Complete scanning result of "entre.com", received in VirusTotal at 09.14.2006, 18:42:35 (CET). Antivirus Version Update Result AntiVir 7.2.0.16 09.14.2006 no virus found Authentium 4.93.8 09.14.2006 no virus found Avast 4.7.844.0 09.13.2006 no virus found AVG 386 09.14.2006 no virus found BitDefender 7.2 09.14.2006 BehavesLike:Trojan.Downloader CAT-QuickHeal 8.00 09.14.2006 (Suspicious) - DNAScan ClamAV devel-20060426 09.14.2006 no virus found DrWeb 4.33 09.14.2006 no virus found eTrust-InoculateIT 23.72.124 09.14.2006 no virus found eTrust-Vet 30.3.3077 09.14.2006 no virus found Ewido 4.0 09.14.2006 no virus found Fortinet 2.82.0.0 09.13.2006 no virus found F-Prot 3.16f 09.14.2006 no virus found F-Prot4 4.2.1.29 09.14.2006 no virus found Ikarus 0.2.65.0 09.14.2006 no virus found Kaspersky 4.0.2.24 09.14.2006 no virus found McAfee 4851 09.13.2006 no virus found Microsoft 1.1560 09.14.2006 no virus found NOD32v2 1.1756 09.14.2006 probably unknown NewHeur_PE virus Norman 5.90.23 09.14.2006 W32/Downloader Panda 9.0.0.4 09.14.2006 Suspicious file Sophos 4.09.0 09.14.2006 no virus found Symantec 8.0 09.14.2006 no virus found TheHacker 5.9.8.211 09.14.2006 no virus found UNA 1.83 09.14.2006 no virus found VBA32 3.11.1 09.13.2006 no virus found VirusBuster 4.3.7:9 09.14.2006 no virus found Aditional Information File size: 34816 bytes MD5: ed930003a6305140048b67ff336a66ac SHA1: 40ce81dc6b779ec01da464bbbf69562f724f00da packers: TeLock Norman SandBox: [ General information ] * **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**. * File length: 34816 bytes. [ Changes to filesystem ] * Creates file C:mstray64.exe. [ Network services ] * Downloads file from http://www.wellchoose.com/files/temp/0123.txt as c:mstray64.exe. [ Security issues ] * Starting downloaded file - potential security problem. [ Process/window information ] * Creates a mutex EMHdxaZd. * Attemps to open c:mstray64.exe NULL. VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.