Исследование антивирусов 5

[Winsent]

Complete scanning result of "cracker.exe", received in VirusTotal at 05.20.2007, 19:49:45 (CET).


Antivirus Version Update Result

AhnLab-V3 2007.5.16.1 05.18.2007 Dropper/Xema.23052
AntiVir 7.4.0.23 05.20.2007 TR/Crypt.XPACK.Gen
Authentium 4.93.8 05.18.2007 no virus found
Avast 4.7.997.0 05.18.2007 Win32:Small-DQX
AVG 7.5.0.467 05.20.2007 Downloader.Generic4.CXL
BitDefender 7.2 05.20.2007 Trojan.MulDrop.JA
CAT-QuickHeal 9.00 05.18.2007 no virus found
ClamAV devel-20070416 05.20.2007 Trojan.Spy-2857
DrWeb 4.33 05.20.2007 Trojan.MulDrop.6199
eSafe 7.0.15.0 05.20.2007 no virus found
eTrust-Vet 30.7.3644 05.19.2007 no virus found
Ewido 4.0 05.20.2007 no virus found
FileAdvisor 1 05.20.2007 no virus found
Fortinet 2.85.0.0 05.20.2007 suspicious
F-Prot 4.3.2.48 05.18.2007 no virus found
F-Secure 6.70.13030.0 05.18.2007 Trojan-Dropper.Win32.Agent.bif
Ikarus T3.1.1.7 05.20.2007 Trojan.CC-Joiner.1_5_2
Kaspersky 4.0.2.24 05.20.2007 Trojan-Dropper.Win32.Agent.bif
McAfee 5034 05.18.2007 no virus found
Microsoft 1.2503 05.20.2007 no virus found
NOD32v2 2278 05.20.2007 no virus found
Norman 5.80.02 05.18.2007 W32/Bifrose.GLE
Panda 9.0.0.4 05.20.2007 Suspicious file
Prevx1 V2 05.20.2007 no virus found
Sophos 4.17.0 05.20.2007 Mal/Basine-C
Sunbelt 2.2.907.0 05.17.2007 no virus found
Symantec 10 05.20.2007 no virus found
TheHacker 6.1.6.118 05.18.2007 no virus found
VBA32 3.12.0 05.20.2007 Trojan.CC-Joiner.1_5_2
VirusBuster 4.3.7:9 05.20.2007 Trojan.DR.Webmoner.Gen.2
Webwasher-Gateway 6.0.1 05.20.2007 Trojan.Crypt.XPACK.Gen

Aditional Information
File size: 81558 bytes
MD5: b56c5395ec5234fb516c2c3a4f81719a
SHA1: 8435b86aee7d609d65442638ee1fed3643cd6ce4

[anton_dr]

Из темы http://virusinfo.info/showthread.php?t=9842

Complete scanning result of "avz00001.dta", received in VirusTotal at 05.22.2007, 10:02:01 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.5.21.1 05.21.2007 no virus found
AntiVir 7.4.0.23 05.22.2007 TR/Agent.29961
Authentium 4.93.8 05.21.2007 Possibly a new variant of W32/new-malware!Maximus
Avast 4.7.997.0 05.21.2007 Win32: Ldpinch-GH
AVG 7.5.0.467 05.21.2007 no virus found
BitDefender 7.2 05.22.2007 DeepScan:Generic.Malware.SFYdldldg.D0CB6F96
CAT-QuickHeal 9.00 05.21.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 05.22.2007 no virus found
DrWeb 4.33 05.21.2007 no virus found
eSafe 7.0.15.0 05.21.2007 Suspicious Trojan/Worm
eTrust-Vet 30.7.3651 05.21.2007 no virus found
Ewido 4.0 05.21.2007 no virus found
FileAdvisor 1 05.22.2007 no virus found
Fortinet 2.85.0.0 05.22.2007 suspicious
F-Prot 4.3.2.48 05.21.2007 W32/new-malware!Maximus
F-Secure 6.70.13030.0 05.22.2007 LdPinch.JVR
Ikarus T3.1.1.7 05.22.2007 Trojan-Spy.Win32.Agent.DI
Kaspersky 4.0.2.24 05.22.2007 no virus found
McAfee 5035 05.21.2007 no virus found
Microsoft 1.2503 05.22.2007 no virus found
NOD32v2 2283 05.21.2007 no virus found
Norman 5.80.02 05.21.2007 LdPinch.JVR
Panda 9.0.0.4 05.21.2007 Trj/Ldpinch.AEQ
Prevx1 V2 05.22.2007 no virus found
Sophos 4.17.0 05.21.2007 Mal/Basine-C
Sunbelt 2.2.907.0 05.17.2007 VIPRE.Suspicious
Symantec 10 05.22.2007 no virus found
TheHacker 6.1.6.120 05.21.2007 no virus found
VBA32 3.12.0 05.21.2007 MalwareScope.Trojan-PSW.Pinch.42
VirusBuster 4.3.23:9 05.21.2007
Webwasher-Gateway 6.0.1 05.22.2007 Trojan.Agent.29961

