.083 03.30.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.3 03.29.2007 no virus found
VirusBuster 4.3.7:9 03.30.2007 no virus found
Webwasher-Gateway 6.0.1 03.30.2007 Heuristic.Malware

Aditional Information
File size: 29184 bytes
MD5: ae6ae9a864f6ce3d63aed2c616a75ab3
SHA1: 46a44acd733e3277dbe580340c5a30d3bf6560b7

[Dandy]

Complete scanning result of "regger.exe", received in VirusTotal at 04.01.2007, 0018 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.31.0 03.31.2007 no virus found
AntiVir 7.3.1.47 03.31.2007 TR/Spy.Webmoner.BQ.7
Authentium 4.93.8 03.31.2007 no virus found
Avast 4.7.936.0 03.31.2007 no virus found
AVG 7.5.0.447 03.31.2007 PSW.Generic3.CRT
BitDefender 7.2 04.01.2007 no virus found
CAT-QuickHeal 9.00 03.31.2007 TrojanSpy.Webmoner.bq
ClamAV devel-20070312 04.01.2007 no virus found
DrWeb 4.33 03.31.2007 Trojan.PWS.Webmonier
eSafe 7.0.15.0 03.31.2007 Win32.Webmoner.bq
eTrust-Vet 30.6.3527 03.31.2007 no virus found
Ewido 4.0 03.31.2007 Logger.Webmoner.bq
FileAdvisor 1 04.01.2007 no virus found
Fortinet 2.85.0.0 03.31.2007 Spy/Webmoner
F-Prot 4.3.1.45 03.30.2007 no virus found
F-Secure 6.70.13030.0 03.31.2007 Trojan-Spy.Win32.Webmoner.bq
Ikarus T3.1.1.3 03.31.2007 Trojan-Clicker.Win32.NetBuie.H
Kaspersky 4.0.2.24 04.01.2007 Trojan-Spy.Win32.Webmoner.bq
McAfee 4997 03.31.2007 no virus found
Microsoft 1.2306 03.31.2007 no virus found
NOD32v2 2160 03.31.2007 probably unknown NewHeur_PE virus
Norman 5.80.02 03.31.2007 W32/Smalltroj.BFPU
Panda 9.0.0.4 03.31.2007 no virus found
Prevx1 V2 04.01.2007 no virus found
Sophos 4.16.0 03.30.2007 no virus found
Sunbelt 2.2.907.0 03.31.2007 Trojan-Spy.Win32.Webmoner.bq
Symantec 10 03.31.2007 no virus found
TheHacker 6.1.6.083 03.30.2007 Trojan/Spy.Webmoner.bq
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.3 03.30.2007 Trojan-Spy.Win32.Webmoner.bq
VirusBuster 4.3.7:9 03.31.2007 no virus found
Webwasher-Gateway 6.0.1 03.31.2007 Trojan.Spy.Webmoner.BQ.7

Aditional Information
File size: 28672 bytes
MD5: 99279721cdb014db213567634d62c0b9
SHA1: b5abcc0bdeb3306be86ea04616e1ef51b52459c1

[Alex_Goodwin]

STATUS: FINISHEDComplete scanning result of "regger.exe", received in VirusTotal at 04.01.2007, 01:14:48 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.3.31.0 03.31.2007 no virus found
AntiVir 7.3.1.47 03.31.2007 HEUR/Crypted
Authentium 4.93.8 03.31.2007 no virus found
Avast 4.7.936.0 03.31.2007 no virus found
AVG 7.5.0.447 03.31.2007 no virus found
BitDefender 7.2 04.01.2007 DeepScan:Generic.Dialer.A076647F
CAT-QuickHeal 9.00 03.31.2007 no virus found
ClamAV devel-20070312 04.01.2007 no virus found
DrWeb 4.33 03.31.2007 no virus found
eSafe 7.0.15.0 03.31.2007 no virus found
eTrust-Vet 30.6.3527 03.31.2007 no virus found
Ewido 4.0 03.31.2007 no virus found
FileAdvisor 1 04.01.2007 no virus found
Fortinet 2.85.0.0 03.31.2007 suspicious
F-Prot 4.3.1.45 03.30.2007 no virus found
F-Secure 6.70.13030.0 03.31.2007 no virus found
Ikarus T3.1.1.3 03.31.2007 Trojan.Peed
Kaspersky 4.0.2.24 04.01.2007 no virus found
McAfee 4997 03.31.2007 New Malware.bl
Microsoft 1.2306 04.01.2007 no virus found
NOD32v2 2160 03.31.2007 a variant of Win32/PSW.LdPinch.NCB
Norman 5.80.02 03.31.2007 no virus found
Panda 9.0.0.4 03.31.2007 Suspicious file
Prevx1 V2 04.01.2007 no virus found
Sophos 4.16.0 03.30.2007 no virus found
Sunbelt 2.2.907.0 03.31.2007 VIPRE.Suspicious
Symantec 10 03.31.2007 no virus found
TheHacker 6.1.6.083 03.30.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.3 03.30.2007 MalwareScope.Trojan-PSW.Pinch.1
VirusBuster 4.3.7:9 03.31.2007 no virus found
Webwasher-Gateway 6.0.1 03.31.2007 Heuristic.Crypted


