Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File setup.exe received on 08.14.2008 05:16:53 (CET)
Current status: finished
Result: 6/36 (16.67%)
Antivirus Version Last Update Result
AhnLab-V3 2008.8.13.0 2008.08.13 -
AntiVir 7.8.1.19 2008.08.13 -
Authentium 5.1.0.4 2008.08.14 -
Avast 4.8.1195.0 2008.08.13 Win32:Trojan-gen {Other}
AVG 8.0.0.161 2008.08.13 -
BitDefender 7.2 2008.08.14 -
CAT-QuickHeal 9.50 2008.08.13 -
ClamAV 0.93.1 2008.08.14 -
DrWeb 4.44.0.09170 2008.08.13 -
eSafe 7.0.17.0 2008.08.13 -
eTrust-Vet 31.6.6031 2008.08.13 -
Ewido 4.0 2008.08.13 -
F-Prot 4.4.4.56 2008.08.13 -
F-Secure 7.60.13501.0 2008.08.13 -
Fortinet 3.14.0.0 2008.08.13 -
GData 2.0.7306.1023 2008.08.14 Win32:Trojan-gen
Ikarus T3.1.1.34.0 2008.08.14 -
K7AntiVirus 7.10.413 2008.08.13 Trojan-Dropper.Win32.Joiner.gf
Kaspersky 7.0.0.125 2008.08.14 -
McAfee 5360 2008.08.13 -
Microsoft 1.3807 2008.08.14 -
NOD32v2 3353 2008.08.13 -
Norman 5.80.02 2008.08.13 W32/Joiner.BSR
Panda 9.0.0.4 2008.08.13 -
PCTools 4.4.2.0 2008.08.13 -
Prevx1 V2 2008.08.14 -
Rising 20.57.22.00 2008.08.13 -
Sophos 4.32.0 2008.08.14 -
Sunbelt 3.1.1542.1 2008.08.13 -
Symantec 10 2008.08.14 -
TheHacker 6.3.0.3.046 2008.08.13 -
TrendMicro 8.700.0.1004 2008.08.13 -
VBA32 3.12.8.3 2008.08.13 Trojan-Dropper.Win32.Joiner.gf
ViRobot 2008.8.13.1335 2008.08.13 Trojan.Win32.Joiner.450536
VirusBuster 4.5.11.0 2008.08.13 -
Webwasher-Gateway 6.6.2 2008.08.13 -
Additional information
File size: 450536 bytes
MD5...: 9e9fb6d38e20206674d91fda9503f213
SHA1..: 4c2c022358063fd7eca2be2a472448f05d1fecea
SHA256: 6455120bf8dd69aa756ace597b591a53d61e5bea7e8a26ff7359aa154f9a7bd5
SHA512: 7af524edcc80502155f13ff48fe85bc4e4ee5aa81ab48d0fb86dc9771e5b71f2
719481cf59435c17203613da7d33e15e96125b2ab89ca3d0c662aedda666d1b2
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x42aca8
timedatestamp.....: 0x4333dcc9 (Fri Sep 23 10:45:29 2005)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x46bcc 0x46c00 6.55 b598e6517c31e367218df17c9bd76cca
.data 0x48000 0x35dc 0x1a00 3.03 6918ebb591c1574c01223239f598080e
.rsrc 0x4c000 0x23d2c 0x23e00 5.74 df28fdbe203ac14682f642c4236f392b

( 5 imports )
> KERNEL32.dll: EndUpdateResourceA, MultiByteToWideChar, IsValidCodePage, GetDiskFreeSpaceExA, Sleep, SetFilePointer, FindResourceA, LoadResource, LockResource, SizeofResource, CreateEventA, SetEvent, FormatMessageA, LocalFree, CreateProcessA, GetModuleFileNameA, ExpandEnvironmentStringsA, GlobalAlloc, GlobalFree, GetSystemDirectoryA, GetVersionExA, CompareStringA, GetSystemInfo, GetCurrentProcess, GetFileAttributesA, GetTempPathA, GetTempFileNameA, DeleteFileA, CreateDirectoryA, CopyFileA, WideCharToMultiByte, GetEnvironmentVariableA, ReadFile, GetWindowsDirectoryA, GetDateFormatA, GetTimeFormatA, InterlockedIncrement, InterlockedDecrement, InterlockedExchange, GetCommandLineA, HeapFree, HeapAlloc, GetProcessHeap, GetStartupInfoA, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCurrentProcessId, RaiseException, RtlUnwind, CloseHandle, ExitProcess, LCMapStringA, LCMapStringW, GetCPInfo, GetStdHandle, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetCurrentThreadId, HeapDestroy, HeapCreate, VirtualFree, QueryPerformanceCounter, GetSystemTimeAsFileTime, GetACP, GetOEMCP, VirtualAlloc, HeapReAlloc, GetConsoleCP, GetConsoleMode, FlushFileBuffers, HeapSize, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, GetStringTypeA, GetStringTypeW, GetLocaleInfoW, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetStdHandle, CreateFileA, CreateFileW, SetEndOfFile, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, CreateThread, InitializeCriticalSection, MulDiv, lstrlenW, GetExitCodeProcess, WaitForSingleObject, GetTickCount, FindNextFileA, FindClose, FindFirstFileA, WriteFile, FreeLibrary, GetLastError, GetProcAddress, LoadLibraryA, GetModuleHandleA, GetThreadLocale, UpdateResourceA, BeginUpdateResourceA, LocalAlloc, lstrlenA, UpdateResourceW, GetTempPathW, GetTempFileNameW, GetSystemDirectoryW, GetModuleFileNameW, GetFileAttributesW, FormatMessageW, FindResourceW, DeleteFileW, CreateProcessW, CreateDirectoryW, CopyFileW, BeginUpdateResourceW, GetVersion
> GDI32.dll: CreateFontIndirectA, EnumFontFamiliesExA, DeleteObject, GetObjectA, GetStockObject, DeleteDC, GetObjectW, GetDeviceCaps, CreateCompatibleDC, GetTextExtentPoint32A, GetTextMetricsA, SelectObject
> USER32.dll: ScreenToClient, SetClassLongA, LoadCursorA, SetCursor, LoadIconA, LoadImageA, SetFocus, GetFocus, EnableWindow, MsgWaitForMultipleObjects, SetDlgItemTextA, SetWindowTextA, GetDlgItem, DispatchMessageA, TranslateMessage, IsDialogMessageA, PeekMessageA, DestroyWindow, ShowWindow, SetForegroundWindow, MoveWindow, CreateDialogParamA, CreateDialogIndirectParamA, SendMessageA, GetClientRect, ShowScrollBar, SendDlgItemMessageA, SystemParametersInfoA, GetWindowRect, CharNextA, ExitWindowsEx, MessageBoxA, GetSystemMetrics, DrawTextW, ReleaseDC, GetDialogBaseUnits, LoadStringA, GetDC, MessageBoxW
> ole32.dll: CoUninitialize, CoInitialize
> SHELL32.dll: ShellExecuteA, ShellExecuteW, SHGetMalloc, SHGetPathFromIDListW, SHGetSpecialFolderLocation, ShellExecuteExW, ShellExecuteExA

( 0 exports )
ThreatExpert info: http://www.threatexpert.com/report.aspx?md5=9e9fb6d38e20206674d91fda9503f213

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file