Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

Virustotal er en service som analyserer mistænksomme filer og muliggør en hurtig opdagelse af vira, orme, trojans, og alle former for malware opdaget af antivirus programmer. Mere information...

Fil smona124961292089050356749 modtaget den 2009.08.07 02:44:45 (UTC)
Status: Færdig
Resultat: 3/41 (7.32%)
Antivirus Version Sidst opdateret Resultat
a-squared 4.5.0.24 2009.08.07 Backdoor.Win32.Iroffer!IK
AhnLab-V3 5.0.0.2 2009.08.06 -
AntiVir 7.9.0.240 2009.08.06 -
Antiy-AVL 2.0.3.7 2009.08.05 -
Authentium 5.1.2.4 2009.08.06 -
Avast 4.8.1335.0 2009.08.06 -
AVG 8.5.0.406 2009.08.06 -
BitDefender 7.2 2009.08.07 -
CAT-QuickHeal 10.00 2009.08.06 -
ClamAV 0.94.1 2009.08.06 -
Comodo 1892 2009.08.07 -
DrWeb 5.0.0.12182 2009.08.07 -
eSafe 7.0.17.0 2009.08.06 Suspicious File
eTrust-Vet 31.6.6662 2009.08.06 -
F-Prot 4.4.4.56 2009.08.06 -
F-Secure 8.0.14470.0 2009.08.07 -
Fortinet 3.120.0.0 2009.08.06 -
GData 19 2009.08.07 -
Ikarus T3.1.1.64.0 2009.08.07 Backdoor.Win32.Iroffer
Jiangmin 11.0.800 2009.08.06 -
K7AntiVirus 7.10.812 2009.08.06 -
Kaspersky 7.0.0.125 2009.08.07 -
McAfee 5700 2009.08.06 -
McAfee+Artemis 5700 2009.08.06 -
McAfee-GW-Edition 6.8.5 2009.08.06 -
Microsoft 1.4903 2009.08.06 -
NOD32 4313 2009.08.06 -
Norman 6.01.09 2009.08.06 -
nProtect 2009.1.8.0 2009.08.07 -
Panda 10.0.0.14 2009.08.06 -
PCTools 4.4.2.0 2009.08.06 -
Prevx 3.0 2009.08.07 -
Rising 21.41.34.00 2009.08.06 -
Sophos 4.44.0 2009.08.07 -
Sunbelt 3.2.1858.2 2009.08.06 -
Symantec 1.4.4.12 2009.08.07 -
TheHacker 6.3.4.3.377 2009.08.05 -
TrendMicro 8.950.0.1094 2009.08.06 -
VBA32 3.12.10.9 2009.08.06 -
ViRobot 2009.8.7.1872 2009.08.07 -
VirusBuster 4.6.5.0 2009.08.06 -
Supplerende information
File size: 2577746 bytes
MD5   : a27dd9f0bf623ba47d661e8561c53110
SHA1  : c33da045975bfdffae131662d5d3d728703b8759
SHA256: f2a509938f3aa5ef959fdd3d7a4ff0c5ec4213ea2ea664ea10e0b9a71b447861
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x30FB
timedatestamp.....: 0x46D055C9 (Sat Aug 25 18:16:09 2007)
machinetype.......: 0x14C (Intel I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x5B30 0x5C00 6.47 2170497fe50b1b7365c3d0dd28144dfa
.rdata 0x7000 0x129C 0x1400 5.05 e409400a0ff5e0ae59f2c4f2de09666e
.data 0x9000 0x25CD8 0x400 5.16 c9707ede28fac4e1522d538816060705
.ndata 0x2F000 0x9000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.rsrc 0x38000 0x1D90 0x1E00 3.57 6423ac241f0560508c7585e8da722580

( 8 imports )

