2 replies to this topic

[Fatdcuk]

hXXp://xpantivirus.com/2008/1/_freescan.php?aid=880019



File XPantivirus2008_v880019.exe received on 11.28.2007 20:29:58 (CET)

Result: 4/32 (12.5%)

Antivirus Version Last Update Result
AhnLab-V3 2007.11.29.0 2007.11.28 -
AntiVir 7.6.0.34 2007.11.28 TR/Delphi.Downloader.Gen
Authentium 4.93.8 2007.11.28 -
Avast 4.7.1074.0 2007.11.28 -
AVG 7.5.0.503 2007.11.28 -
BitDefender 7.2 2007.11.28 -
CAT-QuickHeal 9.00 2007.11.28 -
ClamAV 0.91.2 2007.11.28 -
DrWeb 4.44.0.09170 2007.11.28 -
eSafe 7.0.15.0 2007.11.28 suspicious Trojan/Worm
eTrust-Vet 31.3.5333 2007.11.28 -
Ewido 4.0 2007.11.28 -
FileAdvisor 1 2007.11.28 -
Fortinet 3.14.0.0 2007.11.28 -
F-Prot 4.4.2.54 2007.11.28 -
F-Secure 6.70.13030.0 2007.11.28 -
Ikarus T3.1.1.12 2007.11.28 -
Kaspersky 7.0.0.125 2007.11.28 -
McAfee 5173 2007.11.28 -
Microsoft 1.3007 2007.11.28 -
NOD32v2 2691 2007.11.28 -
Norman 5.80.02 2007.11.28 -
Panda 9.0.0.4 2007.11.28 -
Prevx1 V2 2007.11.28 Heuristic: Suspicious File With Persistence
Rising 20.20.21.00 2007.11.28 -
Sophos 4.23.0 2007.11.28 -
Sunbelt 2.2.907.0 2007.11.27 -
Symantec 10 2007.11.28 -
TheHacker 6.2.9.144 2007.11.28 -
VBA32 3.12.2.5 2007.11.28 -
VirusBuster 4.3.26:9 2007.11.28 -
Webwasher-Gateway 6.6.2 2007.11.28 Trojan.Delphi.Downloader.Gen
Additional information
File size: 54272 bytes
MD5: 6d174fc3df6c79db83a9036c4f51e8c8
SHA1: de16a8cf3ca1f4e1f02d5054087e87d5b1aa06f0
packers: UPX
packers: UPX
packers: PE_Patch.UPX, UPX



File xpa.exe received on 11.28.2007 20:57:07 (CET)

Result: 2/32 (6.25%)

Antivirus Version Last Update Result
AhnLab-V3 2007.11.29.0 2007.11.28 -
AntiVir 7.6.0.34 2007.11.28 -
Authentium 4.93.8 2007.11.28 -
Avast 4.7.1074.0 2007.11.28 -
AVG 7.5.0.503 2007.11.28 -
BitDefender 7.2 2007.11.28 -
CAT-QuickHeal 9.00 2007.11.28 -
ClamAV 0.91.2 2007.11.28 -
DrWeb 4.44.0.09170 2007.11.28 -
eSafe 7.0.15.0 2007.11.28 suspicious Trojan/Worm
eTrust-Vet 31.3.5333 2007.11.28 -
Ewido 4.0 2007.11.28 -
FileAdvisor 1 2007.11.28 -
Fortinet 3.14.0.0 2007.11.28 -
F-Prot 4.4.2.54 2007.11.28 -
F-Secure 6.70.13030.0 2007.11.28 -
Ikarus T3.1.1.12 2007.11.28 -
Kaspersky 7.0.0.125 2007.11.28 -
McAfee 5173 2007.11.28 -
Microsoft 1.3007 2007.11.28 -
NOD32v2 2691 2007.11.28 -
Norman 5.80.02 2007.11.28 -
Panda 9.0.0.4 2007.11.28 Suspicious file
Prevx1 V2 2007.11.28 -
Rising 20.20.21.00 2007.11.28 -
Sophos 4.23.0 2007.11.28 -
Sunbelt 2.2.907.0 2007.11.27 -
Symantec 10 2007.11.28 -
TheHacker 6.2.9.144 2007.11.28 -
VBA32 3.12.2.5 2007.11.28 -
VirusBuster 4.3.26:9 2007.11.28 -
Webwasher-Gateway 6.6.2 2007.11.28 -
Additional information
File size: 463872 bytes
MD5: 0a326b73690c6238b840f7a4c3a70735
SHA1: a11d3f8b0899fb27afdd61a37800288457ea01b5
packers: UPX
packers: UPX
packers: PE_Patch.UPX, UPX



http://threatexpert.com/report.aspx?uid=49...5c-0432eb5199fe

[nosirrah]

Revere IP goodness :

1. Altmaxtravel.com
2. Antispyguard.com
3. Bestsexworld.info
4. Eosads.com
5. Fastmediaservice.com
6. Traffic-converter.biz
7. Xpantivirus.com

[SwampDiner]

Added to newest database.