Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Web-Antivirus auf dem PC, der nicht gelöscht werden kann? (https://www.trojaner-board.de/77538-web-antivirus-pc-geloescht.html)

atsiz77 16.09.2009 15:20

Web-Antivirus auf dem PC, der nicht gelöscht werden kann?
 
Hallo,
seit einpaar tagen bekomme ich immer von meinem Kaspersky Internet Security 2010 ein Web-Virus meldung. Der kommt immer wieder kann man diesen nicht einfach löschen?

Das ist die adresse "http://nb.dns-look-up.com/bins/int/upAYB.int"

Hijackthis log zeigt mir auch nichts an.

Zitat:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:18:41, on 16.09.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\oodtray.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programme\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Programme\Symantec\Norton Ghost 2003\GhostStartService.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Programme\Mozilla Thunderbird\thunderbird.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Programme\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local 127.0.0.1 127.0.0.1
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Programme\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programme\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [AVP] "C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKLM\..\Run: [OODefragTray] C:\WINDOWS\system32\oodtray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: add to &BOM - C:\\PROGRA~1\\BIET-O~1\\\\AddToBOM.hta
O8 - Extra context menu item: Easy-WebPrint - Drucken - res://C:\Programme\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint - Schnelldruck - res://C:\Programme\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint - Vorschau - res://C:\Programme\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint - Zu Druckliste hinzufügen - res://C:\Programme\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O9 - Extra button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1250004981992
O17 - HKLM\System\CCS\Services\Tcpip\..\{3ABDFBC9-78C8-41E7-BF0B-A4494D53F00D}: NameServer = 192.168.2.1
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Programme\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Programme\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Programme\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programme\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 6736 bytes

john.doe 16.09.2009 21:49

Hallo und :hallo:

Da warnt dich Kaspersky zu Recht!
Code:

Datei upAYB.int empfangen 2009.09.16 20:42:51 (UTC)
Status:  Beendet
Ergebnis: 11/41 (26.83%)
 Filter
Drucken der Ergebnisse  Antivirus        Version        letzte aktualisierung        Ergebnis
a-squared        4.5.0.24        2009.09.16        Trojan.Win32.Obfuscated!IK
AhnLab-V3        5.0.0.2        2009.09.16        -
AntiVir        7.9.1.18        2009.09.16        -
Antiy-AVL        2.0.3.7        2009.09.16        -
Authentium        5.1.2.4        2009.09.16        -
Avast        4.8.1351.0        2009.09.16        Win32:SwizBased-gen
AVG        8.5.0.412        2009.09.16        -
BitDefender        7.2        2009.09.16        -
CAT-QuickHeal        10.00        2009.09.16        Win32.Trojan.Swizzor.b.4
ClamAV        0.94.1        2009.09.16        -
Comodo        2340        2009.09.16        -
DrWeb        5.0.0.12182        2009.09.16        -
eSafe        7.0.17.0        2009.09.16        -
eTrust-Vet        31.6.6740        2009.09.16        Win32/Swizzor!generic
F-Prot        4.5.1.85        2009.09.16        W32/Swizzor.E.gen!Eldorado
F-Secure        8.0.14470.0        2009.09.16        Trojan.Win32.Swizzor.b
Fortinet        3.120.0.0        2009.09.16        -
GData        19        2009.09.16        Win32:SwizBased-gen
Ikarus        T3.1.1.72.0        2009.09.16        Trojan.Win32.Obfuscated
Jiangmin        11.0.800        2009.09.16        -
K7AntiVirus        7.10.846        2009.09.16        -
Kaspersky        7.0.0.125        2009.09.16        Trojan.Win32.Swizzor.b
McAfee        5743        2009.09.16        -
McAfee+Artemis        5743        2009.09.16        -
McAfee-GW-Edition        6.8.5        2009.09.16        -
Microsoft        1.5005        2009.09.16        -
NOD32        4431        2009.09.16        -
Norman        6.01.09        2009.09.16        -
nProtect        2009.1.8.0        2009.09.16        -
Panda        10.0.2.2        2009.09.16        -
PCTools        4.4.2.0        2009.09.16        -
Prevx        3.0        2009.09.16        -
Rising        21.47.24.00        2009.09.16        -
Sophos        4.45.0        2009.09.16        -
Sunbelt        3.2.1858.2        2009.09.16        Trojan.Win32.Swizzor.Gen (v)
Symantec        1.4.4.12        2009.09.16        -
TheHacker        6.3.4.4.404        2009.09.15        -
TrendMicro        8.950.0.1094        2009.09.16        -
VBA32        3.12.10.10        2009.09.15        BScope.Trojan.BugsWay.H.Obfs
ViRobot        2009.9.16.1939        2009.09.16        -
VirusBuster        4.6.5.0        2009.09.16        -
weitere Informationen
File size: 319488 bytes
MD5...: 189e739aeaeb8bec87c1a4ba72bb3c45
SHA1..: cfe4c67bafc189aabf2c3ba9ba7d7d157cf3a523
SHA256: 20892bbaa2b5dd21e64ee9acdd06c02c8d9685d95ad6df8dcb76958c6e8a1f22
ssdeep: 6144:BYcCMbpRkltFUif+ACYaTC4NfbLWdoXHO:BYc8FMAC7C4NLnHO
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1000
timedatestamp.....: 0x46cf14d3 (Fri Aug 24 17:26:43 2007)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x10308 0x11000 6.61 1ca18463086693011543ee9f37f54fe8
.rdata 0x12000 0x198d7 0x1a000 7.65 4afd2799da7e6e012c1cf55033d66b9f
.data 0x2c000 0x15cac 0x13000 3.43 9da5e5172637911a30b136d108516870
.rsrc 0x42000 0xe5f0 0xf000 5.36 d43b6635993983d76e6d40ccc7639615

