(autre dropper hxxp://www.albumgallery.org/photo05.exe)Yo creo que esta es tu fotografia!! hxxp://www.albumgallery.org/photo.php?=..
O4 - HKLM\..\Run: [Windows UDP Control Center] msnpd.exe
VirSCAN.org Scanned Report :
Scanned time : 2008/08/17 21:57:04 (CEST)
Scanner results: 25% Scanner(9/36) found malware!
File Name : photo.php
File Size : 374338 byte
File Type : PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5 : eb06c919e8a4df98a3ddd1e0157b8363
SHA1 : 9255283f816229fd8178f9615dde28f81d83e772
Online report : http://virscan.org/report/eb857800447ce ... 570f0.html
Scanner Engine Ver Sig Ver Sig Date Time Scan result
a-squared 3.5.0.22 2008.08.17 2008-08-17 2.54 -
AhnLab V3 2008.08.15.00 2008.08.15 2008-08-15 0.95 -
AntiVir 7.8.1.19 7.0.6.24 2008-08-16 2.20 TR/Crypt.CFI.Gen
Arcavir 1.0.5 200808171633 2008-08-17 1.42 -
AVAST! 3.0.1 080817-0 2008-08-17 0.69 Win32:Trojan-gen {Other}
AVG 7.5.51.442 270.6.4/1617 2008-08-17 1.54 SHeur.CCZK
BitDefender 7.60825.1556497 7.20559 2008-08-18 3.12 Trojan.Crypt.ED
CA (VET) 9.0.0.143 31.6.6035 2008-08-15 3.91 -
ClamAV 0.93.3 8051 2008-08-16 0.23 -
Comodo 2.11 2.0.0.619 2008-08-17 0.45 -
CP Secure 1.1.0.715 2008.08.18 2008-08-18 6.27 -
Dr.Web 4.44.0.9170 2008.08.17 2008-08-17 3.58 -
ewido 4.0.0.2 2008.08.17 2008-08-17 3.00 -
F-Prot 4.4.4.56 20080817 2008-08-17 1.05 W32/DelfInject.A.gen!Eldorado (generic, not disinfectable)
F-Secure 5.51.6100 2008.08.17.01 2008-08-17 3.31 -
Fortinet 2.81-3.11 9.436 2008-08-18 3.33 -
ViRobot 20080816 2008.08.16 2008-08-16 0.44 -
Ikarus T3.1.01.34 2008.08.17.71292 2008-08-17 3.43 BehavesLike.Win32.SMTP-Mailer
JiangMin 11.0.706 2008.08.17 2008-08-17 1.23 -
Kaspersky 5.5.10 2008.08.17 2008-08-17 0.25 -
KingSoft 2008.1.14.15 2008.8.17.15 2008-08-17 0.64 -
McAfee 5.2.00 5362 2008-08-15 3.58 -
Microsoft 1.3807 2008.08.17 2008-08-17 7.04 VirTool:Win32/DelfInject.gen!X
mks_vir 2.01 2008.08.17 2008-08-17 2.76 -
Norman 5.93.01 5.93.00 2008-08-15 4.91 -
Panda 9.05.01 2008.08.17 2008-08-17 2.73 -
Trend Micro 8.700-1004 5.482.22 2008-08-17 0.07 -
Quick Heal 9.50 2008.08.16 2008-08-16 1.82 -
Rising 20.0 20.57.62.00 2008-08-17 1.35 -
Sophos 2.77.0 4.32 2008-08-18 2.01 -
Sunbelt 3.1.1546.1 2193 2008-08-14 0.90 -
Symantec 1.3.0.24 20080817.003 2008-08-17 0.15 -
nProtect 2008-08-14.01 1801264 2008-08-14 4.71 Trojan.Crypt.ED
The Hacker 6.2.96 v00396 2008-08-11 0.55 -
VBA32 3.12.8.3 20080816.1123 2008-08-16 1.20 Trojan.Win32.Buzus.qzn
VirusBuster 4.5.11.10 10.84.3/598170 2008-08-17 1.54 -
VirSCAN.org Scanned Report :
Scanned time : 2008/08/17 22:03:35 (CEST)
Scanner results: 25% Scanner(9/36) found malware!
