Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File Keygen.exe received on 08.30.2008 10:56:40 (CET)
Current status: finished
Result: 19/36 (52.78%)
Antivirus Version Last Update Result
AhnLab-V3 2008.8.29.0 2008.08.29 Win-Trojan/Agent.147456.AK
AntiVir 7.8.1.23 2008.08.29 DR/Dldr.Banload.acs.17
Authentium 5.1.0.4 2008.08.30 -
Avast 4.8.1195.0 2008.08.29 Win32:Trojan-gen {Other}
AVG 8.0.0.161 2008.08.29 -
BitDefender 7.2 2008.08.30 Application.Binder.B
CAT-QuickHeal 9.50 2008.08.29 -
ClamAV 0.93.1 2008.08.30 Trojan.Dropper-3074
DrWeb 4.44.0.09170 2008.08.29 Trojan.MulDrop.12389
eSafe 7.0.17.0 2008.08.28 -
eTrust-Vet 31.6.6057 2008.08.29 -
Ewido 4.0 2008.08.29 -
F-Prot 4.4.4.56 2008.08.29 -
F-Secure 7.60.13501.0 2008.08.30 Trojan.Win32.Small.xta
Fortinet 3.14.0.0 2008.08.30 Misc/NsBinder
GData 19 2008.08.30 Trojan-Downloader.Win32.Banload.acs
Ikarus T3.1.1.34.0 2008.08.30 -
K7AntiVirus 7.10.432 2008.08.29 Trojan.Win32.Malware.New
Kaspersky 7.0.0.125 2008.08.30 Trojan-Downloader.Win32.Banload.acs
McAfee 5373 2008.08.29 -
Microsoft 1.3807 2008.08.25 -
NOD32v2 3401 2008.08.30 -
Norman 5.80.02 2008.08.29 Zlob.CHJR
Panda 9.0.0.4 2008.08.29 -
PCTools 4.4.2.0 2008.08.29 -
Prevx1 V2 2008.08.30 Cloaked Malware
Rising 20.59.51.00 2008.08.30 Backdoor.Win32.Bifrose.boa
Sophos 4.33.0 2008.08.30 -
Sunbelt 3.1.1592.1 2008.08.30 -
Symantec 10 2008.08.30 Trojan.Zlob
TheHacker 6.3.0.6.068 2008.08.30 Trojan/Downloader.Agent.fbx
TrendMicro 8.700.0.1004 2008.08.29 -
VBA32 3.12.8.4 2008.08.29 Trojan.MulDrop.12389
ViRobot 2008.8.29.1355 2008.08.29 Trojan.Win32.Buzus.347115
VirusBuster 4.5.11.0 2008.08.29 -
Webwasher-Gateway 6.6.2 2008.08.29 Trojan.Dropper.Dldr.Banload.acs.17
Additional information
File size: 776508 bytes
MD5...: fde90c525b983a22a25e453bf4d1c09d
SHA1..: c1e2b9f606dd3c2a54a4284277f517659cbd2abd
SHA256: b0ba0931485d4d56b448dcf5856081cbfba8e9e53963133413fa5569bc49b813
SHA512: ec06de6bcd01183162c26a36ced149c8900c83745f71983fb5039f1f553345d5
9d9ab1a48bad8c307fbaaf3fdb35470f4638c0afd1e958087fd447bf900158e3
PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x40ab5c
timedatestamp.....: 0x46c4edfc (Fri Aug 17 00:38:20 2007)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x1643e 0x16600 6.64 285a5bd5e65be6e3b7caa8b7f7b57f2f
.rdata 0x18000 0x46c0 0x4800 5.53 ed3a970562b0da43fe8fd6cc2f15458c
.data 0x1d000 0x304c 0x1400 2.25 8d665ac86cfbeb7f6791da4266a51645
.rsrc 0x21000 0xf1c 0x1000 5.42 fc584b78b8256e59d94eff239a1e9c1e

( 6 imports )
> urlmon.dll: URLDownloadToFileA
> COMCTL32.dll: -
> KERNEL32.dll: GetExitCodeProcess, CreateProcessA, lstrcatA, GetEnvironmentVariableA, GetShortPathNameA, CreateDirectoryA, GetStartupInfoA, FindFirstFileA, GetLongPathNameA, RemoveDirectoryA, CopyFileA, SetFileAttributesA, FindClose, MoveFileA, GetModuleFileNameA, FindNextFileA, GetModuleHandleA, GetTempPathA, DeleteFileA, lstrcpyA, GetCommandLineA, SetEndOfFile, FlushFileBuffers, GetFileAttributesA, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, HeapReAlloc, VirtualAlloc, WaitForSingleObject, GetCurrentProcess, MoveFileExA, CloseHandle, GetLastError, ReadFile, CreateFileA, WriteConsoleW, Sleep, CompareStringW, CompareStringA, CreateThread, VirtualFree, HeapCreate, HeapDestroy, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, ExitThread, ResumeThread, SetEnvironmentVariableA, GetTimeFormatA, GetDateFormatA, GetSystemTimeAsFileTime, GetProcAddress, ExitProcess, FileTimeToSystemTime, FileTimeToLocalFileTime, GetDriveTypeA, HeapFree, HeapAlloc, GetVersionExA, GetProcessHeap, RaiseException, RtlUnwind, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, WideCharToMultiByte, GetTimeZoneInformation, HeapSize, EnterCriticalSection, LeaveCriticalSection, GetCPInfo, GetACP, GetOEMCP, LCMapStringA, MultiByteToWideChar, LCMapStringW, WriteFile, GetConsoleCP, GetConsoleMode, SetHandleCount, GetStdHandle, GetFileType, DeleteCriticalSection, SetFilePointer, LoadLibraryA, InitializeCriticalSection, GetFullPathNameA, GetCurrentDirectoryA
> USER32.dll: DestroyWindow, GetMessageA, SetTimer, CreateDialogParamA, KillTimer, ExitWindowsEx, SendMessageA, TranslateMessage, GetForegroundWindow, GetWindowTextA, MessageBoxA, BringWindowToTop, GetDlgItem, EndDialog, BlockInput, ShowWindow, PostMessageA, DispatchMessageA, SetWindowTextA, UpdateWindow, FindWindowA, GetDlgItemTextA, DialogBoxParamA
> ADVAPI32.dll: AdjustTokenPrivileges, GetUserNameA, RegDeleteValueA, RegOpenKeyExA, RegCreateKeyExA, LookupPrivilegeValueA, RegDeleteKeyA, RegQueryValueExA, RegSetValueExA, OpenProcessToken, RegCloseKey
> SHELL32.dll: SHGetFolderPathA, SHCreateDirectoryExA, ShellExecuteA

( 0 exports )
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=5A0A68F53CD5BF49D9D80B3CD4B022007CBF5B5A

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file