Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File mss8.exe received on 2009.07.15 07:53:54 (UTC)
Current status: finished
Result: 19/41 (46.34%)
Antivirus Version Last Update Result
a-squared 4.5.0.22 2009.07.15 Trojan.Win32.Malex!IK
AhnLab-V3 5.0.0.2 2009.07.15 -
AntiVir 7.9.0.215 2009.07.15 TR/Malex.121856E
Antiy-AVL 2.0.3.7 2009.07.15 Backdoor/Win32.Delf.gen
Authentium 5.1.2.4 2009.07.14 -
Avast 4.8.1335.0 2009.07.14 Win32:Rootkit-gen
AVG 8.5.0.387 2009.07.14 Downloader.Generic_r.ED
BitDefender 7.2 2009.07.15 -
CAT-QuickHeal 10.00 2009.07.15 -
ClamAV 0.94.1 2009.07.15 -
Comodo 1656 2009.07.15 UnclassifiedMalware
DrWeb 5.0.0.12182 2009.07.15 Trojan.Click.26455
eSafe 7.0.17.0 2009.07.14 Win32.TrojanMalex
eTrust-Vet 31.6.6615 2009.07.14 Win32/AdClicker.ADZ
F-Prot 4.4.4.56 2009.07.14 -
F-Secure 8.0.14470.0 2009.07.15 -
Fortinet 3.120.0.0 2009.07.15 -
GData 19 2009.07.15 Win32:Rootkit-gen
Ikarus T3.1.1.64.0 2009.07.15 Trojan.Win32.Malex
Jiangmin 11.0.706 2009.07.15 -
K7AntiVirus 7.10.792 2009.07.14 -
Kaspersky 7.0.0.125 2009.07.15 Trojan-Downloader.Win32.Agent.cike
McAfee 5676 2009.07.14 -
McAfee+Artemis 5676 2009.07.14 Artemis!8FDD64DD38A6
McAfee-GW-Edition 6.8.5 2009.07.14 Heuristic.LooksLike.Win32.Suspicious.B
Microsoft 1.4803 2009.07.15 Trojan:Win32/Malex.gen!E
NOD32 4244 2009.07.15 -
Norman 6.01.09 2009.07.14 -
nProtect 2009.1.8.0 2009.07.15 -
Panda 10.0.0.14 2009.07.14 Trj/CI.A
PCTools 4.4.2.0 2009.07.14 -
Prevx 3.0 2009.07.15 Medium Risk Malware
Rising 21.38.21.00 2009.07.15 -
Sophos 4.43.0 2009.07.15 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.07.15 -
Symantec 1.4.4.12 2009.07.15 Trojan Horse
TheHacker 6.3.4.3.367 2009.07.14 -
TrendMicro 8.950.0.1094 2009.07.15 -
VBA32 3.12.10.8 2009.07.15 -
ViRobot 2009.7.15.1836 2009.07.15 -
VirusBuster 4.6.5.0 2009.07.14 -
Additional information
File size: 121856 bytes
MD5   : 8fdd64dd38a6dd3b5a39491cdc1c56c4
SHA1  : e605dc17aa1e802ba7e7abfde089f23c76b7e1d7
SHA256: 514a5b90e717557b021dc3db33db42306dc98d40244fc5d6ae8bbe35bf85d3f9
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x475F0
timedatestamp.....: 0x4A49B268 (Tue Jun 30 08:36:24 2009)
machinetype.......: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0x1000 0x2A000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0x2B000 0x1D000 0x1C800 7.92 93a0806aaafe623b4a21609ad2b7e763
.rsrc 0x48000 0x1000 0x1000 3.11 d692f22b2e19ab5f40769721b5249367

( 12 imports )

> advapi32.dll: RegCloseKey
> comctl32.dll: -
> comdlg32.dll: GetFileTitleA
> gdi32.dll: Escape
> kernel32.dll: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
> ole32.dll: CoTaskMemFree
> oleaut32.dll: -
> oledlg.dll: -
> shlwapi.dll: PathIsUNCA
> user32.dll: GetDC
> wininet.dll: InternetOpenA
> winspool.drv: OpenPrinterA

( 0 exports )
TrID  : File type identification
UPX compressed Win32 Executable (39.5%)
Win32 EXE Yoda's Crypter (34.3%)
Win32 Executable Generic (11.0%)
Win32 Dynamic Link Library (generic) (9.8%)
Generic Win/DOS Executable (2.5%)
ssdeep: 3072:3p4/d58A7JDdNrMuq5z60yts4twAwWknjCCfhJadtCb:QbdlMuqB60yts4Vkjd5JY
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=046EED7C0079D831DC2A010D8BFB2700743B8E57
PEiD  : UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser
packers (Kaspersky): PE_Patch.UPX, UPX
packers (F-Prot): UPX
packers (Authentium): UPX
RDS   : NSRL Reference Data Set
-

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file