Suomi | ihMdI | 
| עברית | 
| Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | 
| 
| Magyar | Deutsch | Česky | Polski | Español
| עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
|
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... |
File kryo2.sys received on 11.15.2008 04:55:12 (CET)
Current status: finished
Current status: finished
Result: 20/36 (55.56%)
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| AhnLab-V3 | 2008.11.14.3 | 2008.11.14 | - |
| AntiVir | 7.9.0.31 | 2008.11.14 | TR/Rootkit.Gen |
| Authentium | 5.1.0.4 | 2008.11.14 | - |
| Avast | 4.8.1281.0 | 2008.11.14 | Win32:Goldun-NQ |
| AVG | 8.0.0.199 | 2008.11.14 | BackDoor.Generic10.YED |
| BitDefender | 7.2 | 2008.11.15 | Trojan.Spy.Goldun.NDM |
| CAT-QuickHeal | 10.00 | 2008.11.13 | - |
| ClamAV | 0.94.1 | 2008.11.14 | - |
| DrWeb | 4.44.0.09170 | 2008.11.15 | - |
| eSafe | 7.0.17.0 | 2008.11.13 | - |
| eTrust-Vet | 31.6.6210 | 2008.11.14 | Win32/ProcHide!generic |
| Ewido | 4.0 | 2008.11.14 | - |
| F-Prot | 4.4.4.56 | 2008.11.14 | - |
| F-Secure | 8.0.14332.0 | 2008.11.15 | Trojan-Spy.Win32.Goldun.bff |
| Fortinet | 3.117.0.0 | 2008.11.15 | - |
| GData | 19 | 2008.11.15 | Trojan.Spy.Goldun.NDM |
| Ikarus | T3.1.1.45.0 | 2008.11.14 | Win32.SuspectCrc |
| K7AntiVirus | 7.10.525 | 2008.11.14 | Trojan-Spy.Win32.Goldun.bff |
| Kaspersky | 7.0.0.125 | 2008.11.15 | Trojan-Spy.Win32.Goldun.bff |
| McAfee | 5434 | 2008.11.14 | BackDoor-BAC.sys |
| Microsoft | 1.4104 | 2008.11.15 | Backdoor:Win32/Haxdoor |
| NOD32 | 3615 | 2008.11.15 | a variant of Win32/Spy.Goldun.AXT |
| Norman | 5.80.02 | 2008.11.14 | - |
| Panda | 9.0.0.4 | 2008.11.14 | - |
| PCTools | 4.4.2.0 | 2008.11.14 | Trojan.Goldun |
| Prevx1 | V2 | 2008.11.15 | - |
| Rising | 21.03.42.00 | 2008.11.14 | Trojan.Spy.Win32.Goldun.bff |
| SecureWeb-Gateway | 6.7.6 | 2008.11.14 | Trojan.Rootkit.Gen |
| Sophos | 4.35.0 | 2008.11.15 | Mal/Generic-A |
| Sunbelt | 3.1.1801.2 | 2008.11.14 | - |
| Symantec | 10 | 2008.11.15 | Trojan.Goldun |
| TheHacker | 6.3.1.1.152 | 2008.11.13 | - |
| TrendMicro | 8.700.0.1004 | 2008.11.14 | - |
| VBA32 | 3.12.8.9 | 2008.11.14 | suspected of Rootkit.Agent.10 |
| ViRobot | 2008.11.15.1469 | 2008.11.15 | - |
| VirusBuster | 4.5.11.0 | 2008.11.14 | Rootkit.Goldun.Gen.8 |
| Additional information |
|---|
| File size: 8608 bytes |
| MD5...: abbce53fa9411adbd8a870ae9c27a92e |
| SHA1..: 2d18049e5565b333b8a59bddee57ecdf4a58bbd3 |
| SHA256: cd5969ef86e500cb30fd6492f9e5522ef8d754e8d0e71ed6805debff4d5c1489 |
| SHA512: a45ecd1308be30cb121523e29714ca58c0e1fe2a313030d49288405191eb634b ac9df1682c1b174471bc97cb3cd34f217cc78492638477ce2060fc9064830311 |
| PEiD..: - |
| TrID..: File type identification Generic Win/DOS Executable (49.8%) DOS Executable Generic (49.8%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%) MS Flight Simulator Aircraft Performance Info (0.0%) |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x1020a timedatestamp.....: 0x491465ba (Fri Nov 07 15:58:50 2008) machinetype.......: 0x14c (I386) ( 5 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x200 0xaf0 0xaf0 6.15 9be292f76783378c6964059f88b7751e .rdata 0xcf0 0x14c 0x150 3.61 c1f3c5a90cbc33be6e07b90cb2551b63 .data 0xe40 0xe49 0xe50 4.90 1110a1c0a28879a0d401bf33cf98af35 INIT 0x1c90 0x252 0x260 4.89 91f9f0d342113a48f1ba0b2cb249dc0a .reloc 0x1ef0 0x2a8 0x2b0 6.43 7a854bcbd6854d61073d913c7c423d94 ( 2 imports ) > NDIS.SYS: NdisGetCurrentSystemTime, NdisRegisterProtocol > ntoskrnl.exe: RtlInitUnicodeString, IoCreateDevice, IoCreateSymbolicLink, IofCompleteRequest, KeServiceDescriptorTable, MmIsAddressValid, IoGetCurrentProcess, PsLookupProcessByProcessId, ObDereferenceObject, IoGetDeviceObjectPointer, IoBuildDeviceIoControlRequest, PsGetCurrentProcessId, IoCreateFile, IofCallDriver, ZwAllocateVirtualMemory, RtlCompareUnicodeString ( 0 exports ) |
ATTENTION:
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.
