Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

Virustotal þüpheli dosyalarý inceleyen çevirimiçi bir servistir. ve virüslerin, trojanlarýn, casus yazýlýmlarýn ve çeþitli kötü niyetli dosyalarýn antivirüs programlarýnca kolay bir þekilde bulunmasýna yardým eder. Daha fazla bilgi için týklayýn...

Dosya svchost.exe alýndýðý zaman 2009.10.26 21:47:25 (UTC)
şimdiki Durumu: tamamlandý
Sonuç: 37/41 (90.24%)
Antivirüs Versiyon Son Güncelleştirme Sonuç
a-squared 4.5.0.41 2009.10.26 Trojan-Spy.Ardamax.J!IK
AhnLab-V3 5.0.0.2 2009.10.26 Win-Trojan/Xema.variant
AntiVir 7.9.1.44 2009.10.26 TR/Ardamax.AE.19
Antiy-AVL 2.0.3.7 2009.10.26 Trojan/Win32.Ardamax.gen
Authentium 5.1.2.4 2009.10.26 W32/Ardamax.J
Avast 4.8.1351.0 2009.10.26 Win32:Trojan-gen
AVG 8.5.0.423 2009.10.26 Ardamax.YE
BitDefender 7.2 2009.10.26 Trojan.Generic.1813812
CAT-QuickHeal 10.00 2009.10.26 Trojan.Ardamax.ae
ClamAV 0.94.1 2009.10.26 Trojan.Spy.Ardamax-34
Comodo 2742 2009.10.26 ApplicUnsaf.Win32.Monitor.Ardamax.~A
DrWeb 5.0.0.12182 2009.10.26 -
eSafe 7.0.17.0 2009.10.25 Win32.Banker
eTrust-Vet 35.1.7083 2009.10.26 Win32/Armax.G
F-Prot 4.5.1.85 2009.10.26 W32/Ardamax.J
F-Secure 9.0.15370.0 2009.10.22 Trojan.Generic.1813812
Fortinet 3.120.0.0 2009.10.26 W32/Ardam.OST!tr.klog
GData 19 2009.10.26 Trojan.Generic.1813812
Ikarus T3.1.1.72.0 2009.10.26 Trojan-Spy.Ardamax.J
Jiangmin 11.0.800 2009.10.26 SpyWare.Monitor.Ardamax.b
K7AntiVirus 7.10.879 2009.10.24 not-a-virus:Monitor.Win32.Ardamax
Kaspersky 7.0.0.125 2009.10.26 not-a-virus:Monitor.Win32.Ardamax.ae
McAfee 5783 2009.10.26 Keylog-Ardamax.dll
McAfee+Artemis 5783 2009.10.26 Keylog-Ardamax.dll
McAfee-GW-Edition 6.8.5 2009.10.26 Heuristic.LooksLike.Win32.Spyware.J
Microsoft 1.5202 2009.10.26 MonitoringTool:Win32/Ardamax
NOD32 4545 2009.10.26 Win32/KeyLogger.Ardamax
Norman 6.03.02 2009.10.26 W32/Ardamax.EFZ
nProtect 2009.1.8.0 2009.10.26 -
Panda 10.0.2.2 2009.10.26 Application/Ardamax
PCTools 4.4.2.0 2009.10.19 Application.Ardamax!ct
Prevx 3.0 2009.10.26 High Risk Cloaked Malware
Rising 21.53.04.00 2009.10.26 Trojan.Spy.Win32.Ardamax.dlm
Sophos 4.46.0 2009.10.26 Ardamax
Sunbelt 3.2.1858.2 2009.10.26 Trojan.Win32.Generic!BT
Symantec 1.4.4.12 2009.10.26 Spyware.Ardakey
TheHacker 6.5.0.2.054 2009.10.26 Aplicacion/Ardamax.ae
TrendMicro 8.950.0.1094 2009.10.26 -
VBA32 3.12.10.11 2009.10.26 -
ViRobot 2009.10.26.2005 2009.10.26 Not_a_virus:Monitor.Ardamax.525312
VirusBuster 4.6.5.0 2009.10.26 TrojanSpy.Ardamax.WQ
Ýlave Bilgiler
File size: 525312 bytes
MD5   : 0c7a714b8e1d2ead2afc90dcc43bbe18
SHA1  : 66736613f22771f5da5606ed8c80b572b3f5c103
SHA256: 800bdf00e09f302a17e22d26dffbea037e3c077ef9f6d1d585c114f079397a9e
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x2A946
timedatestamp.....: 0x478A7522 (Sun Jan 13 21:31:30 2008)
machinetype.......: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x5B3F5 0x5B400 6.66 c60230f5f8e6565471dfe5fd372cf28d
.rdata 0x5D000 0xD930 0xDA00 5.92 8e8d71c636deee97bd958455bfaddf97
.data 0x6B000 0x4EC0 0x2200 3.65 71e28126df809f952ecdc911199a1741
.rsrc 0x70000 0x14F8C 0x15000 4.74 c6d3184f8572a187b505a7022e946494

