Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File config.dll received on 2009.06.30 02:43:20 (UTC)
Current status: finished
Result: 27/41 (65.85%)
Antivirus Version Last Update Result
a-squared 4.5.0.18 2009.06.30 Trojan.Hijacker!IK
AhnLab-V3 5.0.0.2 2009.06.29 Win-Trojan/Rootkit.3584.C
AntiVir 7.9.0.199 2009.06.29 TR/Hijacker.Gen
Antiy-AVL 2.0.3.1 2009.06.30 -
Authentium 5.1.2.4 2009.06.29 -
Avast 4.8.1335.0 2009.06.29 Win32:Trojan-gen {Other}
AVG 8.5.0.339 2009.06.29 Generic13.ALRX
BitDefender 7.2 2009.06.30 Trojan.Generic.1819367
CAT-QuickHeal 10.00 2009.06.29 Trojan.Agent.ATV
ClamAV 0.94.1 2009.06.30 -
Comodo 1496 2009.06.30 UnclassifiedMalware
DrWeb 5.0.0.12182 2009.06.30 Trojan.NtRootKit.2892
eSafe 7.0.17.0 2009.06.29 -
eTrust-Vet 31.6.6589 2009.06.29 -
F-Prot 4.4.4.56 2009.06.29 -
F-Secure 8.0.14470.0 2009.06.30 Trojan.Win32.Agent.clrv
Fortinet 3.117.0.0 2009.06.29 PossibleThreat
GData 19 2009.06.30 Trojan.Generic.1819367
Ikarus T3.1.1.64.0 2009.06.30 Trojan.Hijacker
Jiangmin 11.0.706 2009.06.29 -
K7AntiVirus 7.10.768 2009.06.19 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2009.06.30 Trojan.Win32.Agent.clrv
McAfee 5661 2009.06.29 Generic.dx!dj
McAfee+Artemis 5661 2009.06.29 Generic.dx!dj
McAfee-GW-Edition 6.7.6 2009.06.29 Trojan.Hijacker.Gen
Microsoft 1.4803 2009.06.29 -
NOD32 4198 2009.06.30 Win32/Small.NFT
Norman 6.01.09 2009.06.29 W32/Malware.GMLG
nProtect 2009.1.8.0 2009.06.29 -
Panda 10.0.0.14 2009.06.29 Trj/Sinowal.WIX
PCTools 4.4.2.0 2009.06.28 -
Prevx 3.0 2009.06.30 High Risk Worm
Rising 21.36.04.00 2009.06.29 Trojan.Win32.Nodef.iss
Sophos 4.43.0 2009.06.30 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.06.29 -
Symantec 1.4.4.12 2009.06.30 Trojan Horse
TheHacker 6.3.4.3.356 2009.06.27 -
TrendMicro 8.950.0.1094 2009.06.29 -
VBA32 3.12.10.7 2009.06.30 -
ViRobot 2009.6.29.1810 2009.06.29 Trojan.Win32.RT-Agent.3584.D
VirusBuster 4.6.5.0 2009.06.29 Trojan.Agent.LPEH
Additional information
File size: 3584 bytes
MD5   : 6a6fa0d9a4519a21841b08cb1a699b1f
SHA1  : cf154c31fae3fd796bd93ca11ac66bc09c67b304
SHA256: a3db112e7939f0e7675daeeb5bd5bd5d09e348eb902b48620090e1fd98ea61bb
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x161D
timedatestamp.....: 0x49F2C3FF (Sat Apr 25 10:04:15 2009)
machinetype.......: 0x14C (Intel I386)

( 2 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x8A0 0xA00 5.35 98e0d5f2417593173f18d179523a3b25
.reloc 0x2000 0xB4 0x200 1.95 31a96f74b04fe642bd77eb50adddbde6

( 3 imports )

> advapi32.dll: LookupPrivilegeValueA, AdjustTokenPrivileges, OpenProcessToken
> kernel32.dll: GetProcessHeap, Sleep, GetLastError, lstrcmpiW, CreateMutexA, CloseHandle, CreateThread, HeapFree, lstrcpynW, GetProcAddress, VirtualAlloc, GetModuleHandleA, VirtualProtect, WriteProcessMemory, GetCurrentProcess, HeapAlloc, ReadProcessMemory
> user32.dll: SetWindowsHookExA, CallNextHookEx

( 0 exports )
TrID  : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
ThreatExpert: http://www.threatexpert.com/report.aspx?md5=6a6fa0d9a4519a21841b08cb1a699b1f
ssdeep: 48:6mSD6UbKkuPI9bbUMpI4ItcISpf3o6MEoo8hd+n2j:WuPI9nIUEo
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=0971698F00F177230E8D008FF7082800B79BCD14
PEiD  : -
RDS   : NSRL Reference Data Set
-

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file