Aditional Information
File size: 29961 bytes
MD5: d54368b0d7867ff2de9001c6877fb48e
SHA1: 261af0a5649191c57350a647588e6ebc0fd395e4
packers: FSG
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[Shu_b]

t-9928
Complete scanning result of "system32:lzx32.sys", received in VirusTotal at 05.22.2007, 09:58:56 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.5.21.1 05.21.2007 no virus found
AntiVir 7.4.0.23 05.22.2007 TR/Rootkit.Gen
Authentium 4.93.8 05.21.2007 no virus found
Avast 4.7.997.0 05.21.2007 no virus found
AVG 7.5.0.467 05.21.2007 no virus found
BitDefender 7.2 05.22.2007 no virus found
CAT-QuickHeal 9.00 05.21.2007 no virus found
ClamAV devel-20070416 05.22.2007 no virus found
DrWeb 4.33 05.21.2007 no virus found
eSafe 7.0.15.0 05.21.2007 no virus found
eTrust-Vet 30.7.3651 05.21.2007 no virus found
Ewido 4.0 05.21.2007 no virus found
FileAdvisor 1 05.22.2007 no virus found
Fortinet 2.85.0.0 05.22.2007 suspicious
F-Prot 4.3.2.48 05.21.2007 no virus found
F-Secure 6.70.13030.0 05.22.2007 no virus found
Ikarus T3.1.1.7 05.22.2007 no virus found
Kaspersky 4.0.2.24 05.22.2007 no virus found
McAfee 5035 05.21.2007 no virus found
Microsoft 1.2503 05.22.2007 no virus found
NOD32v2 2283 05.21.2007 no virus found
Norman 5.80.02 05.21.2007 no virus found
Panda 9.0.0.4 05.21.2007 Rootkit/Agent.FJB
Prevx1 V2 05.22.2007 Rootkit.Rustock.gen
Sophos 4.17.0 05.21.2007 no virus found
Sunbelt 2.2.907.0 05.17.2007 no virus found
Symantec 10 05.22.2007 Backdoor.Rustock.B
TheHacker 6.1.6.120 05.21.2007 no virus found
VBA32 3.12.0 05.21.2007 no virus found
VirusBuster 4.3.23:9 05.21.2007 no virus found
Webwasher-Gateway 6.0.1 05.22.2007 Trojan.Rootkit.Gen

Aditional Information
File size: 79094 bytes
MD5: 634a0a3104c4ea9b5ca575bc9938197b
SHA1: db1cb26582bd3dfbaf6c388ccf82dde7c4987098

[Shu_b]

новой страничке -новые промежуточные:

[Shu_b]

t-9973

Complete scanning result of "windrvNT.sys", received in VirusTotal at 05.24.2007, 0752 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.5.24.0 05.23.2007 no virus found
AntiVir 7.4.0.27 05.23.2007 no virus found
Authentium 4.93.8 05.23.2007 no virus found
Avast 4.7.997.0 05.22.2007 no virus found
AVG 7.5.0.467 05.23.2007 no virus found
BitDefender 7.2 05.24.2007 no virus found
CAT-QuickHeal 9.00 05.23.2007 no virus found
ClamAV devel-20070416 05.24.2007 no virus found
DrWeb 4.33 05.23.2007 no virus found
eSafe 7.0.15.0 05.21.2007 no virus found
eTrust-Vet 30.7.3658 05.24.2007 no virus found
Ewido 4.0 05.23.2007 no virus found
FileAdvisor 1 05.23.2007 No threat detected
Fortinet 2.85.0.0 05.24.2007 no virus found
F-Prot 4.3.2.48 05.23.2007 no virus found
F-Secure 6.70.13030.0 05.24.2007 no virus found
Ikarus T3.1.1.8 05.24.2007 no virus found
Kaspersky 4.0.2.24 05.24.2007 no virus found
McAfee 5037 05.23.2007 no virus found
Microsoft 1.2503 05.22.2007 no virus found
NOD32v2 2287 05.23.2007 no virus found
Norman 5.80.02 05.23.2007 no virus found
Panda 9.0.0.4 05.23.2007 no virus found
Prevx1 V2 05.23.2007 no virus found
Sophos 4.17.0 05.23.2007 no virus found
Sunbelt 2.2.907.0 05.24.2007 no virus found
Symantec 10 05.24.2007 no virus found
TheHacker 6.1.6.121 05.23.2007 Trojan/Rootkit
VBA32 3.12.0 05.23.2007 Trojan.NtRootKit.131
VirusBuster 4.3.23:9 05.23.2007 no virus found
Webwasher-Gateway 6.0.1 05.23.2007 no virus found

Aditional Information
File size: 35363 bytes
MD5: ce291805cb4cd561a5a569df4e28e41f
SHA1: 68d75fe1a8f84dbdee9331b5029e752b65f18954

[yu_mor]

Complete scanning result of "4234.exe.vir", received in VirusTotal at 05.25.2007, 08:38:42 (CET).
Antivirus Version Update Result
AhnLab-V3 2007.5.24.0 05.25.2007 no virus found
<b>AntiVir 7.4.0.27 05.25.2007 TR/Hijack.Age.41984/B]
Authentium 4.93.8 05.23.2007 no virus found
Avast 4.7.997.0 05.24.2007 no virus found
AVG 7.5.0.467 05.24.2007 no virus found
BitDefender 7.2 05.25.2007 Trojan.Grum.F
CAT-QuickHeal 9.00 05.24.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 05.25.2007 no virus found
DrWeb 4.33 05.25.2007 no virus found
eSafe 7.0.15.0 05.24.2007 no virus found
eTrust-Vet 30.7.3662 05.25.2007 no virus found
Ewido 4.0 05.24.2007 no virus found
FileAdvisor 1 05.25.2007 no virus found
Fortinet 2.85.0.0 05.25.2007 suspicious
F-Prot 4.3.2.48 05.24.2007 W32/NewMalware-LSR-based!Maximus
F-Secure 6.70.13030.0 05.25.2007 Trojan-Proxy.Win32.Small.du
Ikarus T3.1.1.8 05.25.2007 Trojan.Grum.F
Kaspersky 4.0.2.24 05.25.2007 Trojan-Proxy.Win32.Small.du
McAfee 5038 05.24.2007 no virus found
Microsoft 1.2503 05.24.2007 no virus found
NOD32v2 2290 05.24.2007 no virus found
Norman 5.80.02 05.24.2007 no virus found
Panda 9.0.0.4 05.24.2007 no virus found
Prevx1 V2 05.25.2007 no virus found
Sophos 4.17.0 05.23.2007 no virus found
Sunbelt 2.2.907.0 05.24.2007 no virus found
Symantec 10 05.25.2007 no virus found
TheHacker 6.1.6.122 05.25.2007 Trojan/Proxy.Small.du
VBA32 3.12.0 05.25.2007 no virus found
VirusBuster 4.3.23:9 05.24.2007 no virus found
Webwasher-Gateway 6.0.1 05.25.2007 Trojan.Hijack.Age.41984