( 12 imports )

> comctl32.dll: ImageList_Destroy, ImageList_Create, CreatePropertySheetPageW, PropertySheetW, _TrackMouseEvent, DestroyPropertySheetPage, ImageList_LoadImageW, ImageList_Draw, InitCommonControlsEx, ImageList_ReplaceIcon, ImageList_GetImageCount
> comdlg32.dll: GetSaveFileNameW, GetOpenFileNameW
> gdi32.dll: CreateDIBSection, SetBkMode, CreateCompatibleDC, CreateRectRgnIndirect, SelectObject, CreateBitmap, SetBkColor, BitBlt, ExcludeClipRect, CreateFontW, GetObjectW, CreateFontIndirectW, GetDIBits, SetPolyFillMode, RealizePalette, CombineRgn, DeleteDC, DeleteObject, GetTextMetricsW, SetTextColor, CreateCompatibleBitmap, GetStockObject, CreatePatternBrush, CreateSolidBrush, GetTextExtentPoint32W, CreatePen, SetBrushOrgEx, TextOutW, Polygon, PatBlt
> kernel32.dll: LCMapStringW, GetThreadLocale, IsProcessorFeaturePresent, InterlockedCompareExchange, SetEnvironmentVariableA, CompareStringA, Sleep, SetProcessPriorityBoost, EnterCriticalSection, lstrcpyW, MoveFileExW, ExitProcess, CloseHandle, GetCurrentProcessId, CompareStringW, WriteFile, InitializeCriticalSection, lstrlenW, CreateMutexW, CreateFileW, InterlockedIncrement, GetLastError, SetProcessWorkingSetSize, RaiseException, lstrcmpiW, GetCurrentProcess, SizeofResource, InterlockedDecrement, LoadResource, GetVersionExW, DeleteFileW, lstrlenA, FindResourceW, GetDateFormatW, SetLastError, lstrcpyA, LoadLibraryExW, VirtualAlloc, lstrcmpA, VirtualFree, DeleteCriticalSection, GetUserDefaultLangID, CreateThread, SetThreadPriority, lstrcmpW, ResumeThread, LockResource, GlobalLock, GetLocalTime, GlobalUnlock, SystemTimeToFileTime, LoadLibraryW, CompareFileTime, FindResourceExW, FlushInstructionCache, GetCurrentThreadId, GetVersion, GetModuleHandleW, lstrcatW, MultiByteToWideChar, GetProcAddress, GetSystemTimeAsFileTime, GetModuleFileNameW, WideCharToMultiByte, lstrcpynW, RemoveDirectoryW, GetShortPathNameW, FreeLibrary, CreateDirectoryW, GetEnvironmentVariableW, LeaveCriticalSection, OpenProcess, SetFileAttributesW, SetPriorityClass, GetCurrentThread, EnumResourceNamesW, LocalAlloc, LocalReAlloc, ReadFile, BeginUpdateResourceW, UpdateResourceW, EndUpdateResourceW, SetFilePointer, LocalFree, Module32FirstW, Module32NextW, Process32FirstW, Process32NextW, GetWindowsDirectoryW, GetFileSize, CreateFileMappingW, MapViewOfFile, UnmapViewOfFile, SetEndOfFile, FormatMessageW, CreateToolhelp32Snapshot, OutputDebugStringW, GetTimeZoneInformation, GetComputerNameW, lstrcmpiA, GetTimeFormatW, GetTickCount, CopyFileW, GetTempFileNameW, GetTempPathW, FileTimeToLocalFileTime, FileTimeToSystemTime, GetFileAttributesW, MoveFileW, HeapFree, HeapAlloc, HeapReAlloc, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetVersionExA, GetProcessHeap, GetStartupInfoW, HeapDestroy, HeapCreate, GetModuleHandleA, GetStdHandle, GetModuleFileNameA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, HeapSize, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, GetTimeFormatA, GetDateFormatA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, GetCommandLineW, SetHandleCount, GetFileType, GetStartupInfoA, QueryPerformanceCounter, RtlUnwind, InterlockedExchange, LoadLibraryA, GetConsoleCP, GetConsoleMode, GetLocaleInfoA, LCMapStringA, VirtualQuery, GetStringTypeA, GetStringTypeW, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA, FlushFileBuffers
> mpr.dll: WNetCancelConnection2W, WNetAddConnection2W
> ole32.dll: CoTaskMemRealloc, CoInitialize, CoUninitialize, CoTaskMemFree, CoCreateInstance, CoTaskMemAlloc
