Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

Virustotal är en tjänst som analyserar misstänkta filer och underlättar upptäckandet av virus, worms, trojaner och alla olika sorters malware som upptäcks av antivirus program. Mer Information...

Fil svghost.exe mottagen 2008.06.23 14:52:38 (CET)
Närvarande status: genomförd
Resultat: 11/33 (33.33%)
Antivirus Version Senaste Uppdatering Resultat
AhnLab-V3 2008.6.22.0 2008.06.23 -
AntiVir 7.8.0.59 2008.06.23 -
Authentium 5.1.0.4 2008.06.21 -
Avast 4.8.1195.0 2008.06.23 -
AVG 7.5.0.516 2008.06.23 BackDoor.RBot.AS
BitDefender 7.2 2008.06.23 DeepScan:Generic.Malware.G!SI!!FLMWX!!Bg.E3293E47
CAT-QuickHeal 9.50 2008.06.20 Backdoor.Rbot.fsb
ClamAV 0.93.1 2008.06.23 PUA.Packed.Armadillo
DrWeb 4.44.0.09170 2008.06.23 -
eSafe 7.0.15.0 2008.06.23 -
eTrust-Vet 31.6.5897 2008.06.23 -
Ewido 4.0 2008.06.23 -
F-Prot 4.4.4.56 2008.06.21 -
F-Secure 7.60.13501.0 2008.06.20 Suspicious:W32/Malware!Gemini
Fortinet 3.14.0.0 2008.06.23 -
GData 2.0.7306.1023 2008.06.23 -
Ikarus T3.1.1.26.0 2008.06.23 Backdoor.IRCBot.ABSZ
Kaspersky 7.0.0.125 2008.06.23 -
McAfee 5322 2008.06.20 -
Microsoft 1.3604 2008.06.23 Backdoor:Win32/Rbot
NOD32v2 3208 2008.06.23 -
Norman 5.80.02 2008.06.20 -
Panda 9.0.0.4 2008.06.22 Suspicious file
Prevx1 V2 2008.06.23 Suspicious
Rising 20.50.02.00 2008.06.23 -
Sophos 4.30.0 2008.06.23 Sus/ComPack-C
Sunbelt 3.0.1153.1 2008.06.15 -
Symantec 10 2008.06.23 -
TheHacker 6.2.92.358 2008.06.21 -
TrendMicro 8.700.0.1004 2008.06.23 -
VBA32 3.12.6.8 2008.06.23 -
VirusBuster 4.5.11.0 2008.06.23 -
Webwasher-Gateway 6.6.2 2008.06.23 Virus.Win32.FileInfector.gen (suspicious)
Övrig information
File size: 946176 bytes
MD5...: cbfa903f7a4cbff62aceb56e43d83e62
SHA1..: 338d9d3d199b34ee1c1c1211a0e19333af306c42
SHA256: a727529ce2f331764e94593053893a61db485d688b1aea7dd9cc753411d9c539
SHA512: bcacf08a00b51d22566147f6a0d6a55e3bc87c6f4876850a2ccec7f4dbe62857
756a62db8fb5c818ee9393c0a9f571cdc94886059d9456812126bf01b16f0339
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x4b7000
timedatestamp.....: 0x485c1eb7 (Fri Jun 20 21:18:47 2008)
machinetype.......: 0x14c (I386)

( 8 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x26b96 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.rdata 0x28000 0xd592 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.data 0x36000 0x30a20 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.text1 0x67000 0x50000 0x43000 7.97 f729c94e5d6451c17b86085e1346dfd9
.adata 0xb7000 0x10000 0xd000 7.01 1038710a721073c352871d7b8aef5713
.data1 0xc7000 0x20000 0xb000 3.74 3d1f9b4053f55d464dc99070e1764141
.pdata 0xe7000 0x90000 0x8a000 8.00 01e9520db40d4d8bebc4ab52f4fab009
.rsrc 0x177000 0x5b000 0x1000 0.50 1b19e9bed5126f945766ecb9072a1d55

