Date and malware name collected	MD5 signature	Security risk shown in ThreatExpert	VirusTotal scan result	malware name identified in VirusTotal
April 28 2009 collected in nepenthes	a925b7b89a320aca78259bec09b0875e	red	37/42	Kaspersky:Worm.Win32.AutoRun.frz AVG:BackDoor.Ircbot.HZW
May 4 2009 owgx.exe	b46db1cfd115625efc51325fdb3b5a2c	red	26/39	Exploit.MS08-067
May 4 2009 pppx.exe	ba00fcda94af8ef67e2fe2b82a801848	yellow	23/39	Dropped:Trojan.Generic.2173330
May 4 2009 shield.exe	a925b7b89a320aca78259bec09b0875e	red	37/42	Worm.Win32.AutoRun.frz BackDoor.Ircbot.HZW
May 4 2009 sshbx5.exe	257ec7a8c06c1b3984780b454b7ab407	yellow	18/40	Virus.Win32.Trojan!IK
May 23 2009 sp3eng.txt	b504cc791672fc211a5e4ca5a04a271b	nil	0/39
May 24 2009 WindowsService.exe	6d8466e184746e6e6265316efc1ac77c	yellow	8/39
May 25 2009 wowgo.exe	3aa5c3e43ba69323689aef279541952b	yellow	2/39
May 25 2009 live.exe	8823c7716b49bc05e952a2c12a02498b	red	24/41
May 25 2009 gatex.exe	c52c3a39cd6a88742453f365c3f63491	red	36/40
May 25 2009 LiveProfile.exe	2f8a1e36f48413bc56f285ee3567a8b1	nil	34/41
May 25 2009 windef.exe	a948b8d59ef5de164ddd76a1b7f41012	red	31/41
May 25 2009 wingo.exe	485f7fa25b3d0d38a4f14495c02eca54	red	28/41
May 25 2009 winlive.exe	89167bc1f5ec34bc3c390462f32dfa55	red	35/42
May 25 2009 winlogin.exe	37f627ba4600b89febc2c417987d11c7	red	30/41
May 25 2009 wlive.exe	efacef30d327cfe9ccb9fbbe9d6f2c19	yellow	1/39
May 25 2009 Defender.exe	71cb2f1be94a34210ed627d3fd7aca2f	yellow	1/39
May 25 2009 hostsys.exe	9e1715d5c173664d44a45161140bfa87	yellow	1/39
May 25 2009 init.exe	585eec328fc175b1f92c7324a6ef07c4	yellow	1/39
May 25 2009 windowslive.exe	0302fd449ddaca69396514f9c067a848	yellow	1/39
May 27 2009 pagefile2.exe	c7cf55acc5b362872825a9b8be4af962	red	28/41
Jun 3 2009 windefx.exe	f5b5c6482cb4a7e817a9e172dbf214d5	red	4/39
Jun 4 2009 universal.txt	ef3a7cb79eb404ac2e7df8128cefb41a	nil
Jun 4 2009 auto.txt	bf03b8cf0beebd789c6d3b60c4111e73	nil
Jun 4 2009 sp3.txt	b1b8b9d427f067ac753a24215bd72d76	nil
Jun 4 2009 data.txt	721c2036713873cee678503a942f6980	nil
Jun 4 2009 sp2eng.txt	b2b109724c08cca7408820b1b6fa2f92	nil
Jun 4 2009 sshb.exe_index.html	e92294aab95b6ebbdfc2f485b78db564	nil
Jun 5 2009 liveprofile.exe	2f8a1e36f48413bc56f285ee3567a8b1	nil	34/41
Jun 9 2009 bin.exe	98de85b0e8614aebe7c65dd49fbc76ff	nil	28/39
Jun 11 2009 WinFirewall.exe	d866e6cfc3ae16a134ce420fbf78222b	nil	1/39
Jun 11 2009 Defender_2.exe	66d50b410a30a4c3f6a18ba647641662	nil	1/39
Jun 23 2009 LiveProfile.exe.1	e2ef0a98ee1f9c09aae9850094f7961f	nil	13/39
Jun 23 2009 go.exe	3726c5115be3b946d28385688661cb82	red	20/36
Jun 28 2009 pswd.exe	35861f4ea9a8ecb6c357bdb91b7df804	red	38/42
Jun 28 2009 load.exe	7c95f7ed1941315e065e955c63a0850d	red	38/41
Jun 28 2009 x.exe	0fbff9c8a5cef0606083fd5a87ac4d03	nil	30/39
Jun 29 2009 8b9fd.exe	204d40aacfeebbbbc2d9beff54a9cfd5	nil	30/39
Jul 17 2009 gogo.exe	4864929b70a757ce44dbc5e092f410bd	red	9/40
Jul 23 2009 wall.exe	4864929b70a757ce44dbc5e092f410bd	red	9/40
Jul 25 2009 initgo.exe	950deb3a77470b12161c06c98efde942	red	5/41
Jul 27 2009 fetchx.exe	7646b207ebdb091626d8bbacae32549c	red	20/42
