|
VirusTotal 是一款可疑文件分析服务, 通过各种知名反病毒引擎, 对您所上传的文件进行检测, 以判断文件是否被病毒, 蠕虫, 木马, 以及各类恶意软件感染. 查看详细信息... |
| 反病毒引擎 | 版本 | 最后更新 | 扫描结果 |
|---|---|---|---|
| a-squared | 4.5.0.41 | 2009.10.14 | Trojan-Downloader.Win32.Harnig!IK |
| AhnLab-V3 | 5.0.0.2 | 2009.10.13 | - |
| AntiVir | 7.9.1.35 | 2009.10.14 | - |
| Antiy-AVL | 2.0.3.7 | 2009.10.14 | - |
| Authentium | 5.1.2.4 | 2009.10.14 | W32/FakeRean!Generic |
| Avast | 4.8.1351.0 | 2009.10.13 | - |
| AVG | 8.5.0.420 | 2009.10.14 | - |
| BitDefender | 7.2 | 2009.10.14 | - |
| CAT-QuickHeal | 10.00 | 2009.10.14 | (Suspicious) - DNAScan |
| ClamAV | 0.94.1 | 2009.10.14 | Trojan.Peed-476 |
| Comodo | 2599 | 2009.10.13 | - |
| DrWeb | 5.0.0.12182 | 2009.10.14 | - |
| eSafe | 7.0.17.0 | 2009.10.14 | Suspicious File |
| eTrust-Vet | 35.1.7067 | 2009.10.14 | - |
| F-Prot | 4.5.1.85 | 2009.10.14 | W32/FakeRean.A.gen!Eldorado |
| F-Secure | 8.0.14470.0 | 2009.10.14 | - |
| Fortinet | 3.120.0.0 | 2009.10.14 | W32/PackSpam.A!worm |
| GData | 19 | 2009.10.14 | - |
| Ikarus | T3.1.1.72.0 | 2009.10.14 | Trojan-Downloader.Win32.Harnig |
| Jiangmin | 11.0.800 | 2009.10.08 | - |
| K7AntiVirus | 7.10.870 | 2009.10.14 | - |
| Kaspersky | 7.0.0.125 | 2009.10.14 | - |
| McAfee | 5770 | 2009.10.13 | - |
| McAfee+Artemis | 5770 | 2009.10.13 | - |
| McAfee-GW-Edition | 6.8.5 | 2009.10.14 | - |
| Microsoft | 1.5101 | 2009.10.14 | TrojanDownloader:Win32/FakeRean |
| NOD32 | 4507 | 2009.10.14 | a variant of Win32/Kryptik.AUZ |
| Norman | 6.01.09 | 2009.10.14 | W32/FakeAV.AE!genr |
| nProtect | 2009.1.8.0 | 2009.10.14 | - |
| Panda | 10.0.2.2 | 2009.10.14 | - |
| PCTools | 4.4.2.0 | 2009.10.14 | - |
| Prevx | 3.0 | 2009.10.14 | - |
| Rising | 21.51.24.00 | 2009.10.14 | - |
| Sophos | 4.46.0 | 2009.10.14 | Mal/EncPk-KP |
| Sunbelt | 3.2.1858.2 | 2009.10.14 | - |
| Symantec | 1.4.4.12 | 2009.10.14 | Packed.Generic.258 |
| TheHacker | 6.5.0.2.041 | 2009.10.14 | - |
| TrendMicro | 8.950.0.1094 | 2009.10.14 | - |
| VBA32 | 3.12.10.11 | 2009.10.14 | SScope.Trojan.FakeAV.9251616 |
| ViRobot | 2009.10.14.1984 | 2009.10.14 | - |
| VirusBuster | 4.6.5.0 | 2009.10.14 | Trojan.Vilsel.Gen!Pac |
| 附加信息 |
|---|
| File size: 21504 bytes |
| MD5 : 7d96ce7f588613f0343049918de70665 |
| SHA1 : c00a96c4237f2b3fae05bde121bf5fedbae258fe |
| SHA256: 29373749f5c877bb11cfb0b3b18585933519f151abe0f89cfd3e7221ff01b6b6 |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x1B3C timedatestamp.....: 0x47F0DE55 (Mon Mar 31 14:51:33 2008) machinetype.......: 0x14C (Intel I386) ( 4 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0xBE0 0xC00 6.93 a734db55277d87db9178e668e2d305e2 .rdata 0x2000 0xFFE 0x1000 4.86 1c4938c5c65b243977760357176e5275 .data 0x3000 0x50B1 0x1A00 7.80 b9cc3e3a95b848310892e424528b5699 .rsrc 0x9000 0x161E 0x1800 3.70 b450fc3df2fe10ffd5ba2f716237326f ( 7 imports ) > advapi32.dll: RegEnumValueW, RegDeleteKeyW, AllocateAndInitializeSid, RegEnumKeyExW, RegDeleteKeyA, RegOpenKeyExA, RegDeleteValueW, RegQueryValueExW, RegQueryValueExA > gdi32.dll: BitBlt, GetObjectW, SelectPalette, CombineRgn, GetTextExtentPoint32A, SetMapMode, GetObjectA, DeleteDC, SaveDC, CreateFontIndirectA, SetTextAlign, IntersectClipRect, Rectangle, LineTo > kernel32.dll: FreeEnvironmentStringsW, FileTimeToSystemTime, lstrcpyA, FlushFileBuffers, InterlockedCompareExchange, GetEnvironmentVariableA, EnterCriticalSection, GetFileInformationByHandle, lstrlenA, MapViewOfFile, Sleep, TlsAlloc, InterlockedIncrement, SetConsoleCtrlHandler, LeaveCriticalSection, FindNextFileW, DeleteCriticalSection, QueryPerformanceCounter, lstrcpynA, HeapAlloc, CreateFileMappingA, LocalFree, GetModuleFileNameA, GetSystemInfo, UnhandledExceptionFilter, GetCurrentProcess, GetProcAddress, lstrcmpW, lstrlenW, GetProcessHeap, GetCurrentThreadId, GetDriveTypeW, GetSystemTimeAsFileTime, FreeEnvironmentStringsA, GetSystemDirectoryW, GetTimeZoneInformation, LockResource, TerminateProcess, CreateDirectoryA, SetLastError, GetCommandLineA, GetTickCount, SetStdHandle, ExitProcess, WideCharToMultiByte, GetDiskFreeSpaceA, GetConsoleCP, TlsFree, GetOEMCP, SetConsoleCP, LoadLibraryExW, FreeLibrary, CloseHandle, IsDebuggerPresent, MultiByteToWideChar, GetModuleHandleA, GlobalReAlloc, WaitForSingleObject, GetVersionExA, FindResourceA, GetCurrentProcessId, CreateEventW, CreateThread, InterlockedExchange, GetLastError, GetVersion, VirtualProtect, GetStartupInfoA, GetModuleFileNameW, DeviceIoControl, TerminateThread, IsValidCodePage, CompareStringW, WriteFile, GetACP, GlobalFree, GetStartupInfoW, ReadFile, LCMapStringA, SetFilePointer, FindClose, GetFileAttributesW, VirtualAlloc > msvcrt.dll: _lock, _onexit, __0exception@@QAE@XZ, memset, _adjust_fdiv, _what@exception@@UBEPBDXZ, __1type_info@@UAE@XZ, __set_app_type, _vsnprintf, _wcsnicmp > ole32.dll: CoInitialize, CoTaskMemAlloc, CoCreateInstance > rpcrt4.dll: RpcStringFreeA > user32.dll: SystemParametersInfoW, SendMessageW, RedrawWindow, IsDialogMessageW, EndPaint, GetMenuItemID, GetWindowTextA, GetWindowLongA, GetActiveWindow, CreatePopupMenu, PtInRect, UnregisterClassA, DispatchMessageA, GetClassNameW, GetCapture, CharUpperW, RegisterClassA, DestroyWindow, GetDC, InvalidateRect, OpenClipboard, LoadStringW, SetCursor, SetFocus, MapWindowPoints, SetClipboardData, GetFocus, UnhookWindowsHookEx, SetDlgItemTextA ( 0 exports ) |
| TrID : File type identification Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) |
| ThreatExpert: http://www.threatexpert.com/report.aspx?md5=7d96ce7f588613f0343049918de70665 |
| ssdeep: 384:hPvMSIlg9aroNppCOGR8o7z04jUDDSgg6e:xvMSIlW3du3xi66 |
| Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=B037A2130038F26E542C000DC0C9E00074F31A61 |
| PEiD : - |
| RDS : NSRL Reference Data Set - |
注意:
VirusTotal 是 Hispasec Sistemas 提供的免费服务. 我们不保证任何该服务的可用性和持续性. 尽管使用多种反病毒引擎所提供的检测率优于使用单一产品, 但这些结果并不保证文件无害. 目前来说, 没有任何一种解决方案可以提供 100% 的病毒和恶意软件检测率. 如果您购买了一款声称具有此能力的产品, 那么您可能已经成为受害者.