|
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... |
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| AhnLab-V3 | 2008.8.8.0 | 2008.08.08 | - |
| AntiVir | 7.8.1.19 | 2008.08.08 | TR/Crypt.XPACK.Gen |
| Authentium | 5.1.0.4 | 2008.08.07 | - |
| Avast | 4.8.1195.0 | 2008.08.07 | - |
| AVG | 8.0.0.156 | 2008.08.08 | I-Worm/Nuwar.V |
| BitDefender | 7.2 | 2008.08.08 | Trojan.Downloader.Exchanger.Gen.2 |
| CAT-QuickHeal | 9.50 | 2008.08.08 | (Suspicious) - DNAScan |
| ClamAV | 0.93.1 | 2008.08.08 | - |
| DrWeb | 4.44.0.09170 | 2008.08.08 | Trojan.Packed.595 |
| eSafe | 7.0.17.0 | 2008.08.07 | Suspicious File |
| eTrust-Vet | 31.6.6018 | 2008.08.07 | - |
| Ewido | 4.0 | 2008.08.07 | - |
| F-Prot | 4.4.4.56 | 2008.08.07 | - |
| F-Secure | 7.60.13501.0 | 2008.08.08 | - |
| Fortinet | 3.14.0.0 | 2008.08.08 | PossibleThreat |
| GData | 2.0.7306.1023 | 2008.08.08 | Trojan-Downloader.Win32.Exchanger.la |
| Ikarus | T3.1.1.34.0 | 2008.08.08 | Trojan-Downloader.Exchanger.Gen.2 |
| K7AntiVirus | 7.10.407 | 2008.08.07 | - |
| Kaspersky | 7.0.0.125 | 2008.08.08 | Trojan-Downloader.Win32.Exchanger.la |
| McAfee | 5356 | 2008.08.07 | - |
| Microsoft | 1.3807 | 2008.08.08 | Trojan:Win32/Tibs.gen!K |
| NOD32v2 | 3338 | 2008.08.07 | a variant of Win32/Agent.ETH |
| Norman | 5.80.02 | 2008.08.06 | - |
| Panda | 9.0.0.4 | 2008.08.07 | - |
| PCTools | 4.4.2.0 | 2008.08.07 | - |
| Prevx1 | V2 | 2008.08.08 | Malware Dropper |
| Rising | 20.56.32.00 | 2008.08.07 | - |
| Sophos | 4.32.0 | 2008.08.08 | Mal/EncPk-DA |
| Sunbelt | 3.1.1537.1 | 2008.08.07 | - |
| Symantec | 10 | 2008.08.08 | Downloader |
| TheHacker | 6.2.96.394 | 2008.08.08 | - |
| TrendMicro | 8.700.0.1004 | 2008.08.08 | - |
| VBA32 | 3.12.8.3 | 2008.08.07 | suspected of MalwareScope.Worm.Nuwar-Glowa.1 (paranoid heuristics) |
| ViRobot | 2008.8.7.1328 | 2008.08.07 | - |
| VirusBuster | 4.5.11.0 | 2008.08.07 | - |
| Webwasher-Gateway | 6.6.2 | 2008.08.08 | Trojan.Crypt.XPACK.Gen |
| Additional information |
|---|
| File size: 78848 bytes |
| MD5...: b619ad8d6fd32ecf6c55a840eaa30f0a |
| SHA1..: 31a656f56869645c4b1c5a486dc6fdba50065167 |
| SHA256: 1630cc4cfb15c76a38a7c1d7167387cad9ad4966d2d00419ba578b5e5ae127c1 |
| SHA512: 62b995ee485382fda9203fc060f93741a0738a72fd34a2c8ed37dfb4754a32e1 fca90bc1c8968ed86dc919a5d7f8189b8804300c702e979aa68a7efb4c587d8f |
| PEiD..: - |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x403883 timedatestamp.....: 0x48907860 (Wed Jul 30 14:19:12 2008) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0xdf06 0xc200 8.00 80a768e6f8525148147945eb30639dbb .rdata 0xf000 0x3987 0x2200 7.98 7ac7c3230de4fe1cb3f88161117083dc .data 0x13000 0x6000 0x4000 4.88 fd3330ded09f2f2e4179084e320cbe36 ( 4 imports ) > MSVCRT.DLL: memcmp, strstr, memcpy > USER32.DLL: GetActiveWindow, DrawIcon, DestroyCaret, FillRect, GetMonitorInfoW, GetShellWindow > ADVAPI32.DLL: ReadEventLogW, RegFlushKey, DecryptFileW, ReportEventW, OpenThreadToken > WININET.DLL: FreeUrlCacheSpaceA, GopherFindFirstFileA, GopherOpenFileW, FtpGetFileW, HttpQueryInfoA ( 0 exports ) |
| Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=0862A3F3000DA61A34EA01C018C515003C5B1293 |
| ThreatExpert info: http://www.threatexpert.com/report.aspx?md5=b619ad8d6fd32ecf6c55a840eaa30f0a |
ATTENTION:
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.