瑞星卡卡安全论坛

首页 » 技术交流区 » 可疑文件交流 » 6892a5622a761bd279cb8474f35bbe70---gwrcd.biz，updA.tmp
endurer - 2010-6-24 0:24:00

 附件: 您所在的用户组无法下载或查看附件


O23 - 服务: HidServ (Human Interface Device Access) - C:\WINDOWS\System32\svchost.exe -k netsvcs
　　-> C:\PROGRA~1\qteri\gwrcd.biz|2010-6-21 13:20:7(自动)

文件说明符 : C:\Program Files\qteri\gwrcd.biz
属性 : ----
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2010-6-21 13:20:6
修改时间 : 2010-6-21 13:20:7
大小 : 2617344 字节 2.508 MB
MD5 : 6892a5622a761bd279cb8474f35bbe70
SHA1: D6DEF57E45BDF90EA91EBACCA95AC6BD327497F4
CRC32: 89028e68
http://www.virscan.org/report/da944a48f9d3cbf5136470f12c07e4c8.html

a-squared5.0.0.11201006231543152010-06-23-
40.088
AntiVir8.2.2.67.10.8.1592010-06-23TR/PSW.Bjlog.A
0.261
Arcavir20092010062301582010-06-23Trojan.Psw.Bjlog.Iiu
0.050
Authentium5.1.12010062221272010-06-22-
1.599
AVAST!4.7.4100623-02010-06-23-
0.071
AVG8.5.793271.1.1/29572010-06-23PSW.Generic8.BXF
0.231
BitDefender7.90123.62715207.323712010-06-23-
4.032
ClamAV0.96.1112492010-06-23-
0.135
Comodo3.13.57951922010-06-23-
40.091
CP Secure1.3.0.52010.06.232010-06-23-
0.437
Dr.Web5.0.2.33002010.06.232010-06-23-
8.599
F-Prot4.4.4.56201006222010-06-22-
1.582
F-Secure7.02.738072010.06.23.032010-06-23Trojan:W32/Bapkri.B [FSE]
0.157
GData21.394/21.141201006222010-06-22-
40.101
IkarusT3.1.01.842010.06.23.761262010-06-23Trojan-PWS.Win32.Bjlog
6.907
Microsoft1.59022010.06.222010-06-22-
40.095
Norman6.05.106.05.002010-06-22W32/Suspicious_Gen2.BEFHG
6.011
nProtect20100622.0187541542010-06-22-
40.092
Quick Heal10.002010.06.232010-06-23-
40.086
Sophos3.07.14.542010-06-23Mal/Zegost-E
3.575
Sunbelt3.9.2426.264902010-06-22-
40.086
The Hacker6.5.2.0v003032010-06-22-
40.087
VBA323.12.12.520100623.09142010-06-23-
2.980
ViRobot201006222010.06.222010-06-22-
40.086
VirusBuster4.5.11.1010.126.98/20219572010-06-23-
2.752
卡巴斯基5.5.102010.06.232010-06-23Trojan-PSW.Win32.Bjlog.iiu
0.077
安博士V32010.06.18.012010.06.182010-06-18-
40.088
安天2.0.1820100620.47744072010-06-20-
0.017
江民杀毒13.0.9002010.06.232010-06-23-
40.086
熊猫卫士9.05.012010.06.222010-06-22-
40.095
瑞星20.022.53.02.042010-06-23-
40.087
赛门铁克1.3.0.2420100615.0052010-06-15-
0.078
趋势科技9.120-10047.262.132010-06-23-
0.000
迈克菲5400.115860222010-06-23-
19.853
金山毒霸2009.2.5.152010.6.23.212010-06-23-
40.085
飞塔4.1.13312.782010-06-22-
40.086




