瑞星卡卡安全论坛技术交流区可疑文件交流 krnln.fnr,com.run,shell.fne,dp1.fne

1   1  /  1  页   跳转页

krnln.fnr,com.run,shell.fne,dp1.fne

收藏
本主题由 大版主 networkedition 于 2012-2-23 16:23:43 执行 移动主题 操作
endurer
头像
社区嘉宾
  • 帖子:22020
  • 注册: 2003-04-29
  • 来自:pe_xscan Studio
论坛8周年活动礼物
发表于： 2010-09-26 15:55 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

krnln.fnr,com.run,shell.fne,dp1.fne

C:\WINDOWS\system32\EC4698\0246EF.EXE * 1844 | 2010-8-16 9:17:9
    C:\WINDOWS\system32\EC4698\krnln.fnr | 2010-8-3 14:58:26
    C:\WINDOWS\system32\EC4698\com.run | 2010-8-3 14:58:26
    C:\WINDOWS\system32\EC4698\shell.fne | 2010-8-16 9:17:9
    C:\WINDOWS\system32\EC4698\dp1.fne | 2010-8-3 14:58:26
    C:\WINDOWS\system32\EC4698\eAPI.fne | 2010-8-16 9:17:9
    C:\WINDOWS\system32\EC4698\internet.fne | 2010-8-3 14:58:26
    C:\WINDOWS\system32\EC4698\RegEx.fnr | 2010-8-3 14:58:26
    C:\WINDOWS\system32\EC4698\spec.fne | 2010-8-3 14:58:26

文件说明符 : C:\WINDOWS\system32\EC4698\0246EF.EXE
属性 : -SH-
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2010-8-16 9:17:9
修改时间 : 2010-8-16 9:17:9
大小 : 114176 字节 111.512 KB
MD5 : fec7a8d7fd20f96995cc3d571d2448ec
SHA1: DA92FD20B44F084358F2FE00B2D0DDC531792FF7
CRC32: 70003d06

瑞星报为: Worm.Win32.Autorun.fje


文件说明符 : C:\WINDOWS\system32\EC4698\krnln.fnr
属性 : -SH-
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2010-8-3 14:58:26
修改时间 : 2010-8-3 14:58:25
大小 : 1101824 字节 1.52 MB
MD5 : d98daa3910ff67c67ecd6eb234690fa6
SHA1: 2FBC167EA2AB1B83E0FEE1F83EBB1C55CE27E553
CRC32: 14c9503b


File name:
krnln.fnr

Submission date:
2010-09-26 07:11:33 (UTC)

Current status:
finished


Result:

4/43 (9.3%)
AntivirusVersionLast UpdateResult
AhnLab-V32010.09.25.002010.09.24-
AntiVir7.10.12.302010.09.24-
Antiy-AVL2.0.3.72010.09.26-
Authentium5.2.0.52010.09.25-
Avast4.8.1351.02010.09.25-
Avast55.0.594.02010.09.25-
AVG9.0.0.8512010.09.25PSW.Lineage.BVE
BitDefender7.22010.09.26-
CAT-QuickHeal11.002010.09.24-
ClamAV0.96.2.0-git2010.09.26-
Comodo61992010.09.26-
DrWeb5.0.2.033002010.09.26-
Emsisoft5.0.0.372010.09.26-
eSafe7.0.17.02010.09.21-
eTrust-Vet36.1.78752010.09.25-
F-Prot4.6.2.1172010.09.25-
F-Secure9.0.15370.02010.09.25-
Fortinet4.1.143.02010.09.26-
GData212010.09.26-
IkarusT3.1.1.88.02010.09.26-
Jiangmin13.0.9002010.09.26-
K7AntiVirus9.63.26082010.09.25-
Kaspersky7.0.0.1252010.09.26-
McAfee5.400.0.11582010.09.26-
McAfee-GW-Edition2010.1C2010.09.25-
Microsoft1.62012010.09.26-
NOD3254792010.09.25-
Norman6.06.062010.09.25-
nProtect2010-09-26.012010.09.26-
Panda10.0.2.72010.09.25-
PCTools7.0.3.52010.09.26-
Prevx3.02010.09.26-
Rising22.66.04.002010.09.25-
Sophos4.58.02010.09.26Mal/EncPk-NB
Sunbelt69282010.09.25Trojan.Win32.Autorun.dm (v)
SUPERAntiSpyware4.40.0.10062010.09.26Worm.Autorun/Bot
Symantec20101.1.1.72010.09.26-
TheHacker6.7.0.0.0342010.09.26-
TrendMicro9.120.0.10042010.09.26-
TrendMicro-HouseCall9.120.0.10042010.09.26-
VBA323.12.14.12010.09.24-
ViRobot2010.9.25.40602010.09.25-
VirusBuster12.65.25.02010.09.26-



