| View previous topic :: View next topic |
| Author |
Message |
tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5865
|
Posted: Sun Apr 01, 2007 4:59 pm Post subject: gate.etel.dn.ua |
|
|
| Code: | | http://gate.etel.dn.ua/~dbs/cool.pif |
Looks like some fresh new malware! I've uploaded it to the Malware Listserv.
Complete scanning result of "cool.pif", received in VirusTotal at 04.01.2007, 18:25:33 (CET).
Antivirus Version Update Result
AhnLab-V3 2007.3.31.0 04.01.2007 no virus found
AntiVir 7.3.1.47 04.01.2007 no virus found
Authentium 4.93.8 03.31.2007 could be a corrupted executable file
Avast 4.7.936.0 03.31.2007 no virus found
AVG 7.5.0.447 03.31.2007 no virus found
BitDefender 7.2 04.01.2007 no virus found
CAT-QuickHeal 9.00 03.31.2007 no virus found
ClamAV devel-20070312 04.01.2007 no virus found
DrWeb 4.33 04.01.2007 no virus found
eSafe 7.0.15.0 04.01.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3527 03.31.2007 no virus found
Ewido 4.0 04.01.2007 no virus found
FileAdvisor 1 04.01.2007 no virus found
Fortinet 2.85.0.0 04.01.2007 REG/Zapchast.4D53!tr.bdr
F-Prot 4.3.1.45 03.30.2007 no virus found
F-Secure 6.70.13030.0 04.01.2007 no virus found
Ikarus T3.1.1.3 04.01.2007 no virus found
Kaspersky 4.0.2.24 04.01.2007 no virus found
McAfee 4997 03.31.2007 New Win32
Microsoft 1.2306 04.01.2007 no virus found
NOD32v2 2161 04.01.2007 no virus found
Norman 5.80.02 03.31.2007 no virus found
Panda 9.0.0.4 04.01.2007 Suspicious file
Prevx1 V2 04.01.2007 no virus found
Sophos 4.16.0 03.30.2007 no virus found
Sunbelt 2.2.907.0 03.31.2007 VIPRE.Suspicious
Symantec 10 04.01.2007 no virus found
TheHacker 6.1.6.083 03.30.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.3 04.01.2007 no virus found
VirusBuster 4.3.7:9 04.01.2007 no virus found
Webwasher-Gateway 6.0.1 04.01.2007 Win32.Malware.dam (suspicious)
Aditional Information
File size: 711266 bytes
MD5: 94913b52a5b8953817f5815c4eff74dc
SHA1: 1706e252cfd2434f8ed52a1cc6b663594e711e38
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.
|
|
| Back to top |
|
 |
nosirrah
Security Expert Special Response Team
 Joined: Apr 19, 2006 Posts: 6301 Location: USA
|
Posted: Sun Apr 01, 2007 5:05 pm Post subject: |
|
|
Did you run the offending file ? if not I can do that now for you .
|
|
| Back to top |
|
 |
tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5865
|
|
| Back to top |
|
 |
solcroft
MIRT Hunter
 Joined: Apr 01, 2007 Posts: 188
|
Posted: Sun Apr 01, 2007 5:35 pm Post subject: |
|
|
Seems to be an invalid Win32 executable on my system.
|
|
| Back to top |
|
 |
tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5865
|
Posted: Sun Apr 01, 2007 5:51 pm Post subject: |
|
|
| solcroft wrote: | | Seems to be an invalid Win32 executable on my system. |
I've just run it and I got the same thing.
|
|
| Back to top |
|
 |
|
|