endurer - 2009-10-16 22:56:00
附件: 您所在的用户组无法下载或查看附件解压密码：virus
文件说明符 : C:\WINDOWS\system32\try2672.dll
属性 : A---
数字签名:否
PE文件:是
语言 : 中文(中国)
文件版本 : 1, 0, 0, 1
说明 : MyTest3
版权 : 版权所有 (C) 2008
产品版本 : 1, 0, 0, 1
产品名称 : MyTest3 Dynamic Link Library
内部名称 : MyTest3
源文件名 : MyTest3.DLL
创建时间 : 2009-10-16 21:14:8
修改时间 : 2009-10-11 10:28:34
大小 : 171520 字节 167.512 KB
MD5 : 1dcdefe7b2c17736e87f72c347eff6a2
SHA1: B40EAB780FEB6C828FA82218D9E4DD932E56C976
CRC32: 427ecd69
文件 try2672.dll 接收于 2009.10.16 14:49:36 (UTC)
| 反病毒引擎 | 版本 | 最后更新 | 扫描结果 |
| a-squared | 4.5.0.41 | 2009.10.16 | Trojan-Downloader.Small!IK |
| AhnLab-V3 | 5.0.0.2 | 2009.10.16 | - |
| AntiVir | 7.9.1.35 | 2009.10.16 | TR/Dldr.Small.jrs |
| Antiy-AVL | 2.0.3.7 | 2009.10.16 | Trojan/Win32.Filka.gen |
| Authentium | 5.1.2.4 | 2009.10.16 | W32/Downloader.F.gen!Eldorado |
| Avast | 4.8.1351.0 | 2009.10.14 | - |
| AVG | 8.5.0.420 | 2009.10.16 | Agent2.UVS |
| BitDefender | 7.2 | 2009.10.16 | Generic.Malware.FP!Pkg.7981EB71 |
| CAT-QuickHeal | 10.00 | 2009.10.16 | - |
| ClamAV | 0.94.1 | 2009.10.16 | - |
| Comodo | 2621 | 2009.10.16 | - |
| DrWeb | 5.0.0.12182 | 2009.10.16 | Trojan.DownLoad.50494 |
| eSafe | 7.0.17.0 | 2009.10.15 | Win32.TRDldr.Small.J |
| eTrust-Vet | 35.1.7071 | 2009.10.16 | - |
| F-Prot | 4.5.1.85 | 2009.10.15 | W32/Downloader.F.gen!Eldorado |
| F-Secure | 8.0.14470.0 | 2009.10.16 | Trojan-Spy.Win32.Filka.an |
| Fortinet | 3.120.0.0 | 2009.10.16 | PossibleThreat |
| GData | 19 | 2009.10.16 | Generic.Malware.FP!Pkg.7981EB71 |
| Ikarus | T3.1.1.72.0 | 2009.10.16 | Trojan-Downloader.Small |
| Jiangmin | 11.0.800 | 2009.10.16 | TrojanSpy.Filka.i |
| K7AntiVirus | 7.10.872 | 2009.10.16 | Trojan.Win32.Malware.1 |
| Kaspersky | 7.0.0.125 | 2009.10.16 | Trojan-Spy.Win32.Filka.an |
| McAfee | 5772 | 2009.10.15 | Generic.dx!fvx |
| McAfee+Artemis | 5772 | 2009.10.15 | Generic.dx!fvx |
| McAfee-GW-Edition | 6.8.5 | 2009.10.16 | Trojan.Dldr.Small.jrs |
| Microsoft | 1.5101 | 2009.10.16 | - |
| NOD32 | 4514 | 2009.10.16 | a variant of Win32/Agent.PHX |
| Norman | 6.03.02 | 2009.10.16 | W32/Agent.RWSY |
| nProtect | 2009.1.8.0 | 2009.10.15 | - |
| Panda | 10.0.2.2 | 2009.10.15 | Trj/CI.A |
| PCTools | 4.4.2.0 | 2009.10.16 | - |
| Prevx | 3.0 | 2009.10.16 | High Risk Cloaked Malware |
| Rising | 21.51.44.00 | 2009.10.16 | - |
| Sophos | 4.46.0 | 2009.10.16 | Mal/Generic-A |
| Sunbelt | 3.2.1858.2 | 2009.10.15 | Trojan.Win32.Agent |
| Symantec | 1.4.4.12 | 2009.10.16 | Trojan.Cinmeng |
| TheHacker | 6.5.0.2.043 | 2009.10.15 | - |
| TrendMicro | 8.950.0.1094 | 2009.10.16 | TROJ_CINMENG.JD |
| VBA32 | 3.12.10.11 | 2009.10.15 | - |
| ViRobot | 2009.10.16.1988 | 2009.10.16 | - |
| VirusBuster | 4.6.5.0 | 2009.10.15 | - |
| 附加信息 |
| File size: 171520 bytes |
| MD5...: 1dcdefe7b2c17736e87f72c347eff6a2 |
| SHA1..: b40eab780feb6c828fa82218d9e4dd932e56c976 |
| SHA256: 362db39d816cf33456dad77fb08bef8e8af56a242406790818f352bb13761b4c |
| ssdeep: 3072:fG1qdjNOq5JADPgyNwfl02mgvTa0OhkO5gcSTSw3hRjVGqAg9PXCKNoD2rW wKzZy:3NxJ4xa0i2yygDT9Xju6mwuZz |
| PEiD..: - |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x9df90 timedatestamp.....: 0x4ad358dd (Mon Oct 12 16:27:09 2009) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 UPX0 0x1000 0x74000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e UPX1 0x75000 0x2a000 0x29200 7.92 4c371bc6ff467350a11250353656aa76 .rsrc 0x9f000 0x1000 0x800 3.39 6897e37f4fb0e14852678604a6e9c986 ( 10 imports ) > KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect > ADVAPI32.dll: RegCloseKey > iphlpapi.dll: GetAdaptersInfo > MFC42.DLL: - > MSVCRT.dll: time > ole32.dll: CoInitialize > OLEAUT32.dll: - > USER32.dll: SetTimer > WININET.dll: InternetOpenA > WINMM.dll: timeGetTime ( 3 exports ) InstallHook, InstallMyDll, UnInstallHook |
| RDS...: NSRL Reference Data Set - |
| pdfid.: - |
| trid..: UPX compressed Win32 Executable (43.8%) Win32 EXE Yoda's Crypter (38.1%) Win32 Executable Generic (12.2%) Generic Win/DOS Executable (2.8%) DOS Executable Generic (2.8%) |
| <a href='http://info.prevx.com/aboutprogramtext.asp?PX5=D116BDFF00B7E03C9E66029DB2C4410089F9A222' target='_blank'>http://info.prevx.com/aboutprogr ... B2C4410089F9A222<;/a> |
| sigcheck: publisher....: copyright....: ____ (C) 2008 product......: MyTest3 Dynamic Link Library description..: MyTest3 original name: MyTest3.DLL internal name: MyTest3 file version.: 1, 0, 0, 1 comments.....: signers......: - signing date.: - verified.....: Unsigned |
| packers (Kaspersky): PE_Patch.UPX, UPX |
| packers (F-Prot): UPX |
| packers (Antiy-AVL): UPX 0.89.6 - 1.02 / 1.05 - 1.22 DLL |
用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; TencentTraveler 4.0; MAXTHON 2.0)