文件说明符 : C:\Program Files\qteri\updA.tmp
属性 : A---
数字签名:否
PE文件:是
语言 : 英语(美国)
文件版本 : 2.0.50727.42 built by: RTM     
说明 : MSBuild.exe
版权 : ? Microsoft Corporation.  All rights reserved.
备注 : Flavor=Retail
产品版本 : 2.0.50727.42
产品名称 : Microsoft? .NET Framework
公司名称 : Microsoft Corporation
内部名称 : MSBuild.exe
源文件名 : MSBuild.exe
创建时间 : 2010-6-22 17:7:59
修改时间 : 2010-6-22 17:8:13
大小 : 196608 字节 192.0 KB
MD5 : fe84024a05b4fc3f305fff79a3134e88
SHA1: 22A9E0A2E83B0C28254A06F95BF31663FA334221
CRC32: 1ecc67e8
http://www.virscan.org/report/7d524b32b96864bc375857e40463e104.html
a-squared5.0.0.11201006231543152010-06-23-
40.086
AntiVir8.2.2.67.10.8.1592010-06-23-
0.256
Arcavir20092010062301582010-06-23-
0.035
Authentium5.1.12010062221272010-06-22-
1.354
AVAST!4.7.4100623-02010-06-23-
0.028
AVG8.5.793271.1.1/29572010-06-23BackDoor.Generic12.BUKK
0.233
BitDefender7.90123.62715207.323712010-06-23-
4.058
ClamAV0.96.1112492010-06-23-
0.036
Comodo3.13.57951922010-06-23-
40.087
CP Secure1.3.0.52010.06.232010-06-23-
0.071
Dr.Web5.0.2.33002010.06.232010-06-23Adware.Baidu.2507
8.258
F-Prot4.4.4.56201006222010-06-22-
1.402
F-Secure7.02.738072010.06.23.032010-06-23Trojan-PSW.Win32.Bjlog.inm [AVP]
0.461
GData21.394/21.141201006222010-06-22-
40.107
IkarusT3.1.01.842010.06.23.761262010-06-23Backdoor.Win32.Zegost
6.872
Microsoft1.59022010.06.222010-06-22-
40.089
Norman6.05.106.05.002010-06-22-
6.007
nProtect20100622.0187541542010-06-22-
40.087
Quick Heal10.002010.06.232010-06-23-
40.087
Sophos3.07.14.542010-06-23-
3.551
Sunbelt3.9.2426.264902010-06-22-
40.085
The Hacker6.5.2.0v003032010-06-22-
40.085
VBA323.12.12.520100623.09142010-06-23-
2.840
ViRobot201006222010.06.222010-06-22-
40.085
VirusBuster4.5.11.1010.126.98/20219572010-06-23-
2.453
卡巴斯基5.5.102010.06.232010-06-23Trojan-PSW.Win32.Bjlog.inm
0.080
安博士V32010.06.18.012010.06.182010-06-18-
40.113
安天2.0.1820100620.47744072010-06-20-
0.019
江民杀毒13.0.9002010.06.232010-06-23-
40.085
熊猫卫士9.05.012010.06.222010-06-22-
40.104
瑞星20.022.53.02.042010-06-23-
40.085
赛门铁克1.3.0.2420100615.0052010-06-15-
0.114
趋势科技9.120-10047.262.132010-06-23-
0.000
迈克菲5400.115860222010-06-23-
17.680
金山毒霸2009.2.5.152010.6.23.212010-06-23-
40.089
飞塔4.1.13312.782010-06-22-
40.085


用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; QQDownload 1.7; Maxthon)
networkedition - 2010-6-24 10:21:00
上报文件成功！
查询编号：RS20100624101355343155
为查询文件分析结果，请记录此编号。谢谢您的参与！
endurer - 2010-6-25 0:23:00
再补3个检出率比较低的文件


 附件: 您所在的用户组无法下载或查看附件

文件说明符 : C:\Program Files\qteri\upd14.tmp
属性 : A---
数字签名:否
PE文件:是
语言 : 中文(中国)
文件版本 : 1, 0, 0, 0
版权 : Copyright 2090
产品版本 : 1, 0, 0, 0
公司名称 :
创建时间 : 2010-6-22 17:9:40
修改时间 : 2010-6-22 17:9:42
大小 : 28672 字节 28.0 KB
MD5 : 9b94436f86e9a61758e904be3719c69f
SHA1: EE508E2635E6FD40A666D85A4DB526BB0D5D0C58
CRC32: d2d62910
http://www.virscan.org/report/1f2b41d9491bdceb8e333ead72364a75.html

