Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

VirusTotal 是一款可疑文件分析服务, 通过各种知名反病毒引擎, 对您所上传的文件进行检测, 以判断文件是否被病毒, 蠕虫, 木马, 以及各类恶意软件感染. 查看详细信息...

文件 HookAPINT.dll 接收于 2009.09.15 15:26:16 (UTC)
当前状态: 完成
结果: 9/41 (21.95%)
反病毒引擎 版本 最后更新 扫描结果
a-squared 4.5.0.24 2009.09.15 Trojan-Dropper.Agent!IK
AhnLab-V3 5.0.0.2 2009.09.15 -
AntiVir 7.9.1.14 2009.09.15 HEUR/Malware
Antiy-AVL 2.0.3.7 2009.09.15 -
Authentium 5.1.2.4 2009.09.15 -
Avast 4.8.1351.0 2009.09.14 -
AVG 8.5.0.412 2009.09.15 -
BitDefender 7.2 2009.09.15 -
CAT-QuickHeal 10.00 2009.09.15 -
ClamAV 0.94.1 2009.09.15 -
Comodo 2326 2009.09.15 -
DrWeb 5.0.0.12182 2009.09.15 -
eSafe 7.0.17.0 2009.09.15 -
eTrust-Vet 31.6.6738 2009.09.15 -
F-Prot 4.5.1.85 2009.09.15 -
F-Secure 8.0.14470.0 2009.09.15 -
Fortinet 3.120.0.0 2009.09.15 -
GData 19 2009.09.15 -
Ikarus T3.1.1.72.0 2009.09.15 Trojan-Dropper.Agent
Jiangmin 11.0.800 2009.09.15 Trojan/Agent.cjhu
K7AntiVirus 7.10.845 2009.09.15 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2009.09.15 -
McAfee 5741 2009.09.14 -
McAfee+Artemis 5741 2009.09.14 Artemis!EAE0D15DA77E
McAfee-GW-Edition 6.8.5 2009.09.15 Heuristic.Malware
Microsoft 1.5005 2009.09.15 -
NOD32 4427 2009.09.15 -
Norman 6.01.09 2009.09.15 -
nProtect 2009.1.8.0 2009.09.15 -
Panda 10.0.2.2 2009.09.14 -
PCTools 4.4.2.0 2009.09.14 -
Prevx 3.0 2009.09.15 -
Rising 21.47.14.00 2009.09.15 -
Sophos 4.45.0 2009.09.15 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.09.15 -
Symantec 1.4.4.12 2009.09.15 -
TheHacker 6.3.4.4.404 2009.09.15 -
TrendMicro 8.950.0.1094 2009.09.15 -
VBA32 3.12.10.10 2009.09.14 -
ViRobot 2009.9.15.1937 2009.09.15 -
VirusBuster 4.6.5.0 2009.09.15 Trojan.Agent.LNAR
附加信息
File size: 98304 bytes
MD5   : eae0d15da77e5e1224d9491994b84800
SHA1  : 8ade040ceb2b9af6e6388a80b3dd3bb40758288f
SHA256: 0e57beda8176d3cc0cf5e6f7d7fa3388b5af701f1e9699d9e80cc5b325812eb7
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x5214
timedatestamp.....: 0x4A9F780C (Thu Sep 3 10:02:20 2009)
machinetype.......: 0x14C (Intel I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xCDF5 0xD000 6.58 7d614d975dfa191ccfe22f06bc7bfcef
.rdata 0xE000 0x3744 0x4000 4.93 0257bb9120fc2587f6775104438b72f1
.data 0x12000 0x3EE4 0x3000 1.08 7a7277735168b13bb10fbfae3fd81346
.rsrc 0x16000 0x288 0x1000 3.49 956084ee0e5f1769b130f06408cda28a
.reloc 0x17000 0x1A42 0x2000 3.71 681e98c42252f341bb15c8ab4d2db651

( 4 imports )

> advapi32.dll: OpenProcessToken, LookupPrivilegeValueA, AdjustTokenPrivileges
> comdlg32.dll: GetFileTitleA
> kernel32.dll: CreateProcessW, CreateProcessA, GetModuleFileNameA, GetProcAddress, SetLastError, lstrcmpA, GetProfileStringA, WriteProfileStringA, WriteFile, CreateFileA, FormatMessageA, VirtualFreeEx, WaitForSingleObject, CreateRemoteThread, WriteProcessMemory, CloseHandle, WideCharToMultiByte, OpenProcess, GetCurrentProcess, GetCurrentProcessId, Sleep, FlushFileBuffers, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, LCMapStringW, LCMapStringA, GetStringTypeW, VirtualQuery, VirtualProtect, GetLastError, FreeLibrary, GetModuleHandleA, LoadLibraryA, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, VirtualAllocEx, InitializeCriticalSection, HeapAlloc, HeapFree, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RaiseException, RtlUnwind, GetCurrentThreadId, GetCommandLineA, GetVersionExA, GetProcessHeap, VirtualFree, VirtualAlloc, HeapReAlloc, HeapDestroy, HeapCreate, ExitProcess, GetStdHandle, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, InterlockedDecrement, HeapSize, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, SetFilePointer, GetConsoleCP, GetConsoleMode, MultiByteToWideChar, GetLocaleInfoA, GetStringTypeA
> user32.dll: wsprintfA, IsWindow, PostMessageA, RegisterClassExA, DefWindowProcA, PostQuitMessage, SendMessageA, CreateWindowExA

( 1 exports )

> HookAllProcess, HookOneProcess, HookOneProcess2, UnhookAllProcess, UnhookOneProcess, UnhookOneProcess2
TrID  : File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
ssdeep: 1536:H5FGTbeds8fibbXKNtg7lRrPpBZQ/GD9htiTSlN2:H5FGTbks8IQuRhtiTmw
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=EAE22301002EEE518089012104F3FC007BE38953
PEiD  : -
RDS   : NSRL Reference Data Set
-

注意 注意: VirusTotal 是 Hispasec Sistemas 提供的免费服务. 我们不保证任何该服务的可用性和持续性. 尽管使用多种反病毒引擎所提供的检测率优于使用单一产品, 但这些结果并不保证文件无害. 目前来说, 没有任何一种解决方案可以提供 100% 的病毒和恶意软件检测率. 如果您购买了一款声称具有此能力的产品, 那么您可能已经成为受害者.

扫描其它文件