Trojaner-Board - Habe Virenproblem(glaub ich)

Antivirus Version letzte aktualisierung Ergebnis
a-squared 4.0.0.93 2009.02.15 Generic.Win32.Malware!IK
AhnLab-V3 5.0.0.2 2009.02.15 -
AntiVir 7.9.0.79 2009.02.15 -
Authentium 5.1.0.4 2009.02.15 -
Avast 4.8.1335.0 2009.02.15 Win32:FakeAV-AQ
AVG 8.0.0.237 2009.02.15 -
BitDefender 7.2 2009.02.15 -
CAT-QuickHeal 10.00 2009.02.13 -
ClamAV 0.94.1 2009.02.15 -
Comodo 978 2009.02.15 -
DrWeb 4.44.0.09170 2009.02.15 -
eSafe 7.0.17.0 2009.02.15 -
eTrust-Vet 31.6.6358 2009.02.14 -
F-Prot 4.4.4.56 2009.02.15 -
Fortinet 3.117.0.0 2009.02.15 -
GData 19 2009.02.15 Win32:FakeAV-AQ
Ikarus T3.1.1.45.0 2009.02.15 Generic.Win32.Malware
K7AntiVirus 7.10.630 2009.02.14 -
Kaspersky 7.0.0.125 2009.02.15 -
McAfee 5527 2009.02.15 -
McAfee+Artemis 5527 2009.02.15 -
Microsoft 1.4306 2009.02.15 -
NOD32 3853 2009.02.14 a variant of Win32/Adware.WinWebSecurity
Norman 6.00.02 2009.02.13 -
nProtect 2009.1.8.0 2009.02.15 -
Panda 10.0.0.10 2009.02.15 -
PCTools 4.4.2.0 2009.02.15 -
Rising 21.16.62.00 2009.02.15 -
SecureWeb-Gateway 6.7.6 2009.02.15 -
Sophos 4.38.0 2009.02.15 Sus/FakeAV-A
Sunbelt 3.2.1851.2 2009.02.12 Trojan-Downloader.Win32.Agent.avzz
Symantec 10 2009.02.15 -
TheHacker 6.3.2.1.258 2009.02.15 -
TrendMicro 8.700.0.1004 2009.02.15 -
ViRobot 2009.2.14.1607 2009.02.15 -
VirusBuster 4.5.11.0 2009.02.15 -
weitere Informationen
File size: 2198563 bytes
MD5...: 0448c9e9794070ad6cd06bace78dbb4c
SHA1..: 30c277e57471b731f17a30bdbf8b6bc63b64d031
SHA256: f711387c2f5239d276b8802d934858819d800918fdd07592b2497ce145e893e1
SHA512: cacee021b513cd527219141fbf9d34a351120f2dd059a2a0ed3103e058f520b8
6b4112059f7da439042fcf227c9e843c30d00852c8e9514f9cf7ee6e7371dc28

ssdeep: 24576:NO1aR7aR9J5fKftoyvjc4DohdlKhN88oAQE59NdA6MOAm+7Vr6VpPIzT/B
od3xRr:FRIKsliNPyMAm7VpPETmdDDDxFK2PSvw

PEiD..: -
TrID..: File type identification
Win32 Executable Generic (58.3%)
Win16/32 Executable Delphi generic (14.1%)
Generic Win/DOS Executable (13.7%)
DOS Executable Generic (13.6%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x17e95c
timedatestamp.....: 0x49983351 (Sun Feb 15 15:22:57 2009)
machinetype.......: 0x14c (I386)

( 8 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x1782dc 0x178400 6.46 c5863c6bb00d63769377b7ff1ae5d744
.itext 0x17a000 0x4b90 0x4c00 6.33 4d69833b6f86e686bd925600dcfbdecb
.data 0x17f000 0xabc0 0xac00 6.00 36ce67f02e01b19711f5a99c83a7e9b2
.bss 0x18a000 0xa6d40 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.idata 0x231000 0x43a2 0x4400 5.18 3bb81ccf2e596056a67ab2a9756a087f
.tls 0x236000 0x3c 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.rdata 0x237000 0x18 0x200 0.21 896b7e1ccd182f08d87222b2f0950b42
.rsrc 0x238000 0x8c460 0x8c600 7.48 2d36571c970467aeae50050752013147

( 25 imports )
> oleaut32.dll: SysFreeString, SysReAllocStringLen, SysAllocStringLen
> advapi32.dll: RegQueryValueExW, RegOpenKeyExW, RegCloseKey
> user32.dll: GetKeyboardType, LoadStringW, MessageBoxA, CharNextW
> kernel32.dll: GetACP, Sleep, VirtualFree, VirtualAlloc, GetSystemInfo, GetTickCount, QueryPerformanceCounter, GetVersion, GetCurrentThreadId, VirtualQuery, WideCharToMultiByte, MultiByteToWideChar, lstrlenW, lstrcpynW, LoadLibraryExW, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleW, GetModuleFileNameW, GetLocaleInfoW, GetLastError, GetCommandLineW, FreeLibrary, FindFirstFileW, FindClose, ExitProcess, ExitThread, CreateThread, CompareStringW, WriteFile, UnhandledExceptionFilter, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetFileType, CreateFileW, CloseHandle
