|
Virustotal è un servizio che analizza files sospetti e permette la rapida identificazione di virus, worms, trojans, e di tutti i tipi di malware rilevati dai motori antivirus. Più informazioni... |
| Antivirus | Versione | Ultimo aggiornamento | Risultato |
|---|---|---|---|
| AhnLab-V3 | 2008.6.22.0 | 2008.06.23 | - |
| AntiVir | 7.8.0.59 | 2008.06.23 | - |
| Authentium | 5.1.0.4 | 2008.06.21 | - |
| Avast | 4.8.1195.0 | 2008.06.23 | - |
| AVG | 7.5.0.516 | 2008.06.23 | BackDoor.RBot.AS |
| BitDefender | 7.2 | 2008.06.23 | DeepScan:Generic.Malware.G!SI!!FLMWX!!Bg.E3293E47 |
| CAT-QuickHeal | 9.50 | 2008.06.20 | Backdoor.Rbot.fsb |
| ClamAV | 0.93.1 | 2008.06.23 | PUA.Packed.Armadillo |
| DrWeb | 4.44.0.09170 | 2008.06.23 | - |
| eSafe | 7.0.15.0 | 2008.06.23 | - |
| eTrust-Vet | 31.6.5897 | 2008.06.23 | - |
| Ewido | 4.0 | 2008.06.23 | - |
| F-Prot | 4.4.4.56 | 2008.06.21 | - |
| F-Secure | 7.60.13501.0 | 2008.06.20 | Suspicious:W32/Malware!Gemini |
| Fortinet | 3.14.0.0 | 2008.06.23 | - |
| GData | 2.0.7306.1023 | 2008.06.23 | - |
| Ikarus | T3.1.1.26.0 | 2008.06.23 | Backdoor.IRCBot.ABSZ |
| Kaspersky | 7.0.0.125 | 2008.06.23 | - |
| McAfee | 5322 | 2008.06.20 | - |
| Microsoft | 1.3604 | 2008.06.23 | Backdoor:Win32/Rbot |
| NOD32v2 | 3208 | 2008.06.23 | - |
| Norman | 5.80.02 | 2008.06.20 | - |
| Panda | 9.0.0.4 | 2008.06.22 | Suspicious file |
| Prevx1 | V2 | 2008.06.23 | Suspicious |
| Rising | 20.50.02.00 | 2008.06.23 | - |
| Sophos | 4.30.0 | 2008.06.23 | Sus/ComPack-C |
| Sunbelt | 3.0.1153.1 | 2008.06.15 | - |
| Symantec | 10 | 2008.06.23 | - |
| TheHacker | 6.2.92.358 | 2008.06.21 | - |
| TrendMicro | 8.700.0.1004 | 2008.06.23 | - |
| VBA32 | 3.12.6.8 | 2008.06.23 | - |
| VirusBuster | 4.5.11.0 | 2008.06.23 | - |
| Webwasher-Gateway | 6.6.2 | 2008.06.23 | Virus.Win32.FileInfector.gen (suspicious) |
| Informazioni addizionali |
|---|
| File size: 946176 bytes |
| MD5...: cbfa903f7a4cbff62aceb56e43d83e62 |
| SHA1..: 338d9d3d199b34ee1c1c1211a0e19333af306c42 |
| SHA256: a727529ce2f331764e94593053893a61db485d688b1aea7dd9cc753411d9c539 |
| SHA512: bcacf08a00b51d22566147f6a0d6a55e3bc87c6f4876850a2ccec7f4dbe62857 756a62db8fb5c818ee9393c0a9f571cdc94886059d9456812126bf01b16f0339 |
| PEiD..: - |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x4b7000 timedatestamp.....: 0x485c1eb7 (Fri Jun 20 21:18:47 2008) machinetype.......: 0x14c (I386) ( 8 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x26b96 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .rdata 0x28000 0xd592 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .data 0x36000 0x30a20 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .text1 0x67000 0x50000 0x43000 7.97 f729c94e5d6451c17b86085e1346dfd9 .adata 0xb7000 0x10000 0xd000 7.01 1038710a721073c352871d7b8aef5713 .data1 0xc7000 0x20000 0xb000 3.74 3d1f9b4053f55d464dc99070e1764141 .pdata 0xe7000 0x90000 0x8a000 8.00 01e9520db40d4d8bebc4ab52f4fab009 .rsrc 0x177000 0x5b000 0x1000 0.50 1b19e9bed5126f945766ecb9072a1d55 ( 3 imports ) > KERNEL32.dll: CreateThread, GlobalUnlock, GlobalLock, GlobalAlloc, GetTickCount, WideCharToMultiByte, IsBadReadPtr, GlobalAddAtomA, GlobalAddAtomW, GetModuleHandleA, GlobalFree, GlobalGetAtomNameA, GlobalDeleteAtom, GlobalGetAtomNameW, FreeConsole, GetEnvironmentVariableA, VirtualProtect, VirtualAlloc, GetProcAddress, GetLastError, LoadLibraryA, SetLastError, SetThreadPriority, GetCurrentThread, CreateProcessA, GetCommandLineA, GetStartupInfoA, SetEnvironmentVariableA, ReleaseMutex, WaitForSingleObject, CreateMutexA, OpenMutexA, GetCurrentThreadId, CreateFileA, FindClose, FindFirstFileA, FindFirstFileW, VirtualQueryEx, GetExitCodeProcess, ReadProcessMemory, UnmapViewOfFile, ContinueDebugEvent, SetThreadContext, GetThreadContext, WaitForDebugEvent, SuspendThread, DebugActiveProcess, ResumeThread, CreateProcessW, GetCommandLineW, GetStartupInfoW, CloseHandle, DuplicateHandle, GetCurrentProcess, CreateFileMappingA, VirtualProtectEx, WriteProcessMemory, ExitProcess, FlushFileBuffers, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, MultiByteToWideChar, LCMapStringA, HeapSize, HeapReAlloc, QueryPerformanceCounter, VirtualFree, HeapCreate, HeapDestroy, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, RtlUnwind, DeleteCriticalSection, GetStdHandle, WriteFile, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, Sleep, EnterCriticalSection, LeaveCriticalSection, GetVersionExA, InitializeCriticalSection, GetCurrentProcessId, GetModuleFileNameW, GetShortPathNameW, GetModuleFileNameA, MapViewOfFile, GetShortPathNameA, GetSystemTimeAsFileTime, HeapFree, HeapAlloc, GetProcessHeap, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage > USER32.dll: GetDesktopWindow, MoveWindow, SetPropA, EnumThreadWindows, GetPropA, GetMessageA, GetSystemMetrics, SetTimer, GetAsyncKeyState, KillTimer, BeginPaint, EndPaint, SetWindowTextA, GetDlgItem, CreateDialogIndirectParamA, ShowWindow, UpdateWindow, LoadStringA, LoadStringW, FindWindowA, WaitForInputIdle, MessageBoxA, InSendMessage, UnpackDDElParam, FreeDDElParam, DefWindowProcA, LoadCursorA, RegisterClassW, CreateWindowExW, RegisterClassA, CreateWindowExA, GetWindowThreadProcessId, SendMessageW, SendMessageA, PeekMessageA, TranslateMessage, DispatchMessageA, EnumWindows, IsWindowUnicode, PackDDElParam, PostMessageW, PostMessageA, IsWindow, DestroyWindow > GDI32.dll: CreateDCA, CreateDIBitmap, CreateCompatibleDC, SelectObject, SelectPalette, RealizePalette, BitBlt, DeleteDC, DeleteObject, CreatePalette ( 0 exports ) |
| Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=7C918AC200B63083700C0ED4F3105B0038FE9B01 |
| packers (Kaspersky): Armadillo |
| packers (F-Prot): Armadillo |
ATTENZIONE:
VirusTotal è un servizio gratuito offerto da Hispasec Sistemas. Non esiste garanzia circa la disponibilità e la continuità di questo servizio. Nonostante il livello di identificazione conseguito da multipli motori antivirus sia molto superiore a quello offerto dal singolo prodotto, questi risultati NON garantiscono la sicurezza di un file. Attualmente, non esiste soluzione che offra certezza al 100% sull'identificazione di virus e malware.