|
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... |
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| a-squared | 4.0.0.93 | 2009.02.26 | Trojan-Dropper.Vb!IK |
| AhnLab-V3 | 2009.2.26.0 | 2009.02.25 | - |
| AntiVir | 7.9.0.88 | 2009.02.25 | - |
| Authentium | 5.1.0.4 | 2009.02.25 | - |
| Avast | 4.8.1335.0 | 2009.02.25 | - |
| AVG | 8.0.0.237 | 2009.02.25 | Fake_AntiSpyware.BHF |
| BitDefender | 7.2 | 2009.02.26 | MemScan:Spyware.3606 |
| CAT-QuickHeal | 10.00 | 2009.02.25 | - |
| ClamAV | 0.94.1 | 2009.02.25 | - |
| Comodo | 983 | 2009.02.20 | - |
| DrWeb | 4.44.0.09170 | 2009.02.26 | - |
| eSafe | 7.0.17.0 | 2009.02.25 | - |
| eTrust-Vet | 31.6.6375 | 2009.02.26 | - |
| F-Prot | 4.4.4.56 | 2009.02.25 | - |
| F-Secure | 8.0.14470.0 | 2009.02.26 | FraudTool.Win32.AntivirusXP2008.de |
| Fortinet | 3.117.0.0 | 2009.02.26 | Misc/AntivirusXP2008 |
| GData | 19 | 2009.02.26 | MemScan:Spyware.3606 |
| Ikarus | T3.1.1.45.0 | 2009.02.26 | Trojan-Dropper.Vb |
| K7AntiVirus | 7.10.647 | 2009.02.25 | - |
| Kaspersky | 7.0.0.125 | 2009.02.26 | not-a-virus:FraudTool.Win32.AntivirusXP2008.de |
| McAfee | 5536 | 2009.02.25 | - |
| McAfee+Artemis | 5536 | 2009.02.25 | - |
| Microsoft | 1.4306 | 2009.02.26 | - |
| NOD32 | 3890 | 2009.02.26 | - |
| Norman | 6.00.06 | 2009.02.25 | AntiVirus2008.CIJ |
| nProtect | 2009.1.8.0 | 2009.02.25 | - |
| Panda | 10.0.0.10 | 2009.02.26 | Application/AntivirusXP2008 |
| PCTools | 4.4.2.0 | 2009.02.25 | - |
| Prevx1 | V2 | 2009.02.26 | Medium Risk Malware |
| Rising | 21.18.22.00 | 2009.02.25 | - |
| SecureWeb-Gateway | 6.0.0 | 2009.02.25 | Trojan.Agent.udw |
| Sophos | 4.39.0 | 2009.02.26 | - |
| Sunbelt | 3.2.1858.2 | 2009.02.25 | - |
| Symantec | 10 | 2009.02.26 | - |
| TheHacker | 6.3.2.5.265 | 2009.02.25 | - |
| TrendMicro | 8.700.0.1004 | 2009.02.25 | - |
| VBA32 | 3.12.10.0 | 2009.02.26 | - |
| ViRobot | 2009.2.25.1623 | 2009.02.25 | - |
| VirusBuster | 4.5.11.0 | 2009.02.25 | - |
| Additional information |
|---|
| File size: 515072 bytes |
| MD5...: 26608191037380080b4b5428a0d63706 |
| SHA1..: 6a74aa3568bad986cf8a925227b176893e6a2d28 |
| SHA256: 68e4820e184a9d0e549fb0084cbcabb3ac94ee3740daf9eba4feebf877a9a8ab |
| SHA512: 383566a9bca635e97503ea8f1b7c6069623bafa25da88479a7d87fba8995c7c1 c366237ab27e971609f4dedecac10c2d46cc58ec2bfb88b5ecdd9873c8a92a95 |
| ssdeep: 12288:0kfuoWVAE2OpcxquTjAUWzcp0bToU6rG6zbneEYq7C5:MoWaE2OaxZc/Yz Yq7C |
| PEiD..: - |
| TrID..: File type identification Win64 Executable Generic (59.6%) Win32 Executable MS Visual C++ (generic) (26.2%) Win32 Executable Generic (5.9%) Win32 Dynamic Link Library (generic) (5.2%) Generic Win/DOS Executable (1.3%) |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x1006b20 timedatestamp.....: 0x47918ef1 (Sat Jan 19 05:47:29 2008) machinetype.......: 0x14c (I386) ( 4 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0xa9e0 0xaa00 6.57 9ee0e124f68a3a1c8fa64ad51ff9fa45 .data 0xc000 