Complete scanning result of "VacinaPB32.exe", received in VirusTotal at 08.01.2006, 18:43:13 (CET). Antivirus Version Update Result AntiVir 6.35.1.0 08.01.2006 HEUR/Trojan.Downloader Authentium 4.93.8 07.31.2006 could be infected with an unknown virus Avast 4.7.844.0 08.01.2006 no virus found AVG 386 07.31.2006 no virus found BitDefender 7.2 08.01.2006 Generic.Malware.Sdld.8273CB8E CAT-QuickHeal 8.00 07.31.2006 (Suspicious) - DNAScan ClamAV devel-20060426 08.01.2006 no virus found DrWeb 4.33 08.01.2006 DLOADER.Trojan eTrust-InoculateIT 23.72.83 07.31.2006 no virus found eTrust-Vet 12.6.2319 08.01.2006 no virus found Ewido 4.0 08.01.2006 no virus found Fortinet 2.77.0.0 08.01.2006 suspicious F-Prot 3.16f 07.31.2006 could be infected with an unknown virus F-Prot4 4.2.1.29 07.31.2006 Possibly a new unknown PE_Virus!Maximus Ikarus 0.2.65.0 08.01.2006 no virus found Kaspersky 4.0.2.24 08.01.2006 Trojan-Downloader.Win32.Banload.bba McAfee 4819 08.01.2006 Generic Downloader.bd Microsoft 1.1508 08.01.2006 no virus found NOD32v2 1.1686 08.01.2006 probably unknown NewHeur_PE virus Norman 5.90.23 08.01.2006 W32/Downloader Panda 9.0.0.4 08.01.2006 Suspicious file Sophos 4.08.0 08.01.2006 no virus found Symantec 8.0 08.01.2006 no virus found TheHacker 5.9.8.184 07.31.2006 no virus found UNA 1.83 08.01.2006 no virus found VBA32 3.11.0 08.01.2006 Trojan.DownLoader.4395 VirusBuster 4.3.7:9 08.01.2006 no virus found Aditional Information File size: 8256 bytes MD5: 41406e01cbfcc01d0ed5cfcf842e9455 SHA1: 36607e0b024988f8c43a95ad6fbb01e466c0a0f5 packers: UPack packers: UPack Norman SandBox: [ General information ] * **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**. * File length: 8256 bytes. [ Changes to filesystem ] * Creates file C:windowswindows.exe. [ Network services ] * Downloads file from http://www.manifatturacorde.it/docs/Cartao.scr as c:windowswindows.exe. [ Security issues ] * Starting downloaded file - potential security problem. VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.