Aditional Information
File size: 51193 bytes
MD5: 0b20c998fc371512ce3ad8c56b4f2347
SHA1: 6bd111d9b5815ffe39a76d223a98780326479ebc
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.
давно я сдесь не писал...

[santy]

Complete scanning result of "stration_XX.zip", received in VirusTotal at 04.03.2007, 04:48:38 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.3.0 04.02.2007 no virus found
AntiVir 7.3.1.48 04.02.2007 TR/Dldr.Stration.Gen
Authentium 4.93.8 03.31.2007 W32/Warezov.gen!W32DL
Avast 4.7.936.0 04.02.2007 no virus found
AVG 7.5.0.447 04.02.2007 no virus found
BitDefender 7.2 04.03.2007 BehavesLike:Trojan.Downloader
CAT-QuickHeal 9.00 04.02.2007 (Suspicious) - DNAScan
ClamAV devel-20070312 04.03.2007 Worm.Stration.pac-1
DrWeb 4.33 04.03.2007 no virus found
eSafe 7.0.15.0 04.02.2007 Win32.Warezov.gen
eTrust-Vet 30.6.3535 04.02.2007 Win32/Stration!ZIP!generic
Ewido 4.0 04.02.2007 no virus found
FileAdvisor 1 04.03.2007 no virus found
Fortinet 2.85.0.0 04.02.2007 W32/Stration.JQ@mm
F-Prot 4.3.1.45 03.30.2007 W32/Warezov.gen!W32DL
F-Secure 6.70.13030.0 04.03.2007 W32/Downloader
Ikarus T3.1.1.3 04.02.2007 Email-Worm.Win32.Warezov.jq
Kaspersky 4.0.2.24 04.03.2007 no virus found
McAfee 4998 04.02.2007 W32/Stration.dr
Microsoft 1.2306 04.03.2007 TrojanDownloader:Win32/Stration!ZIP
NOD32v2 2164 04.02.2007 a variant of Win32/Stration.XW
Norman 5.80.02 04.02.2007 W32/Downloader
Panda 9.0.0.4 04.02.2007 Suspicious file
Prevx1 V2 04.03.2007 Possibly: Trojan.Update-KB
Sophos 4.16.0 03.30.2007 W32/Strati-Gen
Sunbelt 2.2.907.0 04.03.2007 VIPRE.Suspicious
Symantec 10 04.03.2007 no virus found
TheHacker 6.1.6.084 04.02.2007 W32/Stration.gen
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.3 04.02.2007 no virus found
VirusBuster 4.3.7:9 04.02.2007 no virus found
Webwasher-Gateway 6.0.1 04.03.2007 Trojan.Dldr.Stration.Gen

[Sanja]

Соррь что не по теме но есть идейка...

Потестит новый эмулятор каспа на этих зверях... т.к он еще месяца 2 в бете будет то ждать его на virustotal - долго.. а результаты интересны.

Соррь за оффтопик ж)

Вот для примера чего откопалось в файловом обменнике virusinfo.info

detected: virus Invader (modification) File: C:\virs\070402_002731_Quarantine_461015b368119.zip/Quarantine/2007-04-02/avz00005.dta