 附件: 您所在的用户组无法下载或查看附件


文件说明符 : C:\WINDOWS\system32\EC4698\com.run
属性 : -SH-
数字签名:否
PE文件:是
语言 : 中文(中国)
文件版本 : 1, 0, 0, 1
说明 : com DLL
版权 : 版权所有 (C) 2004
产品版本 : 1, 0, 0, 1
产品名称 : com Dynamic Link Library
内部名称 : com
源文件名 : com.DLL
创建时间 : 2010-8-3 14:58:26
修改时间 : 2010-8-3 14:58:26
大小 : 266240 字节 260.0 KB
MD5 : ce2f773275d3fe8b78f4cf067d5e6a0f
SHA1: B7135E34D46EB4303147492D5CEE5E1EF7B392AB
CRC32: f2b03db9


File name:
com.run

Submission date:
2010-09-26 07:25:42 (UTC)

Current status:
finished


Result:
18/43 (41.9%)
AntivirusVersionLast UpdateResult
AhnLab-V32010.09.26.002010.09.26ASD.Prevention
AntiVir7.10.12.302010.09.24-
Antiy-AVL2.0.3.72010.09.26-
Authentium5.2.0.52010.09.25W32/Autorun.GV
Avast4.8.1351.02010.09.25-
Avast55.0.594.02010.09.25-
AVG9.0.0.8512010.09.25-
BitDefender7.22010.09.26-
CAT-QuickHeal11.002010.09.24-
ClamAV0.96.2.0-git2010.09.26-
Comodo61992010.09.26UnclassifiedMalware
DrWeb5.0.2.033002010.09.26-
Emsisoft5.0.0.372010.09.26-
eSafe7.0.17.02010.09.21Win32.Banker
eTrust-Vet36.1.78752010.09.25-
F-Prot4.6.2.1172010.09.25W32/Autorun.GV
F-Secure9.0.15370.02010.09.25-
Fortinet4.1.143.02010.09.26-
GData212010.09.26-
IkarusT3.1.1.88.02010.09.26-
Jiangmin13.0.9002010.09.26-
K7AntiVirus9.63.26082010.09.25Trojan
Kaspersky7.0.0.1252010.09.26-
McAfee5.400.0.11582010.09.26generic!bg.hlx
McAfee-GW-Edition2010.1C2010.09.25generic!bg.hlx
Microsoft1.62012010.09.26-
NOD3254792010.09.25-
Norman6.06.062010.09.25W32/Agent.NNEC
nProtect2010-09-26.012010.09.26Trojan/W32.Agent.266240.K
Panda10.0.2.72010.09.25Trj/Dropper.AET
PCTools7.0.3.52010.09.26Application.Whitelist
Prevx3.02010.09.26High Risk Worm
Rising22.66.04.002010.09.25-
Sophos4.58.02010.09.26W32/AutoRun-MO
Sunbelt69282010.09.25-
SUPERAntiSpyware4.40.0.10062010.09.26Trojan.Agent/Gen
Symantec20101.1.1.72010.09.26-
TheHacker6.7.0.0.0342010.09.26-
TrendMicro9.120.0.10042010.09.26TROJ_FLYSTUD.EIK
TrendMicro-HouseCall9.120.0.10042010.09.26TROJ_FLYSTUD.EIK
VBA323.12.14.12010.09.24-
ViRobot2010.9.25.40602010.09.25Adware.Agent.Do.266240
VirusBuster12.65.25.02010.09.26-



