home

lpk.dll

The library lpk.dll has been detected as malware by 38 anti-virus scanners.
MD5:
b11eef3a0fe664cbe221440bfacb588f

SHA-1:
73ea2b369371e9e9f3ff026eb8a0fc235604992f

SHA-256:
da07a239706de45a39991d6688b77754baf548d35a07c2cd4222eb72c5b7bfb7

Scanner detections:
38 / 68

Status:
Malware

Explanation:
lpk.dll is infected by a worm that might download, install and run additional malware as well as may spread to other executable files.

Analysis date:
4/25/2024 4:50:41 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Microfake.D
6339179

Agnitum Outpost
Trojan.Scar
7.1.1

AhnLab V3 Security
Trojan/Win32.Scar
2015.03.28

Avira AntiVirus
W32/Virut.Gen
7.11.30.172

avast!
Win32:Patched-YH [Trj]
150319-1

AVG
Generic18
2016.0.3158

Bitdefender
Trojan.Microfake.D
1.0.20.430

Bkav FE
W32.FakeLpkMVf.Trojan
1.3.0.6379

Clam AntiVirus
Trojan.MicroFake-1
0.98/20247

Comodo Security
TrojWare.Win32.Ramnit.d
21556

Dr.Web
DDoS.Rincux.623
9.0.1.05190

Emsisoft Anti-Malware
Trojan.Microfake
9.0.0.4799

ESET NOD32
Win32/Agent.RNS trojan
7.0.302.0

Fortinet FortiGate
W32/Dropper.RNS!tr
3/27/2015

F-Prot
W32/Agent.OZ.gen
4.6.5.141

F-Secure
Trojan:W32/MicroFake.A
5.13.68

G Data
Trojan.Microfake
15.3.25

IKARUS anti.virus
Trojan.Win32.MicroFake
t3scan.1.8.9.0

K7 AntiVirus
Trojan
13.202.15402

Kaspersky
Trojan.Win32.MicroFake
15.0.0.543

Malwarebytes
Trojan.Agent
v2015.03.27.09

McAfee
Trojan.Trojan-FDMZ!B11EEF3A0FE6
16.8.708.2

Microsoft Security Essentials
Threat.Undefined
1.195.475.0

MicroWorld eScan
Trojan.Microfake.D
16.0.0.258

NANO AntiVirus
Trojan.Win32.MicroFake.despad
0.30.8.659

Norman
Trojan.Microfake.D
03.12.2014 13:20:04

nProtect
Trojan.Microfake.D
15.03.27.01

Panda Antivirus
Trj/Downloader.SKT
15.03.27.09

Quick Heal
Trojan.Nitol.A6
3.15.14.00

Reason Heuristics
Threat.Win.Reputation.IMP
15.3.27.8

Rising Antivirus
PE:Trojan.HijcLpk!1.9987
23.00.65.15325

Sophos
Mal/Nitol-C
4.98

Total Defense
Win32/Redosdru.HF
37.0.11517

Trend Micro House Call
PE_VIRUX.O
7.2.86

Trend Micro
PE_VIRUX.O
10.465.27

Vba32 AntiVirus
Trojan.MicroFake
3.12.26.3

VIPRE Antivirus
Threat.4737724
38552

ViRobot
Trojan.Win32.Scar.45056.H[h]
2014.3.20.0

File size:
997 KB (1,020,928 bytes)

File type:
Dynamic link library (Win32 DLL)

File PE Metadata
Compilation timestamp:
6/8/2010 11:59:36 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:I9I/RRwdu41mImFGFy73oJLJlAT+lEXRgb52smldUcnANTZkqK14U8Xz7Hf:I9qRKdu4EIUyy74fqT+GgNxQAtKpQ

Entry address:
0x1A32

Entry point:
83, 7C, 24, 08, 01, 56, 75, 6F, 8B, 74, 24, 08, 68, 04, 01, 00, 00, 68, 18, 30, 00, 10, 56, 89, 35, 90, 32, 00, 10, FF, 15, 58, 20, 00, 10, 56, FF, 15, AC, 20, 00, 10, E8, D3, F6, FF, FF, 83, F8, 01, 75, 3C, E8, CD, F8, FF, FF, 85, C0, 75, 0E, E8, 49, F8, FF, FF, 85, C0, 75, 05, E8, 16, F7, FF, FF, E8, 74, F8, FF, FF, 83, F8, 01, 75, 1B, 6A, 00, 6A, 00, 50, 6A, 00, FF, 15, A8, 20, 00, 10, A3, 9C, 32, 00, 10, 85, C0, 74, 05, E8, 44, FF, FF, FF, E8, 27, F6, FF, FF, EB, 43, 83, 7C, 24, 0C, 00, 75, 39, A1, 9C...
 
[+]

Entropy:
7.7254  (probably packed)

Code size:
3 KB (3,072 bytes)

Remove lpk.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.