A voir également:
- [Virus] infecté par Win16
- Virus mcafee - Accueil - Piratage
- Virus informatique - Guide
- Virus facebook demande d'amis - Accueil - Facebook
- Panda anti virus gratuit - Télécharger - Antivirus & Antimalwares
- Undisclosed-recipients virus - Guide
21 réponses
Rapport :
AhnLab-V3 2008.5.15.0 2008.05.14 -
AntiVir 7.8.0.17 2008.05.14 -
Authentium 5.1.0.4 2008.05.14 -
Avast 4.8.1195.0 2008.05.14 -
AVG 7.5.0.516 2008.05.14 -
BitDefender 7.2 2008.05.14 -
CAT-QuickHeal 9.50 2008.05.14 -
ClamAV 0.92.1 2008.05.14 -
DrWeb 4.44.0.09170 2008.05.14 -
eSafe 7.0.15.0 2008.05.14 -
eTrust-Vet 31.4.5788 2008.05.14 -
Ewido 4.0 2008.05.14 -
F-Prot 4.4.2.54 2008.05.14 -
F-Secure 6.70.13260.0 2008.05.14 -
Fortinet 3.14.0.0 2008.05.14 -
GData 2.0.7306.1023 2008.05.14 -
Ikarus T3.1.1.26.0 2008.05.14 -
Kaspersky 7.0.0.125 2008.05.14 -
McAfee 5295 2008.05.14 -
Microsoft 1.3408 2008.05.13 -
NOD32v2 3099 2008.05.14 -
Norman 5.80.02 2008.05.14 -
Panda 9.0.0.4 2008.05.14 Suspicious file
Prevx1 V2 2008.05.14 -
Rising 20.44.22.00 2008.05.14 -
Sophos 4.29.0 2008.05.14 -
Sunbelt 3.0.1114.0 2008.05.12 -
Symantec 10 2008.05.14 -
TheHacker 6.2.92.309 2008.05.13 -
VBA32 3.12.6.6 2008.05.14 -
VirusBuster 4.3.26:9 2008.05.14 -
Webwasher-Gateway 6.6.2 2008.05.14 -
Information additionnelle
File size: 102400 bytes
MD5...: 7562a82f1530d142b110f1a7b310213d
SHA1..: f627992e4ebf54eb229ee40fd6da3e416af9c68e
SHA256: ffbf57bd2ed0fd253b6ba130e872c679c420083bcb4a767968fa395a00fbf2e5
SHA512: 329216e5a91f840f22bdb00ef5b9a8a3d76a3e2f50abd35e1350cb11e5a41b8f
d71a06fb1f6d8c8a8d2476293a3080eaf04a859b14ade59fa8474abf58e190b0
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x401848
timedatestamp.....: 0x3da5a647 (Thu Oct 10 16:09:43 2002)
machinetype.......: 0x14c (I386)
( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x15558 0x16000 6.90 8db1cbe4e253353f844ce1e0d22cf35c
.data 0x17000 0xa34 0x1000 0.00 620f0b67a91f7f74151bc5be745b7110
.rsrc 0x18000 0x624 0x1000 1.85 d9dc76fad9bf275b0f13981f9cd938f5
( 1 imports )
> MSVBVM60.DLL: _CIcos, _adj_fptan, __vbaVarMove, __vbaFreeVar, __vbaStrVarMove, -, -, __vbaFreeVarList, __vbaEnd, _adj_fdiv_m64, __vbaPut4, __vbaFreeObjList, _adj_fprem1, __vbaResume, __vbaStrCat, -, __vbaSetSystemError, __vbaHresultCheckObj, _adj_fdiv_m32, __vbaExitProc, __vbaOnError, -, __vbaObjSet, _adj_fdiv_m16i, _adj_fdivr_m16i, -, -, _CIsin, __vbaChkstk, __vbaCyVar, __vbaFileClose, EVENT_SINK_AddRef, -, __vbaStrCmp, __vbaVarTstEq, __vbaI2I4, __vbaObjVar, DllFunctionCall, __vbaVarLateMemSt, _adj_fpatan, EVENT_SINK_Release, -, _CIsqrt, EVENT_SINK_QueryInterface, __vbaVarMul, __vbaExceptHandler, _adj_fprem, _adj_fdivr_m64, __vbaVarDiv, __vbaFPException, __vbaStrVarVal, -, -, _CIlog, __vbaErrorOverflow, __vbaFileOpen, __vbaNew2, __vbaVarInt, __vbaCyMulI2, _adj_fdiv_m32i, _adj_fdivr_m32i, __vbaStrCopy, __vbaFreeStrList, -, _adj_fdivr_m32, _adj_fdiv_r, -, -, __vbaVarTstNe, __vbaI4Var, __vbaVarAdd, __vbaLateMemCall, __vbaVarDup, __vbaStrToAnsi, -, __vbaFpI2, -, __vbaVarCopy, -, __vbaR8IntI2, _CIatan, __vbaStrMove, -, _allmul, __vbaLateIdSt, _CItan, _CIexp, __vbaFreeStr, __vbaFreeObj
