Win32.Delf.uv, Hupigon13 -> Hilfe!

isostar

Datei acleditq.exe empfangen 2009.03.22 21:14:37 (CET)
Antivirus Version letzte aktualisierung Ergebnis
a-squared 4.0.0.101 2009.03.22 Backdoor.Win32.Momibot!IK
AhnLab-V3 5.0.0.2 2009.03.22 -
AntiVir 7.9.0.120 2009.03.22 TR/Crypt.XPACK.Gen
Authentium 5.1.2.4 2009.03.22 -
Avast 4.8.1335.0 2009.03.21 Win32:Trojan-gen {Other}
AVG 8.5.0.283 2009.03.22 Win32/Heur
BitDefender 7.2 2009.03.22 -
CAT-QuickHeal 10.00 2009.03.21 Backdoor.Momibot.b
ClamAV 0.94.1 2009.03.22 -
Comodo 1080 2009.03.22 Unclassified Malware
DrWeb 4.44.0.09170 2009.03.22 -
eSafe 7.0.17.0 2009.03.19 Win32.heur
eTrust-Vet 31.6.6409 2009.03.20 -
F-Prot 4.4.4.56 2009.03.22 -
F-Secure 8.0.14470.0 2009.03.22 -
Fortinet 3.117.0.0 2009.03.22 -
GData 19 2009.03.22 Win32:Trojan-gen {Other}
Ikarus T3.1.1.48.0 2009.03.22 Backdoor.Win32.Momibot
K7AntiVirus 7.10.678 2009.03.21 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2009.03.22 -
McAfee 5561 2009.03.22 -
McAfee+Artemis 5561 2009.03.22 Generic!Artemis
McAfee-GW-Edition 6.7.6 2009.03.22 Trojan.Crypt.XPACK.Gen
Microsoft 1.4502 2009.03.22 Backdoor:Win32/Momibot.gen!B
NOD32 3953 2009.03.21 probably a variant of Win32/Agent
Norman 6.00.06 2009.03.20 -
nProtect 2009.1.8.0 2009.03.22 -
Panda 10.0.0.10 2009.03.22 Generic Malware
PCTools 4.4.2.0 2009.03.22 -
Prevx1 V2 2009.03.22 -
Rising 21.21.62.00 2009.03.22 Trojan.Win32.Mnless.efo
Sophos 4.39.0 2009.03.22 Mal/EncPk-HE
Sunbelt 3.2.1858.2 2009.03.22 -
Symantec 1.4.4.12 2009.03.22 Trojan Horse
TheHacker 6.3.3.3.287 2009.03.22 -
TrendMicro 8.700.0.1004 2009.03.22 -
VBA32 3.12.10.1 2009.03.22 -
ViRobot 2009.3.20.1658 2009.03.20 -
VirusBuster 4.6.5.0 2009.03.22 -
weitere Informationen
File size: 34304 bytes
MD5...: 6a9850e507730c9f8076ae3bfcf71d93
SHA1..: 25929b2c3684faac43251e3b52cb5d092d1efaea
SHA256: 800cc94593c30f268042db6a22ce6e2be7641d9279e9a354f3203914796bbc5a
SHA512: 4e46803701ac3ebe5ed96892c9bffc8a6e5da07719e41370bb83b1b01b54278d<br>54df46ead99c1eaac03d6db5693d6406166c4665470f887be04a800196bb9924
ssdeep: 768:nFb6ATwxdK19sKcZXOXa9/JfspajoRelc7:nFQGbsKcZXOXa9/Jzjo2c7<br>
PEiD..: -
TrID..: File type identification<br>Win64 Executable Generic (88.0%)<br>Win32 Dynamic Link Library (generic) (7.8%)<br>Generic Win/DOS Executable (2.0%)<br>DOS Executable Generic (2.0%)<br>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x5e00<br>timedatestamp.....: 0x49521a02 (Wed Dec 24 11:16:18 2008)<br>machinetype.......: 0x14c (I386)<br><br>( 4 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0xb508 0x5e00 7.98 19eac0b6f7a57a6befcb92c835b51f5c<br>.rdtzf 0xd000 0x1db4 0x1e00 7.42 7cebc1edd951ec647dbb7bb4dffd2845<br>.idata 0xf000 0x17a 0x200 3.28 d71e6f49af895ae5f05fb54cf8ba7d27<br>.rsrc 0x10000 0x390 0x400 3.12 5e418f86445846c975d5f89918a9cfb7<br><br>( 3 imports ) <br>&gt; ADVAPI32.dll: GetNumberOfEventLogRecords, CryptGenKey, AdjustTokenPrivileges<br>&gt; GDI32.dll: PatBlt, SetDCPenColor, SetWorldTransform, GetMapMode, AddFontMemResourceEx<br>&gt; KERNEL32.dll: GetLastError<br><br>( 0 exports ) <br>
CWSandbox info: &lt;a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=6a9850e507730c9f8076ae3bfcf71d93' target='_blank'&gt;http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=6a9850e507730c9f8076ae3bfcf71d93&lt;/a&gt;

weitere Informationen
File size: 34304 bytes
MD5...: 6a9850e507730c9f8076ae3bfcf71d93
SHA1..: 25929b2c3684faac43251e3b52cb5d092d1efaea
SHA256: 800cc94593c30f268042db6a22ce6e2be7641d9279e9a354f3203914796bbc5a
SHA512: 4e46803701ac3ebe5ed96892c9bffc8a6e5da07719e41370bb83b1b01b54278d
54df46ead99c1eaac03d6db5693d6406166c4665470f887be04a800196bb9924
ssdeep: 768:nFb6ATwxdK19sKcZXOXa9/JfspajoRelc7:nFQGbsKcZXOXa9/Jzjo2c7
PEiD..: -
TrID..: File type identification
Win64 Executable Generic (88.0%)
Win32 Dynamic Link Library (generic) (7.8%)
Generic Win/DOS Executable (2.0%)
DOS Executable Generic (2.0%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x5e00
timedatestamp.....: 0x49521a02 (Wed Dec 24 11:16:18 2008)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xb508 0x5e00 7.98 19eac0b6f7a57a6befcb92c835b51f5c
.rdtzf 0xd000 0x1db4 0x1e00 7.42 7cebc1edd951ec647dbb7bb4dffd2845
.idata 0xf000 0x17a 0x200 3.28 d71e6f49af895ae5f05fb54cf8ba7d27
.rsrc 0x10000 0x390 0x400 3.12 5e418f86445846c975d5f89918a9cfb7

( 3 imports )
> ADVAPI32.dll: GetNumberOfEventLogRecords, CryptGenKey, AdjustTokenPrivileges
> GDI32.dll: PatBlt, SetDCPenColor, SetWorldTransform, GetMapMode, AddFontMemResourceEx
> KERNEL32.dll: GetLastError

( 0 exports )
CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=6a9850e507730c9f8076ae3bfcf71d93' target='_blank'>http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=6a9850e507730c9f8076ae3bfcf71d93</a>

gleiches prozedere wie vorhin!