IM-Worm.Win32.Agent.g/Backdoor.Win32.IRCBot.acd

par **Malekal_morte** » 26 juil. 2007 21:04

Le scan de notiffy.dll.. Avast! ne l'a tjrs pas intégré..
En sachant que trois nouvelles variantes ont vu le jour (voir plus bas)...

File notiffy.dll received on 07.26.2007 20:56:22 (CET)

Antivirus Version Last Update Result
AhnLab-V3 2007.7.27.0 2007.07.26 Win32/IRCBot.worm.variant
AntiVir 7.4.0.50 2007.07.26 Worm/Agent.A.279
Authentium 4.93.8 2007.07.25 W32/Ircbot.YJ
Avast 4.7.997.0 2007.07.26 -
AVG 7.5.0.476 2007.07.26 BackDoor.Ircbot.EX
BitDefender 7.2 2007.07.26 Trojan.IRC.Agent.B
CAT-QuickHeal 9.00 2007.07.26 Backdoor.IRCBot.acd
ClamAV 0.91 2007.07.26 Trojan.IRCBot-1084
DrWeb 4.33 2007.07.26 DLOADER.IRC.PWS.Trojan
eSafe 7.0.15.0 2007.07.24 Win32.Mubla.B
eTrust-Vet 31.1.5008 2007.07.26 Win32/Checkout.B
Ewido 4.0 2007.07.26 Backdoor.IRCBot.acd
FileAdvisor 1 2007.07.26 -
Fortinet 2.91.0.0 2007.07.26 IRC/Agent.A!worm
F-Prot 4.3.2.48 2007.07.25 W32/Ircbot.YJ
F-Secure 6.70.13030.0 2007.07.26 Backdoor.Win32.IRCBot.acd
Ikarus T3.1.1.8 2007.07.26 Trojan.IRC.Agent.B
Kaspersky 4.0.2.24 2007.07.26 Backdoor.Win32.IRCBot.acd
McAfee 5084 2007.07.26 W32/IRCbot.worm.dll
Microsoft 1.2704 2007.07.26 Worm:Win32/Agent.T.dll
NOD32v2 2423 2007.07.26 Win32/IRCBot.WO
Norman 5.80.02 2007.07.26 -
Panda 9.0.0.4 2007.07.26 W32/IRCBot.BAK.worm
Rising 19.33.32.00 2007.07.26 Worm.Win32.Agent.ilu
Prevx1 V2 2007.07.26 TROJAN.AGENT.GEN
Sophos 4.19.0 2007.07.26 W32/Kik-A
Sunbelt 2.2.907.0 2007.07.26 IRC-Worm.Win32.Agent.a
Symantec 10 2007.07.26 W32.Mubla.B
TheHacker 6.1.7.154 2007.07.26 Trojan/Agent.a
VBA32 3.12.2.1 2007.07.24 -
VirusBuster 4.3.26:9 2007.07.26 Trojan.ParisH.A
Webwasher-Gateway 6.5.3 2007.07.26 Worm.Agent.A.279
Additional information
File size: 28160 bytes
MD5: c37b6a6d2f5b1a267d38c99881fde2ff
SHA1: e3eafce80b5309ff60ced0c8d53cbb244ec58db3
Prevx info: http://fileinfo.prevx.com/fileinfo.asp? ... 001D29BB03

O21 - SSODL: antivirus - {BC38FA05-EB17-44E8-BA20-14C15814A739} - firewallav.dll
O21 - SSODL: syshelps - {8629209A-D44D-4F3F-AB38-9CFA246DCC07} - wmhs32.dll
O21 - SSODL: printers - {D2497EBA-7130-4891-9F56-538500F30B3C} - msn.dll

File firewallav.dll received on 07.26.2007 20:45:53 (CET)

