I would try to share what I have learnt
Virus Found – Possible Threat “Trojan downloader”
Well again I come across to a threat which is detected by few AVS, this time including Kaspersky Scanner as “Trojan.Win32.Qhost.ot“, however other front line paid scanners, such as, Norton, NOD32 (ESET) and one of the trusted Free scanner Avast fails to detect the threat….
| File Crypted.exe received on 11.05.2007 17:40:04 (CET) | |||
| Antivirus | Version | Last Update | Result |
| AhnLab-V3 | 2007.11.6.0 | 2007.11.05 | - |
| AntiVir | 7.6.0.30 | 2007.11.05 | TR/Qhost.OT.2 |
| Authentium | 4.93.8 | 2007.11.03 | - |
| Avast | 4.7.1074.0 | 2007.11.05 | - |
| AVG | 7.5.0.503 | 2007.11.05 | IRC/BackDoor.SdBot3.SWA |
| BitDefender | 7.2 | 2007.11.05 | Trojan.Loader.RBot.A |
| CAT-QuickHeal | 9.00 | 2007.11.05 | - |
| ClamAV | 0.91.2 | 2007.11.05 | Trojan.Qhost-37 |
| DrWeb | 4.44.0.09170 | 2007.11.05 | - |
| eSafe | 7.0.15.0 | 2007.10.28 | - |
| eTrust-Vet | 31.2.5264 | 2007.11.02 | - |
| Ewido | 4.0 | 2007.11.05 | - |
| FileAdvisor | 1 | 2007.11.05 | - |
| Fortinet | 3.11.0.0 | 2007.10.19 | W32/Qhost.OT!tr |
| F-Prot | 4.4.2.54 | 2007.11.05 | - |
| F-Secure | 6.70.13030.0 | 2007.11.05 | Trojan.Win32.Qhost.ot |
| Ikarus | T3.1.1.12 | 2007.11.05 | Backdoor.Win32.Rbot.eab |
| Kaspersky | 7.0.0.125 | 2007.11.05 | Trojan.Win32.Qhost.ot |
| McAfee | 5155 | 2007.11.02 | - |
| Microsoft | 1.2908 | 2007.11.05 | VirTool:Win32/DelfInject.gen!S |
| NOD32v2 | 2637 | 2007.11.05 | - |
| Norman | 5.80.02 | 2007.11.05 | - |
| Panda | 9.0.0.4 | 2007.11.04 | Trj/Spambot.C |
| Prevx1 | V2 | 2007.11.05 | - |
| Rising | 20.17.01.00 | 2007.11.05 | Trojan.Win32.QHost.nn |
| Sophos | 4.23.0 | 2007.11.05 | Mal/Behav-154 |
| Sunbelt | 2.2.907.0 | 2007.11.02 | - |
| Symantec | 10 | 2007.11.05 | - |
| TheHacker | 6.2.9.116 | 2007.11.05 | - |
| VBA32 | 3.12.2.4 | 2007.11.05 | Backdoor.Win32.Rbot.eab |
| VirusBuster | 4.3.26:9 | 2007.11.05 | - |
| Webwasher-Gateway | 6.6.1 | 2007.11.05 | Trojan.Qhost.OT.2 |
| Additional information | |||
| File size: 140800 bytes | |||
| MD5: 72a5fb844082d8cf31c6a86c023cc591 | |||
| SHA1: 202e8c9bffb05deda5325bc7939ccfcc9749b36f | |||

I have tried to upload the file at Yahoo eMail account of mine, and I can successfully upload the file there, which is a clear indication that Norton AntiVirus 2007 also failed to detect the file…

As usual, I have notified NOD32 and Avast by sending them the infected file… Will update the post with their reply !!!
Related posts:
- Virus Found – Possible Threat “Trojan.Zlob” Undetected in many front line scanner Once again I have stumbled upon a Possible threat (Trajan Downloader) which is not detected by big guns like Kaspersky / NOD32...
- Virus Found – Possible Threat “Backdoor.Win32.Bifrose.bcb” As the title says !!! Its a trojanhorse or in simple words a spyware… Recently I stumbled upon a file...
- Apple OS X gets a Virus attack – P2P distributed iWork 09 comes with OSX.Trojan.iServices.A Trojan Horse And you thought MAC wont get an infection ? Intego, a leading security application developer for OS X platform just...
- Open MS Office 2007 Documents in Older Version of MS Office Microsoft office compatibility Pack is one of the Must install if you are running Microsoft Office Pririor to MS Office...
| Print article | This entry was posted by Choto Cheeta on November 5, 2007 at 5:10 pm, and is filed under Security Software. Follow any responses to this post through RSS 2.0. You can leave a response or trackback from your own site. |




about 2 years ago
my pc is infected with 6123t.exe . could u plz hlp me out in ny way…
thanks