| עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File bak.exe received on 05.28.2008 05:39:39 (CET)
Current status: finished
Result: 20/32 (62.50%)
Antivirus Version Last Update Result
AhnLab-V3 2008.5.28.0 2008.05.27 -
AntiVir 7.8.0.19 2008.05.27 TR/Crypt.NSPM.Gen
Authentium 5.1.0.4 2008.05.27 -
Avast 4.8.1195.0 2008.05.27 Win32:Otwycal-D
AVG 7.5.0.516 2008.05.27 Win32/PolyCrypt
BitDefender 7.2 2008.05.28 MemScan:Win32.Worm.Otwycal.T
CAT-QuickHeal 9.50 2008.05.26 (Suspicious) - DNAScan
ClamAV 0.92.1 2008.05.27 -
DrWeb 4.44.0.09170 2008.05.27 -
eSafe 7.0.15.0 2008.05.27 suspicious Trojan/Worm
eTrust-Vet 31.4.5828 2008.05.28 -
Ewido 4.0 2008.05.27 -
F-Prot 4.4.4.56 2008.05.27 -
F-Secure 6.70.13260.0 2008.05.28 W32/Suspicious_N.gen
Fortinet 3.14.0.0 2008.05.27 -
GData 2.0.7306.1023 2008.05.28 Win32:Otwycal-D
Ikarus T3.1.1.26.0 2008.05.28 Packed.Win32.Klone.af
Kaspersky 7.0.0.125 2008.05.28 -
McAfee 5304 2008.05.27 New Malware.u
Microsoft 1.3520 2008.05.28 Worm:Win32/Otwycal.gen!A
NOD32v2 3137 2008.05.28 a variant of Win32/AutoRun.NAD
Norman 5.80.02 2008.05.27 W32/Suspicious_N.gen
Panda 9.0.0.4 2008.05.28 Suspicious file
Prevx1 V2 2008.05.28 -
Rising 20.46.12.00 2008.05.28 Win32.WYC.n
Sophos 4.29.0 2008.05.28 Mal/Generic-A
Sunbelt 3.0.1123.1 2008.05.17 VIPRE.Suspicious
Symantec 10 2008.05.28 -
TheHacker 6.2.92.321 2008.05.27 W32/Behav-Heuristic-067
VBA32 3.12.6.6 2008.05.28 -
VirusBuster 4.3.26:9 2008.05.27 Packed/NSPack
Webwasher-Gateway 6.6.2 2008.05.28 Trojan.Crypt.NSPM.Gen
Additional information
File size: 25229 bytes
MD5...: 6be5a7b11601f8cb06ebba08c063aa09
SHA1..: 95d266e2e04e27a923467f483c23818c38ebe19e
SHA256: 8ec1cb758d92fb5fcaf884c4bc0abdb8ff48da2d1f164856f8774b6eb953adea
SHA512: c04fc5afecc674056ea0b4a196f5fa8dcfedffe3c0feea3e110031edc9c79760
0fd0c3ef50c88c15f37e0a24cf009968898d867cf3e76dd1a5b6ed48c19bd668
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1324125e
timedatestamp.....: 0x1511b0be (Sun Mar 15 05:08:14 1981)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
PS 0x1000 0xf0000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
__ 0xf1000 0x7000 0x608d 7.96 8f3de150e281595c81addd3410bfb975
4_ 0xf8000 0x3e6 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e

( 6 imports )
> KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
> SFC.DLL: -
> SHELL32.DLL: ShellExecuteA
> USER32.DLL: wsprintfA
> WININET.DLL: InternetOpenUrlA
> ADVAPI32.DLL: LookupPrivilegeValueA

( 0 exports )
packers (Avast): NsPack
packers (F-Prot): NSPack, PE_Patch

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file