Aditional Information
File size: 44544 bytes
MD5: e5132a228eaec30e23ae74e0d3edfae7
SHA1: d0d0e532bb0d7c9215f53aa70c143b9395fe4ac5

[zorro84]

[ file data ]
* name: test11.exe
* size: 121856
* md5.: 0e8723531d2b2f1585faf9088dc49320
* sha1: ec8e0442531703acae6de7c40f2479a1dc6fbf80

[ scan result ]
AhnLab-V3 2007.5.10.0/20070511 found nothing
AntiVir 7.4.0.15/20070512 found nothing
Authentium 4.93.8/20070512 found nothing
Avast 4.7.997.0/20070511 found nothing
AVG 7.5.0.467/20070513 found nothing
BitDefender 7.2/20070513 found nothing
CAT-QuickHeal 9.00/20070512 found nothing
ClamAV devel-20070416/20070513 found nothing
DrWeb 4.33/20070513 found nothing
eSafe 7.0.15.0/20070513 found nothing
eTrust-Vet 30.7.3628/20070511 found nothing
Ewido 4.0/20070513 found nothing
F-Prot 4.3.2.48/20070512 found nothing
F-Secure 6.70.13030.0/20070511 found nothing
FileAdvisor 1/20070513 found nothing
Fortinet 2.85.0.0/20070513 found nothing
Ikarus T3.1.1.7/20070513 found nothing
Kaspersky 4.0.2.24/20070513 found nothing
McAfee 5029/20070511 found nothing
Microsoft 1.2503/20070513 found nothing
NOD32v2 2262/20070512 found nothing
Norman 5.80.02/20070511 found nothing
Panda 9.0.0.4/20070513 found nothing
Prevx1 V2/20070513 found nothing
Sophos 4.17.0/20070511 found nothing
Sunbelt 2.2.907.0/20070512 found nothing
Symantec 10/20070513 found nothing
TheHacker 6.1.6.114/20070512 found nothing
VBA32 3.12.0/20070513 found [suspected of Malware.Delf.49 (paranoid heuristics)]
VirusBuster 4.3.7:9/20070513 found nothing
Webwasher-Gateway 6.0.1/20070513 found nothing

[zorro84]

[ file data ]
* name: test_p.exe
* size: 6133
* md5.: 81d1f69e7c3bf093695e5b942e78d90e
* sha1: cb97955b4ae4de6c224ab62a1ae5b2582f447801

[ scan result ]
AhnLab-V3 2007.5.21.1/20070522 found nothing
AntiVir 7.4.0.27/20070522 found [HEUR/Crypted]
Authentium 4.93.8/20070521 found nothing
Avast 4.7.997.0/20070522 found nothing
AVG 7.5.0.467/20070522 found nothing
BitDefender 7.2/20070522 found nothing
CAT-QuickHeal 9.00/20070522 found nothing
ClamAV devel-20070416/20070522 found nothing
DrWeb 4.33/20070522 found nothing
eSafe 7.0.15.0/20070521 found nothing
eTrust-Vet 30.7.3652/20070522 found nothing
Ewido 4.0/20070522 found nothing
F-Prot 4.3.2.48/20070522 found nothing
F-Secure 6.70.13030.0/20070522 found [Packed.Win32.PolyCrypt.b]
FileAdvisor 1/20070522 found nothing
Fortinet 2.85.0.0/20070522 found [suspicious]
Ikarus T3.1.1.8/20070522 found nothing
Kaspersky 4.0.2.24/20070522 found [Packed.Win32.PolyCrypt.b]
McAfee 5036/20070522 found [New Malware.bl]
Microsoft 1.2503/20070522 found nothing
NOD32v2 2285/20070522 found nothing
Norman 5.80.02/20070522 found nothing
Panda 9.0.0.4/20070522 found [Suspicious file]
Prevx1 V2/20070522 found nothing
Sophos 4.17.0/20070521 found nothing
Sunbelt 2.2.907.0/20070517 found [VIPRE.Suspicious]
Symantec 10/20070522 found nothing
TheHacker 6.1.6.120/20070521 found nothing
VBA32 3.12.0/20070522 found [Trojan-Dropper.Win32.Small.ab]
VirusBuster 4.3.23:9/20070522 found nothing
Webwasher-Gateway 6.0.1/20070522 found [Heuristic.Crypted]

[ notes ]
packers: PECRYPT
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[mayas]

Complete scanning result of "19E72AAFd01", received in VirusTotal at 05.27.2007, 23:04:30 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.5.24.0 05.25.2007 no virus found
AntiVir 7.4.0.27 05.27.2007 no virus found
Authentium 4.93.8 05.23.2007 no virus found
Avast 4.7.997.0 05.27.2007 no virus found
AVG 7.5.0.467 05.27.2007 no virus found
BitDefender 7.2 05.27.2007 MemScan:Trojan.PWS.LdPinch.BSG
CAT-QuickHeal 9.00 05.26.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 05.27.2007 no virus found
DrWeb 4.33 05.27.2007 Trojan.MulDrop.6397
eSafe 7.0.15.0 05.27.2007 no virus found
eTrust-Vet 30.7.3665 05.26.2007 no virus found
Ewido 4.0 05.27.2007 no virus found
FileAdvisor 1 05.27.2007 no virus found
Fortinet 2.85.0.0 05.27.2007 suspicious
F-Prot 4.3.2.48 05.25.2007 no virus found
F-Secure 6.70.13030.0 05.27.2007 no virus found
Ikarus T3.1.1.8 05.27.2007 no virus found
Kaspersky 4.0.2.24 05.27.2007 no virus found
McAfee 5039 05.25.2007 no virus found
Microsoft 1.2503 05.27.2007 no virus found
NOD32v2 2293 05.27.2007 a variant of Win32/PSW.LdPinch.BBY
Norman 5.80.02 05.25.2007 no virus found
Panda 9.0.0.4 05.27.2007 Suspicious file
Prevx1 V2 05.27.2007 no virus found
Sophos 4.18.0 05.25.2007 no virus found
Sunbelt 2.2.907.0 05.26.2007 no virus found
Symantec 10 05.27.2007 no virus found
TheHacker 6.1.6.123 05.25.2007 no virus found
VBA32 3.12.0 05.26.2007 suspected of Backdoor.IRCBot.2
VirusBuster 4.3.23:9 05.27.2007 no virus found
Webwasher-Gateway 6.0.1 05.27.2007 Win32.Malware.gen!88 (suspicious)

