juvaforza Первый отчёт 18 из 41
[more=Tarlzp.exe ]Файл Tarlzp.exe получен 2009.12.23 03:48:16 (UTC)
Результат: 18/41 (43.91%)
Антивирус Версия Обновление Результат
a-squared 4.5.0.43 2009.12.22 Gen.Trojan!IK
AhnLab-V3 5.0.0.2 2009.12.22 Win-Trojan/Xema.variant
AntiVir 7.9.1.122 2009.12.22 -
Antiy-AVL 2.0.3.7 2009.12.22 -
Authentium 5.2.0.5 2009.12.23 W32/Zbot.I.gen!Eldorado
Avast 4.8.1351.0 2009.12.22 Win32:Malware-gen
AVG 8.5.0.430 2009.12.22 -
BitDefender 7.2 2009.12.23 Gen:Trojan.Heur.GM.1040D00080
CAT-QuickHeal 10.00 2009.12.22 Trojan.Agent.ATV
ClamAV 0.94.1 2009.12.22 -
Comodo 3336 2009.12.23 UnclassifiedMalware
DrWeb 5.0.1.12181 2009.12.23 -
eSafe 7.0.17.0 2009.12.22 Win32.Downloader
eTrust-Vet None 2009.12.22 -
F-Prot 4.5.1.85 2009.12.22 W32/Zbot.I.gen!Eldorado
F-Secure 9.0.15370.0 2009.12.22 Gen:Trojan.Heur.GM.1040D00080
Fortinet 4.0.14.0 2009.12.22 -
GData 19 2009.12.22 Gen:Trojan.Heur.GM.1040D00080
Ikarus T3.1.1.79.0 2009.12.22 Gen.Trojan
Jiangmin 13.0.900 2009.12.22 -
K7AntiVirus 7.10.926 2009.12.22 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2009.12.23 -
McAfee 5840 2009.12.22 -
McAfee+Artemis 5840 2009.12.22 Artemis!2C6E6D164586
McAfee-GW-Edition 6.8.5 2009.12.23 -
Microsoft 1.5302 2009.12.22 -
NOD32 4710 2009.12.22 -
Norman 6.04.03 2009.12.22 -
nProtect 2009.1.8.0 2009.12.22 Trojan/W32.Agent.6144.FU
Panda 10.0.2.2 2009.12.15 -
PCTools 7.0.3.5 2009.12.23 Trojan.Generic
Prevx 3.0 2009.12.23 -
Rising 22.27.02.00 2009.12.23 -
Sophos 4.49.0 2009.12.23 -
Sunbelt 3.2.1858.2 2009.12.23 -
Symantec 1.4.4.12 2009.12.23 Trojan Horse
TheHacker 6.5.0.3.106 2009.12.23 -
TrendMicro 9.120.0.1004 2009.12.23 PAK_Generic.001
VBA32 3.12.12.0 2009.12.23 -
ViRobot 2009.12.23.2103 2009.12.23 -
VirusBuster 5.0.21.0 2009.12.22 -
Дополнительная информация
File size: 6144 bytes
MD5...: 2c6e6d164586ccea2a1fa4e973f05f41
SHA1..: 5227a4cdfb01baff8de2e1bbefa29898dd097e85
SHA256: d1adbf87cf9ac5910f10843e95f15a538e6cb458894e73543f6c4cb88816caf8
ssdeep: 96:Z1ivXu88PTpqqKkEFMHuVff/lYoLgYqCw:u/u8EjKZOaf/lR0Yqz
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x14c25000
timedatestamp.....: 0x46b9b12c (Wed Aug 08 12:03:56 2007)
machinetype.......: 0x14c (I386)
( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
sTAE 0x1000 0x669 0x800 5.77 7e431dc83d1b25d4ea205aa8c495db08
zMIENNE 0x2000 0x14c22245 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
kODZIK 0x14c25000 0x890 0xa00 5.48 be09881de98571a4fade9e2de35e857c
iMPORTY 0x14c26000 0x14e 0x200 3.26 520e1c275f9cb1ffbb1d003988029079
( 2 imports )
> kernel32.dll: CloseHandle, CreateFileA, ExitProcess, GetCurrentProcess, GetFileSize, GetStdHandle, ReadFile, SetPriorityClass, WriteFile
> crtdll.dll: __GetMainArgs
( 0 exports )
RDS...: NSRL Reference Data Set
-
pdfid.: -
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
trid..: Win32 Executable Generic (58.4%)
Win16/32 Executable Delphi generic (14.1%)
Generic Win/DOS Executable (13.7%)
