Srpski | Македонски | العربية | Suomi | ihMdI | 
| עברית | 
| Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Italiano | 
| 
| Magyar | Deutsch | Česky | Polski | Español | English
| עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Italiano | | | Magyar | Deutsch | Česky | Polski | Español | English
|
VirusTotal é um serviço que analisa arquivos suspeitos e proporciona uma rápida detecção de vírus, worms, cavalos de tróia, e todos os tipos de arquivos maliciosos detectados por vários mecanismos de antivírus. Mais informações... |
Arquivo svghost.exe recebido em 2008.06.23 12:52:38 (UTC)
Andamento: terminado
Andamento: terminado
Resultado: 11/33 (33.33%)
| Antivírus | Versão | Última Atualização | Resultado |
|---|---|---|---|
| AhnLab-V3 | 2008.6.22.0 | 2008.06.23 | - |
| AntiVir | 7.8.0.59 | 2008.06.23 | - |
| Authentium | 5.1.0.4 | 2008.06.21 | - |
| Avast | 4.8.1195.0 | 2008.06.23 | - |
| AVG | 7.5.0.516 | 2008.06.23 | BackDoor.RBot.AS |
| BitDefender | 7.2 | 2008.06.23 | DeepScan:Generic.Malware.G!SI!!FLMWX!!Bg.E3293E47 |
| CAT-QuickHeal | 9.50 | 2008.06.20 | Backdoor.Rbot.fsb |
| ClamAV | 0.93.1 | 2008.06.23 | PUA.Packed.Armadillo |
| DrWeb | 4.44.0.09170 | 2008.06.23 | - |
| eSafe | 7.0.15.0 | 2008.06.23 | - |
| eTrust-Vet | 31.6.5897 | 2008.06.23 | - |
| Ewido | 4.0 | 2008.06.23 | - |
| F-Prot | 4.4.4.56 | 2008.06.21 | - |
| F-Secure | 7.60.13501.0 | 2008.06.20 | Suspicious:W32/Malware!Gemini |
| Fortinet | 3.14.0.0 | 2008.06.23 | - |
| GData | 2.0.7306.1023 | 2008.06.23 | - |
| Ikarus | T3.1.1.26.0 | 2008.06.23 | Backdoor.IRCBot.ABSZ |
| Kaspersky | 7.0.0.125 | 2008.06.23 | - |
| McAfee | 5322 | 2008.06.20 | - |
| Microsoft | 1.3604 | 2008.06.23 | Backdoor:Win32/Rbot |
| NOD32v2 | 3208 | 2008.06.23 | - |
| Norman | 5.80.02 | 2008.06.20 | - |
| Panda | 9.0.0.4 | 2008.06.22 | Suspicious file |
| Prevx1 | V2 | 2008.06.23 | Suspicious |
| Rising | 20.50.02.00 | 2008.06.23 | - |
| Sophos | 4.30.0 | 2008.06.23 | Sus/ComPack-C |
| Sunbelt | 3.0.1153.1 | 2008.06.15 | - |
| Symantec | 10 | 2008.06.23 | - |
| TheHacker | 6.2.92.358 | 2008.06.21 | - |
| TrendMicro | 8.700.0.1004 | 2008.06.23 | - |
| VBA32 | 3.12.6.8 | 2008.06.23 | - |
| VirusBuster | 4.5.11.0 | 2008.06.23 | - |
| Webwasher-Gateway | 6.6.2 | 2008.06.23 | Virus.Win32.FileInfector.gen (suspicious) |
| Informações adicionais |
|---|
| File size: 946176 bytes |
| MD5...: cbfa903f7a4cbff62aceb56e43d83e62 |
| SHA1..: 338d9d3d199b34ee1c1c1211a0e19333af306c42 |
| SHA256: a727529ce2f331764e94593053893a61db485d688b1aea7dd9cc753411d9c539 |
| SHA512: bcacf08a00b51d22566147f6a0d6a55e3bc87c6f4876850a2ccec7f4dbe62857 756a62db8fb5c818ee9393c0a9f571cdc94886059d9456812126bf01b16f0339 |
| PEiD..: - |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x4b7000 timedatestamp.....: 0x485c1eb7 (Fri Jun 20 21:18:47 2008) machinetype.......: 0x14c (I386) ( 8 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x26b96 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .rdata 0x28000 0xd592 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .data 0x36000 0x30a20 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .text1 0x67000 0x50000 0x43000 7.97 f729c94e5d6451c17b86085e1346dfd9 .adata 0xb7000 0x10000 0xd000 7.01 1038710a721073c352871d7b8aef5713 .data1 0xc7000 0x20000 0xb000 3.74 3d1f9b4053f55d464dc99070e1764141 .pdata 0xe7000 0x90000 0x8a000 8.00 01e9520db40d4d8bebc4ab52f4fab009 .rsrc 0x177000 0x5b000 0x1000 0.50 1b19e9bed5126f945766ecb9072a1d55 ( 3 imports ) > KERNEL32.dll: CreateThread, GlobalUnlock, GlobalLock, GlobalAlloc, GetTickCount, WideCharToMultiByte, IsBadReadPtr, GlobalAddAtomA, GlobalAddAtomW, GetModuleHandleA, GlobalFree, GlobalGetAtomNameA, GlobalDeleteAtom, GlobalGetAtomNameW, FreeConsole, GetEnvironmentVariableA, VirtualProtect, VirtualAlloc, GetProcAddress, GetLastError, LoadLibraryA, SetLastError, SetThreadPriority, GetCurrentThread, CreateProcessA, GetCommandLineA, GetStartupInfoA, SetEnvironmentVariableA, ReleaseMutex, WaitForSingleObject, CreateMutexA, OpenMutexA, GetCurrentThreadId, CreateFileA, FindClose, FindFirstFileA, FindFirstFileW, VirtualQueryEx, GetExitCodeProcess, ReadProcessMemory, UnmapViewOfFile, ContinueDebugEvent, SetThreadContext, GetThreadContext, WaitForDebugEvent, SuspendThread, DebugActiveProcess, ResumeThread, CreateProcessW, GetCommandLineW, GetStartupInfoW, CloseHandle, DuplicateHandle, GetCurrentProcess, CreateFileMappingA, VirtualProtectEx, WriteProcessMemory, ExitProcess, FlushFileBuffers, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, MultiByteToWideChar, LCMapStringA, HeapSize, HeapReAlloc, QueryPerformanceCounter, VirtualFree, HeapCreate, HeapDestroy, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, RtlUnwind, DeleteCriticalSection, GetStdHandle, WriteFile, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, Sleep, EnterCriticalSection, LeaveCriticalSection, GetVersionExA, InitializeCriticalSection, GetCurrentProcessId, GetModuleFileNameW, GetShortPathNameW, GetModuleFileNameA, MapViewOfFile, GetShortPathNameA, GetSystemTimeAsFileTime, HeapFree, HeapAlloc, GetProcessHeap, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage > USER32.dll: GetDesktopWindow, MoveWindow, SetPropA, EnumThreadWindows, GetPropA, GetMessageA, GetSystemMetrics, SetTimer, GetAsyncKeyState, KillTimer, BeginPaint, EndPaint, SetWindowTextA, GetDlgItem, CreateDialogIndirectParamA, ShowWindow, UpdateWindow, LoadStringA, LoadStringW, FindWindowA, WaitForInputIdle, MessageBoxA, InSendMessage, UnpackDDElParam, FreeDDElParam, DefWindowProcA, LoadCursorA, RegisterClassW, CreateWindowExW, RegisterClassA, CreateWindowExA, GetWindowThreadProcessId, SendMessageW, SendMessageA, PeekMessageA, TranslateMessage, DispatchMessageA, EnumWindows, IsWindowUnicode, PackDDElParam, PostMessageW, PostMessageA, IsWindow, DestroyWindow > GDI32.dll: CreateDCA, CreateDIBitmap, CreateCompatibleDC, SelectObject, SelectPalette, RealizePalette, BitBlt, DeleteDC, DeleteObject, CreatePalette ( 0 exports ) |
| Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=7C918AC200B63083700C0ED4F3105B0038FE9B01 |
| packers (Kaspersky): Armadillo |
| packers (F-Prot): Armadillo |
ATENÇÃO:
VirusTotal é um serviço gratuito oferecido por Hispasec Sistemas. Não há garantias quanto à disponibilidade e continuidade desse serviço. Apesar da taxa de detecção proporcionada pelo uso de múltiplos mecanismos de antivírus ser muito superior àquela oferecida por um único produto, os resultados NÃO garantem a possibilidade de um arquivo ser inofensivo. Atualmente, não há qualquer solução que ofereça 100% de eficiência na detecção de vírus e arquivos maliciosos..
