Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | Magyar | Deutsch | Česky | Polski | Español | English
Virus Total

VirusTotal 是一款可疑檔案分析服務, 通過各種知名反病毒引擎, 對您所上傳的檔案進行偵測, 以判斷檔案是否被病毒, 蠕蟲, 木馬, 以及各類惡意軟體感染. 查看詳細訊息...

檔案 1.txt 接收於 2008.06.11 07:22:00 (UTC)
當前狀態: 完成
結果: 20/32 (62.50%)
反病毒引擎 版本 最後更新 掃瞄結果
AhnLab-V3 2008.6.11.0 2008.06.10 -
AntiVir 7.8.0.55 2008.06.11 TR/Gpcode.I
Authentium 5.1.0.4 2008.06.11 -
Avast 4.8.1195.0 2008.06.11 -
AVG 7.5.0.516 2008.06.10 Win32.Generic.JV
BitDefender 7.2 2008.06.11 Trojan.Gpcode.I
CAT-QuickHeal 9.50 2008.06.10 -
ClamAV 0.92.1 2008.06.11 -
DrWeb 4.44.0.09170 2008.06.10 Trojan.Encoder.18
eSafe 7.0.15.0 2008.06.10 Virus.Win32.Gpcode.a
eTrust-Vet 31.6.5864 2008.06.10 Win32/GPcode.I
Ewido 4.0 2008.06.10 -
F-Prot 4.4.4.56 2008.06.10 -
F-Secure 6.70.13260.0 2008.06.11 W32/Malware
Fortinet 3.14.0.0 2008.06.10 -
GData 2.0.7306.1023 2008.06.11 Virus.Win32.Gpcode.ak
Ikarus T3.1.1.26.0 2008.06.11 Virus.Win32.Gpcode.ak
Kaspersky 7.0.0.125 2008.06.11 Virus.Win32.Gpcode.ak
McAfee 5314 2008.06.10 GPcoder.i
Microsoft 1.3604 2008.06.11 Trojan:Win32/Gpcode.G
NOD32v2 3175 2008.06.11 Win32/Gpcode.AK
Norman 5.80.02 2008.06.10 W32/Malware
Panda 9.0.0.4 2008.06.10 Trj/PGPCoder.E
Prevx1 V2 2008.06.11 Cloaked Malware
Rising 20.48.12.00 2008.06.10 -
Sophos 4.30.0 2008.06.11 Troj/Gpcode-D
Sunbelt 3.0.1145.1 2008.06.05 -
Symantec 10 2008.06.11 Trojan.Gpcoder.F
TheHacker 6.2.92.342 2008.06.11 -
VBA32 3.12.6.7 2008.06.10 -
VirusBuster 4.3.26:9 2008.06.10 Trojan.GPCode.J
Webwasher-Gateway 6.6.2 2008.06.11 Trojan.Gpcode.I
附加訊息
File size: 8030 bytes
MD5...: 7cd8e2fc5fe2dc351f24417cc1d23afa
SHA1..: 1490ee2d05b8862d17bb87bc00f0f0cc21c5505f
SHA256: e1e8fe95693c9cffa68360a02a3a91402949035466e1b42b126e49390d5a7519
SHA512: a2ad0e06d71fa0e22d1e6aa03756de7b5b115a5f7c8dde36585d30c54ea3734b
c135196b98686b359a181902db2f7a561b14617b8d965c8c62f50c07571ac5c3
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x401e7c
timedatestamp.....: 0x2a425e19 (Fri Jun 19 22:22:17 1992)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
CODE 0x1000 0x1000 0xf70 6.21 6c6345834090cfebae3283d5ede56c18
DATA 0x2000 0x1000 0x518 7.76 4fd9ea53f437d0c4f359ee11ebed2d83
BSS 0x3000 0x101000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.idata 0x104000 0x2000 0x2e0 4.50 a9f69d750bd18befff387f162565b9f9
.rsrc 0x106000 0x200 0x15e 0.00 80bda6f948a1289beefa36d2ba38194d

( 2 imports )
> advapi32.dll: CryptDestroyHash, CryptHashData, CryptCreateHash, CryptEncrypt, CryptDestroyKey, CryptExportKey, CryptImportKey, CryptDeriveKey, CryptGenKey, CryptReleaseContext, CryptAcquireContextA
> kernel32.dll: OpenMutexA, CreateMutexA, SetErrorMode, GetProcAddress, LoadLibraryA, Sleep, GetDriveTypeA, GetWindowsDirectoryA, FindClose, FindNextFileA, FindFirstFileA, DeleteFileA, SetFileAttributesA, ReadFile, WriteFile, CreateFileA, CloseHandle, ExitProcess, GetModuleFileNameA, GetVersion

( 0 exports )
Norman Sandbox: [ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* Attempts to run Visual Basic Script (VBS).
* File length: 8030 bytes.

[ Changes to filesystem ]
* Creates file C:\sample.vbs.

[ Process/window information ]
* Creates a mutex _G_P_C_.
* Attemps to NULL c:\sample.vbs NULL.

Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=D8BEF7D95EE9081D1F4500F8CCF86E003E7430DA

Importante 注意: VirusTotal 是 Hispasec Sistemas 提供的免費服務. 我們不保證任何該服務的可用性和持續性. 儘管使用多種反病毒引擎所提供的偵測率優於使用單一產品, 但這些結果並不保證檔案無害. 目前來說, 沒有任何一種解決方案可以提供 100% 的病毒和惡意軟體偵測率. 如果您購買了一款聲稱具有此能力的產品, 那麼您可能已經成為受害者.

掃瞄其它檔案