Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

VirusTotal 是一款可疑文件分析服务, 通过各种知名反病毒引擎, 对您所上传的文件进行检测, 以判断文件是否被病毒, 蠕虫, 木马, 以及各类恶意软件感染. 查看详细信息...

文件 ..S87ekhV.exe 接收于 2008.12.11 08:24:41 (UTC)
当前状态: 完成
结果: 4/38 (10.53%)
反病毒引擎 版本 最后更新 扫描结果
AhnLab-V3 2008.12.10.2 2008.12.11 -
AntiVir 7.9.0.43 2008.12.10 TR/Crypt.XPACK.Gen
Authentium 5.1.0.4 2008.12.11 -
Avast 4.8.1281.0 2008.12.10 -
AVG 8.0.0.199 2008.12.10 -
BitDefender 7.2 2008.12.11 -
CAT-QuickHeal 10.00 2008.12.11 -
ClamAV 0.94.1 2008.12.10 -
Comodo 718 2008.12.10 -
DrWeb 4.44.0.09170 2008.12.11 -
eSafe 7.0.17.0 2008.12.10 Suspicious File
eTrust-Vet 31.6.6255 2008.12.11 -
Ewido 4.0 2008.12.10 -
F-Prot 4.4.4.56 2008.12.10 -
F-Secure 8.0.14332.0 2008.12.11 -
Fortinet 3.117.0.0 2008.12.10 -
GData 19 2008.12.11 -
Ikarus T3.1.1.45.0 2008.12.11 -
K7AntiVirus 7.10.550 2008.12.10 -
Kaspersky 7.0.0.125 2008.12.11 -
McAfee 5460 2008.12.10 -
McAfee+Artemis 5460 2008.12.10 -
Microsoft 1.4205 2008.12.10 -
NOD32 3682 2008.12.10 -
Norman 5.80.02 2008.12.10 -
Panda 9.0.0.4 2008.12.10 -
PCTools 4.4.2.0 2008.12.10 -
Prevx1 V2 2008.12.11 Malicious Software
Rising 21.07.31.00 2008.12.11 -
SecureWeb-Gateway 6.7.6 2008.12.11 -
Sophos 4.36.0 2008.12.11 -
Sunbelt 3.2.1801.2 2008.12.11 -
Symantec 10 2008.12.11 -
TheHacker 6.3.1.2.183 2008.12.11 -
TrendMicro 8.700.0.1004 2008.12.11 -
VBA32 3.12.8.10 2008.12.11 suspected of Malware-Cryptor.Win32.General.3
ViRobot 2008.12.10.1511 2008.12.10 -
VirusBuster 4.5.11.0 2008.12.10 -
附加信息
File size: 27648 bytes
MD5...: 06834a694e541347a6c8f09c5e1f858c
SHA1..: c5e31092f3b8b5d5b5018474f79d9563d1aeac12
SHA256: b93596169d6361ade0e3cf74f1314f5bc0f206b762498b8afcdc561afc4faccd
SHA512: 661b84e273806779e2d2421553364fea8acf1aaececcefa3a1c912fc11d62af3
c53794303d540d5a0aa5b0522a39039fddb85fdfdc3fb01915cb4966cdb2867d
ssdeep: 768:wGoKNic1xaC2jvfnS1JCcfpyyWmmFUpRm8c3mFYjyUpGZm:wGz91xaCMX3qp
zQUpYR3metpG0
PEiD..: -
TrID..: File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x405e56
timedatestamp.....: 0x47cfffad (Thu Mar 06 14:29:01 2008)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x5965 0x5a00 7.82 ce19bff33f06d65a483989645598e73b
.data 0x7000 0xc5f 0xa00 5.23 9373711b671916c345dbdf6f45784cda
.rsrc 0x8000 0x3c8 0x400 3.25 2eab971157debc906a4fb341626d01ae

( 3 imports )
> ADVAPI32.dll: RegDeleteValueA, LookupAccountNameA, GetSidSubAuthority, QueryServiceConfigA, AddAce, GetSidSubAuthorityCount, RegOpenKeyA, SetKernelObjectSecurity, RegDeleteKeyA, AdjustTokenPrivileges, InitializeAcl, GetTokenInformation, LookupAccountSidA, RegQueryValueExA, SetSecurityInfo, LookupPrivilegeValueW
> ole32.dll: OleRun, OleTranslateAccelerator, OleCreateStaticFromData, CoGetStdMarshalEx, CoGetCurrentProcess, OleQueryLinkFromData, CoUnmarshalInterface, OleGetAutoConvert, BindMoniker, CoRegisterMessageFilter, OleCreateLinkToFile, CoReleaseServerProcess, OleIsRunning, OleCreateDefaultHandler, CoGetObject, OleCreateLinkFromData
> KERNEL32.dll: InterlockedIncrement, GetEnvironmentStrings, GetProcessHeap, GetCommandLineA, GlobalUnlock, GlobalLock, CreateThread, CreateFileMappingA, InterlockedDecrement, DeleteCriticalSection, FlushFileBuffers, GlobalMemoryStatus, GetConsoleOutputCP, GetUserDefaultLCID, GetEnvironmentVariableA, lstrcmpA, SetConsoleCtrlHandler, CreateFileA, TlsAlloc, GetSystemTimeAsFileTime, LocalAlloc

( 0 exports )
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=46F2F5F2002B68B76C5D00DEEFD5D400E82C2662
CWSandbox info: http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=06834a694e541347a6c8f09c5e1f858c

注意 注意: VirusTotal 是 Hispasec Sistemas 提供的免费服务. 我们不保证任何该服务的可用性和持续性. 尽管使用多种反病毒引擎所提供的检测率优于使用单一产品, 但这些结果并不保证文件无害. 目前来说, 没有任何一种解决方案可以提供 100% 的病毒和恶意软件检测率. 如果您购买了一款声称具有此能力的产品, 那么您可能已经成为受害者.

扫描其它文件