C:＼Documents and Settings＼user＼Local Settings＼Temp＼mmc.exe
附件:
您所在的用户组无法下载或查看附件解压密码：virus
文件说明符 : C:\Documents and Settings\user\Local Settings\Temp\mmc.exe
属性 : A---
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2008-9-5 16:8:56
修改时间 : 2008-9-5 16:8:58
大小 : 18576 字节 18.144 KB
MD5 : 031f54c108e06d032a39a47fc87eb447
SHA1: 7C236055A371644348B5DDC519B77F1B5C1917CF
CRC32: 5d9472aa
文件 mmc.exe 接收于 2008.09.07 17:18:21 (CET)
| 反病毒引擎 | 版本 | 最后更新 | 扫描结果 |
| AhnLab-V3 | 2008.9.6.0 | 2008.09.07 | Win-Trojan/OnlineGameHack.B |
| AntiVir | 7.8.1.28 | 2008.09.05 | TR/Dropper.Gen |
| Authentium | 5.1.0.4 | 2008.09.07 | W32/Agent.L.gen!Eldorado |
| Avast | 4.8.1195.0 | 2008.09.06 | Win32:Agent-ZMQ |
| AVG | 8.0.0.161 | 2008.09.07 | Generic11.QAX |
| BitDefender | 7.2 | 2008.09.07 | Dropped:Generic.Malware.P!dldPk!.B2BE84F9 |
| CAT-QuickHeal | 9.50 | 2008.09.06 | (Suspicious) - DNAScan |
| ClamAV | 0.93.1 | 2008.09.07 | - |
| DrWeb | 4.44.0.09170 | 2008.09.07 | Trojan.MulDrop.18752 |
| eSafe | 7.0.17.0 | 2008.09.07 | Suspicious File |
| eTrust-Vet | 31.6.6072 | 2008.09.05 | - |
| Ewido | 4.0 | 2008.09.07 | - |
| F-Prot | 4.4.4.56 | 2008.09.07 | W32/Agent.L.gen!Eldorado |
| F-Secure | 8.0.14332.0 | 2008.09.07 | Trojan-GameThief.Win32.OnLineGames.tbdi |
| Fortinet | 3.112.0.0 | 2008.09.07 | W32/Heuri.E |
| GData | 19 | 2008.09.07 | Trojan-GameThief.Win32.OnLineGames.tbdi |
| Ikarus | T3.1.1.34.0 | 2008.09.07 | - |
| K7AntiVirus | 7.10.443 | 2008.09.05 | Trojan-GameThief.Win32.OnLineGames.tbdi |
| Kaspersky | 7.0.0.125 | 2008.09.07 | Trojan-GameThief.Win32.OnLineGames.tbdi |
| McAfee | 5378 | 2008.09.05 | PWS-Mmorpg.gen |
| Microsoft | 1.3903 | 2008.09.07 | VirTool:WinNT/Idicaf.C |
| NOD32v2 | 3423 | 2008.09.06 | probably unknown NewHeur_PE virus |
| Norman | 5.80.02 | 2008.09.05 | W32/Packed_Upack.A |
| Panda | 9.0.0.4 | 2008.09.07 | Trj/Lineage.BZE |
| PCTools | 4.4.2.0 | 2008.09.07 | Packed/Upack |
| Prevx1 | V2 | 2008.09.07 | - |
| Rising | 20.60.62.00 | 2008.09.07 | - |
| Sophos | 4.33.0 | 2008.09.07 | Mal/Emogen-N |
| Sunbelt | 3.1.1610.1 | 2008.09.05 | VIPRE.Suspicious |
| Symantec | 10 | 2008.09.07 | Infostealer.Onlinegame |
| TheHacker | 6.3.0.8.075 | 2008.09.06 | W32/Behav-Heuristic-060 |
| TrendMicro | 8.700.0.1004 | 2008.09.05 | TSPY_ONLINEG.NHD |
| VBA32 | 3.12.8.5 | 2008.09.07 | Trojan.Win32.KillAV.alu |
| ViRobot | 2008.9.5.1365 | 2008.09.06 | Spyware.PSW.OnLineGames.18576 |
| VirusBuster | 4.5.11.0 | 2008.09.07 | Packed/Upack |
| Webwasher-Gateway | 6.6.2 | 2008.09.05 | Trojan.Dropper.Gen |
| 附加信息 |
| File size: 18576 bytes |
| MD5...: 031f54c108e06d032a39a47fc87eb447 |
| SHA1..: 7c236055a371644348b5ddc519b77f1b5c1917cf |
| SHA256: 838f8f99c9cbf1e4fb9c8f50524cc581c6e90e4f0b9baaf0ca0a1745378d098c |
SHA512: 385f7c1438f61bb086f5b0a2b6653aec575e25b9e986927f14e2c25db13bef32
d27c4eda5336dd21e4b995d8aac729292ee0610e1a67972d5465db57d825c3c1 |
| PEiD..: - |
TrID..: File type identification
DOS Executable Generic (100.0%) |
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x401018
timedatestamp.....: 0x4011b0be (Fri Jan 23 23:39:42 2004)
machinetype.......: 0x14c (I386)
( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
PS 0x1000 0xa000 0x1f0 5.14 4d2cb10b2466b13ac206b0c80cbf5923
@h@ 0xb000 0xc000 0x4690 7.99 8256043a7a1e8dd5ac61ed54516ed6b9
l@@ 0x17000 0x1000 0x1f0 5.14 4d2cb10b2466b13ac206b0c80cbf5923
( 0 imports )
( 0 exports )
|
| packers (Kaspersky): PE_Patch, UPack |
| packers (Avast): Upack |
| packers (Authentium): UPack |
| packers (F-Prot): UPack |
用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon)
