Complete scanning result of "mensagem.cmd", received in VirusTotal at 07.24.2006, 21:42:59 (CET). Antivirus Version Update Result AntiVir 6.35.0.24 07.24.2006 TR/Delphi.Downloader.Gen Authentium 4.93.8 07.21.2006 Possibly a new variant of W32/Downloader-Web-based!Maximus Avast 4.7.844.0 07.24.2006 no virus found AVG 386 07.24.2006 no virus found BitDefender 7.2 07.24.2006 BehavesLike:Trojan.Downloader CAT-QuickHeal 8.00 07.22.2006 no virus found ClamAV devel-20060426 07.24.2006 no virus found DrWeb 4.33 07.24.2006 no virus found eTrust-InoculateIT 23.72.76 07.23.2006 no virus found eTrust-Vet 12.6.2306 07.24.2006 no virus found Ewido 4.0 07.24.2006 no virus found Fortinet 2.77.0.0 07.23.2006 no virus found F-Prot 3.16f 07.21.2006 Possibly a new variant of W32/Downloader-Web-based!Maximus F-Prot4 4.2.1.29 07.24.2006 W32/Downloader-Web-based!Maximus Ikarus 0.2.65.0 07.24.2006 no virus found Kaspersky 4.0.2.24 07.24.2006 no virus found McAfee 4813 07.24.2006 Downloader-ACH Microsoft 1.1508 07.24.2006 no virus found NOD32v2 1.1677 07.24.2006 a variant of Win32/TrojanDownloader.Dadobra.IA Norman 5.90.23 07.24.2006 W32/Downloader Panda 9.0.0.4 07.24.2006 Suspicious file Sophos 4.07.0 07.24.2006 no virus found Symantec 8.0 07.24.2006 no virus found TheHacker 5.9.8.180 07.24.2006 no virus found UNA 1.83 07.24.2006 no virus found VBA32 3.11.0 07.24.2006 no virus found VirusBuster 4.3.7:9 07.24.2006 no virus found Aditional Information File size: 39936 bytes MD5: 4ebda6f24d4f3f076a77867f35ff567b SHA1: e9a24244588792ec6c807fff8afb36f2dca820f5 Norman SandBox: [ General information ] * **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER * TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**. * File length: 39936 bytes. [ Changes to filesystem ] * Creates file C:windowx2.exe. [ Network services ] * Downloads file from * http://paginas.terra.com.br/relacionamento/cartaodeamor/bx2.w00t as * c:/windows/bx2.exe. [ Security issues ] * Starting downloaded file - potential security problem. VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.