(cache) Virustotal. MD5: 868502d1581cc513d0aab839d95c89bf TR/Dropper.Gen Fraudulent Security Program Trojan.Dropper.Gen
Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File InstallAVg_881001.exe received on 02.02.2009 22:53:11 (CET)
Current status: finished
Result: 3/39 (7.69%)
Antivirus Version Last Update Result
a-squared 4.0.0.93 2009.02.02 -
AhnLab-V3 5.0.0.2 2009.02.02 -
AntiVir 7.9.0.71 2009.02.02 TR/Dropper.Gen
Authentium 5.1.0.4 2009.02.02 -
Avast 4.8.1281.0 2009.02.02 -
AVG 8.0.0.229 2009.02.02 -
BitDefender 7.2 2009.02.02 -
CAT-QuickHeal 10.00 2009.02.02 -
ClamAV 0.94.1 2009.02.02 -
Comodo 959 2009.02.02 -
DrWeb 4.44.0.09170 2009.02.02 -
eSafe 7.0.17.0 2009.02.01 -
eTrust-Vet 31.6.6337 2009.02.02 -
F-Prot 4.4.4.56 2009.02.02 -
F-Secure 8.0.14470.0 2009.02.02 -
Fortinet 3.117.0.0 2009.02.02 -
GData 19 2009.02.02 -
Ikarus T3.1.1.45.0 2009.02.02 -
K7AntiVirus 7.10.615 2009.02.02 -
Kaspersky 7.0.0.125 2009.02.02 -
McAfee 5514 2009.02.02 -
McAfee+Artemis 5514 2009.02.02 -
Microsoft 1.4306 2009.02.02 -
NOD32 3819 2009.02.02 -
Norman 6.00.02 2009.02.02 -
nProtect 2009.1.8.0 2009.02.02 -
Panda 9.5.1.2 2009.02.02 -
PCTools 4.4.2.0 2009.02.02 -
Prevx1 V2 2009.02.02 Fraudulent Security Program
Rising 21.14.61.00 2009.02.01 -
SecureWeb-Gateway 6.7.6 2009.02.02 Trojan.Dropper.Gen
Sophos 4.38.0 2009.02.02 -
Sunbelt 3.2.1835.2 2009.01.16 -
Symantec 10 2009.02.02 -
TheHacker 6.3.1.5.243 2009.02.02 -
TrendMicro 8.700.0.1004 2009.02.02 -
VBA32 3.12.8.12 2009.02.01 -
ViRobot 2009.2.2.1585 2009.02.02 -
VirusBuster 4.5.11.0 2009.02.02 -
Additional information
File size: 208896 bytes
MD5...: 868502d1581cc513d0aab839d95c89bf
SHA1..: cd10dffd16d2cdd690e3968137a630bc2a5fe3cc
SHA256: c2de3b054ac064fac2deb2d30682048bd0c081dc48a13211c05f37a48a3d8cf2
SHA512: 41eaba269e17e83a5e547a06c1274c79721c11952d11810b62763894132eb69d
06bd1e44d2c0f031c2becde3decd704309f449ff9f4fe1038ab59ec7397f2065
ssdeep: 3072:t2obQ99ERpx3DZzRZEnmVZn31Q9sMTXkFrk16m:koME7pFTu03q9JXh1
PEiD..: -
TrID..: File type identification
Win32 Executable Generic (38.3%)
Win32 Dynamic Link Library (generic) (34.1%)
Win16/32 Executable Delphi generic (9.3%)
Generic Win/DOS Executable (9.0%)
DOS Executable Generic (9.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1338
timedatestamp.....: 0x4671783b (Thu Jun 14 17:17:47 2007)
machinetype.......: 0x14c (I386)

