Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Italiano | | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

VirusTotal é um serviço que analisa arquivos suspeitos e proporciona uma rápida detecção de vírus, worms, cavalos de tróia, e todos os tipos de arquivos maliciosos detectados por vários mecanismos de antivírus. Mais informações...

Arquivo elementclient.exe recebido em 2008.07.27 13:23:47 (UTC)
Andamento: terminado
Resultado: 2/35 (5.71%)
Antivírus Versão Última Atualização Resultado
AhnLab-V3 2008.7.26.0 2008.07.27 -
AntiVir 7.8.1.12 2008.07.26 -
Authentium 5.1.0.4 2008.07.27 -
Avast 4.8.1195.0 2008.07.26 -
AVG 8.0.0.130 2008.07.26 -
BitDefender 7.2 2008.07.27 -
CAT-QuickHeal 9.50 2008.07.25 -
ClamAV 0.93.1 2008.07.27 -
DrWeb 4.44.0.09170 2008.07.27 -
eSafe 7.0.17.0 2008.07.24 -
eTrust-Vet 31.6.5983 2008.07.26 -
Ewido 4.0 2008.07.27 -
F-Prot 4.4.4.56 2008.07.26 -
F-Secure 7.60.13501.0 2008.07.27 -
Fortinet 3.14.0.0 2008.07.26 -
GData 2.0.7306.1023 2008.07.27 -
Ikarus T3.1.1.34.0 2008.07.27 Virus.Win32.Agent.aj
Kaspersky 7.0.0.125 2008.07.27 -
McAfee 5347 2008.07.25 -
Microsoft 1.3704 2008.07.27 -
NOD32v2 3301 2008.07.27 -
Norman 5.80.02 2008.07.25 -
Panda 9.0.0.4 2008.07.27 -
PCTools 4.4.2.0 2008.07.27 -
Prevx1 V2 2008.07.27 Suspicious
Rising 20.54.61.00 2008.07.27 -
Sophos 4.31.0 2008.07.27 -
Sunbelt 3.1.1536.1 2008.07.25 -
Symantec 10 2008.07.27 -
TheHacker 6.2.96.389 2008.07.25 -
TrendMicro 8.700.0.1004 2008.07.26 -
VBA32 3.12.8.1 2008.07.26 -
ViRobot 2008.7.26.1311 2008.07.26 -
VirusBuster 4.5.11.0 2008.07.26 -
Webwasher-Gateway 6.6.2 2008.07.27 -
Informações adicionais
File size: 5275648 bytes
MD5...: 1cf43c91883c4ebc29627534bf73f953
SHA1..: 64a9b824acc94a15ddc9fe4746892d06cb836d89
SHA256: a6b0f3643fc2f60d492545afc403db46555e648f53d9a416b2b1b27f86e2b25c
SHA512: 5566d64969d4e1538d425b3c205a3507944f72bdd4aa1568850f711967b41ede
baa549c2a32f6e95560a5a9e8c4159c0e1334e2ee54862e0e576aec6c4506357
PEiD..: Armadillo v1.71
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x80c190
timedatestamp.....: 0x474e7f24 (Thu Nov 29 08:58:12 2007)
machinetype.......: 0x14c (I386)

( 6 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x448485 0x449000 6.55 a9094bc1b12daed49ad7ba40a3fc4bea
.rdata 0x44a000 0x6a10e 0x6b000 4.34 69abed2af198fcfe9b0a882521191394
.data 0x4b5000 0x8a4c0 0x4e000 5.38 18b0236a42cccb6068e0bfb376e5da65
.tls 0x540000 0x1044 0x2000 0.00 0829f71740aab1ab98b33eae21dee122
.data1 0x542000 0x8e0 0x1000 2.52 bd4929bb4ee6547e6217d41c6806e321
.rsrc 0x543000 0x1108 0x2000 3.22 c0979014c3643fae4352ef7beb801afb

