一个假的 explorer.exe
解压密码:virus
附件:
您所在的用户组无法下载或查看附件文件 explorer.exe 接收于 2008.06.14 11:01:29 (CET)
反病毒引擎 | 版本 | 最后更新 | 扫描结果 |
AhnLab-V3 | 2008.6.13.1 | 2008.06.13 | - |
AntiVir | 7.8.0.55 | 2008.06.14 | TR/Dldr.Agent.Mts.1 |
Authentium | 5.1.0.4 | 2008.06.14 | W32/Heuristic-210!Eldorado |
Avast | 4.8.1195.0 | 2008.06.14 | - |
AVG | 7.5.0.516 | 2008.06.13 | Downloader.Agent.AHGG |
BitDefender | 7.2 | 2008.06.14 | Trojan.Crypt.DJ |
CAT-QuickHeal | 9.50 | 2008.06.13 | TrojanDownloader.Agent.rjq |
ClamAV | 0.92.1 | 2008.06.14 | PUA.Packed.UPack-2 |
DrWeb | 4.44.0.09170 | 2008.06.14 | DLOADER.Trojan |
eSafe | 7.0.15.0 | 2008.06.12 | Win32.Agent.rjq |
eTrust-Vet | 31.6.5873 | 2008.06.14 | - |
Ewido | 4.0 | 2008.06.14 | - |
F-Prot | 4.4.4.56 | 2008.06.12 | W32/Heuristic-210!Eldorado |
F-Secure | 6.70.13260.0 | 2008.06.13 | W32/Suspicious_U.gen |
Fortinet | 3.14.0.0 | 2008.06.14 | W32/Agent.RJQ!tr.dldr |
GData | 2.0.7306.1023 | 2008.06.14 | Trojan-Downloader.Win32.Agent.rjq |
Ikarus | T3.1.1.26.0 | 2008.06.14 | Trojan-Downloader.Win32.Agent.rjq |
Kaspersky | 7.0.0.125 | 2008.06.14 | Trojan-Downloader.Win32.Agent.rjq |
McAfee | 5317 | 2008.06.13 | New Malware.aj |
Microsoft | 1.3604 | 2008.06.14 | - |
NOD32v2 | 3186 | 2008.06.13 | probably a variant of Win32/Genetik |
Norman | 5.80.02 | 2008.06.13 | W32/Suspicious_U.gen |
Panda | 9.0.0.4 | 2008.06.13 | Suspicious file |
Prevx1 | V2 | 2008.06.14 | - |
Rising | 20.48.50.00 | 2008.06.14 | - |
Sophos | 4.30.0 | 2008.06.14 | Mal/Heuri-E |
Sunbelt | 3.0.1145.1 | 2008.06.05 | VIPRE.Suspicious |
Symantec | 10 | 2008.06.14 | - |
TheHacker | 6.2.92.349 | 2008.06.13 | Trojan/Downloader.Agent.rjq |
VBA32 | 3.12.6.7 | 2008.06.14 | Trojan-Downloader.Win32.Agent.rjq |
VirusBuster | 4.3.26:9 | 2008.06.12 | Packed/Upack |
Webwasher-Gateway | 6.6.2 | 2008.06.14 | Trojan.Dldr.Agent.Mts.1 |
|
附加信息 |
File size: 977920 bytes |
MD5...: 939c19ccc1f5290cef910c1f2ca44c6e |
SHA1..: d8f304991111f81b34d129be02b303d0e3c17499 |
SHA256: 1174bbb4f898927de91267da3f5368c6c274fa955abf0f8c28e6e5d34996da3d |
SHA512: 580fe1dcf3737d7633ff7e1187736d59b965b7fc0729adcc4ef7e88874ad6b47<BR>2c76aaa4be639eac37aa0cb38e0fa6418943eaa5df9033fc1f14f639a6f9ccca |
PEiD..: - |
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x401018<BR>timedatestamp.....: 0x4011b0be (Fri Jan 23 23:39:42 2004)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 3 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>PS 0x1000 0x6000 0x1f0 5.07 95006123443017c8c217606f00480d5c<BR>@@ 0x7000 0x9000 0x14f0 7.96 8da67a3d529e788b35eb64c7c12b730e<BR>d@@ 0x10000 0x1000 0x1f0 5.07 95006123443017c8c217606f00480d5c<BR><BR>( 0 imports ) <BR><BR>( 0 exports ) <BR> |
packers (Kaspersky): PE_Patch, UPack |
packers (F-Prot): UPack |
packers (Authentium): UPack |
用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)