Suomi | ihMdI | | עברית | | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

VirusTotal je servis, ki analizira sumljive datoteke in omogoča hitro prepoznavanje virusov, črvov, trojanov in vseh ostalih zlonamernih programov katere prepoznajo antivirusni programi. Več informacij...

Datoteka svghost.exe prejeto 2008.06.23 14:52:38 (CET)
Trenutni status: končano
Rezultati: 11/33 (33.33%)
Antivirus Verzija Zadnja posodobitev Rezultat
AhnLab-V3 2008.6.22.0 2008.06.23 -
AntiVir 7.8.0.59 2008.06.23 -
Authentium 5.1.0.4 2008.06.21 -
Avast 4.8.1195.0 2008.06.23 -
AVG 7.5.0.516 2008.06.23 BackDoor.RBot.AS
BitDefender 7.2 2008.06.23 DeepScan:Generic.Malware.G!SI!!FLMWX!!Bg.E3293E47
CAT-QuickHeal 9.50 2008.06.20 Backdoor.Rbot.fsb
ClamAV 0.93.1 2008.06.23 PUA.Packed.Armadillo
DrWeb 4.44.0.09170 2008.06.23 -
eSafe 7.0.15.0 2008.06.23 -
eTrust-Vet 31.6.5897 2008.06.23 -
Ewido 4.0 2008.06.23 -
F-Prot 4.4.4.56 2008.06.21 -
F-Secure 7.60.13501.0 2008.06.20 Suspicious:W32/Malware!Gemini
Fortinet 3.14.0.0 2008.06.23 -
GData 2.0.7306.1023 2008.06.23 -
Ikarus T3.1.1.26.0 2008.06.23 Backdoor.IRCBot.ABSZ
Kaspersky 7.0.0.125 2008.06.23 -
McAfee 5322 2008.06.20 -
Microsoft 1.3604 2008.06.23 Backdoor:Win32/Rbot
NOD32v2 3208 2008.06.23 -
Norman 5.80.02 2008.06.20 -
Panda 9.0.0.4 2008.06.22 Suspicious file
Prevx1 V2 2008.06.23 Suspicious
Rising 20.50.02.00 2008.06.23 -
Sophos 4.30.0 2008.06.23 Sus/ComPack-C
Sunbelt 3.0.1153.1 2008.06.15 -
Symantec 10 2008.06.23 -
TheHacker 6.2.92.358 2008.06.21 -
TrendMicro 8.700.0.1004 2008.06.23 -
VBA32 3.12.6.8 2008.06.23 -
VirusBuster 4.5.11.0 2008.06.23 -
Webwasher-Gateway 6.6.2 2008.06.23 Virus.Win32.FileInfector.gen (suspicious)
Dodatne informacije
File size: 946176 bytes
MD5...: cbfa903f7a4cbff62aceb56e43d83e62
SHA1..: 338d9d3d199b34ee1c1c1211a0e19333af306c42
SHA256: a727529ce2f331764e94593053893a61db485d688b1aea7dd9cc753411d9c539
SHA512: bcacf08a00b51d22566147f6a0d6a55e3bc87c6f4876850a2ccec7f4dbe62857
756a62db8fb5c818ee9393c0a9f571cdc94886059d9456812126bf01b16f0339
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x4b7000
timedatestamp.....: 0x485c1eb7 (Fri Jun 20 21:18:47 2008)
machinetype.......: 0x14c (I386)

( 8 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x26b96 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.rdata 0x28000 0xd592 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.data 0x36000 0x30a20 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.text1 0x67000 0x50000 0x43000 7.97 f729c94e5d6451c17b86085e1346dfd9
.adata 0xb7000 0x10000 0xd000 7.01 1038710a721073c352871d7b8aef5713
.data1 0xc7000 0x20000 0xb000 3.74 3d1f9b4053f55d464dc99070e1764141
.pdata 0xe7000 0x90000 0x8a000 8.00 01e9520db40d4d8bebc4ab52f4fab009
.rsrc 0x177000 0x5b000 0x1000 0.50 1b19e9bed5126f945766ecb9072a1d55