STATUS: FINISHEDComplete scanning result of "avz00005.dta", received in VirusTotal at 04.03.2007, 05:17:39 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.3.0 04.02.2007 Win-Trojan/Xema.53248.J
AntiVir 7.3.1.48 04.02.2007 BDS/Delf.ach.1
Authentium 4.93.8 03.31.2007 W32/Backdoor.CNN
Avast 4.7.936.0 04.02.2007 no virus found
AVG 7.5.0.447 04.02.2007 BackDoor.Generic.FEP
BitDefender 7.2 04.03.2007 no virus found
CAT-QuickHeal 9.00 04.02.2007 no virus found
ClamAV devel-20070312 04.03.2007 no virus found
DrWeb 4.33 04.03.2007 no virus found
eSafe 7.0.15.0 04.02.2007 no virus found
eTrust-Vet 30.6.3535 04.02.2007 no virus found
Ewido 4.0 04.02.2007 no virus found
FileAdvisor 1 04.03.2007 no virus found
Fortinet 2.85.0.0 04.02.2007 W32/Delf.ACH!tr.bdr
F-Prot 4.3.1.45 03.30.2007 W32/Backdoor.CNN
F-Secure 6.70.13030.0 04.03.2007 W32/Delf.ALZ
Ikarus T3.1.1.3 04.02.2007 Backdoor.Win32.Delf.ACH
Kaspersky 4.0.2.24 04.03.2007 no virus found
McAfee 4998 04.02.2007 no virus found
Microsoft 1.2306 04.03.2007 Backdoor:Win32/Delf.ACH
NOD32v2 2164 04.02.2007 no virus found
Norman 5.80.02 04.02.2007 W32/Delf.ALZ
Panda 9.0.0.4 04.02.2007 no virus found
Prevx1 V2 04.03.2007 no virus found
Sophos 4.16.0 03.30.2007 no virus found
Sunbelt 2.2.907.0 04.03.2007 no virus found
Symantec 10 04.03.2007 no virus found
TheHacker 6.1.6.084 04.02.2007 no virus found
UNA 1.83 03.16.2007 Backdoor.Delf.6A06
VBA32 3.11.3 04.02.2007 Backdoor.Win32.Delf.ach
VirusBuster 4.3.7:9 04.02.2007 Backdoor.Delf.AAW!AU
Webwasher-Gateway 6.0.1 04.03.2007 Trojan.Delf.ach.1

[urbanangel]

STATUS: FINISHEDComplete scanning result of "foto.rar", received in VirusTotal at 04.04.2007, 20:14:04 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.5.0 04.04.2007 no virus found
AntiVir 7.3.1.48 04.04.2007 HEUR/Crypted
Authentium 4.93.8 04.03.2007 no virus found
Avast 4.7.936.0 04.04.2007 no virus found
AVG 7.5.0.447 04.04.2007 no virus found
BitDefender 7.2 04.04.2007 no virus found
CAT-QuickHeal 9.00 04.04.2007 (Suspicious) - DNAScan
ClamAV devel-20070312 04.04.2007 no virus found
DrWeb 4.33 04.04.2007 no virus found
eSafe 7.0.15.0 04.03.2007 no virus found
eTrust-Vet 30.7.3540 04.04.2007 no virus found
Ewido 4.0 04.04.2007 no virus found
FileAdvisor 1 04.04.2007 no virus found
Fortinet 2.85.0.0 04.04.2007 suspicious
F-Prot 4.3.1.45 04.03.2007 no virus found
F-Secure 6.70.13030.0 04.04.2007 no virus found
Ikarus T3.1.1.3 04.04.2007 no virus found
Kaspersky 4.0.2.24 04.04.2007 no virus found
McAfee 5001 04.04.2007 no virus found
Microsoft 1.2405 04.04.2007 no virus found
NOD32v2 2168 04.04.2007 unpack error
Norman 5.80.02 04.04.2007 no virus found
Panda 9.0.0.4 04.04.2007 Suspicious file
Prevx1 V2 04.04.2007 no virus found
Sophos 4.16.0 03.30.2007 no virus found
Sunbelt 2.2.907.0 04.03.2007 VIPRE.Suspicious
Symantec 10 04.04.2007 no virus found
TheHacker 6.1.6.085 04.04.2007 no virus found
VBA32 3.11.3 04.03.2007 no virus found
VirusBuster 4.3.7:9 04.04.2007 Packed/FSG
Webwasher-Gateway 6.0.1 04.04.2007 Heuristic.Crypted


Aditional Information
File size: 666 bytes
MD5: 402b26f6ac05450fa157175738d53144
SHA1: 79af98b17abc35c829f69cc651f9501444e12579
packers: FSG
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Shu_b]

