Forum de Surfeurdor.com: Argent facile à gagner & filleuls - GRATUIT

L'URL demandée ne peut être affichée

L'objet sollicité à l'adresse URL :

http:// g1barre.com/dl/G1Barre.exe

Contient une menace :

l'objet est infecté par Trojan-PSW.Win32.VB.ceb

Date de création du message :
17:28:26
Kaspersky PURE

J'ai recu une réponse de kaspersky:

Hello,

Sorry, it was a false detection. It will be fixed in the next update.
Thank you for your help.

Traduction:

Bonjour,

Désolé, c'était une fausse détection. Il sera fixé dans la prochaine mise à jour.
Merci pour votre aide.

Enfin une bonne nouvelle.

0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware.
File name: G1Barre.exe
Submission date: 2010-11-23 22:52:41 (UTC)
Current status: queued (#1) queued (#1) analysing finished

Result: 15/ 43 (34.9%)
VT Community

not reviewed
Safety score: -
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2010.11.24.00 2010.11.23 Win-Trojan/Xema.variant
AntiVir 7.10.14.82 2010.11.23 TR/PSW.VB.ceb
Antiy-AVL 2.0.3.7 2010.11.23 Trojan/Win32.VB
Avast 4.8.1351.0 2010.11.23 -
Avast5 5.0.594.0 2010.11.23 -
AVG 9.0.0.851 2010.11.23 Dropper.VB.ERA
BitDefender 7.2 2010.11.23 -
CAT-QuickHeal 11.00 2010.11.09 (Suspicious) - DNAScan
ClamAV 0.96.4.0 2010.11.23 -
Command 5.2.11.5 2010.11.23 -
Comodo 6824 2010.11.23 -
DrWeb 5.0.2.03300 2010.11.23 -
Emsisoft 5.0.0.50 2010.11.23 Trojan-PWS.Win32.VB!IK
eSafe 7.0.17.0 2010.11.23 Suspicious File
eTrust-Vet 36.1.7996 2010.11.23 -
F-Prot 4.6.2.117 2010.11.23 -
F-Secure 9.0.16160.0 2010.11.23 -
Fortinet 4.2.254.0 2010.11.23 W32/VB.CEB!tr.pws
GData 21 2010.11.23 -
Ikarus T3.1.1.90.0 2010.11.23 Trojan-PWS.Win32.VB
Jiangmin 13.0.900 2010.11.20 TrojanDownloader.Homa.anx
K7AntiVirus 9.68.3063 2010.11.23 -
Kaspersky 7.0.0.125 2010.11.23 -
McAfee 5.400.0.1158 2010.11.23 Artemis!D85463EBC3F2
McAfee-GW-Edition 2010.1C 2010.11.23 Artemis!D85463EBC3F2
Microsoft 1.6402 2010.11.23 -
NOD32 5643 2010.11.23 -
Norman 6.06.10 2010.11.23 -
nProtect 2010-11-23.02 2010.11.23 -
Panda 10.0.2.7 2010.11.23 Suspicious file
PCTools 7.0.3.5 2010.11.23 -
Prevx 3.0 2010.11.23 -
Rising 22.75.01.02 2010.11.23 -
Sophos 4.59.0 2010.11.23 -
SUPERAntiSpyware 4.40.0.1006 2010.11.23 -
Symantec 20101.2.0.161 2010.11.23 -
TheHacker 6.7.0.1.089 2010.11.23 Trojan/PSW.VB.ceb
TrendMicro 9.120.0.1004 2010.11.23 -
TrendMicro-HouseCall 9.120.0.1004 2010.11.23 -
VBA32 3.12.14.2 2010.11.23 -
VIPRE 7391 2010.11.23 Trojan.Win32.Generic!BT
ViRobot 2010.11.20.4158 2010.11.23 -
VirusBuster 13.6.56.0 2010.11.23 -

Additional information Show all
MD5 : d85463ebc3f2dbde407161072aa5e5cd
SHA1 : 9df81d9e7e0daff866d96f4a96eab0a6393aad8c
SHA256: f985351be1cdf7b8dd4e4e2e64c80316f686e832192369d636fce61283f17e1a
ssdeep: 768:RvcUkDvjMprkl+mbgW/yc8XUODgD0f0uoMnQDxx0B7QRw5xEAmdsk2:RPkTjum+mcYycAUz
DIoUQ4B7d4yk2
File size : 44544 bytes
First seen: 2010-11-19 09:27:38
Last seen : 2010-11-23 22:52:41
TrID:
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher....: G1Barre.com
copyright....: DZ-Studio.net
product......: G1Barre
description..: n/a
original name: G1Barre.exe
internal name: G1Barre
file version.: 1.05.0002
comments.....: G1Barre, la barre de surf par DZ-Studio
signers......: -
signing date.: -
verified.....: Unsigned

