Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

Virustotal è un servizio che analizza files sospetti e permette la rapida identificazione di virus, worms, trojans, e di tutti i tipi di malware rilevati dai motori antivirus. Più informazioni...

File 5.exe ricevuto il 2009.06.25 03:36:55 (UTC)
Stato corrente: finito
Risultato: 21/41 (51.22%)
Antivirus Versione Ultimo aggiornamento Risultato
a-squared 4.5.0.18 2009.06.25 -
AhnLab-V3 5.0.0.2 2009.06.24 -
AntiVir 7.9.0.196 2009.06.24 ADSPY/MxLiveMedia.A.287
Antiy-AVL 2.0.3.1 2009.06.25 -
Authentium 5.1.2.4 2009.06.24 -
Avast 4.8.1335.0 2009.06.24 Win32:Agent-ADGO
AVG 8.5.0.339 2009.06.24 -
BitDefender 7.2 2009.06.25 Generic.Adw.Rotator.FC9DB59A
CAT-QuickHeal 10.00 2009.06.22 -
ClamAV 0.94.1 2009.06.25 Adware.AdRotator-10
Comodo 1407 2009.06.25 -
DrWeb 5.0.0.12182 2009.06.24 -
eSafe 7.0.17.0 2009.06.24 Win32.Clicker.Agent
eTrust-Vet 31.6.6577 2009.06.24 -
F-Prot 4.4.4.56 2009.06.24 -
F-Secure 8.0.14470.0 2009.06.25 Trojan:W32/Agent.GNK
Fortinet 3.117.0.0 2009.06.24 Misc/PUP
GData 19 2009.06.25 Generic.Adw.Rotator.FC9DB59A
Ikarus T3.1.1.59.0 2009.06.25 Generic.Adw.Rotator
Jiangmin 11.0.706 2009.06.24 -
K7AntiVirus 7.10.768 2009.06.19 -
Kaspersky 7.0.0.125 2009.06.25 Hoax.Win32.Renos.vasj
McAfee 5656 2009.06.24 potentially unwanted program Generic PUP
McAfee+Artemis 5656 2009.06.24 potentially unwanted program Generic PUP
McAfee-GW-Edition 6.7.6 2009.06.25 Ad-Spyware.MxLiveMedia.A.287
Microsoft 1.4803 2009.06.24 Adware:Win32/MxLiveMedia
NOD32 4186 2009.06.24 probably a variant of Win32/Adware.Agent
Norman 6.01.09 2009.06.24 -
nProtect 2009.1.8.0 2009.06.25 -
Panda 10.0.0.16 2009.06.24 Trj/Genetic.gen
PCTools 4.4.2.0 2009.06.24 -
Prevx 3.0 2009.06.25 -
Rising 21.35.30.00 2009.06.25 -
Sophos 4.43.0 2009.06.25 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.06.25 Trojan.Adw.Rotator
Symantec 1.4.4.12 2009.06.25 -
TheHacker 6.3.4.3.353 2009.06.24 Trojan/Downloader.Zlob.tym
TrendMicro 8.950.0.1094 2009.06.24 -
VBA32 3.12.10.7 2009.06.25 -
ViRobot 2009.6.25.1803 2009.06.25 Hoax.Renos.255208
VirusBuster 4.6.5.0 2009.06.24 Trojan.Vapsup.LOW
Informazioni addizionali
File size: 255208 bytes
MD5   : 633aa64ab999ba1d42ce8f5968f641d8
SHA1  : 9d26feaed1b6f6bb10ec1e7ec3e234048304170c
SHA256: 8c55e98b9edf813359b2314fdf3237b94fc13614f2758e6bf347076c950062a3
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x30E3
timedatestamp.....: 0x48EFCDCD (Fri Oct 10 23:49:01 2008)
machinetype.......: 0x14C (Intel I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x5B68 0x5C00 6.49 6bfa289fc453f683cf6ad42723acbb61
.rdata 0x7000 0x129C 0x1400 5.05 165e3e874dc59c8a96748c6f4d0f4207
.data 0x9000 0x25C58 0x400 4.77 78a50275610b8d77577a9aaa1957d1b6
.ndata 0x2F000 0x8000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.rsrc 0x37000 0x6C8 0x800 2.92 0668cc1f74eb6042f5ee65456f1f43da

( 8 imports )

