C:＼WINDOWS＼system32＼Vstar.exe
附件:
您所在的用户组无法下载或查看附件解压密码：virus
文件说明符 : C:\WINDOWS\system32\Vstar.exe
属性 : A---
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2008-8-19 18:4:10
修改时间 : 2008-8-20 8:40:42
大小 : 167928 字节 163.1016 KB
MD5 : 7c67dd0ded099088d877c422bef7f48d
SHA1: 7BCDE157A4D57D9467490B4759662BA7A4C7620C
CRC32: c47b7d3c
文件 Vstar.exe 接收于 2008.09.07 15:46:53 (CET)
| 反病毒引擎 | 版本 | 最后更新 | 扫描结果 |
| AhnLab-V3 | 2008.9.6.0 | 2008.09.07 | Win-Trojan/Clicker.167928 |
| AntiVir | 7.8.1.28 | 2008.09.05 | HEUR/Malware |
| Authentium | 5.1.0.4 | 2008.09.06 | W32/Heuristic-210!Eldorado |
| Avast | 4.8.1195.0 | 2008.09.06 | Win32:Trojan-gen {Other} |
| AVG | 8.0.0.161 | 2008.09.07 | SHeur.BZYB |
| BitDefender | 7.2 | 2008.09.07 | Trojan.Generic.581775 |
| CAT-QuickHeal | 9.50 | 2008.09.06 | (Suspicious) - DNAScan |
| ClamAV | 0.93.1 | 2008.09.07 | - |
| DrWeb | 4.44.0.09170 | 2008.09.07 | DLOADER.Trojan |
| eSafe | 7.0.17.0 | 2008.09.07 | Suspicious File |
| eTrust-Vet | 31.6.6072 | 2008.09.05 | - |
| Ewido | 4.0 | 2008.09.07 | - |
| F-Prot | 4.4.4.56 | 2008.09.06 | W32/Heuristic-210!Eldorado |
| F-Secure | 8.0.14332.0 | 2008.09.07 | W32/Suspicious_U.gen |
| Fortinet | 3.112.0.0 | 2008.09.07 | PossibleThreat |
| GData | 19 | 2008.09.07 | Win32:Trojan-gen |
| Ikarus | T3.1.1.34.0 | 2008.09.07 | Virus.Win32.Trojan |
| K7AntiVirus | 7.10.443 | 2008.09.05 | Trojan.Win32.Malware.1 |
| Kaspersky | 7.0.0.125 | 2008.09.07 | Heur.Trojan.Generic |
| McAfee | 5378 | 2008.09.05 | Generic.dx |
| Microsoft | 1.3903 | 2008.09.07 | - |
| NOD32v2 | 3423 | 2008.09.06 | Win32/TrojanDownloader.Delf.OFT |
| Norman | 5.80.02 | 2008.09.05 | W32/Packed_Upack.A |
| Panda | 9.0.0.4 | 2008.09.07 | Suspicious file |
| PCTools | 4.4.2.0 | 2008.09.07 | Packed/Upack |
| Prevx1 | V2 | 2008.09.07 | Fraudulent Security Program |
| Rising | 20.60.62.00 | 2008.09.07 | - |
| Sophos | 4.33.0 | 2008.09.07 | Sus/ComPack-K |
| Sunbelt | 3.1.1610.1 | 2008.09.05 | VIPRE.Suspicious |
| Symantec | 10 | 2008.09.07 | - |
| TheHacker | 6.3.0.8.075 | 2008.09.06 | W32/Behav-Heuristic-060 |
| TrendMicro | 8.700.0.1004 | 2008.09.05 | PAK_Generic.006 |
| VBA32 | 3.12.8.5 | 2008.09.07 | - |
| ViRobot | 2008.9.5.1365 | 2008.09.06 | - |
| VirusBuster | 4.5.11.0 | 2008.09.06 | Packed/Upack |
| Webwasher-Gateway | 6.6.2 | 2008.09.05 | Heuristic.Malware |
| 附加信息 |
| File size: 167928 bytes |
| MD5...: 7c67dd0ded099088d877c422bef7f48d |
| SHA1..: 7bcde157a4d57d9467490b4759662ba7a4c7620c |
| SHA256: c8d92f65664c4e19fc6ab80af7449f3e0d5a8aadf8419993f412f5c060922763 |
SHA512: 5b571e9bcbbf0e014ce4ff481583f2774998d7e1a06592766055ecdb9a2645ac
1814136c98a71be97cbdd584cd61ca92a5e985acdf00210f6fc5a1654bcace05 |
| PEiD..: - |
TrID..: File type identification
DOS Executable Generic (100.0%) |
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x801018
timedatestamp.....: 0x8011b0beL (invalid)
machinetype.......: 0x14c (I386)
( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
PS 0x1000 0x78000 0x1f0 5.42 ec5abf4b8f2d05b60bb6515985e3d7ae
0x79000 0x30000 0x28df8 7.99 3f0a7be66fbe776b7d3e22fb72ad93e8
0xa9000 0x1000 0x1f0 5.42 ec5abf4b8f2d05b60bb6515985e3d7ae
( 0 imports )
( 0 exports )
|
| Prevx info: http://info.prevx.com/aboutprogr ... 2807518C200E0C1D215 |
| ThreatExpert info: http://www.threatexpert.com/repo ... 088d877c422bef7f48d |
| packers (Authentium): UPack |
| packers (F-Prot): UPack |
| packers (Kaspersky): PE_Patch, UPack |
用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon)