 附件: 您所在的用户组无法下载或查看附件


文件说明符 : C:\WINDOWS\system32\EC4698\shell.fne
属性 : -SH-
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2010-8-16 9:17:9
修改时间 : 2010-8-16 9:17:8
大小 : 40960 字节 40.0 KB
MD5 : 6252f4ed0e19019c65aebafe47fdabaa
SHA1: EFE5D416D749C27960496CC842E65E70B05393C7
CRC32: aed60996


File name:
shell.fne

Submission date:
2010-09-26 07:30:49 (UTC)

Current status:
finished


Result:
29/43 (67.4%)

AntivirusVersionLast UpdateResult
AhnLab-V32010.09.26.002010.09.26Win-Trojan/Peed.40960.MU
AntiVir7.10.12.302010.09.24TR/Agent.40960.Q
Antiy-AVL2.0.3.72010.09.26Trojan/Win32.FlyStudio.gen
Authentium5.2.0.52010.09.25W32/Heuristic-210!Eldorado
Avast4.8.1351.02010.09.25Win32:Malware-gen
Avast55.0.594.02010.09.25Win32:Malware-gen
AVG9.0.0.8512010.09.25-
BitDefender7.22010.09.26Trojan.Peed.Gen
CAT-QuickHeal11.002010.09.24Trojan.Trafog.rts
ClamAV0.96.2.0-git2010.09.26-
Comodo61992010.09.26UnclassifiedMalware
DrWeb5.0.2.033002010.09.26-
Emsisoft5.0.0.372010.09.26Trojan.Peed!IK
eSafe7.0.17.02010.09.21Win32.Peed
eTrust-Vet36.1.78752010.09.25-
F-Prot4.6.2.1172010.09.25W32/Heuristic-210!Eldorado
F-Secure9.0.15370.02010.09.25Trojan.Peed.Gen
Fortinet4.1.143.02010.09.26-
GData212010.09.26Trojan.Peed.Gen
IkarusT3.1.1.88.02010.09.26Trojan.Peed
Jiangmin13.0.9002010.09.26-
K7AntiVirus9.63.26082010.09.25Riskware
Kaspersky7.0.0.1252010.09.26-
McAfee5.400.0.11582010.09.26Generic PWS.y!hv.s
McAfee-GW-Edition2010.1C2010.09.25Generic PWS.y!hv.s
Microsoft1.62012010.09.26Trojan:Win32/Trafog!rts
NOD3254792010.09.25-
Norman6.06.062010.09.25Smalltroj.ITDL
nProtect2010-09-26.012010.09.26Trojan/W32.Agent.40960.APU
Panda10.0.2.72010.09.25Generic Trojan
PCTools7.0.3.52010.09.26Trojan.Generic
Prevx3.02010.09.26-
Rising22.66.04.002010.09.25-
Sophos4.58.02010.09.26Mal/EncPk-NB
Sunbelt69282010.09.25Trojan.Win32.Autorun.dm (v)
SUPERAntiSpyware4.40.0.10062010.09.26Trojan.Agent/Gen-WormBot
Symantec20101.1.1.72010.09.26Trojan Horse
TheHacker6.7.0.0.0342010.09.26-
TrendMicro9.120.0.10042010.09.26TROJ_Gen.MZ40M4
TrendMicro-HouseCall9.120.0.10042010.09.26TROJ_Gen.MZ40M4
VBA323.12.14.12010.09.24-
ViRobot2010.9.25.40602010.09.25-
VirusBuster12.65.25.02010.09.26-


 附件: 您所在的用户组无法下载或查看附件


文件说明符 : C:\WINDOWS\system32\EC4698\dp1.fne
属性 : -SH-
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2010-8-3 14:58:26
修改时间 : 2010-8-3 14:58:25
大小 : 114688 字节 112.0 KB
MD5 : ce2f031c754188a1e44f3a192e64cde7
SHA1: 7C24B3F551F52B829E838A792F7F8EF38B804284
CRC32: a69e274f

File name:
dp1.fne

Submission date:
2010-09-26 05:06:24 (UTC)

Current status:
finished


Result:
11/43 (25.6%)