Aditional Information
File size: 137212 bytes
MD5: 04c5420a01fe69d86328a2d9267cf6d1
SHA1: 09d0a9e3a8540d419d6971c447604c9ed30ae8bd

[The Un4given]

Complete scanning result of "sms.exe", processed in VirusTotal at 05/29/2007 07:30:54 (CET).

[ file data ]
* name: sms.exe
* size: 22016
* md5.: 250a8563c48a18e81f1fc755487a923c
* sha1: 75c8568bc7ebaf8f657422e7eeb4bc08dfea0624

[ scan result ]
AhnLab-V3 2007.5.29.0/20070528 found nothing
AntiVir 7.4.0.27/20070528 found [TR/Dldr.Agent.bnz.11]
Authentium 4.93.8/20070523 found nothing
Avast 4.7.997.0/20070528 found nothing
AVG 7.5.0.467/20070528 found nothing
BitDefender 7.2/20070529 found nothing
CAT-QuickHeal 9.00/20070528 found nothing
ClamAV devel-20070416/20070529 found nothing
DrWeb 4.33/20070528 found [Trojan.DownLoader.22895]
eSafe 7.0.15.0/20070528 found [Win32.Agent.bnz]
eTrust-Vet 30.7.3670/20070528 found nothing
Ewido 4.0/20070528 found nothing
F-Prot 4.3.2.48/20070525 found nothing
F-Secure 6.70.13030.0/20070529 found [Trojan-Downloader.Win32.Agent.bnz]
FileAdvisor 1/20070529 found nothing
Fortinet 2.85.0.0/20070529 found [W32/Agent.BNZ!tr.dldr]
Ikarus T3.1.1.8/20070529 found nothing
Kaspersky 4.0.2.24/20070529 found [Trojan-Downloader.Win32.Agent.bnz]
McAfee 5040/20070528 found nothing
Microsoft 1.2503/20070529 found nothing
NOD32v2 2294/20070528 found nothing
Norman 5.80.02/20070528 found nothing
Panda 9.0.0.4/20070528 found nothing
Prevx1 V2/20070529 found nothing
Sophos 4.18.0/20070528 found nothing
Sunbelt 2.2.907.0/20070526 found nothing
Symantec 10/20070529 found nothing
TheHacker 6.1.6.124/20070528 found nothing
VBA32 3.12.0/20070528 found nothing
VirusBuster 4.3.23:9/20070528 found nothing
Webwasher-Gateway 6.0.1/20070529 found [Trojan.Dldr.Agent.bnz.11]

[zorro84]

Complete scanning result of "Word.exe", received in VirusTotal at 05.30.2007, 04:18:30 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.5.30.0 05.29.2007 no virus found
AntiVir 7.4.0.27 05.29.2007 TR/Dldr.Banload.anu.1
Authentium 4.93.8 05.23.2007 no virus found
Avast 4.7.997.0 05.29.2007 Win32:Banload-AZX
AVG 7.5.0.467 05.29.2007 Downloader.Generic3.JWT
BitDefender 7.2 05.30.2007 no virus found
CAT-QuickHeal 9.00 05.29.2007 TrojanDownloader.Banload.anu
ClamAV devel-20070416 05.30.2007 no virus found
DrWeb 4.33 05.29.2007 Trojan.Kidfun
eSafe 7.0.15.0 05.29.2007 Suspicious Trojan/Worm
eTrust-Vet 30.7.3672 05.29.2007 Win32/Meytux.A
Ewido 4.0 05.29.2007 no virus found
FileAdvisor 1 05.30.2007 no virus found
Fortinet 2.85.0.0 05.30.2007 no virus found
F-Prot 4.3.2.48 05.30.2007 no virus found
F-Secure 6.70.13030.0 05.30.2007 Trojan-Downloader.Win32.Banload.anu
Ikarus T3.1.1.8 05.29.2007 Trojan.Win32.VB.auq
Kaspersky 4.0.2.24 05.30.2007 Trojan-Downloader.Win32.Banload.anu
McAfee 5041 05.29.2007 PWS-Banker.gen.h
Microsoft 1.2503 05.29.2007 no virus found
NOD32v2 2296 05.29.2007 no virus found
Norman 5.80.02 05.29.2007 W32/Banload.JRX
Panda 9.0.0.4 05.30.2007 Trj/Agent.EFB
Prevx1 V2 05.30.2007 no virus found
Sophos 4.18.0 05.28.2007 no virus found
Sunbelt 2.2.907.0 05.26.2007 VIPRE.Suspicious
Symantec 10 05.30.2007 Downloader
TheHacker 6.1.6.124 05.28.2007 no virus found
VBA32 3.12.0 05.28.2007 no virus found
VirusBuster 4.3.23:9 05.29.2007 Trojan.DL.Banload.BXV
Webwasher-Gateway 6.0.1 05.30.2007 Trojan.Dldr.Banload.anu.1