( 20 imports )
> zlibwapi.dll: -, -, -
> ElementSkill.dll: _GetExecuteTime@ElementSkill@GNET@@SAHIH@Z, _LoadSkillData@ElementSkill@GNET@@SAXPAX@Z, _SetLevel@ElementSkill@GNET@@SAHIH@Z, _SetAbility@ElementSkill@GNET@@SAHIH@Z, _GetType@ElementSkill@GNET@@SADI@Z, _GetRequiredBook@ElementSkill@GNET@@SAHIH@Z, _Condition@ElementSkill@GNET@@SAHIAAUUseRequirement@2@H@Z, _PetLearn@ElementSkill@GNET@@SAHIAAUPetRequirement@2@H@Z, _GetAbility@ElementSkill@GNET@@SAHI@Z, _LearnCondition@ElementSkill@GNET@@SAHIAAULearnRequirement@2@H@Z, _GetName@ElementSkill@GNET@@SAPBGI@Z, _NextSkill@ElementSkill@GNET@@SAII@Z, _Query@VisibleState@GNET@@SAPBV12@HH@Z, _GetNativeName@ElementSkill@GNET@@SAPBDI@Z, _Create@ElementSkill@GNET@@SAPAV12@IH@Z, _Destroy@ElementSkill@GNET@@QAEXXZ, _Query@TeamState@GNET@@SAPBV12@H@Z, _GetIcon@ElementSkill@GNET@@SAPBDI@Z, _GetVersion@ElementSkill@GNET@@SAHXZ, _GetRequiredSp@ElementSkill@GNET@@SAHIH@Z, _GetEffect@ElementSkill@GNET@@SAPBDI@Z, _GetAbilityPercent@ElementSkill@GNET@@SAHI@Z, _GetRequiredMoney@ElementSkill@GNET@@SAHIH@Z
> KERNEL32.dll: GetFileSize, CopyFileA, ReadFile, FindClose, ReleaseSemaphore, OpenFile, GetFileAttributesA, GetModuleHandleA, Process32Next, ReadProcessMemory, VirtualQueryEx, Process32First, CreateToolhelp32Snapshot, TerminateProcess, GetExitCodeThread, lstrlenA, GetSystemInfo, GlobalMemoryStatus, HeapFree, GetProcessHeap, HeapAlloc, SystemTimeToFileTime, GetSystemTime, FlushInstructionCache, ReleaseMutex, IsBadWritePtr, QueryPerformanceCounter, QueryPerformanceFrequency, CompareStringA, InterlockedExchange, GetWindowsDirectoryA, GetSystemDirectoryA, VirtualQuery, SetLastError, WaitForMultipleObjects, TerminateThread, CreateFileA, GlobalAlloc, GlobalLock, GlobalUnlock, GetCommandLineA, GetPrivateProfileStringA, GetPrivateProfileIntA, DuplicateHandle, FindFirstFileA, DeleteFileA, FindNextFileA, GetLocalTime, OutputDebugStringA, LoadLibraryA, VirtualProtect, ResetEvent, SuspendThread, ExitProcess, CreateThread, SetThreadPriority, SetEndOfFile, SetFilePointer, GetFileType, WinExec, GlobalReAlloc, GlobalSize, GlobalFree, UnmapViewOfFile, CreateFileMappingA, MapViewOfFile, GetVersionExA, IsProcessorFeaturePresent, WriteFile, IsDBCSLeadByte, SetThreadPriorityBoost, DeleteCriticalSection, InitializeCriticalSection, SetEvent, WaitForSingleObject, ResumeThread, Sleep, FormatMessageA, IsDebuggerPresent, GetVersion, GetCurrentDirectoryA, CreateDirectoryA, SetCurrentDirectoryA, GetCurrentThread, GetLastError, FreeLibrary, CloseHandle, GetCurrentThreadId, EnterCriticalSection, GetCurrentProcessId, GetCurrentProcess, LeaveCriticalSection, GetModuleFileNameA, IsBadReadPtr, GetTickCount, OpenProcess
> ADVAPI32.dll: OpenProcessToken, OpenThreadToken, AdjustTokenPrivileges, LookupPrivilegeValueW, RegCloseKey, RegQueryValueExA, RegOpenKeyA
