Complete scanning result of "Amor_Nao_Abra.scr", received in VirusTotal at
06.30.2006, 22:30:33 (CET).

Antivirus	Version	Update	Result
AntiVir	6.35.0.19	06.30.2006	no virus found
Authentium	4.93.8	06.29.2006	no virus found
Avast	4.7.844.0	06.29.2006	no virus found
AVG	386	06.30.2006	no virus found
BitDefender	7.2	06.30.2006	Trojan.Downloader.Banload.AIA
CAT-QuickHeal	8.00	06.30.2006	(Suspicious) - DNAScan
ClamAV	devel-20060426	06.30.2006	no virus found
DrWeb	4.33	06.30.2006	no virus found
eTrust-InoculateIT	23.72.53	06.30.2006	no virus found
eTrust-Vet	12.6.2283	06.30.2006	no virus found
Ewido	3.5	06.30.2006	no virus found
Fortinet	2.77.0.0	06.30.2006	suspicious
F-Prot	3.16f	06.29.2006	no virus found
Ikarus	0.2.65.0	06.30.2006	Backdoor.Win32.Hupigon.BV
Kaspersky	4.0.2.24	06.30.2006
Trojan-Downloader.Win32.Banload.xi
McAfee	4797	06.30.2006	no virus found
Microsoft	1.1481	06.30.2006	no virus found
NOD32v2	1.1635	06.30.2006	probably unknown NewHeur_PE virus
Norman	5.90.21	06.30.2006	W32/Downloader
Panda	9.0.0.4	06.30.2006	no virus found
Sophos	4.07.0	06.30.2006	no virus found
Symantec	8.0	06.30.2006	Downloader.Bancos
TheHacker	5.9.8.167	06.30.2006	no virus found
UNA	1.83	06.30.2006	no virus found
VBA32	3.11.0	06.30.2006	suspected of Trojan-Dropper.Delf.34 (paranoid
heuristics)
VirusBuster	4.3.7:9	06.30.2006	no virus found

Aditional Information
File size: 20168 bytes
MD5: d2e296a9fcadf5370e656187d35492ca
SHA1: ed04a9507b10343b8d4ea0053d29b95dc8c4f0c4
Norman SandBox:
[ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER
* TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* Decompressing NSPack.
* File length: 20168 bytes.

[ Changes to filesystem ]
* Creates file C:WINDOWSSYSTEM32imgrt.scr.

[ Network services ]
* Downloads file from http://algos.paginas.sapo.pt/cartaodeamor20.jpg as
* C:WINDOWSSYSTEM32imgrt.scr.

[ Security issues ]
* Starting downloaded file - potential security problem.

VirusTotal is a free service offered by Hispasec Sistemas. There are no
guarantees about the availability and continuity of this service. Although the
detection rate afforded by the use of multiple antivirus engines is far
superior to that offered by just one product, these results DO NOT guarantee
the harmlessness of a file. Currently, there is not any solution that offers a
100% effectiveness rate for detecting viruses and malware.