Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File a.exe received on 2009.07.09 04:57:22 (UTC)
Current status: finished
Result: 26/41 (63.41%)
Antivirus Version Last Update Result
a-squared 4.5.0.18 2009.07.09 Virus.Win32.Buzus!IK
AhnLab-V3 5.0.0.2 2009.07.08 -
AntiVir 7.9.0.204 2009.07.08 TR/Dldr.Delphi.Gen
Antiy-AVL 2.0.3.1 2009.07.09 Trojan/Win32.Lmir
Authentium 5.1.2.4 2009.07.08 W32/Banload.B.gen!Eldorado
Avast 4.8.1335.0 2009.07.08 Win32:Buzus-QO
AVG 8.5.0.386 2009.07.09 Generic11.MMY.dropper
BitDefender 7.2 2009.07.09 Dropped:Trojan.Agent.Delf.MA
CAT-QuickHeal 10.00 2009.07.09 -
ClamAV 0.94.1 2009.07.08 -
Comodo 1588 2009.07.09 -
DrWeb 5.0.0.12182 2009.07.09 DLOADER.Trojan
eSafe 7.0.17.0 2009.07.08 Suspicious File
eTrust-Vet 31.6.6604 2009.07.08 -
F-Prot 4.4.4.56 2009.07.08 W32/Banload.B.gen!Eldorado
F-Secure 8.0.14470.0 2009.07.09 -
Fortinet 3.117.0.0 2009.07.03 -
GData 19 2009.07.09 Dropped:Trojan.Agent.Delf.MA
Ikarus T3.1.1.64.0 2009.07.09 Virus.Win32.Buzus
Jiangmin 11.0.706 2009.07.08 -
K7AntiVirus 7.10.787 2009.07.08 -
Kaspersky 7.0.0.125 2009.07.09 Trojan-GameThief.Win32.Lmir.cha
McAfee 5670 2009.07.08 -
McAfee+Artemis 5670 2009.07.08 Artemis!EB4209AC9062
McAfee-GW-Edition 6.8.5 2009.07.09 Heuristic.BehavesLike.Win32.Downloader.B
Microsoft 1.4803 2009.07.08 TrojanDownloader:Win32/Small.gen!B
NOD32 4226 2009.07.09 Win32/TrojanDownloader.Delf.OUV
Norman 6.01.09 2009.07.08 W32/FileInfector
nProtect 2009.1.8.0 2009.07.09 -
Panda 10.0.0.14 2009.07.08 Generic Trojan
PCTools 4.4.2.0 2009.07.08 -
Prevx 3.0 2009.07.09 Medium Risk Malware
Rising 21.37.24.00 2009.07.08 Trojan.DL.Win32.Mnless.ecy
Sophos 4.43.0 2009.07.09 Troj/PWS-ASW
Sunbelt 3.2.1858.2 2009.07.09 Bulk Trojan
Symantec 1.4.4.12 2009.07.09 Downloader
TheHacker 6.3.4.3.363 2009.07.08 -
TrendMicro 8.950.0.1094 2009.07.09 PAK_Generic.001
VBA32 3.12.10.7 2009.07.09 Malware-Dropper.Win32.Inject.gen
ViRobot 2009.7.9.1825 2009.07.09 -
VirusBuster 4.6.5.0 2009.07.08 -
Additional information
File size: 11776 bytes
MD5   : eb4209ac9062804a8c83831ffb0dc6c7
SHA1  : fd765ca128a0034e8d7582d81423b690b9a71693
SHA256: 4a21467c0c874598418151c215689e6dc8034d37fabd59607afe242e943249f9
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0xD460
timedatestamp.....: 0x2A425E19 (Sat Jun 20 00:22:17 1992)
machinetype.......: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0x1000 0xA000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0xB000 0x3000 0x2800 7.68 71607381eec1ff9a926d11183a0a3297
.rsrc 0xE000 0x1000 0x200 3.73 4b5ce3d6b768a8ba1a513b8fef58d328

( 4 imports )

> advapi32.dll: RegCloseKey
> kernel32.dll: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
> urlmon.dll: URLDownloadToFileA
> user32.dll: FindWindowA

( 0 exports )
TrID  : File type identification
UPX compressed Win32 Executable (39.5%)
Win32 EXE Yoda's Crypter (34.3%)
Win32 Executable Generic (11.0%)
Win32 Dynamic Link Library (generic) (9.8%)
Generic Win/DOS Executable (2.5%)
ThreatExpert: http://www.threatexpert.com/report.aspx?md5=eb4209ac9062804a8c83831ffb0dc6c7
ssdeep: 192:nmtSp++eNqvZHltVThrfPGZgpWJ7aLkE111MjW+ArspUnzVa0HJu7zxZkOj:JTeNqvVzV1rfUHaLx7+qspUvHJuJ2Oj
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=FAE9DD1F0091E44C2EDF0065F377C100C2D36D97
PEiD  : -
packers (Kaspersky): PE_Patch.UPX, UPX
packers (F-Prot): UPX
RDS   : NSRL Reference Data Set
-

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file