Trojaner-Board - Trojaner legt alles lahm

Antivirus Version letzte aktualisierung Ergebnis
a-squared 4.5.0.24 2009.08.29 -
AhnLab-V3 5.0.0.2 2009.08.29 -
AntiVir 7.9.1.7 2009.08.28 -
Antiy-AVL 2.0.3.7 2009.08.24 -
Authentium 5.1.2.4 2009.08.29 -
Avast 4.8.1335.0 2009.08.29 -
AVG 8.5.0.406 2009.08.29 -
BitDefender 7.2 2009.08.30 -
CAT-QuickHeal 10.00 2009.08.29 -
ClamAV 0.94.1 2009.08.29 -
Comodo 2124 2009.08.30 -
DrWeb 5.0.0.12182 2009.08.30 -
eSafe 7.0.17.0 2009.08.27 -
eTrust-Vet 31.6.6707 2009.08.28 -
F-Prot 4.5.1.85 2009.08.29 -
F-Secure 8.0.14470.0 2009.08.29 -
Fortinet 3.120.0.0 2009.08.29 -
GData 19 2009.08.30 -
Ikarus T3.1.1.68.0 2009.08.29 -
Jiangmin 11.0.800 2009.08.29 -
K7AntiVirus 7.10.831 2009.08.29 -
Kaspersky 7.0.0.125 2009.08.30 -
McAfee 5724 2009.08.29 -
McAfee+Artemis 5724 2009.08.29 -
McAfee-GW-Edition 6.8.5 2009.08.30 -
Microsoft 1.5005 2009.08.29 -
NOD32 4380 2009.08.30 -
Norman 2009.08.29 -
nProtect 2009.1.8.0 2009.08.29 -
Panda 10.0.2.2 2009.08.29 -
PCTools 4.4.2.0 2009.08.29 -
Prevx 3.0 2009.08.30 -
Rising 21.44.40.00 2009.08.28 -
Sophos 4.45.0 2009.08.30 -
Sunbelt 3.2.1858.2 2009.08.29 -
Symantec 1.4.4.12 2009.08.29 -
TheHacker 6.3.4.3.391 2009.08.29 -
TrendMicro 8.950.0.1094 2009.08.30 -
VBA32 3.12.10.10 2009.08.29 -
ViRobot 2009.8.28.1907 2009.08.28 -
VirusBuster 4.6.5.0 2009.08.29 -
weitere Informationen
File size: 241664 bytes
MD5...: 8c1158b45a2f9f602349a8f56c4bdbf4
SHA1..: 05ce2c8737d0eea64a40b63c76825239ebb7143f
SHA256: e57ae58445c4e04908a9c5b17cea82a28be69c825a20147f4c8162b10a8be061
ssdeep: 3072:atLbrc+TVW67L6jON3I4yzq2AwJezVYzpv4Ir0vyJ61mgbXGXO86FT/xyTb
:atDL6jOdIVm2AwsYzpvPr0vO67F/xy
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x9d6f
timedatestamp.....: 0x46ce754e (Fri Aug 24 06:06:06 2007)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x9e82 0xa000 6.05 a5aee698ad8f335ee9125b17afeafac2
.rdata 0xb000 0x3082 0x4000 4.39 3821cd814c5b1bda6fb9af6b911dd957
.data 0xf000 0xdb8 0x1000 4.45 cc5a09e14103a8a94bce79e98f76aa5a
.rsrc 0x10000 0x2a748 0x2b000 6.46 045ffc10cc8b4c946cccb8f470e34c83

