Résultat: 12/35 (34.29%)

AntivirusVersionDernière mise à jourRésultat AhnLab-V3 - - - AntiVir - - DR/Tool.Reboot.F.133 Authentium - - - Avast - - - AVG - - - BitDefender - - - CAT-QuickHeal - - - ClamAV - - Trojan.Killproc-1 DrWeb - - Tool.Prockill eSafe - - Suspicious File eTrust-Vet - - - Ewido - - - F-Prot - - - Fortinet - - Misc/PrcViewer GData - - - Ikarus - - - K7AntiVirus - - - Kaspersky - - not-a-virus:RiskTool.Win32.Reboot.f McAfee - - potentially unwanted program PrcViewer Microsoft - - - NOD32v2 - - Win32/PrcView Norman - - - Panda - - Application/SmithFraudFix.A PCTools - - - Prevx1 - - - Rising - - - Sophos - - Sus/Behav-1004 Sunbelt - - - Symantec - - - TheHacker - - - TrendMicro - - PAK_Generic.001 VBA32 - - - ViRobot - - - VirusBuster - - - Webwasher-Gateway - - Trojan.Dropper.Tool.Reboot.F.133 Information additionnelle MD5: 9e45b2c7f8efedf87215601d92482461 SHA1: 1383ceafe760c73a6b3a78d272a3be15705bfec2 SHA256: 7ca5ed568a0e86adf307ccdbe5fff13897bc39153e10c5c300ffab932d1e74bb SHA512: 42f6b699dcc3d806612c4feb2a03dd5293285ba6382473255baa00590fa222290290c8f54b271f6b4cf5cfcd97bdc3cf02cbf30720d8cdb6f21ea8b75c90b852

Fichier SmitfraudFix.exe reçu le 2008.08.30 10:40:08 (CET)
Situation actuelle: terminé

AntivirusVersionDernière mise à jourRésultat AhnLab-V3 2008.8.29.0 2008.08.29 - AntiVir 7.8.1.23 2008.08.29 DR/Tool.Reboot.F.133 Authentium 5.1.0.4 2008.08.30 - Avast 4.8.1195.0 2008.08.29 - AVG 8.0.0.161 2008.08.29 - BitDefender 7.2 2008.08.30 Adware.Rogue.IEAntivirus.B CAT-QuickHeal 9.50 2008.08.29 - ClamAV 0.93.1 2008.08.30 Trojan.Killproc-1 DrWeb 4.44.0.09170 2008.08.29 Tool.Prockill eSafe 7.0.17.0 2008.08.28 Suspicious File eTrust-Vet 31.6.6057 2008.08.29 - Ewido 4.0 2008.08.29 - F-Prot 4.4.4.56 2008.08.29 - F-Secure 7.60.13501.0 2008.08.30 Rogue:W32/IeDefender.CT Fortinet 3.14.0.0 2008.08.30 Misc/PrcViewer GData 19 2008.08.30 - Ikarus T3.1.1.34.0 2008.08.30 - K7AntiVirus 7.10.432 2008.08.29 - Kaspersky 7.0.0.125 2008.08.30 not-a-virus:RiskTool.Win32.Reboot.f McAfee 5373 2008.08.29 potentially unwanted program PrcViewer Microsoft 1.3807 2008.08.25 - NOD32v2 3401 2008.08.30 Win32/PrcView Norman 5.80.02 2008.08.29 - Panda 9.0.0.4 2008.08.29 Application/SmithFraudFix.A PCTools 4.4.2.0 2008.08.29 - Prevx1 V2 2008.08.30 - Rising 20.59.51.00 2008.08.30 - Sophos 4.33.0 2008.08.30 Sus/Behav-1004 Sunbelt 3.1.1592.1 2008.08.30 - Symantec 10 2008.08.30 - TheHacker 6.3.0.6.068 2008.08.30 - TrendMicro 8.700.0.1004 2008.08.29 PAK_Generic.001 VBA32 3.12.8.4 2008.08.29 - ViRobot 2008.8.29.1355 2008.08.29 - VirusBuster 4.5.11.0 2008.08.29 - Webwasher-Gateway 6.6.2 2008.08.29 Trojan.Dropper.Tool.Reboot.F.133 Information additionnelle File size: 1574417 bytes MD5...: 9e45b2c7f8efedf87215601d92482461 SHA1..: 1383ceafe760c73a6b3a78d272a3be15705bfec2 SHA256: 7ca5ed568a0e86adf307ccdbe5fff13897bc39153e10c5c300ffab932d1e74bb SHA512: 42f6b699dcc3d806612c4feb2a03dd5293285ba6382473255baa00590fa22229
0290c8f54b271f6b4cf5cfcd97bdc3cf02cbf30720d8cdb6f21ea8b75c90b852 PEiD..: - TrID..: File type identification
WinRAR Self Extracting archive (96.2%)
Win32 Executable Generic (1.5%)
Win32 Dynamic Link Library (generic) (1.4%)
Generic Win/DOS Executable (0.3%)
DOS Executable Generic (0.3%) PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x401000
timedatestamp.....: 0x46f268e6 (Thu Sep 20 12:34:46 2007)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x14000 0x13800 6.47 8c499086717691066d921075ed5bdb09
.data 0x15000 0x7000 0xa00 4.91 0cb811e47f78b5404a658fb36b591857
.idata 0x1c000 0x1000 0x1000 5.12 8bf175092a70a21f11fd06cc4087c7d0
.rsrc 0x1d000 0x9258 0x9400 4.58 1c73b6bc39f700741b888f3bca51f057

