Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Polski | Español | English
Virus Total

Virustotal je služba, která analyzuje podezřelé soubory na přítomnost virů, červů, trojanů a dalšího malware, pomocí detekčního jádra mnoha antivirů. Více informací...

Soubor nov_Inst_312s2.exe přijatý 2009.11.12 20:19:29 (UTC)
Současný stav: Dokončeno
Výsledek: 7/41 (17.07%)
Antivirus Verze Poslední aktualizace Výsledek
a-squared 4.5.0.41 2009.11.12 -
AhnLab-V3 5.0.0.2 2009.11.12 -
AntiVir 7.9.1.65 2009.11.12 -
Antiy-AVL 2.0.3.7 2009.11.12 -
Authentium 5.2.0.5 2009.11.12 -
Avast 4.8.1351.0 2009.11.12 -
AVG 8.5.0.425 2009.11.12 -
BitDefender 7.2 2009.11.12 -
CAT-QuickHeal 10.00 2009.11.12 -
ClamAV 0.94.1 2009.11.12 -
Comodo 2932 2009.11.12 Heur.Packed.Unknown
DrWeb 5.0.0.12182 2009.11.12 -
eSafe 7.0.17.0 2009.11.12 Suspicious File
eTrust-Vet 35.1.7117 2009.11.12 -
F-Prot 4.5.1.85 2009.11.12 -
F-Secure 9.0.15370.0 2009.11.11 -
Fortinet 3.120.0.0 2009.11.11 -
GData 19 2009.11.12 -
Ikarus T3.1.1.74.0 2009.11.12 -
Jiangmin 11.0.800 2009.11.12 -
K7AntiVirus 7.10.894 2009.11.11 -
Kaspersky 7.0.0.125 2009.11.12 -
McAfee 5800 2009.11.12 -
McAfee+Artemis 5800 2009.11.12 Artemis!BF7B94900AD8
McAfee-GW-Edition 6.8.5 2009.11.12 Heuristic.LooksLike.Trojan.Dldr.FraudL.H
Microsoft 1.5202 2009.11.12 Trojan:Win32/FakeXPA
NOD32 4601 2009.11.12 -
Norman 6.03.02 2009.11.11 -
nProtect 2009.1.8.0 2009.11.12 -
Panda 10.0.2.2 2009.11.12 -
PCTools 7.0.3.5 2009.11.12 -
Prevx 3.0 2009.11.12 Medium Risk Malware
Rising 22.21.03.09 2009.11.12 -
Sophos 4.47.0 2009.11.12 -
Sunbelt 3.2.1858.2 2009.11.12 Packed.Win32.Mian007.a (v)
Symantec 1.4.4.12 2009.11.12 -
TheHacker 6.5.0.2.066 2009.11.11 -
TrendMicro 9.0.0.1003 2009.11.12 -
VBA32 3.12.10.11 2009.11.11 -
ViRobot 2009.11.12.2033 2009.11.12 -
VirusBuster 4.6.5.0 2009.11.12 -
Rozšiřující informace
File size: 133120 bytes
MD5   : bf7b94900ad8dc95e33176df43533092
SHA1  : 443c41bccbeff7a0c45d03a001de29aed76df362
SHA256: 00f67a923e5fec10991f975a25d014f0681a8c79d60ef5873ba22923aa8eab2f
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x10DC
timedatestamp.....: 0x2912EBFE (Sat Nov 2 19:18:38 1991)
machinetype.......: 0x14C (Intel I386)

( 7 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xD20 0xE00 1.57 2bdc94266e1b48a12ed1a6dbba630010
.data 0x2000 0x1A36A 0x1A800 7.76 de88cf2aa1419550db60c37d8ddbf84f
.bss 0x1D000 0x13000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.idata 0x30000 0x3576 0x3600 5.19 4ddd90908a76df9e55811dcc71024282
.tls 0x34000 0x30 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.rdata 0x35000 0x18 0x200 0.21 976dc64f30d797ae455e895eab131e16
.rsrc 0x36000 0x1541 0x1600 5.40 c868574a218ceb6618a1a752feb5ff16

( 14 imports )