( 3 imports )
> KERNEL32.dll: CreateThread, GlobalUnlock, GlobalLock, GlobalAlloc, GetTickCount, WideCharToMultiByte, IsBadReadPtr, GlobalAddAtomA, GlobalAddAtomW, GetModuleHandleA, GlobalFree, GlobalGetAtomNameA, GlobalDeleteAtom, GlobalGetAtomNameW, FreeConsole, GetEnvironmentVariableA, VirtualProtect, VirtualAlloc, GetProcAddress, GetLastError, LoadLibraryA, SetLastError, SetThreadPriority, GetCurrentThread, CreateProcessA, GetCommandLineA, GetStartupInfoA, SetEnvironmentVariableA, ReleaseMutex, WaitForSingleObject, CreateMutexA, OpenMutexA, GetCurrentThreadId, CreateFileA, FindClose, FindFirstFileA, FindFirstFileW, VirtualQueryEx, GetExitCodeProcess, ReadProcessMemory, UnmapViewOfFile, ContinueDebugEvent, SetThreadContext, GetThreadContext, WaitForDebugEvent, SuspendThread, DebugActiveProcess, ResumeThread, CreateProcessW, GetCommandLineW, GetStartupInfoW, CloseHandle, DuplicateHandle, GetCurrentProcess, CreateFileMappingA, VirtualProtectEx, WriteProcessMemory, ExitProcess, FlushFileBuffers, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, MultiByteToWideChar, LCMapStringA, HeapSize, HeapReAlloc, QueryPerformanceCounter, VirtualFree, HeapCreate, HeapDestroy, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, RtlUnwind, DeleteCriticalSection, GetStdHandle, WriteFile, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, Sleep, EnterCriticalSection, LeaveCriticalSection, GetVersionExA, InitializeCriticalSection, GetCurrentProcessId, GetModuleFileNameW, GetShortPathNameW, GetModuleFileNameA, MapViewOfFile, GetShortPathNameA, GetSystemTimeAsFileTime, HeapFree, HeapAlloc, GetProcessHeap, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage
> USER32.dll: GetDesktopWindow, MoveWindow, SetPropA, EnumThreadWindows, GetPropA, GetMessageA, GetSystemMetrics, SetTimer, GetAsyncKeyState, KillTimer, BeginPaint, EndPaint, SetWindowTextA, GetDlgItem, CreateDialogIndirectParamA, ShowWindow, UpdateWindow, LoadStringA, LoadStringW, FindWindowA, WaitForInputIdle, MessageBoxA, InSendMessage, UnpackDDElParam, FreeDDElParam, DefWindowProcA, LoadCursorA, RegisterClassW, CreateWindowExW, RegisterClassA, CreateWindowExA, GetWindowThreadProcessId, SendMessageW, SendMessageA, PeekMessageA, TranslateMessage, DispatchMessageA, EnumWindows, IsWindowUnicode, PackDDElParam, PostMessageW, PostMessageA, IsWindow, DestroyWindow
> GDI32.dll: CreateDCA, CreateDIBitmap, CreateCompatibleDC, SelectObject, SelectPalette, RealizePalette, BitBlt, DeleteDC, DeleteObject, CreatePalette

( 0 exports )
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=7C918AC200B63083700C0ED4F3105B0038FE9B01
packers (Kaspersky): Armadillo
packers (F-Prot): Armadillo

ATENTION POZOR: VirusTotal je brezplačen servis, ki ga ponuja Hispasec Sistemas. Ni nobenih zagotovil glede razpoložljivosti in stalnosti tega servisa. čeprav je stopnja prepoznavanja nevarnih datotek zaradi uporabe večjega števila antivirusnih programov veliko boljša, kot v primeru uporabe samo enega antivirusnega programa, ti rezultati vseeno NE zagotavljajo varnosti uporabe pregledanih datotek. Trenutno ne obstaja nobena taka rešitev, ki bi nudila 100% učinkovitost pri prepoznavanju virusov in ostalih zlonamernih programov.

Še ena datoteka