Код:
Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.01.19 Trojan-Ransom!IK
AhnLab-V3 5.0.0.2 2010.01.19 -
AntiVir 7.9.1.142 2010.01.18 TR/Ransom.PogBlock.RI
Antiy-AVL 2.0.3.7 2010.01.19 -
Authentium 5.2.0.5 2010.01.19 -
Avast 4.8.1351.0 2010.01.18 -
AVG 9.0.0.730 2010.01.18 Generic16.AECB
BitDefender 7.2 2010.01.19 Trojan.Generic.2990194
CAT-QuickHeal 10.00 2010.01.19 -
ClamAV 0.94.1 2010.01.19 -
Comodo 3634 2010.01.19 -
DrWeb 5.0.1.12222 2010.01.19 Trojan.Winlock.591
eSafe 7.0.17.0 2010.01.18 -
eTrust-Vet 35.2.7244 2010.01.18 -
F-Prot 4.5.1.85 2010.01.18 -
F-Secure 9.0.15370.0 2010.01.19 Trojan.Generic.2990194
Fortinet 4.0.14.0 2010.01.19 W32/PogBlock.RI!tr
GData 19 2010.01.19 Trojan.Generic.2990194
Ikarus T3.1.1.80.0 2010.01.19 Trojan-Ransom
Jiangmin 13.0.900 2010.01.19 -
K7AntiVirus 7.10.950 2010.01.18 -
Kaspersky 7.0.0.125 2010.01.19 Trojan-Ransom.Win32.PogBlock.ri
McAfee 5865 2010.01.18 -
McAfee+Artemis 5865 2010.01.18 -
McAfee-GW-Edition 6.8.5 2010.01.19 Heuristic.BehavesLike.Win32.Suspicious.I
Microsoft 1.5302 2010.01.19 Trojan:Win32/Ransom.U
NOD32 4784 2010.01.18 a variant of Win32/LockScreen.FY
Norman 6.04.03 2010.01.18 -
nProtect 2009.1.8.0 2010.01.18 -
Panda 10.0.2.2 2010.01.18 Trj/CI.A
PCTools 7.0.3.5 2010.01.19 Trojan.Generic
Prevx 3.0 2010.01.19 -
Rising 22.31.01.04 2010.01.19 -
Sophos 4.49.0 2010.01.19 -
Sunbelt 3.2.1858.2 2010.01.19 -
Symantec 20091.2.0.41 2010.01.19 Trojan Horse
TheHacker 6.5.0.6.156 2010.01.19 -
TrendMicro 9.120.0.1004 2010.01.19 TROJ_RANSOM.GY
VBA32 3.12.12.1 2010.01.19 -
ViRobot 2010.1.19.2144 2010.01.19 -
VirusBuster 5.0.21.0 2010.01.18 -
Additional information
File size: 366080 bytes
MD5...: 11906989071a01c79fdaeeab2a87d41b
SHA1..: caa3fbb7933331620984983218d760c37cba6bbd
SHA256: 5820dfe90f6601acfe4e6767a7b1e5a20d8a9a4a67b1e2d554969020f17038da
ssdeep: 6144:nTR2p3PBkpEPmuxDADcozUn4uYH4hA6+b7TBLl7XAOsJebmPdSTte:TR2ZB<BR>CEPbkAwRuYYhA6+PTtl7X6eb+<BR>
PEiD..: -
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x21b53<BR>timedatestamp.....: 0x4b41ffb3 (Mon Jan 04 14:48:19 2010)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 4 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x3d525 0x3d600 6.71 1b3e7d296599a3767a9165e51388c650<BR>.rdata 0x3f000 0xd38e 0xd400 6.50 2602468a94aad5f9136f75c02d4300e0<BR>.data 0x4d000 0x10864 0xe600 7.77 482214080c1cfc2d304b041eff66a15c<BR>.rsrc 0x5e000 0x10 0x200 0.00 bf619eac0cdf3f68d496ea9344137e8b<BR><BR>( 7 imports ) <BR>> KERNEL32.dll: GetLongPathNameW, SetFileApisToANSI, SystemTimeToFileTime, SetFileValidData, GetSystemTime, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, FindClose, MoveFileExW, GetCompressedFileSizeW, UnmapViewOfFile, SetFileShortNameW, FindNextFileW, GetFileAttributesExW, GetBinaryTypeW, GetShortPathNameW, GetFileSize, CreateFileA, CreateHardLinkW, GetModuleFileNameA, FlushFileBuffers, SetFilePointer, GetFileSizeEx, GetFileType, MoveFileW, SetEndOfFile, CancelIo, SetFilePointerEx, TerminateProcess, Sleep, CreateFileMappingW, GetQueuedCompletionStatus, PostQueuedCompletionStatus, FindFirstFileW, MoveFileWithProgressW, MapViewOfFile, FlushViewOfFile, GetProcAddress, LoadLibraryA, GetFileTime, GetTempFileNameW, CopyFileW, UnlockFileEx, GetFileInformationByHandle, GetFullPathNameW, WinExec, DeleteFileW, SearchPathA, GetShortPathNameA, DeleteFileA, GetFileAttributesW, GetSystemDirectoryW, WideCharToMultiByte, ReadFileScatter, SetFileAttributesW, ExitProcess, OpenFileMappingW, UnlockFile, MultiByteToWideChar, GetLastError, CreateMutexW, GetModuleHandleA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, GetSystemTimeAsFileTime, WriteFileEx, ReadFile, SetFileApisToOEM, GetModuleHandleW, GetModuleFileNameW, LockFile, WriteFileGather, ReadFileEx, SetFileTime, AreFileApisANSI, GetTickCount, CreateIoCompletionPort, SearchPathW, FindFirstFileExW, CloseHandle, WriteFile, CopyFileExW, CreateFileW, GetTempPathW, LockFileEx, ReplaceFileW, MapViewOfFileEx, GetCurrentProcessId, QueryPerformanceCounter, GetCommandLineW, GetCommandLineA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, SetHandleCount, GetConsoleMode, GetConsoleCP, HeapSize, HeapAlloc, HeapFree, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RaiseException, RtlUnwind, ExitThread, ResumeThread, CreateThread, GetVersionExA, GetProcessHeap, GetStartupInfoW, VirtualFree, VirtualAlloc, HeapReAlloc, HeapDestroy, HeapCreate, GetStdHandle, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage<BR>> USER32.dll: GetClientRect, GetWindowDC, ReleaseDC, GetDesktopWindow, GetWindowRect, CreateWindowExW, DrawTextW, SetTimer, LoadCursorW, ShowWindow, UpdateWindow, GetDC, GetMessageW, TranslateMessage, DispatchMessageW, UnregisterClassW, DefWindowProcW, KillTimer, PostQuitMessage, BeginPaint, EndPaint<BR>> GDI32.dll: SetBkMode, SetTextColor, CreateCompatibleBitmap, CreateCompatibleDC, BitBlt, GetDIBits, DeleteDC, CreatePen, SelectObject, CreateSolidBrush, Rectangle, DeleteObject, SetDIBitsToDevice, CreateFontW<BR>> ADVAPI32.dll: RegQueryValueExW, RegOpenKeyExW, RegSetValueExW, RegCloseKey, SetFileSecurityW, RegCreateKeyExW<BR>> SHELL32.dll: SHGetFolderPathA<BR>> RPCRT4.dll: UuidCreate, RpcStringFreeW, UuidToStringW<BR>> WININET.dll: InternetReadFile, HttpSendRequestW, HttpOpenRequestW, InternetConnectW, InternetOpenW, InternetCrackUrlW, InternetCloseHandle<BR><BR>( 0 exports ) <BR>
RDS...: NSRL Reference Data Set<BR>-
sigcheck:<BR>publisher....: n/a<BR>copyright....: n/a<BR>product......: n/a<BR>description..: n/a<BR>original name: n/a<BR>internal name: n/a<BR>file version.: n/a<BR>comments.....: n/a<BR>signers......: -<BR>signing date.: -<BR>verified.....: Unsigned<BR>
trid..: Win32 Executable MS Visual C++ (generic) (65.2%)<BR>Win32 Executable Generic (14.7%)<BR>Win32 Dynamic Link Library (generic) (13.1%)<BR>Generic Win/DOS Executable (3.4%)<BR>DOS Executable Generic (3.4%)
pdfid.: -
Ответить с цитированием
Br+TgGcrWe40<BR>