a-squared5.0.0.11201006240634302010-06-24-
40.087
AntiVir8.2.4.27.10.8.1842010-06-24TR/Crypt.ZPACK.Gen
0.263
Arcavir20092010062409132010-06-24-
0.032
Authentium5.1.12010062410302010-06-24W32/CrazyCrunch-based!Maximus (Heuristic)
1.334
AVAST!4.7.4100624-02010-06-24-
0.005
AVG8.5.793271.1.1/29602010-06-24-
0.244
BitDefender7.90123.62750827.323872010-06-24-
4.000
ClamAV0.96.1112552010-06-24Trojan.Agent-164971
0.021
Comodo3.13.57951992010-06-24-
40.085
CP Secure1.3.0.52010.06.242010-06-24-
0.046
Dr.Web5.0.2.33002010.06.242010-06-24-
8.242
F-Prot4.4.4.56201006242010-06-24Possible W32/CrazyCrunch-based!Maximus
1.398
F-Secure7.02.738072010.06.24.042010-06-24-
0.201
GData21.402/21.144201006242010-06-24-
40.085
IkarusT3.1.01.842010.06.24.761322010-06-24Trojan-Downloader.Win32.Selvice
8.518
Microsoft1.59022010.06.242010-06-24-
40.120
Norman6.05.106.05.002010-06-23-
6.013
nProtect20100622.0187541542010-06-22-
40.087
Quick Heal10.002010.06.242010-06-24-
40.333
Sophos3.07.14.542010-06-24Mal/EncPk-PJ
5.303
Sunbelt3.9.2426.264982010-06-23-
40.151
The Hacker6.5.2.0v003032010-06-23-
40.086
VBA323.12.12.520100624.09252010-06-24-
4.027
ViRobot201006232010.06.232010-06-23-
40.134
VirusBuster4.5.11.1010.126.100/20226352010-06-24-
2.359
卡巴斯基5.5.102010.06.242010-06-24-
0.254
安博士V32010.06.18.012010.06.182010-06-18-
40.087
安天2.0.1820100620.47744072010-06-20-
0.018
江民杀毒13.0.9002010.06.232010-06-23-
40.106
熊猫卫士9.05.012010.06.232010-06-23-
40.180
瑞星20.022.53.03.032010-06-24-
40.094
赛门铁克1.3.0.2420100615.0052010-06-15-
0.350
趋势科技9.120-10047.264.102010-06-24-
0.047
迈克菲5400.115860222010-06-23-
28.374
金山毒霸2009.2.5.152010.6.24.182010-06-24-
40.197
飞塔4.1.13312.802010-06-23-
40.087


文件说明符 : C:\Program Files\qteri\upd2E.tmp
属性 : A---
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2010-6-22 11:56:8
修改时间 : 2010-6-22 11:56:21
大小 : 2048 字节 2.0 KB
MD5 : e0f2b29831899019a27bb16064f35011
SHA1: C19676DDDEC83B211F516650C0D732F2B38F2DB8
CRC32: ee136cf0
http://www.virscan.org/report/13c06ba9dcc0e16363e023cf270a5f01.html
a-squared5.0.0.11201006240634302010-06-24-
40.085
AntiVir8.2.4.27.10.8.1842010-06-24-
0.344
Arcavir20092010062409132010-06-24-
0.006
Authentium5.1.12010062410302010-06-24-
1.365
AVAST!4.7.4100624-02010-06-24-
0.002
AVG8.5.793271.1.1/29602010-06-24-
0.256
BitDefender7.90123.62750827.323872010-06-24-
4.067
ClamAV0.96.1112552010-06-24-
0.005
Comodo3.13.57951992010-06-24-
40.087
CP Secure1.3.0.52010.06.242010-06-24-
0.093
Dr.Web5.0.2.33002010.06.242010-06-24-
8.623
F-Prot4.4.4.56201006242010-06-24-
1.299
F-Secure7.02.738072010.06.24.042010-06-24-
0.127
GData21.402/21.144201006242010-06-24-
40.116
IkarusT3.1.01.842010.06.24.761322010-06-24-
6.868
Microsoft1.59022010.06.242010-06-24-
40.089
Norman6.05.106.05.002010-06-23-
4.010
nProtect20100622.0187541542010-06-22-
40.107
Quick Heal10.002010.06.242010-06-24-
40.088
Sophos3.07.14.542010-06-24-
3.538
Sunbelt3.9.2426.264982010-06-23-
40.087
The Hacker6.5.2.0v003032010-06-23-
40.088
VBA323.12.12.520100624.09252010-06-24-
3.307
ViRobot201006232010.06.232010-06-23-
40.140
VirusBuster4.5.11.1010.126.100/20226352010-06-24-
2.649
卡巴斯基5.5.102010.06.242010-06-24-
0.087
安博士V32010.06.18.012010.06.182010-06-18-
40.090
安天2.0.1820100620.47744072010-06-20-
0.019
江民杀毒13.0.9002010.06.232010-06-23-
40.087
熊猫卫士9.05.012010.06.232010-06-23-
40.093
瑞星20.022.53.03.032010-06-24-
40.089
赛门铁克1.3.0.2420100615.0052010-06-15-
0.064
趋势科技9.120-10047.264.102010-06-24-
0.021
迈克菲5400.115860222010-06-23-
18.132
金山毒霸2009.2.5.152010.6.24.182010-06-24-
40.086
飞塔4.1.13312.802010-06-23-
40.095

