Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Web-Antivirus auf dem PC, der nicht gelöscht werden kann? (https://www.trojaner-board.de/77538-web-antivirus-pc-geloescht.html)

atsiz77 16.09.2009 15:20

Web-Antivirus auf dem PC, der nicht gelöscht werden kann?
 
Hallo,
seit einpaar tagen bekomme ich immer von meinem Kaspersky Internet Security 2010 ein Web-Virus meldung. Der kommt immer wieder kann man diesen nicht einfach löschen?

Das ist die adresse "http://nb.dns-look-up.com/bins/int/upAYB.int"

Hijackthis log zeigt mir auch nichts an.

Zitat:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:18:41, on 16.09.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\oodtray.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programme\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Programme\Symantec\Norton Ghost 2003\GhostStartService.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Programme\Mozilla Thunderbird\thunderbird.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Programme\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local 127.0.0.1 127.0.0.1
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Programme\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programme\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [AVP] "C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKLM\..\Run: [OODefragTray] C:\WINDOWS\system32\oodtray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: add to &BOM - C:\\PROGRA~1\\BIET-O~1\\\\AddToBOM.hta
O8 - Extra context menu item: Easy-WebPrint - Drucken - res://C:\Programme\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint - Schnelldruck - res://C:\Programme\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint - Vorschau - res://C:\Programme\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint - Zu Druckliste hinzufügen - res://C:\Programme\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O9 - Extra button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1250004981992
O17 - HKLM\System\CCS\Services\Tcpip\..\{3ABDFBC9-78C8-41E7-BF0B-A4494D53F00D}: NameServer = 192.168.2.1
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Programme\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Programme\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Programme\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programme\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 6736 bytes

john.doe 16.09.2009 21:49

Hallo und :hallo:

Da warnt dich Kaspersky zu Recht!
Code:

Datei upAYB.int empfangen 2009.09.16 20:42:51 (UTC)
Status:  Beendet
Ergebnis: 11/41 (26.83%)
 Filter
Drucken der Ergebnisse  Antivirus        Version        letzte aktualisierung        Ergebnis
a-squared        4.5.0.24        2009.09.16        Trojan.Win32.Obfuscated!IK
AhnLab-V3        5.0.0.2        2009.09.16        -
AntiVir        7.9.1.18        2009.09.16        -
Antiy-AVL        2.0.3.7        2009.09.16        -
Authentium        5.1.2.4        2009.09.16        -
Avast        4.8.1351.0        2009.09.16        Win32:SwizBased-gen
AVG        8.5.0.412        2009.09.16        -
BitDefender        7.2        2009.09.16        -
CAT-QuickHeal        10.00        2009.09.16        Win32.Trojan.Swizzor.b.4
ClamAV        0.94.1        2009.09.16        -
Comodo        2340        2009.09.16        -
DrWeb        5.0.0.12182        2009.09.16        -
eSafe        7.0.17.0        2009.09.16        -
eTrust-Vet        31.6.6740        2009.09.16        Win32/Swizzor!generic
F-Prot        4.5.1.85        2009.09.16        W32/Swizzor.E.gen!Eldorado
F-Secure        8.0.14470.0        2009.09.16        Trojan.Win32.Swizzor.b
Fortinet        3.120.0.0        2009.09.16        -
GData        19        2009.09.16        Win32:SwizBased-gen
Ikarus        T3.1.1.72.0        2009.09.16        Trojan.Win32.Obfuscated
Jiangmin        11.0.800        2009.09.16        -
K7AntiVirus        7.10.846        2009.09.16        -
Kaspersky        7.0.0.125        2009.09.16        Trojan.Win32.Swizzor.b
McAfee        5743        2009.09.16        -
McAfee+Artemis        5743        2009.09.16        -
McAfee-GW-Edition        6.8.5        2009.09.16        -
Microsoft        1.5005        2009.09.16        -
NOD32        4431        2009.09.16        -
Norman        6.01.09        2009.09.16        -
nProtect        2009.1.8.0        2009.09.16        -
Panda        10.0.2.2        2009.09.16        -
PCTools        4.4.2.0        2009.09.16        -
Prevx        3.0        2009.09.16        -
Rising        21.47.24.00        2009.09.16        -
Sophos        4.45.0        2009.09.16        -
Sunbelt        3.2.1858.2        2009.09.16        Trojan.Win32.Swizzor.Gen (v)
Symantec        1.4.4.12        2009.09.16        -
TheHacker        6.3.4.4.404        2009.09.15        -
TrendMicro        8.950.0.1094        2009.09.16        -
VBA32        3.12.10.10        2009.09.15        BScope.Trojan.BugsWay.H.Obfs
ViRobot        2009.9.16.1939        2009.09.16        -
VirusBuster        4.6.5.0        2009.09.16        -
weitere Informationen
File size: 319488 bytes
MD5...: 189e739aeaeb8bec87c1a4ba72bb3c45
SHA1..: cfe4c67bafc189aabf2c3ba9ba7d7d157cf3a523
SHA256: 20892bbaa2b5dd21e64ee9acdd06c02c8d9685d95ad6df8dcb76958c6e8a1f22
ssdeep: 6144:BYcCMbpRkltFUif+ACYaTC4NfbLWdoXHO:BYc8FMAC7C4NLnHO
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1000
timedatestamp.....: 0x46cf14d3 (Fri Aug 24 17:26:43 2007)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x10308 0x11000 6.61 1ca18463086693011543ee9f37f54fe8
.rdata 0x12000 0x198d7 0x1a000 7.65 4afd2799da7e6e012c1cf55033d66b9f
.data 0x2c000 0x15cac 0x13000 3.43 9da5e5172637911a30b136d108516870
.rsrc 0x42000 0xe5f0 0xf000 5.36 d43b6635993983d76e6d40ccc7639615

