| mark-labs | 22.03.2010 21:10 |
Ja okay habe es jetzt gemacht,wird sehr vieles merkwürdig angezeigt,am besten du schaust es dir an
hier Code:
Antivirus Version letzte aktualisierung Ergebnis
a-squared 4.5.0.50 2010.03.22 -
AhnLab-V3 5.0.0.2 2010.03.22 -
AntiVir 8.2.1.196 2010.03.22 -
Antiy-AVL 2.0.3.7 2010.03.19 -
Authentium 5.2.0.5 2010.03.22 -
Avast 4.8.1351.0 2010.03.22 -
Avast5 5.0.332.0 2010.03.22 -
AVG 9.0.0.787 2010.03.22 -
BitDefender 7.2 2010.03.22 -
CAT-QuickHeal 10.00 2010.03.22 -
ClamAV 0.96.0.0-git 2010.03.22 -
Comodo 4352 2010.03.22 -
DrWeb 5.0.1.12222 2010.03.22 -
eSafe 7.0.17.0 2010.03.21 -
eTrust-Vet 35.2.7382 2010.03.22 -
F-Prot 4.5.1.85 2010.03.22 -
F-Secure 9.0.15370.0 2010.03.22 -
Fortinet 4.0.14.0 2010.03.22 -
GData 19 2010.03.22 -
Ikarus T3.1.1.80.0 2010.03.22 -
Jiangmin 13.0.900 2010.03.22 -
K7AntiVirus 7.10.1004 2010.03.22 -
Kaspersky 7.0.0.125 2010.03.22 -
McAfee 5928 2010.03.22 -
McAfee+Artemis 5928 2010.03.22 -
McAfee-GW-Edition 6.8.5 2010.03.22 -
Microsoft 1.5605 2010.03.22 -
NOD32 4966 2010.03.22 -
Norman 6.04.09 2010.03.22 -
nProtect 2009.1.8.0 2010.03.22 -
Panda 10.0.2.2 2010.03.22 -
PCTools 7.0.3.5 2010.03.22 -
Prevx 3.0 2010.03.22 -
Rising 22.40.00.04 2010.03.22 -
Sophos 4.51.0 2010.03.22 -
Sunbelt 6031 2010.03.22 -
Symantec 20091.2.0.41 2010.03.22 -
TheHacker 6.5.2.0.241 2010.03.22 -
TrendMicro 9.120.0.1004 2010.03.22 -
VBA32 3.12.12.2 2010.03.19 -
ViRobot 2010.3.22.2238 2010.03.22 -
VirusBuster 5.0.27.0 2010.03.22 -
weitere Informationen
File size: 2462256 bytes
MD5...: 4862a758da0e20b57bbadcb077ddad59
SHA1..: 737c8e78fd8ba198e92714688950e3597e71b774
SHA256: 7e87f4411e1101748abb28e21e71bc3ba631dd65cf9fc1d248fae195b47af681
ssdeep: 49152:8Rp1VKiOKVpxOjKMW9Ndk0Z+EmkRETySKNV1TJPtTNppr+MN0vCIhPgIA0
kt2ooD:8D1VKiOKVpxOjKMKNdJZakR2ypNbTx/W
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x11fb90
timedatestamp.....: 0x4b539707 (Sun Jan 17 23:02:31 2010)
machinetype.......: 0x14c (I386)
( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x1a58f7 0x1a5a00 6.70 62d8f6119fd876e6a908f2e4a13ad837
.rdata 0x1a7000 0x7cc1b 0x7ce00 6.02 2fec10942d4da6a25872d5b6040228cf
.data 0x224000 0x192dc 0x13c00 5.63 744756cb6a15ff3f4c1cf0271a9b12a4
.tls 0x23e000 0x2 0x200 0.00 bf619eac0cdf3f68d496ea9344137e8b
.reloc 0x23f000 0x20f62 0x21000 6.23 877825e97c815828bc33da73052b7f5c
( 17 imports )
> PSAPI.DLL: EnumProcessModules, GetProcessMemoryInfo
> WININET.dll: HttpQueryInfoA, InternetOpenA, InternetReadFile, InternetOpenUrlA, InternetCloseHandle
> SHLWAPI.dll: SHDeleteKeyA
> KERNEL32.dll: GetVersionExW, LoadLibraryW, GetProcAddress, GlobalMemoryStatus, GetCurrentProcessId, QueryPerformanceCounter, GetStdHandle, GetFileType, GetVersion, GetCurrentThreadId, FlushConsoleInputBuffer, FindNextFileA, SetCurrentDirectoryW, LoadLibraryA, FindClose, FindFirstFileA, GetModuleFileNameW, GetSystemDirectoryW, GetCurrentProcess, CreateProcessW, FreeLibrary, GetTickCount, GlobalFree, WideCharToMultiByte, GetUserDefaultUILanguage, MultiByteToWideChar, CreateNamedPipeA, FlushFileBuffers, DisconnectNamedPipe, ReadFile, WriteFile, ConnectNamedPipe, GetSystemTimeAsFileTime, SetEvent, WaitForSingleObject, CloseHandle, CreateEventA, GetLastError, DeleteFileA, ReadConsoleInputA, SetConsoleMode, SetEnvironmentVariableA, CompareStringW, CompareStringA, CreateProcessA, GetExitCodeProcess, GetLocaleInfoW, WriteConsoleW, GetConsoleOutputCP, FileTimeToLocalFileTime, FileTimeToSystemTime, MoveFileA, WriteConsoleA, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, GetStringTypeW, GetStringTypeA, CreateFileA, SetStdHandle, ExitProcess, GetModuleHandleW, IsDebuggerPresent, GetTimeZoneInformation, GetModuleHandleA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetCurrentDirectoryA, GetFullPathNameA, GetFileAttributesA, IsValidCodePage, GetOEMCP, GetACP, InitializeCriticalSectionAndSpinCount, GetModuleFileNameA, VirtualAlloc, VirtualFree, HeapDestroy, HeapCreate, GetConsoleMode, GetConsoleCP, SetFilePointer, GetStartupInfoA, SetHandleCount, HeapSize, SetLastError, TlsFree, GetDriveTypeA, LCMapStringW, LCMapStringA, GetCPInfo, RtlUnwind, RaiseException, GetDateFormatA, SetUnhandledExceptionFilter, GetTimeFormatA, SetConsoleCtrlHandler, DeleteFileW, GetDriveTypeW, GetFullPathNameW, CreateDirectoryW, UnhandledExceptionFilter, TerminateProcess, InterlockedExchange, FindFirstFileW, MoveFileExW, HeapFree, GetProcessHeap, CopyFileW, GetFileAttributesW, LocalAlloc, FindNextFileW, GetDiskFreeSpaceExW, LocalFree, SetFileAttributesW, HeapReAlloc, TlsGetValue, SetEndOfFile, SetErrorMode, HeapAlloc, SetFilePointerEx, Process32First, GetCurrentThread, InitializeCriticalSection, GetProcessTimes, TlsSetValue, OpenProcess, Sleep, LeaveCriticalSection, CreateFileW, SetThreadPriority, EnterCriticalSection, OpenThread, Process32Next, ProcessIdToSessionId, DeviceIoControl, GetSystemInfo, CreateToolhelp32Snapshot, DeleteCriticalSection, GetVersionExA, TlsAlloc, GetSystemTime, CreateThread, FormatMessageA, CreateMutexA, ReleaseMutex, InterlockedIncrement, InterlockedDecrement, GetCommandLineA
> USER32.dll: PeekMessageA, CreateWindowExA, RegisterClassA, SetWindowLongA, TranslateMessage, LoadImageA, FindWindowExA, SetClassLongA, DestroyWindow, GetLastInputInfo, GetWindowLongA, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxW, DispatchMessageA, DefWindowProcA, MsgWaitForMultipleObjects, UnregisterClassA
> ADVAPI32.dll: InitializeSecurityDescriptor, GetSecurityDescriptorDacl, LookupAccountSidW, RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetServiceStatus, RegisterServiceCtrlHandlerExW, RegSetValueExW, RegCloseKey, RegOpenKeyExW, RevertToSelf, RegOpenCurrentUser, RegDeleteValueA, ImpersonateLoggedOnUser, DuplicateTokenEx, RegOpenKeyExA, RegCreateKeyExA, RegQueryValueExW, RegCreateKeyExW, RegSetValueExA, SetSecurityDescriptorDacl, LookupPrivilegeValueA, RegQueryValueExA, AdjustTokenPrivileges, LookupAccountNameW, GetFileSecurityW, SetTokenInformation, CreateProcessAsUserW, GetTokenInformation, OpenProcessToken, IsValidSecurityDescriptor, SetSecurityDescriptorOwner, SetFileSecurityW, AccessCheck, SetEntriesInAclA, SetSecurityDescriptorGroup
> SHELL32.dll: SHGetFolderPathW, ShellExecuteExA, Shell_NotifyIconA
> ole32.dll: CoCreateGuid, CoInitialize, OleUninitialize, OleInitialize, CoUninitialize, CoCreateInstance
> OLEAUT32.dll: -, -
> WS2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> WTSAPI32.dll: WTSEnumerateSessionsA, WTSQueryUserToken, WTSFreeMemory
> WINHTTP.dll: WinHttpGetProxyForUrl, WinHttpOpen, WinHttpCloseHandle, WinHttpDetectAutoProxyConfigUrl
> USERENV.dll: CreateEnvironmentBlock
> IPHLPAPI.DLL: GetIfTable, GetBestRoute
> credui.dll: CredUIPromptForCredentialsA
> pdh.dll: PdhCloseQuery, PdhOpenQueryA, PdhAddCounterA, PdhCollectQueryData, PdhLookupPerfNameByIndexA, PdhRemoveCounter, PdhGetFormattedCounterValue
> NETAPI32.dll: NetApiBufferFree, NetGetDCName
( 2 exports )
Run, ServiceMain
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win64 Executable Generic (63.0%)
Win32 Executable MS Visual C++ (generic) (27.7%)
Win32 Executable Generic (6.2%)
Generic Win/DOS Executable (1.4%)
DOS Executable Generic (1.4%)
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
ACHTUNG ACHTUNG: VirusTotal ist ein kostenloser Dienst bereitgestellt von Hispasec Sistemas. Es gibt keine Garantie zur Verfügbarkeit sowie Fortbestehen der Dienstleistung. Obwohl die Erkennungsrate mehrerer Antivirus-Engines besser ist als nur durch ein Produkt, garantieren die Ergebnisse des Scans nicht die Harmlosigkeit einer Datei. Gegenwärtig gibt es keine Lösung, welche eine Erkennungsrate aller Viren und Malware zu 100% bietet.
|