> kernel32.dll: TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleW
> user32.dll: CreateWindowExW, WindowFromPoint, WaitMessage, UpdateWindow, UnregisterClassW, UnhookWindowsHookEx, TranslateMessage, TranslateMDISysAccel, TrackPopupMenu, SystemParametersInfoW, ShowWindow, ShowScrollBar, ShowOwnedPopups, SetWindowsHookExW, SetWindowTextW, SetWindowPos, SetWindowPlacement, SetWindowLongW, SetTimer, SetScrollRange, SetScrollPos, SetScrollInfo, SetRect, SetPropW, SetParent, SetMenuItemInfoW, SetMenu, SetForegroundWindow, SetFocus, SetCursor, SetClipboardData, SetClassLongW, SetCapture, SetActiveWindow, SendMessageA, SendMessageW, ScrollWindow, ScreenToClient, RemovePropW, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageW, RegisterClipboardFormatW, RegisterClassW, RedrawWindow, PostQuitMessage, PostMessageW, PeekMessageA, PeekMessageW, OpenClipboard, OffsetRect, MsgWaitForMultipleObjectsEx, MsgWaitForMultipleObjects, MessageBoxW, MessageBeep, MapWindowPoints, MapVirtualKeyW, LoadStringW, LoadKeyboardLayoutW, LoadIconW, LoadCursorW, LoadBitmapW, KillTimer, IsZoomed, IsWindowVisible, IsWindowUnicode, IsWindowEnabled, IsWindow, IsIconic, IsDialogMessageA, IsDialogMessageW, IsChild, InvalidateRect, IntersectRect, InsertMenuItemW, InsertMenuW, InflateRect, GetWindowThreadProcessId, GetWindowTextW, GetWindowRect, GetWindowPlacement, GetWindowLongW, GetWindowDC, GetTopWindow, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetSubMenu, GetScrollRange, GetScrollPos, GetScrollInfo, GetPropW, GetParent, GetWindow, GetMessageTime, GetMessagePos, GetMenuStringW, GetMenuState, GetMenuItemInfoW, GetMenuItemID, GetMenuItemCount, GetMenu, GetLastActivePopup, GetKeyboardState, GetKeyboardLayoutNameW, GetKeyboardLayoutList, GetKeyboardLayout, GetKeyState, GetKeyNameTextW, GetIconInfo, GetForegroundWindow, GetFocus, GetDoubleClickTime, GetDesktopWindow, GetDCEx, GetDC, GetCursorPos, GetCursor, GetClipboardData, GetClientRect, GetClassNameW, GetClassLongW, GetClassInfoW, GetCapture, GetActiveWindow, FrameRect, FindWindowExW, FindWindowW, FillRect, EqualRect, EnumWindows, EnumThreadWindows, EnumClipboardFormats, EnumChildWindows, EndPaint, EnableWindow, EnableScrollBar, EnableMenuItem, EmptyClipboard, DrawTextExW, DrawTextW, DrawMenuBar, DrawIconEx, DrawIcon, DrawFrameControl, DrawFocusRect, DrawEdge, DrawAnimatedRects, DispatchMessageA, DispatchMessageW, DestroyWindow, DestroyMenu, DestroyIcon, DestroyCursor, DeleteMenu, DefWindowProcW, DefMDIChildProcW, DefFrameProcW, CreatePopupMenu, CreateMenu, CreateIcon, CloseClipboard, ClientToScreen, ChildWindowFromPoint, CheckMenuItem, CharUpperBuffW, CharUpperW, CharToOemW, CharNextW, CharLowerBuffW, CharLowerW, CallWindowProcW, CallNextHookEx, BroadcastSystemMessageW, BeginPaint, CharLowerBuffA, CharUpperBuffA, AdjustWindowRectEx, ActivateKeyboardLayout
> msimg32.dll: AlphaBlend
