|
VirusTotal 是一款可疑檔案分析服務, 通過各種知名反病毒引擎, 對您所上傳的檔案進行偵測, 以判斷檔案是否被病毒, 蠕蟲, 木馬, 以及各類惡意軟體感染. 查看詳細訊息... |
| 反病毒引擎 | 版本 | 最後更新 | 掃瞄結果 |
|---|---|---|---|
| a-squared | 4.0.0.101 | 2009.05.30 | Trojan-PWS.Sinowal!IK |
| AhnLab-V3 | 5.0.0.2 | 2009.05.29 | - |
| AntiVir | 7.9.0.180 | 2009.05.29 | RKIT/MBR.Sinowal.K |
| Antiy-AVL | 2.0.3.1 | 2009.05.27 | - |
| Authentium | 5.1.2.4 | 2009.05.29 | - |
| Avast | 4.8.1335.0 | 2009.05.29 | Win32:Sinowal-FW |
| AVG | 8.5.0.339 | 2009.05.29 | PSW.Sinowal.V |
| BitDefender | 7.2 | 2009.05.30 | - |
| CAT-QuickHeal | 10.00 | 2009.05.29 | Win32.Backdoor.Sinowal.eed.4 |
| ClamAV | 0.94.1 | 2009.05.30 | - |
| Comodo | 1199 | 2009.05.29 | - |
| DrWeb | 5.0.0.12182 | 2009.05.29 | Trojan.Packed.2447 |
| eSafe | 7.0.17.0 | 2009.05.27 | - |
| eTrust-Vet | 31.6.6530 | 2009.05.30 | - |
| F-Prot | 4.4.4.56 | 2009.05.29 | - |
| F-Secure | 8.0.14470.0 | 2009.05.29 | Trojan:W32/Mebroot.gen!A |
| Fortinet | 3.117.0.0 | 2009.05.30 | - |
| GData | 19 | 2009.05.30 | Win32:Sinowal-FW |
| Ikarus | T3.1.1.57.0 | 2009.05.30 | - |
| K7AntiVirus | 7.10.749 | 2009.05.29 | Backdoor.Win32.Sinowal.eed |
| Kaspersky | 7.0.0.125 | 2009.05.30 | Backdoor.Win32.Sinowal.eed |
| McAfee | 5630 | 2009.05.29 | - |
| McAfee+Artemis | 5630 | 2009.05.29 | Artemis!C8B9853A2A40 |
| McAfee-GW-Edition | 6.7.6 | 2009.05.29 | Rootkit.MBR.Sinowal.K |
| Microsoft | 1.4701 | 2009.05.30 | PWS:Win32/Sinowal.gen!M |
| NOD32 | 4116 | 2009.05.29 | - |
| Norman | 2009.05.29 | - | |
| nProtect | 2009.1.8.0 | 2009.05.30 | - |
| Panda | 10.0.0.14 | 2009.05.30 | Trj/CI.A |
| PCTools | 4.4.2.0 | 2009.05.29 | - |
| Prevx | 3.0 | 2009.05.30 | High Risk Worm |
| Rising | 21.31.21.00 | 2009.05.27 | - |
| Sophos | 4.42.0 | 2009.05.30 | Mal/Sinowa-A |
| Sunbelt | 3.2.1858.2 | 2009.05.30 | Backdoor.Win32.Sinowal.eed |
| Symantec | 1.4.4.12 | 2009.05.30 | Trojan.Mebroot |
| TheHacker | 6.3.4.3.334 | 2009.05.29 | - |
| TrendMicro | 8.950.0.1092 | 2009.05.29 | - |
| VBA32 | 3.12.10.6 | 2009.05.27 | Malware-Cryptor.Win32.Kefir |
| ViRobot | 2009.5.29.1761 | 2009.05.29 | - |
| VirusBuster | 4.6.5.0 | 2009.05.29 | Trojan.DR.Sinowal.Gen.11 |
| 附加訊息 |
|---|
| File size: 335872 bytes |
| MD5 : c8b9853a2a40ab6e9f0363397386f86e |
| SHA1 : 5571c38d7ad274db01230c4e5d3f2c989b593e6c |
| SHA256: b29a3d803c513b4ce3b5e10c1455669ccc3581b3d01270840d509af70e3b4130 |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x8900 timedatestamp.....: 0x47C66605 (Thu Feb 28 08:43:01 2008) machinetype.......: 0x14C (Intel I386) ( 4 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x7F24 0x8000 6.46 e69e43cac56b0b6017a1bd748ab140b0 .rdata 0x9000 0x2BA 0x1000 0.94 9324d4e60a1ea5fff448d80474c61d33 .data 0xA000 0x465B0 0x47000 7.99 1f19e44aa98539359764a34c875244d2 .reloc 0x51000 0x83D8 0x1000 0.48 8040568fcbf1c5c53420ab4c025ed272 ( 2 imports ) > kernel32.dll: CreateFileA, OpenEventA, DisconnectNamedPipe, Sleep, VirtualAlloc, VirtualFree, VirtualProtect, GetProcAddress, LoadLibraryA, GetEnvironmentVariableA, SetFilePointer, GetProcessVersion, GetProcessHeap, GetMailslotInfo, GetConsoleMode > ntdll.dll: memcpy, memcmp ( 0 exports ) |
| TrID : File type identification Generic Win/DOS Executable (49.9%) DOS Executable Generic (49.8%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%) |
| ssdeep: 6144:TCMsgv+8Lmj8hXeIHz9ozl1CPzAMldGRPPOaKeeXHw3Wnp4SYD5Z:Tls0xajI7xC6P7ldUPmaKfXweE1 |
| Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=D2C5A99300F06B962086059F658DFF00EB762B6E |
| PEiD : - |
| RDS : NSRL Reference Data Set - |
注意:
VirusTotal 是 Hispasec Sistemas 提供的免費服務. 我們不保證任何該服務的可用性和持續性. 儘管使用多種反病毒引擎所提供的偵測率優於使用單一產品, 但這些結果並不保證檔案無害. 目前來說, 沒有任何一種解決方案可以提供 100% 的病毒和惡意軟體偵測率. 如果您購買了一款聲稱具有此能力的產品, 那麼您可能已經成為受害者.