( 13 imports )
> WINMM.dll: mciSendCommandA
> KERNEL32.dll: GlobalUnlock, GetPrivateProfileStringA, GetPrivateProfileIntA, CreateThread, WritePrivateProfileStringA, RemoveDirectoryA, GetDriveTypeA, GlobalFree, FindResourceA, SizeofResource, LoadResource, LockResource, GlobalAlloc, GlobalLock, SearchPathA, LoadLibraryA, GetProcAddress, FreeLibrary, lstrlenA, lstrcmpiA, GetCurrentProcess, GetLocalTime, OpenProcess, GetExitCodeProcess, TerminateProcess, MultiByteToWideChar, GetStartupInfoA, GetModuleHandleA, InterlockedDecrement, GetModuleFileNameA, FindFirstFileA, FindClose, CloseHandle, CreateMutexA, GetLastError, GetWindowsDirectoryA, CreateProcessA, WaitForSingleObject, Sleep, GetVersionExA, LocalFree
> AlchemyXML.dll: _LoadXMLFile@CAtomXML@@QAEHPAD@Z, _GetRoot@CAtomXML@@QAEHAAV_$_com_ptr_t@V_$_com_IIID@UIXMLDOMElement@MSXML@@$1__GUID_2933bf86_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@@Z, _GetChild@CAtomXML@@QAEHV_$_com_ptr_t@V_$_com_IIID@UIXMLDOMNode@MSXML@@$1__GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@PADAAV2@@Z, _GetNodeText@CAtomXML@@QAEHV_$_com_ptr_t@V_$_com_IIID@UIXMLDOMNode@MSXML@@$1__GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@PAD@Z, _GetChildNum@CAtomXML@@QAEJV_$_com_ptr_t@V_$_com_IIID@UIXMLDOMNode@MSXML@@$1__GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@@Z, __0CAtomXML@@QAE@XZ, __1CAtomXML@@UAE@XZ, _SetNodeText@CAtomXML@@QAEHV_$_com_ptr_t@V_$_com_IIID@UIXMLDOMNode@MSXML@@$1__GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@PAD@Z, _GetChildNum@CAtomXML@@QAEJV_$_com_ptr_t@V_$_com_IIID@UIXMLDOMElement@MSXML@@$1__GUID_2933bf86_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@@Z, _GetChild@CAtomXML@@QAEHV_$_com_ptr_t@V_$_com_IIID@UIXMLDOMNode@MSXML@@$1__GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@JAAV2@@Z, _GetNodeName@CAtomXML@@QAEHV_$_com_ptr_t@V_$_com_IIID@UIXMLDOMNode@MSXML@@$1__GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@PAD@Z, _GetNodeAttribute@CAtomXML@@QAEHV_$_com_ptr_t@V_$_com_IIID@UIXMLDOMNode@MSXML@@$1__GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@PAD1@Z, _RemoveChild@CAtomXML@@QAEHV_$_com_ptr_t@V_$_com_IIID@UIXMLDOMNode@MSXML@@$1__GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@PAD@Z, _GetXMLFileName@CAtomXML@@QAE_AVCString@@XZ, _Save@CAtomXML@@QAEHPAD@Z
> gdiplus.dll: GdipFree, GdipCloneImage, GdipGetImageHeight, GdipGetImageWidth, GdipDrawImageRectI, GdipDeleteGraphics, GdiplusStartup, GdipAlloc, GdipDisposeImage, GdipCreateBitmapFromStreamICM, GdipCreateFromHDC, GdipCreateBitmapFromStream
> GDI32.dll: GetObjectA, SelectObject, GetTextExtentPoint32A, CreateCompatibleDC, BitBlt, CreateFontA
> PSAPI.DLL: GetModuleBaseNameA, EnumProcessModules, GetModuleFileNameExA, EnumProcesses
> MFC42.DLL: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> MSVCRT.dll: _controlfp, _setmbcp, _strnicmp, _stricmp, _CxxThrowException, __CxxFrameHandler, _mbscmp, sprintf, strrchr, _atoi64, _mbsicmp, atoi, _itoa, _unlink, strcspn, fclose, fgets, fopen, __dllonexit, _onexit, _exit, _XcptFilter, exit, _acmdln, __getmainargs, _initterm, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, _except_handler3, __1type_info@@UAE@XZ
> USER32.dll: ExitWindowsEx, PostMessageA, DestroyMenu, RegisterWindowMessageA, SetTimer, DrawTextA, GetSystemMetrics, KillTimer, EnableWindow, InvalidateRect, LoadBitmapA, UpdateWindow, GetWindowRect
> ADVAPI32.dll: LookupPrivilegeValueA, RegOpenKeyExA, RegOpenKeyA, RegQueryValueExA, RegCloseKey, OpenProcessToken, AdjustTokenPrivileges
> SHELL32.dll: ShellExecuteExA
> ole32.dll: CreateStreamOnHGlobal, CoSetProxyBlanket, CoCreateInstance, CoUninitialize, CoInitializeEx, CoInitializeSecurity
> OLEAUT32.dll: -, -, -, -

( 0 exports )
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)

P.S.:

AntiVir zeigt mir immer an, dass .dll-Dateien befallen seien. Ich denke mal deswegen ging dieser Test auch negativ aus.