Trojaner TR/Alureon.14848J und event. andere Problemchen :-(

Datei StartSetup.exe empfangen 2009.05.24 12:01:21 (UTC)
Status:    Beendet 
Ergebnis: 23/39 (58.98%) 
 Filter 
Drucken der Ergebnisse  Antivirus	Version	letzte aktualisierung	Ergebnis
a-squared	4.0.0.101	2009.05.24	Trojan-Dropper.TAR!IK
AhnLab-V3	5.0.0.2	2009.05.23	-
AntiVir	7.9.0.168	2009.05.23	TR/Dropper.Gen
Antiy-AVL	2.0.3.1	2009.05.22	Trojan/Win32.Agent
Authentium	5.1.2.4	2009.05.23	-
Avast	4.8.1335.0	2009.05.23	Win32:Trojan-gen {Other}
AVG	8.5.0.339	2009.05.24	Downloader.Small.FYC.dropper
BitDefender	7.2	2009.05.24	Trojan.Generic.1802697
CAT-QuickHeal	10.00	2009.05.23	-
ClamAV	0.94.1	2009.05.24	-
Comodo	1157	2009.05.08	-
DrWeb	5.0.0.12182	2009.05.24	-
eSafe	7.0.17.0	2009.05.21	Win32.Dropper.Agent
eTrust-Vet	31.6.6519	2009.05.23	-
F-Prot	4.4.4.56	2009.05.23	-
F-Secure	8.0.14470.0	2009.05.23	Trojan-Dropper.Win32.Agent.aovd
Fortinet	3.117.0.0	2009.05.23	W32/Agent.AOVD!tr
GData	19	2009.05.24	Trojan.Generic.1802697
Ikarus	T3.1.1.49.0	2009.05.24	Trojan-Dropper.TAR
K7AntiVirus	7.10.741	2009.05.21	-
Kaspersky	7.0.0.125	2009.05.24	Trojan-Dropper.Win32.Agent.aovd
McAfee	5624	2009.05.23	Generic Downloader.x!bu
McAfee+Artemis	5624	2009.05.23	Generic Downloader.x!bu
McAfee-GW-Edition	6.7.6	2009.05.24	Trojan.Dropper.Gen
Microsoft	1.4701	2009.05.24	TrojanDropper:Win32/Vtimrun.B
NOD32	4098	2009.05.22	a variant of Win32/TrojanDownloader.Agent.PBL
Norman	6.01.05	2009.05.22	DLoader.OOBO
nProtect	2009.1.8.0	2009.05.24	-
Panda	10.0.0.14	2009.05.23	Trj/CI.A
PCTools	4.4.2.0	2009.05.21	-
Prevx	3.0	2009.05.24	Medium Risk Malware
Rising	21.30.62.00	2009.05.24	-
Sophos	4.42.0	2009.05.24	Mal/Generic-A
Sunbelt	3.2.1858.2	2009.05.24	Trojan-Dropper.Win32.Agent.aovd
Symantec	1.4.4.12	2009.05.24	-
TheHacker	6.3.4.3.331	2009.05.22	-
TrendMicro	8.950.0.1092	2009.05.23	-
VBA32	3.12.10.5	2009.05.24	Trojan-Dropper.Win32.Agent.aovd
ViRobot	2009.5.23.1749	2009.05.23	-
weitere Informationen
File size: 103601 bytes
MD5...: 0ce27857a4de0dc24f0a85b504eb361c
SHA1..: aaaa8057cc4d18ff4ac7d7e887522d9a3f31c5d8
SHA256: 0efa9a49f53167958400cc2d49b612f341dc0aa9e49800bb9caac0d53e65d77a
SHA512: 9ec26a5be963af755bbebfb4c42946d2c3aaa9441e1836ffa054fe14721cb547
4f325fe350205f4178599b43c11f262f704be7c6cd0f28a42a6a084e0936a36f
ssdeep: 3072:3nj9jtfU+INndIc0J+59iZjQZaAqM2Mj6HqSvJh:3jbeie59iZNAq/MAqSv
Jh
PEiD..: -
TrID..: File type identification
Win64 Executable Generic (59.6%)
Win32 Executable MS Visual C++ (generic) (26.2%)
Win32 Executable Generic (5.9%)
Win32 Dynamic Link Library (generic) (5.2%)
Generic Win/DOS Executable (1.3%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x645c
timedatestamp.....: 0x41107bc1 (Wed Aug 04 06:01:37 2004)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x992c 0x9a00 6.57 17a6fbe18a834b6f3462304415675d36
.data 0xb000 0x1be4 0x400 4.25 99858e86526942a66950c7139f78a725
.rsrc 0xd000 0xf026 0xf200 7.47 520c28e37d58e735264d2d6700b80f01