Aditional Information
File size: 182272 bytes
MD5: cd1647a0ae3e6a98af061682a2d50649
SHA1: 70cd0f497a5a44f783b4f31c2305c5316f47542d
packers: PECompact
packers: PECOMPACT
packers: PecBundle, PECompact
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[mayas]

Complete scanning result of "Result.exe", received in VirusTotal at 06.01.2007, 21:54:17 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.5.31.2 06.01.2007 no virus found
AntiVir 7.4.0.29 06.01.2007 no virus found
Authentium 4.93.8 05.23.2007 no virus found
Avast 4.7.997.0 06.01.2007 no virus found
AVG 7.5.0.467 06.01.2007 no virus found
BitDefender 7.2 06.01.2007 no virus found
CAT-QuickHeal 9.00 06.01.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 06.01.2007 no virus found
DrWeb 4.33 06.01.2007 Trojan.MulDrop.6397
eSafe 7.0.15.0 05.31.2007 no virus found
eTrust-Vet 30.7.3682 06.01.2007 no virus found
Ewido 4.0 06.01.2007 no virus found
FileAdvisor 1 06.01.2007 no virus found
Fortinet 2.85.0.0 06.01.2007 suspicious
F-Prot 4.3.2.48 06.01.2007 no virus found
F-Secure 6.70.13030.0 06.01.2007 no virus found
Ikarus T3.1.1.8 06.01.2007 no virus found
Kaspersky 4.0.2.24 06.01.2007 no virus found
McAfee 5044 06.01.2007 no virus found
Microsoft 1.2503 06.01.2007 no virus found
NOD32v2 2305 06.01.2007 no virus found
Norman 5.80.02 06.01.2007 no virus found
Panda 9.0.0.4 06.01.2007 Suspicious file
Prevx1 V2 06.01.2007 no virus found
Sophos 4.18.0 06.01.2007 no virus found
Sunbelt 2.2.907.0 05.30.2007 no virus found
Symantec 10 06.01.2007 no virus found
TheHacker 6.1.6.128 05.31.2007 no virus found
VBA32 3.12.0 06.01.2007 Trojan.MulDrop.6397
VirusBuster 4.3.23:9 06.01.2007 no virus found
Webwasher-Gateway 6.0.1 06.01.2007 Win32.Malware.gen!88 (suspicious)

Aditional Information
File size: 4339 bytes
MD5: 94ab364a4108be53c5f317728ff5b72f
SHA1: 08b374063af1e4185b55a3782b5fc71ffc27aa59

[Surfer]

Словил очень старый порех , результаты вирустотал удивили в некоторых местах.
И каспер почему-то не лечит его , очень странно..

Complete scanning result of "Project2.exe", received in VirusTotal at 06.10.2007, 17:22:50 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.6.9.0 06.08.2007 no virus found
AntiVir 7.4.0.32 06.09.2007 W32/Porex.A
Authentium 4.93.8 05.23.2007 Possibly a new variant of W32/NewMalware-Rootkit-I-based!Maximus
Avast 4.7.997.0 06.09.2007 Win32orex
AVG 7.5.0.467 06.09.2007 Win32/Porex.A
BitDefender 7.2 06.10.2007 Generic.PWStealer.B072534D
CAT-QuickHeal 9.00 06.09.2007 W32.Porex.B@pws
ClamAV devel-20070416 06.10.2007 W32.Porex.B
DrWeb 4.33 06.10.2007 Win32.HLLP.PissOff.36864
eSafe 7.0.15.0 06.06.2007 no virus found
eTrust-Vet 30.7.3707 06.09.2007 Win32/Porex
Ewido 4.0 06.10.2007 Heuristic.Win32.AVKiller
FileAdvisor 1 06.10.2007 no virus found
Fortinet 2.85.0.0 06.10.2007 W32/Porex.A
F-Prot 4.3.2.48 06.08.2007 W32/NewMalware-Rootkit-I-based!Maximus
F-Secure 6.70.13030.0 06.08.2007 Virus.Win32.Porex.a
Ikarus T3.1.1.8 06.10.2007 Virus.Win32.Porex.a
Kaspersky 4.0.2.24 06.10.2007 Virus.Win32.Porex.a
McAfee 5049 06.08.2007 W32/Porex.a
Microsoft 1.2503 06.10.2007 Worm:Win32/Porex.A@mm
NOD32v2 2321 06.10.2007 Win32/Porex
Norman 5.80.02 06.08.2007 no virus found
Panda 9.0.0.4 06.10.2007 W32/Porex.A
Prevx1 V2 06.10.2007 no virus found
Sophos 4.18.0 06.01.2007 W32/Porex-A
Sunbelt 2.2.907.0 06.09.2007 no virus found
Symantec 10 06.10.2007 W32.Porex
TheHacker 6.1.6.131 06.08.2007 no virus found
VBA32 3.12.0 06.10.2007 no virus found
VirusBuster 4.3.23:9 06.09.2007 Win32.Porex
Webwasher-Gateway 6.0.1 06.10.2007 Win32.Porex.A

Aditional Information
File size: 36864 bytes
MD5: a024dd97fd3a5be9eb5b95f4cee643f8
SHA1: d97c8e943bc3b5408cfb969e4cd30c4a78bf32ec

[PavelA]

C:\WINDOWS\System32\lanmandrv.sys Довольно свежий образец.
До посылки Олегу мало кто его определял.

