VT Community Sign in ▼ Languages ▼
VirusTotal's website has changed, we need new translations, do you feel like helping the community?
info@virustotal.com
Sign in to VT Community

Safety ratings and user comments (disinfection, in-the-wild locations, reverse engineering reports, etc.) on malware and URLs, free and easy.

email
password
Keep me logged in
Forgot your password? Create an account
0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware.
File name:
Office.en-us .exe
Submission date:
2011-05-29 09:47:39 (UTC)
Current status:

VT Community

not reviewed
 Safety score: - 
Antivirus Version Last Update Result
AhnLab-V32011.05.29.002011.05.28Win32/Kashu.B
AntiVir7.11.8.1612011.05.28W32/Sality
Antiy-AVL2.0.3.72011.05.29-
Avast4.8.1351.02011.05.29AutoIt:AutoRun-B2
Avast55.0.677.02011.05.29AutoIt:AutoRun-B2
AVG10.0.0.11902011.05.29Autoit.DB
BitDefender7.22011.05.29Win32.Worm.AutoIt.AC
CAT-QuickHeal11.002011.05.29Worm.Autoit.ci
ClamAV0.97.0.02011.05.28Trojan.Siggen-7
Commtouch5.3.2.62011.05.29W32/Trojan2.DFYJ
Comodo88792011.05.29Virus.Win32.Sality.Gen
DrWeb5.0.2.033002011.05.29Win32.Sector.5
eSafe7.0.17.02011.05.26-
eTrust-Vet36.1.83532011.05.27Win32/Armax.H
F-Prot4.6.2.1172011.05.28W32/Trojan2.DFYJ
F-Secure9.0.16440.02011.05.29-
Fortinet4.2.257.02011.05.28W32/Sality.AA
GData222011.05.29Win32.Worm.AutoIt.AC
IkarusT3.1.1.104.02011.05.29Trojan.Autoit
Jiangmin13.0.9002011.05.28Win32/HLLP.Kuku.Gen
K7AntiVirus9.104.47342011.05.28Trojan
Kaspersky9.0.0.8372011.05.29Worm.Win32.AutoRun.hnw
McAfee5.400.0.11582011.05.29W32/Sality.ag
McAfee-GW-Edition2010.1D2011.05.28W32/Sality.ag
Microsoft1.69032011.05.29Virus:Win32/Sality.AM
NOD3261612011.05.29Win32/Sality.NAO
Norman6.07.072011.05.26Sohanad.gen6
nProtect2011-05-29.012011.05.29Virus/W32.Sality.C
Panda10.0.3.52011.05.28W32/Sality.AF
PCTools7.0.3.52011.05.19Virus.Win32.Sality
Prevx3.02011.05.29-
Rising23.59.04.032011.05.27Worm.Win32.Agent.avb
Sophos4.65.02011.05.29W32/Sality-AM
SUPERAntiSpyware4.40.0.10062011.05.29-
Symantec20111.1.0.1862011.05.29W32.Imaut
TheHacker6.7.0.1.2122011.05.28W32/Sality.gen
TrendMicro9.200.0.10122011.05.29PE_SALITY.EK
TrendMicro-HouseCall9.200.0.10122011.05.29PE_SALITY.EK
VBA323.12.16.02011.05.27Virus.Win32.Sality.2
VIPRE94212011.05.29Trojan.Win32.AutoIT.gen (v)
ViRobot2011.5.28.44842011.05.28Win32.Sality.L
VirusBuster13.6.375.22011.05.28Win32.Sality.AM.Gen
Additional information
MD5   : b730928917e28420be6eebbef4ec44bb
SHA1  : 6a75c6b4f4f67c201ef9d443e1f9b6698482502c
SHA256: 4cc1baecf226f3c8cbf9ed56a911080bb622c6e55efaeaa5c174f8e8f4dd949e
File size : 678783 bytes
Last seen : 2011-05-29 09:47:39
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
ExifTool:
file metadata
CodeSize: 414208
EntryPoint: 0xa5001
FileSize: 663 kB
FileType: Win32 EXE
ImageVersion: 0.0
InitializedDataSize: 250368
LinkerVersion: 8.0
MIMEType: application/octet-stream
MachineType: Intel 386 or later, and compatibles
OSVersion: 4.0
PEType: PE32
Subsystem: Windows GUI
SubsystemVersion: 4.0
TimeStamp: 2007:11:25 10:21:46+01:00
UninitializedDataSize: 0

VT Community

This file has never been reviewed by any VT Community member. Be the first one to comment on it!
VirusTotal Team
Add your comment... Remember that when you write comments as an anonymous user they receive the lowest possible reputation. So if you have not signed in yet don't forget to do so. How to markup your comments?
You can add basic styles to your comments using the following accepted bbcode tags:

[b]text[/b] -- bold
[i]text[/i] -- italics
[u]text[/u] -- underline
[s]text[/s] -- strikethrough
[code]text[/code] -- preformatted text

You can also address comments to particular users using the "@" twitter-like mode. By prepending a "#" symbol to a word you can add custom tags to your comment, tags that can then be searched for.
Goodware
Malware
Spam attachment/link

P2P download
Propagating via IM
Network worm

Drive-by-download






ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.