AntivirusVersionLast UpdateResult
AhnLab-V32010.09.25.002010.09.24-
AntiVir7.10.12.302010.09.24-
Antiy-AVL2.0.3.72010.09.26-
Authentium5.2.0.52010.09.25W32/Heuristic-210!Eldorado
Avast4.8.1351.02010.09.25-
Avast55.0.594.02010.09.25-
AVG9.0.0.8512010.09.25-
BitDefender7.22010.09.26-
CAT-QuickHeal11.002010.09.24-
ClamAV0.96.2.0-git2010.09.26-
Comodo61992010.09.26-
DrWeb5.0.2.033002010.09.26-
Emsisoft5.0.0.372010.09.25-
eSafe7.0.17.02010.09.21-
eTrust-Vet36.1.78752010.09.25-
F-Prot4.6.2.1172010.09.25W32/Heuristic-210!Eldorado
F-Secure9.0.15370.02010.09.25-
Fortinet4.1.143.02010.09.25-
GData212010.09.26-
IkarusT3.1.1.88.02010.09.25-
Jiangmin13.0.9002010.09.25-
K7AntiVirus9.63.26082010.09.25Riskware
Kaspersky7.0.0.1252010.09.26-
McAfee5.400.0.11582010.09.26Artemis!CE2F031C7541
McAfee-GW-Edition2010.1C2010.09.25Artemis!CE2F031C7541
Microsoft1.62012010.09.25-
NOD3254792010.09.25-
Norman6.06.062010.09.25-
nProtect2010-09-25.012010.09.25-
Panda10.0.2.72010.09.25-
PCTools7.0.3.52010.09.26-
Prevx3.02010.09.26Medium Risk Malware
Rising22.66.04.002010.09.25-
Sophos4.58.02010.09.26Mal/EncPk-NB
Sunbelt69282010.09.25Trojan.Win32.Autorun.dm (v)
SUPERAntiSpyware4.40.0.10062010.09.25Trojan.Agent/Gen-Exploiter
Symantec20101.1.1.72010.09.26-
TheHacker6.7.0.0.0342010.09.26-
TrendMicro9.120.0.10042010.09.26PAK_Generic.001
TrendMicro-HouseCall9.120.0.10042010.09.26-
VBA323.12.14.12010.09.24-
ViRobot2010.9.25.40602010.09.25-
VirusBuster12.65.25.02010.09.26Trojan.Crypt.Gen.4


 附件: 您所在的用户组无法下载或查看附件

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; QQDownload 1.7; Maxthon)
http://blog.csdn.net/purpleendurer

宠辱不惊，笑看堂前花开花落； 去留无意，漫随天外云卷云舒。
分享到：
gototop
 
endurer
头像
社区嘉宾
  • 帖子:22020
  • 注册: 2003-04-29
  • 来自:pe_xscan Studio
论坛8周年活动礼物
发表于： 2010-09-26 16:02 | 只看楼主 短消息 资料
字号： 小 中 大 2楼

eAPI.fne,internet.fne,RegEx.fnr,spec.fne,cnvpe.fne


 附件: 您所在的用户组无法下载或查看附件


 附件: 您所在的用户组无法下载或查看附件


 附件: 您所在的用户组无法下载或查看附件


 附件: 您所在的用户组无法下载或查看附件


 附件: 您所在的用户组无法下载或查看附件

文件说明符 : C:\WINDOWS\system32\EC4698\eAPI.fne
属性 : -SH-
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2010-8-16 9:17:9
修改时间 : 2010-8-16 9:17:8
大小 : 323584 字节 316.0 KB
MD5 : cd343dd62be7a89a164b19819b7d5808
SHA1: D67E9D2289A8C6B4A7EEEF909F1F841AE15ABBF9
CRC32: 225f6262

File name:
eAPI.fne

Submission date:
2010-09-26 07:36:18 (UTC)

