Tech Support Forum - View Single Post

juliofesanz · 01-23-2008, 03:09 PM

Here is Virustotal and Jotti

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...
File BHODownload.dll received on 01.23.2008 22:58:19 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED

Result: 2/32 (6.25%)
Loading server information...
Your file is queued in position: 1.
Estimated start time is between 38 and 54 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:

Antivirus Version Last Update Result
AhnLab-V3 2008.1.24.10 2008.01.23 -
AntiVir 7.6.0.48 2008.01.23 -
Authentium 4.93.8 2008.01.22 -
Avast 4.7.1098.0 2008.01.23 -
AVG 7.5.0.516 2008.01.23 -
BitDefender 7.2 2008.01.23 -
CAT-QuickHeal 9.00 2008.01.23 -
ClamAV 0.91.2 2008.01.23 -
DrWeb 4.44.0.09170 2008.01.23 -
eSafe 7.0.15.0 2008.01.16 -
eTrust-Vet 31.3.5479 2008.01.23 -
Ewido 4.0 2008.01.23 -
FileAdvisor 1 2008.01.23 -
Fortinet 3.14.0.0 2008.01.23 -
F-Prot 4.4.2.54 2008.01.23 -
F-Secure 6.70.13260.0 2008.01.23 -
Ikarus T3.1.1.20 2008.01.23 Trojan-Proxy.Win32.Delf.av
Kaspersky 7.0.0.125 2008.01.23 -
McAfee 5214 2008.01.23 -
Microsoft 1.3109 2008.01.23 -
NOD32v2 2818 2008.01.23 -
Norman 5.80.02 2008.01.23 -
Panda 9.0.0.4 2008.01.23 -
Prevx1 V2 2008.01.23 Heuristic: Suspicious Self Modifying File
Rising 20.28.22.00 2008.01.23 -
Sophos 4.24.0 2008.01.23 -
Sunbelt 2.2.907.0 2008.01.17 -
Symantec 10 2008.01.23 -
TheHacker 6.2.9.196 2008.01.23 -
VBA32 3.12.2.5 2008.01.21 -
VirusBuster 4.3.26:9 2008.01.23 -
Webwasher-Gateway 6.6.2 2008.01.23 -
Additional information
File size: 743424 bytes
MD5: e6fffbd2e7fecd18ecbc7152fc4d837e
SHA1: b598bbba77276ba0d20da57a3370c3c1d60ac39b
PEiD: -
Prevx info: http://info.prevx.com/aboutprogramte...D572000643440E

Jotti's malware scan 2.99-TRANSITION_TO_3.00-R1

File to upload & scan:
Service
Service load: 0% 100%

File: BHODownload.dll
Status: POSSIBLY INFECTED/MALWARE (Note: this file was only classified as malware by scanners known to generate more false positives than the average scanner. Do not consider these results definately accurate. Also, because of this, results of this scan will not be recorded in the database.)
MD5: e6fffbd2e7fecd18ecbc7152fc4d837e
Packers detected: -
Bit9 reports: File not found

Scanner results
Scan taken on 23 Jan 2008 22:01:04 (GMT)
A-Squared Found nothing
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
CPsecure Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Ikarus Found Trojan-Proxy.Win32.Delf.av
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
Sophos Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found nothing

Powered by

Disclaimer
This service is by no means 100% safe. If this scanner says 'OK', it does not necessarily mean the file is clean. There could be a whole new virus on the loose. NEVER EVER rely on one single product only, not even this service, even though it utilizes several products. Therefore, We cannot and will not be held responsible for any damage caused by results presented by this non-profit online service.

Also, we are aware of the implications of a setup like this. We are sure this whole thing is by no means scientifically correct, since this is a fully automated service (although manual correction is possible). We are aware, in spite of efforts to proactively counter these, false positives might occur, for example. We do not consider this a very big issue, so please do not e-mail us about it. This is a simple online scan service, not the university of Wichita.

