Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File Pareto_AV.exe received on 2009.06.26 20:06:58 (UTC)
Current status: finished
Result: 7/41 (17.07%)
Antivirus Version Last Update Result
a-squared 4.5.0.18 2009.06.26 -
AhnLab-V3 5.0.0.2 2009.06.26 -
AntiVir 7.9.0.199 2009.06.26 TR/FraudPack.oyq
Antiy-AVL 2.0.3.1 2009.06.26 Trojan/Win32.FraudPack.gen
Authentium 5.1.2.4 2009.06.26 -
Avast 4.8.1335.0 2009.06.26 -
AVG 8.5.0.339 2009.06.26 -
BitDefender 7.2 2009.06.26 -
CAT-QuickHeal 10.00 2009.06.26 Trojan.FraudPack.oyq
ClamAV 0.94.1 2009.06.26 -
Comodo 1441 2009.06.26 -
DrWeb 5.0.0.12182 2009.06.26 -
eSafe 7.0.17.0 2009.06.25 -
eTrust-Vet 31.6.6582 2009.06.26 -
F-Prot 4.4.4.56 2009.06.26 -
F-Secure 8.0.14470.0 2009.06.26 Trojan.Win32.FraudPack.oyq
Fortinet 3.117.0.0 2009.06.26 W32/FraudPack.OYQ!tr
GData 19 2009.06.26 -
Ikarus T3.1.1.64.0 2009.06.26 -
Jiangmin 11.0.706 2009.06.26 -
K7AntiVirus 7.10.768 2009.06.19 -
Kaspersky 7.0.0.125 2009.06.26 Trojan.Win32.FraudPack.oyq
McAfee 5658 2009.06.26 -
McAfee+Artemis 5658 2009.06.26 -
McAfee-GW-Edition 6.7.6 2009.06.26 Trojan.FraudPack.oyq
Microsoft 1.4803 2009.06.26 -
NOD32 4193 2009.06.26 -
Norman 6.01.09 2009.06.26 -
nProtect 2009.1.8.0 2009.06.26 -
Panda 10.0.0.16 2009.06.26 -
PCTools 4.4.2.0 2009.06.26 -
Prevx 3.0 2009.06.26 -
Rising 21.35.44.00 2009.06.26 -
Sophos 4.43.0 2009.06.26 -
Sunbelt 3.2.1858.2 2009.06.25 -
Symantec 1.4.4.12 2009.06.26 -
TheHacker 6.3.4.3.355 2009.06.26 -
TrendMicro 8.950.0.1094 2009.06.26 -
VBA32 3.12.10.7 2009.06.26 -
ViRobot 2009.6.26.1806 2009.06.26 -
VirusBuster 4.6.5.0 2009.06.26 -
Additional information
File size: 2659664 bytes
MD5   : c6ffa9508f3af7842bf43bb392a1b900
SHA1  : 4c75d2eac8f2d0eac74086d163440f8d0be5881a
SHA256: affded445cf330a224ed8cf3d9bc14dc480b54fdb24fec3789fbe83ae3a907a1
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0xAD681
timedatestamp.....: 0x499C8E1C (Wed Feb 18 23:39:24 2009)
machinetype.......: 0x14C (Intel I386)

( 6 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xD7FA9 0xD8000 6.63 872ecfd13d14c3e435603b97756b8174
.textidx 0xD9000 0x9FB60 0xA0000 6.19 a2d6f07f12e95db41b47f8b78a010748
.rdata 0x179000 0x33B1A 0x34000 5.12 f30d56b41e5339e9a828037f3ba3a3d9
.data 0x1AD000 0x1FA68 0x12000 5.43 e778b29eae7421099f3a0afc958ab19a
_TEXT_HA 0x1CD000 0x108CA 0x11000 6.50 c0af959f532f779b47e3237e4c957233
.rsrc 0x1DE000 0xB71C0 0xB8000 5.18 f05c108266f01bc7cac229cb5f022153

( 18 imports )

> advapi32.dll: RegSetValueExA, OpenProcessToken, GetTokenInformation, RegQueryValueW, RegEnumKeyW, RegOpenKeyW, RegDeleteKeyW, RegDeleteValueW, RegCreateKeyExW, RegEnumKeyExA, GetUserNameA, RegSetValueExW, ConvertSidToStringSidW, RegCreateKeyExA, RegEnumValueA, RegDeleteValueA, RegOpenKeyExA, RegQueryValueExA, AdjustTokenPrivileges, LookupPrivilegeValueW, GetUserNameW, LookupAccountSidW, OpenThreadToken, RegCloseKey, RegQueryValueExW, RegOpenKeyExW
> comctl32.dll: ImageList_GetIcon, ImageList_DrawEx, -, ImageList_GetIconSize
> comdlg32.dll: GetOpenFileNameA, GetFileTitleW
