|
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... |
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| a-squared | 4.0.0.73 | 2009.01.04 | - |
| AhnLab-V3 | 2008.12.31.0 | 2009.01.05 | - |
| AntiVir | 7.9.0.45 | 2009.01.04 | RKIT/MBR.Sinowal |
| Authentium | 5.1.0.4 | 2009.01.04 | - |
| Avast | 4.8.1281.0 | 2009.01.04 | Win32:Sinowal-EE |
| AVG | 8.0.0.199 | 2009.01.04 | - |
| BitDefender | 7.2 | 2009.01.05 | - |
| CAT-QuickHeal | 10.00 | 2009.01.05 | (Suspicious) - DNAScan |
| ClamAV | 0.94.1 | 2009.01.05 | - |
| Comodo | 874 | 2009.01.04 | - |
| DrWeb | 4.44.0.09170 | 2009.01.04 | Trojan.PWS.Snap.395 |
| eTrust-Vet | 31.6.6289 | 2009.01.02 | - |
| Ewido | 4.0 | 2008.12.31 | - |
| F-Prot | 4.4.4.56 | 2009.01.04 | - |
| F-Secure | 8.0.14470.0 | 2009.01.05 | - |
| Fortinet | 3.117.0.0 | 2009.01.05 | - |
| GData | 19 | 2009.01.05 | Win32:Sinowal-EE |
| Ikarus | T3.1.1.45.0 | 2009.01.03 | - |
| K7AntiVirus | 7.10.575 | 2009.01.03 | - |
| Kaspersky | 7.0.0.125 | 2009.01.05 | - |
| McAfee | 5485 | 2009.01.05 | - |
| McAfee+Artemis | 5485 | 2009.01.05 | - |
| Microsoft | 1.4205 | 2009.01.05 | PWS:Win32/Sinowal.gen!M |
| NOD32 | 3736 | 2009.01.05 | - |
| Norman | 5.80.02 | 2009.01.02 | - |
| Panda | 9.0.0.4 | 2009.01.04 | - |
| PCTools | 4.4.2.0 | 2009.01.04 | - |
| Prevx1 | V2 | 2009.01.05 | - |
| Rising | 21.11.00.00 | 2009.01.05 | - |
| SecureWeb-Gateway | 6.7.6 | 2009.01.04 | Rootkit.MBR.Sinowal |
| Sophos | 4.37.0 | 2009.01.05 | - |
| Sunbelt | 3.2.1809.2 | 2008.12.22 | - |
| Symantec | 10 | 2009.01.05 | - |
| TheHacker | 6.3.1.4.205 | 2009.01.05 | - |
| TrendMicro | 8.700.0.1004 | 2009.01.05 | Cryp_Xed-3 |
| VBA32 | 3.12.8.10 | 2009.01.04 | - |
| ViRobot | 2009.1.5.1543 | 2009.01.05 | - |
| VirusBuster | 4.5.11.0 | 2009.01.04 | - |
| Additional information |
|---|
| File size: 296944 bytes |
| MD5...: 81f2a04557495e52eb0c1f0784400332 |
| SHA1..: 17382b132702d372ad0781648675e50801e92250 |
| SHA256: 8d88688f78ee94bdb59e4ba9e90886fdb51f9f21c4035294994c39748b17110a |
| SHA512: 0ff48c9032135e91390a1167cb5725c7eddd432e58931b24d715d7b53ccde9dd 003da72cc63dd1fc1ff98d1fa1b3fc4108b1181c59830417f3f0c63bcfe728dc |
| ssdeep: 6144:GkSns/sOq6dhYm7OgG4SoOti69vVAY/F4b3jQiyD/6xo0R9ElK4:HSmO6DY mKgpItZ9dA2FLiy+x5fO |
| PEiD..: - |
| TrID..: File type identification Win32 Executable Generic (58.4%) Clipper DOS Executable (13.8%) Generic Win/DOS Executable (13.7%) DOS Executable Generic (13.7%) VXD Driver (0.2%) |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x40325c timedatestamp.....: 0x47bd1fb6 (Thu Feb 21 06:52:38 2008) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 tdqDKAkn 0x1000 0x6fa6 0x7000 6.63 64e5e44135218af7e454272b60ba4124 NrQpZexv 0x8000 0x29e 0x400 3.02 4ad28a6021e622662c4ab61c6df96bac HQHjdZLz 0x9000 0x45000 0x40ff0 8.00 bd6ddc54e74e83e07e8aeb631aaa4e4d ( 2 imports ) > KERNEL32.dll: Sleep, VirtualAlloc, VirtualFree, VirtualProtect, LoadLibraryA, GetProcAddress, DisconnectNamedPipe, IsValidLocale, IsSystemResumeAutomatic, CreateFileA, GetModuleFileNameA, GetEnvironmentVariableA, GlobalAlloc, IsValidCodePage > USER32.dll: SendMessageA ( 0 exports ) |
ATTENTION:
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.