Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File klg.dat received on 2008.12.18 18:38:00 (UTC)
Current status: finished
Result: 0/38 (0.00%)
Antivirus Version Last Update Result
AhnLab-V3 2008.12.19.0 2008.12.18 -
AntiVir 7.9.0.45 2008.12.18 -
Authentium 5.1.0.4 2008.12.18 -
Avast 4.8.1281.0 2008.12.18 -
AVG 8.0.0.199 2008.12.18 -
BitDefender 7.2 2008.12.18 -
CAT-QuickHeal 10.00 2008.12.18 -
ClamAV 0.94.1 2008.12.18 -
Comodo 771 2008.12.17 -
DrWeb 4.44.0.09170 2008.12.18 -
eSafe 7.0.17.0 2008.12.18 -
eTrust-Vet 31.6.6267 2008.12.18 -
Ewido 4.0 2008.12.18 -
F-Prot 4.4.4.56 2008.12.18 -
F-Secure 8.0.14332.0 2008.12.18 -
Fortinet 3.117.0.0 2008.12.18 -
GData 19 2008.12.18 -
Ikarus T3.1.1.45.0 2008.12.18 -
K7AntiVirus 7.10.557 2008.12.18 -
Kaspersky 7.0.0.125 2008.12.18 -
McAfee 5468 2008.12.18 -
McAfee+Artemis 5468 2008.12.18 -
Microsoft 1.4205 2008.12.18 -
NOD32 3703 2008.12.18 -
Norman 5.80.02 2008.12.18 -
Panda 9.0.0.4 2008.12.18 -
PCTools 4.4.2.0 2008.12.18 -
Prevx1 V2 2008.12.18 -
Rising 21.08.32.00 2008.12.18 -
SecureWeb-Gateway 6.7.6 2008.12.18 -
Sophos 4.37.0 2008.12.18 -
Sunbelt 3.2.1801.2 2008.12.11 -
Symantec 10 2008.12.18 -
TheHacker 6.3.1.4.191 2008.12.17 -
TrendMicro 8.700.0.1004 2008.12.18 -
VBA32 3.12.8.10 2008.12.18 -
ViRobot 2008.12.18.1525 2008.12.18 -
VirusBuster 4.5.11.0 2008.12.18 -
Additional information
File size: 100864 bytes
MD5...: ae88cfd831422d8fd7e3e6ae30011569
SHA1..: b7be676722e631841c945c8ea76764f2502ac992
SHA256: 708b82e6ef2913a9c7780a894e67e2465fdc3b216d0fbbb57d3887816ebd9040
SHA512: 08b5b852dda639a62817a0c2c4d3ff442abd967bb1452b553885fe640f9390ff
63253fb170fd8e47c77776c0ec0dc5b5e88ad35d957440d6a152a5380e69611b
ssdeep: 3072:quabLsH0RYvBmIuBqPo1AzFxocFT1NtY:quaBywIrP1FtT1
PEiD..: -
TrID..: File type identification
Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x5a015114
timedatestamp.....: 0x48435b23 (Mon Jun 02 02:29:55 2008)
machinetype.......: 0x14c (I386)

( 7 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x13d5c 0x13e00 6.56 bc05a0a2f1ae8479e87e545b5b91c73c
.itext 0x15000 0x1a8 0x200 5.42 f7a54492012b297851e803a7d7722fb2
.data 0x16000 0x13c8 0x1400 3.95 abd4f342b01537bb0388fdd975475ad5
.bss 0x18000 0x2abc 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.idata 0x1b000 0xbfa 0xc00 4.94 05dbd046f97d76eec6c005e020149baa
.reloc 0x1c000 0xd84 0xe00 6.62 33e0ed9fc2d481affd3c735f0c3a7f55
.rsrc 0x1d000 0x1800 0x1800 3.52 23fa84b60f0e32df9d36925f33c59b17

( 9 imports )
> oleaut32.dll: SysFreeString, SysReAllocStringLen
> advapi32.dll: RegQueryValueExA, RegOpenKeyExA, RegCloseKey
> user32.dll: GetKeyboardType, DestroyWindow, MessageBoxA
> kernel32.dll: GetACP, Sleep, VirtualFree, VirtualAlloc, GetCurrentThreadId, VirtualQuery, GetStartupInfoA, GetCommandLineA, FreeLibrary, ExitProcess, WriteFile, UnhandledExceptionFilter, RtlUnwind, RaiseException, GetStdHandle
> kernel32.dll: TlsSetValue, TlsGetValue, TlsFree, TlsAlloc, LocalFree, LocalAlloc
> user32.dll: TranslateMessage, PeekMessageA, MsgWaitForMultipleObjects, GetSystemMetrics, DispatchMessageA
> kernel32.dll: lstrlenW, lstrcpyW, lstrcmpA, WriteFile, WaitForSingleObject, WaitForMultipleObjects, VirtualQuery, VirtualProtect, VirtualFree, VirtualAlloc, UnmapViewOfFile, Sleep, SetThreadPriority, SetLastError, SetEvent, ReleaseMutex, OpenProcess, OpenMutexW, OpenMutexA, OpenFileMappingW, OpenFileMappingA, OpenEventW, OpenEventA, MapViewOfFile, LocalFree, LocalAlloc, LoadLibraryExA, LoadLibraryW, LoadLibraryA, LeaveCriticalSection, IsBadReadPtr, InitializeCriticalSection, GetVersionExW, GetVersionExA, GetVersion, GetThreadContext, GetProcAddress, GetModuleHandleW, GetModuleHandleA, GetModuleFileNameW, GetModuleFileNameA, GetLastError, GetCurrentThreadId, GetCurrentThread, GetCurrentProcessId, GetCurrentProcess, FreeLibrary, FormatMessageA, ExitProcess, EnterCriticalSection, DuplicateHandle, DeleteCriticalSection, CreateMutexW, CreateMutexA, CreateFileMappingW, CreateFileMappingA, CreateFileW, CreateFileA, CreateEventW, CreateEventA, CloseHandle
> advapi32.dll: SetSecurityDescriptorDacl, OpenProcessToken, LookupPrivilegeValueA, InitializeSecurityDescriptor, GetTokenInformation, GetLengthSid, FreeSid, AllocateAndInitializeSid, AdjustTokenPrivileges
> advapi32.dll: GetKernelObjectSecurity

( 0 exports )

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file