( 9 imports )
> shell32.dll: DragQueryFileA, ExtractIconExA, ShellExecuteW, SHGetPathFromIDListW, SHGetSpecialFolderLocation, SHGetFileInfoA, ExtractIconA, SHGetDesktopFolder, SHGetMalloc, -, SHGetSpecialFolderPathA, Shell_NotifyIconW, SHFileOperationA, DragFinish, SHGetPathFromIDListA, ShellExecuteA, DragAcceptFiles, SHBrowseForFolderA, ShellExecuteExA
> oleaut32.dll: -
> gdi32.dll: CreateDiscardableBitmap, CreateRectRgn, GetTextFaceW, GetKerningPairsA, GetObjectW, CreateDIBPatternBrushPt, OffsetRgn, SetMiterLimit, SetViewportOrgEx, GdiComment, GetStockObject, SetTextJustification, CreatePen, CreateDCW, MaskBlt, SetBrushOrgEx, SetRectRgn, EnumMetaFile, GetSystemPaletteEntries, EndDoc, FloodFill, TextOutW, CreateDIBitmap, ExtTextOutW, CreateMetaFileA, SelectPalette, GetTextExtentPoint32A, CreateEllipticRgn, CreatePalette, GetDeviceCaps, Ellipse, SetROP2, StartDocA, PatBlt, SetTextCharacterExtra, GetRegionData, SetMapMode, UnrealizeObject, GetDCOrgEx, CreateEnhMetaFileA, Escape, GetBkMode, ScaleViewportExtEx, GetObjectA, CreateICA, IntersectClipRect, GetRgnBox, ExtEscape, GetAspectRatioFilterEx, PolyDraw, CloseMetaFile, CreateRoundRectRgn, GetBitmapBits, GetNearestPaletteIndex, GetTextCharsetInfo, GetTextExtentPointW, GetCharWidthA, GetMapMode, EndPath, CreatePolygonRgn, StretchBlt, CreatePatternBrush, Arc, OffsetViewportOrgEx, GetBkColor, DeleteObject, CreateDCA, StrokePath, GetCharABCWidthsW, AngleArc, BitBlt, GetCurrentObject, FrameRgn, SetPolyFillMode, SelectClipRgn, GetPolyFillMode, EndPage, GetCharWidthW, GetTextColor, GetGlyphOutlineA, InvertRgn, SetMapperFlags, UpdateColors, DeleteDC, GetTextMetricsA, Pie, PtVisible, GetWindowOrgEx, BeginPath, GetColorAdjustment, FillPath, WidenPath, GetClipBox, AnimatePalette, GetCharABCWidthsFloatA, SetBkMode, SetPixelV, ExtCreatePen, SelectObject, CreatePolyPolygonRgn, CreateFontW, SetBitmapDimensionEx, GetMiterLimit, SetWindowExtEx, PolylineTo, CreateBrushIndirect, GetObjectType, StretchDIBits, GetViewportOrgEx, CreateCompatibleDC, CombineRgn, RealizePalette, Chord, GetStretchBltMode, CreateDIBSection, CreateSolidBrush, GetClipRgn, StartPage, GetCharWidthFloatA, GetCharABCWidthsA, EnumFontFamiliesA, GetTextExtentPoint32W, RectVisible, SetTextColor, ExcludeClipRect, ExtCreateRegion, DPtoLP, GetBrushOrgEx, Rectangle, GetDIBits, CreateRectRgnIndirect, SetArcDirection, ExtSelectClipRgn, SetPixel, GetWindowExtEx, GetPaletteEntries, CreateBitmap, GetPixel, DrawEscape, GetNearestColor, PlayMetaFileRecord, AbortPath, GetCurrentPositionEx, RestoreDC, TextOutA, TranslateCharsetInfo, AbortDoc, CloseEnhMetaFile, CreateCompatibleBitmap, EnumFontFamiliesExA, GetTextExtentPointA, GetTextExtentExPointA, CopyMetaFileA, GetTextMetricsW, GetViewportExtEx, SetViewportExtEx, ExtTextOutA, SetAbortProc, SetDIBColorTable, PlgBlt, GetArcDirection, OffsetClipRgn, RoundRect, PtInRegion, MoveToEx, GetBitmapDimensionEx, SetColorAdjustment, GetTextExtentExPointW, LineTo, ScaleWindowExtEx, CreateHatchBrush, CreateFontA, SetBkColor, GetTextCharacterExtra, Polyline, CreateFontIndirectA, GdiFlush, ArcTo, OffsetWindowOrgEx, SaveDC, ResizePalette, PathToRegion, EnumObjects, GetBoundsRect, DeleteMetaFile, GetROP2, CloseFigure, FillRgn, SetDIBits, SetWindowOrgEx, CreateEllipticRgnIndirect, ExtFloodFill, CopyEnhMetaFileA, GetOutlineTextMetricsA, Polygon, GetFontData, SetStretchBltMode
> ole32.dll: GetHGlobalFromStream, OleCreateFromData, OleDuplicateData, OleCreateMenuDescriptor, CoCreateInstance, StgCreateDocfile, OleDestroyMenuDescriptor, CLSIDFromProgID, CoGetMalloc, OleSetContainedObject, WriteClassStg, IsAccelerator, ReadClassStg, ReleaseStgMedium, StgIsStorageFile, CLSIDFromString, CoTaskMemAlloc, OleRegGetUserType, CreateOleAdviseHolder, CoSuspendClassObjects, ReadFmtUserTypeStg, GetHGlobalFromILockBytes, OleTranslateAccelerator, StringFromGUID2, CoTreatAsClass, WriteClassStm, CreateBindCtx, RegisterDragDrop, OleRegGetMiscStatus, CoInitializeEx, CreateILockBytesOnHGlobal, OleLockRunning, OleIsCurrentClipboard, CoTaskMemRealloc, CoFreeUnusedLibraries, OleRun, CoGetClassObject, CoCopyProxy, CreateDataAdviseHolder, GetRunningObjectTable, OleSaveToStream, OleGetClipboard, CoCreateGuid, StgCreateDocfileOnILockBytes, CoDisconnectObject, CreateFileMoniker, CoInitialize, OleRegEnumVerbs, CoImpersonateClient, SetConvertStg, CoRegisterClassObject, CoRegisterMessageFilter, OleFlushClipboard, StringFromCLSID, CreateStreamOnHGlobal, OleInitialize, OleUninitialize, StgOpenStorageOnILockBytes, DoDragDrop, WriteFmtUserTypeStg, CoLockObjectExternal, CoResumeClassObjects, CoInitializeSecurity, CreateGenericComposite, CoSetProxyBlanket, OleSetClipboard, CoRevokeClassObject, CoUninitialize, OleLoad, CoTaskMemFree, RevokeDragDrop
> user32.dll: CharNextW, GetMenuItemID, TabbedTextOutW, PostMessageA, CheckMenuItem, ValidateRect, AttachThreadInput, GetDesktopWindow, GetMenuItemCount, SetForegroundWindow, CheckRadioButton, HideCaret, GetParent, GrayStringW, DeferWindowPos, DrawTextW, DefWindowProcA, GetScrollRange, OemToCharA, GetWindowTextA, SetWindowContextHelpId, wsprintfA, SetMenuDefaultItem, LoadMenuW, SetWindowPos, ValidateRgn, CreateWindowExA, ReleaseCapture, SetDlgItemTextW, GetClassInfoExA, GetMenuCheckMarkDimensions, GetKeyNameTextA, CharUpperW, GetTopWindow, ClientToScreen, GetClassInfoA, PostThreadMessageW, MapWindowPoints, DrawFrameControl, GetWindowTextW, SetDlgItemInt, RemoveMenu, GetWindow, LoadStringA, GetDoubleClickTime, GetAsyncKeyState, RegisterWindowMessageW, GetSystemMenu, EndPaint, GetPropA, CreatePopupMenu, DrawFocusRect, InvertRect, WinHelpW, GetCursorPos, CharNextA, ShowCaret, CopyAcceleratorTableA, GetMessageW, LoadImageW, UnregisterClassA, GetMessageTime, BringWindowToTop, IsWindowVisible, CallWindowProcW, ShowOwnedPopups, RemovePropA, TranslateMessage, ShowWindow, SetActiveWindow, CopyRect, ExcludeUpdateRgn, InvalidateRgn, DefMDIChildProcA, RegisterClassExA, SetWindowsHookExW, GetNextDlgTabItem, GetMenuState, LoadIconA, SetWindowLongA, KillTimer, GetSubMenu, CloseWindow, EmptyClipboard, MoveWindow, GetWindowLongA, IsDialogMessageA, RegisterClipboardFormatA, CharUpperA, GetClientRect, UnpackDDElParam, GetDC, RemovePropW, EqualRect, GetUpdateRgn, keybd_event, GetDlgCtrlID, RegisterClassExW, DestroyMenu, LoadIconW, GetUpdateRect, PeekMessageA, GetKeyState, EnumChildWindows, SetParent, GetWindowThreadProcessId, BeginDeferWindowPos, LoadAcceleratorsA, SetMenu, InvalidateRect, MessageBoxW, PostQuitMessage, EndDeferWindowPos, UnregisterHotKey, GetClassLongA, WindowFromPoint, InflateRect, GetMenuStringA, DispatchMessageW, IsZoomed, GetFocus, GetMessageA, UnhookWindowsHookEx, SetWindowTextA, GetMenuItemInfoA, GetClassNameA, EndDialog, LoadMenuA, DrawIcon, GetIconInfo, LoadBitmapW, RegisterClassW, SetScrollRange, ScreenToClient, CreateWindowExW, SetWindowPlacement, LoadCursorW, SetWindowRgn, DrawTextExW, MapDialogRect, CheckDlgButton, InsertMenuA, RedrawWindow, DestroyWindow, GetWindowRect, LockWindowUpdate, GetWindowDC, EnableMenuItem, AdjustWindowRectEx, DestroyIcon, WinHelpA, DefFrameProcA, GetClassNameW, SetRect, IsMenu, InSendMessage, GetScrollInfo, SystemParametersInfoA, FindWindowW, EnableWindow, SetFocus, RegisterClipboardFormatW, ChildWindowFromPointEx, UpdateWindow, ReleaseDC, BeginPaint, GetNextDlgGroupItem, ModifyMenuW, CallWindowProcA, CreateDialogIndirectParamA, CreateCaret, GetClassInfoExW, SendMessageA, LoadImageA, TabbedTextOutA, OpenClipboard, DrawIconEx, GetWindowPlacement, GetSysColor, GetMessagePos, SetScrollPos, SetMenuItemBitmaps, SetDlgItemTextA, AppendMenuA, DeleteMenu, GetWindowTextLengthA, SendDlgItemMessageW, SendDlgItemMessageA, MapVirtualKeyExA, SetWindowTextW, SetScrollInfo, GetActiveWindow, CallNextHookEx, DestroyCursor, SetCaretPos, FillRect, ScrollWindow, IsWindow, PtInRect, GetForegroundWindow, SetCursorPos, SetRectEmpty, MessageBeep, TrackPopupMenu, MessageBoxA, GetMenu, GrayStringA, ShowScrollBar, GetWindowRgn, SetTimer, DrawEdge, DefWindowProcW, SetWindowsHookExA, OffsetRect, CreateIconIndirect, GetSysColorBrush, GetDlgItem, IsIconic, SetClipboardData, GetMenuDefaultItem, DrawTextA, DispatchMessageA, IntersectRect, wvsprintfA, LoadBitmapA, CloseClipboard, GetLastActivePopup, TranslateAcceleratorW, RegisterWindowMessageA, RegisterClassA, IsClipboardFormatAvailable, IsRectEmpty, AppendMenuW, SetCursor, GetCapture, LoadCursorA, DrawMenuBar, WindowFromDC, GetSystemMetrics, GetScrollPos, SendMessageW, MsgWaitForMultipleObjects, IsWindowEnabled, SetCapture