AhnLab-V3 2007.6.12.2 06.14.2007 no virus found
AntiVir 7.4.0.32 06.14.2007 RKit/Agent.EC
Authentium 4.93.8 06.14.2007 no virus found
Avast 4.7.997.0 06.13.2007 Win32:Agent-GZM
AVG 7.5.0.467 06.13.2007 Hider.E
BitDefender 7.2 06.14.2007 no virus found
CAT-QuickHeal 9.00 06.13.2007 no virus found
ClamAV devel-20070416 06.14.2007 no virus found
DrWeb 4.33 06.14.2007 no virus found
eSafe 7.0.15.0 06.13.2007 no virus found
eTrust-Vet 30.7.3718 06.14.2007 no virus found
Ewido 4.0 06.13.2007 Rootkit.Agent.ec
FileAdvisor 1 06.14.2007 no virus found
Fortinet 2.85.0.0 06.14.2007 W32/Agent.EC!tr.rkit
F-Prot 4.3.2.48 06.13.2007 no virus found
F-Secure 6.70.13030.0 06.14.2007 Rootkit.Win32.Agent.ec
Ikarus T3.1.1.8 06.14.2007 Rootkit.Win32.Agent.ec
Kaspersky 4.0.2.24 06.14.2007 Rootkit.Win32.Agent.ec
McAfee 5052 06.13.2007 New Malware.z
Microsoft 1.2503 06.14.2007 no virus found
NOD32v2 2329 06.14.2007 no virus found
Norman 5.80.02 06.13.2007 W32/Rootkit.AFW
Panda 9.0.0.4 06.14.2007 Malware Generic
Prevx1 V2 06.14.2007 Covert.Code
Sophos 4.18.0 06.12.2007 no virus found
Sunbelt 2.2.907.0 06.14.2007 no virus found
Symantec 10 06.14.2007 no virus found
TheHacker 6.1.6.133 06.14.2007 Trojan/Agent.ec
VBA32 3.12.0.1 06.13.2007 Rootkit.Win32.Agent.ec
VirusBuster 4.3.23:9 06.13.2007 Rootkit.Agent.IAS
Webwasher-Gateway 6.0.1 06.14.2007 Rootkit.Agent.EC

Aditional Information
File size: 6912 bytes
MD5: c0e54ebe4be0586aab9b2df4d5ab7775
SHA1: 0d07c2b765b728e9e2d919d085f239ab18cf2c2f
Prevx info: http://fileinfo.prevx.com/fileinfo.a...=8c85100966037

[Surfer]

Complete scanning result of "ICQ.exe", received in VirusTotal at 06.14.2007, 14:42:56 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.6.12.2 06.14.2007 no virus found
AntiVir 7.4.0.32 06.14.2007 TR/PSW.LdPinch.ccd
Authentium 4.93.8 06.14.2007 no virus found
Avast 4.7.997.0 06.13.2007 no virus found
AVG 7.5.0.467 06.13.2007 no virus found
BitDefender 7.2 06.14.2007 no virus found
CAT-QuickHeal 9.00 06.14.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 06.14.2007 no virus found
DrWeb 4.33 06.14.2007 Trojan.PWS.LDPinch.1911
eSafe 7.0.15.0 06.13.2007 suspicious Trojan/Worm
eTrust-Vet 30.7.3718 06.14.2007 no virus found
Ewido 4.0 06.14.2007 no virus found
FileAdvisor 1 06.14.2007 no virus found
Fortinet 2.85.0.0 06.14.2007 suspicious
F-Prot 4.3.2.48 06.13.2007 no virus found
F-Secure 6.70.13030.0 06.14.2007 Trojan-PSW.Win32.LdPinch.ccd
Ikarus T3.1.1.8 06.14.2007 Trojan-PWS.Win32.Small.br
Kaspersky 4.0.2.24 06.14.2007 Trojan-PSW.Win32.LdPinch.ccd
McAfee 5052 06.13.2007 New Malware.n
Microsoft 1.2503 06.14.2007 VirTool:Win32/Obfuscator.C
NOD32v2 2329 06.14.2007 no virus found
Norman 5.80.02 06.14.2007 W32/Suspicious_U.gen
Panda 9.0.0.4 06.14.2007 Suspicious file
Prevx1 V2 06.14.2007 no virus found
Sophos 4.18.0 06.12.2007 Mal/Packer
Sunbelt 2.2.907.0 06.14.2007 VIPRE.Suspicious
Symantec 10 06.14.2007 no virus found
TheHacker 6.1.6.133 06.14.2007 no virus found
VBA32 3.12.0.1 06.13.2007 no virus found
VirusBuster 4.3.23:9 06.13.2007
Webwasher-Gateway 6.0.1 06.14.2007 Trojan.PSW.LdPinch.ccd

Aditional Information
File size: 47303 bytes
MD5: 4ef9f7d61e4d1ed8092dc30b30e371d9
SHA1: f55e6f10bff9ad1e8f1a812f2d6841c796b250db
packers: UPACK
packers: UPack
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

http://www.virustotal.com/vt/en/resu...208c72a8548519

[Surfer]

Complete scanning result of "ICQ.exe", received in VirusTotal at 06.14.2007, 18:10:36 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.6.12.2 06.14.2007 no virus found
AntiVir 7.4.0.32 06.14.2007 TR/PSW.LdPinch.ccd
Authentium 4.93.8 06.14.2007 no virus found
Avast 4.7.997.0 06.13.2007 no virus found
AVG 7.5.0.467 06.14.2007 no virus found
BitDefender 7.2 06.14.2007 Trojan.Dropper.RGV
CAT-QuickHeal 9.00 06.14.2007 no virus found
ClamAV devel-20070416 06.14.2007 no virus found
DrWeb 4.33 06.14.2007 Trojan.MulDrop.6267
eSafe 7.0.15.0 06.13.2007 no virus found
eTrust-Vet 30.7.3718 06.14.2007 no virus found
Ewido 4.0 06.14.2007 no virus found
FileAdvisor 1 06.14.2007 no virus found
Fortinet 2.85.0.0 06.14.2007 no virus found
F-Prot 4.3.2.48 06.14.2007 no virus found
F-Secure 6.70.13030.0 06.14.2007 Trojan-PSW.Win32.LdPinch.ccd
Ikarus T3.1.1.8 06.14.2007 Backdoor.IRC.Evil
Kaspersky 4.0.2.24 06.14.2007 Trojan-PSW.Win32.LdPinch.ccd
McAfee 5053 06.14.2007 New Malware.n
Microsoft 1.2503 06.14.2007 no virus found
NOD32v2 2329 06.14.2007 no virus found
Norman 5.80.02 06.14.2007 no virus found
Panda 9.0.0.4 06.14.2007 no virus found
Prevx1 V2 06.14.2007 no virus found
Sophos 4.18.0 06.12.2007 Mal/Packer
Sunbelt 2.2.907.0 06.14.2007 no virus found
Symantec 10 06.14.2007 no virus found
TheHacker 6.1.6.133 06.14.2007 no virus found
VBA32 3.12.0.1 06.13.2007 BackDoor.IRC.Evil
VirusBuster 4.3.23:9 06.14.2007 no virus found
Webwasher-Gateway 6.0.1 06.14.2007 Trojan.PSW.LdPinch.ccd


