40 TAN trojaner - selbe symptone wieder bereits beschrieben

lekakapo

hier das Ergebniss:

File name:
mshearts.exe
Submission date:
2010-08-12 14:35:02 (UTC)
Current status:
queued (#66) queued (#67) analysing finished
Result:
0/ 42 (0.0%)


Antivirus Version Last Update Result
AhnLab-V3 2010.08.12.00 2010.08.11 -
AntiVir 8.2.4.34 2010.08.12 -
Antiy-AVL 2.0.3.7 2010.08.11 -
Authentium 5.2.0.5 2010.08.12 -
Avast 4.8.1351.0 2010.08.12 -
Avast5 5.0.332.0 2010.08.12 -
AVG 9.0.0.851 2010.08.12 -
BitDefender 7.2 2010.08.12 -
CAT-QuickHeal 11.00 2010.08.12 -
ClamAV 0.96.0.3-git 2010.08.12 -
Comodo 5715 2010.08.12 -
DrWeb 5.0.2.03300 2010.08.12 -
Emsisoft 5.0.0.37 2010.08.12 -
eSafe 7.0.17.0 2010.08.11 -
eTrust-Vet 36.1.7785 2010.08.12 -
F-Prot 4.6.1.107 2010.08.12 -
F-Secure 9.0.15370.0 2010.08.12 -
Fortinet 4.1.143.0 2010.08.12 -
GData 21 2010.08.12 -
Ikarus T3.1.1.88.0 2010.08.12 -
Jiangmin 13.0.900 2010.08.12 -
Kaspersky 7.0.0.125 2010.08.12 -
McAfee 5.400.0.1158 2010.08.12 -
McAfee-GW-Edition 2010.1 2010.08.12 -
Microsoft 1.6004 2010.08.12 -
NOD32 5361 2010.08.12 -
Norman 6.05.11 2010.08.12 -
nProtect 2010-08-12.03 2010.08.12 -
Panda 10.0.2.7 2010.08.12 -
PCTools 7.0.3.5 2010.08.12 -
Prevx 3.0 2010.08.12 -
Rising 22.60.03.04 2010.08.12 -
Sophos 4.56.0 2010.08.12 -
Sunbelt 6722 2010.08.12 -
SUPERAntiSpyware 4.40.0.1006 2010.08.12 -
Symantec 20101.1.1.7 2010.08.12 -
TheHacker 6.5.2.1.343 2010.08.11 -
TrendMicro 9.120.0.1004 2010.08.12 -
TrendMicro-HouseCall 9.120.0.1004 2010.08.12 -
VBA32 3.12.14.0 2010.08.11 -
ViRobot 2010.8.9.3978 2010.08.12 -
VirusBuster 5.0.27.0 2010.08.12 -
Additional information
Show all
MD5 : c91c6b79896824f1c3d615e4ad06fccb
SHA1 : cc061c32cd39dbde4ee7316a08c158410eaee44f
SHA256: 091b4ac271c881fddd410fa066fa1f7cee9622e51e3959ef2941a8c05274142f
ssdeep: 3072:Jwvi4RRZdyw6PmjeJKyS+tX1RAraPNC8884NJH:sFERHKv+tX1
File size : 135680 bytes
First seen: 2010-08-12 14:35:02
Last seen : 2010-08-12 14:35:02
TrID:
Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher....: Microsoft Corporation
copyright....: (c) Microsoft Corporation. Alle Rechte vorbehalten.
product......: Betriebssystem Microsoft_ Windows_
description..: Das Microsoft-Netzwerk mit Herz
original name: MSHEARTS.EXE
internal name: MSHEARTS
file version.: 5.1.2600.0 (xpclient.010817-1148)
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0xAA30
timedatestamp....: 0x3B7D847A (Fri Aug 17 20:54:18 2001)
machinetype......: 0x14c (I386)

[[ 3 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0xBEB4, 0xC000, 6.14, 57195ac518d6af9a1f6ab3371e4a9ec7
.data, 0xD000, 0x750, 0x400, 3.66, 14e3e6aae88289d5a732ef6c80345a7f
.rsrc, 0xE000, 0x13000, 0x12C00, 5.87, 18c386052387bbfcb4cf25452f1f6135

[[ 8 import(s) ]]
MFC42u.DLL: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
msvcrt.dll: rand, qsort, _errno, _c_exit, _exit, _XcptFilter, _cexit, exit, _wcmdln, __wgetmainargs, time, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, __1type_info@@UAE@XZ, __dllonexit, _onexit, _terminate@@YAXXZ, _controlfp, _except_handler3, srand, _initterm, _wtoi, wcscmp, _purecall, __CxxFrameHandler
ADVAPI32.dll: RegOpenKeyExA, RegQueryValueExA, RegCloseKey, RegCreateKeyW, RegQueryValueExW, RegSetValueExW, RegFlushKey, RegDeleteValueW
KERNEL32.dll: lstrcpyW, GetStartupInfoW, GetModuleHandleA, lstrcmpiW, FindResourceW, LoadResource, LockResource, SetErrorMode, lstrlenW, FreeLibrary, LoadLibraryW, GetProcAddress, LoadLibraryA, WinExec
GDI32.dll: CombineRgn, GetTextExtentPoint32W, GetTextMetricsW, GetDeviceCaps, CreateSolidBrush, UnrealizeObject, PatBlt, CreateFontW, SetLayout, SetPixel, GetPixel, BitBlt, CreateCompatibleBitmap, CreateRectRgn, SetRectRgn, CreateICW, CreateCompatibleDC
USER32.dll: MessageBeep, DdeGetLastError, IntersectRect, SystemParametersInfoW, GetSystemMetrics, GetDesktopWindow, UpdateWindow, GetMenu, EnableMenuItem, CheckMenuItem, FillRect, KillTimer, GetProcessDefaultLayout, SetTimer, InvalidateRect, LoadIconW, wsprintfW, EnableWindow, SendMessageW, GetParent, ClientToScreen, GetClientRect, SetRect, PostMessageW, DdeCreateDataHandle, DdeCreateStringHandleW, DdeFreeStringHandle, DdeGetData, DdeInitializeW, DdePostAdvise, DdeClientTransaction, DdeUninitialize, DdeNameService, DdeConnect, DdeDisconnect, DrawIcon, DrawTextW, GetWindowRect
SHELL32.dll: ShellAboutW
WINMM.dll: waveOutGetNumDevs, sndPlaySoundW
Symantec reputation:Suspicious.Insight