Complete scanning result of "Amor_Nao_Abra.scr", received in VirusTotal at 06.30.2006, 22:30:33 (CET). Antivirus Version Update Result AntiVir 6.35.0.19 06.30.2006 no virus found Authentium 4.93.8 06.29.2006 no virus found Avast 4.7.844.0 06.29.2006 no virus found AVG 386 06.30.2006 no virus found BitDefender 7.2 06.30.2006 Trojan.Downloader.Banload.AIA CAT-QuickHeal 8.00 06.30.2006 (Suspicious) - DNAScan ClamAV devel-20060426 06.30.2006 no virus found DrWeb 4.33 06.30.2006 no virus found eTrust-InoculateIT 23.72.53 06.30.2006 no virus found eTrust-Vet 12.6.2283 06.30.2006 no virus found Ewido 3.5 06.30.2006 no virus found Fortinet 2.77.0.0 06.30.2006 suspicious F-Prot 3.16f 06.29.2006 no virus found Ikarus 0.2.65.0 06.30.2006 Backdoor.Win32.Hupigon.BV Kaspersky 4.0.2.24 06.30.2006 Trojan-Downloader.Win32.Banload.xi McAfee 4797 06.30.2006 no virus found Microsoft 1.1481 06.30.2006 no virus found NOD32v2 1.1635 06.30.2006 probably unknown NewHeur_PE virus Norman 5.90.21 06.30.2006 W32/Downloader Panda 9.0.0.4 06.30.2006 no virus found Sophos 4.07.0 06.30.2006 no virus found Symantec 8.0 06.30.2006 Downloader.Bancos TheHacker 5.9.8.167 06.30.2006 no virus found UNA 1.83 06.30.2006 no virus found VBA32 3.11.0 06.30.2006 suspected of Trojan-Dropper.Delf.34 (paranoid heuristics) VirusBuster 4.3.7:9 06.30.2006 no virus found Aditional Information File size: 20168 bytes MD5: d2e296a9fcadf5370e656187d35492ca SHA1: ed04a9507b10343b8d4ea0053d29b95dc8c4f0c4 Norman SandBox: [ General information ] * **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER * TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**. * Decompressing NSPack. * File length: 20168 bytes. [ Changes to filesystem ] * Creates file C:WINDOWSSYSTEM32imgrt.scr. [ Network services ] * Downloads file from http://algos.paginas.sapo.pt/cartaodeamor20.jpg as * C:WINDOWSSYSTEM32imgrt.scr. [ Security issues ] * Starting downloaded file - potential security problem. VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.