Avast does not detect Trojan.BhoSiggen.5797

Viruses and worms
1

See: http://zulu.zscaler.com/submission/show/dc38f90c9aba764bac92f0ac7e99f451-1344371410
https://www.virustotal.com/file/b78b5ab8401aab6137ea1a22371da09b811f54420925b208110fedde32e09517/analysis/1344371520/
See: DrWebs url checking: htxp://kotech-protect.com/app/kotechprotect_setup.exe
Engine version: 7.0.2.4281
Total virus-finding records: 3071617
File size: 1.51 MB
File MD5: 1b269339434102155e9828d8aed8c4f2

htxp://kotech-protect.com/app/kotechprotect_setup.exe - archive INNO SETUP

htxp://kotech-protect.com/app/kotechprotect_setup.exe/Script0.bin - Ok
htxp://kotech-protect.com/app/kotechprotect_setup.exe/Script1.bin - Ok
htxp://kotech-protect.com/app/kotechprotect_setup.exe/Script2.bin - archive BINARYRES

htxp://kotech-protect.com/app/kotechprotect_setup.exe/Script2.bin/data001 - Ok
htxp://kotech-protect.com/app/kotechprotect_setup.exe/Script2.bin/data002 - Ok
htxp://kotech-protect.com/app/kotechprotect_setup.exe/Script2.bin/data003 - Ok
htxp://kotech-protect.com/app/kotechprotect_setup.exe/Script2.bin - Ok
htxp://kotech-protect.com/app/kotechprotect_setup.exe/0.object - Ok
htxp://kotech-protect.com/app/kotechprotect_setup.exe/Embedded_Setup.exe - Ok
htxp://kotech-protect.com/app/kotechprotect_setup.exe/{app}\kotechprotect.exe packed by UPX
htxp://kotech-protect.com/app/kotechprotect_setup.exe/{app}\kotechprotect.exe - Ok
htxp://kotech-protect.com/app/kotechprotect_setup.exe/{app}\Clear.exe - Ok
htxp://kotech-protect.com/app/kotechprotect_setup.exe/{app}\kotechprotect_up.dat - archive ZIP
htxp://kotech-protect.com/app/kotechprotect_setup.exe/{app}\kotechprotect_up.dat/_TUProj.dat - password protected, skipped
htxp://kotech-protect.com/app/kotechprotect_setup.exe/{app}\kotechprotect_up.dat/_TUProjDT.dat - password protected, skipped
htxp://kotech-protect.com/app/kotechprotect_setup.exe/{app}\kotechprotect_up.dat/icon.ico - password protected, skipped
htxp://kotech-protect.com/app/kotechprotect_setup.exe/{app}\kotechprotect_up.dat - password protected, skipped
htxp://kotech-protect.com/app/kotechprotect_setup.exe/{app}\kotechprotect_up.exe packed by UPX
htxp://kotech-protect.com/app/kotechprotect_setup.exe/{app}\kotechprotect_up.exe infected with Trojan.BhoSiggen.5797
htxp://kotech-protect.com/app/kotechprotect_setup.exe - password protected, skipped

reported to virus AT avast dot com,

polonus

2

Hi forum friends,

It could well be that the avast PUP detection will flag this executable as you try to run it for the first time.
I think it is a possible unwanted or undesirable program.

Malware Family Detections

The malware family = ADSPY/WinTools.C

This member of this malware family is also known as:

Win32:PUP-gen [PUP]
Suspicion: unknown virus
Trojan.BhoSiggen.5797
Artemis!CC733C7BF287
Trojan.DL.Script.GuaGua.a
WS.Reputation.1
TROJ_PAM_0000050240.T3
Trojan.Win32.Generic!BT

polonus