ANTICHAT — форум по информационной безопасности, OSINT и технологиям

айл Xinch.exe получен 2007.11.06 19:35:29 (CET)Антивирус Версия Обновление Результат
AhnLab-V3 2007.11.7.0 2007.11.06 -
AntiVir 7.6.0.30 2007.11.06 TR/Dldr.Malwar.BI.2
Authentium 4.93.8 2007.11.05 -
Avast 4.7.1074.0 2007.11.05 Win32:PdPinch-Z
AVG 7.5.0.503 2007.11.06 -
BitDefender 7.2 2007.11.06 Generic.PWStealer.31DC59F0
CAT-QuickHeal 9.00 2007.11.06 -
ClamAV 0.91.2 2007.11.06 Trojan.LdPinch-133
DrWeb 4.44.0.09170 2007.11.06 Trojan.PWS.LDPinch.origin
eSafe 7.0.15.0 2007.10.28 SuspiciousR-Bagle5
eTrust-Vet 31.2.5270 2007.11.05 -
Ewido 4.0 2007.11.06 -
FileAdvisor 1 2007.11.06 -
Fortinet 3.11.0.0 2007.10.19 -
F-Prot 4.4.2.54 2007.11.06 W32/Heuristic-187!Eldorado
F-Secure 6.70.13030.0 2007.11.06 Trojan-PSW.Win32.LdPinch.sh
Ikarus T3.1.1.12 2007.11.06 Trojan-PWS.Win32.LdPinch.sh
Kaspersky 7.0.0.125 2007.11.06 Trojan-PSW.Win32.LdPinch.sh
McAfee 5157 2007.11.06 PWS-LDPinch
Microsoft 1.3007 2007.11.06 PWS:Win32/Ldpinch.gen
NOD32v2 2641 2007.11.06 a variant of Win32/PSW.LdPinch
Norman 5.80.02 2007.11.06 W32/Malware
Panda 9.0.0.4 2007.11.06 Suspicious file
Rising 20.17.12.00 2007.11.06 Trojan.PSW.LdPinch.al
Sophos 4.23.0 2007.11.06 Troj/LdPnch-Gen
Sunbelt 2.2.907.0 2007.11.02 -
Symantec 10 2007.11.06 Infostealer
TheHacker 6.2.9.117 2007.11.06 -
VBA32 3.12.2.4 2007.11.06 MalwareScope.Trojan-PSW.Pinch.1
VirusBuster 4.3.26:9 2007.11.06 -
Webwasher-Gateway 6.0.1 2007.11.06 Trojan.Dldr.Malwar.BI.2

Антивирус Версия Обновление Результат
AhnLab-V3 2007.11.7.0 2007.11.06 -
AntiVir 7.6.0.30 2007.11.06 -
Authentium 4.93.8 2007.11.05 Possibly a new variant of W32/new-malware!Maximus
Avast 4.7.1074.0 2007.11.05 -
AVG 7.5.0.503 2007.11.06 -
BitDefender 7.2 2007.11.06 Trojan.Peed.Gen
CAT-QuickHeal 9.00 2007.11.06 (Suspicious) - DNAScan
ClamAV 0.91.2 2007.11.06 -
DrWeb 4.44.0.09170 2007.11.06 -
eSafe 7.0.15.0 2007.10.28 Suspicious File
eTrust-Vet 31.2.5270 2007.11.05 -
Ewido 4.0 2007.11.06 -
FileAdvisor 1 2007.11.06 -
Fortinet 3.11.0.0 2007.10.19 -
F-Prot 4.4.2.54 2007.11.06 W32/Heuristic-187!Eldorado
F-Secure 6.70.13030.0 2007.11.06 -
Ikarus T3.1.1.12 2007.11.06 -
Kaspersky 7.0.0.125 2007.11.06 -
McAfee 5157 2007.11.06 -
Microsoft 1.3007 2007.11.06 -
NOD32v2 2641 2007.11.06 -
Norman 5.80.02 2007.11.06 -
Panda 9.0.0.4 2007.11.06 Suspicious file
Prevx1 V2 2007.11.06 -
Rising 20.17.12.00 2007.11.06 -
Sophos 4.23.0 2007.11.06 -
Sunbelt 2.2.907.0 2007.11.02 VIPRE.Suspicious
Symantec 10 2007.11.06 -
TheHacker 6.2.9.117 2007.11.06 -
VBA32 3.12.2.4 2007.11.06 -
VirusBuster 4.3.26:9 2007.11.06 -
Webwasher-Gateway 6.0.1 2007.11.06 Win32.Malware.gen (suspicious)

00436000 > 832C24 4F SUB DWORD PTR SS:[ESP],4F
00436004 68 A9444000 PUSH Xinch.004044A9
00436009 FF5424 04 CALL DWORD PTR SS:[ESP+4]
0043600D 834424 04 4F ADD DWORD PTR SS:[ESP+4],4F
00436012 B8 00104000 MOV EAX,Xinch.00401000
00436017 0F2A00 CVTPI2PS XMM0,QWORD PTR DS:[EAX]
0043601A 31C0 XOR EAX,EAX
0043601C B8 00104000 MOV EAX,Xinch.00401000
00436021 8000 41 ADD BYTE PTR DS:[EAX],41
00436024 40 INC EAX
00436025 3D 865F4000 CMP EAX,Xinch.00405F86
0043602A ^7C F5 JL SHORT Xinch.00436021
0043602C B8 00704000 MOV EAX,Xinch.00407000
00436031 8000 B4 ADD BYTE PTR DS:[EAX],0B4
00436034 40 INC EAX
00436035 3D 00804000 CMP EAX,Xinch.00408000
0043603A ^7C F5 JL SHORT Xinch.00436031
-----------------------------------------------
0043603C C3 RETN
----------------------------------------------

00436000 > 832C24 4F SUB DWORD PTR SS:[ESP],4F
00436004 68 A9444000 PUSH Xinch2.004044A9
00436009 FF5424 04 CALL DWORD PTR SS:[ESP+4]
0043600D 834424 04 4F ADD DWORD PTR SS:[ESP+4],4F
00436012 B8 00104000 MOV EAX,Xinch2.00401000
00436017 0F2A00 CVTPI2PS XMM0,QWORD PTR DS:[EAX]
0043601A 31C0 XOR EAX,EAX
0043601C B8 00104000 MOV EAX,Xinch2.00401000
00436021 8000 74 ADD BYTE PTR DS:[EAX],74
00436024 40 INC EAX
00436025 3D 865F4000 CMP EAX,Xinch2.00405F86
0043602A ^7C F5 JL SHORT Xinch2.00436021
0043602C B8 00704000 MOV EAX,Xinch2.00407000 ; ASCII "\*.dat"
00436031 8000 60 ADD BYTE PTR DS:[EAX],60
00436034 40 INC EAX
00436035 3D 00804000 CMP EAX,Xinch2.00408000
0043603A ^7C F5 JL SHORT Xinch2.00436031
-----------------------------------------------------------------------
0043603C 64:FF35 00000000 PUSH DWORD PTR FS:[0]
00436043 64:8925 00000000 MOV DWORD PTR FS:[0],ESP
0043604A E9 B19FBCFF JMP 00000000
-----------------------------------------------------------------------