DOS Executable Generic (13.6%)[/more]
Второй отчёт 17 из 40
[more=Tarlzpd.exe] Файл Tarlzpd.exe получен 2009.12.23 03:48:46 (UTC)
Результат: 17/40 (42.5%)
Антивирус Версия Обновление Результат
a-squared 4.5.0.43 2009.12.22 Gen.Trojan!IK
AhnLab-V3 5.0.0.2 2009.12.22 Win-Trojan/Xema.variant
AntiVir 7.9.1.122 2009.12.22 -
Antiy-AVL 2.0.3.7 2009.12.22 -
Authentium 5.2.0.5 2009.12.23 W32/Zbot.I.gen!Eldorado
Avast 4.8.1351.0 2009.12.22 Win32:Malware-gen
AVG 8.5.0.430 2009.12.22 -
BitDefender 7.2 2009.12.23 -
CAT-QuickHeal 10.00 2009.12.22 Trojan.Agent.ATV
ClamAV 0.94.1 2009.12.22 -
Comodo 3336 2009.12.23 UnclassifiedMalware
DrWeb 5.0.1.12181 2009.12.23 -
eSafe 7.0.17.0 2009.12.22 Win32.Downloader
eTrust-Vet 35.1.7192 2009.12.22 -
F-Prot 4.5.1.85 2009.12.22 W32/Zbot.I.gen!Eldorado
F-Secure 9.0.15370.0 2009.12.22 Suspicious:W32/Riskware!Online
Fortinet 4.0.14.0 2009.12.22 -
GData 19 2009.12.22 Win32:Malware-gen
Ikarus T3.1.1.79.0 2009.12.22 Gen.Trojan
K7AntiVirus 7.10.926 2009.12.22 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2009.12.23 -
McAfee 5840 2009.12.22 -
McAfee+Artemis 5840 2009.12.22 Artemis!D7F2B270A23B
McAfee-GW-Edition 6.8.5 2009.12.23 -
Microsoft 1.5302 2009.12.22 -
NOD32 4710 2009.12.22 -
Norman 6.04.03 2009.12.22 -
nProtect 2009.1.8.0 2009.12.22 Trojan/W32.Agent.6144.FV
Panda 10.0.2.2 2009.12.15 -
PCTools 7.0.3.5 2009.12.23 Trojan.Generic
Prevx 3.0 2009.12.23 -
Rising 22.27.02.00 2009.12.23 -
Sophos 4.49.0 2009.12.23 -
Sunbelt 3.2.1858.2 2009.12.23 -
Symantec 1.4.4.12 2009.12.23 Trojan Horse
TheHacker 6.5.0.3.106 2009.12.23 -
TrendMicro 9.120.0.1004 2009.12.23 PAK_Generic.001
VBA32 3.12.12.0 2009.12.23 -
ViRobot 2009.12.23.2103 2009.12.23 -
VirusBuster 5.0.21.0 2009.12.22 -
Дополнительная информация
File size: 6144 bytes
MD5...: d7f2b270a23b167fc5e2c84c22b11215
SHA1..: 8c7dadc8cbe35539d1cef48b07b5273f3fb55ac2
SHA256: e21f4a2ec98a4736dcec1f39aaeddd4295f25d4cb85920601e1beb5d7b979417
ssdeep: 96:Z1jXu88PTpuvLIxtV/z8yVyuVsIi8toY/lYofjMZVYJUQFA6SYyrq:vu8EtxX
/LXWY/lRIyU1Trq
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x14425000
timedatestamp.....: 0x46b9b144 (Wed Aug 08 12:04:20 2007)
machinetype.......: 0x14c (I386)
( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
sTAE 0x1000 0x669 0x800 5.77 b21f2b736808bb27ad73f09b7b9e7a8d
zMIENNE 0x2000 0x1442205a 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
kODZIK 0x14425000 0x841 0xa00 5.13 dabb6cb7a26b342e8f025eccd2dab25f
iMPORTY 0x14426000 0x138 0x200 3.09 76c2b278ca676deb0c1d523f0e47b0bb
( 2 imports )
> kernel32.dll: CloseHandle, CreateFileA, ExitProcess, GetCurrentProcess, GetStdHandle, ReadFile, SetPriorityClass, WriteFile
> crtdll.dll: __GetMainArgs
( 0 exports )
RDS...: NSRL Reference Data Set
-
trid..: Win32 Executable Generic (58.4%)
Win16/32 Executable Delphi generic (14.1%)
Generic Win/DOS Executable (13.7%)
DOS Executable Generic (13.6%)
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
pdfid.: -[/more]