Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Česky | Polski | Español | English
Virus Total

Virustotal analysiert verdächtige Dateien und erleichtert die schnelle Erkennung von Viren, Würmern, Trojanern und jeglicher Art von Malware, welche von den Antivirus-Engines festgestellt werden. Weitere Informationen...

Datei e.png empfangen 2009.09.24 23:29:55 (UTC)
Status: Beendet
Ergebnis: 5/41 (12.20%)
Antivirus Version letzte aktualisierung Ergebnis
a-squared 4.5.0.24 2009.09.24 -
AhnLab-V3 5.0.0.2 2009.09.24 -
AntiVir 7.9.1.25 2009.09.24 -
Antiy-AVL 2.0.3.7 2009.09.24 -
Authentium 5.1.2.4 2009.09.25 -
Avast 4.8.1351.0 2009.09.24 -
AVG 8.5.0.412 2009.09.24 -
BitDefender 7.2 2009.09.25 -
CAT-QuickHeal 10.00 2009.09.24 -
ClamAV 0.94.1 2009.09.24 -
Comodo 2426 2009.09.24 -
DrWeb 5.0.0.12182 2009.09.25 -
eSafe 7.0.17.0 2009.09.24 -
eTrust-Vet 31.6.6759 2009.09.24 -
F-Prot 4.5.1.85 2009.09.24 -
F-Secure 8.0.14470.0 2009.09.24 Trojan-Spy.Win32.Zbot.gen
Fortinet 3.120.0.0 2009.09.24 -
GData 19 2009.09.25 -
Ikarus T3.1.1.72.0 2009.09.24 -
Jiangmin 11.0.800 2009.09.24 -
K7AntiVirus 7.10.853 2009.09.24 -
Kaspersky 7.0.0.125 2009.09.25 Trojan-Spy.Win32.Zbot.gen
McAfee 5751 2009.09.24 -
McAfee+Artemis 5751 2009.09.24 -
McAfee-GW-Edition 6.8.5 2009.09.24 Heuristic.BehavesLike.Win32.Downloader.H
Microsoft 1.5005 2009.09.23 PWS:Win32/Zbot.gen!R
NOD32 4455 2009.09.24 a variant of Win32/Spy.Zbot.UR
Norman 6.01.09 2009.09.24 -
nProtect 2009.1.8.0 2009.09.24 -
Panda 10.0.2.2 2009.09.24 -
PCTools 4.4.2.0 2009.09.24 -
Prevx 3.0 2009.09.25 -
Rising 21.48.34.00 2009.09.24 -
Sophos 4.45.0 2009.09.25 -
Sunbelt 3.2.1858.2 2009.09.24 -
Symantec 1.4.4.12 2009.09.25 -
TheHacker 6.5.0.2.017 2009.09.24 -
TrendMicro 8.950.0.1094 2009.09.24 -
VBA32 3.12.10.11 2009.09.24 -
ViRobot 2009.9.24.1952 2009.09.24 -
VirusBuster 4.6.5.0 2009.09.24 -
weitere Informationen
File size: 81408 bytes
MD5   : 90a4d664364fc87c2f572f767e28c819
SHA1  : 4a0ab819508f765b48eb3db2e70b10b8d40c6dad
SHA256: 8c1a43dd619aca1c00a8adfd2e1d97674a8189b08c05fececcc707cb87f63a06
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0xA86F
timedatestamp.....: 0x47C5970F (Wed Feb 27 17:59:59 2008)
machinetype.......: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xF4E8 0xF600 6.91 9b2af7b63e1710890ab216c1446bcfb2
.rdata 0x11000 0x4130 0x4200 5.66 a3829fb2f31efe62cf2e4235b1735092
.data 0x16000 0x126 0x200 1.02 30ff68e9e93079ae376797f3cf454776

( 5 imports )

