So, hier der zweite Teil. Bitte wieder die Kommentare beachten!
PHP-Code:
Die Datei c:\windows\system32\..\svchost.exe wurde unter der genauen Direktory C:\WINDOWS\SYSTEM32\dllcache\svchost.exe
VirSCAN.org Scanned Report :
Scanned time : 2007/12/18 20:31:15 (CET)
Scanner results: 3% der Scanner (1/36) haben Malware gefunden!
File Name : svchost.exe
File Size : 14336 byte
File Type : MS-DOS executable (EXE), OS/2 or MS Windows
MD5 : 65a819b121eb6fdab4400ea42bdffe64
SHA1 : 0dfdee2871427e9c40ec82541156884ff9b4bfa3
Online report : http://virscan.org/report/65a819b121eb6fdab4400ea42bdffe64.html
Scanner Engine Ver Sig Ver Sig Date Time Scan result
A-Squared 3.0.0.126 2007.12.18 2007-12-18 2.83 -
AhnLab V3 2007.12.18.01 2007.12.18 2007-12-18 1.12 -
AntiVir 7.6.0.45 7.0.1.117 2007-12-18 8.42 -
Arcavir 1.0.4 200712181502 2007-12-18 4.10 -
Avast 1.0.8 071217-0 2007-12-17 9.28 -
AVG 7.5.49.442 269.17.1/1183 2007-12-13 9.60 -
BitDefender 7.60825.960468 7.16370 2007-12-19 11.58 -
CA (VET) 9.0.0.143 31.3.5385 2007-12-18 11.37 -
ClamAV 0.91.2 5173 2007-12-19 0.03 -
Comodo 2.11 2.0.0.377 2007-12-18 0.80 -
CP Secure 1.1.0.655 2007.12.18 2007-12-18 14.11 -
Dr.Web 4.44.0.9170 2007.12.18 2007-12-18 11.69 -
Ewido 4.0.0.2 2007.12.18 2007-12-18 2.00 -
F-Prot 4.4.1.52 20071217 2007-12-17 3.17 -
F-Secure 5.51.6100 2007.12.18.06 2007-12-18 3.24 -
Fortinet 2.81-3.11 8.449 2007-12-03 0.28 -
ViRobot 20071218 2007.12.18 2007-12-18 0.40 -
Ikarus T3.1.01.15 2007.12.18.70010 2007-12-18 1.20 -
JiangMin 10.00.650 2007.12.17 2007-12-17 1.19 -
Kaspersky 5.5.10 2007.12.18 2007-12-18 19.38 -
KingSoft 2007.6.20.249 2007.12.19 2007-12-19 0.67 -
McAfee 5.2.00 5187 2007-12-17 2.55 -
mks_vir 2.01 2007.12.18 2007-12-18 8.70 -
NOD32 2.70.10 2731 2007-12-18 0.01 -
Norman 5.91.08 5.90 2007-12-17 8.68 -
Panda 9.04.03.0001 2007.12.17 2007-12-17 2.72 -
Trend Micro 8.500-1001 4.894.11 2007-12-18 0.04 -
Prevx V2 20071219 2007-12-19 2.60 TROJAN.DOWNLOADER.GEN
Quick Heal 9.00 2007.12.18 2007-12-18 2.18 -
Rising 19.0 20.23.12.00 2007-12-18 1.28 -
Sophos 2.49.1 4.21 2007-12-18 6.21 -
Symantec 1.3.0.24 20071217.003 2007-12-17 0.23 -
nProtect 2007-12-18.00 1094216 2007-12-18 4.51 -
The Hacker 6.2.9 v00162 2007-12-17 0.77 -
VBA32 3.12.2.5 20071218.1224 2007-12-18 1.50 -
VirusBuster 4.3.19:9 9.117.6/11.0 2007-12-18 2.95 -
VirSCAN.org Scanned Report :
Scanned time : 2007/12/18 21:34:26 (CET)
Scanner results: 50% der Scanner (18/36) haben Malware gefunden!
