Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File fireworks.exe received on 2008.07.03 23:06:37 (UTC)
Current status: finished
Result: 16/33 (48.48%)
Antivirus Version Last Update Result
AhnLab-V3 2008.7.4.0 2008.07.03 -
AntiVir 7.8.0.64 2008.07.03 WORM/Zhelatin.Gen
Authentium 5.1.0.4 2008.07.03 -
Avast 4.8.1195.0 2008.07.03 -
AVG 7.5.0.516 2008.07.03 I-Worm/Nuwar.U
BitDefender 7.2 2008.07.03 Trojan.Peed.JLV
CAT-QuickHeal 9.50 2008.07.03 Win32.Trojan-Downloader.Cntr.ca.3
ClamAV 0.93.1 2008.07.03 -
DrWeb 4.44.0.09170 2008.07.03 Trojan.Packed.555
eSafe 7.0.17.0 2008.07.03 Suspicious File
eTrust-Vet 31.6.5922 2008.07.02 -
Ewido 4.0 2008.07.03 -
F-Prot 4.4.4.56 2008.07.03 -
F-Secure 7.60.13501.0 2008.07.03 -
Fortinet 3.14.0.0 2008.07.04 -
GData 2.0.7306.1023 2008.07.03 Email-Worm.Win32.Zhelatin.add
Ikarus T3.1.1.26.0 2008.07.03 -
Kaspersky 7.0.0.125 2008.07.04 Email-Worm.Win32.Zhelatin.add
McAfee 5331 2008.07.03 W32/Nuwar@MM
Microsoft 1.3704 2008.07.03 Backdoor:Win32/Nuwar.gen!D
NOD32v2 3239 2008.07.03 Win32/Nuwar.DC
Norman 5.80.02 2008.07.03 -
Panda 9.0.0.4 2008.07.03 Suspicious file
Prevx1 V2 2008.07.04 -
Rising 20.51.32.00 2008.07.03 -
Sophos 4.30.0 2008.07.04 Troj/Dorf-BP
Sunbelt 3.1.1509.1 2008.07.03 -
Symantec 10 2008.07.03 Trojan.Peacomm.D
TheHacker 6.2.96.370 2008.07.04 -
TrendMicro 8.700.0.1004 2008.07.03 -
VBA32 3.12.6.8 2008.07.03 -
VirusBuster 4.5.11.0 2008.07.03 Trojan.Tibs.AMZ
Webwasher-Gateway 6.6.2 2008.07.03 Worm.Zhelatin.Gen
Additional information
File size: 118785 bytes
MD5...: d7d350e34809adc4a56e592b58f9d4ad
SHA1..: 3db65ed3af3673080c3f1c6d20650351fac85d2e
SHA256: a04d62051ce0a82811c6d3c873a7a60ae34d25f9b82cddf10c2e42ac629d28af
SHA512: aa33a7380f1d86520facfe9596e47f81085bbaa6773910bf2717c1687d1a3b12
a05192926e0608289a66fb1a375fd3e5acf6f9d63d9c061f44de8021789e0fa5
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x41d09a
timedatestamp.....: 0x486cc2ef (Thu Jul 03 12:15:43 2008)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x1c240 0x1c400 8.00 be76e76a68f585b8798dc1d373ff846d
.rdata 0x1e000 0x197 0x200 3.87 dafa90c93f9ca2451f450faef2a0701a
.data 0x1f000 0x599 0x600 6.14 6874f5a603a6788f148f8c196bda1c3c

( 2 imports )
> KERNEL32.dll: GetModuleHandleW, VirtualAlloc, GetProcAddress
> PSAPI.DLL: EnumProcesses

( 2 exports )
reqwqs, sfdbee

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file