Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File koob_novemeber.exe received on 2009.11.11 12:52:56 (UTC)
Current status: finished
Result: 18/41 (43.90%)
Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.11.11 -
AhnLab-V3 5.0.0.2 2009.11.11 -
AntiVir 7.9.1.61 2009.11.11 Worm/Koobface.cju
Antiy-AVL 2.0.3.7 2009.11.11 -
Authentium 5.2.0.5 2009.11.11 W32/Koobface.G.gen!Eldorado
Avast 4.8.1351.0 2009.11.11 -
AVG 8.5.0.423 2009.11.11 SHeur2.BQTC
BitDefender 7.2 2009.11.11 Trojan.Packed.Hiloti.Gen.2
CAT-QuickHeal 10.00 2009.11.11 (Suspicious) - DNAScan
ClamAV 0.94.1 2009.11.11 -
Comodo 2917 2009.11.11 -
DrWeb 5.0.0.12182 2009.11.11 Win32.HLLW.Facebook.358
eSafe 7.0.17.0 2009.11.11 -
eTrust-Vet 35.1.7113 2009.11.10 Win32/Koobface!generic
F-Prot 4.5.1.85 2009.11.10 W32/Koobface.G.gen!Eldorado
F-Secure 9.0.15370.0 2009.11.09 -
Fortinet 3.120.0.0 2009.11.11 W32/Koobface.CJU!worm
GData 19 2009.11.11 Trojan.Packed.Hiloti.Gen.2
Ikarus T3.1.1.74.0 2009.11.11 -
Jiangmin 11.0.800 2009.11.11 -
K7AntiVirus 7.10.893 2009.11.10 -
Kaspersky 7.0.0.125 2009.11.11 Net-Worm.Win32.Koobface.cju
McAfee 5798 2009.11.10 -
McAfee+Artemis 5798 2009.11.10 -
McAfee-GW-Edition 6.8.5 2009.11.11 Heuristic.LooksLike.Trojan.Thous.H
Microsoft 1.5202 2009.11.11 Worm:Win32/Koobface.P
NOD32 4595 2009.11.11 a variant of Win32/Kryptik.BBG
Norman 6.03.02 2009.11.10 -
nProtect 2009.1.8.0 2009.11.11 -
Panda 10.0.2.2 2009.11.10 -
PCTools 7.0.3.5 2009.11.11 Net-Worm.Koobface.hx
Prevx 3.0 2009.11.11 -
Rising 22.21.02.09 2009.11.11 Trojan.Spy.Win32.Undef.acl
Sophos 4.47.0 2009.11.11 Mal/FakeSpy-A
Sunbelt 3.2.1858.2 2009.11.11 -
Symantec 1.4.4.12 2009.11.11 W32.Koobface.A
TheHacker 6.5.0.2.065 2009.11.11 -
TrendMicro 9.0.0.1003 2009.11.11 -
VBA32 3.12.10.11 2009.11.10 -
ViRobot 2009.11.11.2031 2009.11.11 -
VirusBuster 4.6.5.0 2009.11.10 -
Additional information
File size: 40960 bytes
MD5   : 1840567865a2b3ad000674ebd8a0d139
SHA1  : e77afd7bab9ff85219f0252d59823492ef814980
SHA256: f15b782b8c6ae8a862bf7f4f0d776771e8c4d6b61794ba0ca9d92e22e2388115
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x10C2
timedatestamp.....: 0x449038DC (Wed Jun 14 18:27:08 2006)
machinetype.......: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x6301 0x6400 7.88 b0a7cd5b963f8be026a7cf1cb18152b7
.data 0x8000 0x4C3A 0x2C00 5.55 9d3d4b4bf272bd37cefb8b9db628b5e7
.rsrc 0xD000 0x6E4 0x800 3.83 a905b07d3db783c9d61480257cd52982
.adata 0xE000 0x2195 0x380 0.00 782d7b5488175ae07bbe22b43f937d87

( 1 imports )

> kernel32.dll: GetStdHandle, GetProcAddress, LoadLibraryA, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, GetVersion, ExitProcess, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, FreeLibrary, GetFileType, HeapDestroy, HeapCreate, VirtualFree, HeapFree, RtlUnwind, WriteFile, GetCPInfo, GetACP, GetOEMCP, HeapAlloc, VirtualAlloc, HeapReAlloc, IsBadWritePtr, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW

( 0 exports )
TrID  : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
ThreatExpert: http://www.threatexpert.com/report.aspx?md5=1840567865a2b3ad000674ebd8a0d139
ssdeep: 768:02HnBug+9/Eavp4biHBPYkWyIOE3k5R3zdH0T+9RdPhN7gijvaWsbYvt:0wBugysEpGWmy83k5tCedJpNvaWd
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=779FEF7E004E07AEA0190052BC2A26001C3276F0
PEiD  : -
RDS   : NSRL Reference Data Set
-

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file