Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File 21703.exe received on 2009.07.15 04:47:52 (UTC)
Current status: finished
Result: 23/41 (56.10%)
Antivirus Version Last Update Result
a-squared 4.5.0.22 2009.07.15 Riskware.Porn-Dialer.Win32.Agent.bk!IK
AhnLab-V3 5.0.0.2 2009.07.14 Win-Trojan/Xema.variant
AntiVir 7.9.0.215 2009.07.14 TR/Wimpixo.50688A.3
Antiy-AVL 2.0.3.7 2009.07.15 Trojan/Win32.Obfuscated.gen
Authentium 5.1.2.4 2009.07.14 -
Avast 4.8.1335.0 2009.07.14 Win32:Trojan-gen {Other}
AVG 8.5.0.387 2009.07.14 Agent2.NJV
BitDefender 7.2 2009.07.15 -
CAT-QuickHeal 10.00 2009.07.14 -
ClamAV 0.94.1 2009.07.15 -
Comodo 1655 2009.07.15 -
DrWeb 5.0.0.12182 2009.07.14 Trojan.DownLoad.40348
eSafe 7.0.17.0 2009.07.14 Win32.TrojanWimpixo
eTrust-Vet 31.6.6615 2009.07.14 Win32/Wimpixo.A
F-Prot 4.4.4.56 2009.07.14 -
F-Secure 8.0.14470.0 2009.07.15 -
Fortinet 3.120.0.0 2009.07.15 PossibleThreat
GData 19 2009.07.15 Win32:Trojan-gen {Other}
Ikarus T3.1.1.64.0 2009.07.15 not-a-virus:Porn-Dialer.Win32.Agent.bk
Jiangmin 11.0.706 2009.07.14 -
K7AntiVirus 7.10.792 2009.07.14 -
Kaspersky 7.0.0.125 2009.07.15 -
McAfee 5676 2009.07.14 -
McAfee+Artemis 5676 2009.07.14 Artemis!68339E2D44CE
McAfee-GW-Edition 6.8.5 2009.07.14 Heuristic.LooksLike.Win32.Wimpixo.A
Microsoft 1.4803 2009.07.14 Trojan:Win32/Wimpixo.gen!A
NOD32 4244 2009.07.15 Win32/Agent.PUH
Norman 6.01.09 2009.07.14 -
nProtect 2009.1.8.0 2009.07.15 Trojan/W32.Agent.50688.CH
Panda 10.0.0.14 2009.07.14 Generic Trojan
PCTools 4.4.2.0 2009.07.14 -
Prevx 3.0 2009.07.15 Medium Risk Malware
Rising 21.38.14.00 2009.07.14 Dropper.Win32.Undef.zt
Sophos 4.43.0 2009.07.15 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.07.15 Trojan-Win32/Wimpixo.gen!A
Symantec 1.4.4.12 2009.07.15 -
TheHacker 6.3.4.3.367 2009.07.14 -
TrendMicro 8.950.0.1094 2009.07.15 PAK_Generic.001
VBA32 3.12.10.8 2009.07.15 -
ViRobot 2009.7.15.1836 2009.07.15 -
VirusBuster 4.6.5.0 2009.07.14 -
Additional information
File size: 50688 bytes
MD5   : 68339e2d44ce89116e4d3ab5ff54de10
SHA1  : cfe4966a18847aa802eceb1a32bcc560bd1be66f
SHA256: 86d1644b04b1e95339e79e18806680c6dca8e2505e9dea0db00d8e7f624fe6d4
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x14DD0
timedatestamp.....: 0x4A56BE2D (Fri Jul 10 06:06:05 2009)
machinetype.......: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0x1000 0x8000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0x9000 0xC000 0xC000 7.83 b4e006d77bf1635f6d2da8727d5b1800
.rsrc 0x15000 0x1000 0x200 2.79 5d06380e53d38090be0e24d1f2a657b7

( 4 imports )

> kernel32.dll: LoadLibraryA, GetProcAddress, VirtualProtect, ExitProcess
> mfc42.dll: -
> msvcrt.dll: exit
> user32.dll: wsprintfA

( 0 exports )
TrID  : File type identification
UPX compressed Win32 Executable (39.5%)
Win32 EXE Yoda's Crypter (34.3%)
Win32 Executable Generic (11.0%)
Win32 Dynamic Link Library (generic) (9.8%)
Generic Win/DOS Executable (2.5%)
ThreatExpert: http://www.threatexpert.com/report.aspx?md5=68339e2d44ce89116e4d3ab5ff54de10
ssdeep: 1536:ogrV127gMiRE2Avez2p2rgpfdtmhOpFM1TjTTsQVLj:dS7gMiRh1aq0lt9FmTTj
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=025E1F26004ED9D3C688003CEF8A0D00E820A1F2
PEiD  : Crypto-Lock v2.02 (Eng) -> Ryan Thian
packers (Kaspersky): PE_Patch.UPX, UPX
packers (F-Prot): UPX
RDS   : NSRL Reference Data Set
-

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file