( 9 imports )
> shell32.dll: DragQueryFileA, ExtractIconExA, ShellExecuteW, SHGetPathFromIDListW, SHGetSpecialFolderLocation, SHGetFileInfoA, ExtractIconA, SHGetDesktopFolder, SHGetMalloc, -, SHGetSpecialFolderPathA, Shell_NotifyIconW, SHFileOperationA, DragFinish, SHGetPathFromIDListA, ShellExecuteA, DragAcceptFiles, SHBrowseForFolderA, ShellExecuteExA
> oleaut32.dll: -
> gdi32.dll: CreateDiscardableBitmap, CreateRectRgn, GetTextFaceW, GetKerningPairsA, GetObjectW, CreateDIBPatternBrushPt, OffsetRgn, SetMiterLimit, SetViewportOrgEx, GdiComment, GetStockObject, SetTextJustification, CreatePen, CreateDCW, MaskBlt, SetBrushOrgEx, SetRectRgn, EnumMetaFile, GetSystemPaletteEntries, EndDoc, FloodFill, TextOutW, CreateDIBitmap, ExtTextOutW, CreateMetaFileA, SelectPalette, GetTextExtentPoint32A, CreateEllipticRgn, CreatePalette, GetDeviceCaps, Ellipse, SetROP2, StartDocA, PatBlt, SetTextCharacterExtra, GetRegionData, SetMapMode, UnrealizeObject, GetDCOrgEx, CreateEnhMetaFileA, Escape, GetBkMode, ScaleViewportExtEx, GetObjectA, CreateICA, IntersectClipRect, GetRgnBox, ExtEscape, GetAspectRatioFilterEx, PolyDraw, CloseMetaFile, CreateRoundRectRgn, GetBitmapBits, GetNearestPaletteIndex, GetTextCharsetInfo, GetTextExtentPointW, GetCharWidthA, GetMapMode, EndPath, CreatePolygonRgn, StretchBlt, CreatePatternBrush, Arc, OffsetViewportOrgEx, GetBkColor, DeleteObject, CreateDCA, StrokePath, GetCharABCWidthsW, AngleArc, BitBlt, GetCurrentObject, FrameRgn, SetPolyFillMode, SelectClipRgn, GetPolyFillMode, EndPage, GetCharWidthW, GetTextColor, GetGlyphOutlineA, InvertRgn, SetMapperFlags, UpdateColors, DeleteDC, GetTextMetricsA, Pie, PtVisible, GetWindowOrgEx, BeginPath, GetColorAdjustment, FillPath, WidenPath, GetClipBox, AnimatePalette, GetCharABCWidthsFloatA, SetBkMode, SetPixelV, ExtCreatePen, SelectObject, CreatePolyPolygonRgn, CreateFontW, SetBitmapDimensionEx, GetMiterLimit, SetWindowExtEx, PolylineTo, CreateBrushIndirect, GetObjectType, StretchDIBits, GetViewportOrgEx, CreateCompatibleDC, CombineRgn, RealizePalette, Chord, GetStretchBltMode, CreateDIBSection, CreateSolidBrush, GetClipRgn, StartPage, GetCharWidthFloatA, GetCharABCWidthsA, EnumFontFamiliesA, GetTextExtentPoint32W, RectVisible, SetTextColor, ExcludeClipRect, ExtCreateRegion, DPtoLP, GetBrushOrgEx, Rectangle, GetDIBits, CreateRectRgnIndirect, SetArcDirection, ExtSelectClipRgn, SetPixel, GetWindowExtEx, GetPaletteEntries, CreateBitmap, GetPixel, DrawEscape, GetNearestColor, PlayMetaFileRecord, AbortPath, GetCurrentPositionEx, RestoreDC, TextOutA, TranslateCharsetInfo, AbortDoc, CloseEnhMetaFile, CreateCompatibleBitmap, EnumFontFamiliesExA, GetTextExtentPointA, GetTextExtentExPointA, CopyMetaFileA, GetTextMetricsW, GetViewportExtEx, SetViewportExtEx, ExtTextOutA, SetAbortProc, SetDIBColorTable, PlgBlt, GetArcDirection, OffsetClipRgn, RoundRect, PtInRegion, MoveToEx, GetBitmapDimensionEx, SetColorAdjustment, GetTextExtentExPointW, LineTo, ScaleWindowExtEx, CreateHatchBrush, CreateFontA, SetBkColor, GetTextCharacterExtra, Polyline, CreateFontIndirectA, GdiFlush, ArcTo, OffsetWindowOrgEx, SaveDC, ResizePalette, PathToRegion, EnumObjects, GetBoundsRect, DeleteMetaFile, GetROP2, CloseFigure, FillRgn, SetDIBits, SetWindowOrgEx, CreateEllipticRgnIndirect, ExtFloodFill, CopyEnhMetaFileA, GetOutlineTextMetricsA, Polygon, GetFontData, SetStretchBltMode
> ole32.dll: GetHGlobalFromStream, OleCreateFromData, OleDuplicateData, OleCreateMenuDescriptor, CoCreateInstance, StgCreateDocfile, OleDestroyMenuDescriptor, CLSIDFromProgID, CoGetMalloc, OleSetContainedObject, WriteClassStg, IsAccelerator, ReadClassStg, ReleaseStgMedium, StgIsStorageFile, CLSIDFromString, CoTaskMemAlloc, OleRegGetUserType, CreateOleAdviseHolder, CoSuspendClassObjects, ReadFmtUserTypeStg, GetHGlobalFromILockBytes, OleTranslateAccelerator, StringFromGUID2, CoTreatAsClass, WriteClassStm, CreateBindCtx, RegisterDragDrop, OleRegGetMiscStatus, CoInitializeEx, CreateILockBytesOnHGlobal, OleLockRunning, OleIsCurrentClipboard, CoTaskMemRealloc, CoFreeUnusedLibraries, OleRun, CoGetClassObject, CoCopyProxy, CreateDataAdviseHolder, GetRunningObjectTable, OleSaveToStream, OleGetClipboard, CoCreateGuid, StgCreateDocfileOnILockBytes, CoDisconnectObject, CreateFileMoniker, CoInitialize, OleRegEnumVerbs, CoImpersonateClient, SetConvertStg, CoRegisterClassObject, CoRegisterMessageFilter, OleFlushClipboard, StringFromCLSID, CreateStreamOnHGlobal, OleInitialize, OleUninitialize, StgOpenStorageOnILockBytes, DoDragDrop, WriteFmtUserTypeStg, CoLockObjectExternal, CoResumeClassObjects, CoInitializeSecurity, CreateGenericComposite, CoSetProxyBlanket, OleSetClipboard, CoRevokeClassObject, CoUninitialize, OleLoad, CoTaskMemFree, RevokeDragDrop
> user32.dll: CharNextW, GetMenuItemID, TabbedTextOutW, PostMessageA, CheckMenuItem, ValidateRect, AttachThreadInput, GetDesktopWindow, GetMenuItemCount, SetForegroundWindow, CheckRadioButton, HideCaret, GetParent, GrayStringW, DeferWindowPos, DrawTextW, DefWindowProcA, GetScrollRange, OemToCharA, GetWindowTextA, SetWindowContextHelpId, wsprintfA, SetMenuDefaultItem, LoadMenuW, SetWindowPos, ValidateRgn, CreateWindowExA, ReleaseCapture, SetDlgItemTextW, GetClassInfoExA, GetMenuCheckMarkDimensions, GetKeyNameTextA, CharUpperW, GetTopWindow, ClientToScreen, GetClassInfoA, PostThreadMessageW, MapWindowPoints, DrawFrameControl, GetWindowTextW, SetDlgItemInt, RemoveMenu, GetWindow, LoadStringA, GetDoubleClickTime, GetAsyncKeyState, RegisterWindowMessageW, GetSystemMenu, EndPaint, GetPropA, CreatePopupMenu, DrawFocusRect, InvertRect, WinHelpW, GetCursorPos, CharNextA, ShowCaret, CopyAcceleratorTableA, GetMessageW, LoadImageW, UnregisterClassA, GetMessageTime, BringWindowToTop, IsWindowVisible, CallWindowProcW, ShowOwnedPopups, RemovePropA, TranslateMessage, ShowWindow, SetActiveWindow, CopyRect, ExcludeUpdateRgn, InvalidateRgn, DefMDIChildProcA, RegisterClassExA, SetWindowsHookExW, GetNextDlgTabItem, GetMenuState, LoadIconA, SetWindowLongA, KillTimer, GetSubMenu, CloseWindow, EmptyClipboard, MoveWindow, GetWindowLongA, IsDialogMessageA, RegisterClipboardFormatA, CharUpperA, GetClientRect, UnpackDDElParam, GetDC, RemovePropW, EqualRect, GetUpdateRgn, keybd_event, GetDlgCtrlID, RegisterClassExW, DestroyMenu, LoadIconW, GetUpdateRect, PeekMessageA, GetKeyState, EnumChildWindows, SetParent, GetWindowThreadProcessId, BeginDeferWindowPos, LoadAcceleratorsA, SetMenu, InvalidateRect, MessageBoxW, PostQuitMessage, EndDeferWindowPos, UnregisterHotKey, GetClassLongA, WindowFromPoint, InflateRect, GetMenuStringA, DispatchMessageW, IsZoomed, GetFocus, GetMessageA, UnhookWindowsHookEx, SetWindowTextA, GetMenuItemInfoA, GetClassNameA, EndDialog, LoadMenuA, DrawIcon, GetIconInfo, LoadBitmapW, RegisterClassW, SetScrollRange, ScreenToClient, CreateWindowExW, SetWindowPlacement, LoadCursorW, SetWindowRgn, DrawTextExW, MapDialogRect, CheckDlgButton, InsertMenuA, RedrawWindow, DestroyWindow, GetWindowRect, LockWindowUpdate, GetWindowDC, EnableMenuItem, AdjustWindowRectEx, DestroyIcon, WinHelpA, DefFrameProcA, GetClassNameW, SetRect, IsMenu, InSendMessage, GetScrollInfo, SystemParametersInfoA, FindWindowW, EnableWindow, SetFocus, RegisterClipboardFormatW, ChildWindowFromPointEx, UpdateWindow, ReleaseDC, BeginPaint, GetNextDlgGroupItem, ModifyMenuW, CallWindowProcA, CreateDialogIndirectParamA, CreateCaret, GetClassInfoExW, SendMessageA, LoadImageA, TabbedTextOutA, OpenClipboard, DrawIconEx, GetWindowPlacement, GetSysColor, GetMessagePos, SetScrollPos, SetMenuItemBitmaps, SetDlgItemTextA, AppendMenuA, DeleteMenu, GetWindowTextLengthA, SendDlgItemMessageW, SendDlgItemMessageA, MapVirtualKeyExA, SetWindowTextW, SetScrollInfo, GetActiveWindow, CallNextHookEx, DestroyCursor, SetCaretPos, FillRect, ScrollWindow, IsWindow, PtInRect, GetForegroundWindow, SetCursorPos, SetRectEmpty, MessageBeep, TrackPopupMenu, MessageBoxA, GetMenu, GrayStringA, ShowScrollBar, GetWindowRgn, SetTimer, DrawEdge, DefWindowProcW, SetWindowsHookExA, OffsetRect, CreateIconIndirect, GetSysColorBrush, GetDlgItem, IsIconic, SetClipboardData, GetMenuDefaultItem, DrawTextA, DispatchMessageA, IntersectRect, wvsprintfA, LoadBitmapA, CloseClipboard, GetLastActivePopup, TranslateAcceleratorW, RegisterWindowMessageA, RegisterClassA, IsClipboardFormatAvailable, IsRectEmpty, AppendMenuW, SetCursor, GetCapture, LoadCursorA, DrawMenuBar, WindowFromDC, GetSystemMetrics, GetScrollPos, SendMessageW, MsgWaitForMultipleObjects, IsWindowEnabled, SetCapture