Jul 27 2009 fetchx2.exe	5e5853d41a9b4689545a22d9f7975470	red	24/39
Jul 27 2009 proxy4.exe	58e9c726ca0002c6da3c39f2444e1711	nil	32/41
Jul 27 2009 p.exe	58e9c726ca0002c6da3c39f2444e1711	nil	32/41
Jul 29 2009 binx.exe	2a54514f9a4f3adc6317c9760af97179	nil	22/40
Aug 18 2009 pushx.exe	b9a980fd22851792ec96494ae74adc96	red	13/41
Aug 18 2009 liveservice.exe	61f1b5092ff325907a68e8ac9bd0932f	nil	20/41
Aug 19 2009 refresh.exe	ca03f50b3232f9b2fce0984cf3e9a25e	yellow	30/41
Aug 20 2009 rf.exe	435ce183c368f9df6f86ae758212e110	nil	23/41
Aug 20 2009 r.exe	435ce183c368f9df6f86ae758212e110	nil	23/41
Aug 24 2009 patch.exe	756d57a89a2d0289d8d764c2951c346c	red	16/39
Aug 24 2009 rfc.exe	871e67e39b5454b97d10392585d6cf6f	red	14/41
Aug 25 2009 l.exe	5b360c889996b7dc418ec3f8d82a3216	red	36/39
Aug 25 2009 i.exe	a97b2fccbd8983d63776262308943298	red	11/41
Aug 25 2009 tp.exe	54a2455c00ccdb1cc10add2e52e3c661	red	21/39
Aug 25 2009 sysrestore.exe	a39973b97769e3336e7cbe2a10c6689b	red	22/41
Aug 26 2009 w.exe	b6ddff3dd3585f1d89facdd76583c335	red	31/41
Aug 27 2009 qry.exe	69788d5b5c5848b69796066b0430048c	red	27/42
Sep 1 2009 w2.exe	4f58d82fe92f39e9c275d0a160f40940	nil	21/42
Sep 1 2009 w1.exe	879ec60f8e67293075ee852559241a77	red	35/40
Sep 2 2009 w3.exe	1dc84118f06064cfcd14b881d640a8f5	red	37/40
Sep 4 2009 outputx.exe	f4c0d0e425b7e5fc9e74d74682f4f8bc	red	16/41
Sep 6 2009 outx.exe	f4c0d0e425b7e5fc9e74d74682f4f8bc	red	16/41
Sep 7 2009 visitor.exe	0919edd5ec5bd0e6492bb847e80b71bc	yellow	4/39
Sep 7 2009 v.exe	0919edd5ec5bd0e6492bb847e80b71bc	yellow	4/39
Sep 10 2009 u1.exe	591c6b15846b5a9241b4647c15a7c4d6	nil	20/41
Sep 10 2009 u0.exe	d6b446361df283e898909710944eb9c9	red	27/41
Sep 10 2009 u2.exe	a7f85d781c997db31a1378d3109fa276	red	21/41
Sep 15 2009 w3.exe.1	a7f85d781c997db31a1378d3109fa276	red	21/41
Sep 15 2009 fw.exe	435ce703595f8d919341249aaadfd0f2	nil	17/41
Sep 15 2009 fa.exe	6d09243c3293411b484764a5264f3cf5	red	35/41
Sep 16 2009 c.exe	5a39287b7253a20dddc32e8953af390b	yellow	3/36
Sep 18 2009 kk8b	6fe5a3f23336fd9695babe6b10449305	nil
Sep 23 2009 rss.exe	92daae0e5844b190dfa0cc872e1c2384	red	18/41
Sep 23 2009 i36gfl.gif	2f79969e2223219cf4b5bdfc5dc1fbb8	nil	0/39
Oct 3 04:42 vs.exe	b6cf5d2ef4f1536f6c99ce982e9e548a	yellow	2/39
Oct 8 17:18 rssq.exe	208cac2567eb06165b4dd2b6915d0f5c	red	23/41
Oct 22 01:23 visitos.exe	5c3175ac2cc5b112a4cafce83afa1c49	yellow	14/39
Nov 20 17:20 ffx.exe	413616d4042b2c64cac91db8a7760008		11/41
Nov 20 17:30 windowsservice.exe	7b2c9e752ad8107f5d1278ef9d615447		11/41
Dec 9 20:10 newbar.exe	ae36d103e72ba7f6bea5b537500a0261	red	37/41
Feb 19 22:41 gnur.exe	6dfcb4f7fb8794ac22a5447b33f6454c	red	15/39
Feb 22 20:32 7.exe	5aaf811eb60be7628aeaf9d5ac845741	yellow	6/39
Feb 25 03:56 zumr.exe	26480afc20460f1ad10ce6879a60e651	yellow	3/39
Feb 25 04:12 wuxr.exe	489941132b484d833dafc703fd31dc4a	yellow	11/39
Feb 26 20:05 peglr.exe	81bd3f49bf00188654d58b09c4be3d58	yellow	23/42
Feb 28 09:43 not_for_you.zip	1c1fb64805c25d1fcdf76de65082b6c5		2/39
Mar 26 01:48 buzz.exe	a02a77a0ba842d868ae49d5a3f6acedb	red	2.39
Mar 26 06:45 makah.exe	32ea71b081eeb88e7ba112e256b094a3	red	8/42