( 3 imports )
> KERNEL32.dll: CreateThread, GlobalUnlock, GlobalLock, GlobalAlloc, GetTickCount, WideCharToMultiByte, IsBadReadPtr, GlobalAddAtomA, GlobalAddAtomW, GetModuleHandleA, GlobalFree, GlobalGetAtomNameA, GlobalDeleteAtom, GlobalGetAtomNameW, FreeConsole, GetEnvironmentVariableA, VirtualProtect, VirtualAlloc, GetProcAddress, GetLastError, LoadLibraryA, SetLastError, SetThreadPriority, GetCurrentThread, CreateProcessA, GetCommandLineA, GetStartupInfoA, SetEnvironmentVariableA, ReleaseMutex, WaitForSingleObject, CreateMutexA, OpenMutexA, GetCurrentThreadId, CreateFileA, FindClose, FindFirstFileA, FindFirstFileW, VirtualQueryEx, GetExitCodeProcess, ReadProcessMemory, UnmapViewOfFile, ContinueDebugEvent, SetThreadContext, GetThreadContext, WaitForDebugEvent, SuspendThread, DebugActiveProcess, ResumeThread, CreateProcessW, GetCommandLineW, GetStartupInfoW, CloseHandle, DuplicateHandle, GetCurrentProcess, CreateFileMappingA, VirtualProtectEx, WriteProcessMemory, ExitProcess, FlushFileBuffers, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, MultiByteToWideChar, LCMapStringA, HeapSize, HeapReAlloc, QueryPerformanceCounter, VirtualFree, HeapCreate, HeapDestroy, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, RtlUnwind, DeleteCriticalSection, GetStdHandle, WriteFile, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, Sleep, EnterCriticalSection, LeaveCriticalSection, GetVersionExA, InitializeCriticalSection, GetCurrentProcessId, GetModuleFileNameW, GetShortPathNameW, GetModuleFileNameA, MapViewOfFile, GetShortPathNameA, GetSystemTimeAsFileTime, HeapFree, HeapAlloc, GetProcessHeap, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage
> USER32.dll: GetDesktopWindow, MoveWindow, SetPropA, EnumThreadWindows, GetPropA, GetMessageA, GetSystemMetrics, SetTimer, GetAsyncKeyState, KillTimer, BeginPaint, EndPaint, SetWindowTextA, GetDlgItem, CreateDialogIndirectParamA, ShowWindow, UpdateWindow, LoadStringA, LoadStringW, FindWindowA, WaitForInputIdle, MessageBoxA, InSendMessage, UnpackDDElParam, FreeDDElParam, DefWindowProcA, LoadCursorA, RegisterClassW, CreateWindowExW, RegisterClassA, CreateWindowExA, GetWindowThreadProcessId, SendMessageW, SendMessageA, PeekMessageA, TranslateMessage, DispatchMessageA, EnumWindows, IsWindowUnicode, PackDDElParam, PostMessageW, PostMessageA, IsWindow, DestroyWindow
> GDI32.dll: CreateDCA, CreateDIBitmap, CreateCompatibleDC, SelectObject, SelectPalette, RealizePalette, BitBlt, DeleteDC, DeleteObject, CreatePalette

( 0 exports )
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=7C918AC200B63083700C0ED4F3105B0038FE9B01
packers (Kaspersky): Armadillo
packers (F-Prot): Armadillo

ATENTION OBSERVERA: VirusTotal är en gratis tjänst av Hispasec Sistemas. Det är inga garantier på tillgängligheten eller uppföljandet av denna tjänst. Även fast upptäckandet av virus med användandet av flertal antivirus program är mer överlägsen användandet av endast ett, garanterar INTE dessa resultat om en fil är helt riskfri. För närvarande finns det ingen lösning som erbjuder 100% effektivitet för att uppäcka virus och malware.

En ytterligare fil