> kernel32.dll: TerminateThread, DeviceIoControl, IsValidCodePage, FindNextFileW, GetModuleHandleA, GetLocaleInfoW, OpenProcess, FindFirstFileA, GetProcessHeap, SuspendThread, GetFullPathNameA, GlobalFree, SetFileAttributesA, GetEnvironmentVariableW, GlobalAddAtomA, LoadLibraryW, IsValidLocale, GetTickCount, GetProfileIntW, SetPriorityClass, GetLocalTime, GetTimeFormatA, CreateProcessA, GlobalHandle, SetLastError, UnlockFile, CreateEventA, LCMapStringW, SetHandleCount, GetVolumeInformationA, GetStringTypeExA, GetCPInfo, IsBadReadPtr, GlobalLock, ReleaseMutex, InterlockedExchange, TlsGetValue, GetCommandLineW, GetDiskFreeSpaceA, QueryPerformanceCounter, GetVersionExA, VirtualProtect, TlsAlloc, GetCurrentThreadId, VirtualFree, CreateThread, GetPrivateProfileStringA, ResetEvent, GetSystemTime, GetComputerNameA, GetCurrentThread, GetShortPathNameA, SetEndOfFile, MoveFileW, DuplicateHandle, lstrcmpiA, GetNumberFormatA, SizeofResource, LocalAlloc, SetEvent, WaitForSingleObject, lstrcpyW, CloseHandle, WritePrivateProfileSectionA, GetOEMCP, CreateFileA, FormatMessageA, GlobalFindAtomA, DeleteCriticalSection, CreateFileW, GlobalGetAtomNameA, Sleep, GetStringTypeW, GetFileAttributesA, FindResourceW, GlobalFlags, GetCommandLineA, FatalAppExitA, FileTimeToDosDateTime, CreateMutexA, UnhandledExceptionFilter, GetWindowsDirectoryW, ConvertDefaultLocale, GetDateFormatA, FindResourceA, TlsSetValue, GlobalUnlock, GlobalSize, HeapFree, FreeEnvironmentStringsW, CopyFileA, GetStringTypeA, GetSystemInfo, GetCurrentProcess, GetProcAddress, TlsFree, MultiByteToWideChar, FreeLibrary, GlobalMemoryStatus, GetLocaleInfoA, GetEnvironmentStringsW, MulDiv, LocalReAlloc, GetThreadLocale, SetStdHandle, SetEnvironmentVariableW, FileTimeToLocalFileTime, GetTimeZoneInformation, InterlockedIncrement, RtlUnwind, GlobalAlloc, CreatePipe, GetProfileStringA, MapViewOfFile, GlobalReAlloc, GetFileInformationByHandle, WritePrivateProfileStringA, GetTempFileNameA, SetEnvironmentVariableA, FindClose, GetProcessVersion, DosDateTimeToFileTime, GetACP, HeapCreate, FreeEnvironmentStringsA, GetCurrentProcessId, InterlockedDecrement, FormatMessageW, GetSystemDirectoryA, FlushFileBuffers, InitializeCriticalSection, GetEnvironmentStrings, WriteFile, GetFileType, GetLastError, CompareStringA, lstrcatA, GetSystemDefaultLangID, SetThreadPriority, FindNextFileA, GetModuleFileNameA, LocalFree, GetPriorityClass, GetProfileIntA, LeaveCriticalSection, SetFilePointer, GetConsoleCP, LoadLibraryExA, HeapDestroy, CompareStringW, GetStartupInfoW, CreateDirectoryW, _llseek, GetConsoleOutputCP, TerminateProcess, WriteConsoleW, GetFileSize, GlobalDeleteAtom, _lcreat, GetLongPathNameA, GetModuleFileNameW, SetUnhandledExceptionFilter, WideCharToMultiByte, LockFile, GetTempPathA, OpenEventA, GetStartupInfoA, EnterCriticalSection, GetSystemTimeAsFileTime, ExitProcess, RaiseException, WinExec, LockResource, HeapReAlloc, SetErrorMode, VirtualQuery, FileTimeToSystemTime, GetVersion, HeapSize, GetExitCodeThread, IsBadWritePtr, MoveFileExA, LoadResource, GetStdHandle, lstrlenA, GetWindowsDirectoryA, VirtualAlloc, ReadFile, LCMapStringA, LoadLibraryA, MoveFileA, HeapAlloc, GetConsoleMode, WaitForMultipleObjects, GetFileTime, SetFileTime, PeekNamedPipe, lstrcpyA, OpenMutexA, GetFullPathNameW, EnumResourceLanguagesA, DeleteFileA, lstrlenW