t-8810
Complete scanning result of "sms.zip", received in VirusTotal at 04.05.2007, 06:38:22 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.5.0 04.04.2007 no virus found
AntiVir 7.3.1.48 04.04.2007 no virus found
Authentium 4.93.8 04.04.2007 no virus found
Avast 4.7.936.0 04.04.2007 Win32:StartPage-187
AVG 7.5.0.447 04.04.2007 no virus found
BitDefender 7.2 04.05.2007 no virus found
CAT-QuickHeal 9.00 04.04.2007 no virus found
ClamAV devel-20070312 04.05.2007 no virus found
DrWeb 4.33 04.04.2007 no virus found
eSafe 7.0.15.0 04.04.2007 no virus found
eTrust-Vet 30.7.3543 04.05.2007 no virus found
Ewido 4.0 04.04.2007 no virus found
FileAdvisor 1 04.05.2007 no virus found
Fortinet 2.85.0.0 04.05.2007 no virus found
F-Prot 4.3.1.45 04.04.2007 no virus found
F-Secure 6.70.13030.0 04.05.2007 no virus found
Ikarus T3.1.1.3 04.05.2007 no virus found
Kaspersky 4.0.2.24 04.05.2007 no virus found
McAfee 5001 04.04.2007 no virus found
Microsoft 1.2405 04.05.2007 no virus found
NOD32v2 2168 04.04.2007 no virus found
Norman 5.80.02 04.04.2007 no virus found
Panda 9.0.0.4 04.05.2007 no virus found
Prevx1 V2 04.05.2007 no virus found
Sophos 4.16.0 03.30.2007 no virus found
Sunbelt 2.2.907.0 04.03.2007 no virus found
Symantec 10 04.05.2007 no virus found
TheHacker 6.1.6.085 04.04.2007 no virus found
VBA32 3.11.3 04.04.2007 Trojan.StartPage.1535
VirusBuster 4.3.7:9 04.04.2007 no virus found
Webwasher-Gateway 6.0.1 04.05.2007 no virus found

Aditional Information
File size: 14619 bytes
MD5: 832bdb10977e006c13b2efd5ac9592d9
SHA1: 216ffd17a808e0bccc6979cf8efa3ee18b90a0f3

[PavelA]

т-8636 Анализ C:\WINDOWS\help\45AD9FCA.dll

AhnLab-V3 2007.4.5.0 04.05.2007 no virus found
AntiVir 7.3.1.48 04.05.2007 TR/Crypt.NSPM.Gen
Authentium 4.93.8 04.04.2007 Possibly a new variant of W32/PWStealer.gen1
Avast 4.7.936.0 04.05.2007 Win32:Tibs-ADO
AVG 7.5.0.447 04.04.2007 no virus found
BitDefender 7.2 04.05.2007 no virus found
CAT-QuickHeal 9.00 04.04.2007 no virus found
ClamAV devel-20070312 04.05.2007 no virus found
DrWeb 4.33 04.05.2007 no virus found
eSafe 7.0.15.0 04.04.2007 suspicious Trojan/Worm
eTrust-Vet 30.7.3544 04.05.2007 Win32/NSAnti
Ewido 4.0 04.04.2007 no virus found
FileAdvisor 1 04.05.2007 no virus found
Fortinet 2.85.0.0 04.05.2007 PossibleThreat
F-Prot 4.3.1.45 04.04.2007 W32/PWStealer.gen1
F-Secure 6.70.13030.0 04.05.2007 no virus found
Ikarus T3.1.1.3 04.05.2007 MalwareScope.Worm.Viking.3
Kaspersky 4.0.2.24 04.05.2007 no virus found
McAfee 5001 04.04.2007 no virus found
Microsoft 1.2405 04.05.2007 no virus found
NOD32v2 2169 04.05.2007 no virus found
Norman 5.80.02 04.05.2007 no virus found
Panda 9.0.0.4 04.05.2007 Trj/QQPass.XB
Prevx1 V2 04.05.2007 no virus found
Sophos 4.16.0 03.30.2007 no virus found
Sunbelt 2.2.907.0 04.03.2007 no virus found
Symantec 10 04.05.2007 no virus found
TheHacker 6.1.6.085 04.04.2007 no virus found
VBA32 3.11.3 04.04.2007 Trojan-PSW.Win32.Nilage.ara
VirusBuster 4.3.7:9 04.04.2007 no virus found
Webwasher-Gateway 6.0.1 04.05.2007 Trojan.Crypt.NSPM.Gen