Current status:
finished


Result:
17/43 (39.5%)
AntivirusVersionLast UpdateResult
AhnLab-V32010.09.26.002010.09.26Win-Trojan/Xema.variant
AntiVir7.10.12.302010.09.24TR/Agent.323584.BI
Antiy-AVL2.0.3.72010.09.26-
Authentium5.2.0.52010.09.25W32/Websearch.A.gen!Eldorado
Avast4.8.1351.02010.09.25-
Avast55.0.594.02010.09.25-
AVG9.0.0.8512010.09.25Win32/Heur
BitDefender7.22010.09.26-
CAT-QuickHeal11.002010.09.24-
ClamAV0.96.2.0-git2010.09.26-
Comodo61992010.09.26UnclassifiedMalware
DrWeb5.0.2.033002010.09.26-
Emsisoft5.0.0.372010.09.26Virus.Win32.Heur!IK
eSafe7.0.17.02010.09.21-
eTrust-Vet36.1.78752010.09.25-
F-Prot4.6.2.1172010.09.25W32/Websearch.A.gen!Eldorado
F-Secure9.0.15370.02010.09.25-
Fortinet4.1.143.02010.09.26-
GData212010.09.26-
IkarusT3.1.1.88.02010.09.26Virus.Win32.Heur
Jiangmin13.0.9002010.09.26-
K7AntiVirus9.63.26082010.09.25Adware
Kaspersky7.0.0.1252010.09.26-
McAfee5.400.0.11582010.09.26generic!bg.etr
McAfee-GW-Edition2010.1C2010.09.25generic!bg.etr
Microsoft1.62012010.09.26-
NOD3254792010.09.25-
Norman6.06.062010.09.25W32/Suspicious_Gen.LJDK
nProtect2010-09-26.012010.09.26-
Panda10.0.2.72010.09.25Suspicious file
PCTools7.0.3.52010.09.26-
Prevx3.02010.09.26Medium Risk Malware
Rising22.66.04.002010.09.25-
Sophos4.58.02010.09.26Mal/EncPk-NB
Sunbelt69282010.09.25Trojan.Win32.Autorun.dm (v)
SUPERAntiSpyware4.40.0.10062010.09.26Worm.Autorun/Bot
Symantec20101.1.1.72010.09.26-
TheHacker6.7.0.0.0342010.09.26-
TrendMicro9.120.0.10042010.09.26-
TrendMicro-HouseCall9.120.0.10042010.09.26-
VBA323.12.14.12010.09.24-
ViRobot2010.9.25.40602010.09.25-
VirusBuster12.65.25.02010.09.26-



文件说明符 : C:\WINDOWS\system32\EC4698\internet.fne
属性 : -SH-
数字签名:否
PE文件:是
语言 : 中文(中国)
文件版本 : 1, 0, 0, 1
说明 : internet DLL
版权 : 版权所有 (C) 2002
产品版本 : 1, 0, 0, 1
产品名称 : internet Dynamic Link Library
内部名称 : internet
源文件名 : internet.DLL
创建时间 : 2010-8-3 14:58:26
修改时间 : 2010-8-3 14:58:26
大小 : 184320 字节 180.0 KB
MD5 : 299c26fb72a3d286cc24c4a9a9a4a693
SHA1: ACC3292D9D0534124675FFA6C6B336E1F25F4E30
CRC32: 191a6c3a

File name:
internet.fne

Submission date:
2010-09-26 07:39:03 (UTC)