Aditional Information
File size: 121344 bytes
MD5: 50ea4c8828440a6cfa7087b032304108
SHA1: 400ddc2d8fa568b6765db8c8a0d096a133071e1b

http://www.virustotal.com/vt/en/resu...eaa40f1894125d

[ISO]

Сегодня получил открыточку на ящик. Вот результат:
Complete scanning result of "postcard.com", received in VirusTotal at 06.17.2007, 19:07:04 (CET).
Antivirus Version Update Result
AhnLab-V3 2007.6.9.0 06.08.2007 no virus found
AntiVir 7.4.0.32 06.16.2007 HEUR/Crypted
Authentium 4.93.8 06.16.2007 no virus found
Avast 4.7.997.0 06.16.2007 no virus found
AVG 7.5.0.467 06.17.2007 no virus found
BitDefender 7.2 06.17.2007 Trojan.Small.NCW
CAT-QuickHeal 9.00 06.16.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 06.17.2007 no virus found
DrWeb 4.33 06.17.2007 Trojan.MulDrop.6924
eSafe 7.0.15.0 06.17.2007 no virus found
eTrust-Vet 30.7.3721 06.15.2007 no virus found
Ewido 4.0 06.17.2007 no virus found
FileAdvisor 1 06.17.2007 no virus found
Fortinet 2.85.0.0 06.17.2007 W32/Small.NT!tr
F-Prot 4.3.2.48 06.08.2007 no virus found
F-Secure 6.70.13030.0 06.08.2007 no virus found
Ikarus T3.1.1.8 06.17.2007 Trojan.Win32.Small.nt
Kaspersky 4.0.2.24 06.17.2007 Trojan.Win32.Small.nt
McAfee 5054 06.15.2007 no virus found
Microsoft 1.2607 06.17.2007 no virus found
NOD32v2 2334 06.15.2007 no virus found
Norman 5.80.02 06.15.2007 no virus found
Panda 9.0.0.4 06.17.2007 Suspicious file
Prevx1 V2 06.17.2007 no virus found
Sophos 4.18.0 06.12.2007 no virus found
Sunbelt 2.2.907.0 06.09.2007 no virus found
Symantec 10 06.17.2007 no virus found
TheHacker 6.1.6.133 06.15.2007 no virus found
VBA32 3.12.0.2 06.15.2007 no virus found
VirusBuster 4.3.23:9 06.16.2007 no virus found
Webwasher-Gateway 6.0.1 06.16.2007 Heuristic.Crypted

Aditional Information
File size: 9216 bytes
MD5: b0e55401e9c1d9e32d137e00d680430e
SHA1: fc142e53a1d905ee07710bcd752c67a440ea9c55
packers: embedded
__________________

[Surfer]

Complete scanning result of "ICQmd5pc.exe", received in VirusTotal at 06.18.2007, 17:03:45 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.6.16.0 06.18.2007 no virus found
AntiVir 7.4.0.32 06.18.2007 HEUR/Crypted
Authentium 4.93.8 06.16.2007 no virus found
Avast 4.7.997.0 06.18.2007 Win32:Trojan-gen. {Other}
AVG 7.5.0.467 06.17.2007 Generic3.FSU
BitDefender 7.2 06.18.2007 Backdoor.Pcclient.GV
CAT-QuickHeal 9.00 06.18.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 06.18.2007 no virus found
DrWeb 4.33 06.18.2007 Trojan.PWS.LDPinch.1536
eSafe 7.0.15.0 06.17.2007 suspicious Trojan/Worm
eTrust-Vet 30.7.3726 06.18.2007 no virus found
Ewido 4.0 06.18.2007 no virus found
FileAdvisor 1 06.18.2007 High threat detected
Fortinet 2.85.0.0 06.18.2007 PossibleThreat
F-Prot 4.3.2.48 06.15.2007 no virus found
F-Secure 6.70.13030.0 06.18.2007 no virus found
Ikarus T3.1.1.8 06.18.2007 Backdoor.Win32.PcClient.GV
Kaspersky 4.0.2.24 06.18.2007 no virus found
McAfee 5054 06.15.2007 New Malware.u
Microsoft 1.2607 06.18.2007 no virus found
NOD32v2 2336 06.18.2007 a variant of Win32/PSW.LdPinch.BOB
Norman 5.80.02 06.18.2007 no virus found
Panda 9.0.0.4 06.17.2007 no virus found
Prevx1 V2 06.18.2007 no virus found
Sophos 4.18.0 06.12.2007 Mal/Packer
Sunbelt 2.2.907.0 06.16.2007 VIPRE.Suspicious
Symantec 10 06.18.2007 no virus found
TheHacker 6.1.6.134 06.18.2007 no virus found
VBA32 3.12.0.2 06.15.2007 suspected of Embedded.MalwareScope.Trojan-PSW.Pinch.42
VirusBuster 4.3.23:9 06.18.2007
Webwasher-Gateway 6.0.1 06.18.2007 Heuristic.Crypted


