C:\WINDOWS\IEXPLOER.EXE
附件:
您所在的用户组无法下载或查看附件解压密码：virus
文件说明符 : C:\WINDOWS\
IEXPL
OER.EXE
属性 : A---
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2008-8-19 17:39:56
修改时间 : 2008-8-19 17:39:58
大小 : 3081 字节 3.9 KB
MD5 : 4439c705f4c69994ee31569e22c62902
SHA1: 0BFE0FBC0AC2DCBD7F83A88A3E7C1AEDAD18042E
CRC32: 31966aed
文件 IEXPLOER.EXE 接收于 2008.09.07 10:09:56 (CET)
| 反病毒引擎 | 版本 | 最后更新 | 扫描结果 |
| AhnLab-V3 | 2008.9.6.0 | 2008.09.06 | - |
| AntiVir | 7.8.1.28 | 2008.09.05 | HEUR/Crypted |
| Authentium | 5.1.0.4 | 2008.09.06 | - |
| Avast | 4.8.1195.0 | 2008.09.06 | - |
| AVG | 8.0.0.161 | 2008.09.07 | - |
| BitDefender | 7.2 | 2008.09.07 | Trojan.Packed.24790 |
| CAT-QuickHeal | 9.50 | 2008.09.06 | (Suspicious) - DNAScan |
| ClamAV | 0.93.1 | 2008.09.07 | - |
| DrWeb | 4.44.0.09170 | 2008.09.06 | - |
| eSafe | 7.0.17.0 | 2008.09.03 | Suspicious File |
| eTrust-Vet | 31.6.6072 | 2008.09.05 | - |
| Ewido | 4.0 | 2008.09.06 | - |
| F-Prot | 4.4.4.56 | 2008.09.06 | - |
| F-Secure | 8.0.14332.0 | 2008.09.07 | Suspicious_F.gen |
| Fortinet | 3.112.0.0 | 2008.09.07 | - |
| GData | 19 | 2008.09.07 | - |
| Ikarus | T3.1.1.34.0 | 2008.09.07 | - |
| K7AntiVirus | 7.10.443 | 2008.09.05 | - |
| Kaspersky | 7.0.0.125 | 2008.09.07 | - |
| McAfee | 5378 | 2008.09.05 | - |
| Microsoft | 1.3903 | 2008.09.07 | - |
| NOD32v2 | 3423 | 2008.09.06 | - |
| Norman | 5.80.02 | 2008.09.05 | W32/Packed/FSG_2.A |
| Panda | 9.0.0.4 | 2008.09.06 | Suspicious file |
| PCTools | 4.4.2.0 | 2008.09.06 | Packed/FSG |
| Prevx1 | V2 | 2008.09.07 | - |
| Rising | 20.60.61.00 | 2008.09.07 | - |
| Sophos | 4.33.0 | 2008.09.07 | Mal/Packer |
| Sunbelt | 3.1.1610.1 | 2008.09.05 | VIPRE.Suspicious |
| Symantec | 10 | 2008.09.07 | - |
| TheHacker | 6.3.0.8.075 | 2008.09.06 | - |
| TrendMicro | 8.700.0.1004 | 2008.09.05 | PAK_Generic.001 |
| VBA32 | 3.12.8.5 | 2008.09.06 | - |
| ViRobot | 2008.9.5.1365 | 2008.09.06 | - |
| VirusBuster | 4.5.11.0 | 2008.09.06 | Packed/FSG |
| Webwasher-Gateway | 6.6.2 | 2008.09.05 | Heuristic.Crypted |
| 附加信息 |
| File size: 3081 bytes |
| MD5...: 4439c705f4c69994ee31569e22c62902 |
| SHA1..: 0bfe0fbc0ac2dcbd7f83a88a3e7c1aedad18042e |
| SHA256: 6f0cf0d5d503cc895fbd7584f4e2bbdca1289c6f6a9575e40c5363ac67f400fa |
SHA512: 7008b527b88fc81a6f1d31d54cf3d840e61b38f81ad3271e68cb30ad860480d4
448f2d4f4d0dcf94664529445b0c666ffd715598ceb63bba7b75f4dcb134401b |
| PEiD..: FSG v2.0 -> bart/xt |
TrID..: File type identification
Win32 Executable Generic (67.9%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Targa bitmap (Original TGA Format) (0.0%)
MS Flight Simulator Aircraft Performance Info (0.0%) |
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x400154
timedatestamp.....: 0x21475346 (Fri Sep 11 01:35:02 1987)
machinetype.......: 0x14c (I386)
( 2 sections )
name viradd virsiz rawdsiz ntrpy md5
0x1000 0x4000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
0x5000 0x1000 0xa09 7.65 052a32ad1989cf7f62b795e2f53fca4a
( 1 imports )
> KERNEL32.dll: LoadLibraryA, GetProcAddress
( 0 exports )
|
| packers (Kaspersky): FSG |
| packers (F-Prot): FSG |
用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon)
