Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Italiano | | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

VirusTotal é um serviço que analisa arquivos suspeitos e proporciona uma rápida detecção de vírus, worms, cavalos de tróia, e todos os tipos de arquivos maliciosos detectados por vários mecanismos de antivírus. Mais informações...

Arquivo rdefk.dfd recebido em 2008.12.25 04:32:27 (UTC)
Andamento: terminado
Resultado: 6/39 (15.38%)
Antivírus Versão Última Atualização Resultado
a-squared 4.0.0.73 2008.12.25 Trojan.Crypt!IK
AhnLab-V3 2008.12.25.0 2008.12.25 -
AntiVir 7.9.0.45 2008.12.24 TR/Crypt.XDR.Gen
Authentium 5.1.0.4 2008.12.25 -
Avast 4.8.1281.0 2008.12.24 -
AVG 8.0.0.199 2008.12.24 -
BitDefender 7.2 2008.12.25 -
CAT-QuickHeal 10.00 2008.12.24 -
ClamAV 0.94.1 2008.12.24 -
Comodo 809 2008.12.24 -
DrWeb 4.44.0.09170 2008.12.25 -
eSafe 7.0.17.0 2008.12.24 -
eTrust-Vet 31.6.6276 2008.12.24 -
Ewido 4.0 2008.12.24 -
F-Prot 4.4.4.56 2008.12.24 -
F-Secure 8.0.14332.0 2008.12.25 -
Fortinet 3.117.0.0 2008.12.25 -
GData 19 2008.12.25 -
Ikarus T3.1.1.45.0 2008.12.25 Trojan.Crypt
K7AntiVirus 7.10.564 2008.12.24 -
Kaspersky 7.0.0.125 2008.12.25 -
McAfee 5474 2008.12.24 -
McAfee+Artemis 5474 2008.12.24 Generic!Artemis
Microsoft 1.4205 2008.12.25 -
NOD32 3716 2008.12.24 -
Norman 5.80.02 2008.12.24 -
Panda 9.0.0.4 2008.12.24 -
PCTools 4.4.2.0 2008.12.24 -
Prevx1 V2 2008.12.25 -
Rising 21.09.30.00 2008.12.25 -
SecureWeb-Gateway 6.7.6 2008.12.24 Trojan.Crypt.XDR.Gen
Sophos 4.37.0 2008.12.24 -
Sunbelt 3.2.1809.2 2008.12.22 Trojan.Crypt.XDR.Gen
Symantec 10 2008.12.25 -
TheHacker 6.3.1.4.199 2008.12.23 -
TrendMicro 8.700.0.1004 2008.12.25 -
VBA32 3.12.8.10 2008.12.24 -
ViRobot 2008.12.24.1534 2008.12.24 -
VirusBuster 4.5.11.0 2008.12.24 -
Informações adicionais
File size: 243200 bytes
MD5...: d21e8442873dc548eb23ba8b3d04e57f
SHA1..: a16db9ba3ab6a371818c4d90432191dddd00bc59
SHA256: ebd23dbd7053cc3b4691093ffb3610633c62a82d249a208946a308b572366f29
SHA512: 3659ae1cae0be8e186442c845077e807ebc90a3da7c26981301211447ce160ed
3117f62cddf6011099d14829d433426c4a07ae0cbeee6f6eca4e2230c525f1bd
ssdeep: 6144:M2qlyGk/EWa929YCYR7urvkQiCIfXDCbtx7Mk:MdbkEfH7urRcitF
PEiD..: ASProtect v1.23 RC4 build 08.07 (dll) -> Alexey Solodovnikov (h)
TrID..: File type identification
Generic Win/DOS Executable (49.9%)
DOS Executable Generic (49.8%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x441001
timedatestamp.....: 0x43a0d818 (Thu Dec 15 02:42:32 2005)
machinetype.......: 0x14c (I386)

( 7 sections )
name viradd virsiz rawdsiz ntrpy md5
0x1000 0x1c000 0xe000 7.99 eca187937953a37aef5231622ed85838
0x1d000 0x6000 0x6000 5.41 ff35770ebd84b9014104f1d589dbdd21
0x23000 0x6000 0xa00 7.83 9e76dbf34aae0278f30bde67ac1d7316
.rsrc 0x29000 0x14000 0x14000 6.23 516ff91fd5bb2d2fdb5f4681c48b3abf
0x3d000 0x4000 0x1e00 7.80 f7ababc8f35633fc56306b9d3cc2cbbb
.data 0x41000 0x11000 0x10a00 7.79 115b92f9baec37c1160417ae57ba0448
.adata 0x52000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e

( 10 imports )
> kernel32.dll: GetProcAddress, GetModuleHandleA, LoadLibraryA
> advapi32.dll: SetSecurityDescriptorDacl
> user32.dll: DrawTextA
> gdi32.dll: SaveDC
> winspool.drv: ClosePrinter
> comctl32.dll: -
> rdefp.dfd: NPKPDBCreateExpPrgDb
> imm32.dll: ImmReleaseContext
> setupapi.dll: SetupDiCallClassInstaller
> oleaut32.dll: VariantChangeTypeEx

( 44 exports )
NPKCloseDriver, NPKEnumHookedProcess, NPKGetAppCompatFlag, NPKGetCryptKey, NPKGetEngineVersion, NPKGetHookPause, NPKGetLoadStartup, NPKGetSecOpt, NPKGetWindowEditText, NPKGetWindowText, NPKLoadAtStartup, NPKOpenDriver, NPKOpenDriverEx, NPKRegCryptFunc, NPKRegCryptIFunc, NPKRegCryptMsg, NPKRegCryptWindowParent, NPKRegNotifyWindow, NPKRegisterCryptProgram, NPKRegisterCryptProgramEx, NPKRegisterCryptWindow, NPKRegisterCryptWindowFunc, NPKRegisterCryptWindowMsg, NPKRegisterNotifyWindow, NPKSetAppCompatFlag, NPKSetCryptProgramUseAlert, NPKSetDrvPath, NPKSetHook, NPKSetHookPause, NPKSetHookPlc, NPKSetInfoWindow, NPKSetKbdExtensionKeyLock, NPKSetKbdLock, NPKSetKeyMode, NPKSetSecOpt, NPKSetTargetWindow, NPKSetUseKeyMode, NPKSetUseMsgType, NPKUnregCrypt, NPKUnregisterCryptProgram, NPKUnregisterCryptProgramAll, NPKUnregisterCryptWindow, NPKUnregisterCryptWindowAll, _NPKRegisterCryptInterfaceFunc@16
packers (F-Prot): Aspack
CWSandbox info: http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=d21e8442873dc548eb23ba8b3d04e57f

ATENTION ATENÇÃO: VirusTotal é um serviço gratuito oferecido por Hispasec Sistemas. Não há garantias quanto à disponibilidade e continuidade desse serviço. Apesar da taxa de detecção proporcionada pelo uso de múltiplos mecanismos de antivírus ser muito superior àquela oferecida por um único produto, os resultados NÃO garantem a possibilidade de um arquivo ser inofensivo. Atualmente, não há qualquer solução que ofereça 100% de eficiência na detecção de vírus e arquivos maliciosos..

Outro arquivo