Srpski | Македонски | العربية | Suomi | ihMdI | 
| עברית | 
| Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | 
| 
| Magyar | Deutsch | Česky | Polski | Español
| עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
|
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... |
File 1.txt received on 2008.06.11 07:22:00 (UTC)
Current status: finished
Current status: finished
Result: 20/32 (62.50%)
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| AhnLab-V3 | 2008.6.11.0 | 2008.06.10 | - |
| AntiVir | 7.8.0.55 | 2008.06.11 | TR/Gpcode.I |
| Authentium | 5.1.0.4 | 2008.06.11 | - |
| Avast | 4.8.1195.0 | 2008.06.11 | - |
| AVG | 7.5.0.516 | 2008.06.10 | Win32.Generic.JV |
| BitDefender | 7.2 | 2008.06.11 | Trojan.Gpcode.I |
| CAT-QuickHeal | 9.50 | 2008.06.10 | - |
| ClamAV | 0.92.1 | 2008.06.11 | - |
| DrWeb | 4.44.0.09170 | 2008.06.10 | Trojan.Encoder.18 |
| eSafe | 7.0.15.0 | 2008.06.10 | Virus.Win32.Gpcode.a |
| eTrust-Vet | 31.6.5864 | 2008.06.10 | Win32/GPcode.I |
| Ewido | 4.0 | 2008.06.10 | - |
| F-Prot | 4.4.4.56 | 2008.06.10 | - |
| F-Secure | 6.70.13260.0 | 2008.06.11 | W32/Malware |
| Fortinet | 3.14.0.0 | 2008.06.10 | - |
| GData | 2.0.7306.1023 | 2008.06.11 | Virus.Win32.Gpcode.ak |
| Ikarus | T3.1.1.26.0 | 2008.06.11 | Virus.Win32.Gpcode.ak |
| Kaspersky | 7.0.0.125 | 2008.06.11 | Virus.Win32.Gpcode.ak |
| McAfee | 5314 | 2008.06.10 | GPcoder.i |
| Microsoft | 1.3604 | 2008.06.11 | Trojan:Win32/Gpcode.G |
| NOD32v2 | 3175 | 2008.06.11 | Win32/Gpcode.AK |
| Norman | 5.80.02 | 2008.06.10 | W32/Malware |
| Panda | 9.0.0.4 | 2008.06.10 | Trj/PGPCoder.E |
| Prevx1 | V2 | 2008.06.11 | Cloaked Malware |
| Rising | 20.48.12.00 | 2008.06.10 | - |
| Sophos | 4.30.0 | 2008.06.11 | Troj/Gpcode-D |
| Sunbelt | 3.0.1145.1 | 2008.06.05 | - |
| Symantec | 10 | 2008.06.11 | Trojan.Gpcoder.F |
| TheHacker | 6.2.92.342 | 2008.06.11 | - |
| VBA32 | 3.12.6.7 | 2008.06.10 | - |
| VirusBuster | 4.3.26:9 | 2008.06.10 | Trojan.GPCode.J |
| Webwasher-Gateway | 6.6.2 | 2008.06.11 | Trojan.Gpcode.I |
| Additional information |
|---|
| File size: 8030 bytes |
| MD5...: 7cd8e2fc5fe2dc351f24417cc1d23afa |
| SHA1..: 1490ee2d05b8862d17bb87bc00f0f0cc21c5505f |
| SHA256: e1e8fe95693c9cffa68360a02a3a91402949035466e1b42b126e49390d5a7519 |
| SHA512: a2ad0e06d71fa0e22d1e6aa03756de7b5b115a5f7c8dde36585d30c54ea3734b c135196b98686b359a181902db2f7a561b14617b8d965c8c62f50c07571ac5c3 |
| PEiD..: - |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x401e7c timedatestamp.....: 0x2a425e19 (Fri Jun 19 22:22:17 1992) machinetype.......: 0x14c (I386) ( 5 sections ) name viradd virsiz rawdsiz ntrpy md5 CODE 0x1000 0x1000 0xf70 6.21 6c6345834090cfebae3283d5ede56c18 DATA 0x2000 0x1000 0x518 7.76 4fd9ea53f437d0c4f359ee11ebed2d83 BSS 0x3000 0x101000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .idata 0x104000 0x2000 0x2e0 4.50 a9f69d750bd18befff387f162565b9f9 .rsrc 0x106000 0x200 0x15e 0.00 80bda6f948a1289beefa36d2ba38194d ( 2 imports ) > advapi32.dll: CryptDestroyHash, CryptHashData, CryptCreateHash, CryptEncrypt, CryptDestroyKey, CryptExportKey, CryptImportKey, CryptDeriveKey, CryptGenKey, CryptReleaseContext, CryptAcquireContextA > kernel32.dll: OpenMutexA, CreateMutexA, SetErrorMode, GetProcAddress, LoadLibraryA, Sleep, GetDriveTypeA, GetWindowsDirectoryA, FindClose, FindNextFileA, FindFirstFileA, DeleteFileA, SetFileAttributesA, ReadFile, WriteFile, CreateFileA, CloseHandle, ExitProcess, GetModuleFileNameA, GetVersion ( 0 exports ) |
| Norman Sandbox: [ General information ] * **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**. * Attempts to run Visual Basic Script (VBS). * File length: 8030 bytes. [ Changes to filesystem ] * Creates file C:\sample.vbs. [ Process/window information ] * Creates a mutex _G_P_C_. * Attemps to NULL c:\sample.vbs NULL. |
| Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=D8BEF7D95EE9081D1F4500F8CCF86E003E7430DA |
ATTENTION:
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.