Scanning can take a while, since several scanners are being used, plus the fact some scanners use very high levels of (time consuming) heuristics. Scanners used are Linux versions, differences with Windows scanners may or may not occur. Another note: some scanners will only report one virus when scanning archives with multiple pieces of malware.

Virus definitions are updated every hour. There is a 10Mb limit per file. Please refrain from uploading tons of hex-edited or repacked variants of the same sample.

Please do not ask for viruses uploaded here, unless you work for an anti-virus vendor. They are not for trade. This is a legitimate service, not a VX site. Viruses uploaded here will be distributed to antivirus vendors without exception. Read more about this in our privacy policy. If you do not want your files to be distributed, please do not send them at all.

Sponsored by HotelScraper.com.
--------------------------------------------------------------------------------

Statistics
Last file scanned at least one scanner reported something about: googleearthprov4.0.xxxxcrackrelictus.zip (MD5: e8e5d34dc86ab94d1b140e575ed2141c, size: 634400 bytes), detected by:

Scanner Malware name
A-Squared X
AntiVir X
ArcaVir X
Avast X
AVG Antivirus HackTool.crack
BitDefender X
ClamAV X
CPsecure X
Dr.Web X
F-Prot Antivirus X
F-Secure Anti-Virus X
Fortinet X
Ikarus X
Kaspersky Anti-Virus X
NOD32 X
Norman Virus Control X
Panda Antivirus X
Rising Antivirus X
Sophos Antivirus X
VirusBuster X
VBA32 X

You're free to (mis)interpret these automated, flawed statistics at your own discretion. For antivirus comparisons, visit AV comparatives
We are not affiliated with any third parties that conduct tests using this service.

