| |  Browser Virus
zu dem oberen file Zitat:
a-squared 4.5.0.24 2009.09.08 Backdoor.Win32.Tofsee!IK
AhnLab-V3 5.0.0.2 2009.09.08 -
AntiVir 7.9.1.12 2009.09.08 -
Antiy-AVL 2.0.3.7 2009.09.08 -
Authentium 5.1.2.4 2009.09.08 -
Avast 4.8.1351.0 2009.09.08 -
AVG 8.5.0.409 2009.09.08 Dropper.Bravix.Q
BitDefender 7.2 2009.09.08 Trojan.Spy.Zbot.AUV
CAT-QuickHeal 10.00 2009.09.08 (Suspicious) - DNAScan
ClamAV 0.94.1 2009.09.08 -
Comodo 2204 2009.09.08 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.0.12182 2009.09.08 Trojan.Spambot.4321
eSafe 7.0.17.0 2009.09.08 Suspicious File
eTrust-Vet 31.6.6725 2009.09.08 -
F-Prot 4.5.1.85 2009.09.07 -
F-Secure 8.0.14470.0 2009.09.08 Email-Worm.Win32.Small.ap
Fortinet 3.120.0.0 2009.09.08 -
GData 19 2009.09.08 Trojan.Spy.Zbot.AUV
Ikarus T3.1.1.72.0 2009.09.08 Backdoor.Win32.Tofsee
Jiangmin 11.0.800 2009.09.08 -
K7AntiVirus 7.10.839 2009.09.08 -
Kaspersky 7.0.0.125 2009.09.08 Email-Worm.Win32.Small.ap
McAfee 5734 2009.09.07 -
McAfee+Artemis 5734 2009.09.07 Suspect-29!F9AB4462F77E
McAfee-GW-Edition 6.8.5 2009.09.08 -
Microsoft 1.5005 2009.09.08 Backdoor:Win32/Tofsee.F
NOD32 4406 2009.09.08 a variant of Win32/Kryptik.AIQ
Norman 6.01.09 2009.09.08 -
nProtect 2009.1.8.0 2009.09.08 -
Panda 10.0.2.2 2009.09.07 Generic Malware
PCTools 4.4.2.0 2009.09.07 -
Prevx 3.0 2009.09.08 Medium Risk Malware
Rising 21.46.14.00 2009.09.08 -
Sophos 4.45.0 2009.09.08 Mal/EncPk-IF
Sunbelt 3.2.1858.2 2009.09.07 Trojan.Win32.Generic!BT
Symantec 1.4.4.12 2009.09.08 Packed.Generic.233
TheHacker 6.3.4.3.397 2009.09.07 -
TrendMicro 8.950.0.1094 2009.09.08 -
VBA32 3.12.10.10 2009.09.08 -
ViRobot 2009.9.8.1923 2009.09.08 -
VirusBuster 4.6.5.0 2009.09.08 -
weitere Informationen
File size: 27136 bytes
MD5...: f9ab4462f77ec524c663a38ae00641c3
SHA1..: b0b1777f8d5b5801333bf853f9f87e11c32f6d1a
SHA256: 073678a1086660896460ba5662d71e1acebb6d35fbb7421e8f529cb757d6f64c
ssdeep: 768:cHs67lRxCxSB5zRs7k2dr0HaF9kFVQsHJgECA+7+H2HaC:367xcW5z27jdY+
k0sHJgE8+H2a
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x2435
timedatestamp.....: 0x4a794bdf (Wed Aug 05 09:07:43 2009)
machinetype.......: 0x14c (I386)
( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x15f9 0x1600 7.79 1663922bd70a180069ac1619ad53e384
.rdata 0x3000 0x5ca 0x600 4.49 6ec178a6dceffdae68f9b1c668338ccd
.data 0x4000 0xa70f 0x4a00 7.94 b63ce811359e8be92257df041bbd8ec1
( 3 imports )
> KERNEL32.DLL: InterlockedDecrement, RaiseException, GetVersionExA, InterlockedCompareExchange, Sleep, InitializeCriticalSection, GetCurrentProcessId, MultiByteToWideChar, SystemTimeToFileTime, LCMapStringA, GetStartupInfoA, GetStdHandle, GetProcAddress, GetVersion, GetTempFileNameW, CloseHandle, FreeEnvironmentStringsA, LocalAlloc, LeaveCriticalSection, UnhandledExceptionFilter, InterlockedExchange, QueryPerformanceCounter, FreeLibrary, CreateFileW, SetConsoleCP, ExitProcess, SetStdHandle, lstrcmpiW, GetOEMCP, GetModuleHandleA, GetACP, lstrcmpiA, HeapDestroy, GetVersionExW, GetCurrentThreadId, SetUnhandledExceptionFilter, FileTimeToLocalFileTime, VirtualProtect, EnterCriticalSection, GetTickCount, MoveFileA, HeapAlloc
> MSVCRT.DLL: _iob, _wcsicmp
> USER32.DLL: LoadBitmapW, IsDialogMessageW, GetFocus, GetMessageA, CallNextHookEx, PostMessageW, DispatchMessageA, SetFocus
( 0 exports )
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Generic Win/DOS Executable (49.9%)
DOS Executable Generic (49.8%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
<a href='http://info.prevx.com/aboutprogramtext.asp?PX5=68A7303900548C9E6A7400AB54256300A7C66BC8' target='_blank'>http://info.prevx.com/aboutprogramtext.asp?PX5=68A7303900548C9E6A7400AB54256300A7C66BC8</a>
ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=f9ab4462f77ec524c663a38ae00641c3' target='_blank'>http://www.threatexpert.com/report.aspx?md5=f9ab4462f77ec524c663a38ae00641c3</a>
| ich poste das ma hier weils net so lang ausgefallen is
zu der 1. die datei kann ich nicht finden der pfad existiert nich
|
08.09.2009, 15:39
Baum-Darstellung