| עברית | 
| Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | 
| 
| Magyar | Deutsch | Česky | Polski | Español
|
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... |
File svghost.exe received on 06.23.2008 14:52:38 (CET)
Current status: finished
Current status: finished
Result: 11/33 (33.33%)
| Antivirus | Version | Last Update | Result |
|---|---|---|---|
| AhnLab-V3 | 2008.6.22.0 | 2008.06.23 | - |
| AntiVir | 7.8.0.59 | 2008.06.23 | - |
| Authentium | 5.1.0.4 | 2008.06.21 | - |
| Avast | 4.8.1195.0 | 2008.06.23 | - |
| AVG | 7.5.0.516 | 2008.06.23 | BackDoor.RBot.AS |
| BitDefender | 7.2 | 2008.06.23 | DeepScan:Generic.Malware.G!SI!!FLMWX!!Bg.E3293E47 |
| CAT-QuickHeal | 9.50 | 2008.06.20 | Backdoor.Rbot.fsb |
| ClamAV | 0.93.1 | 2008.06.23 | PUA.Packed.Armadillo |
| DrWeb | 4.44.0.09170 | 2008.06.23 | - |
| eSafe | 7.0.15.0 | 2008.06.23 | - |
| eTrust-Vet | 31.6.5897 | 2008.06.23 | - |
| Ewido | 4.0 | 2008.06.23 | - |
| F-Prot | 4.4.4.56 | 2008.06.21 | - |
| F-Secure | 7.60.13501.0 | 2008.06.20 | Suspicious:W32/Malware!Gemini |
| Fortinet | 3.14.0.0 | 2008.06.23 | - |
| GData | 2.0.7306.1023 | 2008.06.23 | - |
| Ikarus | T3.1.1.26.0 | 2008.06.23 | Backdoor.IRCBot.ABSZ |
| Kaspersky | 7.0.0.125 | 2008.06.23 | - |
| McAfee | 5322 | 2008.06.20 | - |
| Microsoft | 1.3604 | 2008.06.23 | Backdoor:Win32/Rbot |
| NOD32v2 | 3208 | 2008.06.23 | - |
| Norman | 5.80.02 | 2008.06.20 | - |
| Panda | 9.0.0.4 | 2008.06.22 | Suspicious file |
| Prevx1 | V2 | 2008.06.23 | Suspicious |
| Rising | 20.50.02.00 | 2008.06.23 | - |
| Sophos | 4.30.0 | 2008.06.23 | Sus/ComPack-C |
| Sunbelt | 3.0.1153.1 | 2008.06.15 | - |
| Symantec | 10 | 2008.06.23 | - |
| TheHacker | 6.2.92.358 | 2008.06.21 | - |
| TrendMicro | 8.700.0.1004 | 2008.06.23 | - |
| VBA32 | 3.12.6.8 | 2008.06.23 | - |
| VirusBuster | 4.5.11.0 | 2008.06.23 | - |
| Webwasher-Gateway | 6.6.2 | 2008.06.23 | Virus.Win32.FileInfector.gen (suspicious) |
| Additional information |
|---|
| File size: 946176 bytes |
| MD5...: cbfa903f7a4cbff62aceb56e43d83e62 |
| SHA1..: 338d9d3d199b34ee1c1c1211a0e19333af306c42 |
| SHA256: a727529ce2f331764e94593053893a61db485d688b1aea7dd9cc753411d9c539 |
| SHA512: bcacf08a00b51d22566147f6a0d6a55e3bc87c6f4876850a2ccec7f4dbe62857 756a62db8fb5c818ee9393c0a9f571cdc94886059d9456812126bf01b16f0339 |
| PEiD..: - |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x4b7000 timedatestamp.....: 0x485c1eb7 (Fri Jun 20 21:18:47 2008) machinetype.......: 0x14c (I386) ( 8 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x26b96 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .rdata 0x28000 0xd592 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .data 0x36000 0x30a20 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .text1 0x67000 0x50000 0x43000 7.97 f729c94e5d6451c17b86085e1346dfd9 .adata 0xb7000 0x10000 0xd000 7.01 1038710a721073c352871d7b8aef5713 .data1 0xc7000 0x20000 0xb000 3.74 