Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File inst.exe received on 2009.09.27 02:53:54 (UTC)
Current status: finished
Result: 35/41 (85.37%)
Antivirus Version Last Update Result
a-squared 4.5.0.24 2009.09.26 Virus.Win32.Crypt.CQW!IK
AhnLab-V3 5.0.0.2 2009.09.26 Win-Trojan/Pasta.130560
AntiVir 7.9.1.25 2009.09.25 TR/Pasta.cwh.2
Antiy-AVL 2.0.3.7 2009.09.25 -
Authentium 5.1.2.4 2009.09.26 W32/Injector.A.gen!Eldorado
Avast 4.8.1351.0 2009.09.26 Win32:Trojan-gen {Other}
AVG 8.5.0.412 2009.09.26 Downloader.Generic8.BRPU
BitDefender 7.2 2009.09.27 Gen:Trojan.Heur.hmGfv16VHUeix
CAT-QuickHeal 10.00 2009.09.26 Trojan.Pasta.bzn
ClamAV 0.94.1 2009.09.27 -
Comodo 2449 2009.09.27 Heur.Suspicious
DrWeb 5.0.0.12182 2009.09.27 Trojan.Fakealert.5073
eSafe 7.0.17.0 2009.09.24 Suspicious File
eTrust-Vet 31.6.6761 2009.09.25 Win32/Induc.N
F-Prot 4.5.1.85 2009.09.26 W32/Injector.A.gen!Eldorado
F-Secure 8.0.14470.0 2009.09.26 Trojan.Win32.Pasta.cwh
Fortinet 3.120.0.0 2009.09.26 PossibleThreat
GData 19 2009.09.27 Gen:Trojan.Heur.hmGfv16VHUeix
Ikarus T3.1.1.72.0 2009.09.26 Virus.Win32.Crypt.CQW
Jiangmin 11.0.800 2009.09.26 Trojan/Pasta.uq
K7AntiVirus 7.10.855 2009.09.26 Trojan.Win32.Pasta.cwh
Kaspersky 7.0.0.125 2009.09.27 Trojan.Win32.Pasta.cwh
McAfee 5753 2009.09.26 Generic.dx!ffx
McAfee+Artemis 5753 2009.09.26 Generic.dx!ffx
McAfee-GW-Edition 6.8.5 2009.09.27 Trojan.Pasta.cwh.2
Microsoft 1.5005 2009.09.23 -
NOD32 4460 2009.09.26 Win32/TrojanDownloader.FakeAlert.AFK
Norman 6.01.09 2009.09.26 W32/DLoader.XCGJ
nProtect 2009.1.8.0 2009.09.26 -
Panda 10.0.2.2 2009.09.26 Adware/ProtectionSystem
PCTools 4.4.2.0 2009.09.25 -
Prevx 3.0 2009.09.27 Medium Risk Malware Downloader
Rising 21.48.60.00 2009.09.27 Trojan.Spy.Win32.Undef.GEN
Sophos 4.45.0 2009.09.27 Mal/Behav-010
Sunbelt 3.2.1858.2 2009.09.26 Trojan.Win32.Generic!BT
Symantec 1.4.4.12 2009.09.27 Trojan Horse
TheHacker 6.5.0.2.019 2009.09.26 -
TrendMicro 8.950.0.1094 2009.09.25 PAK_Generic.001
VBA32 3.12.10.11 2009.09.25 Trojan.Win32.Pasta.cwh
ViRobot 2009.9.26.1958 2009.09.26 Trojan.Win32.Pasta.130560
VirusBuster 4.6.5.0 2009.09.26 Trojan.Pasta.AFO
Additional information
File size: 130560 bytes
MD5   : 5d721a4deeaf092f0f850e108c8a518b
SHA1  : 6d39c7f6745c6281a082a3ce40bdfc9fef870fd9
SHA256: 0f2bc921096b77a036c711d3458b00cacfdb1850840a48f1c9832d3383c9cfb2
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x6EC30
timedatestamp.....: 0x4AB168F5 (Thu Sep 17 00:38:45 2009)
machinetype.......: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0x1000 0x50000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0x51000 0x1E000 0x1DE00 7.86 9372c8f3a6071f74d886cce08487d9f1
.rsrc 0x6F000 0x2000 0x1C00 4.90 e25c44dd19417e4b5fe1359321a41fa7

( 7 imports )

> advapi32.dll: RegCloseKey
> gdi32.dll: BitBlt
> kernel32.dll: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
> ole32.dll: CoInitialize
> shlwapi.dll: SHGetValueA
> user32.dll: SetTimer
> wininet.dll: InternetOpenA

( 0 exports )
TrID  : File type identification
Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
ThreatExpert: http://www.threatexpert.com/report.aspx?md5=5d721a4deeaf092f0f850e108c8a518b
ssdeep: 3072:Jubm6URIXpIdDTlX0s7U8f+v/X9ZDL7QD80cPxQtgXxrJV7Y:Abm6HXpI70mZf+v/kD80cPaCDBY
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=44504485004310E7FE3301003A426400DBC35567
PEiD  : -
packers (Kaspersky): PE_Patch.UPX, UPX
packers (F-Prot): UPX
packers (Authentium): UPX
RDS   : NSRL Reference Data Set
-

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file