| reply to Dominick
Re: Strange tcpip header? said by Dominick :
"viradd virsiz"
when i type that in any search engine, i get links to malware uploads and stuff
'viradd' and 'virsiz' are not "stuff" in your driver (the file you uploaded). These are headings for the columns of the table displayed below them. VirusTotal lists some identifying details for the sections in a Portable Executable (10 in this case), one per line. The header row "name viradd virsiz rawdsiz ntrpy md5" identifies what each item on each row is. For instance,
name: Name (Standard PE Image section field)
viradd: Virtual Address (Standard PE Image Section field)
virsiz: Virtual Size (Standard PE Image section field)
rawdsiz: Raw Data size (Standard PE Image section field)
ntrpy: Entropy (used in signature)
md5: MD5 Hash (used in signature)
You care most about the results section. If you don't know what the 'Additional Information' sections are then you don't need to worry about them.
As has already been pointed out by BeesTea  this file appears to be a standard file distributed by Microsoft as part of WinXP SP3. You have nothing to worry about. |
