This is the most
HILARIOUS post.
Lemme explain

(man i can't hold myself laughing).
The file upladed contains the infamous Ardamax , i confirm this with the following jotti logs, read after to see why it is soooo funny :
I have recompressed the file in .zip (i don like scanning rar files).
[JOTTI STARTS HERE]
File: Ziro_#C-Sharp_1.1.zip
Status:
INFECTED/MALWARE
MD5: cd6ae0fb8ea737a6acba25d11a19ffc3
Packers detected: -
Bit9 reports: File not found
Scanner results
Scan taken on 12 Jul 2007 06:06:14 (GMT)
A-Squared Found Trojan-PSW.Win32.Tibia.ap
AntiVir Found SPR/Ardamax.O.40, SPR/Ardamax.O.42, TR/Spy.Ardamax.E.53, SPR/Ardamax.271.10, SPR/Ardamax.271.11, TR/Spy.Ardamax.J, SPR/Ardamax.K.Gen
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found Ardamax.IB, Ardamax.ID, PSW.Generic4.UAY
BitDefender Found Application.Ardamax.CU, Trojan.Spy.Ardamax.E, Application.Ardamax.CV
ClamAV Found Trojan.Spy.Ardamax-26
Dr.Web Found Program.Ardamax
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found not-a-virus:Monitor.Win32.Ardamax.o (6, 2, 604), Trojan-Spy.Win32.Ardamax.e, not-a-virus:Monitor.Win32.Ardamax.271 (6, 2, 604)
Fortinet
Found Keylog/Ardamax
Kaspersky Anti-Virus Found not-a-virus:Monitor.Win32.Ardamax.o, Trojan-Spy.Win32.Ardamax.e, not-a-virus:Monitor.Win32.Ardamax.271
NOD32 Found a variant of Win32/KeyLogger.Ardamax application
Norman Virus Control Found W32/Ardamax.CLG, W32/Ardamax.CLR, W32/Ardamax.gen1, W32/Ardamax.CLS, W32/Ardamax.CLK
Panda Antivirus Found Generic
Rising Antivirus Found nothing
Sophos Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found Trojan-PSW.Win32.Tibia.ap
[/JOTTI]
The fun part is that he infected himself ! and sent us his own logs of the 14 june 2007 ! beat that !!!!
PLEASE DO NOT PLAY AROUND WITH THE KEYLOGGER, the file he uploaded contains one, if you decide to play with it you might fall in deep unsolvable problems of keylogging, i am using a separate machine that i junk and rebuild after each test.
I have uploaded here a screen shot of one of his convos.
It is very sad for a sythe account since 2005.