Srpski | Македонски | العربية | Suomi | ihMdI | 
| עברית | 
| Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | 
| 
| Magyar | Deutsch | Česky | Polski | Español
| עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
|
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... |
File winlogon.exe received on 2008.11.13 03:08:10 (UTC)
Current status: finished
Current status: finished
Result: 5/36 (13.89%)
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| AhnLab-V3 | 2008.11.13.0 | 2008.11.13 | - |
| AntiVir | 7.9.0.31 | 2008.11.12 | - |
| Authentium | 5.1.0.4 | 2008.11.12 | - |
| Avast | 4.8.1248.0 | 2008.11.12 | - |
| AVG | 8.0.0.199 | 2008.11.12 | SHeur2.BBJ |
| BitDefender | 7.2 | 2008.11.12 | - |
| CAT-QuickHeal | 9.50 | 2008.11.12 | - |
| ClamAV | 0.94.1 | 2008.11.12 | - |
| DrWeb | 4.44.0.09170 | 2008.11.13 | Trojan.Spambot.3202 |
| eSafe | 7.0.17.0 | 2008.11.12 | Suspicious File |
| eTrust-Vet | 31.6.6204 | 2008.11.11 | - |
| Ewido | 4.0 | 2008.11.12 | - |
| F-Prot | 4.4.4.56 | 2008.11.12 | - |
| F-Secure | 8.0.14332.0 | 2008.11.13 | - |
| Fortinet | 3.117.0.0 | 2008.11.12 | - |
| GData | 19 | 2008.11.12 | - |
| Ikarus | T3.1.1.45.0 | 2008.11.12 | - |
| K7AntiVirus | 7.10.523 | 2008.11.12 | - |
| Kaspersky | 7.0.0.125 | 2008.11.13 | - |
| McAfee | 5432 | 2008.11.13 | - |
| Microsoft | 1.4104 | 2008.11.13 | - |
| NOD32 | 3608 | 2008.11.13 | - |
| Norman | 5.80.02 | 2008.11.12 | - |
| Panda | 9.0.0.4 | 2008.11.12 | - |
| PCTools | 4.4.2.0 | 2008.11.13 | - |
| Prevx1 | V2 | 2008.11.13 | Cloaked Malware |
| Rising | 21.03.22.00 | 2008.11.12 | - |
| SecureWeb-Gateway | 6.7.6 | 2008.11.12 | Trojan.Dldr.LooksLike.Zlob |
| Sophos | 4.35.0 | 2008.11.13 | - |
| Sunbelt | 3.1.1785.2 | 2008.11.11 | - |
| Symantec | 10 | 2008.11.13 | - |
| TheHacker | 6.3.1.1.151 | 2008.11.13 | - |
| TrendMicro | 8.700.0.1004 | 2008.11.13 | - |
| VBA32 | 3.12.8.9 | 2008.11.12 | - |
| ViRobot | 2008.11.12.1463 | 2008.11.12 | - |
| VirusBuster | 4.5.11.0 | 2008.11.12 | - |
| Additional information |
|---|
| File size: 56320 bytes |
| MD5...: 6c161cf9aefd577235547a0514ea7336 |
| SHA1..: 909cd7e7417b8c4d4c18f58ea80a14f7965a0635 |
| SHA256: f1ebb1d73ead2fccfb7f57f6a6cedb4e164953538a9c7758af4fd04b217e6ab0 |
| SHA512: 68f5e94192eb8e7df6d9409e846ba05e85718e5ce466e70981496184be9ce144 be56406acefa5eb8fffaef7ded0ffefc00c7e8cb8a3b46856569699239c83dff |
| PEiD..: - |
| TrID..: File type identification Win64 Executable Generic (80.9%) Win32 Executable Generic (8.0%) Win32 Dynamic Link Library (generic) (7.1%) Generic Win/DOS Executable (1.8%) DOS Executable Generic (1.8%) |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x40c842 timedatestamp.....: 0x47d0071a (Thu Mar 06 15:00:42 2008) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0xc927 0xca00 7.93 c36b4c719adec8be84fb9d3f9e1e8d9a .data 0xe000 0x7cd9 0xa00 6.13 4a698577abbd8d5754a9eaf183b6b0ab .rsrc 0x16000 0x3a8 0x400 3.14 5851697366ea92fcd1b6f3abc37b89b1 ( 5 imports ) > GDI32.dll: MoveToEx, SetTextAlign, CreateRectRgn, Rectangle, SetROP2, RestoreDC, GetObjectA, SelectObject, CreateFontIndirectA, EndDoc > ADVAPI32.dll: GetLengthSid, LookupPrivilegeValueW, GetKernelObjectSecurity, RegCreateKeyA, IsValidSecurityDescriptor, StartServiceA, GetSidSubAuthorityCount, RegOpenKeyA, RegDeleteKeyA, OpenServiceA > ole32.dll: OleUninitialize, OleCreateMenuDescriptor, CoGetClassObject, CoGetTreatAsClass, OleCreateFromDataEx, BindMoniker, OleTranslateAccelerator, OleSetAutoConvert, OleCreateLink, OleCreateFromFileEx, CoTreatAsClass > KERNEL32.dll: GetTimeFormatA, TlsSetValue, GetVersionExA, GetSystemTimeAsFileTime, GetExitCodeThread, TlsGetValue, GetModuleFileNameA, SearchPathA, LockResource, GetThreadContext, GetLocaleInfoW, FreeEnvironmentStringsA, InterlockedDecrement, GetFileAttributesA, GetVersion, CreateProcessA > MSVCRT.dll: wcsncpy, atol, _snprintf, _access, strncat, _pctype, _waccess, _itoa, strtoul, _wctime ( 0 exports ) |
| Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=38B7A50200F2E8F3DCF5004C5985A7006456DA49 |
| ThreatExpert info: http://www.threatexpert.com/report.aspx?md5=6c161cf9aefd577235547a0514ea7336 |
ATTENTION:
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.