Current status:
finished


Result:
19/42 (45.2%)
AntivirusVersionLast UpdateResult
AhnLab-V32010.09.26.002010.09.26Win-Spyware/Agent.184320.D
AntiVir7.10.12.302010.09.24-
Antiy-AVL2.0.3.72010.09.26-
Authentium5.2.0.52010.09.25W32/Autorun.HF
Avast4.8.1351.02010.09.25-
Avast55.0.594.02010.09.25-
AVG9.0.0.8512010.09.25-
BitDefender7.22010.09.26-
CAT-QuickHeal11.002010.09.24Trojan.Agent.wl
ClamAV0.96.2.0-git2010.09.26-
Comodo61992010.09.26-
DrWeb5.0.2.033002010.09.26-
eSafe7.0.17.02010.09.21Win32.Downloader.age
eTrust-Vet36.1.78752010.09.25-
F-Prot4.6.2.1172010.09.25W32/Autorun.HF
F-Secure9.0.15370.02010.09.25-
Fortinet4.1.143.02010.09.26-
GData212010.09.26-
IkarusT3.1.1.88.02010.09.26Trojan-Dropper.Agent
Jiangmin13.0.9002010.09.26-
K7AntiVirus9.63.26082010.09.25Trojan-Downloader
Kaspersky7.0.0.1252010.09.26-
McAfee5.400.0.11582010.09.26-
McAfee-GW-Edition2010.1C2010.09.25-
Microsoft1.62012010.09.26-
NOD3254792010.09.25-
Norman6.06.062010.09.25Crypt.EJJ
nProtect2010-09-26.012010.09.26Trojan-Downloader/W32.Agent.184320.AF
Panda10.0.2.72010.09.25Trj/Agent.MHP
PCTools7.0.3.52010.09.26Trojan-Downloader.Agent!sd6
Prevx3.02010.09.26Medium Risk Malware Downloader
Rising22.66.04.002010.09.25-
Sophos4.58.02010.09.26Mal/PWSDLL-B
Sunbelt69282010.09.25Trojan.Win32.AutoRun.mo (v)
SUPERAntiSpyware4.40.0.10062010.09.26Worm.Autorun/Bot
Symantec20101.1.1.72010.09.26Downloader
TheHacker6.7.0.0.0342010.09.26-
TrendMicro9.120.0.10042010.09.26TROJ_FLYSTUD.EIK
TrendMicro-HouseCall9.120.0.10042010.09.26TROJ_FLYSTUD.EIK
VBA323.12.14.12010.09.24-
ViRobot2010.9.25.40602010.09.25Spyware.Agent.Do.184320.H
VirusBuster12.65.25.02010.09.26-



文件说明符 : C:\WINDOWS\system32\EC4698\RegEx.fnr
属性 : -SH-
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2010-8-3 14:58:26
修改时间 : 2010-8-3 14:58:26
大小 : 217088 字节 212.0 KB
MD5 : a67daddcb30335163cf7d99f282f5ae0
SHA1: C033169006BEF68BEBFA77405C4A35688AB41A99
CRC32: 6e8cc79c


File name:
RegEx.fnr

Submission date:
2010-09-26 07:43:18 (UTC)

Current status:
finished


Result:
20/43 (46.5%)
AntivirusVersionLast UpdateResult
AhnLab-V32010.09.26.002010.09.26-
AntiVir7.10.12.302010.09.24-
Antiy-AVL2.0.3.72010.09.26-
Authentium5.2.0.52010.09.25W32/Autorun.GB
Avast4.8.1351.02010.09.25-
Avast55.0.594.02010.09.25-
AVG9.0.0.8512010.09.25-
BitDefender7.22010.09.26-
CAT-QuickHeal11.002010.09.24-
ClamAV0.96.2.0-git2010.09.26Trojan.Agent-172144
Comodo61992010.09.26-
DrWeb5.0.2.033002010.09.26-
Emsisoft5.0.0.372010.09.26Trojan.Win32.AutoRun!IK
eSafe7.0.17.02010.09.21-
eTrust-Vet36.1.78752010.09.25-
F-Prot4.6.2.1172010.09.25W32/Autorun.GB
F-Secure9.0.15370.02010.09.25-
Fortinet4.1.143.02010.09.26-
GData212010.09.26-
IkarusT3.1.1.88.02010.09.26Trojan.Win32.AutoRun
Jiangmin13.0.9002010.09.26-
K7AntiVirus9.63.26082010.09.25Trojan
Kaspersky7.0.0.1252010.09.26-
McAfee5.400.0.11582010.09.26Tool-EPLLib
McAfee-GW-Edition2010.1C2010.09.25Tool-EPLLib
Microsoft1.62012010.09.26-
NOD3254792010.09.25-
Norman6.06.062010.09.25W32/Autorun.TDH
nProtect2010-09-26.012010.09.26Trojan/W32.Agent.217088.ET
Panda10.0.2.72010.09.25W32/Autorun.IZE.worm
PCTools7.0.3.52010.09.26Worm.AutoRun.GEN
Prevx3.02010.09.26Medium Risk Malware
Rising22.66.04.002010.09.25-
Sophos4.58.02010.09.26W32/AutoRun-MO
Sunbelt69282010.09.25Trojan.Win32.AutoRun.mo (v)
SUPERAntiSpyware4.40.0.10062010.09.26Worm.Autorun/Bot
Symantec20101.1.1.72010.09.26-
TheHacker6.7.0.0.0342010.09.26Trojan/CI.gen
TrendMicro9.120.0.10042010.09.26TROJ_FLYSTUD.EIK
TrendMicro-HouseCall9.120.0.10042010.09.26TROJ_FLYSTUD.EIK
VBA323.12.14.12010.09.24-
ViRobot2010.9.25.40602010.09.25Backdoor.Win32.Agent.217088.R
VirusBuster12.65.25.02010.09.26-