Antivirus Version Last Update Result
AhnLab-V3 2007.7.27.0 2007.07.26 Win32/IRCBot.worm.26000
AntiVir 7.4.0.50 2007.07.26 Worm/Agent.G.13
Authentium 4.93.8 2007.07.25 -
Avast 4.7.997.0 2007.07.26 -
AVG 7.5.0.476 2007.07.26 BackDoor.Agent.JHC
BitDefender 7.2 2007.07.26 Backdoor.IRCBot.ABEI
CAT-QuickHeal 9.00 2007.07.26 -
ClamAV 0.91 2007.07.26 -
DrWeb 4.33 2007.07.26 Win32.HLLW.Loook
eSafe 7.0.15.0 2007.07.24 -
eTrust-Vet 31.1.5008 2007.07.26 Win32/Checkout.D
Ewido 4.0 2007.07.26 -
FileAdvisor 1 2007.07.26 -
Fortinet 2.91.0.0 2007.07.26 W32/Agent.G!worm.im
F-Prot 4.3.2.48 2007.07.25 -
F-Secure 6.70.13030.0 2007.07.26 IM-Worm.Win32.Agent.g
Ikarus T3.1.1.8 2007.07.26 IM-Worm.Win32.Agent.g
Kaspersky 4.0.2.24 2007.07.26 IM-Worm.Win32.Agent.g
McAfee 5084 2007.07.26 W32/IRCbot.worm.dll
Microsoft 1.2704 2007.07.26 Backdoor:Win32/IRCbot.AC
NOD32v2 2423 2007.07.26 Win32/IRCBot.WO
Norman 5.80.02 2007.07.26 W32/Smallworm.AAM
Panda 9.0.0.4 2007.07.26 W32/Sdbot.KXK.worm
Rising 19.33.32.00 2007.07.26 Worm.Mail.Agent.ms
Prevx1 V2 2007.07.26 BACKDOOR.IRCBOT.ABEI
Sophos 4.19.0 2007.07.26 -
Sunbelt 2.2.907.0 2007.07.26 -
Symantec 10 2007.07.26 W32.Mytob@mm
TheHacker 6.1.7.154 2007.07.26 W32/Agent.g
VBA32 3.12.2.1 2007.07.24 -
VirusBuster 4.3.26:9 2007.07.26 -
Additional information
File size: 26000 bytes
MD5: 5ad47e88035057bf5c6bcc1a3f593dc2
SHA1: acf137d702436eeae4506e2d9e90f53ec9f12c2f
Prevx info: http://fileinfo.prevx.com/fileinfo.asp? ... 000190706B

File wmhs32.dll received on 07.26.2007 20:42:23 (CET)

Antivirus Version Last Update Result
AhnLab-V3 2007.7.27.0 2007.07.26 -
AntiVir 7.4.0.50 2007.07.26 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2007.07.25 -
Avast 4.7.997.0 2007.07.26 -
AVG 7.5.0.476 2007.07.26 -
BitDefender 7.2 2007.07.26 -
CAT-QuickHeal 9.00 2007.07.26 -
ClamAV 0.91 2007.07.26 -
DrWeb 4.33 2007.07.26 -
eSafe 7.0.15.0 2007.07.24 -
eTrust-Vet 31.1.5008 2007.07.26 -
Ewido 4.0 2007.07.26 -
FileAdvisor 1 2007.07.26 -
Fortinet 2.91.0.0 2007.07.26 -
F-Prot 4.3.2.48 2007.07.25 -
F-Secure 6.70.13030.0 2007.07.26 -
Ikarus T3.1.1.8 2007.07.26 -
Kaspersky 4.0.2.24 2007.07.26 -
McAfee 5084 2007.07.26 -
Microsoft 1.2704 2007.07.26 -
NOD32v2 2423 2007.07.26 -
Norman 5.80.02 2007.07.26 -
Panda 9.0.0.4 2007.07.26 Suspicious file
Rising 19.33.32.00 2007.07.26 -
Sophos 4.19.0 2007.07.26 -
Sunbelt 2.2.907.0 2007.07.26 -
Symantec 10 2007.07.26 W32.IRCBot
TheHacker 6.1.7.154 2007.07.26 -
VBA32 3.12.2.1 2007.07.24 -
VirusBuster 4.3.26:9 2007.07.26 -
Additional information
File size: 48761 bytes
MD5: 0f50ebd54aedfaf441fcb0879d4782e2
SHA1: f2d6fb34d0941442fd702dc9251710c09c24f19e