> oleaut32.dll: -, -
> shell32.dll: DoEnvironmentSubstW, Shell_NotifyIconW, SHFileOperationW, SHGetPathFromIDListW, SHGetSpecialFolderLocation, ShellExecuteW, SHChangeNotify, ExtractIconW, ShellExecuteExW
> shlwapi.dll: UrlUnescapeW, StrDupW, PathRemoveFileSpecW, PathFileExistsW, PathRemoveExtensionW, PathFindExtensionW, PathFindFileNameW, StrFormatByteSizeW, StrCmpIW, PathStripPathW
> user32.dll: BeginPaint, GetWindow, LoadIconW, InvalidateRect, SetDlgItemInt, GetDlgItem, EnumWindows, CallWindowProcW, WindowFromPoint, FrameRect, PeekMessageW, KillTimer, SetRectEmpty, UnhookWindowsHookEx, CopyRect, EndPaint, GetParent, GetMessagePos, PtInRect, SendMessageTimeoutW, FindWindowW, OffsetRect, GetFocus, GetDlgItemTextW, RegisterHotKey, DrawEdge, UnregisterHotKey, PostMessageW, SetWindowLongW, MessageBeep, TrackPopupMenuEx, SetFocus, GetMonitorInfoW, MonitorFromPoint, LoadImageW, ReleaseDC, SetClipboardViewer, DestroyWindow, GetWindowTextLengthW, GetDlgItemInt, CharNextW, SetCursor, CallNextHookEx, GetSystemMetrics, ChangeClipboardChain, GetWindowTextW, LoadCursorW, GetKeyState, SetWindowsHookExW, GetSysColor, IsClipboardFormatAvailable, SendMessageW, DrawTextW, GetSysColorBrush, OpenClipboard, DdeInitializeW, SystemParametersInfoW, DdeCreateStringHandleW, DdeConnect, SetDlgItemTextW, DdeClientTransaction, GetClipboardData, DdeAccessData, GetClassLongW, DispatchMessageW, IsMenu, GetClientRect, TranslateMessage, DestroyMenu, SetWindowPos, GetWindowLongW, GetClassInfoExW, GetMessageW, DeleteMenu, CloseClipboard, ReleaseCapture, DdeDisconnect, CheckMenuItem, IsWindowEnabled, EndDialog, DdeFreeStringHandle, IsWindow, GetMenu, InflateRect, GetCapture, DdeUninitialize, GetSubMenu, GetMenuItemCount, ScrollWindow, PostQuitMessage, MapWindowPoints, TrackPopupMenu, AdjustWindowRectEx, DrawFrameControl, SetCapture, SetWindowTextW, GetMenuItemInfoW, MoveWindow, RegisterWindowMessageW, GetWindowThreadProcessId, FillRect, EnableWindow, SetMenuItemInfoW, GetActiveWindow, CharLowerW, GetWindowRect, GetWindowModuleFileNameW, GetDesktopWindow, ModifyMenuW, DestroyIcon, UpdateWindow, wsprintfW, MapVirtualKeyW, GetKeyNameTextW, UnregisterClassA, GetCursorPos, GetForegroundWindow, ShowWindow, GetDlgCtrlID, GetWindowDC, SetForegroundWindow, SetTimer, MessageBoxW, GetClassNameW, GetDC, LoadMenuW, IsWindowVisible, GetAncestor, ScreenToClient, DefWindowProcW, DrawFocusRect, DialogBoxParamW, RegisterClassExW, CreateWindowExW
> wininet.dll: InternetGetLastResponseInfoW, InternetOpenW, InternetCloseHandle, FtpPutFileW, FtpCreateDirectoryW, FtpRemoveDirectoryW, FtpDeleteFileW, FtpSetCurrentDirectoryW, InternetConnectW
> ws2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -

( 0 exports )
TrID  : File type identification
Generic Win/DOS Executable (49.9%)
DOS Executable Generic (49.8%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
ThreatExpert: http://www.threatexpert.com/report.aspx?md5=0c7a714b8e1d2ead2afc90dcc43bbe18
ssdeep: 6144:tkIahY1erZBfqalnScbMpmiYTEhkr6km7iADo/+V0NM/CAfr:tqY1er/nScw/uekrtAXj
sigcheck: publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=14BF1CA60053856F04DB080ADFE75C0030997B41
PEiD  : -
CWSandbox: http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=0c7a714b8e1d2ead2afc90dcc43bbe18
RDS   : NSRL Reference Data Set
-

ATENTION UYARI: VirusTotal Hispastec Sistemas tarafýndan geliştirilen bir servistir. Bu servisin devam edeceði bir garanti yoktur. Buradaki sonuçlar dosyanýn ZARARLI YAZILIM TAşIDIÐINI GARANTÝ ETMEZ.

Başka bir dosya