Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File adobe_flash.exe received on 2008.08.08 07:51:07 (UTC)
Current status: finished
Result: 17/36 (47.22%)
Antivirus Version Last Update Result
AhnLab-V3 2008.8.8.0 2008.08.08 -
AntiVir 7.8.1.19 2008.08.08 TR/Crypt.XPACK.Gen
Authentium 5.1.0.4 2008.08.07 -
Avast 4.8.1195.0 2008.08.07 -
AVG 8.0.0.156 2008.08.08 I-Worm/Nuwar.V
BitDefender 7.2 2008.08.08 Trojan.Downloader.Exchanger.Gen.2
CAT-QuickHeal 9.50 2008.08.08 (Suspicious) - DNAScan
ClamAV 0.93.1 2008.08.08 -
DrWeb 4.44.0.09170 2008.08.08 Trojan.Packed.595
eSafe 7.0.17.0 2008.08.07 Suspicious File
eTrust-Vet 31.6.6018 2008.08.07 -
Ewido 4.0 2008.08.07 -
F-Prot 4.4.4.56 2008.08.07 -
F-Secure 7.60.13501.0 2008.08.08 -
Fortinet 3.14.0.0 2008.08.08 PossibleThreat
GData 2.0.7306.1023 2008.08.08 Trojan-Downloader.Win32.Exchanger.la
Ikarus T3.1.1.34.0 2008.08.08 Trojan-Downloader.Exchanger.Gen.2
K7AntiVirus 7.10.407 2008.08.07 -
Kaspersky 7.0.0.125 2008.08.08 Trojan-Downloader.Win32.Exchanger.la
McAfee 5356 2008.08.07 -
Microsoft 1.3807 2008.08.08 Trojan:Win32/Tibs.gen!K
NOD32v2 3338 2008.08.07 a variant of Win32/Agent.ETH
Norman 5.80.02 2008.08.06 -
Panda 9.0.0.4 2008.08.07 -
PCTools 4.4.2.0 2008.08.07 -
Prevx1 V2 2008.08.08 Malware Dropper
Rising 20.56.32.00 2008.08.07 -
Sophos 4.32.0 2008.08.08 Mal/EncPk-DA
Sunbelt 3.1.1537.1 2008.08.07 -
Symantec 10 2008.08.08 Downloader
TheHacker 6.2.96.394 2008.08.08 -
TrendMicro 8.700.0.1004 2008.08.08 -
VBA32 3.12.8.3 2008.08.07 suspected of MalwareScope.Worm.Nuwar-Glowa.1 (paranoid heuristics)
ViRobot 2008.8.7.1328 2008.08.07 -
VirusBuster 4.5.11.0 2008.08.07 -
Webwasher-Gateway 6.6.2 2008.08.08 Trojan.Crypt.XPACK.Gen
Additional information
File size: 78848 bytes
MD5...: b619ad8d6fd32ecf6c55a840eaa30f0a
SHA1..: 31a656f56869645c4b1c5a486dc6fdba50065167
SHA256: 1630cc4cfb15c76a38a7c1d7167387cad9ad4966d2d00419ba578b5e5ae127c1
SHA512: 62b995ee485382fda9203fc060f93741a0738a72fd34a2c8ed37dfb4754a32e1
fca90bc1c8968ed86dc919a5d7f8189b8804300c702e979aa68a7efb4c587d8f
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x403883
timedatestamp.....: 0x48907860 (Wed Jul 30 14:19:12 2008)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xdf06 0xc200 8.00 80a768e6f8525148147945eb30639dbb
.rdata 0xf000 0x3987 0x2200 7.98 7ac7c3230de4fe1cb3f88161117083dc
.data 0x13000 0x6000 0x4000 4.88 fd3330ded09f2f2e4179084e320cbe36

( 4 imports )
> MSVCRT.DLL: memcmp, strstr, memcpy
> USER32.DLL: GetActiveWindow, DrawIcon, DestroyCaret, FillRect, GetMonitorInfoW, GetShellWindow
> ADVAPI32.DLL: ReadEventLogW, RegFlushKey, DecryptFileW, ReportEventW, OpenThreadToken
> WININET.DLL: FreeUrlCacheSpaceA, GopherFindFirstFileA, GopherOpenFileW, FtpGetFileW, HttpQueryInfoA

( 0 exports )
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=0862A3F3000DA61A34EA01C018C515003C5B1293
ThreatExpert info: http://www.threatexpert.com/report.aspx?md5=b619ad8d6fd32ecf6c55a840eaa30f0a

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file