0x2260 0x600 6.60 f3764284f4d25ed35f75b9c16e1ab608 .rsrc 0xf000 0x718b8 0x71a00 7.94 0ce0d7b36e310a18f3333b0c327ab495 .reloc 0x81000 0xcd0 0xe00 4.82 6ecf5ec5c89c4b613322d7793c0bd979 ( 7 imports ) > ADVAPI32.dll: FreeSid, AllocateAndInitializeSid, EqualSid, GetTokenInformation, OpenProcessToken, AdjustTokenPrivileges, LookupPrivilegeValueA, RegCloseKey, RegDeleteValueA, RegOpenKeyExA, RegQueryValueExA, RegQueryInfoKeyA, RegSetValueExA, RegCreateKeyExA > KERNEL32.dll: LocalFree, LocalAlloc, GetLastError, GetCurrentProcess, lstrlenA, _lclose, _llseek, _lopen, WritePrivateProfileStringA, GetWindowsDirectoryA, CreateDirectoryA, GetFileAttributesA, GetModuleFileNameA, GetSystemDirectoryA, RemoveDirectoryA, FindClose, FindNextFileA, DeleteFileA, SetFileAttributesA, lstrcmpA, FindFirstFileA, ExpandEnvironmentStringsA, GlobalFree, GlobalUnlock, GlobalLock, GlobalAlloc, IsDBCSLeadByte, GetShortPathNameA, GetPrivateProfileStringA, GetPrivateProfileIntA, CompareStringA, GetVersion, GetModuleHandleW, FreeResource, LockResource, LoadResource, SizeofResource, CloseHandle, ReadFile, WriteFile, SetFilePointer, SetFileTime, LocalFileTimeToFileTime, DosDateTimeToFileTime, CreateFileA, SetCurrentDirectoryA, GetTempFileNameA, GetVolumeInformationA, FormatMessageA, GetCurrentDirectoryA, ExitProcess, LoadLibraryExA, GetVersionExA, GetExitCodeProcess, GetProcAddress, CreateProcessA, GetTempPathA, GetSystemInfo, CreateMutexA, SetEvent, CreateEventA, CreateThread, ResetEvent, TerminateThread, GetDriveTypeA, FindResourceA, LoadLibraryA, FreeLibrary, InterlockedExchange, Sleep, InterlockedCompareExchange, GetStartupInfoA, RtlUnwind, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, EnumResourceLanguagesA, MulDiv, GetDiskFreeSpaceA, WaitForSingleObject > GDI32.dll: GetDeviceCaps > USER32.dll: SendDlgItemMessageA, GetDlgItem, SetForegroundWindow, SetWindowTextA, MessageBoxA, DialogBoxIndirectParamA, ShowWindow, EnableWindow, GetDlgItemTextA, GetDC, ReleaseDC, SetWindowPos, SendMessageA, PeekMessageA, MsgWaitForMultipleObjects, DispatchMessageA, CallWindowProcA, GetWindowLongA, SetWindowLongA, CharPrevA, CharUpperA, CharNextA, ExitWindowsEx, EndDialog, GetDesktopWindow, LoadStringA, SetDlgItemTextA, MessageBeep, GetWindowRect, GetSystemMetrics > msvcrt.dll: _cexit, _exit, _XcptFilter, _ismbblead, exit, _acmdln, _initterm, _amsg_exit, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, _terminate@@YAXXZ, _controlfp, __getmainargs, memcpy, memset, _vsnprintf > COMCTL32.dll: - > VERSION.dll: GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA ( 0 exports ) |
| packers (Kaspersky): PE_Patch.UPX, UPX |
| packers (F-Prot): CAB, UPX |
| CWSandbox info: http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=26608191037380080b4b5428a0d63706 |
| Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=D3DC868F008846342A7B0295061DD9007F6FF0BF |
ATTENTION:
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.