[Shu_b]

t=8833
Complete scanning result of "AlxRes.dll.bak", received in VirusTotal at 04.06.2007, 13:14:37 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.5.0 04.06.2007 no virus found
AntiVir 7.3.1.48 04.06.2007 no virus found
Authentium 4.93.8 04.06.2007 no virus found
Avast 4.7.936.0 04.05.2007 no virus found
AVG 7.5.0.447 04.05.2007 Adware Generic.SNO
BitDefender 7.2 04.06.2007 Adware.Alexabar.P
CAT-QuickHeal 9.00 04.05.2007 no virus found
ClamAV devel-20070312 04.06.2007 no virus found
DrWeb 4.33 04.06.2007 no virus found
eSafe 7.0.15.0 04.06.2007 no virus found
eTrust-Vet 30.7.3546 04.06.2007 no virus found
Ewido 4.0 04.06.2007 Adware.AlexaBar
FileAdvisor 1 04.06.2007 High threat detected
Fortinet 2.85.0.0 04.06.2007 no virus found
F-Prot 4.3.1.45 04.04.2007 W32/Adware.DMK
F-Secure 6.70.13030.0 04.06.2007 no virus found
Ikarus T3.1.1.3 04.06.2007 not-a-virus:AdWare.Win32.AlexaBar.j
Kaspersky 4.0.2.24 04.06.2007 not-a-virus:AdWare.Win32.AlexaBar.j
McAfee 5002 04.05.2007 potentially unwanted program Adware-Alexa
Microsoft 1.2405 04.06.2007 no virus found
NOD32v2 2170 04.05.2007 Win32/Adware.Alexa
Norman 5.80.02 04.05.2007 no virus found
Panda 9.0.0.4 04.06.2007 no virus found
Prevx1 V2 04.06.2007 no virus found
Sophos 4.16.0 04.06.2007 no virus found
Sunbelt 2.2.907.0 04.03.2007 no virus found
Symantec 10 04.06.2007 Trackware.Alexa
TheHacker 6.1.6.085 04.04.2007 no virus found
VBA32 3.11.3 04.04.2007 AdWare.Win32.AlexaBar.j
VirusBuster 4.3.7:9 04.05.2007 no virus found
Webwasher-Gateway 6.0.1 04.06.2007 Win32.Vulnerable.gen!High (suspicious)

Aditional Information
File size: 446464 bytes

[RobinFood]

Complete scanning result of "ipv6monl.dll", received in VirusTotal at 04.06.2007, 19:44:36 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.7.0 04.06.2007 no virus found
AntiVir 7.3.1.48 04.06.2007 TR/Spy.BZub.IH.9
Authentium 4.93.8 04.06.2007 no virus found
Avast 4.7.936.0 04.06.2007 Win32:BZub-DK
AVG 7.5.0.447 04.05.2007 PSW.Generic3.OWR
BitDefender 7.2 04.06.2007 no virus found
CAT-QuickHeal 9.00 04.06.2007 TrojanSpy.BZub.ih
ClamAV devel-20070312 04.06.2007 Trojan.Spy-1412
DrWeb 4.33 04.06.2007 Trojan.PWS.Tanspy
eSafe 7.0.15.0 04.06.2007 no virus found
eTrust-Vet 30.7.3546 04.06.2007 no virus found
Ewido 4.0 04.06.2007 Logger.BZub.ndh
FileAdvisor 1 04.06.2007 no virus found
Fortinet 2.85.0.0 04.06.2007 no virus found
F-Prot 4.3.1.45 04.04.2007 no virus found
F-Secure 6.70.13030.0 04.06.2007 Trojan-Spy.Win32.BZub.ih
Ikarus T3.1.1.3 04.06.2007 Trojan-Spy.Win32.BZub.ih
Kaspersky 4.0.2.24 04.06.2007 Trojan-Spy.Win32.BZub.ih
McAfee 5003 04.06.2007 Spy-Agent.ba
Microsoft 1.2405 04.06.2007 TrojanSpy:Win32/Bzub.gen!dll
NOD32v2 2171 04.06.2007 Win32/Spy.BZub.NDH
Norman 5.80.02 04.05.2007 W32/BZub.RT
Panda 9.0.0.4 04.06.2007 Trj/Bzub.W
Prevx1 V2 04.06.2007 no virus found
Sophos 4.16.0 04.06.2007 Mal/Cimuz-A
Sunbelt 2.2.907.0 04.03.2007 no virus found
Symantec 10 04.06.2007 Infostealer.Bzup
TheHacker 6.1.6.085 04.04.2007 Trojan/Spy.BZub.ih
VBA32 3.11.3 04.04.2007 no virus found
VirusBuster 4.3.7:9 04.06.2007 TrojanSpy.BZub.Gen.9
Webwasher-Gateway 6.0.1 04.06.2007 Trojan.Spy.BZub.IH.9


Aditional Information
File size: 65240 bytes
MD5: 3ff67578719d68ab938739dae4be8e51
SHA1: abd93765fa4317e2c6fe4981dff195b8a0c8a512