> kernel32.dll: TerminateThread, DeviceIoControl, IsValidCodePage, FindNextFileW, GetModuleHandleA, GetLocaleInfoW, OpenProcess, FindFirstFileA, GetProcessHeap, SuspendThread, GetFullPathNameA, GlobalFree, SetFileAttributesA, GetEnvironmentVariableW, GlobalAddAtomA, LoadLibraryW, IsValidLocale, GetTickCount, GetProfileIntW, SetPriorityClass, GetLocalTime, GetTimeFormatA, CreateProcessA, GlobalHandle, SetLastError, UnlockFile, CreateEventA, LCMapStringW, SetHandleCount, GetVolumeInformationA, GetStringTypeExA, GetCPInfo, IsBadReadPtr, GlobalLock, ReleaseMutex, InterlockedExchange, TlsGetValue, GetCommandLineW, GetDiskFreeSpaceA, QueryPerformanceCounter, GetVersionExA, VirtualProtect, TlsAlloc, GetCurrentThreadId, VirtualFree, CreateThread, GetPrivateProfileStringA, ResetEvent, GetSystemTime, GetComputerNameA, GetCurrentThread, GetShortPathNameA, SetEndOfFile, MoveFileW, DuplicateHandle, lstrcmpiA, GetNumberFormatA, SizeofResource, LocalAlloc, SetEvent, WaitForSingleObject, lstrcpyW, CloseHandle, WritePrivateProfileSectionA, GetOEMCP, CreateFileA, FormatMessageA, GlobalFindAtomA, DeleteCriticalSection, CreateFileW, GlobalGetAtomNameA, Sleep, GetStringTypeW, GetFileAttributesA, FindResourceW, GlobalFlags, GetCommandLineA, FatalAppExitA, FileTimeToDosDateTime, CreateMutexA, UnhandledExceptionFilter, GetWindowsDirectoryW, ConvertDefaultLocale, GetDateFormatA, FindResourceA, TlsSetValue, GlobalUnlock, GlobalSize, HeapFree, FreeEnvironmentStringsW, CopyFileA, GetStringTypeA, GetSystemInfo, GetCurrentProcess, GetProcAddress, TlsFree, MultiByteToWideChar, FreeLibrary, GlobalMemoryStatus, GetLocaleInfoA, GetEnvironmentStringsW, MulDiv, LocalReAlloc, GetThreadLocale, SetStdHandle, SetEnvironmentVariableW, FileTimeToLocalFileTime, GetTimeZoneInformation, InterlockedIncrement, RtlUnwind, GlobalAlloc, CreatePipe, GetProfileStringA, MapViewOfFile, GlobalReAlloc, GetFileInformationByHandle, WritePrivateProfileStringA, GetTempFileNameA, SetEnvironmentVariableA, FindClose, GetProcessVersion, DosDateTimeToFileTime, GetACP, HeapCreate, FreeEnvironmentStringsA, GetCurrentProcessId, InterlockedDecrement, FormatMessageW, GetSystemDirectoryA, FlushFileBuffers, InitializeCriticalSection, GetEnvironmentStrings, WriteFile, GetFileType, GetLastError, CompareStringA, lstrcatA, GetSystemDefaultLangID, SetThreadPriority, FindNextFileA, GetModuleFileNameA, LocalFree, GetPriorityClass, GetProfileIntA, LeaveCriticalSection, SetFilePointer, GetConsoleCP, LoadLibraryExA, HeapDestroy, CompareStringW, GetStartupInfoW, CreateDirectoryW, _llseek, GetConsoleOutputCP, TerminateProcess, WriteConsoleW, GetFileSize, GlobalDeleteAtom, _lcreat, GetLongPathNameA, GetModuleFileNameW, SetUnhandledExceptionFilter, WideCharToMultiByte, LockFile, GetTempPathA, OpenEventA, GetStartupInfoA, EnterCriticalSection, GetSystemTimeAsFileTime, ExitProcess, RaiseException, WinExec, LockResource, HeapReAlloc, SetErrorMode, VirtualQuery, FileTimeToSystemTime, GetVersion, HeapSize, GetExitCodeThread, IsBadWritePtr, MoveFileExA, LoadResource, GetStdHandle, lstrlenA, GetWindowsDirectoryA, VirtualAlloc, ReadFile, LCMapStringA, LoadLibraryA, MoveFileA, HeapAlloc, GetConsoleMode, WaitForMultipleObjects, GetFileTime, SetFileTime, PeekNamedPipe, lstrcpyA, OpenMutexA, GetFullPathNameW, EnumResourceLanguagesA, DeleteFileA, lstrlenW