> advapi32.dll: RegQueryValueExA, RegSetValueExA, RegEnumKeyA, RegEnumValueA, RegOpenKeyExA, RegDeleteKeyA, RegDeleteValueA, RegCloseKey, RegCreateKeyExA
> comctl32.dll: ImageList_AddMasked, ImageList_Destroy, -, ImageList_Create
> gdi32.dll: SetBkColor, GetDeviceCaps, DeleteObject, CreateBrushIndirect, CreateFontIndirectA, SetBkMode, SetTextColor, SelectObject
> kernel32.dll: CompareFileTime, SearchPathA, GetShortPathNameA, GetFullPathNameA, MoveFileA, SetCurrentDirectoryA, GetFileAttributesA, GetLastError, CreateDirectoryA, SetFileAttributesA, Sleep, GetTickCount, GetFileSize, GetModuleFileNameA, GetCurrentProcess, CopyFileA, ExitProcess, GetWindowsDirectoryA, SetFileTime, GetCommandLineA, SetErrorMode, LoadLibraryA, lstrcpynA, GetDiskFreeSpaceA, GlobalUnlock, GlobalLock, CreateThread, CreateProcessA, RemoveDirectoryA, CreateFileA, GetTempFileNameA, lstrlenA, lstrcatA, GetSystemDirectoryA, GetVersion, CloseHandle, lstrcmpiA, lstrcmpA, ExpandEnvironmentStringsA, GlobalFree, GlobalAlloc, WaitForSingleObject, GetExitCodeProcess, GetModuleHandleA, LoadLibraryExA, GetProcAddress, FreeLibrary, MultiByteToWideChar, WritePrivateProfileStringA, GetPrivateProfileStringA, WriteFile, ReadFile, MulDiv, SetFilePointer, FindClose, FindNextFileA, FindFirstFileA, DeleteFileA, GetTempPathA
> ole32.dll: CoTaskMemFree, OleInitialize, OleUninitialize, CoCreateInstance
> shell32.dll: SHGetPathFromIDListA, SHBrowseForFolderA, SHGetFileInfoA, ShellExecuteA, SHFileOperationA, SHGetSpecialFolderLocation
> user32.dll: EndDialog, ScreenToClient, GetWindowRect, EnableMenuItem, GetSystemMenu, SetClassLongA, IsWindowEnabled, SetWindowPos, GetSysColor, GetWindowLongA, SetCursor, LoadCursorA, CheckDlgButton, GetMessagePos, LoadBitmapA, CallWindowProcA, IsWindowVisible, CloseClipboard, SetClipboardData, EmptyClipboard, RegisterClassA, TrackPopupMenu, AppendMenuA, CreatePopupMenu, GetSystemMetrics, SetDlgItemTextA, GetDlgItemTextA, MessageBoxIndirectA, CharPrevA, DispatchMessageA, PeekMessageA, DestroyWindow, CreateDialogParamA, SetTimer, SetWindowTextA, PostQuitMessage, SetForegroundWindow, wsprintfA, SendMessageTimeoutA, FindWindowExA, SystemParametersInfoA, CreateWindowExA, GetClassInfoA, DialogBoxParamA, CharNextA, OpenClipboard, ExitWindowsEx, IsWindow, GetDlgItem, SetWindowLongA, LoadImageA, GetDC, EnableWindow, InvalidateRect, SendMessageA, DefWindowProcA, BeginPaint, GetClientRect, FillRect, DrawTextA, EndPaint, ShowWindow
> version.dll: GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA

( 0 exports )
TrID  : File type identification
60.8% (.EXE) Win32 Executable MS Visual C++ (generic) (31206/45/13)
16.6% (.EXE) Win32 Executable Generic (8527/13/3)
14.7% (.DLL) Win32 Dynamic Link Library (generic) (7583/30/2)
3.9% (.EXE) Generic Win/DOS Executable (2002/3)
3.8% (.EXE) DOS Executable Generic (2000/1)
ssdeep: 6144:xGiOAWmpVv5dEiDuhmHCXfLkp//jJ+Y0zsRl:8AWuVD+hmHCPw9gbQH
PEiD  : -
packers (F-Prot): NSIS
RDS   : NSRL Reference Data Set
-

ATENTION ATTENZIONE: VirusTotal è un servizio gratuito offerto da Hispasec Sistemas. Non esiste garanzia circa la disponibilità e la continuità di questo servizio. Nonostante il livello di identificazione conseguito da multipli motori antivirus sia molto superiore a quello offerto dal singolo prodotto, questi risultati NON garantiscono la sicurezza di un file. Attualmente, non esiste soluzione che offra certezza al 100% sull'identificazione di virus e malware.

Scan another file