Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File install.exe received on 2009.11.19 16:36:53 (UTC)
Current status: finished
Result: 7/41 (17.07%)
Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.11.19 -
AhnLab-V3 5.0.0.2 2009.11.19 -
AntiVir 7.9.1.72 2009.11.19 -
Antiy-AVL 2.0.3.7 2009.11.19 -
Authentium 5.2.0.5 2009.11.19 -
Avast 4.8.1351.0 2009.11.19 -
AVG 8.5.0.425 2009.11.19 -
BitDefender 7.2 2009.11.19 -
CAT-QuickHeal 10.00 2009.11.19 -
ClamAV 0.94.1 2009.11.19 -
Comodo 2979 2009.11.18 -
DrWeb 5.0.0.12182 2009.11.19 -
eSafe 7.0.17.0 2009.11.19 -
eTrust-Vet 35.1.7130 2009.11.19 Win32/RogueSecurity!generic
F-Prot 4.5.1.85 2009.11.19 -
F-Secure 9.0.15370.0 2009.11.17 -
Fortinet 3.120.0.0 2009.11.19 -
GData 19 2009.11.19 -
Ikarus T3.1.1.74.0 2009.11.19 -
Jiangmin 11.0.800 2009.11.19 -
K7AntiVirus 7.10.900 2009.11.19 -
Kaspersky 7.0.0.125 2009.11.19 -
McAfee 5806 2009.11.18 -
McAfee+Artemis 5806 2009.11.18 -
McAfee-GW-Edition 6.8.5 2009.11.19 Heuristic.LooksLike.Trojan.PCK.Krap.H
Microsoft 1.5302 2009.11.19 -
NOD32 4622 2009.11.19 -
Norman 6.03.02 2009.11.19 W32/FakeAV.AM!genr
nProtect 2009.1.8.0 2009.11.19 -
Panda 10.0.2.2 2009.11.18 -
PCTools 7.0.3.5 2009.11.19 Application.Maybe_RogueAV
Prevx 3.0 2009.11.19 -
Rising 22.22.03.09 2009.11.19 Trojan.Win32.FakeAV.aly
Sophos 4.47.0 2009.11.19 Mal/FakeAV-AD
Sunbelt 3.2.1858.2 2009.11.19 FraudTool.Win32.RogueSecurity (v)
Symantec 1.4.4.12 2009.11.19 -
TheHacker 6.5.0.2.074 2009.11.19 -
TrendMicro 9.0.0.1003 2009.11.19 -
VBA32 3.12.12.0 2009.11.19 -
ViRobot 2009.11.19.2045 2009.11.19 -
VirusBuster 5.0.21.0 2009.11.19 -
Additional information
File size: 1210430 bytes
MD5   : 0feffd97ffe3ecc875cfe44b73f5653b
SHA1  : 06a666f8816fc794abce0e45caf8f198e0ec7e2f
SHA256: 2ae3694e12776374d8110e0077fe63fe3429e480a422f876c89dfafe021dd34b
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1000
timedatestamp.....: 0x3D58B8DB (Tue Aug 13 09:44:27 2002)
machinetype.......: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.textN 0x1000 0xCA000 0xC9200 6.77 d2510c33d556afca82408dc90cc75ab2
.rdata 0xCB000 0x1000 0x400 4.28 5e6746689cf6809e3998d4ff1dae51c3
.data0 0xCC000 0x56000 0x55C00 6.77 f5417f9b3d0c2bd128e0eba55248e17b
.rsrc 0x122000 0xD5000 0x8200 4.40 8bd0fa85f6b57573814e67237e91f1dd

( 6 imports )

> advapi32.dll: ConvertSidToStringSidA, IsValidSid, InitializeSid, GetLengthSid, ReportEventA
> comctl32.dll: InitCommonControlsEx, ImageList_Create, DllGetVersion, ImageList_DrawEx, ImageList_Add
> kernel32.dll: CreateThread, ExitProcess, GetProcAddress, GlobalAlloc, GlobalFree, LoadLibraryA, VirtualProtect, WaitForSingleObject
> shell32.dll: ShellMessageBoxA, StrStrA, ShellAboutA, SHGetFolderPathA, StrChrA
> shlwapi.dll: wnsprintfA, IsCharSpaceW, StrDupA, SHGetValueA, ColorRGBToHLS
> user32.dll: FindWindowA, CharLowerA, ShowWindow, GetClientRect, DialogBoxParamA

( 0 exports )
TrID  : File type identification
Generic Win/DOS Executable (49.9%)
DOS Executable Generic (49.8%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
ssdeep: 24576:/UegSV+zXK8YHIwrdHclZZkW+x3AdByf5vQiWS:/Ueg1DFYHPsi9xyQfFQi1
PEiD  : -
RDS   : NSRL Reference Data Set
-

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file