Hi Polonus,
Nice to shared,
Anyway, why there is a two virus total reports and look like inconsistently reports?
Have you tried to post into : hxxp://virusscan.jotti.org/en
Or another file scanners tool?
cheers,
Hi YantoChiang,
These were two different scan results for JavaSignedApplet.jar malware from two different sources.
You can see the MD5 hashes also differ. I have scanned the first link against Wepawet but that found it to be benign - b9e30841be42c17f498c532e0f651289
VirusTotal.com 4/42 (10%) detected malware
Team-CYMRU.org 40% detected malware
The second detection also for JavaSignedApplet was an earlier find 2011-01-26 01:42:06
residing at another site- actually good you asked because there are two detetctions for that malware, this one from Febr. 17th: http://www.virustotal.com/file-scan/report.html?id=6e3d3444f82a01ee132bb39fa3f427fecfef40b67f49bc582f3fb567688f195c-1297902160
and the more recent one from May third:
http://www.virustotal.com/latest-report.html?resource=2bc0619f9a0c483f3fd6bce88148a7ab
accompanying ThreatExpert for this one report here:
http://www.threatexpert.com/report.aspx?md5=2bc0619f9a0c483f3fd6bce88148a7ab
The one I tested against VT (first one), I tested at Wepawet, URLVoid, SOSWebscan, the intial detection of this so-called openn connection Java applet malware is low and then gradually improves, avast detection came later, but I did not check the site against the avast shields,
polonus