文件说明符 : C:\WINDOWS\system32\EC4698\spec.fne
属性 : -SH-
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2010-8-3 14:58:26
修改时间 : 2010-8-3 14:58:26
大小 : 69632 字节 68.0 KB
MD5 : 8985d73f08638b4b48ecd30759c9e53f
SHA1: 400A90C9EABEB94AE05E5036E21DC922B0C1FFAD
CRC32: fac44b10

File name:
spec.fne

Submission date:
2010-09-26 07:46:09 (UTC)

Current status:
finished


Result:
12/43 (27.9%)
AntivirusVersionLast UpdateResult
AhnLab-V32010.09.26.002010.09.26-
AntiVir7.10.12.302010.09.24-
Antiy-AVL2.0.3.72010.09.26-
Authentium5.2.0.52010.09.25W32/Autorun.FX
Avast4.8.1351.02010.09.25-
Avast55.0.594.02010.09.25-
AVG9.0.0.8512010.09.25-
BitDefender7.22010.09.26-
CAT-QuickHeal11.002010.09.24-
ClamAV0.96.2.0-git2010.09.26-
Comodo61922010.09.25-
DrWeb5.0.2.033002010.09.26-
Emsisoft5.0.0.372010.09.26Trojan.Adload!IK
eSafe7.0.17.02010.09.21Win32.PSWADUV
eTrust-Vet36.1.78752010.09.25-

F-Prot4.6.2.1172010.09.25W32/Autorun.FX
F-Secure9.0.15370.02010.09.25-
Fortinet4.1.143.02010.09.26-
GData212010.09.26-
IkarusT3.1.1.88.02010.09.26Trojan.Adload
Jiangmin13.0.9002010.09.26-
K7AntiVirus9.63.26082010.09.25Trojan
Kaspersky7.0.0.1252010.09.26-
McAfee5.400.0.11582010.09.26-
McAfee-GW-Edition2010.1C2010.09.25-
Microsoft1.62012010.09.26-
NOD3254792010.09.25-
Norman6.06.062010.09.25W32/Suspicious_Gen.DSOB
nProtect2010-09-26.012010.09.26-
Panda10.0.2.72010.09.25-
PCTools7.0.3.52010.09.26-
Prevx3.02010.09.26High Risk Worm
Rising22.66.04.002010.09.25-
Sophos4.58.02010.09.26-
Sunbelt69282010.09.25-
SUPERAntiSpyware4.40.0.10062010.09.26Worm.Autorun/Bot
Symantec20101.1.1.72010.09.26-
TheHacker6.7.0.0.0342010.09.26-
TrendMicro9.120.0.10042010.09.26TROJ_FLYSTUD.EIK
TrendMicro-HouseCall9.120.0.10042010.09.26TROJ_FLYSTUD.EIK
VBA323.12.14.12010.09.24-
ViRobot2010.9.25.40602010.09.25Trojan.Win32.Agent.69632.AY
VirusBuster12.65.25.02010.09.26-



文件说明符 : C:\WINDOWS\system32\EC4698\cnvpe.fne
属性 : -SH-
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2010-8-3 14:58:26
修改时间 : 2010-8-3 14:58:25
大小 : 61440 字节 60.0 KB
MD5 : ad05921e0c3d85fd065df25b42ac7685
SHA1: E6802FD48478DB7234CD82F79E9B4D00B51D6D1D
CRC32: 90e60753


File name:
cnvpe.fne

Submission date:
2010-09-26 04:43:48 (UTC)

Current status:
finished


Result:
9/43 (20.9%)
http://blog.csdn.net/purpleendurer

宠辱不惊，笑看堂前花开花落； 去留无意，漫随天外云卷云舒。
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT