Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File Copy_of_infection received on 2008.08.29 23:40:30 (UTC)
Current status: finished
Result: 19/35 (54.29%)
Antivirus Version Last Update Result
AhnLab-V3 2008.8.29.0 2008.08.29 -
AntiVir 7.8.1.23 2008.08.29 TR/Dldr.Delphi.Gen
Authentium 5.1.0.4 2008.08.29 -
Avast 4.8.1195.0 2008.08.29 Win32:Trojan-gen {Other}
AVG 8.0.0.161 2008.08.29 Generic3.LWQ
BitDefender 7.2 2008.08.30 Adware.XpAntivirus.C
CAT-QuickHeal 9.50 2008.08.29 FraudTool.XPAntivirus.d (Not a Virus)
ClamAV 0.93.1 2008.08.29 -
DrWeb 4.44.0.09170 2008.08.29 Trojan.Fakealert.393
eSafe 7.0.17.0 2008.08.28 Suspicious File
eTrust-Vet 31.6.6057 2008.08.29 -
Ewido 4.0 2008.08.29 Not-A-Virus.PUP.XPAntivirus.d
F-Prot 4.4.4.56 2008.08.29 -
Fortinet 3.14.0.0 2008.08.29 W32/FAKEAV.A!tr
GData 19 2008.08.30 Win32:Trojan-gen
Ikarus T3.1.1.34.0 2008.08.30 not-a-virus:Downloader.Win32.XpAntivirus.a
K7AntiVirus 7.10.432 2008.08.29 -
Kaspersky 7.0.0.125 2008.08.30 -
McAfee 5373 2008.08.29 -
Microsoft 1.3807 2008.08.25 -
NOD32v2 3401 2008.08.30 a variant of Win32/Adware.XPAntivirus
Norman 5.80.02 2008.08.29 W32/DLoader.EIAX
Panda 9.0.0.4 2008.08.29 Adware/XPAntivirusPro
PCTools 4.4.2.0 2008.08.29 -
Prevx1 V2 2008.08.30 Suspicious
Rising 20.59.41.00 2008.08.29 -
Sophos 4.33.0 2008.08.29 Troj/FakeAV-A
Sunbelt 3.1.1592.1 2008.08.29 -
Symantec 10 2008.08.30 Downloader.MisleadApp
TheHacker 6.3.0.6.067 2008.08.29 -
TrendMicro 8.700.0.1004 2008.08.29 TROJ_FAKEAV.FI
VBA32 3.12.8.4 2008.08.29 -
ViRobot 2008.8.29.1355 2008.08.29 -
VirusBuster 4.5.11.0 2008.08.29 -
Webwasher-Gateway 6.6.2 2008.08.29 Trojan.Dldr.Delphi.Gen
Additional information
File size: 54272 bytes
MD5...: 3a8181353be69c8ff862ba589c551de5
SHA1..: 09a29627ac176df7c7d1727898cc8d3443941c21
SHA256: 9fa41231634f4b8c69ab900d30e44bfc248e492d210018ae3ce30cbb45ced10f
SHA512: 5a6ab71802fbce6664ab90239cb3ed195d293229bf65132035cc05f788bc3c8b
04d0bd01a8b855891574c61d3b37b8cd5f6663f459f1e6899328ab751aaf8a5e
PEiD..: -
TrID..: File type identification
UPX compressed Win32 Executable (38.5%)
Win32 EXE Yoda's Crypter (33.4%)
Win32 Executable Generic (10.7%)
Win32 Dynamic Link Library (generic) (9.5%)
Win16/32 Executable Delphi generic (2.6%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x4256d0
timedatestamp.....: 0x2a425e19 (Fri Jun 19 22:22:17 1992)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0x1000 0x18000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0x19000 0xd000 0xca00 7.90 d3bd9aa722079b0092e34eefe5104be8
.rsrc 0x26000 0x1000 0x600 3.60 b7696fd13d78e2c0f950e0dd19382c0f

( 10 imports )
> KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
> advapi32.dll: RegFlushKey
> comctl32.dll: ImageList_DrawEx
> gdi32.dll: SetROP2
> ole32.dll: CoInitialize
> oleaut32.dll: GetErrorInfo
> shell32.dll: ShellExecuteA
> user32.dll: GetDC
> version.dll: VerQueryValueA
> wininet.dll: InternetOpenA

( 0 exports )
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=944896B20051649AD483006792886A0097EF0B63
packers (Kaspersky): PE_Patch.UPX, UPX
packers (F-Prot): UPX

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file