PEiD: PECompact 2.xx (Slim Loader) --> BitSum Technologies
packers (F-Prot): PecBundle, PECompact
packers (Kaspersky): PE_Patch.PECompact, PecBundle
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x1CE4
timedatestamp....: 0x4CB60C2A (Wed Oct 13 19:44:42 2010)
machinetype......: 0x14c (I386)

[[ 2 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0x21000, 0x7C00, 7.99, 45a6532f1919159976bb1dc44d8d493d
.rsrc, 0x22000, 0x3000, 0x2E00, 6.11, 36843390be82441485bb3f2aa8013c3f

[[ 1 import(s) ]]
kernel32.dll: LoadLibraryA, GetProcAddress, VirtualAlloc, VirtualFree

ExifTool:
file metadata
CharacterSet: Unicode
CodeSize: 110592
Comments: G1Barre, la barre de surf par DZ-Studio
CompanyName: G1Barre.com
EntryPoint: 0x1ce4
FileFlagsMask: 0x0000
FileOS: Win32
FileSize: 44 kB
FileSubtype: 0
FileType: Win32 EXE
FileVersion: 1.05.0002
FileVersionNumber: 1.5.0.2
ImageVersion: 1.5
InitializedDataSize: 24576
InternalName: G1Barre
LanguageCode: English (U.S.)
LegalCopyright: DZ-Studio.net
LinkerVersion: 6.0
MIMEType: application/octet-stream
MachineType: Intel 386 or later, and compatibles
OSVersion: 4.0
ObjectFileType: Executable application
OriginalFilename: G1Barre.exe
PEType: PE32
ProductName: G1Barre
ProductVersion: 1.05.0002
ProductVersionNumber: 1.5.0.2
Subsystem: Windows GUI
SubsystemVersion: 4.0
TimeStamp: 2010:10:13 21:44:42+02:00
UninitializedDataSize: 0

Symantec reputation:Suspicious.Insight

VT Community

23/11/2010 23:44:17
Détectés: UDS:DangerousObject.Multi.Generic
C:\Téléchargements\G1Barre.exe
service KSN

0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware.
File name: G1Barre.exe
Submission date: 2011-02-09 20:55:52 (UTC)
Current status: queued (#83) queued analysing finished