Aditional Information
File size: 236293 bytes
MD5: 8acc3214e944a0b7c3fb874b392916f7
SHA1: a7c0955db9b2b5ad670c166da5b964bd881efc88
packers: NsPack
packers: NSPACK, BINARYRES, MEW
Bit9 info: http://fileadvisor.bit9.com/services...fb874b392916f7
packers: NSPack, PE_Patch
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[mayas]

Complete scanning result of "system32.exe", received in VirusTotal at 06.18.2007, 23:44:00 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.6.16.0 06.18.2007 no virus found
AntiVir 7.4.0.32 06.18.2007 HEUR/Malware
Authentium 4.93.8 06.18.2007 no virus found
Avast 4.7.997.0 06.18.2007 no virus found
AVG 7.5.0.467 06.18.2007 no virus found
BitDefender 7.2 06.18.2007 BehavesLike:Win32.SMTP-Mailer
CAT-QuickHeal 9.00 06.18.2007 (Suspicious) - DNAScan
ClamAV devel-20070416 06.18.2007 no virus found
DrWeb 4.33 06.18.2007 no virus found
eSafe 7.0.15.0 06.17.2007 no virus found
eTrust-Vet 30.7.3726 06.18.2007 no virus found
Ewido 4.0 06.18.2007 no virus found
FileAdvisor 1 06.18.2007 no virus found
Fortinet 2.85.0.0 06.18.2007 no virus found
F-Prot 4.3.2.48 06.18.2007 no virus found
F-Secure 6.70.13030.0 06.18.2007 no virus found
Ikarus T3.1.1.8 06.18.2007 no virus found
Kaspersky 4.0.2.24 06.18.2007 no virus found
McAfee 5055 06.18.2007 PWS-LDPinch
Microsoft 1.2607 06.18.2007 no virus found
NOD32v2 2337 06.18.2007 no virus found
Norman 5.80.02 06.18.2007 no virus found
Panda 9.0.0.4 06.18.2007 Suspicious file
Prevx1 V2 06.18.2007 no virus found
Sophos 4.18.0 06.12.2007 no virus found
Sunbelt 2.2.907.0 06.16.2007 VIPRE.Suspicious
Symantec 10 06.18.2007 no virus found
TheHacker 6.1.6.134 06.18.2007 no virus found
VBA32 3.12.0.2 06.15.2007 MalwareScope.Trojan-PSW.Pinch.1
VirusBuster 4.3.23:9 06.18.2007 Trojan.LdPinch.Gen.2
Webwasher-Gateway 6.0.1 06.18.2007 Heuristic.Malware

Aditional Information
File size: 5632 bytes
MD5: 425b2f2a4792c6dd65f01cf5928f122a
SHA1: d0e2dd4656e73a0db2c070d1d32b298ff9c704dd
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

[zorro84]

STATUS: FINISHEDComplete scanning result of "totour.exe", received in VirusTotal at 06.20.2007, 05:08:47 (CET).

Antivirus Version Update Result

AhnLab-V3 2007.6.16.0 06.19.2007 Win-Trojan/Xema.variant
AntiVir 7.4.0.34 06.19.2007 TR/Agent.8798.A

Authentium 4.93.8 06.19.2007 no virus found

Avast 4.7.997.0 06.19.2007 Win32:Agent-HKL
AVG 7.5.0.467 06.19.2007 Generic4.TB
BitDefender 7.2 06.20.2007 Trojan.Agent.AAEZ
CAT-QuickHeal 9.00 06.19.2007 Trojan.Agent.afg
ClamAV devel-20070416 06.20.2007 Trojan.Agent-4509
DrWeb 4.33 06.19.2007 Trojan.Vqten
eSafe 7.0.15.0 06.19.2007 Win32.Agent.afg
eTrust-Vet 30.7.3727 06.19.2007 Win32/Netvq!generic
Ewido 4.0 06.19.2007 Trojan.Agent.afg
FileAdvisor 1 06.20.2007 High threat detected
Fortinet 2.91.0.0 06.19.2007 W32/Agent.AFG!tr

F-Prot 4.3.2.48 06.19.2007 no virus found

F-Secure 6.70.13030.0 06.19.2007 Trojan.Win32.Agent.afg
Ikarus T3.1.1.8 06.19.2007 Trojan.Win32.Agent.afg
Kaspersky 4.0.2.24 06.19.2007 Trojan.Win32.Agent.afg
McAfee 5056 06.19.2007 Generic.dx
Microsoft 1.2607 06.19.2007 Trojan:Win32/Agent!5712

NOD32v2 2339 06.19.2007 no virus found

Norman 5.80.02 06.19.2007 W32/Agent.BOFF
Panda 9.0.0.4 06.20.2007 Trj/Spabot.AN
Prevx1 V2 06.20.2007 TROJAN.AGENT.GEN
Sophos 4.18.0 06.12.2007 Troj/NetVQ-A
Sunbelt 2.2.907.0 06.16.2007 Trojan.Win32/Agent!5712
Symantec 10 06.20.2007 Trojan.Spabot

TheHacker 6.1.6.134 06.18.2007 no virus found

VBA32 3.12.0.2 06.19.2007 Trojan.Win32.Agent.afg
VirusBuster 4.3.23:9 06.19.2007 Trojan.Agent.IBT
Webwasher-Gateway 6.0.1 06.19.2007 Trojan.Agent.8798.A


Aditional Information
File size: 43520 bytes
MD5: 2e3cfb0ac604e1ff090268ff00289938
SHA1: 65d955b992401744db5fc83fdf42560bb60234a0
packers: UPX
packers: UPX
Bit9 info: http://fileadvisor.bit9.com/services...0268ff00289938
packers: UPX
Prevx info: http://fileinfo.prevx.com/fileinfo.a...09D6003C82DDCA