Файл qip.exe получен 2010.04.07 16:39:59 (UTC)
Антивирус	Версия	Обновление	Результат
a-squared	4.5.0.50	2010.04.07	-
AhnLab-V3	5.0.0.2	2010.04.07	-
AntiVir	7.10.6.41	2010.04.07	-
Antiy-AVL	2.0.3.7	2010.04.07	-
Authentium	5.2.0.5	2010.04.07	-
Avast	4.8.1351.0	2010.04.07	-
Avast5	5.0.332.0	2010.04.07	-
AVG	9.0.0.787	2010.04.07	-
BitDefender	7.2	2010.04.07	-
CAT-QuickHeal	10.00	2010.04.07	-
ClamAV	0.96.0.3-git	2010.04.07	PUA.Packed.ASPack
Comodo	4530	2010.04.07	-
DrWeb	5.0.2.03300	2010.04.07	-
eSafe	7.0.17.0	2010.04.07	-
eTrust-Vet	35.2.7412	2010.04.07	-
F-Prot	4.5.1.85	2010.04.07	-
F-Secure	9.0.15370.0	2010.04.07	Suspicious:W32/Malware!Gemini
Fortinet	4.0.14.0	2010.04.07	-
GData	19	2010.04.07	-
Ikarus	T3.1.1.80.0	2010.04.07	-
Jiangmin	13.0.900	2010.04.07	-
Kaspersky	7.0.0.125	2010.04.07	-
McAfee-GW-Edition	6.8.5	2010.04.07	-
Microsoft	1.5605	2010.04.07	-
NOD32	5007	2010.04.07	-
Norman	6.04.11	2010.04.07	-
nProtect	2009.1.8.0	2010.04.06	-
Panda	10.0.2.2	2010.04.07	-
PCTools	7.0.3.5	2010.04.07	-
Prevx	3.0	2010.04.07	-
Rising	22.42.02.03	2010.04.07	-
Sophos	4.52.0	2010.04.07	-
Sunbelt	6147	2010.04.07	-
Symantec	20091.2.0.41	2010.04.07	Suspicious.Insight
TheHacker	6.5.2.0.256	2010.04.07	-
TrendMicro	9.120.0.1004	2010.04.07	-
VBA32	3.12.12.4	2010.04.05	-
ViRobot	2010.4.7.2265	2010.04.07	-
VirusBuster	5.0.27.0	2010.04.07	-
 
Дополнительная информация
File size: 3276288 bytes
MD5...: 67fb9b9635b552b881459755fc6ca43c
SHA1..: e1a8b3eabb3b576124e50943e0704eca03251a72
SHA256: 9d9ff22aa440b6169afd26dd45aa4e3e387832a2aa203961e74741be9cb83f0a
ssdeep: 49152:fKTBl/9uk6rMf/x5tAoGt2jt+4MfVteLW/:fKTB536rwxs6jtAdIL
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x4d0001
timedatestamp.....: 0x4bbca98c (Wed Apr 07 15:49:32 2010)
machinetype.......: 0x14c (I386)

( 12 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x332000 0x10b200 8.00 a4a890add8e4fb34c6daa10dfbab8db0
.itext 0x333000 0x3000 0x1600 7.78 7e555602f496430ff07e5928798452d5
.data 0x336000 0x10000 0x6000 7.97 fe6f3a6ac77aab4de87123f0028df355
.bss 0x346000 0x7000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.idata 0x34d000 0x5000 0x1400 7.95 577bdc4a03f2f920d99a0b1959fb0dfa
.didata 0x352000 0x1000 0x200 6.26 2bb9975f4798a379fc0e295ff8b1bd28
.tls 0x353000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.rdata 0x354000 0x1000 0x200 0.21 0af4bdcc6602550b3e8e7496d48abc45
.reloc 0x355000 0x3a000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.rsrc 0x38f000 0x141000 0x89200 7.99 73265cfdde11324a10868c829b172368
.aspack 0x4d0000 0x5000 0x4600 4.57 40ec144363df40bc42000a0797e26fc3
.adata 0x4d5000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e

( 24 imports ) 
> kernel32.dll: GetProcAddress, GetModuleHandleA, LoadLibraryA
> oleaut32.dll: SysFreeString
> advapi32.dll: RegQueryValueExW
> user32.dll: LoadStringW
> user32.dll: CreateWindowExW
> msimg32.dll: AlphaBlend
> gdi32.dll: UnrealizeObject
> version.dll: VerQueryValueW
> advapi32.dll: RegUnLoadKeyW
> oleaut32.dll: GetErrorInfo
> ole32.dll: CreateStreamOnHGlobal
> comctl32.dll: InitializeFlatSB
> ole32.dll: IsEqualGUID
> oleaut32.dll: SafeArrayPtrOfIndex
> imm32.dll: ImmSetCompositionWindow
> wininet.dll: InternetGetConnectedState
> shell32.dll: SHGetFileInfoW
> shell32.dll: SHGetSpecialFolderLocation
> winspool.drv: OpenPrinterW
> winspool.drv: GetDefaultPrinterW
> wsock32.dll: WSACleanup
> winmm.dll: sndPlaySoundW
> gdi32.dll: GetCharacterPlacementW
> gdi32.dll: GetCharacterPlacementW

( 0 exports ) 
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win32 Executable Generic (58.3%)
Win16/32 Executable Delphi generic (14.1%)
Generic Win/DOS Executable (13.7%)
DOS Executable Generic (13.6%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
packers (Kaspersky): ASPack
sigcheck:
publisher....: 
copyright....: 
product......: qip
description..: Quiet Internet Pager
original name: 
internal name: 
file version.: 8.0.9.5
comments.....: 
signers......: -
signing date.: -
verified.....: Unsigned