Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File 3a46b298af9832cfc326186556fe8c818 received on 2009.07.07 05:42:40 (UTC)
Current status: finished
Result: 39/41 (95.12%)
Antivirus Version Last Update Result
a-squared 4.5.0.18 2009.07.07 Trojan-Dropper.Agent!IK
AhnLab-V3 5.0.0.2 2009.07.06 Dropper/Mudrop.31839
AntiVir 7.9.0.204 2009.07.06 TR/Crypt.FKM.Gen
Antiy-AVL 2.0.3.1 2009.07.06 -
Authentium 5.1.2.4 2009.07.07 W32/OnlineGames!Generic
Avast 4.8.1335.0 2009.07.06 Win32:Trojan-gen {Other}
AVG 8.5.0.386 2009.07.06 Startpage.EIT
BitDefender 7.2 2009.07.07 Trojan.Generic.2082171
CAT-QuickHeal 10.00 2009.07.07 Win32.Packed.Klone.ap03
ClamAV 0.94.1 2009.07.06 PUA.Packed.NPack-2
Comodo 1538 2009.07.02 TrojWare.Win32.TrojanDropper.Mudrop.aui
DrWeb 5.0.0.12182 2009.07.07 Trojan.MulDrop.32193
eSafe 7.0.17.0 2009.07.06 Win32.Dropper
eTrust-Vet 31.6.6598 2009.07.06 Win32/Zlob.KC
F-Prot 4.4.4.56 2009.07.06 W32/OnlineGames!Generic
F-Secure 8.0.14470.0 2009.07.07 Trojan-Dropper.Win32.Mudrop.aui
Fortinet 3.117.0.0 2009.07.03 W32/Mudrop.AUI!tr
GData 19 2009.07.07 Trojan.Generic.2082171
Ikarus T3.1.1.64.0 2009.07.07 Trojan-Dropper.Agent
Jiangmin 11.0.706 2009.07.06 TrojanDropper.Agent.aiw
K7AntiVirus 7.10.785 2009.07.06 Trojan-Dropper.Win32.Mudrop.aui
Kaspersky 7.0.0.125 2009.07.07 Trojan-Dropper.Win32.Mudrop.aui
McAfee 5668 2009.07.06 StartPage-HR
McAfee+Artemis 5668 2009.07.06 StartPage-HR
McAfee-GW-Edition 6.8.5 2009.07.06 Heuristic.LooksLike.Worm.Netsky.A
Microsoft 1.4803 2009.07.06 VirTool:Win32/Obfuscator.EH
NOD32 4221 2009.07.06 a variant of Win32/AutoRun.Agent.OS
Norman 6.01.09 2009.07.06 W32/Packed_Nspack.A
nProtect 2009.1.8.0 2009.07.07 Trojan-Dropper/W32.MultiDrop.31839
Panda 10.0.0.14 2009.07.06 Trj/Downloader.MDW
PCTools 4.4.2.0 2009.07.06 Packed/NSPack
Prevx 3.0 2009.07.07 -
Rising 21.37.10.00 2009.07.07 Trojan.Win32.KillAV.bkk
Sophos 4.43.0 2009.07.07 Mal/Packer
Sunbelt 3.2.1858.2 2009.07.07 Packer.NSAnti.Gen (v)
Symantec 1.4.4.12 2009.07.07 Trojan.Dropper
TheHacker 6.3.4.3.364 2009.07.06 W32/Behav-Heuristic-063
TrendMicro 8.950.0.1094 2009.07.07 PAK_Generic.005
VBA32 3.12.10.7 2009.07.07 Trojan-Dropper.Win32.Mudrop.aui
ViRobot 2009.7.7.1821 2009.07.07 Trojan.Win32.MulDrop.31605
VirusBuster 4.6.5.0 2009.07.06 Packed/NSPack
Additional information
File size: 31839 bytes
MD5   : 6cf94b87cbeabfa0cec421f3e4827823
SHA1  : 64b0cb8eb9f86b5e8ecb4e2bda3e2c2da19cd9ca
SHA256: 3a46b298af9832cfc326186556fe8c81813b555cb134f72c21cd7e080080fd1f
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x19598
timedatestamp.....: 0x4A48B6CB (Mon Jun 29 14:42:51 2009)
machinetype.......: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.nsp0 0x1000 0x18000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.nsp1 0x19000 0x8000 0x785F 7.92 6857acd39d07260ad22ff62bea82dcb9
.nsp2 0x21000 0x17A2 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e

( 2 imports )

> kernel32.dll: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
> msvcrt.dll: strcpy

( 0 exports )
TrID  : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
ThreatExpert: http://www.threatexpert.com/report.aspx?md5=6cf94b87cbeabfa0cec421f3e4827823
ssdeep: 768:Ylmu2k4i7SND/XjqM7lMYhNLjmAlZAUebdzpEzv:Ycu2k4RhvjnMYhNHmAl+Ujv
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=594C6A555FF697CB7CEC0040A9B6460007B5C737
PEiD  : NsPacK V3.7 -> LiuXingPing
packers (Kaspersky): NSPack
packers (F-Prot): embedded, NSPack, PE_Patch
packers (Authentium): NSPack, PE_Patch
RDS   : NSRL Reference Data Set
-

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file