> advapi32.dll: RegQueryValueExA, RegSetValueExA, RegEnumKeyA, RegEnumValueA, RegOpenKeyExA, RegDeleteKeyA, RegDeleteValueA, RegCloseKey, RegCreateKeyExA
> comctl32.dll: ImageList_AddMasked, ImageList_Destroy, -, ImageList_Create
> gdi32.dll: SetBkColor, GetDeviceCaps, DeleteObject, CreateBrushIndirect, CreateFontIndirectA, SetBkMode, SetTextColor, SelectObject
> kernel32.dll: CompareFileTime, SearchPathA, GetShortPathNameA, GetFullPathNameA, MoveFileA, SetCurrentDirectoryA, GetFileAttributesA, GetLastError, CreateDirectoryA, SetFileAttributesA, Sleep, GetFileSize, GetModuleFileNameA, GetTickCount, GetCurrentProcess, CopyFileA, ExitProcess, GetWindowsDirectoryA, SetFileTime, GetCommandLineA, SetErrorMode, LoadLibraryA, lstrcpynA, GetDiskFreeSpaceA, GlobalUnlock, GlobalLock, CreateThread, CreateProcessA, RemoveDirectoryA, CreateFileA, GetTempFileNameA, lstrlenA, lstrcatA, GetSystemDirectoryA, GetVersion, CloseHandle, lstrcmpiA, lstrcmpA, ExpandEnvironmentStringsA, GlobalFree, GlobalAlloc, WaitForSingleObject, GetExitCodeProcess, GetModuleHandleA, LoadLibraryExA, GetProcAddress, FreeLibrary, MultiByteToWideChar, WritePrivateProfileStringA, GetPrivateProfileStringA, WriteFile, ReadFile, MulDiv, SetFilePointer, FindClose, FindNextFileA, FindFirstFileA, DeleteFileA, GetTempPathA
> ole32.dll: CoTaskMemFree, OleInitialize, OleUninitialize, CoCreateInstance
> shell32.dll: SHGetPathFromIDListA, SHBrowseForFolderA, SHGetFileInfoA, ShellExecuteA, SHFileOperationA, SHGetSpecialFolderLocation
> user32.dll: EndDialog, ScreenToClient, GetWindowRect, EnableMenuItem, GetSystemMenu, SetClassLongA, IsWindowEnabled, SetWindowPos, GetSysColor, GetWindowLongA, SetCursor, LoadCursorA, CheckDlgButton, GetMessagePos, LoadBitmapA, CallWindowProcA, IsWindowVisible, CloseClipboard, SetClipboardData, EmptyClipboard, RegisterClassA, TrackPopupMenu, AppendMenuA, CreatePopupMenu, GetSystemMetrics, SetDlgItemTextA, GetDlgItemTextA, MessageBoxIndirectA, CharPrevA, DispatchMessageA, PeekMessageA, CreateDialogParamA, DestroyWindow, SetTimer, SetWindowTextA, PostQuitMessage, SetForegroundWindow, wsprintfA, SendMessageTimeoutA, FindWindowExA, SystemParametersInfoA, CreateWindowExA, GetClassInfoA, DialogBoxParamA, CharNextA, OpenClipboard, ExitWindowsEx, IsWindow, GetDlgItem, SetWindowLongA, LoadImageA, GetDC, EnableWindow, InvalidateRect, SendMessageA, DefWindowProcA, BeginPaint, GetClientRect, FillRect, DrawTextA, EndPaint, ShowWindow
> version.dll: GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA

( 0 exports )
TrID  : File type identification
Win32 Executable MS Visual C++ (generic) (44.6%)
Win32 EXE Yoda's Crypter (31.4%)
Win32 Executable Generic (10.1%)
Win32 Dynamic Link Library (generic) (8.9%)
Generic Win/DOS Executable (2.3%)
ssdeep: 49152:IsOrcjDo4Cz7Ei9Q1NmuPYEUjs2ImP9h2/9YO/XoVXfxYLCMV:Srcg3n9Q1NnYZs2vS9HoRm
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=1DAF24505251E470553B2758CF242E004468DF02
PEiD  : -
packers (Kaspersky): YodaProt, UPX, YodaProt
packers (F-Prot): NSIS, YodaProt, Unicode, UPX
packers (Authentium): NSIS, YodaProt
RDS   : NSRL Reference Data Set
-

ATENTION Vær opmærksom på: VirusTotal er en gratis service lavet af Hispasec Sistemas. Der er ingen garanti for tilgængelighed og kontinuitet af denne service. Selvom opdagelse chancen der tilbydes af flere antivirus programmer er højre end den der tilbydes af kun et produkt garanteres det IKKE at resultatet af filen er uden for risiko. Lige nu er der ingen løsninger der tilbyder 100% effektivt opdagelse af virusser og malware..

Ny fil