( 6 imports ) 
> ADVAPI32.dll: FreeSid, AllocateAndInitializeSid, EqualSid, GetTokenInformation, OpenProcessToken, AdjustTokenPrivileges, LookupPrivilegeValueA, RegCloseKey, RegDeleteValueA, RegOpenKeyExA, RegSetValueExA, RegQueryValueExA, RegCreateKeyExA, RegQueryInfoKeyA
> KERNEL32.dll: LocalFree, LocalAlloc, GetLastError, GetCurrentProcess, lstrlenA, GetModuleFileNameA, GetSystemDirectoryA, _lclose, _llseek, _lopen, WritePrivateProfileStringA, GetWindowsDirectoryA, CreateDirectoryA, GetFileAttributesA, ExpandEnvironmentStringsA, lstrcpyA, GlobalFree, GlobalUnlock, GlobalLock, GlobalAlloc, IsDBCSLeadByte, GetShortPathNameA, GetPrivateProfileStringA, GetPrivateProfileIntA, lstrcmpiA, RemoveDirectoryA, FindClose, FindNextFileA, DeleteFileA, SetFileAttributesA, lstrcmpA, FindFirstFileA, FreeResource, GetProcAddress, LoadResource, SizeofResource, FindResourceA, lstrcatA, CloseHandle, WriteFile, SetFilePointer, SetFileTime, LocalFileTimeToFileTime, DosDateTimeToFileTime, SetCurrentDirectoryA, GetTempFileNameA, ExitProcess, CreateFileA, LoadLibraryExA, lstrcpynA, GetVolumeInformationA, FormatMessageA, GetCurrentDirectoryA, GetVersionExA, GetExitCodeProcess, WaitForSingleObject, CreateProcessA, GetTempPathA, GetSystemInfo, CreateMutexA, SetEvent, CreateEventA, CreateThread, ResetEvent, TerminateThread, GetDriveTypeA, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, ReadFile, LoadLibraryA, GetDiskFreeSpaceA, MulDiv, EnumResourceLanguagesA, FreeLibrary, LockResource
> GDI32.dll: GetDeviceCaps
> USER32.dll: ExitWindowsEx, wsprintfA, CharNextA, CharUpperA, CharPrevA, SetWindowLongA, GetWindowLongA, CallWindowProcA, DispatchMessageA, MsgWaitForMultipleObjects, PeekMessageA, SendMessageA, SetWindowPos, ReleaseDC, GetDC, GetWindowRect, SendDlgItemMessageA, GetDlgItem, SetForegroundWindow, SetWindowTextA, MessageBoxA, DialogBoxIndirectParamA, ShowWindow, EnableWindow, GetDlgItemTextA, EndDialog, GetDesktopWindow, MessageBeep, SetDlgItemTextA, LoadStringA, GetSystemMetrics
> COMCTL32.dll: -
> VERSION.dll: GetFileVersionInfoA, VerQueryValueA, GetFileVersionInfoSizeA

( 0 exports ) 
PDFiD.: -
RDS...: NSRL Reference Data Set
-
ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=0ce27857a4de0dc24f0a85b504eb361c' target='_blank'>http://www.threatexpert.com/report.aspx?md5=0ce27857a4de0dc24f0a85b504eb361c</a>
packers (F-Prot): CAB
Prevx info: <a href='http://info.prevx.com/aboutprogramtext.asp?PX5=718BB364B17F1CDA9486011497B9C200D62827A8' target='_blank'>http://info.prevx.com/aboutprogramtext.asp?PX5=718BB364B17F1CDA9486011497B9C200D62827A8</a>