Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

Virustotal er en service som analyserer mistænksomme filer og muliggør en hurtig opdagelse af vira, orme, trojans, og alle former for malware opdaget af antivirus programmer. Mere information...

Fil rdefk.dfd modtaget den 2008.12.25 04:32:27 (UTC)
Status: Færdig
Resultat: 6/39 (15.38%)
Antivirus Version Sidst opdateret Resultat
a-squared 4.0.0.73 2008.12.25 Trojan.Crypt!IK
AhnLab-V3 2008.12.25.0 2008.12.25 -
AntiVir 7.9.0.45 2008.12.24 TR/Crypt.XDR.Gen
Authentium 5.1.0.4 2008.12.25 -
Avast 4.8.1281.0 2008.12.24 -
AVG 8.0.0.199 2008.12.24 -
BitDefender 7.2 2008.12.25 -
CAT-QuickHeal 10.00 2008.12.24 -
ClamAV 0.94.1 2008.12.24 -
Comodo 809 2008.12.24 -
DrWeb 4.44.0.09170 2008.12.25 -
eSafe 7.0.17.0 2008.12.24 -
eTrust-Vet 31.6.6276 2008.12.24 -
Ewido 4.0 2008.12.24 -
F-Prot 4.4.4.56 2008.12.24 -
F-Secure 8.0.14332.0 2008.12.25 -
Fortinet 3.117.0.0 2008.12.25 -
GData 19 2008.12.25 -
Ikarus T3.1.1.45.0 2008.12.25 Trojan.Crypt
K7AntiVirus 7.10.564 2008.12.24 -
Kaspersky 7.0.0.125 2008.12.25 -
McAfee 5474 2008.12.24 -
McAfee+Artemis 5474 2008.12.24 Generic!Artemis
Microsoft 1.4205 2008.12.25 -
NOD32 3716 2008.12.24 -
Norman 5.80.02 2008.12.24 -
Panda 9.0.0.4 2008.12.24 -
PCTools 4.4.2.0 2008.12.24 -
Prevx1 V2 2008.12.25 -
Rising 21.09.30.00 2008.12.25 -
SecureWeb-Gateway 6.7.6 2008.12.24 Trojan.Crypt.XDR.Gen
Sophos 4.37.0 2008.12.24 -
Sunbelt 3.2.1809.2 2008.12.22 Trojan.Crypt.XDR.Gen
Symantec 10 2008.12.25 -
TheHacker 6.3.1.4.199 2008.12.23 -
TrendMicro 8.700.0.1004 2008.12.25 -
VBA32 3.12.8.10 2008.12.24 -
ViRobot 2008.12.24.1534 2008.12.24 -
VirusBuster 4.5.11.0 2008.12.24 -
Supplerende information
File size: 243200 bytes
MD5...: d21e8442873dc548eb23ba8b3d04e57f
SHA1..: a16db9ba3ab6a371818c4d90432191dddd00bc59
SHA256: ebd23dbd7053cc3b4691093ffb3610633c62a82d249a208946a308b572366f29
SHA512: 3659ae1cae0be8e186442c845077e807ebc90a3da7c26981301211447ce160ed
3117f62cddf6011099d14829d433426c4a07ae0cbeee6f6eca4e2230c525f1bd
ssdeep: 6144:M2qlyGk/EWa929YCYR7urvkQiCIfXDCbtx7Mk:MdbkEfH7urRcitF
PEiD..: ASProtect v1.23 RC4 build 08.07 (dll) -> Alexey Solodovnikov (h)
TrID..: File type identification
Generic Win/DOS Executable (49.9%)
DOS Executable Generic (49.8%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x441001
timedatestamp.....: 0x43a0d818 (Thu Dec 15 02:42:32 2005)
machinetype.......: 0x14c (I386)

( 7 sections )
name viradd virsiz rawdsiz ntrpy md5
0x1000 0x1c000 0xe000 7.99 eca187937953a37aef5231622ed85838
0x1d000 0x6000 0x6000 5.41 ff35770ebd84b9014104f1d589dbdd21
0x23000 0x6000 0xa00 7.83 9e76dbf34aae0278f30bde67ac1d7316
.rsrc 0x29000 0x14000 0x14000 6.23 516ff91fd5bb2d2fdb5f4681c48b3abf
0x3d000 0x4000 0x1e00 7.80 f7ababc8f35633fc56306b9d3cc2cbbb
.data 0x41000 0x11000 0x10a00 7.79 115b92f9baec37c1160417ae57ba0448
.adata 0x52000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e

( 10 imports )
> kernel32.dll: GetProcAddress, GetModuleHandleA, LoadLibraryA
> advapi32.dll: SetSecurityDescriptorDacl
> user32.dll: DrawTextA
> gdi32.dll: SaveDC
> winspool.drv: ClosePrinter
> comctl32.dll: -
> rdefp.dfd: NPKPDBCreateExpPrgDb
> imm32.dll: ImmReleaseContext
> setupapi.dll: SetupDiCallClassInstaller
> oleaut32.dll: VariantChangeTypeEx

( 44 exports )
NPKCloseDriver, NPKEnumHookedProcess, NPKGetAppCompatFlag, NPKGetCryptKey, NPKGetEngineVersion, NPKGetHookPause, NPKGetLoadStartup, NPKGetSecOpt, NPKGetWindowEditText, NPKGetWindowText, NPKLoadAtStartup, NPKOpenDriver, NPKOpenDriverEx, NPKRegCryptFunc, NPKRegCryptIFunc, NPKRegCryptMsg, NPKRegCryptWindowParent, NPKRegNotifyWindow, NPKRegisterCryptProgram, NPKRegisterCryptProgramEx, NPKRegisterCryptWindow, NPKRegisterCryptWindowFunc, NPKRegisterCryptWindowMsg, NPKRegisterNotifyWindow, NPKSetAppCompatFlag, NPKSetCryptProgramUseAlert, NPKSetDrvPath, NPKSetHook, NPKSetHookPause, NPKSetHookPlc, NPKSetInfoWindow, NPKSetKbdExtensionKeyLock, NPKSetKbdLock, NPKSetKeyMode, NPKSetSecOpt, NPKSetTargetWindow, NPKSetUseKeyMode, NPKSetUseMsgType, NPKUnregCrypt, NPKUnregisterCryptProgram, NPKUnregisterCryptProgramAll, NPKUnregisterCryptWindow, NPKUnregisterCryptWindowAll, _NPKRegisterCryptInterfaceFunc@16
packers (F-Prot): Aspack
CWSandbox info: http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=d21e8442873dc548eb23ba8b3d04e57f

ATENTION Vær opmærksom på: VirusTotal er en gratis service lavet af Hispasec Sistemas. Der er ingen garanti for tilgængelighed og kontinuitet af denne service. Selvom opdagelse chancen der tilbydes af flere antivirus programmer er højre end den der tilbydes af kun et produkt garanteres det IKKE at resultatet af filen er uden for risiko. Lige nu er der ingen løsninger der tilbyder 100% effektivt opdagelse af virusser og malware..

Ny fil