Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File PCANDIS5.SYS received on 06.27.2008 23:31:54 (CET)
Current status: finished
Result: 2/33 (6.06%)
Antivirus Version Last Update Result
AhnLab-V3 2008.6.27.1 2008.06.27 -
AntiVir 7.8.0.59 2008.06.27 -
Authentium 5.1.0.4 2008.06.27 -
Avast 4.8.1195.0 2008.06.27 -
AVG 7.5.0.516 2008.06.27 Generic10.ASPV
BitDefender 7.2 2008.06.27 -
CAT-QuickHeal 9.50 2008.06.26 Trojan.DNSChanger.ewf
ClamAV 0.93.1 2008.06.27 -
DrWeb 4.44.0.09170 2008.06.27 -
eSafe 7.0.17.0 2008.06.26 -
eTrust-Vet 31.6.5911 2008.06.27 -
Ewido 4.0 2008.06.27 -
F-Prot 4.4.4.56 2008.06.27 -
F-Secure 7.60.13501.0 2008.06.26 -
Fortinet 3.14.0.0 2008.06.27 -
GData 2.0.7306.1023 2008.06.27 -
Ikarus T3.1.1.26.0 2008.06.27 -
Kaspersky 7.0.0.125 2008.06.27 -
McAfee 5327 2008.06.27 -
Microsoft 1.3704 2008.06.27 -
NOD32v2 3224 2008.06.27 -
Norman 5.80.02 2008.06.27 -
Panda 9.0.0.4 2008.06.27 -
Prevx1 V2 2008.06.27 -
Rising 20.50.42.00 2008.06.27 -
Sophos 4.30.0 2008.06.27 -
Sunbelt 3.0.1176.1 2008.06.26 -
Symantec 10 2008.06.27 -
TheHacker 6.2.96.362 2008.06.27 -
TrendMicro 8.700.0.1004 2008.06.27 -
VBA32 3.12.6.8 2008.06.27 -
VirusBuster 4.5.11.0 2008.06.23 -
Webwasher-Gateway 6.6.2 2008.06.27 -
Additional information
File size: 17134 bytes
MD5...: 2f9806b52cb3748b1e49222744b28e3c
SHA1..: 752d4f3195842208ba0b59c0b2f28cd6ba529c8e
SHA256: f48b828bd8d2581fa97e78af569d6444bff2e00e915182b4b1e9998f006c5767
SHA512: a0272f259d49109c8d3454ee0d7cf28e7d83b592382917711066158568d01927
d6e26267d335b52af4dbf903dca0334f80052482dc1ab509cbf5593fa52a15d8
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x103c2
timedatestamp.....: 0x3ccccb3f (Mon Apr 29 04:25:35 2002)
machinetype.......: 0x14c (I386)

( 6 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x2c0 0x2ac4 0x2ae0 6.41 cb0bf8daad3150ad6f9fb3507df8fa83
.rdata 0x2da0 0x18c 0x1a0 3.36 35e0bb489ca4ea110878c72e222ee279
.data 0x2f40 0x68 0x80 2.26 65403084ed05d7ffea78a6898a2cd203
INIT 0x2fc0 0x6d6 0x6e0 5.18 d5dce85b4d31aa12edca152b8bc7b63f
.rsrc 0x36a0 0x418 0x420 3.41 0b232c133319a9a6df43504c18331e15
.reloc 0x3ac0 0x2b4 0x2c0 5.57 c56e3ad9fe679d19d69e659b5d1d93a8

( 3 imports )
> ntoskrnl.exe: ExFreePool, IoDeleteSymbolicLink, IoCreateSymbolicLink, RtlAnsiStringToUnicodeString, RtlFreeUnicodeString, KeInitializeEvent, KeWaitForSingleObject, KeResetEvent, RtlEqualUnicodeString, KeSetEvent, MmUnlockPages, IoAllocateMdl, MmProbeAndLockPages, IoFreeMdl, _except_handler3, DbgPrint, IoReleaseCancelSpinLock, ExInterlockedAddLargeStatistic, InterlockedExchange, MmMapLockedPagesSpecifyCache, IofCompleteRequest, IoDeleteDevice, IoIsWdmVersionAvailable, IoCreateDevice, ExAllocatePoolWithTag, RtlAppendUnicodeToString
> HAL.dll: KeQueryPerformanceCounter
> NDIS.SYS: NdisFreePacket, NdisUnchainBufferAtFront, NdisFreeBuffer, NdisInitAnsiString, NdisCloseAdapter, NdisResetEvent, NdisOpenAdapter, NdisWaitEvent, NdisCompleteBindAdapter, NdisSetEvent, NdisFreeSpinLock, NdisFreeBufferPool, NdisAllocatePacketPool, NdisAllocateBufferPool, NdisFreePacketPool, NdisAllocateSpinLock, NdisInitializeEvent, NdisFreeMemory, NdisAllocateMemory, NdisRequest, NdisUnicodeStringToAnsiString, NdisSend, NdisAcquireSpinLock, NdisInterlockedRemoveHeadList, NdisReleaseSpinLock, NdisGetCurrentSystemTime, NdisInitUnicodeString, NdisRegisterProtocol, NdisDeregisterProtocol, NdisAllocateBuffer, NdisAllocatePacket, NDIS_BUFFER_TO_SPAN_PAGES, NdisQueryBufferOffset, NdisInterlockedInsertTailList, NdisTransferData

( 0 exports )

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file