|
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... |
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| AhnLab-V3 | 2008.4.12.0 | 2008.04.14 | - |
| AntiVir | 7.6.0.85 | 2008.04.14 | - |
| Authentium | 4.93.8 | 2008.04.13 | - |
| Avast | 4.8.1169.0 | 2008.04.14 | - |
| AVG | 7.5.0.516 | 2008.04.14 | - |
| BitDefender | 7.2 | 2008.04.14 | - |
| CAT-QuickHeal | 9.50 | 2008.04.12 | - |
| ClamAV | 0.92.1 | 2008.04.14 | - |
| DrWeb | 4.44.0.09170 | 2008.04.14 | - |
| eSafe | 7.0.15.0 | 2008.04.09 | - |
| eTrust-Vet | 31.3.5697 | 2008.04.14 | - |
| Ewido | 4.0 | 2008.04.14 | - |
| F-Prot | 4.4.2.54 | 2008.04.14 | - |
| F-Secure | 6.70.13260.0 | 2008.04.14 | - |
| FileAdvisor | 1 | 2008.04.14 | - |
| Fortinet | 3.14.0.0 | 2008.04.14 | - |
| Ikarus | T3.1.1.26 | 2008.04.14 | Trojan-Downloader.Win32.DlRhifrem.A |
| Kaspersky | 7.0.0.125 | 2008.04.14 | - |
| McAfee | 5272 | 2008.04.11 | - |
| Microsoft | 1.3408 | 2008.04.14 | TrojanDownloader:Win32/DlRhifrem.gen!A |
| NOD32v2 | 3024 | 2008.04.14 | - |
| Norman | 5.80.02 | 2008.04.14 | - |
| Panda | 9.0.0.4 | 2008.04.13 | - |
| Prevx1 | V2 | 2008.04.14 | - |
| Rising | 20.40.02.00 | 2008.04.14 | - |
| Sophos | 4.28.0 | 2008.04.14 | Mal/DllHook-A |
| Sunbelt | 3.0.1041.0 | 2008.04.12 | - |
| Symantec | 10 | 2008.04.14 | - |
| TheHacker | 6.2.92.276 | 2008.04.12 | - |
| VBA32 | 3.12.6.4 | 2008.04.14 | - |
| VirusBuster | 4.3.26:9 | 2008.04.13 | - |
| Webwasher-Gateway | 6.6.2 | 2008.04.14 | - |
| Additional information |
|---|
| File size: 51712 bytes |
| MD5...: e426673f15fbce18381449891b81e017 |
| SHA1..: 7369b63a9320be8a3cd22501b8325a955d484097 |
| SHA256: 3f6b1d587c8031bf442227ca0e684a8c34796f8574024e32c2801c1d39dbb87c |
| SHA512: c58bc4d8719cb916f7d6de12f432eb233ea10bd49e18fa6efb176b8f2974070b 1d21b095ebc0348b93b83ce8d01367516acc4bfad3958336dec01e76dce01e5b |
| PEiD..: - |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x610c1000 timedatestamp.....: 0x47fe0f2c (Thu Apr 10 12:59:24 2008) machinetype.......: 0x14c (I386) ( 7 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x7c0c 0x7e00 5.86 27706be78d32f10eff20be46a156d237 .data 0x9000 0x160 0x200 1.96 305985e106a5da8fdcc0be8b7adb8ca6 .rdata 0xa000 0x26e0 0x2800 5.57 6d7869cb363c7066fb795e5940a27129 .bss 0xd000 0x4610 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .edata 0x12000 0x1eb 0x200 4.72 a34aa928fef176ce4d9d0a0167b31c21 .idata 0x13000 0xcdc 0xe00 4.73 a4e7c9367f4518001054c4f54962cdcc .reloc 0x14000 0xc30 0xe00 6.04 ae34a914ee132aa6ef6822c425ae926e ( 10 imports ) > ADVAPI32.DLL: GetUserNameA, RegCloseKey, RegCreateKeyA, RegOpenKeyExA, RegQueryValueExA, RegSetValueExA > crypt32.dll: PFXExportCertStore, CertOpenStore > KERNEL32.dll: AddAtomA, CloseHandle, CreateFileA, CreateSemaphoreA, CreateThread, DeleteFileA, ExitThread, FindAtomA, FindFirstFileA, FindNextFileA, GetAtomNameA, GetComputerNameA, GetCurrentThreadId, GetFileSize, GetLastError, GetModuleFileNameA, GetModuleHandleA, GetSystemDirectoryA, GetTempPathA, GetTickCount, GlobalAlloc, GlobalFree, InterlockedDecrement, InterlockedIncrement, MultiByteToWideChar, ReadFile, ReleaseSemaphore, SetFileAttributesA, SetLastError, Sleep, TlsAlloc, TlsFree, TlsGetValue, TlsSetValue, WaitForSingleObject, WinExec, WriteFile > msvcrt.dll: _write > msvcrt.dll: __dllonexit, _assert, _errno, _iob, abort, atoi, fclose, fflush, fopen, fprintf, fputs, free, malloc, memcmp, memcpy, memset, rand, srand, strcat, strcmp, strcpy, strlen, strstr > OLEAUT32.DLL: SafeArrayAccessData, SafeArrayCreateVector, SafeArrayDestroy, SafeArrayUnaccessData, SysAllocStringByteLen, SysFreeString, SysStringLen, VariantClear > SHELL32.DLL: ShellExecuteA > USER32.dll: CallNextHookEx, FindWindowExA, GetKeyNameTextA, SetWindowsHookExA, UnhookWindowsHookEx, wsprintfA > USERENV.dll: GetProfilesDirectoryA > WININET.DLL: HttpAddRequestHeadersA, HttpEndRequestA, HttpOpenRequestA, HttpQueryInfoA, HttpSendRequestExA, InternetCloseHandle, InternetConnectA, InternetOpenA, InternetOpenUrlA, InternetReadFile, InternetSetOptionA, InternetWriteFile ( 9 exports ) AInit, DllCanUnloadNow, DllCanUnloadNow@0, DllGetClassObject, DllGetClassObject@12, DllRegisterServer, DllUnregisterServer, KeyboardProc, KeyboardProc@12 |
ATTENTION:
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.