( 8 imports )
> ADVAPI32.DLL: AdjustTokenPrivileges, LookupPrivilegeValueA, OpenProcessToken, RegCloseKey, RegCreateKeyExA, RegOpenKeyExA, RegQueryValueExA, RegSetValueExA, SetFileSecurityA, SetFileSecurityW
> KERNEL32.DLL: CloseHandle, CompareStringA, CreateDirectoryA, CreateDirectoryW, CreateFileA, CreateFileW, DeleteFileA, DeleteFileW, DosDateTimeToFileTime, ExitProcess, ExpandEnvironmentStringsA, FileTimeToLocalFileTime, FileTimeToSystemTime, FindClose, FindFirstFileA, FindFirstFileW, FindNextFileA, FindNextFileW, FindResourceA, FreeLibrary, GetCPInfo, GetCommandLineA, GetCurrentDirectoryA, GetCurrentProcess, GetDateFormatA, GetFileAttributesA, GetFileAttributesW, GetFileType, GetFullPathNameA, GetLastError, GetLocaleInfoA, GetModuleFileNameA, GetModuleHandleA, GetNumberFormatA, GetProcAddress, GetProcessHeap, GetStdHandle, GetTempPathA, GetTickCount, GetTimeFormatA, GetVersionExA, GlobalAlloc, HeapAlloc, HeapFree, HeapReAlloc, IsDBCSLeadByte, LoadLibraryA, LocalFileTimeToFileTime, MoveFileA, MoveFileExA, MultiByteToWideChar, ReadFile, SetCurrentDirectoryA, SetEndOfFile, SetEnvironmentVariableA, SetFileAttributesA, SetFileAttributesW, SetFilePointer, SetFileTime, SetLastError, Sleep, SystemTimeToFileTime, WaitForSingleObject, WideCharToMultiByte, WriteFile, lstrcmpiA, lstrlenA
> COMCTL32.DLL: -
> COMDLG32.DLL: CommDlgExtendedError, GetOpenFileNameA, GetSaveFileNameA
> GDI32.DLL: DeleteObject
> SHELL32.DLL: SHBrowseForFolderA, SHChangeNotify, SHFileOperationA, SHGetFileInfoA, SHGetMalloc, SHGetSpecialFolderLocation, ShellExecuteExA, SHGetPathFromIDListA
> USER32.DLL: CharToOemA, CharToOemBuffA, CharUpperA, CopyRect, CreateWindowExA, DefWindowProcA, DestroyIcon, DestroyWindow, DialogBoxParamA, DispatchMessageA, EnableWindow, EndDialog, FindWindowExA, GetClassNameA, GetClientRect, GetDlgItem, GetDlgItemTextA, GetMessageA, GetParent, GetSysColor, GetSystemMetrics, GetWindow, GetWindowLongA, GetWindowRect, GetWindowTextA, IsWindow, IsWindowVisible, LoadBitmapA, LoadCursorA, LoadIconA, LoadStringA, MapWindowPoints, MessageBoxA, OemToCharA, OemToCharBuffA, PeekMessageA, PostMessageA, RegisterClassExA, SendDlgItemMessageA, SendMessageA, SetDlgItemTextA, SetFocus, SetMenu, SetWindowLongA, SetWindowPos, SetWindowTextA, ShowWindow, TranslateMessage, UpdateWindow, WaitForInputIdle, wsprintfA, wvsprintfA
> OLE32.DLL: CLSIDFromString, CoCreateInstance, CreateStreamOnHGlobal, OleInitialize, OleUninitialize

( 0 exports )
packers (Kaspersky): PE_Patch.UPX, UPX, PE_Patch.UPX, UPX, PE_Patch.UPX, UPX, PE_Patch.UPX, UPX, PE_Patch.UPX, UPX, PE_Patch.UPX, UPX, UPX, UPX, UPX, UPX, UPX, PE_Patch.UPX, UPX, UPX, PE_Patch.UPX, UPX packers (F-Prot): RAR, UPX