View Single Post
Old 11-07-2008, 07:22 AM   #8 (permalink)
cmeg26
Registered User
 
Join Date: Nov 2008
Posts: 11
OS: win xp


Re: Redirect/Jump Problems

File KB45785.exe received on 11.07.2008 15:14:12 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED


Result: 15/36 (41.67%)
Loading server information...
Your file is queued in position: 1.
Estimated start time is between 38 and 55 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:


Antivirus Version Last Update Result
AhnLab-V3 2008.11.7.1 2008.11.07 -
AntiVir 7.9.0.26 2008.11.07 -
Authentium 5.1.0.4 2008.11.07 -
Avast 4.8.1248.0 2008.11.06 Win32:Trojan-gen {Other}
AVG 8.0.0.161 2008.11.07 BHO.FRK
BitDefender 7.2 2008.11.07 -
CAT-QuickHeal 9.50 2008.11.07 -
ClamAV 0.94.1 2008.11.07 -
DrWeb 4.44.0.09170 2008.11.07 Trojan.MulDrop.19008
eSafe 7.0.17.0 2008.11.06 -
eTrust-Vet 31.6.6195 2008.11.06 -
Ewido 4.0 2008.11.07 -
F-Prot 4.4.4.56 2008.11.07 -
F-Secure 8.0.14332.0 2008.11.07 Trojan:W32/BHO.EUI
Fortinet 3.117.0.0 2008.11.07 -
GData 19 2008.11.07 Win32:Trojan-gen {Other}
Ikarus T3.1.1.45.0 2008.11.07 Trojan.Win32.BHO.g
K7AntiVirus 7.10.519 2008.11.07 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2008.11.07 Trojan.Win32.BHO.hdt
McAfee 5426 2008.11.06 -
Microsoft 1.4104 2008.11.07 Trojan:Win32/BHO.G
NOD32 3594 2008.11.07 Win32/BHO.NHM
Norman 5.80.02 2008.11.06 -
Panda 9.0.0.4 2008.11.06 Suspicious file
PCTools 4.4.2.0 2008.11.07 -
Prevx1 V2 2008.11.07 Worm
Rising 21.02.42.00 2008.11.07 AdWare.Win32.Agent.cjo
SecureWeb-Gateway 6.7.6 2008.11.07 -
Sophos 4.35.0 2008.11.07 -
Sunbelt 3.1.1783.2 2008.11.05 -
Symantec 10 2008.11.07 -
TheHacker 6.3.1.1.143 2008.11.07 -
TrendMicro 8.700.0.1004 2008.11.07 -
VBA32 3.12.8.9 2008.11.06 Trojan.MulDrop.19008
ViRobot 2008.11.7.1457 2008.11.07 Trojan.Win32.Agent.177664
VirusBuster 4.5.11.0 2008.11.06 -
Additional information
File size: 173568 bytes
MD5...: 4d7821c7a90d8c5db542146214dfc60a
SHA1..: a4070cf0777a3ce7bd3f53e3346ca335bc1439ad
SHA256: 1a493f7cd6020793198be362a5818ad875b25d09ccf02296b39c52bf55c00df6
SHA512: 8e74c8f03d2fa31d3b09cd7d80f1c8b1c65351b8acef3a7539671320053e76b4
fa572b9cc59f00a13e115c6b913884374dee10de3da5924b67d9665ec6026481
PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x401000
timedatestamp.....: 0x48e1ec8c (Tue Sep 30 09:08:28 2008)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2f0 0x400 3.54 807dd8c2878d9e271d8e1c2acdfe1131
.rdata 0x2000 0x1e6 0x200 4.26 665a8bee7791abb343ad04fce602f787
.data 0x3000 0x6d0 0x800 0.15 a9746aaada8ba1a7334ea24e431821a7
.rsrc 0x4000 0x29288 0x29400 5.81 69a45d2c69c7ceb8eca0ba53704d8a4f

( 2 imports )
> SHELL32.dll: StrStrA, StrChrIA, ShellExecuteA, SHGetSpecialFolderPathA
> KERNEL32.dll: CopyFileA, lstrcpyA, lstrcatA, WriteFile, Sleep, SizeofResource, LockResource, LoadResource, GetModuleHandleA, FindResourceA, ExitProcess, CreateFileA, CloseHandle

( 0 exports )

