Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File Keygen.exe received on 2009.02.26 02:30:48 (UTC)
Current status: finished
Result: 12/39 (30.77%)
Antivirus Version Last Update Result
a-squared 4.0.0.93 2009.02.26 Trojan-Dropper.Vb!IK
AhnLab-V3 2009.2.26.0 2009.02.25 -
AntiVir 7.9.0.88 2009.02.25 -
Authentium 5.1.0.4 2009.02.25 -
Avast 4.8.1335.0 2009.02.25 -
AVG 8.0.0.237 2009.02.25 Fake_AntiSpyware.BHF
BitDefender 7.2 2009.02.26 MemScan:Spyware.3606
CAT-QuickHeal 10.00 2009.02.25 -
ClamAV 0.94.1 2009.02.25 -
Comodo 983 2009.02.20 -
DrWeb 4.44.0.09170 2009.02.26 -
eSafe 7.0.17.0 2009.02.25 -
eTrust-Vet 31.6.6375 2009.02.26 -
F-Prot 4.4.4.56 2009.02.25 -
F-Secure 8.0.14470.0 2009.02.26 FraudTool.Win32.AntivirusXP2008.de
Fortinet 3.117.0.0 2009.02.26 Misc/AntivirusXP2008
GData 19 2009.02.26 MemScan:Spyware.3606
Ikarus T3.1.1.45.0 2009.02.26 Trojan-Dropper.Vb
K7AntiVirus 7.10.647 2009.02.25 -
Kaspersky 7.0.0.125 2009.02.26 not-a-virus:FraudTool.Win32.AntivirusXP2008.de
McAfee 5536 2009.02.25 -
McAfee+Artemis 5536 2009.02.25 -
Microsoft 1.4306 2009.02.26 -
NOD32 3890 2009.02.26 -
Norman 6.00.06 2009.02.25 AntiVirus2008.CIJ
nProtect 2009.1.8.0 2009.02.25 -
Panda 10.0.0.10 2009.02.26 Application/AntivirusXP2008
PCTools 4.4.2.0 2009.02.25 -
Prevx1 V2 2009.02.26 Medium Risk Malware
Rising 21.18.22.00 2009.02.25 -
SecureWeb-Gateway 6.0.0 2009.02.25 Trojan.Agent.udw
Sophos 4.39.0 2009.02.26 -
Sunbelt 3.2.1858.2 2009.02.25 -
Symantec 10 2009.02.26 -
TheHacker 6.3.2.5.265 2009.02.25 -
TrendMicro 8.700.0.1004 2009.02.25 -
VBA32 3.12.10.0 2009.02.26 -
ViRobot 2009.2.25.1623 2009.02.25 -
VirusBuster 4.5.11.0 2009.02.25 -
Additional information
File size: 515072 bytes
MD5...: 26608191037380080b4b5428a0d63706
SHA1..: 6a74aa3568bad986cf8a925227b176893e6a2d28
SHA256: 68e4820e184a9d0e549fb0084cbcabb3ac94ee3740daf9eba4feebf877a9a8ab
SHA512: 383566a9bca635e97503ea8f1b7c6069623bafa25da88479a7d87fba8995c7c1
c366237ab27e971609f4dedecac10c2d46cc58ec2bfb88b5ecdd9873c8a92a95
ssdeep: 12288:0kfuoWVAE2OpcxquTjAUWzcp0bToU6rG6zbneEYq7C5:MoWaE2OaxZc/Yz
Yq7C
PEiD..: -
TrID..: File type identification
Win64 Executable Generic (59.6%)
Win32 Executable MS Visual C++ (generic) (26.2%)
Win32 Executable Generic (5.9%)
Win32 Dynamic Link Library (generic) (5.2%)
Generic Win/DOS Executable (1.3%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1006b20
timedatestamp.....: 0x47918ef1 (Sat Jan 19 05:47:29 2008)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xa9e0 0xaa00 6.57 9ee0e124f68a3a1c8fa64ad51ff9fa45
.data 0xc000 0x2260 0x600 6.60 f3764284f4d25ed35f75b9c16e1ab608
.rsrc 0xf000 0x718b8 0x71a00 7.94 0ce0d7b36e310a18f3333b0c327ab495
.reloc 0x81000 0xcd0 0xe00 4.82 6ecf5ec5c89c4b613322d7793c0bd979