3d1f9b4053f55d464dc99070e1764141 .pdata 0xe7000 0x90000 0x8a000 8.00 01e9520db40d4d8bebc4ab52f4fab009 .rsrc 0x177000 0x5b000 0x1000 0.50 1b19e9bed5126f945766ecb9072a1d55 ( 3 imports ) > KERNEL32.dll: CreateThread, GlobalUnlock, GlobalLock, GlobalAlloc, GetTickCount, WideCharToMultiByte, IsBadReadPtr, GlobalAddAtomA, GlobalAddAtomW, GetModuleHandleA, GlobalFree, GlobalGetAtomNameA, GlobalDeleteAtom, GlobalGetAtomNameW, FreeConsole, GetEnvironmentVariableA, VirtualProtect, VirtualAlloc, GetProcAddress, GetLastError, LoadLibraryA, SetLastError, SetThreadPriority, GetCurrentThread, CreateProcessA, GetCommandLineA, GetStartupInfoA, SetEnvironmentVariableA, ReleaseMutex, WaitForSingleObject, CreateMutexA, OpenMutexA, GetCurrentThreadId, CreateFileA, FindClose, FindFirstFileA, FindFirstFileW, VirtualQueryEx, GetExitCodeProcess, ReadProcessMemory, UnmapViewOfFile, ContinueDebugEvent, SetThreadContext, GetThreadContext, WaitForDebugEvent, SuspendThread, DebugActiveProcess, ResumeThread, CreateProcessW, GetCommandLineW, GetStartupInfoW, CloseHandle, DuplicateHandle, GetCurrentProcess, CreateFileMappingA, VirtualProtectEx, WriteProcessMemory, ExitProcess, FlushFileBuffers, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, MultiByteToWideChar, LCMapStringA, HeapSize, HeapReAlloc, QueryPerformanceCounter, VirtualFree, HeapCreate, HeapDestroy, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, RtlUnwind, DeleteCriticalSection, GetStdHandle, WriteFile, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, Sleep, EnterCriticalSection, LeaveCriticalSection, GetVersionExA, InitializeCriticalSection, GetCurrentProcessId, GetModuleFileNameW, GetShortPathNameW, GetModuleFileNameA, MapViewOfFile, GetShortPathNameA, GetSystemTimeAsFileTime, HeapFree, HeapAlloc, GetProcessHeap, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage > USER32.dll: GetDesktopWindow, MoveWindow, SetPropA, EnumThreadWindows, GetPropA, GetMessageA, GetSystemMetrics, SetTimer, GetAsyncKeyState, KillTimer, BeginPaint, EndPaint, SetWindowTextA, GetDlgItem, CreateDialogIndirectParamA, ShowWindow, UpdateWindow, LoadStringA, LoadStringW, FindWindowA, WaitForInputIdle, MessageBoxA, InSendMessage, UnpackDDElParam, FreeDDElParam, DefWindowProcA, LoadCursorA, RegisterClassW, CreateWindowExW, RegisterClassA, CreateWindowExA, GetWindowThreadProcessId, SendMessageW, SendMessageA, PeekMessageA, TranslateMessage, DispatchMessageA, EnumWindows, IsWindowUnicode, PackDDElParam, PostMessageW, PostMessageA, IsWindow, DestroyWindow > GDI32.dll: CreateDCA, CreateDIBitmap, CreateCompatibleDC, SelectObject, SelectPalette, RealizePalette, BitBlt, DeleteDC, DeleteObject, CreatePalette ( 0 exports ) |
| Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=7C918AC200B63083700C0ED4F3105B0038FE9B01 |
| packers (Kaspersky): Armadillo |
| packers (F-Prot): Armadillo |
ATTENTION:
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.