> USER32.dll: ReleaseDC, EnumWindows, UnhookWindowsHookEx, PtInRect, FindWindowA, GetWindowRect, IsRectEmpty, GetDC, GetTopWindow, GetClassNameA, GetWindowTextA, GetWindow, GetWindowThreadProcessId, GetKeyState, PostQuitMessage, GetActiveWindow, GetClientRect, OpenClipboard, EmptyClipboard, SetClipboardData, CloseClipboard, AdjustWindowRect, GetSystemMetrics, MoveWindow, UpdateWindow, SetForegroundWindow, TranslateMessage, ShowWindow, BeginPaint, EndPaint, CreateCaret, SetCaretPos, GetKeyboardLayout, IsWindowVisible, CreateWindowExA, GetParent, WindowFromDC, EnumThreadWindows, SetRect, IntersectRect, DestroyCursor, LoadCursorFromFileA, GetDesktopWindow, SetTimer, KillTimer, SetCursor, MessageBoxA, AdjustWindowRectEx, SetWindowPos, InvalidateRect, GetCursorPos, ScreenToClient, GetCapture, SetCapture, ReleaseCapture, GetAsyncKeyState, ClientToScreen, SetCursorPos, CallNextHookEx
> GDI32.dll: SetTextAlign, SelectObject, DeleteDC, SetMapMode, GetDeviceCaps, CreateCompatibleDC, TextOutA, SetBkColor, CreateEllipticRgn, PtInRegion, CreateDIBSection, DeleteObject, GetStockObject, BitBlt, SetTextColor, CreatePolygonRgn
> SHELL32.dll: ShellExecuteA
> WS2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> IMM32.dll: ImmGetCandidateListW, ImmAssociateContext, ImmNotifyIME, ImmSetCompositionWindow, ImmSetCandidateWindow, ImmGetDescriptionW, ImmGetProperty, ImmGetContext, ImmReleaseContext, ImmGetCompositionStringW, ImmIsIME
> d3d8.dll: Direct3DCreate8
> DDRAW.dll: DirectDrawCreate
> DSOUND.dll: -
> ole32.dll: CoUninitialize, CoInitialize
> SpeedTreeRT.dll: __3CSpeedTreeRT@@SAXPAX@Z, __0SGeometry@CSpeedTreeRT@@QAE@XZ, _Authorize@CSpeedTreeRT@@SAXPBD@Z, _SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z, _SetLightState@CSpeedTreeRT@@SAXI_N@Z, _SetCamera@CSpeedTreeRT@@SAXPBM0@Z, _SetTime@CSpeedTreeRT@@SAXM@Z, _GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z, __0STextures@CSpeedTreeRT@@QAE@XZ, _GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ, _GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ, _SetLodLevel@CSpeedTreeRT@@QAEXM@Z, _ComputeLodLevel@CSpeedTreeRT@@QAEXXZ, _SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z, _GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z, _GetDiscreteLeafLodLevel@CSpeedTreeRT@@QBEGM@Z, _GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ, _MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ, _SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z, __1SGeometry@CSpeedTreeRT@@QAE@XZ, __1STextures@CSpeedTreeRT@@QAE@XZ, __1CSpeedTreeRT@@QAE@XZ, __2CSpeedTreeRT@@SAPAXI@Z, __0CSpeedTreeRT@@QAE@XZ, _SetTextureFlip@CSpeedTreeRT@@SAX_N@Z, _LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z, _SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z, _SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z, _SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z, _SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z, _SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z, _SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z, _SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z, _GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z, _SetTreeSize@CSpeedTreeRT@@QAEXMM@Z, _Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z, _GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z, _SetLodLimits@CSpeedTreeRT@@QAEXMM@Z, _SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z, _SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