( 9 sections )
name viradd virsiz rawdsiz ntrpy md5
CODE 0x1000 0xedf 0x1000 4.11 f449da63957a512004eadc5da5c2934b
.hJbJXv 0x2000 0x1812 0x2000 0.00 0829f71740aab1ab98b33eae21dee122
.jdata 0x4000 0x13e6 0x2000 0.00 0829f71740aab1ab98b33eae21dee122
.kagruB 0x6000 0x1240 0x2000 0.00 0829f71740aab1ab98b33eae21dee122
.qdata 0x8000 0x51a50e 0x27000 5.80 7e6a8c129dcef5bdac251229eda23d64
.IXkWpk 0x523000 0xea 0x1000 0.00 620f0b67a91f7f74151bc5be745b7110
.hFUoXp 0x524000 0x818 0x1000 0.04 d825ccde0d3cca50ff65fc5651a9124f
.BTZqqe 0x525000 0xd84 0x1000 4.45 8e8f6309e81d0162f7137e876429e1b8
.rsrc 0x526000 0xe70 0x1000 5.91 064ee5bb981e8e56fc429067750e520e

( 7 imports )
> KERNEL32.DLL: ReadFile, GetLastError, OpenFileMappingA, GetFileSize, CopyFileExW, CopyFileExA, GetComputerNameA, FindAtomA, DeleteFileA, GetCommandLineA, ReadConsoleW, ReadConsoleA, GlobalFree, DeleteFileW, CreateThread, Sleep, DeleteAtom, FindFirstFileA, GetCPInfo, CopyFileW, SetLastError, GetConsoleMode
> ADVAPI32.DLL: RegCreateKeyExA, RegQueryInfoKeyA, RegOpenKeyA, RegDeleteKeyW, RegCreateKeyW, RegGetKeySecurity, RegDeleteKeyA, RegOpenKeyExA, RegEnumKeyW, RegEnumValueA, RegLoadKeyA, RegEnumValueW, RegCreateKeyExW, RegOpenKeyExW, RegQueryValueA, RegEnumKeyA, RegDeleteValueW, RegQueryValueW, RegFlushKey, RegEnumKeyExW, RegQueryValueExW, RegOpenKeyW, RegQueryInfoKeyW
> ADVAPI32.DLL: RegOpenKeyExW, RegDeleteKeyA, RegLoadKeyA, RegDeleteValueW, RegLoadKeyW, RegCreateKeyExA, RegEnumValueA, RegQueryValueA, RegOpenKeyA, RegQueryValueExA, RegOpenKeyW, RegDeleteValueA, RegEnumKeyA, RegEnumKeyExW, RegCreateKeyW, RegQueryInfoKeyW, RegFlushKey, RegDeleteKeyW, RegQueryValueExW, RegOpenKeyExA, RegReplaceKeyW
> KERNEL32.DLL: GetCPInfo, CopyFileExW, DeleteFileA, ExitThread, OpenFile, GlobalFree, CreateThread, DeleteFileW, CreateDirectoryA, ReadFile, Sleep, GetCommandLineA, FindFirstFileA, CopyFileA, GetFileSize
> KERNEL32.DLL: CreateDirectoryA, OpenFile, GetCommandLineA, WriteFile, CopyFileExA, GetFileTime, GlobalFree, ReadFile, FindAtomA, ReadConsoleA, GetFileSize, CreateThread, Sleep, GetCPInfo, CopyFileExW, GetComputerNameA
> ADVAPI32.DLL: RegEnumKeyExW, RegReplaceKeyW, RegLoadKeyA, RegEnumValueA, RegQueryValueA, RegEnumKeyW, RegCreateKeyExA, RegEnumValueW, RegLoadKeyW, RegOpenKeyA, RegQueryInfoKeyA, RegFlushKey, RegQueryValueExA, RegOpenKeyW, RegDeleteKeyA, RegDeleteValueW, RegQueryValueW, RegOpenKeyExW
> COMCTL32.DLL: InitCommonControls, ImageList_Create, ImageList_BeginDrag, ImageList_DragEnter, ImageList_Destroy, ImageList_GetImageInfo, ImageList_GetIconSize, ImageList_DragMove, ImageList_GetImageRect, ImageList_EndDrag, ImageList_GetImageCount, ImageList_LoadImage, ImageList_LoadImageA, ImageList_Replace, ImageList_Copy, ImageList_DragLeave

( 0 exports )
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=E723AA3300A7BE6F309B03C14103E3004A8CEEAD

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file