> advapi32.dll: RegQueryValueExA, RegQueryInfoKeyA, RegOpenKeyExA, RegFlushKey, RegEnumValueA, RegEnumKeyExA, RegDeleteKeyA, RegCreateKeyExA, OpenThreadToken, LookupPrivilegeValueA, LookupAccountSidA, GetUserNameA, GetTokenInformation, AdjustTokenPrivileges, OpenServiceA
> comctl32.dll: UninitializeFlatSB, InitializeFlatSB, _TrackMouseEvent, ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Read, ImageList_GetDragImage, ImageList_DragShowNolock, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_GetIcon, ImageList_DrawEx, ImageList_Replace, ImageList_Draw, ImageList_ReplaceIcon, ImageList_Add, ImageList_SetImageCount, ImageList_GetImageCount, ImageList_Create, InitCommonControls
> comdlg32.dll: GetOpenFileNameA
> gdi32.dll: UnrealizeObject, StretchBlt, SetWindowOrgEx, SetWindowExtEx, SetWinMetaFileBits, SetViewportOrgEx, SetViewportExtEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetMapMode, SetEnhMetaFileBits, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SelectClipRgn, SaveDC, RestoreDC, Rectangle, RectVisible, RealizePalette, Polyline, Polygon, PolyPolyline, PlayEnhMetaFile, PatBlt, MoveToEx, MaskBlt, LineTo, LPtoDP, IntersectClipRect, GetWindowOrgEx, GetWinMetaFileBits, GetTextMetricsA, GetTextExtentPointA, GetTextExtentPoint32A, GetSystemPaletteEntries, GetStockObject, GetRgnBox, GetPaletteEntries, GetObjectA, GetEnhMetaFilePaletteEntries, GetEnhMetaFileHeader, GetEnhMetaFileDescriptionA, GetEnhMetaFileBits, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapDimensionEx, GetBitmapBits, GdiFlush, FrameRgn, FillRgn, ExtTextOutA, ExtCreatePen, ExcludeClipRect, Ellipse, DeleteObject, DeleteEnhMetaFile, DeleteDC, CreateSolidBrush, CreateRoundRectRgn, CreateRectRgn, CreatePolygonRgn, CreatePenIndirect, CreatePen, CreatePalette, CreateHalftonePalette, CreateFontIndirectW, CreateFontIndirectA, CreateEnhMetaFileA, CreateDIBitmap, CreateDIBSection, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, CopyEnhMetaFileA, CombineRgn, CloseEnhMetaFile, BitBlt, TranslateCharsetInfo
> kernel32.dll: VirtualFree, VirtualAlloc, GetTickCount, QueryPerformanceCounter, InterlockedDecrement, InterlockedIncrement, VirtualQuery, WideCharToMultiByte, MultiByteToWideChar, lstrcpynA, GetStartupInfoA, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, CompareStringA, UnhandledExceptionFilter, SetFilePointer, SetEndOfFile, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetFileType, CreateFileA, TlsGetValue, lstrcpyA, lstrcmpA, lstrcatA, WriteFile, WideCharToMultiByte, WaitForSingleObject, VirtualProtect, VirtualFree, VirtualAlloc, UnmapViewOfFile, TerminateThread, TerminateProcess, SuspendThread, Sleep, SetThreadPriority, SetThreadLocale, SetProcessPriorityBoost, SetPriorityClass, SetLastError, SetFilePointer, SetEvent, SetErrorMode, SetEndOfFile, ResumeThread, ResetEvent, ReleaseMutex, ReadFile, OpenProcess, OpenMutexA, MultiByteToWideChar, MulDiv, MoveFileExA, MoveFileA, MapViewOfFile, LockResource, InitializeCriticalSection, GlobalUnlock, GlobalSize, GlobalMemoryStatus, GlobalLock, GlobalFree, GlobalFindAtomA, GlobalDeleteAtom, GlobalAlloc, GlobalAddAtomA, GetVolumeInformationA, GetVersionExA, GetVersion, GetUserDefaultLCID, GetTickCount, GetThreadPriority, GetThreadLocale, GetSystemInfo, GetStringTypeExA, GetStdHandle, GetShortPathNameA, GetModuleHandleA, GetModuleFileNameA, GetLogicalDrives, GetLocaleInfoA, GetLocalTime, GetLastError, GetFileSize, GetExitCodeThread, GetEnvironmentVariableA, GetDriveTypeA, GetDiskFreeSpaceA, GetDateFormatA, GetCurrentThreadId, GetCurrentThread, GetCurrentProcessId, GetCurrentProcess, GetComputerNameA, GetCPInfo, GetACP, FreeResource, InterlockedIncrement, InterlockedExchange, InterlockedDecrement, FreeLibrary, FormatMessageA, FindResourceA, FindNextFileA, FindFirstFileA, FindClose, FileTimeToLocalFileTime, FileTimeToDosDateTime, ExpandEnvironmentStringsA, ExitProcess, EnumCalendarInfoA, EnterCriticalSection, DeleteFileA, DeleteCriticalSection, CreateThread, CreateProcessA, CreateMutexA, CreateFileMappingA, CreateFileA, CreateEventA, CreateDirectoryA, CopyFileA, CompareStringW, CompareStringA, CloseHandle, Beep, Sleep, GetVersionExA, GetVersionExA, MulDiv
> msimg32.dll: GradientFill
> ole32.dll: CLSIDFromString
> oleaut32.dll: GetErrorInfo, GetActiveObject, SafeArrayPtrOfIndex
> shell32.dll: ShellExecuteExA, SHGetDesktopFolder, SHGetSpecialFolderLocation
> urlmon.dll: URLOpenStreamA
> user32.dll: BlockInput
> version.dll: GetFileVersionInfoA
> wininet.dll: InternetReadFile, InternetCloseHandle, HttpQueryInfoA, FindNextUrlCacheEntryA
> winmm.dll: sndPlaySoundA

( 0 exports )
TrID  : File type identification
Win32 Executable Generic (38.4%)
Win32 Dynamic Link Library (generic) (34.1%)
Win16/32 Executable Delphi generic (9.3%)
Generic Win/DOS Executable (9.0%)
DOS Executable Generic (9.0%)
ThreatExpert: http://www.threatexpert.com/report.aspx?md5=bf7b94900ad8dc95e33176df43533092
ssdeep: 3072:ilwlKLcHUAzpZuezfoXEwjwKpZswBpbmP+ScdccFPZBYw7:iChH5zp7zfoXZbswTbmP+ScdBdZ57
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=C2E48B580077624608270255C352F700BA31C5F2
PEiD  : -
RDS   : NSRL Reference Data Set
-

VAROVÁNÍ VAROVÁNÍ: VirusTotal je služba poskytovaná zdarma společnosti Hispasec Sistemas. Kvalita výsledků není nijak zaručena. Výsledky jsou závislé na tvůrci daného produktu. Vysledky testů nemusí být 100% správné. Tyto výsledky nemusí znamenat, že daný soubor je infikován, nebo čistý!

Scan another file