( 0 exports )
AhnLab-V3 2008.5.15.0 2008.05.14 -
AntiVir 7.8.0.17 2008.05.14 -
Authentium 5.1.0.4 2008.05.14 -
Avast 4.8.1195.0 2008.05.14 -
AVG 7.5.0.516 2008.05.14 -
BitDefender 7.2 2008.05.14 -
CAT-QuickHeal 9.50 2008.05.14 -
ClamAV 0.92.1 2008.05.14 -
DrWeb 4.44.0.09170 2008.05.14 -
eSafe 7.0.15.0 2008.05.14 -
eTrust-Vet 31.4.5788 2008.05.14 -
Ewido 4.0 2008.05.14 -
F-Prot 4.4.2.54 2008.05.14 -
F-Secure 6.70.13260.0 2008.05.14 -
Fortinet 3.14.0.0 2008.05.14 -
GData 2.0.7306.1023 2008.05.14 -
Ikarus T3.1.1.26.0 2008.05.14 -
Kaspersky 7.0.0.125 2008.05.14 -
McAfee 5295 2008.05.14 -
Microsoft 1.3408 2008.05.13 -
NOD32v2 3099 2008.05.14 -
Norman 5.80.02 2008.05.14 -
Panda 9.0.0.4 2008.05.14 Suspicious file
Prevx1 V2 2008.05.14 -
Rising 20.44.22.00 2008.05.14 -
Sophos 4.29.0 2008.05.14 -
Sunbelt 3.0.1114.0 2008.05.12 -
Symantec 10 2008.05.14 -
TheHacker 6.2.92.309 2008.05.13 -
VBA32 3.12.6.6 2008.05.14 -
VirusBuster 4.3.26:9 2008.05.14 -
Webwasher-Gateway 6.6.2 2008.05.14 -
Information additionnelle
File size: 102400 bytes
MD5...: 7562a82f1530d142b110f1a7b310213d
SHA1..: f627992e4ebf54eb229ee40fd6da3e416af9c68e
SHA256: ffbf57bd2ed0fd253b6ba130e872c679c420083bcb4a767968fa395a00fbf2e5
SHA512: 329216e5a91f840f22bdb00ef5b9a8a3d76a3e2f50abd35e1350cb11e5a41b8f
d71a06fb1f6d8c8a8d2476293a3080eaf04a859b14ade59fa8474abf58e190b0
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x401848
timedatestamp.....: 0x3da5a647 (Thu Oct 10 16:09:43 2002)
machinetype.......: 0x14c (I386)
( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x15558 0x16000 6.90 8db1cbe4e253353f844ce1e0d22cf35c
.data 0x17000 0xa34 0x1000 0.00 620f0b67a91f7f74151bc5be745b7110
.rsrc 0x18000 0x624 0x1000 1.85 d9dc76fad9bf275b0f13981f9cd938f5
( 1 imports )
> MSVBVM60.DLL: _CIcos, _adj_fptan, __vbaVarMove, __vbaFreeVar, __vbaStrVarMove, -, -, __vbaFreeVarList, __vbaEnd, _adj_fdiv_m64, __vbaPut4, __vbaFreeObjList, _adj_fprem1, __vbaResume, __vbaStrCat, -, __vbaSetSystemError, __vbaHresultCheckObj, _adj_fdiv_m32, __vbaExitProc, __vbaOnError, -, __vbaObjSet, _adj_fdiv_m16i, _adj_fdivr_m16i, -, -, _CIsin, __vbaChkstk, __vbaCyVar, __vbaFileClose, EVENT_SINK_AddRef, -, __vbaStrCmp, __vbaVarTstEq, __vbaI2I4, __vbaObjVar, DllFunctionCall, __vbaVarLateMemSt, _adj_fpatan, EVENT_SINK_Release, -, _CIsqrt, EVENT_SINK_QueryInterface, __vbaVarMul, __vbaExceptHandler, _adj_fprem, _adj_fdivr_m64, __vbaVarDiv, __vbaFPException, __vbaStrVarVal, -, -, _CIlog, __vbaErrorOverflow, __vbaFileOpen, __vbaNew2, __vbaVarInt, __vbaCyMulI2, _adj_fdiv_m32i, _adj_fdivr_m32i, __vbaStrCopy, __vbaFreeStrList, -, _adj_fdivr_m32, _adj_fdiv_r, -, -, __vbaVarTstNe, __vbaI4Var, __vbaVarAdd, __vbaLateMemCall, __vbaVarDup, __vbaStrToAnsi, -, __vbaFpI2, -, __vbaVarCopy, -, __vbaR8IntI2, _CIatan, __vbaStrMove, -, _allmul, __vbaLateIdSt, _CItan, _CIexp, __vbaFreeStr, __vbaFreeObj
( 0 exports )
Secousses
Quand je disais que ça rame un peu, ça rame parfois beaucoup et ça finit par planter. Tout dépend de l'humeur de l'ordinateur...
Secousses
>
Secousses
Bref d'après Panda il semble rester un fichier suspect quand-même...
