"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
news:eI-dna2eF7gBwiDYnZ2dnUVZ_qidnZ2d@giganews.com:

> More false positives Dustin. You really should test your program
> before you put it out there. Spyerase has no false positives.
>
> Log file opened: 17:33:34 - 01-28-2007
> BugHunter v2.1 using database date/time 01-28-2007|17:50:08
> Using configuration file: BUGHUNT.INI
>
> => Nfo: Recursive scanning is enabled.
> => Nfo: BugHunter is only logging found malware...
> Action taken, and result.
>
> C:\PROGRA~1\NPSOFT~1\WTR-WE~1\ICSHAR~1.DLL - Full Match! 1:1264 -
> Scanning Only
> C:\WINDOWS\INSTAL~1\{B510A~1\NEWSHO~1.EXE - Malicious JavaScript 2:443
> - Scannin
>
> Complete scanning result of "ICSharpCode.SharpZipLib.dll", received in
> VirusTotal at 01.29.2007, 03:18:41 (CET).
>
> Antivirus Version Update Result
> AntiVir 7.3.0.32 01.27.2007 no virus found
> Authentium 4.93.8 01.26.2007 no virus found
> Avast 4.7.936.0 01.29.2007 no virus found
> AVG 386 01.28.2007 no virus found
> BitDefender 7.2 01.29.2007 no virus found
> CAT-QuickHeal 9.00 01.27.2007 no virus found
> ClamAV devel-20060426 01.28.2007 no virus found
> DrWeb 4.33 01.29.2007 no virus found
> eSafe 7.0.14.0 01.28.2007 no virus found
> eTrust-InoculateIT 23.73.127 01.29.2007 no virus found
> eTrust-Vet 30.3.3353 01.27.2007 no virus found
> Ewido 4.0 01.28.2007 no virus found
> Fortinet 2.85.0.0 01.28.2007 no virus found
> F-Prot 4.2.1.29 01.26.2007 W32/ZlobX.GCO
> Ikarus T3.1.0.27 01.28.2007 no virus found
> Kaspersky 4.0.2.24 01.29.2007 no virus found
> McAfee 4950 01.26.2007 no virus found
> Microsoft 1.2101 01.29.2007 no virus found
> NOD32v2 2015 01.29.2007 no virus found
> Norman 5.80.02 01.26.2007 no virus found
> Panda 9.0.0.4 01.28.2007 no virus found
> Prevx1 V2 01.29.2007 no virus found
> Sophos 4.13.0 01.28.2007 no virus found
> Sunbelt 2.2.907.0 01.26.2007 no virus found
> TheHacker 6.0.3.159 01.28.2007 no virus found
> UNA 1.83 01.26.2007 no virus found
> VBA32 3.11.2 01.28.2007 no virus found
> VirusBuster 4.3.19:9 01.28.2007 no virus found
>
>
> Aditional Information
> File size: 122880 bytes
> MD5: 555a3998407435703f9c14350a929846
> SHA1: 34893912cb60a1dbdb3b50d1205902769acbfcca

F-prot considers it a zlob variant, BugHunter doesn't have an id string
for that record yet. You'd have to send me the file so I can see it. It's
apparently in the first signature file anyways...

> Complete scanning result of "NewShortcut1.exe", received in VirusTotal
> at 01.29.2007, 03:31:59 (CET).
>
> Antivirus Version Update Result
> AntiVir 7.3.0.32 01.27.2007 no virus found
> Authentium 4.93.8 01.26.2007 no virus found
> Avast 4.7.936.0 01.29.2007 no virus found
> AVG 386 01.28.2007 no virus found
> BitDefender 7.2 01.29.2007 no virus found
> CAT-QuickHeal 9.00 01.27.2007 no virus found
> ClamAV devel-20060426 01.28.2007 no virus found
> DrWeb 4.33 01.29.2007 no virus found
> eSafe 7.0.14.0 01.28.2007 no virus found
> eTrust-InoculateIT 23.73.127 01.29.2007 no virus found
> eTrust-Vet 30.3.3353 01.27.2007 no virus found
> Ewido 4.0 01.28.2007 no virus found
> Fortinet 2.85.0.0 01.28.2007 no virus found
> F-Prot 4.2.1.29 01.26.2007 no virus found
> Ikarus T3.1.0.27 01.28.2007 no virus found
> Kaspersky 4.0.2.24 01.29.2007 no virus found
> McAfee 4950 01.26.2007 no virus found
> Microsoft 1.2101 01.29.2007 no virus found
> NOD32v2 2015 01.29.2007 no virus found
> Norman 5.80.02 01.26.2007 no virus found
> Panda 9.0.0.4 01.28.2007 no virus found
> Prevx1 V2 01.29.2007 no virus found
> Sophos 4.13.0 01.28.2007 no virus found
> Sunbelt 2.2.907.0 01.26.2007 no virus found
> TheHacker 6.0.3.159 01.28.2007 no virus found
> UNA 1.83 01.26.2007 no virus found
> VBA32 3.11.2 01.29.2007 no virus found
> VirusBuster 4.3.19:9 01.28.2007 no virus found
>
>
> Aditional Information
> File size: 49152 bytes
> MD5: b164396de25f846452e9a4f7cc17a5fc
> SHA1: 2d5207fc361572158c86f176c8ec14c0864441ae

Hmm... The JavaScript scanning routine usually doesn't have false alarms,
although it could be the wrong ID string for that hit. Once again, I'd
need to see the file.


By the way, Not that this matters to a person who misleads people, steals
code, and deletes legitimate programs without warning his users he's
doing so, threatens to automatically delete other vendor(s) applications
if they don't keep quiet, but you do realize, the problems you've
reported are not "bugs" in the program? They might be false alarms, and
reside in the signature files, not in the executable.

Please learn the difference.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - V2.1
web: http://bughunter.it-mate.co.uk
email: bughunter.dustin@gmail.com.removethis
Last updated: January 28th, 2007