File Name : winsn.exe
File Size : 89088 byte
File Type : MS-DOS executable (EXE), OS/2 or MS Windows
MD5 : ad24f4f43c7cda75b551451475368885
SHA1 : a60d5c160865e4b5b6d4d2b0a1cc0d38df10a865
Online report : http://virscan.org/report/2f800892d393c54dba2b30c653bf09a2.html
Scanner Engine Ver Sig Ver Sig Date Time Scan result
A-Squared 3.0.0.126 2007.12.18 2007-12-18 3.12 Trojan-PSW.Win32.QQPass.aom
AhnLab V3 2007.12.18.01 2007.12.18 2007-12-18 1.04 -
AntiVir 7.6.0.45 7.0.1.117 2007-12-18 4.30 TR/Crypt.ULPM.Gen
Arcavir 1.0.4 200712181502 2007-12-18 4.98 -
Avast 1.0.8 071217-0 2007-12-17 3.40 -
AVG 7.5.49.442 269.17.1/1183 2007-12-13 2.25 -
BitDefender 7.60825.960470 7.16371 2007-12-19 7.54 Trojan.Agent.AGEG
CA (VET) 9.0.0.143 31.3.5385 2007-12-18 8.00 -
ClamAV 0.91.2 5174 2007-12-19 0.23 -
Comodo 2.11 2.0.0.377 2007-12-18 1.22 -
CP Secure 1.1.0.655 2007.12.18 2007-12-18 11.20 -
Dr.Web 4.44.0.9170 2007.12.18 2007-12-18 7.59 Trojan.Alert
Ewido 4.0.0.2 2007.12.18 2007-12-18 2.12 -
F-Prot 4.4.1.52 20071217 2007-12-17 3.01 -
F-Secure 5.51.6100 2007.12.18.06 2007-12-18 8.46 Trojan-PSW.Win32.QQPass.aom [AVP]
Fortinet 2.81-3.11 8.449 2007-12-03 0.28 -
ViRobot 20071218 2007.12.18 2007-12-18 0.72 -
Ikarus T3.1.01.15 2007.12.18.70011 2007-12-18 1.19 Trojan-PWS.Win32.QQPass.aom
JiangMin 10.00.650 2007.12.17 2007-12-17 1.13 -
Kaspersky 5.5.10 2007.12.18 2007-12-18 6.30 Trojan-PSW.Win32.QQPass.aom
KingSoft 2007.6.20.249 2007.12.19 2007-12-19 0.71 Win32.Troj.QQPass.ao.89088
McAfee 5.2.00 5188 2007-12-18 2.45 Downloader.gen.a
mks_vir 2.01 2007.12.18 2007-12-18 6.28 -
NOD32 2.70.10 2731 2007-12-18 0.00 Win32/AutoRun.EU worm
Norman 5.91.08 5.90 2007-12-17 6.14 W32/QQPass.GXI
Panda 9.04.03.0001 2007.12.17 2007-12-17 2.77 W32/Autorun.IC.worm
Trend Micro 8.500-1001 4.894.12 2007-12-18 0.04 -
Prevx V2 20071219 2007-12-19 2.76 TROJAN.DOWNLOADER.GEN
Quick Heal 9.00 2007.12.18 2007-12-18 2.44 TrojanPSW.QQPass.aom
Rising 19.0 20.23.12.00 2007-12-18 1.47 -
Sophos 2.49.1 4.21 2007-12-18 4.35 Mal/Behav-119
Symantec 1.3.0.24 20071218.007 2007-12-18 0.24 -
nProtect 2007-12-19.00 1094933 2007-12-19 4.16 Trojan-PWS/W32.QQPass.89088
The Hacker 6.2.9 v00163 2007-12-18 0.73 Trojan/PSW.QQPass.aom
VBA32 3.12.2.5 20071218.1224 2007-12-18 2.94 -
VirusBuster 4.3.19:9 9.117.6/11.0 2007-12-18 1.10 Trojan.PWS.QQPass.ALN
C:\WINDOWS\SYSTEM32\svchost.exe
VirSCAN.org Scanned Report :
Scanned time : 2007/12/18 21:39:16 (CET)
Scanner results: 3% der Scanner (1/36) haben Malware gefunden!