> advapi32.dll: RegSetValueExA, BuildExplicitAccessWithNameW, GetNamedSecurityInfoA, RegReplaceKeyA, QueryServiceObjectSecurity, RegSaveKeyW, EnumDependentServicesW, GetSecurityInfo, StartServiceW, BuildImpersonateTrusteeW, ImpersonateLoggedOnUser, RegUnLoadKeyW, QueryServiceLockStatusW, ClearEventLogW, RegCreateKeyW, CreateServiceA, BackupEventLogA, CryptEnumProvidersA, RegOpenKeyExW, RegOpenKeyW, GetNamedSecurityInfoExW, EqualSid, ConvertAccessToSecurityDescriptorA, CryptGenRandom, RegSetValueW, SetSecurityDescriptorDacl, GetSecurityDescriptorOwner, CryptSetProviderExA, LookupAccountSidA, CancelOverlappedAccess, ObjectDeleteAuditAlarmA, RegisterServiceCtrlHandlerW, CryptGenKey, OpenEventLogW, ObjectCloseAuditAlarmW, GetOverlappedAccessResults, BuildExplicitAccessWithNameA, CryptEnumProviderTypesA, LookupSecurityDescriptorPartsA, CreateProcessAsUserW, BuildImpersonateExplicitAccessWithNameA, GetSecurityDescriptorGroup, ConvertAccessToSecurityDescriptorW, GetLengthSid, SetFileSecurityW, CryptGetProvParam, OpenEventLogA, AddAccessAllowedAce, PrivilegeCheck, RegisterEventSourceA, GetNumberOfEventLogRecords, RegConnectRegistryA, LookupPrivilegeValueW, RegQueryMultipleValuesA, SetNamedSecurityInfoA, OpenBackupEventLogA, GetSidSubAuthorityCount, StartServiceCtrlDispatcherW, CryptSetKeyParam, MakeAbsoluteSD, RegEnumKeyExW, RegUnLoadKeyA, LogonUserA, GetTrusteeTypeA, BuildSecurityDescriptorA, LookupPrivilegeDisplayNameA, CreateServiceW, CryptSetHashParam, RegConnectRegistryW, ConvertSecurityDescriptorToAccessNamedW, ObjectDeleteAuditAlarmW, AbortSystemShutdownA, MapGenericMask, RegOpenKeyExA, CryptSignHashA, CopySid, SetEntriesInAuditListW, CryptExportKey, SetEntriesInAclW, UnlockServiceDatabase, ObjectOpenAuditAlarmA, CryptSetProviderW, CryptAcquireContextA, RegSetValueA, RegFlushKey, GetSecurityDescriptorDacl, ReadEventLogA, OpenServiceW, GetAccessPermissionsForObjectA, LookupPrivilegeDisplayNameW, IsTextUnicode, ConvertSecurityDescriptorToAccessA, InitiateSystemShutdownW, CryptCreateHash, ObjectPrivilegeAuditAlarmW, DuplicateToken, GetMultipleTrusteeOperationA, DeregisterEventSource, CryptHashSessionKey, GetTokenInformation, GetAclInformation, DestroyPrivateObjectSecurity, GetUserNameA, LookupAccountNameW, ObjectPrivilegeAuditAlarmA, GetNamedSecurityInfoW, RegCreateKeyExA, GetServiceDisplayNameW, GetAuditedPermissionsFromAclW, IsValidAcl, CryptSetProvParam, LookupPrivilegeNameW, SetServiceBits, EnumDependentServicesA, RegQueryValueW, GetSecurityInfoExA, RegDeleteValueW, CryptAcquireContextW
> kernel32.dll: GetDriveTypeW, WinExec, ReadConsoleA, GetSystemDefaultLangID, HeapCreate, SleepEx, GetCompressedFileSizeW, SetEnvironmentVariableA, PrepareTape, BuildCommDCBA, FindNextChangeNotification, LocalFileTimeToFileTime, SetUnhandledExceptionFilter, GetOverlappedResult, GetPrivateProfileStringW, FindResourceExW, WriteFileEx, VirtualProtectEx, GetPrivateProfileIntA, SetCurrentDirectoryW, MultiByteToWideChar, WriteTapemark, GetACP, ResumeThread, SetConsoleCursorPosition, RequestDeviceWakeup, VerLanguageNameW, HeapLock, PulseEvent, GetConsoleTitleA, GetTempFileNameA, GetLongPathNameW, GetCalendarInfoW, SuspendThread, GetDiskFreeSpaceExA, GetDefaultCommConfigA, SetMailslotInfo, SetHandleCount, DuplicateHandle, Process32Next, lstrcpy, GetDriveTypeA, EnumSystemLocalesA, EscapeCommFunction, SearchPathW, VirtualFree, WriteProfileStringW, lstrcmpiW, CopyFileA, GetBinaryTypeW, IsBadHugeWritePtr, GetTimeFormatA, GetQueuedCompletionStatus, GetVolumeInformationW, ReadConsoleInputA, GetConsoleCursorInfo, GetEnvironmentVariableW, GlobalReAlloc, VirtualAllocEx, CreateNamedPipeA, FlushViewOfFile, GetTempPathW, SetTapeParameters, GetProcessShutdownParameters, SetLocalTime, OpenSemaphoreW, WaitNamedPipeA, FillConsoleOutputCharacterW, OpenWaitableTimerA, SetProcessAffinityMask, SetCurrentDirectoryA, GetCommandLineA, CopyFileExA, GlobalMemoryStatus, GetThreadContext, VirtualQueryEx, CreatePipe, TerminateProcess, GetLocaleInfoA, Sleep, LoadLibraryW, ConvertThreadToFiber, CopyFileExW, DeleteAtom, FindClose, GlobalCompact, FreeConsole, QueueUserAPC, FindAtomA, CreateMailslotA, SetTapePosition, GetEnvironmentStrings, SystemTimeToFileTime, CompareStringA, FreeEnvironmentStringsA, ClearCommError, WriteConsoleA, GetConsoleTitleW, CreateDirectoryExW, EnumCalendarInfoExW, GetFileAttributesA, CreateFileMappingW, LocalHandle, TlsFree, CreateProcessW, CreateMutexA, GetExitCodeProcess, SetCommBreak, FindResourceA, CancelIo, SystemTimeToTzSpecificLocalTime, ClearCommBreak, GetVersionExA, GetProcessWorkingSetSize, lstrlen, ReadFileScatter, ScrollConsoleScreenBufferA, GetProfileSectionW, PeekNamedPipe, lstrcmp, LockResource, UnlockFile, VirtualAlloc, GetFileSize, SetupComm, GetPrivateProfileSectionA, LocalFlags, GetDateFormatW, WritePrivateProfileStringA, CommConfigDialogA, GenerateConsoleCtrlEvent, GlobalDeleteAtom, OpenFileMappingA, GetStringTypeExW, FindFirstFileW, EnumSystemCodePagesW, GetFileTime, TerminateThread, WriteConsoleInputA, UpdateResourceA, ReadFileEx, GetMailslotInfo, lstrcpyn, GetCommState, FileTimeToLocalFileTime, GetLocalTime, FindResourceExA, GetThreadSelectorEntry, GetNumberOfConsoleInputEvents, VirtualProtect
> ole32.dll: CoGetInterfaceAndReleaseStream, OleCreateDefaultHandler, CoRegisterClassObject, CoCreateInstanceEx, CoRegisterChannelHook, WriteOleStg, CoCreateInstance, CoMarshalInterThreadInterfaceInStream, UpdateDCOMSettings, CoLoadLibrary, CreateClassMoniker, RevokeDragDrop, OleLoadFromStream, OleGetIconOfClass, CoRevokeClassObject, MkParseDisplayName, CoQueryClientBlanket, OleDraw, OpenOrCreateStream, OleIsCurrentClipboard, MonikerCommonPrefixWith, OleMetafilePictFromIconAndLabel, StgGetIFillLockBytesOnFile, CoUninitialize, UtConvertDvtd32toDvtd16, ReadStringStream, OleNoteObjectVisible, OleLockRunning, GetConvertStg, StgCreateDocfile, CoSuspendClassObjects, StgOpenStorage, OleDoAutoConvert, OleIsRunning, OleLoad, IIDFromString, StgOpenStorageEx, OleInitialize, OleBuildVersion, ReadFmtUserTypeStg, OleGetIconOfFile, OleConvertIStorageToOLESTREAM, FreePropVariantArray, OleQueryCreateFromData, OleGetAutoConvert