> FTDriver.dll: _CreateFTManager@@YAPAVIFTManager@@HHH@Z
> SHLWAPI.dll: PathFindExtensionA, PathFileExistsA, StrToIntW
> WININET.dll: InternetCloseHandle, InternetOpenA, HttpAddRequestHeadersA, HttpQueryInfoA, HttpSendRequestA, HttpOpenRequestA, InternetConnectA, InternetReadFile
> MSVCRT.dll: _CIsinh, _CIcosh, _CItanh, _CIfmod, modf, frexp, ldexp, _HUGE, tolower, toupper, strpbrk, _itoa, _strlwr, system, remove, rename, tmpnam, _wcsicmp, getenv, _pclose, setvbuf, clearerr, tmpfile, _popen, difftime, mktime, strftime, clock, _onexit, __dllonexit, _terminate@@YAXXZ, __1type_info@@UAE@XZ, __set_app_type, __p__fmode, __p__commode, _adjust_fdiv, _strcmpi, _initterm, __wgetmainargs, _wcmdln, _XcptFilter, _exit, _ecvt, _fcvt, _fpclass, _isnan, _copysign, memchr, __1exception@@UAE@XZ, __0exception@@QAE@XZ, _what@exception@@UBEPBDXZ, __0exception@@QAE@ABV0@@Z, _snwprintf, wcsncmp, localeconv, strcoll, strtod, strtoul, _isctype, __mb_cur_max, _pctype, _errno, strerror, _iob, getc, ungetc, acos, atan2, tan, sin, pow, sqrt, _strnicmp, _strupr, __setusermatherr, _fileno, _ftol, __CxxFrameHandler, fclose, fwrite, fopen, strstr, _CIacos, ceil, sprintf, _CxxThrowException, wcslen, strrchr, atoi, _wtoi, localtime, time, memmove, _purecall, _except_handler3, strncpy, wcscmp, wcscpy, vswprintf, gmtime, free, rand, realloc, swprintf, fseek, __RTDynamicCast, _access, _CIpow, wcscat, wcsstr, swscanf, _stat, malloc, _CIasin, qsort, isdigit, wcsncpy, strncmp, fread, sscanf, ftell, floor, _findclose, _findnext, _findfirst, _wmkdir, wcsrchr, fgetws, fgetwc, strchr, fputs, _beginthreadex, _beginthread, fprintf, asctime, atof, _snprintf, printf, srand, fwprintf, strcspn, fgets, _stricmp, _local_unwind2, calloc, fscanf, vsprintf, wcschr, strncat, wcsncat, _vsnprintf, fflush, _wcslwr, _fstat, strtok, _chsize, _finite, _controlfp, longjmp, _setjmp3, isspace, isalpha, isalnum, _strdup, setlocale, exit, _assert, cos, fabs
> WINMM.dll: timeGetTime
> ImmWrapper.dll: _Init@AMImmWrapper@@QAE_NPAUHINSTANCE__@@PAUHWND__@@PAD2@Z, _Release@AMImmWrapper@@QAE_NXZ, _Start@AMImmEffect@@QAE_NXZ, _Stop@AMImmEffect@@QAE_NXZ, _LoadImmEffect@AMImmWrapper@@QAE_NPADPAPAVAMImmEffect@@@Z, _ReleaseImmEffect@AMImmWrapper@@QAE_NAAPAVAMImmEffect@@@Z, __0AMImmWrapper@@QAE@XZ, __1AMImmWrapper@@QAE@XZ

( 0 exports )
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=B1A70A380072B59080745091B6EF9C007712A6DE

ATENTION ATENÇÃO: VirusTotal é um serviço gratuito oferecido por Hispasec Sistemas. Não há garantias quanto à disponibilidade e continuidade desse serviço. Apesar da taxa de detecção proporcionada pelo uso de múltiplos mecanismos de antivírus ser muito superior àquela oferecida por um único produto, os resultados NÃO garantem a possibilidade de um arquivo ser inofensivo. Atualmente, não há qualquer solução que ofereça 100% de eficiência na detecção de vírus e arquivos maliciosos..

Outro arquivo