Prevx info: http://info.prevx.com/aboutprogramte...3CBA003C52484F
packers (F-Prot): embedded


File KB36781.exe received on 11.07.2008 15:19:41 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED


Result: 15/36 (41.67%)
Loading server information...
Your file is queued in position: 5.
Estimated start time is between 70 and 100 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:


Antivirus Version Last Update Result
AhnLab-V3 2008.11.7.1 2008.11.07 -
AntiVir 7.9.0.26 2008.11.07 -
Authentium 5.1.0.4 2008.11.07 -
Avast 4.8.1248.0 2008.11.06 Win32:Trojan-gen {Other}
AVG 8.0.0.161 2008.11.07 -
BitDefender 7.2 2008.11.07 -
CAT-QuickHeal 9.50 2008.11.07 Trojan.Agent.aegc
ClamAV 0.94.1 2008.11.07 Trojan.Agent-54408
DrWeb 4.44.0.09170 2008.11.07 Trojan.MulDrop.19008
eSafe 7.0.17.0 2008.11.06 -
eTrust-Vet 31.6.6198 2008.11.07 -
Ewido 4.0 2008.11.07 Trojan.Agent.abzm
F-Prot 4.4.4.56 2008.11.07 -
F-Secure 8.0.14332.0 2008.11.07 Trojan.Win32.Agent.aegc
Fortinet 3.117.0.0 2008.11.07 -
GData 19 2008.11.07 Win32:Trojan-gen {Other}
Ikarus T3.1.1.45.0 2008.11.07 Virus.Trojan.Win32.Agent.aegc
K7AntiVirus 7.10.519 2008.11.07 Trojan.Win32.Agent.aegc
Kaspersky 7.0.0.125 2008.11.07 Trojan.Win32.Agent.aegc
McAfee 5426 2008.11.06 -
Microsoft 1.4104 2008.11.07 -
NOD32 3594 2008.11.07 Win32/BHO.NHM
Norman 5.80.02 2008.11.06 -
Panda 9.0.0.4 2008.11.06 Suspicious file
PCTools 4.4.2.0 2008.11.07 -
Prevx1 V2 2008.11.07 Worm
Rising 21.02.42.00 2008.11.07 -
SecureWeb-Gateway 6.7.6 2008.11.07 -
Sophos 4.35.0 2008.11.07 -
Sunbelt 3.1.1783.2 2008.11.05 -
Symantec 10 2008.11.07 -
TheHacker 6.3.1.1.143 2008.11.07 -
TrendMicro 8.700.0.1004 2008.11.07 -
VBA32 3.12.8.9 2008.11.06 Trojan.Win32.Agent.aegc
ViRobot 2008.11.7.1457 2008.11.07 Trojan.Win32.Agent.177664
VirusBuster 4.5.11.0 2008.11.06 -
Additional information
File size: 177664 bytes
MD5...: 6dfdba301b4e17e0ecaa2e2bf63ac680
SHA1..: 9969bbb8bf92b5d20968caa1ff69c4c08f50c6a4
SHA256: bbb2b2f2c31b9cbb69561fb8e1765f89f7a1f18492c9bdab2c13509329d6b875
SHA512: 0fcaf32604165ab548b01f611dcfd36540c6e724da5e0aa166eb16c3a141df13
b048336e782a935478eecdc9fd5ea2597b1945dbb00fecc43be876c622a8703b
PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x401000
timedatestamp.....: 0x48d366c2 (Fri Sep 19 08:45:54 2008)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2f0 0x400 3.54 96c9f4a457acd22193cd410039d50584
.rdata 0x2000 0x1e6 0x200 4.26 665a8bee7791abb343ad04fce602f787
.data 0x3000 0x6d0 0x800 0.15 7b5da2397741923607edd567fb48d3c5
.rsrc 0x4000 0x2a288 0x2a400 5.71 0a8105a1ef3e8d9ecc42a2cf7603973e

( 2 imports )
> SHELL32.dll: StrStrA, StrChrIA, ShellExecuteA, SHGetSpecialFolderPathA
> KERNEL32.dll: CopyFileA, lstrcpyA, lstrcatA, WriteFile, Sleep, SizeofResource, LockResource, LoadResource, GetModuleHandleA, FindResourceA, ExitProcess, CreateFileA, CloseHandle

( 0 exports )

Prevx info: http://info.prevx.com/aboutprogramte...3CBA005312BEE5
cmeg26 is offline