> comctl32.dll: ImageList_BeginDrag, ImageList_SetOverlayImage, ImageList_ReplaceIcon, ImageList_Draw, ImageList_GetImageCount, ImageList_DragShowNolock, ImageList_EndDrag, DestroyPropertySheetPage, InitCommonControlsEx, PropertySheetW, ImageList_Replace, ImageList_GetBkColor, CreatePropertySheetPageA, ImageList_GetIcon, ImageList_AddMasked, ImageList_DragMove, ImageList_LoadImageA, ImageList_Add, -, ImageList_Create, ImageList_GetDragImage, PropertySheetA, CreateToolbarEx, ImageList_SetDragCursorImage, ImageList_DragLeave, ImageList_DrawEx, ImageList_GetIconSize, ImageList_Merge, ImageList_Destroy, CreatePropertySheetPageW, ImageList_GetImageInfo, ImageList_Remove, _TrackMouseEvent
> version.dll: GetFileVersionInfoW, GetFileVersionInfoSizeA, GetFileVersionInfoSizeW, VerQueryValueA, GetFileVersionInfoA, VerQueryValueW
> advapi32.dll: DeleteAce, FreeSid, OpenThreadToken, RegCreateKeyExW, RegEnumKeyExA, EqualSid, DeleteService, AdjustTokenPrivileges, OpenSCManagerW, InitializeAcl, AddAce, GetLengthSid, RegQueryValueA, RegDeleteValueA, RegOpenKeyA, CreateProcessAsUserA, StartServiceCtrlDispatcherA, RegOpenCurrentUser, OpenServiceW, RegisterEventSourceA, CryptGenRandom, RegOpenKeyExW, RegCreateKeyExA, AllocateAndInitializeSid, GetUserNameW, RegSetValueExA, DeregisterEventSource, RegEnumValueA, SetServiceStatus, SetSecurityDescriptorOwner, AddAccessAllowedAce, RegOpenKeyExA, LookupPrivilegeValueA, RegSetValueExW, RegEnumKeyExW, IsValidSecurityDescriptor, OpenServiceA, RegQueryValueExA, DuplicateToken, GetFileSecurityA, RegQueryValueExW, SetFileSecurityA, RegCloseKey, SetSecurityDescriptorGroup, SetSecurityDescriptorDacl, RegDeleteKeyA, GetFileSecurityW, RegQueryValueW, InitializeSecurityDescriptor, CreateServiceA, RegDeleteValueW, ControlService, RegEnumKeyW, RegSetValueA, GetTokenInformation, ChangeServiceConfigA, OpenProcessToken, CloseServiceHandle, CopySid, RegisterServiceCtrlHandlerA, RegCreateKeyA, RegEnumKeyA

( 0 exports )
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
sigcheck:
publisher....: Source hticofl
copyright....: Miofo pongandu idwaryoc oursico inacedic
product......: Sitothat tsionyee tbert
description..: Terer headers wag sratemp
original name: Widening.exe
internal name: Widening
file version.: 6, 1, 4, 1
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

Klicke auf "Für alle Neuen" in meiner Signatur, lies alles aufmerksam und arbeite die komplette Liste unter Punkt 2 ab.

ciao, andreas


Alle Zeitangaben in WEZ +1. Es ist jetzt 11:36 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19