> gdi32.dll: UnrealizeObject, StretchDIBits, StretchBlt, SetWindowOrgEx, SetWinMetaFileBits, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetPaletteEntries, SetMapMode, SetEnhMetaFileBits, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SelectClipRgn, SaveDC, RoundRect, RestoreDC, ResizePalette, Rectangle, RectVisible, RealizePalette, Polyline, PlayEnhMetaFile, PatBlt, MoveToEx, MaskBlt, LineTo, LPtoDP, IntersectClipRect, GetWindowOrgEx, GetWinMetaFileBits, GetViewportOrgEx, GetTextMetricsW, GetTextExtentPoint32W, GetTextExtentExPointW, GetSystemPaletteEntries, GetStockObject, GetRgnBox, GetPixel, GetPaletteEntries, GetObjectW, GetNearestPaletteIndex, GetEnhMetaFilePaletteEntries, GetEnhMetaFileHeader, GetEnhMetaFileDescriptionW, GetEnhMetaFileBits, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, GdiFlush, FrameRgn, ExtTextOutW, ExtCreatePen, ExcludeClipRect, Ellipse, DeleteObject, DeleteEnhMetaFile, DeleteDC, CreateSolidBrush, CreateRectRgn, CreatePenIndirect, CreatePalette, CreateHalftonePalette, CreateFontIndirectW, CreateEnhMetaFileW, CreateDIBitmap, CreateDIBSection, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, CopyEnhMetaFileW, CloseEnhMetaFile, BitBlt
> version.dll: VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
> kernel32.dll: lstrlenW, lstrcpyW, lstrcmpW, WriteFile, WideCharToMultiByte, WaitForSingleObject, WaitForMultipleObjectsEx, VirtualQueryEx, VirtualQuery, VirtualFree, VirtualAlloc, UnmapViewOfFile, SwitchToThread, Sleep, SizeofResource, SignalObjectAndWait, SetThreadLocale, SetLastError, SetFilePointer, SetEvent, SetErrorMode, SetEndOfFile, ResumeThread, ResetEvent, RemoveDirectoryW, ReadFile, RaiseException, QueryPerformanceFrequency, QueryPerformanceCounter, PulseEvent, OpenProcess, MultiByteToWideChar, MulDiv, LockResource, LoadResource, LoadLibraryW, LeaveCriticalSection, InitializeCriticalSection, GlobalUnlock, GlobalSize, GlobalLock, GlobalFree, GlobalFindAtomW, GlobalDeleteAtom, GlobalAlloc, GlobalAddAtomW, GetVersionExW, GetVersion, GetUserDefaultLCID, GetTimeZoneInformation, GetTickCount, GetThreadLocale, GetTempPathW, GetSystemInfo, GetStringTypeExA, GetStringTypeExW, GetStdHandle, GetProcAddress, GetModuleHandleW, GetModuleFileNameW, GetLocaleInfoW, GetLocalTime, GetLastError, GetFullPathNameW, GetFileSize, GetFileAttributesW, GetExitCodeThread, GetDriveTypeA, GetDiskFreeSpaceW, GetDateFormatW, GetCurrentThreadId, GetCurrentThread, GetCurrentProcessId, GetCurrentProcess, GetComputerNameW, GetCPInfo, FreeResource, InterlockedIncrement, InterlockedExchangeAdd, InterlockedExchange, InterlockedDecrement, InterlockedCompareExchange, FreeLibrary, FormatMessageW, FindResourceW, FindNextFileW, FindFirstFileW, FindClose, FileTimeToLocalFileTime, FileTimeToDosDateTime, ExpandEnvironmentStringsW, ExitProcess, EnumCalendarInfoA, EnterCriticalSection, DeleteFileW, DeleteCriticalSection, CreateThread, CreateMutexW, CreateFileW, CreateEventW, CompareStringW, CloseHandle
> advapi32.dll: RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegFlushKey, RegDeleteValueW, RegCreateKeyExW, RegCloseKey
> olepro32.dll: OleLoadPicture
> oleaut32.dll: GetErrorInfo, GetActiveObject, SysFreeString
> ole32.dll: CreateStreamOnHGlobal, IsAccelerator, OleDraw, OleSetMenuDescriptor, OleUninitialize, OleInitialize, CoTaskMemFree, CoTaskMemAlloc, ProgIDFromCLSID, StringFromCLSID, CoCreateInstance, CoGetClassObject, CoUninitialize, CoInitialize, IsEqualGUID
> kernel32.dll: Sleep
> ole32.dll: IsEqualGUID