, OleCreateLinkFromData, StgCreateDocfileOnILockBytes, CoFileTimeNow, CoGetClassObject, GetDocumentBitStg, OleSetAutoConvert, CreateDataAdviseHolder, CoGetPSClsid, CoGetCallContext, IsEqualGUID, StringFromGUID2, OleCreateFromDataEx, OleRun, OleCreateMenuDescriptor, CoGetCurrentProcess, RegisterDragDrop, CoInitializeSecurity, OleCreateLinkToFile, PropVariantCopy, OleSaveToStream, CoTaskMemRealloc, OleCreate, StgOpenStorageOnILockBytes, DoDragDrop, UtGetDvtd32Info, CoTaskMemAlloc, CoInitializeEx, OleCreateEmbeddingHelper, CoMarshalInterface, CoResumeClassObjects, OleCreateEx, OleSetMenuDescriptor, EnableHookObject, CreateILockBytesOnHGlobal, UtGetDvtd16Info, GetClassFile, MonikerRelativePathTo, OleRegGetMiscStatus, CLSIDFromString, OleCreateFromData, OleConvertIStorageToOLESTREAMEx, OleCreateStaticFromData, ReadClassStm, CoQueryProxyBlanket, ReadOleStg, CoGetTreatAsClass, CoDosDateTimeToFileTime, OleRegEnumFormatEtc
> shlwapi.dll: PathStripPathW, SHRegOpenUSKeyA, StrCmpNW, wvnsprintfW, wnsprintfW, PathCanonicalizeA, PathMakePrettyA, PathGetCharTypeW, UrlUnescapeA, SHRegDeleteEmptyUSKeyW, SHQueryValueExW, PathUnmakeSystemFolderW, UrlIsOpaqueW, PathIsUNCServerShareW, PathSetDlgItemPathW, PathAppendA, PathIsRelativeW, PathStripToRootA, PathCanonicalizeW, StrStrA, PathFindExtensionA, UrlHashW, StrCmpW, PathStripPathA, SHStrDupA, GetMenuPosFromID, StrFormatByteSizeA, PathUndecorateW, SHIsLowMemoryMachine, StrRChrIA, PathQuoteSpacesW, PathFindFileNameA, UrlGetLocationA, PathUndecorateA, SHDeleteKeyA, IntlStrEqWorkerW, UrlGetPartA, UrlCombineW, StrRetToStrW, StrRChrIW, SHDeleteKeyW, PathIsFileSpecW, PathFindOnPathA, StrToIntExW, UrlCanonicalizeW, StrChrIA, PathCommonPrefixW, PathIsNetworkPathA, PathGetArgsW, PathCreateFromUrlA, StrFromTimeIntervalW, PathFindOnPathW, PathGetCharTypeA, SHRegOpenUSKeyW, AssocQueryKeyW, PathStripToRootW, ColorRGBToHLS, SHRegQueryUSValueA, StrRetToStrA, SHRegGetUSValueA, PathMakePrettyW, SHRegEnumUSKeyW, PathIsSystemFolderW, StrCSpnW, PathSearchAndQualifyA, StrFormatByteSize64A, PathIsURLW, PathSkipRootW, SHEnumValueW, PathRemoveArgsW, PathGetDriveNumberW, PathSearchAndQualifyW, StrCmpIW, StrPBrkW, UrlEscapeA, PathFindExtensionW, SHCopyKeyW, StrNCatW, StrTrimW, PathIsDirectoryEmptyA, StrSpnW, SHRegQueryUSValueW, ChrCmpIA, PathMakeSystemFolderA, SHOpenRegStreamA, PathFindNextComponentA, StrFormatKBSizeA, AssocQueryStringW, PathCreateFromUrlW, UrlIsNoHistoryW, StrCmpNIA, StrCpyW, SHCopyKeyA, StrSpnA, SHCreateStreamOnFileW, UrlCreateFromPathW, PathCompactPathA, SHRegGetBoolUSValueA, ColorAdjustLuma, UrlCanonicalizeA, PathCombineA, SHStrDupW, PathGetArgsA, PathSkipRootA, UrlIsNoHistoryA, SHRegDuplicateHKey, StrRChrA
