Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

VirusTotal 是一款可疑檔案分析服務, 通過各種知名反病毒引擎, 對您所上傳的檔案進行偵測, 以判斷檔案是否被病毒, 蠕蟲, 木馬, 以及各類惡意軟體感染. 查看詳細訊息...

檔案 load.exe 接收於 2008.05.04 18:01:30 (UTC)
當前狀態: 完成
結果: 6/31 (19.35%)
反病毒引擎 版本 最後更新 掃瞄結果
AhnLab-V3 2008.5.3.0 2008.05.02 -
AntiVir 7.8.0.11 2008.05.02 -
Authentium 4.93.8 2008.05.02 -
Avast 4.8.1169.0 2008.05.04 -
AVG 7.5.0.516 2008.05.03 -
BitDefender 7.2 2008.05.04 Trojan.Peed.JHB
CAT-QuickHeal 9.50 2008.05.03 (Suspicious) - DNAScan
ClamAV 0.92.1 2008.05.04 -
DrWeb 4.44.0.09170 2008.05.04 Trojan.Packed.447
eSafe 7.0.15.0 2008.04.28 -
eTrust-Vet 31.3.5755 2008.05.03 -
Ewido 4.0 2008.05.04 -
F-Prot 4.4.2.54 2008.05.04 -
F-Secure 6.70.13260.0 2008.05.04 Trojan-Downloader.Win32.Cntr.v
Fortinet 3.14.0.0 2008.05.04 -
Ikarus T3.1.1.26 2008.05.04 -
Kaspersky 7.0.0.125 2008.05.04 Trojan-Downloader.Win32.Cntr.v
McAfee 5287 2008.05.02 -
Microsoft 1.3408 2008.04.22 -
NOD32v2 3072 2008.05.03 -
Norman 5.80.02 2008.05.02 W32/Downloader
Panda 9.0.0.4 2008.05.04 -
Prevx1 V2 2008.05.04 -
Rising 20.42.62.00 2008.05.04 -
Sophos 4.29.0 2008.05.04 -
Sunbelt 3.0.1097.0 2008.05.03 -
Symantec 10 2008.05.04 -
TheHacker 6.2.92.300 2008.05.03 -
VBA32 3.12.6.5 2008.05.03 -
VirusBuster 4.3.26:9 2008.05.03 -
Webwasher-Gateway 6.6.2 2008.05.04 -
附加訊息
File size: 8704 bytes
MD5...: cd00a38224660c7c765da8241e9a2185
SHA1..: f826ff0f132837bf61da8e2c2792c4feeec60ba1
SHA256: fef8b2fd09fc80bd2e1f98be2ab9e3af557eba223e5b2d846253e6096dd4a8f4
SHA512: 5503cbdc7e2c4e305ad283a5f7a1e66ff90a4e1920cedc241ab9c2d1bba03f5e
70e90cbe34dcf0f732b24d263132f9fefae610423e0c86d6e0f654f73dd232a6
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x401000
timedatestamp.....: 0x481be98b (Sat May 03 04:26:51 2008)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x602 0x800 7.28 2a5a085e92e9b8d97f6943f63fd3eb8a
.rdata 0x2000 0xda 0x200 2.24 c5d23e8d79d2c3db4b3a811b6e3bd0f3
.const 0x3000 0x1210 0x1400 7.62 88dd2ee70264db5455a88272f1e247b5

( 1 imports )
> KERNEL32.dll: WaitForSingleObject, GetTickCount, GetProcAddress, VirtualAlloc, LoadLibraryA, GetCurrentProcess

( 0 exports )
norman sandbox: [ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* File length: 8704 bytes.

[ Changes to filesystem ]
* Creates file C:\WINDOWS\load.exe.

[ Network services ]
* Connects to \"centerprop.cn\" on port 80 (TCP).
* Opens URL: centerprop.cnload.exe.

[ Security issues ]
* Starting downloaded file - potential security problem.

[ Process/window information ]
* Creates process \"load.exe\".

Importante 注意: VirusTotal 是 Hispasec Sistemas 提供的免費服務. 我們不保證任何該服務的可用性和持續性. 儘管使用多種反病毒引擎所提供的偵測率優於使用單一產品, 但這些結果並不保證檔案無害. 目前來說, 沒有任何一種解決方案可以提供 100% 的病毒和惡意軟體偵測率. 如果您購買了一款聲稱具有此能力的產品, 那麼您可能已經成為受害者.

掃瞄其它檔案