( 7 imports )
> ADVAPI32.dll: FreeSid, AllocateAndInitializeSid, EqualSid, GetTokenInformation, OpenProcessToken, AdjustTokenPrivileges, LookupPrivilegeValueA, RegCloseKey, RegDeleteValueA, RegOpenKeyExA, RegQueryValueExA, RegQueryInfoKeyA, RegSetValueExA, RegCreateKeyExA
> KERNEL32.dll: LocalFree, LocalAlloc, GetLastError, GetCurrentProcess, lstrlenA, _lclose, _llseek, _lopen, WritePrivateProfileStringA, GetWindowsDirectoryA, CreateDirectoryA, GetFileAttributesA, GetModuleFileNameA, GetSystemDirectoryA, RemoveDirectoryA, FindClose, FindNextFileA, DeleteFileA, SetFileAttributesA, lstrcmpA, FindFirstFileA, ExpandEnvironmentStringsA, GlobalFree, GlobalUnlock, GlobalLock, GlobalAlloc, IsDBCSLeadByte, GetShortPathNameA, GetPrivateProfileStringA, GetPrivateProfileIntA, CompareStringA, GetVersion, GetModuleHandleW, FreeResource, LockResource, LoadResource, SizeofResource, CloseHandle, ReadFile, WriteFile, SetFilePointer, SetFileTime, LocalFileTimeToFileTime, DosDateTimeToFileTime, CreateFileA, SetCurrentDirectoryA, GetTempFileNameA, GetVolumeInformationA, FormatMessageA, GetCurrentDirectoryA, ExitProcess, LoadLibraryExA, GetVersionExA, GetExitCodeProcess, GetProcAddress, CreateProcessA, GetTempPathA, GetSystemInfo, CreateMutexA, SetEvent, CreateEventA, CreateThread, ResetEvent, TerminateThread, GetDriveTypeA, FindResourceA, LoadLibraryA, FreeLibrary, InterlockedExchange, Sleep, InterlockedCompareExchange, GetStartupInfoA, RtlUnwind, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, EnumResourceLanguagesA, MulDiv, GetDiskFreeSpaceA, WaitForSingleObject
> GDI32.dll: GetDeviceCaps
> USER32.dll: SendDlgItemMessageA, GetDlgItem, SetForegroundWindow, SetWindowTextA, MessageBoxA, DialogBoxIndirectParamA, ShowWindow, EnableWindow, GetDlgItemTextA, GetDC, ReleaseDC, SetWindowPos, SendMessageA, PeekMessageA, MsgWaitForMultipleObjects, DispatchMessageA, CallWindowProcA, GetWindowLongA, SetWindowLongA, CharPrevA, CharUpperA, CharNextA, ExitWindowsEx, EndDialog, GetDesktopWindow, LoadStringA, SetDlgItemTextA, MessageBeep, GetWindowRect, GetSystemMetrics
> msvcrt.dll: _cexit, _exit, _XcptFilter, _ismbblead, exit, _acmdln, _initterm, _amsg_exit, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, _terminate@@YAXXZ, _controlfp, __getmainargs, memcpy, memset, _vsnprintf
> COMCTL32.dll: -
> VERSION.dll: GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA

( 0 exports )
packers (Kaspersky): PE_Patch.UPX, UPX
packers (F-Prot): CAB, UPX
CWSandbox info: http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=26608191037380080b4b5428a0d63706
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=D3DC868F008846342A7B0295061DD9007F6FF0BF

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file