|
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... |
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| AhnLab-V3 | 2008.8.15.0 | 2008.08.14 | - |
| AntiVir | 7.8.1.19 | 2008.08.15 | TR/Dldr.Exchanger.NB |
| Authentium | 5.1.0.4 | 2008.08.14 | - |
| Avast | 4.8.1195.0 | 2008.08.14 | - |
| AVG | 8.0.0.161 | 2008.08.14 | I-Worm/Nuwar.W |
| BitDefender | 7.2 | 2008.08.15 | Trojan.Downloader.Exchanger.Gen.2 |
| CAT-QuickHeal | 9.50 | 2008.08.14 | TrojanDownloader.Exchanger.nb |
| ClamAV | 0.93.1 | 2008.08.15 | - |
| DrWeb | 4.44.0.09170 | 2008.08.15 | Trojan.DownLoad.3248 |
| eSafe | 7.0.17.0 | 2008.08.14 | Suspicious File |
| eTrust-Vet | 31.6.6033 | 2008.08.15 | Win32/Collet.DU |
| Ewido | 4.0 | 2008.08.14 | - |
| F-Prot | 4.4.4.56 | 2008.08.14 | - |
| F-Secure | 7.60.13501.0 | 2008.08.15 | Trojan-Downloader.Win32.Exchanger.nb |
| Fortinet | 3.14.0.0 | 2008.08.15 | W32/Agent.E!tr.dldr |
| GData | 2.0.7306.1023 | 2008.08.15 | Trojan-Downloader.Win32.Exchanger.nb |
| Ikarus | T3.1.1.34.0 | 2008.08.15 | Trojan-Downloader.Exchanger.Gen.2 |
| K7AntiVirus | 7.10.415 | 2008.08.14 | - |
| Kaspersky | 7.0.0.125 | 2008.08.15 | Trojan-Downloader.Win32.Exchanger.nb |
| McAfee | 5361 | 2008.08.14 | - |
| Microsoft | 1.3807 | 2008.08.15 | TrojanDropper:Win32/Nuwar.gen!ldt |
| NOD32v2 | 3357 | 2008.08.14 | a variant of Win32/Agent.ETH |
| Norman | 5.80.02 | 2008.08.14 | W32/DLoader.IXFE |
| Panda | 9.0.0.4 | 2008.08.14 | Trj/Exchanger.Z |
| PCTools | 4.4.2.0 | 2008.08.14 | - |
| Prevx1 | V2 | 2008.08.15 | Malware Dropper |
| Rising | 20.57.40.00 | 2008.08.15 | - |
| Sophos | 4.32.0 | 2008.08.15 | Mal/EncPk-DA |
| Sunbelt | 3.1.1546.1 | 2008.08.15 | Trojan-Downloader.Exchanger.Gen.1 |
| Symantec | 10 | 2008.08.15 | Trojan.Erotpics |
| TheHacker | 6.3.0.3.046 | 2008.08.13 | - |
| TrendMicro | 8.700.0.1004 | 2008.08.15 | TROJ_TIBS.CSZ |
| VBA32 | 3.12.8.3 | 2008.08.14 | - |
| ViRobot | 2008.8.14.1337 | 2008.08.14 | Trojan.Win32.Downloader.74752.K |
| VirusBuster | 4.5.11.0 | 2008.08.14 | Trojan.DL.Exchanger.CP |
| Webwasher-Gateway | 6.6.2 | 2008.08.14 | Trojan.Dldr.Exchanger.NB |
| Additional information |
|---|
| File size: 74752 bytes |
| MD5...: 61229aa4f0bb47a80df0b1026cb30fe9 |
| SHA1..: 8a1d2cbef4354f27c7b44af1d63bfdcae3c1fa70 |
| SHA256: 2fb8a4ecb561475b52883b535ce9810e6021ebe666e16e89cbbc86018d153547 |
| SHA512: a80021344ef6550fce03af8972ab01308053db9433babdafef188cef5dc78b25 1e6dfee742e11bdea74608e8b3a5f9fb7660fc17a519cafd49c8d1e63aabe5ae |
| PEiD..: - |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x40286b timedatestamp.....: 0x48907860 (Wed Jul 30 14:19:12 2008) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0xdfef 0xc200 8.00 82bf0dca43b012fd131f543b8fd12c05 .rdata 0xf000 0x3bd5 0x2200 7.98 e909c0236927d668a6de21746539156d .data 0x13000 0x5000 0x3000 4.17 503c11fdf86a619caf9890fcc4f89556 ( 4 imports ) > MSVCRT.DLL: memcmp, iswcntrl, strcmp > USER32.DLL: GetScrollPos, LoadKeyboardLayoutW, GetForegroundWindow, GetMenuStringW, SetDoubleClickTime, SendInput > WININET.DLL: ShowCertificate, InternetDialW, InternetGetCookieW, InternetSetCookieW, UrlZonesDetach > ADVAPI32.DLL: LsaOpenSecret, RegUnLoadKeyW, UnlockServiceDatabase, RevertToSelf, LsaClose ( 0 exports ) |
| ThreatExpert info: http://www.threatexpert.com/report.aspx?md5=61229aa4f0bb47a80df0b1026cb30fe9 |
| Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=6A9838690011CDD124D601D9C2382400E7F758D3 |
ATTENTION:
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.