> oleaut32.dll: SafeArrayPtrOfIndex, SafeArrayPutElement, SafeArrayGetElement, SafeArrayUnaccessData, SafeArrayAccessData, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopy, VariantClear, VariantInit
> comctl32.dll: InitializeFlatSB, FlatSB_SetScrollProp, FlatSB_SetScrollPos, FlatSB_SetScrollInfo, FlatSB_GetScrollPos, FlatSB_GetScrollInfo, _TrackMouseEvent, ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetDragImage, ImageList_DragShowNolock, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_GetIcon, ImageList_Remove, ImageList_DrawEx, ImageList_Replace, ImageList_Draw, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_Add, ImageList_SetImageCount, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create, InitCommonControls
> shell32.dll: Shell_NotifyIconW, ShellExecuteW, SHGetFileInfoW
> shell32.dll: SHGetSpecialFolderLocation, SHGetPathFromIDListW
> kernel32.dll: lstrlenW, LoadLibraryW, GetVersionExW, GetModuleFileNameW, GetFileAttributesW, GetCommandLineW, FindResourceW, ExpandEnvironmentStringsW, CreateProcessW, CreateEventW, CreateDirectoryW, CompareStringW
> advapi32.dll: RegSetValueExW, RegCreateKeyExW
> gdiplus.dll: GdipSetStringFormatLineAlign, GdipSetStringFormatAlign, GdipDeleteStringFormat, GdipCreateStringFormat, GdipMeasureString, GdipDrawString, GdipDeleteFont, GdipCreateFont, GdipGetGenericFontFamilySansSerif, GdipDeleteFontFamily, GdipCreateFontFamilyFromName, GdipFillPath, GdipGraphicsClear, GdipDrawPath, GdipSetTextRenderingHint, GdipSetSmoothingMode, GdipDeleteGraphics, GdipCreateFromHDC, GdipDeletePen, GdipCreatePen1, GdipCreateLineBrushFromRect, GdipCreateSolidFill, GdipDeleteBrush, GdipCloneBrush, GdipAddPathArc, GdipClosePathFigure, GdipDeletePath, GdipCreatePath, GdiplusShutdown, GdiplusStartup, GdipFree, GdipAlloc
> kernel32.dll: GetVersionExW
> gdiplus.dll: GdipGetImagePixelFormat, GdipSetPathGradientPresetBlend, GdipSetPathGradientWrapMode, GdipSetLineGammaCorrection, GdipSetImageAttributesColorKeys, GdipDisposeImageAttributes, GdipCreateImageAttributes, GdipCreateTexture, GdipResetClip, GdipBitmapGetPixel, GdipCreateBitmapFromStream, GdipCreateBitmapFromStreamICM, GdipDeleteRegion, GdipCreateRegionPath, GdipSetClipRegion, GdipSetPenDashStyle, GdipGetImageHeight, GdipGetImageWidth, GdipDisposeImage, GdipLoadImageFromStreamICM, GdipLoadImageFromStream, GdipFillPath, GdipCreateLineBrush, GdipDrawLine, GdipDrawRectangle, GdipDrawImageRectRect, GdipDrawImageRect, GdipGetImageRawFormat, GdipDeleteStringFormat, GdipCreateStringFormat, GdipMeasureString, GdipDrawString, GdipDeleteFont, GdipCreateFont, GdipDeleteFontFamily, GdipCreateFontFamilyFromName, GdipFillRectangle, GdipDrawPath, GdipSetTextRenderingHint, GdipGetSmoothingMode, GdipSetSmoothingMode, GdipDeleteGraphics, GdipCreateFromHDC, GdipDeletePen, GdipCreatePen1, GdipGetPathGradientPointCount, GdipSetPathGradientCenterPoint, GdipSetPathGradientSurroundColorsWithCount, GdipSetPathGradientCenterColor, GdipCreatePathGradientFromPath, GdipCreateLineBrushFromRectWithAngle, GdipCreateLineBrushFromRect, GdipCreateHatchBrush, GdipCreateSolidFill, GdipDeleteBrush, GdipAddPathEllipse, GdipAddPathArc, GdipAddPathLine, GdipClosePathFigure, GdipDeletePath, GdipCreatePath, GdiplusShutdown, GdiplusStartup, GdipFree, GdipAlloc

( 0 exports )