Result: 12/ 43 (27.9%)
VT Community

not reviewed
Safety score: -
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2011.02.06.00 2011.02.06 -
AntiVir 7.11.3.32 2011.02.09 -
Antiy-AVL 2.0.3.7 2011.01.28 -
Avast 4.8.1351.0 2011.02.09 -
Avast5 5.0.677.0 2011.02.09 -
AVG 10.0.0.1190 2011.02.09 -
BitDefender 7.2 2011.02.09 Trojan.Generic.KD.113963
CAT-QuickHeal 11.00 2011.02.09 (Suspicious) - DNAScan
ClamAV 0.96.4.0 2011.02.09 PUA.Packed.PECompact-1
Commtouch 5.2.11.5 2011.02.09 -
Comodo 7633 2011.02.09 UnclassifiedMalware
DrWeb 5.0.2.03300 2011.02.09 -
Emsisoft 5.1.0.2 2011.02.09 Trojan.SuspectCRC!IK
eSafe 7.0.17.0 2011.02.09 Suspicious File
eTrust-Vet 36.1.8149 2011.02.09 -
F-Prot 4.6.2.117 2011.02.04 -
F-Secure 9.0.16160.0 2011.02.09 Trojan.Generic.KD.113963
Fortinet 4.2.254.0 2011.02.09 -
GData 21 2011.02.09 Trojan.Generic.KD.113963
Ikarus T3.1.1.97.0 2011.02.09 Trojan.SuspectCRC
Jiangmin 13.0.900 2011.02.09 -
K7AntiVirus 9.81.3796 2011.02.09 Riskware
Kaspersky 7.0.0.125 2011.02.09 -
McAfee 5.400.0.1158 2011.02.09 -
McAfee-GW-Edition 2010.1C 2011.02.08 -
Microsoft 1.6502 2011.02.09 -
NOD32 5860 2011.02.09 -
Norman 6.07.03 2011.02.09 -
nProtect 2011-01-27.01 2011.02.02 -
Panda 10.0.3.5 2011.02.09 Generic Trojan
PCTools 7.0.3.5 2011.02.09 -
Prevx 3.0 2011.02.09 -
Rising 23.44.02.05 2011.02.09 -
Sophos 4.61.0 2011.02.09 -
SUPERAntiSpyware 4.40.0.1006 2011.02.09 -
Symantec 20101.3.0.103 2011.02.09 WS.Reputation.1
TheHacker 6.7.0.1.126 2011.02.08 -
TrendMicro 9.200.0.1012 2011.02.09 -
TrendMicro-HouseCall 9.200.0.1012 2011.02.09 -
VBA32 3.12.14.3 2011.02.09 -
VIPRE 8363 2011.02.09 -
ViRobot 2011.2.9.4301 2011.02.09 -
VirusBuster 13.6.191.0 2011.02.09 -
Additional informationShow all
MD5 : 2051fc8115fdba8b81fc88144ecc28d5
SHA1 : 86ec5c3a7a5e32e0d26d27458c817c3d899a5749
SHA256: 36b0a7d0fe84b3948ef5db172b23e50678241e23b0121ccb4c90dda5f1ecd05d
ssdeep: 768:majVpgxM6P3u5UTzu8RRiHH1brBy8rW3t5l/7p4wrd5JKqB9xEAmdsYe:jgxL2v8zSV3Bpr
a5mwJ5kq4yYe
File size : 44544 bytes
First seen: 2011-01-20 20:16:30
Last seen : 2011-02-09 20:55:52
TrID:
Win32 EXE PECompact compressed (v2.x) (48.9%)
Win32 EXE PECompact compressed (generic) (34.4%)
Win32 Executable Generic (7.0%)
Win32 Dynamic Link Library (generic) (6.2%)
Generic Win/DOS Executable (1.6%)
sigcheck:
publisher....: G1Barre.com
copyright....: DZ-Studio.net
product......: G1Barre
description..: n/a
original name: G1Barre.exe
internal name: G1Barre
file version.: 1.05.0002
comments.....: G1Barre, la barre de surf par DZ-Studio
signers......: -
signing date.: -
verified.....: Unsigned

PEiD: PECompact 2.xx --> BitSum Technologies
packers (F-Prot): PecBundle, PECompact
packers (Kaspersky): PE_Patch.PECompact, PecBundle, PECompact
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x1CE4
timedatestamp....: 0x4D388FF6 (Thu Jan 20 19:41:42 2011)
machinetype......: 0x14c (I386)

[[ 2 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0x21000, 0x7C00, 7.99, 017aa9307fcbcee631bed5a6bc165f71
.rsrc, 0x22000, 0x3000, 0x2E00, 6.20, 4fc10410e0f6043e03c0f4fd9ccaa85b

[[ 1 import(s) ]]
kernel32.dll: LoadLibraryA, GetProcAddress, VirtualAlloc, VirtualFree

ExifTool:
file metadata
CharacterSet: Unicode
CodeSize: 110592
Comments: G1Barre, la barre de surf par DZ-Studio
CompanyName: G1Barre.com
EntryPoint: 0x1ce4
FileFlagsMask: 0x0000
FileOS: Win32
FileSize: 44 kB
FileSubtype: 0
FileType: Win32 EXE
FileVersion: 1.05.0002
FileVersionNumber: 1.5.0.2
ImageVersion: 1.5
InitializedDataSize: 24576
InternalName: G1Barre
LanguageCode: English (U.S.)
LegalCopyright: DZ-Studio.net
LinkerVersion: 6.0
MIMEType: application/octet-stream
MachineType: Intel 386 or later, and compatibles
OSVersion: 4.0
ObjectFileType: Executable application
OriginalFilename: G1Barre.exe
PEType: PE32
ProductName: G1Barre
ProductVersion: 1.05.0002
ProductVersionNumber: 1.5.0.2
Subsystem: Windows GUI
SubsystemVersion: 4.0
TimeStamp: 2011:01:20 20:41:42+01:00
UninitializedDataSize: 0



VT Community