01-23-2008, 03:09 PM	#14 (permalink)
juliofesanz Registered User Join Date: Jan 2008 Location: Miami Posts: 20 OS: XP	Re: Restrictions on my computer please help! Here is Virustotal and Jotti Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... File BHODownload.dll received on 01.23.2008 22:58:19 (CET) Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED Result: 2/32 (6.25%) Loading server information... Your file is queued in position: 1. Estimated start time is between 38 and 54 seconds. Do not close the window until scan is complete. The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result. If you are waiting for more than five minutes you have to resend your file. Your file is being scanned by VirusTotal in this moment, results will be shown as they're generated. Compact Print results Your file has expired or does not exists. Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished. Email: Antivirus Version Last Update Result AhnLab-V3 2008.1.24.10 2008.01.23 - AntiVir 7.6.0.48 2008.01.23 - Authentium 4.93.8 2008.01.22 - Avast 4.7.1098.0 2008.01.23 - AVG 7.5.0.516 2008.01.23 - BitDefender 7.2 2008.01.23 - CAT-QuickHeal 9.00 2008.01.23 - ClamAV 0.91.2 2008.01.23 - DrWeb 4.44.0.09170 2008.01.23 - eSafe 7.0.15.0 2008.01.16 - eTrust-Vet 31.3.5479 2008.01.23 - Ewido 4.0 2008.01.23 - FileAdvisor 1 2008.01.23 - Fortinet 3.14.0.0 2008.01.23 - F-Prot 4.4.2.54 2008.01.23 - F-Secure 6.70.13260.0 2008.01.23 - Ikarus T3.1.1.20 2008.01.23 Trojan-Proxy.Win32.Delf.av Kaspersky 7.0.0.125 2008.01.23 - McAfee 5214 2008.01.23 - Microsoft 1.3109 2008.01.23 - NOD32v2 2818 2008.01.23 - Norman 5.80.02 2008.01.23 - Panda 9.0.0.4 2008.01.23 - Prevx1 V2 2008.01.23 Heuristic: Suspicious Self Modifying File Rising 20.28.22.00 2008.01.23 - Sophos 4.24.0 2008.01.23 - Sunbelt 2.2.907.0 2008.01.17 - Symantec 10 2008.01.23 - TheHacker 6.2.9.196 2008.01.23 - VBA32 3.12.2.5 2008.01.21 - VirusBuster 4.3.26:9 2008.01.23 - Webwasher-Gateway 6.6.2 2008.01.23 - Additional information File size: 743424 bytes MD5: e6fffbd2e7fecd18ecbc7152fc4d837e SHA1: b598bbba77276ba0d20da57a3370c3c1d60ac39b PEiD: - Prevx info: http://info.prevx.com/aboutprogramte...D572000643440E Jotti's malware scan 2.99-TRANSITION_TO_3.00-R1 File to upload & scan: Service Service load: 0% 100% File: BHODownload.dll Status: POSSIBLY INFECTED/MALWARE (Note: this file was only classified as malware by scanners known to generate more false positives than the average scanner. Do not consider these results definately accurate. Also, because of this, results of this scan will not be recorded in the database.) MD5: e6fffbd2e7fecd18ecbc7152fc4d837e Packers detected: - Bit9 reports: File not found Scanner results Scan taken on 23 Jan 2008 22:01:04 (GMT) A-Squared Found nothing AntiVir Found nothing ArcaVir Found nothing Avast Found nothing AVG Antivirus Found nothing BitDefender Found nothing ClamAV Found nothing CPsecure Found nothing Dr.Web Found nothing F-Prot Antivirus Found nothing F-Secure Anti-Virus Found nothing Fortinet Found nothing Ikarus Found Trojan-Proxy.Win32.Delf.av Kaspersky Anti-Virus Found nothing NOD32 Found nothing Norman Virus Control Found nothing Panda Antivirus Found nothing Rising Antivirus Found nothing Sophos Antivirus Found nothing VirusBuster Found nothing VBA32 Found nothing Powered by Disclaimer This service is by no means 100% safe. If this scanner says 'OK', it does not necessarily mean the file is clean. There could be a whole new virus on the loose. NEVER EVER rely on one single product only, not even this service, even though it utilizes several products. Therefore, We cannot and will not be held responsible for any damage caused by results presented by this non-profit online service. Also, we are aware of the implications of a setup like this. We are sure this whole thing is by no means scientifically correct, since this is a fully automated service (although manual correction is possible). We are aware, in spite of efforts to proactively counter these, false positives might occur, for example. We do not consider this a very big issue, so please do not e-mail us about it. This is a simple online scan service, not the university of Wichita. Scanning can take a while, since several scanners are being used, plus the fact some scanners use very high levels of (time consuming) heuristics. Scanners used are Linux versions, differences with Windows scanners may or may not occur. Another note: some scanners will only report one virus when scanning archives with multiple pieces of malware. Virus definitions are updated every hour. There is a 10Mb limit per file. Please refrain from uploading tons of hex-edited or repacked variants of the same sample. Please do not ask for viruses uploaded here, unless you work for an anti-virus vendor. They are not for trade. This is a legitimate service, not a VX site. Viruses uploaded here will be distributed to antivirus vendors without exception. Read more about this in our privacy policy. If you do not want your files to be distributed, please do not send them at all. Sponsored by HotelScraper.com. -------------------------------------------------------------------------------- Statistics Last file scanned at least one scanner reported something about: googleearthprov4.0.xxxxcrackrelictus.zip (MD5: e8e5d34dc86ab94d1b140e575ed2141c, size: 634400 bytes), detected by: Scanner Malware name A-Squared X AntiVir X ArcaVir X Avast X AVG Antivirus HackTool.crack BitDefender X ClamAV X CPsecure X Dr.Web X F-Prot Antivirus X F-Secure Anti-Virus X Fortinet X Ikarus X Kaspersky Anti-Virus X NOD32 X Norman Virus Control X Panda Antivirus X Rising Antivirus X Sophos Antivirus X VirusBuster X VBA32 X You're free to (mis)interpret these automated, flawed statistics at your own discretion. For antivirus comparisons, visit AV comparatives We are not affiliated with any third parties that conduct tests using this service.