[filename.info logo]
[cn calc.exe][de calc.exe][es calc.exe][fr calc.exe][gb calc.exe][it calc.exe][jp calc.exe][kr calc.exe][nl calc.exe][pt calc.exe][ru calc.exe][us calc.exe]
 

calc.exe (5.1.2600.0)

包含在软件

名字:Windows XP Home Edition, Deutsch
执照:商业
信息链接:http://www.microsoft.com/windowsxp/

文件细节

文件道路:C:\WINDOWS\system32\dllcache \ calc.exe
文件日期:2002-08-29 14:00:00
版本:5.1.2600.0
文件大小:114.688 字节

检查和和文件hashes

CRC32:B7B6CACE
MD5:5CCF 290F 9612 E53A 853A D6BD 59B0 2E55
SHA1:B766 4461 F78C DDC9 2C07 A2DA C54B 8953 E295 966B

版本资源信息

公司名称:Microsoft Corporation
文件描述:Windows Rechner
文件操作系统:Windows NT, Windows 2000, Windows XP, Windows 2003
文件类型:Application
文件版本:5.1.2600.0
内部名:CALC
法律版权: Microsoft Corporation. Alle Rechte vorbehalten.
原始的文件名:CALC.EXE
产品名称:Betriebssystem Microsoft Windows
产品版本:5.1.2600.0

calc.exe 被发现了在以下报告:

W32.HLLC.Happylow

关于W32.HLLC.Happylow
...For example, the virus encrypts the file Calc.exe and renames it to Calc.wal....
...Then the virus copies itself as Calc.exe, so that when the infected Calc.exe is executed, the virus executes its routine....
...Finally, it decrypts the Calc.wal file and executes it to make it appear that Calc.exe has run normally. Also Known As: HLLC.HappyFlowers,...
技术细节
...For example, the virus encrypts Calc.exe and renames it to Calc.wal....
...Then the virus copies itself as Calc.exe, so that when the infected Calc.exe is executed, the virus execute its routine....
...Finally, it decrypts the Calc.wal file and executes it to make it appear as if Calc.exe has run normally. The virus has a harmless payload....
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllc.happylow.html

W32.HLLW.Astef

技术细节
...following files, if they exist: %Windir%Calc.exe to %System%Calc.com %Windir%Notepad.exe to %System%Notepad.exe...
...Copies itself as the following: %Windir%Calc.exe %Windir%Notepad.exe...
...HKEY_CURRENT_USERSoftwareKazaaLocalContent Modifies the value data of...
...HKEY_CURRENT_USERSoftwareGroksterLocalContent In the registry key:...
撤除指示
...following files, if they exist: %System%Calc.com to %Windir%Calc.exe %System%Notepad.exe to %Windir%Notepad.exe...
...to the locations indicated: %System%Calc.com to %Windir%Calc.exe %System%Notepad.exe to %Windir%Notepad.exe...
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.astef.html

W32.Arnger

技术细节
...Syscalc.com Calc.exe Syspad.com...
撤除指示
...If the worm was able to delete Systmger.exe, Syscalc.com, Calc.exe, Syspad.com, Notepad.exe, or Sysctrl.com, you may need to restore these files....
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.arnger.html

W32.Brof

技术细节
...prepended to the filename. For example calc.exe changes to _calc.exe. This is an encrypted copy...
...When an infected file is executed, the encrypted copy (_calc.exe) is decrypted and run. Overwrites the first 8kb of...
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.brof.html

W32.HLLP.Kroter

技术细节
...with the .com extensions. For example, if Calc.exe was an infected file, the virus would extract the clean Calc.exe file to Calc.com,...
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllp.kroter.html

BAT.Install.Trojan

技术细节
...C:WindowsChile.bat C:WindowsCalc.exe C:WindowsMcAfee.bat...
来源: http://securityresponse.symantec.com/avcenter/venc/data/bat.install.trojan.html

W95.Miam.4716

技术细节
...The virus will also infect Calc.exe and Notepad.exe in the Windows folder....
来源: http://securityresponse.symantec.com/avcenter/venc/data/w95.miam.4716.html

W32.Collo

技术细节
...Scandskw.exe Calc.exe Explorer.exe...
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.collo.html

W32.Servese

撤除指示
...For example, if the virus overwrote Calc.exe, the copy that it saved would be Calc.dll....
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.servese.html

W32.Indor

技术细节
...For example, if it finds C:WindowsCalc.exe, the worm may copy itself as C:WindowsCalc.exe.pif....
......
来源: http://securityresponse.symantec.com/avcenter/venc/data/w32.indor.html



Valid HTML 4.01!