文件说明符 : C:\Program Files\qteri\upd2D.tmp
属性 : A---
数字签名:否
PE文件:是
获取文件版本信息大小失败!
创建时间 : 2010-6-22 11:56:8
修改时间 : 2010-6-22 11:56:18
大小 : 26624 字节 26.0 KB
MD5 : 487df3381011d6726bdbd6fe2093d61b
SHA1: D40861CE077D6BC6972402BC16C78C5DF50EB8B7
CRC32: edc139d8
http://www.virscan.org/report/c9da20f765fdd062fa3a47c6b4e1a0b6.html

a-squared5.0.0.11201006240634302010-06-24-
40.089
AntiVir8.2.4.27.10.8.1842010-06-24-
0.263
Arcavir20092010062409132010-06-24-
0.031
Authentium5.1.12010062410302010-06-24-
1.395
AVAST!4.7.4100624-02010-06-24-
0.006
AVG8.5.793271.1.1/29602010-06-24BackDoor.Generic12.BUKK
0.229
BitDefender7.90123.62750827.323872010-06-24-
4.027
ClamAV0.96.1112552010-06-24-
0.017
Comodo3.13.57951992010-06-24-
40.093
CP Secure1.3.0.52010.06.242010-06-24-
0.043
Dr.Web5.0.2.33002010.06.242010-06-24-
8.540
F-Prot4.4.4.56201006242010-06-24-
1.398
F-Secure7.02.738072010.06.24.042010-06-24-
0.151
GData21.402/21.144201006242010-06-24-
40.086
IkarusT3.1.01.842010.06.24.761322010-06-24Backdoor.Win32.Zegost
6.995
Microsoft1.59022010.06.242010-06-24-
40.090
Norman6.05.106.05.002010-06-23-
6.008
nProtect20100622.0187541542010-06-22-
40.101
Quick Heal10.002010.06.242010-06-24-
40.091
Sophos3.07.14.542010-06-24-
3.649
Sunbelt3.9.2426.264982010-06-23-
40.089
The Hacker6.5.2.0v003032010-06-23-
40.088
VBA323.12.12.520100624.09252010-06-24-
2.866
ViRobot201006232010.06.232010-06-23-
40.089
VirusBuster4.5.11.1010.126.100/20226352010-06-24-
2.357
卡巴斯基5.5.102010.06.242010-06-24-
0.086
安博士V32010.06.18.012010.06.182010-06-18-
40.161
安天2.0.1820100620.47744072010-06-20-
0.018
江民杀毒13.0.9002010.06.232010-06-23-
40.087
熊猫卫士9.05.012010.06.232010-06-23-
40.091
瑞星20.022.53.03.032010-06-24-
40.099
赛门铁克1.3.0.2420100615.0052010-06-15-
0.296
趋势科技9.120-10047.264.102010-06-24-
0.033
迈克菲5400.115860222010-06-23-
16.483
金山毒霸2009.2.5.152010.6.24.182010-06-24-
40.086
飞塔4.1.13312.802010-06-23-
40.086
networkedition - 2010-6-25 9:50:00

 附件: 您所在的用户组无法下载或查看附件
networkedition - 2010-6-25 9:52:00
上报文件成功！
查询编号：RS20100625094508171925
为查询文件分析结果，请记录此编号。谢谢您的参与！
1
查看完整版本: 6892a5622a761bd279cb8474f35bbe70---gwrcd.biz，updA.tmp
© 2000 - 2025 Rising Corp. Ltd.