> gdi32.dll: CreateBitmap, CreatePatternBrush, LineTo, DeleteDC, SetMapMode, ScaleWindowExtEx, SetWindowExtEx, SetWindowOrgEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, GetPixel, GetDeviceCaps, BitBlt, ExtTextOutW, DPtoLP, TextOutW, GetViewportExtEx, RectVisible, PtVisible, GetWindowExtEx, GetMapMode, DeleteObject, CreateSolidBrush, CreateCompatibleBitmap, LPtoDP, Escape, CreateCompatibleDC, SetBkMode, RestoreDC, SaveDC, SetBkColor, SetTextColor, GetClipBox, GetTextMetricsW, CreatePen, Rectangle, SelectObject, CombineRgn, CreateRectRgn, GetObjectW, GetTextExtentPoint32W, CreateFontIndirectW, CreateRoundRectRgn, GetStockObject, MoveToEx
> gdiplus.dll: GdipDisposeImage, GdipCloneImage, GdiplusShutdown, GdiplusStartup, GdipCreateImageAttributes, GdipDisposeImageAttributes, GdipSetImageAttributesColorMatrix, GdipDrawImageRectRect, GdipGetImageHeight, GdipGetImageWidth, GdipFillRectangle, GdipCreateLineBrushFromRect, GdipDrawPath, GdipDrawLines, GdipDrawLine, GdipGetSmoothingMode, GdipSetSmoothingMode, GdipCreateRegion, GdipDeleteRegion, GdipDeleteGraphics, GdipGetClip, GdipSetClipRegion, GdipCreateLineBrushFromRectI, GdipFillRectangleI, GdipSetTextRenderingHint, GdipMeasureString, GdipDrawCachedBitmap, GdipCreateCachedBitmap, GdipDeleteCachedBitmap, GdipDeleteFont, GdipCreateFontFromDC, GdipCreateFontFromLogfontW, GdipGetImageGraphicsContext, GdipDeleteFontFamily, GdipCreateBitmapFromScan0, GdipGetFamily, GdipDrawImageRectI, GdipCreateFont, GdipGetFontUnit, GdipGetFontSize, GdipGetFontStyle, GdipCreateFromHDC, GdipCreateBitmapFromFile, GdipAddPathLineI, GdipAddPathArcI, GdipClonePath, GdipSetClipPath, GdipSetClipRectI, GdipDrawRectangleI, GdipFillEllipse, GdipSetInterpolationMode, GdipReleaseDC, GdipDrawImageI, GdipGetDC, GdipCreateRegionRectI, GdipSetClipRect, GdipResetClip, GdipLoadImageFromFile, GdipCreatePen2, GdipGetPathWorldBounds, GdipAddPathLine, GdipCreateFromHWND, GdipGetCellDescent, GdipGetEmHeight, GdipDrawImageRectRectI, GdipGetPathWorldBoundsI, GdipCreateFontFamilyFromName, GdipCloneFont, GdipCombineRegionRect, GdipSetPathGradientCenterColor, GdipGetPathGradientPointCount, GdipSetPathGradientSurroundColorsWithCount, GdipSetPathGradientFocusScales, GdipAddPathRectangleI, GdipCreatePathGradientFromPath, GdipCreateLineBrushFromRectWithAngle, GdipSetStringFormatFlags, GdipSetStringFormatHotkeyPrefix, GdipAddPathRectangle, GdipDrawEllipse, GdipDeletePen, GdipGraphicsClear, GdipCreatePen1, GdipDrawLineI, GdipDrawImageRect, GdipAlloc, GdipDeleteBrush, GdipGetFontHeight, GdipClosePathFigures, GdipAddPathArc, GdipDeletePath, GdipCreatePath, GdipCreateSolidFill, GdipDrawString, GdipSetStringFormatTrimming, GdipSetStringFormatLineAlign, GdipSetStringFormatAlign, GdipDeleteStringFormat, GdipResetPath, GdipCreateStringFormat, GdipFillPath, GdipStartPathFigure, GdipFree, GdipCloneBrush, GdipClosePathFigure, GdipCreateRegionPath
> kernel32.dll: FlushFileBuffers, LockFile, UnlockFile, SetEndOfFile, DuplicateHandle, GetFullPathNameW, GetFileTime, TlsGetValue, GlobalReAlloc, GlobalHandle, TlsAlloc, TlsSetValue, LocalReAlloc, TlsFree, InterlockedIncrement, GlobalFlags, GetStartupInfoW, HeapReAlloc, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, ExitThread, RtlUnwind, ExitProcess, GetThreadLocale, MoveFileA, DeleteFileA, CreateProcessA, RaiseException, SetStdHandle, HeapSize, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, SetHandleCount, GetStartupInfoA, HeapDestroy, HeapCreate, QueryPerformanceCounter, GetCPInfo, GetOEMCP, IsValidCodePage, GetTimeZoneInformation, LCMapStringA, LCMapStringW, GetTimeFormatA, GetDateFormatA, GetConsoleCP, GetConsoleMode, GetStringTypeA, GetStringTypeW, SetEnvironmentVariableA, SetEnvironmentVariableW, GetFileAttributesA, CreatePipe, GetLocaleInfoA, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, GetFullPathNameA, GetCurrentDirectoryA, MoveFileW, lstrlenA, ResumeThread, ConvertDefaultLocale, EnumResourceLanguagesW, lstrcmpA, GetLocaleInfoW, CompareStringA, InterlockedExchange, GlobalGetAtomNameW, FreeResource, GlobalAddAtomW, GlobalFindAtomW, GlobalDeleteAtom, CompareStringW, lstrcmpW, GetPrivateProfileStringW, WritePrivateProfileStringW, GetPrivateProfileIntW, InterlockedDecrement, GetACP, GetUserDefaultLangID, SetFilePointer, DeviceIoControl, CreateFileA, GetPrivateProfileIntA, GetPrivateProfileStringA, GetProcessTimes, VirtualFree, VirtualAlloc, GetDriveTypeA, GetVolumeInformationA, GetEnvironmentVariableW, GetEnvironmentVariableA, FindNextFileA, FindFirstFileA, CreateMutexA, ReleaseMutex, SetHandleInformation, SetErrorMode, GetModuleHandleA, CreateEventA, ResetEvent, WaitForSingleObject, GetTickCount, GetVersion, GetVersionExA, GetWindowsDirectoryA, LoadLibraryA, ExpandEnvironmentStringsA, GetFileSize, GetVolumeInformationW, FindClose, FindNextFileW, FindFirstFileW, GetCurrentDirectoryW, GetVersionExW, Sleep, lstrcatW, lstrcpyW, LeaveCriticalSection, SetEvent, ExpandEnvironmentStringsW, EnterCriticalSection, DeleteCriticalSection, CreateEventW, OpenEventW, InitializeCriticalSection, GetFileAttributesW, GetDriveTypeW, GetLogicalDrives, HeapFree, GetProcessHeap, HeapAlloc, GetCurrentThread, GetLocalTime, GetModuleHandleW, SetLastError, CompareFileTime, FileTimeToLocalFileTime, GlobalUnlock, GlobalLock, MulDiv, FreeLibrary, GetWindowsDirectoryW, FindResourceExW, GetCommandLineW, GetLastError, GetCurrentProcess, GetCurrentProcessId, SetCurrentDirectoryW, GetTimeFormatW, GetDateFormatW, SystemTimeToTzSpecificLocalTime, FileTimeToSystemTime, LocalAlloc, lstrlenW, FormatMessageW, CreateMutexW, LocalFree, GlobalFree, GetCurrentThreadId, GetSystemTime, GlobalAlloc, OutputDebugStringW, WideCharToMultiByte, DeleteFileW, CopyFileW, WriteFile, CreateThread, lstrcmpiW, GetTempPathW, GetProcAddress, LoadLibraryW, CloseHandle, FindResourceW, LoadResource, LockResource, SizeofResource, CreateDirectoryW, CreateFileW, ReadFile, MultiByteToWideChar, GetModuleFileNameW, GetFileType
> netapi32.dll: Netbios
> ole32.dll: CoUninitialize, CoInitialize, CoCreateInstance, CoTaskMemFree, CoGetClassObject
> oleaut32.dll: -, -, -, -, -, -, -, -
> plcommondlg.dll: _PLMsgBox@@YAHPAUHWND__@@PAUHINSTANCE__@@III@Z, _PLMsgBox@@YAHPAUHWND__@@PB_W1I@Z
> sensapi.dll: IsNetworkAlive
> shell32.dll: SHGetFolderPathW, SHCreateDirectoryExW, ShellExecuteW, ExtractIconExW, SHGetFileInfoW, Shell_NotifyIconW, SHAppBarMessage, DragFinish, DragQueryFileW, SHGetSpecialFolderPathW
> shlwapi.dll: PathFindExtensionW, PathStripToRootW, PathIsUNCW, PathIsDirectoryW, PathRemoveFileSpecW, PathFindFileNameW, PathFileExistsW
> user32.dll: RegisterClipboardFormatW, IsDialogMessageW, IsDlgButtonChecked, CheckDlgButton, SetMenuItemBitmaps, GetMenuCheckMarkDimensions, ModifyMenuW, EnableMenuItem, CheckMenuItem, CreateDialogIndirectParamW, IsWindowEnabled, GetNextDlgTabItem, RegisterWindowMessageW, SendDlgItemMessageW, SendDlgItemMessageA, WinHelpW, GetCapture, SetWindowsHookExW, CallNextHookEx, GetClassLongW, GetClassNameW, SetPropW, GetPropW, RemovePropW, GetWindowTextLengthW, GetWindowTextW, GetLastActivePopup, SetActiveWindow, DispatchMessageW, BeginDeferWindowPos, EndDeferWindowPos, DestroyWindow, GetMessageTime, MapWindowPoints, ScrollWindow, GetKeyState, SetScrollPos, GetMenu, MessageBoxW, CreateWindowExW, GetClassInfoExW, GetClassInfoW, RegisterClassW, AdjustWindowRectEx, DeferWindowPos, GetScrollInfo, SetScrollInfo, SetWindowPlacement, DefWindowProcW, CallWindowProcW, IntersectRect, SystemParametersInfoA, GetWindowPlacement, GetMenuState, GetMenuItemID, GetMenuItemCount, UnhookWindowsHookEx, DialogBoxIndirectParamA, CreateDialogIndirectParamA, wsprintfA, SetWindowTextA, SetFocus, GetActiveWindow, MessageBoxA, EndDialog, GetDlgItemTextA, GetDlgItemTextW, SetDlgItemTextA, MessageBeep, GetWindowLongA, SendMessageA, WindowFromPoint, GetNextDlgGroupItem, ShowWindow, ClientToScreen, EqualRect, PeekMessageW, IsRectEmpty, TrackPopupMenu, SetRectEmpty, CopyRect, DrawFrameControl, DrawFocusRect, GetWindowLongW, FrameRect, InflateRect, ExitWindowsEx, DrawIcon, GetScrollPos, DestroyIcon, LoadMenuW, RedrawWindow, SetParent, GetFocus, LockWindowUpdate, ShowScrollBar, CreateMenu, GetSubMenu, SetMenuDefaultItem, AppendMenuW, LoadBitmapW, SetWindowRgn, GetDesktopWindow, FillRect, GetCursorPos, EndPaint, BeginPaint, SetRect, ReleaseCapture, SetCapture, OpenClipboard, IsClipboardFormatAvailable, CloseClipboard, GetClipboardData, SetCursor, PtInRect, ScreenToClient, GetMessagePos, GetSysColor, SystemParametersInfoW, SetWindowLongW, CopyIcon, GetParent, FindWindowW, PostQuitMessage, LoadStringW, wsprintfW, UpdateWindow, GetForegroundWindow, GetWindowThreadProcessId, AttachThreadInput, GetSysColorBrush, UnregisterClassW, CharUpperW, GetMenuItemInfoW, ShowOwnedPopups, GetMessageW, TranslateMessage, GetSystemMetrics, GetMonitorInfoW, MonitorFromWindow, LoadCursorW, LoadIconW, DestroyMenu, ValidateRect, UnpackDDElParam, ReuseDDElParam, LoadAcceleratorsW, InsertMenuItemW, IsWindowVisible, IsIconic, GetClientRect, SetForegroundWindow, GrayStringW, InvalidateRect, ReleaseDC, DrawTextExW, DrawTextW, GetDC, IsWindow, TabbedTextOutW, GetWindowDC, GetWindowRect, OffsetRect, SetTimer, SendMessageW, SetWindowPos, PostMessageW, EnableWindow, KillTimer, GetTopWindow, GetDlgCtrlID, MoveWindow, GetWindow, CreatePopupMenu, BringWindowToTop, SetMenu, TranslateAcceleratorW, GetDlgItem, SetWindowTextW, IsZoomed, UnregisterClassA
> version.dll: GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
> wininet.dll: InternetWriteFile, InternetSetFilePointer, InternetSetStatusCallbackW, InternetGetLastResponseInfoW, InternetQueryDataAvailable, HttpQueryInfoW, HttpSendRequestW, HttpAddRequestHeadersW, HttpOpenRequestW, InternetConnectW, InternetOpenW, InternetReadFile, InternetCloseHandle
> winspool.drv: ClosePrinter, DocumentPropertiesW, OpenPrinterW
> ws2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -

( 0 exports )
TrID  : File type identification
Win32 Executable MS Visual C++ (generic) (75.0%)
Win32 Executable Generic (16.9%)
Generic Win/DOS Executable (3.9%)
DOS Executable Generic (3.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
ssdeep: -
PEiD  : -
RDS   : NSRL Reference Data Set
-

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file