> user32.dll: CharUpperW, CreateWindowExW, GetMenuItemInfoW, SetParent, PtInRect, SetWindowRgn, GetWindowTextLengthA, RegisterClipboardFormatW, CreateIconIndirect, SetMenuInfo, SetClassWord, DrawCaption, DdeClientTransaction, UnloadKeyboardLayout, SetClassLongW, SetActiveWindow, CharNextA, SetPropA, CharUpperBuffA, DrawStateA, CreateCaret, TabbedTextOutA, SetKeyboardState, DdeAddData, EqualRect, CreateDialogParamA, SetPropW, RegisterClassExW, CreateWindowStationW, DlgDirSelectExW, SetMessageExtraInfo, FindWindowW, IsDialogMessageA, DdeAccessData, MessageBoxExW, SetMenuItemInfoW, GetUserObjectInformationW, CharLowerA, SetRectEmpty, SetWindowsHookW, FlashWindowEx, SwapMouseButton, ArrangeIconicWindows, GetMenuItemID, GetMessageExtraInfo, GetProcessWindowStation, SetDeskWallpaper, CreateIcon, RealGetWindowClass, GetPropA, UnhookWinEvent, IntersectRect, InSendMessageEx, GetClassInfoW, GetWindowDC, GetWindowWord, RegisterClipboardFormatA, DdeNameService, IsCharAlphaNumericW, AnyPopup, InflateRect, OpenIcon, UnpackDDElParam, GetAncestor, DragDetect, InSendMessage, SendMessageTimeoutA, MonitorFromRect, DestroyWindow, CharLowerBuffW, ScreenToClient, EnableScrollBar, GetWindowRgn, UnhookWindowsHookEx, GetDlgItemTextA, SendMessageCallbackW, RegisterWindowMessageA, DdeQueryConvInfo, DrawTextExA, GetSysColorBrush, CloseWindow, SetSysColors, GetGuiResources, MessageBoxExA, AppendMenuW, DestroyCursor, EnumClipboardFormats, SetForegroundWindow, GetScrollPos, GetKeyboardLayoutNameA, GetKeyboardLayoutNameW, LoadStringA, RegisterClassW, PaintDesktop, GetDC, IsCharAlphaW, GetMenuItemRect, DdeKeepStringHandle, UnregisterClassA, SetDlgItemInt, GetClassLongA, LoadCursorFromFileA, GetWindowModuleFileNameW, GetDlgItemTextW, GetDesktopWindow, SetClipboardViewer, CharPrevW, GetClassNameA, FindWindowExA, EndDeferWindowPos, DdeGetLastError, DlgDirListA, CallMsgFilterA, ChangeDisplaySettingsExA, SetMenuContextHelpId, GetMenuContextHelpId, DeleteMenu, GetMenuDefaultItem, GetClientRect

( 0 exports )
TrID  : File type identification
Win32 Executable MS Visual C++ (generic) (53.1%)
Windows Screen Saver (18.4%)
Win32 Executable Generic (12.0%)
Win32 Dynamic Link Library (generic) (10.6%)
Generic Win/DOS Executable (2.8%)
ThreatExpert: http://www.threatexpert.com/report.aspx?md5=90a4d664364fc87c2f572f767e28c819
ssdeep: 1536:l8umyeSC5SzZljmzNuLM2g8Clg4o7v9ckn5+owsQ1K1T0o3hKFMYMiJ3:NmbS0IbCzrhtgn7vZRQQ1T0o3hKFvf
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=9ED370CB00F7EE713E8601EEEF546A004EBD8D81
PEiD  : -
RDS   : NSRL Reference Data Set
-

ACHTUNG ACHTUNG: VirusTotal ist ein kostenloser Dienst bereitgestellt von Hispasec Sistemas. Es gibt keine Garantie zur Verfügbarkeit sowie Fortbestehen der Dienstleistung. Obwohl die Erkennungsrate mehrerer Antivirus-Engines besser ist als nur durch ein Produkt, garantieren die Ergebnisse des Scans nicht die Harmlosigkeit einer Datei. Gegenwärtig gibt es keine Lösung, welche eine Erkennungsrate aller Viren und Malware zu 100% bietet.

Scan another file