I attached it as semo2x.txt and it actullay it is semo2x.zip please check it. I found it in a usb drive and its autorun.inf was pointing to it.
ADMIN: Absolutely no live samples, no links to malware here! >:(
Attachement is corrupted, but you should not attach Malware here in the Foruem. Use virus at avast.com If you want to check the files please use this site:
i used virustotal.com
and the results were as follow
---------------------------------start of results------------------------------------------------
File semo2x.zip received on 01.13.2008 19:46:37 (CET)Antivirus Version Last Update Result
AhnLab-V3 2008.1.12.10 2008.01.11 -
AntiVir 7.6.0.46 2008.01.11 TR/Crypt.NSPM.Gen
Authentium 4.93.8 2008.01.13 -
Avast 4.7.1098.0 2008.01.12 -
AVG 7.5.0.516 2008.01.13 Obfustat.AEGY
BitDefender 7.2 2008.01.13 Packer.Malware.NSAnti.J
CAT-QuickHeal 9.00 2008.01.12 Win32.Packed.NSAnti.r
ClamAV 0.91.2 2008.01.13 -
DrWeb 4.44.0.09170 2008.01.13 Trojan.MulDrop.6474
eSafe 7.0.15.0 2008.01.10 Win32.AutoRun.bmi
eTrust-Vet 31.3.5451 2008.01.11 -
Ewido 4.0 2008.01.13 -
FileAdvisor 1 2008.01.13 -
Fortinet 3.14.0.0 2008.01.13 W32/AutoRun.BMI!worm
F-Prot 4.4.2.54 2008.01.13 W32/Worm.LTK
F-Secure 6.70.13030.0 2008.01.13 Worm.Win32.AutoRun.bmi
Ikarus T3.1.1.20 2008.01.13 Packer.Malware.NSAnti.J
Kaspersky 7.0.0.125 2008.01.13 Worm.Win32.AutoRun.bmi
McAfee 5205 2008.01.11 -
Microsoft 1.3109 2008.01.13 VirTool:Win32/Obfuscator!Mal
NOD32v2 2788 2008.01.13 Win32/PSW.OnLineGames.NLI
Norman 5.80.02 2008.01.11 W32/NSAnti.EUZ
Panda 9.0.0.4 2008.01.13 Suspicious file
Prevx1 V2 2008.01.13 KAVKOP:Trojan-A
Rising 20.26.62.00 2008.01.13 -
Sophos 4.24.0 2008.01.13 -
Sunbelt 2.2.907.0 2008.01.12 -
Symantec 10 2008.01.13 -
TheHacker 6.2.9.186 2008.01.11 W32/AutoRun.bmi
VBA32 3.12.2.5 2008.01.13 Worm.Win32.AutoRun.bmi
VirusBuster 4.3.26:9 2008.01.12 -
Webwasher-Gateway 6.6.2 2008.01.13 Trojan.Crypt.NSPM.Gen
Additional information
File size: 103849 bytes
MD5: e6c8d6d69bab273d448cb27f9d788912
SHA1: 23e96021353387825bed6fac4d300761604bbe3a
PEiD: -
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=C2203C4793C87B26989B011736361D006AC5DA00
------------------------------------end of results----------------------------------------------------
I wish avast come over this malware
If you need to test your pc, you could use Drweb Cureit:
http://freedrweb.com
Do not delete files Drweb reports. They maybe false alarms
Or KAVs Removal tool( download the newest Version):
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/