> comctl32.dll: ImageList_BeginDrag, ImageList_SetOverlayImage, ImageList_ReplaceIcon, ImageList_Draw, ImageList_GetImageCount, ImageList_DragShowNolock, ImageList_EndDrag, DestroyPropertySheetPage, InitCommonControlsEx, PropertySheetW, ImageList_Replace, ImageList_GetBkColor, CreatePropertySheetPageA, ImageList_GetIcon, ImageList_AddMasked, ImageList_DragMove, ImageList_LoadImageA, ImageList_Add, -, ImageList_Create, ImageList_GetDragImage, PropertySheetA, CreateToolbarEx, ImageList_SetDragCursorImage, ImageList_DragLeave, ImageList_DrawEx, ImageList_GetIconSize, ImageList_Merge, ImageList_Destroy, CreatePropertySheetPageW, ImageList_GetImageInfo, ImageList_Remove, _TrackMouseEvent
> version.dll: GetFileVersionInfoW, GetFileVersionInfoSizeA, GetFileVersionInfoSizeW, VerQueryValueA, GetFileVersionInfoA, VerQueryValueW
> advapi32.dll: DeleteAce, FreeSid, OpenThreadToken, RegCreateKeyExW, RegEnumKeyExA, EqualSid, DeleteService, AdjustTokenPrivileges, OpenSCManagerW, InitializeAcl, AddAce, GetLengthSid, RegQueryValueA, RegDeleteValueA, RegOpenKeyA, CreateProcessAsUserA, StartServiceCtrlDispatcherA, RegOpenCurrentUser, OpenServiceW, RegisterEventSourceA, CryptGenRandom, RegOpenKeyExW, RegCreateKeyExA, AllocateAndInitializeSid, GetUserNameW, RegSetValueExA, DeregisterEventSource, RegEnumValueA, SetServiceStatus, SetSecurityDescriptorOwner, AddAccessAllowedAce, RegOpenKeyExA, LookupPrivilegeValueA, RegSetValueExW, RegEnumKeyExW, IsValidSecurityDescriptor, OpenServiceA, RegQueryValueExA, DuplicateToken, GetFileSecurityA, RegQueryValueExW, SetFileSecurityA, RegCloseKey, SetSecurityDescriptorGroup, SetSecurityDescriptorDacl, RegDeleteKeyA, GetFileSecurityW, RegQueryValueW, InitializeSecurityDescriptor, CreateServiceA, RegDeleteValueW, ControlService, RegEnumKeyW, RegSetValueA, GetTokenInformation, ChangeServiceConfigA, OpenProcessToken, CloseServiceHandle, CopySid, RegisterServiceCtrlHandlerA, RegCreateKeyA, RegEnumKeyA

( 0 exports )
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
sigcheck:
publisher....: Source hticofl
copyright....: Miofo pongandu idwaryoc oursico inacedic
product......: Sitothat tsionyee tbert
description..: Terer headers wag sratemp
original name: Widening.exe
internal name: Widening
file version.: 6, 1, 4, 1
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

Klicke auf "Für alle Neuen" in meiner Signatur, lies alles aufmerksam und arbeite die komplette Liste unter Punkt 2 ab.

ciao, andreas


Alle Zeitangaben in WEZ +1. Es ist jetzt 14:11 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132