File Name : svchost.exe
File Size : 14336 byte
File Type : MS-DOS executable (EXE), OS/2 or MS Windows
MD5 : 65a819b121eb6fdab4400ea42bdffe64
SHA1 : 0dfdee2871427e9c40ec82541156884ff9b4bfa3
Online report : http://virscan.org/report/65a819b121eb6fdab4400ea42bdffe64.html
Scanner Engine Ver Sig Ver Sig Date Time Scan result
A-Squared 3.0.0.126 2007.12.18 2007-12-18 3.13 -
AhnLab V3 2007.12.18.01 2007.12.18 2007-12-18 1.15 -
AntiVir 7.6.0.45 7.0.1.117 2007-12-18 7.46 -
Arcavir 1.0.4 200712181502 2007-12-18 5.96 -
Avast 1.0.8 071217-0 2007-12-17 6.18 -
AVG 7.5.49.442 269.17.1/1183 2007-12-13 7.36 -
BitDefender 7.60825.960470 7.16371 2007-12-19 9.80 -
CA (VET) 9.0.0.143 31.3.5385 2007-12-18 8.46 -
ClamAV 0.91.2 5174 2007-12-19 0.02 -
Comodo 2.11 2.0.0.377 2007-12-18 2.01 -
CP Secure 1.1.0.655 2007.12.18 2007-12-18 17.18 -
Dr.Web 4.44.0.9170 2007.12.18 2007-12-18 10.79 -
Ewido 4.0.0.2 2007.12.18 2007-12-18 2.42 -
F-Prot 4.4.1.52 20071217 2007-12-17 2.97 -
F-Secure 5.51.6100 2007.12.18.06 2007-12-18 0.04 -
Fortinet 2.81-3.11 8.449 2007-12-03 0.46 -
ViRobot 20071218 2007.12.18 2007-12-18 0.50 -
Ikarus T3.1.01.15 2007.12.18.70011 2007-12-18 1.27 -
JiangMin 10.00.650 2007.12.17 2007-12-17 1.93 -
Kaspersky 5.5.10 2007.12.18 2007-12-18 13.17 -
KingSoft 2007.6.20.249 2007.12.19 2007-12-19 0.69 -
McAfee 5.2.00 5188 2007-12-18 3.01 -
mks_vir 2.01 2007.12.18 2007-12-18 8.08 -
NOD32 2.70.10 2731 2007-12-18 0.01 -
Norman 5.91.08 5.90 2007-12-17 17.36 -
Panda 9.04.03.0001 2007.12.17 2007-12-17 3.04 -
Trend Micro 8.500-1001 4.894.12 2007-12-18 0.04 -
Prevx V2 20071219 2007-12-19 2.77 TROJAN.DOWNLOADER.GEN
Quick Heal 9.00 2007.12.18 2007-12-18 2.53 -
Rising 19.0 20.23.12.00 2007-12-18 1.87 -
Sophos 2.49.1 4.21 2007-12-18 9.48 -
Symantec 1.3.0.24 20071218.007 2007-12-18 0.19 -
nProtect 2007-12-19.00 1094933 2007-12-19 4.25 -
The Hacker 6.2.9 v00163 2007-12-18 1.22 -
VBA32 3.12.2.5 20071218.1224 2007-12-18 2.69 -
VirusBuster 4.3.19:9 9.117.6/11.0 2007-12-18 3.45 -
C:\Dokumente und Einstellungen\All Users\Dokumente\Settings\bot.dll
Bei einer Suche wird diese Datei zwar als existent angezeigt, aber sie beinhaltet 0 Byte odder wird von den Virenscannern erst gar nicht erkannt.
Im Übrigen wurde das Programm svchost.exe wurde auch noch unter C:\WINDOWS\svchost.exe gefunden. Jedoch tritt beim Upload bei VirScan ein Fehler auf.
18.12.2007, 21:52
Baum-Darstellung