Complete scanning result of "fotos.scr", received in VirusTotal at 08.07.2006, 14:35:18 (CET).

Antivirus	Version	Update	Result
AntiVir	6.35.1.0	08.07.2006	TR/Delphi.Downloader.Gen
Authentium	4.93.8	08.06.2006	W32/Dropper.BKF
Avast	4.7.844.0	08.04.2006	no virus found
AVG	386	08.05.2006	Downloader.Generic2.IWO
BitDefender	7.2	08.07.2006	Trojan.Downloader.Delf.MK
CAT-QuickHeal	8.00	08.07.2006	no virus found
ClamAV	devel-20060426	08.06.2006	no virus found
DrWeb	4.33	08.07.2006	Trojan.DownLoader.11574
eTrust-InoculateIT	23.72.88	08.06.2006	no virus found
eTrust-Vet	12.6.2328	08.07.2006	no virus found
Ewido	4.0	08.07.2006	Downloader.Delf.acc
Fortinet	2.77.0.0	08.07.2006	W32/Delf.ACC!tr.dldr
F-Prot	3.16f	08.06.2006	security risk named W32/Dropper.BKF
F-Prot4	4.2.1.29	08.06.2006	W32/Dropper.BKF
Ikarus	0.2.65.0	08.07.2006	no virus found
Kaspersky	4.0.2.24	08.07.2006	Trojan-Downloader.Win32.Delf.acc
McAfee	4822	08.04.2006	no virus found
Microsoft	1.1508	08.04.2006	no virus found
NOD32v2	1.1694	08.05.2006	Win32/TrojanDownloader.Banload.NES
Norman	5.90.23	08.07.2006	W32/Downloader
Panda	9.0.0.4	08.07.2006	Suspicious file
Sophos	4.08.0	08.07.2006	no virus found
Symantec	8.0	08.07.2006	no virus found
TheHacker	5.9.8.187	08.07.2006	no virus found
UNA	1.83	08.04.2006	TrojanDownloader.Win32.Delf
VBA32	3.11.0	08.07.2006	Trojan-Downloader.Win32.Delf.acc
VirusBuster	4.3.7:9	08.06.2006	no virus found

Aditional Information
File size: 44032 bytes
MD5: 79426bbeb7e8bf888b59583c0ca8af84
SHA1: 967b78b184b2003b33ae5147fd29dcf8069c0c46
Norman SandBox:
[ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* File length: 44032 bytes.

[ Changes to filesystem ]
* Creates file C:Windowssystem32cssrs.scr.

[ Network services ]
* Downloads file from http://www.kumanta.com/wp/keyloger.scr as c:/Windows/system32/cssrs.scr.

[ Security issues ]
* Starting downloaded file - potential security problem.

[ Process/window information ]
* Attemps to NULL http://www.oboticario.com.br/ .
* Attemps to NULL c:/Windows/system32/cssrs.scr .

VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.