File Name : photo05.exe
File Size : 374336 byte
File Type : PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5 : b5dcd72ef60b26ff6011d6b3f464ce8c
SHA1 : 6e95fc92e5879cfc3ac3cad2e78f0115ac824961
Online report : http://virscan.org/report/3112ccc4d8669 ... dcc5f.html
Scanner Engine Ver Sig Ver Sig Date Time Scan result
a-squared 3.5.0.22 2008.08.17 2008-08-17 6.79 -
AhnLab V3 2008.08.15.00 2008.08.15 2008-08-15 0.93 -
AntiVir 7.8.1.19 7.0.6.24 2008-08-16 2.22 TR/Crypt.CFI.Gen
Arcavir 1.0.5 200808171633 2008-08-17 1.41 -
AVAST! 3.0.1 080817-0 2008-08-17 0.02 Win32:Trojan-gen {Other}
AVG 7.5.51.442 270.6.4/1617 2008-08-17 1.55 SHeur.CCZK
BitDefender 7.60825.1556497 7.20559 2008-08-18 3.16 Trojan.Crypt.ED
CA (VET) 9.0.0.143 31.6.6035 2008-08-15 6.30 -
ClamAV 0.93.3 8051 2008-08-16 0.23 -
Comodo 2.11 2.0.0.619 2008-08-17 0.61 -
CP Secure 1.1.0.715 2008.08.18 2008-08-18 6.36 -
Dr.Web 4.44.0.9170 2008.08.17 2008-08-17 3.24 -
ewido 4.0.0.2 2008.08.17 2008-08-17 3.01 -
F-Prot 4.4.4.56 20080817 2008-08-17 1.05 W32/DelfInject.A.gen!Eldorado (generic, not disinfectable)
F-Secure 5.51.6100 2008.08.17.01 2008-08-17 3.41 -
Fortinet 2.81-3.11 9.436 2008-08-18 1.93 -
ViRobot 20080816 2008.08.16 2008-08-16 0.42 -
Ikarus T3.1.01.34 2008.08.17.71292 2008-08-17 3.43 BehavesLike.Win32.SMTP-Mailer
JiangMin 11.0.706 2008.08.17 2008-08-17 1.83 -
Kaspersky 5.5.10 2008.08.17 2008-08-17 0.25 -
KingSoft 2008.1.14.15 2008.8.17.15 2008-08-17 1.45 -
McAfee 5.2.00 5362 2008-08-15 3.56 -
Microsoft 1.3807 2008.08.17 2008-08-17 7.34 VirTool:Win32/DelfInject.gen!X
mks_vir 2.01 2008.08.17 2008-08-17 2.82 -
Norman 5.93.01 5.93.00 2008-08-15 4.79 -
Panda 9.05.01 2008.08.17 2008-08-17 3.40 -
Trend Micro 8.700-1004 5.482.22 2008-08-17 0.08 -
Quick Heal 9.50 2008.08.16 2008-08-16 2.22 -
Rising 20.0 20.57.62.00 2008-08-17 1.95 -
Sophos 2.77.0 4.32 2008-08-18 2.02 -
Sunbelt 3.1.1546.1 2193 2008-08-14 1.44 -
Symantec 1.3.0.24 20080817.003 2008-08-17 0.99 -
nProtect 2008-08-14.01 1801264 2008-08-14 7.98 Trojan.Crypt.ED
The Hacker 6.2.96 v00396 2008-08-11 0.71 -
VBA32 3.12.8.3 20080816.1123 2008-08-16 1.19 Trojan.Win32.Buzus.qzn
VirusBuster 4.5.11.10 10.84.3/598170 2008-08-17 1.54 -
Complete scanning result of "photo.php", processed in VirusTotal at 08/18/2008 13:52:37 (CET).
[ file data ]
* name..: photo.php
* size..: 374338
* md5...: eb06c919e8a4df98a3ddd1e0157b8363
* sha1..: 9255283f816229fd8178f9615dde28f81d83e772
* peid..: -
[ scan result ]
AhnLab-V3 2008.8.15.0/20080818 found nothing
AntiVir 7.8.1.19/20080818 found [TR/Crypt.CFI.Gen]
Authentium 5.1.0.4/20080818 found nothing
Avast 4.8.1195.0/20080817 found [Win32:Trojan-gen {Other}]
AVG 8.0.0.161/20080818 found [SHeur.CCZK]
BitDefender 7.2/20080818 found [Trojan.Crypt.ED]
CAT-QuickHeal 9.50/20080816 found nothing
ClamAV 0.93.1/20080818 found nothing
DrWeb 4.44.0.09170/20080818 found nothing
eSafe 7.0.17.0/20080817 found [Suspicious File]
eTrust-Vet 31.6.6035/20080815 found nothing
Ewido 4.0/20080818 found nothing
F-Prot 4.4.4.56/20080818 found [W32/DelfInject.A.gen!Eldorado]
Fortinet 3.14.0.0/20080818 found [PossibleThreat]
GData 2.0.7306.1023/20080818 found [Trojan.Win32.Buzus.rus]
Ikarus T3.1.1.34.0/20080818 found [BehavesLike.Win32.SMTP-Mailer]
K7AntiVirus 7.10.417/20080818 found nothing
Kaspersky 7.0.0.125/20080818 found [Trojan.Win32.Buzus.rus]
McAfee 5362/20080815 found nothing
Microsoft 1.3807/20080818 found [VirTool:Win32/DelfInject.gen!X]
NOD32v2 3364/20080818 found nothing
Norman 5.80.02/20080815 found nothing
Panda 9.0.0.4/20080817 found nothing
PCTools 4.4.2.0/20080817 found nothing
Rising 20.58.02.00/20080818 found nothing
Sophos 4.32.0/20080818 found nothing
Sunbelt 3.1.1546.1/20080815 found nothing
Symantec 10/20080818 found nothing
TheHacker 6.3.0.5.053/20080818 found nothing
TrendMicro 8.700.0.1004/20080818 found nothing
VBA32 3.12.8.3/20080818 found [Trojan.Win32.Buzus.qzn]
ViRobot 2008.8.18.1339/20080818 found [Spyware.Buzus.374338]
VirusBuster 4.5.11.0/20080818 found nothing
Webwasher-Gateway 6.6.2/20080818 found [Trojan.Crypt.CFI.Gen]