Trojaner-Board - Wo ist der Virus?

Antivirus Version letzte aktualisierung Ergebnis
a-squared 4.5.0.50 2010.04.03 -
AhnLab-V3 5.0.0.2 2010.04.03 -
AntiVir 7.10.6.23 2010.04.02 -
Antiy-AVL 2.0.3.7 2010.04.02 -
Authentium 5.2.0.5 2010.04.03 -
Avast 4.8.1351.0 2010.04.03 -
Avast5 5.0.332.0 2010.04.03 -
AVG 9.0.0.787 2010.04.03 -
BitDefender 7.2 2010.04.03 -
CAT-QuickHeal 10.00 2010.04.03 -
ClamAV 0.96.0.0-git 2010.04.03 -
Comodo 4486 2010.04.03 -
DrWeb 5.0.2.03300 2010.04.03 -
eSafe 7.0.17.0 2010.04.01 -
eTrust-Vet 35.2.7405 2010.04.02 -
F-Prot 4.5.1.85 2010.04.03 -
F-Secure 9.0.15370.0 2010.04.03 -
Fortinet 4.0.14.0 2010.04.03 -
GData 19 2010.04.03 -
Ikarus T3.1.1.80.0 2010.04.03 -
Jiangmin 13.0.900 2010.04.03 -
K7AntiVirus 7.10.1004 2010.03.22 -
Kaspersky 7.0.0.125 2010.04.03 -
McAfee 5937 2010.03.31 -
McAfee+Artemis 5937 2010.03.31 -
McAfee-GW-Edition 6.8.5 2010.04.02 -
Microsoft 1.5605 2010.04.03 -
NOD32 4996 2010.04.03 -
Norman 6.04.10 2010.04.03 -
nProtect 2009.1.8.0 2010.04.03 -
Panda 10.0.2.2 2010.04.03 -
PCTools 7.0.3.5 2010.04.03 -
Prevx 3.0 2010.04.03 -
Rising 22.41.04.05 2010.04.02 -
Sophos 4.52.0 2010.04.03 -
Sunbelt 6134 2010.04.03 -
Symantec 20091.2.0.41 2010.04.03 -
TheHacker 6.5.2.0.251 2010.04.02 -
TrendMicro 9.120.0.1004 2010.04.03 -
VBA32 3.12.12.4 2010.04.02 -
ViRobot 2010.4.3.2259 2010.04.03 -
VirusBuster 5.0.27.0 2010.04.03 -
weitere Informationen
File size: 97792 bytes
MD5...: a07b45d1a904abb3c8a57735a1f026a3
SHA1..: ec22e642db0981bf53815f8de702c2178ad36c32
SHA256: d197d78f1895050ebf9e541eb633a30acc200034b565c8e9d48b2d69f0aedae6
ssdeep: 1536:76qkQHtWQKrgp5CjuIXZHzRDKwa22MoMrcLEc+sup7SPK6iygsVv/1WwH79
:mqt3X+jxpHz9Kz2ZoQcLEc+Hp7SPCygq

PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x143e0
timedatestamp.....: 0x2a425e19 (Fri Jun 19 22:22:17 1992)
machinetype.......: 0x14c (I386)

( 7 sections )
name viradd virsiz rawdsiz ntrpy md5
CODE 0x1000 0x133f8 0x13400 6.46 9d4a2da0e654b026a0acd1d69a301cd9
DATA 0x15000 0x58c 0x600 4.00 4982107933053699ddd9ab9edd36d8bf
BSS 0x16000 0x895 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.idata 0x17000 0x9de 0xa00 4.65 0508a4bd8e0170a6541a01b61f1f4668
.edata 0x18000 0x2d5 0x400 4.17 ab3e901513219846357f95f5ba2ef70c
.reloc 0x19000 0x1814 0x1a00 6.46 8ad2edeadcc161dc44e848f03e27f14c
.rsrc 0x1b000 0x1800 0x1800 3.55 2fc2e7005a806d36ebbb39115165cf62

( 9 imports )
> kernel32.dll: DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, GetVersion, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, VirtualQuery, WideCharToMultiByte, MultiByteToWideChar, lstrlenA, lstrcpynA, LoadLibraryExA, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, WriteFile, UnhandledExceptionFilter, RtlUnwind, RaiseException, GetStdHandle
> user32.dll: GetKeyboardType, LoadStringA, MessageBoxA, CharNextA
> advapi32.dll: RegQueryValueExA, RegOpenKeyExA, RegCloseKey
> oleaut32.dll: SysFreeString, SysReAllocStringLen, SysAllocStringLen
> kernel32.dll: TlsSetValue, TlsGetValue, TlsFree, TlsAlloc, LocalFree, LocalAlloc
> kernel32.dll: WriteFile, WaitForSingleObject, VirtualQuery, SetFilePointer, SetEvent, SetEndOfFile, ResetEvent, ReleaseMutex, ReadFile, OpenMutexA, OpenFileMappingA, MapViewOfFile, LeaveCriticalSection, InitializeCriticalSection, GetVersionExA, GetThreadLocale, GetStringTypeExA, GetStdHandle, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLocalTime, GetLastError, GetFullPathNameA, GetDiskFreeSpaceA, GetDateFormatA, GetCurrentThreadId, GetCPInfo, GetACP, FormatMessageA, EnumCalendarInfoA, EnterCriticalSection, DeleteCriticalSection, CreateFileA, CreateEventA, CompareStringA, CloseHandle
> user32.dll: MessageBoxA, LoadStringA, GetSystemMetrics, CharNextA, CharToOemA
> kernel32.dll: Sleep
> oleaut32.dll: SafeArrayPtrOfIndex, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopy, VariantClear, VariantInit

( 24 exports )
tsrConnect, tsrDisconnect, tsrGetChannelInfoByID, tsrGetChannelInfoByName, tsrGetChannels, tsrGetLastError, tsrGetPlayerInfoByID, tsrGetPlayerInfoByName, tsrGetPlayers, tsrGetServerInfo, tsrGetSpeakers, tsrGetUserInfo, tsrGetVersion, tsrKickPlayerFromChannel, tsrKickPlayerFromServer, tsrQuit, tsrSendTextMessage, tsrSendTextMessageToChannel, tsrSetOperator, tsrSetPlayerFlags, tsrSetVoice, tsrSetWantVoiceReason, tsrSwitchChannelID, tsrSwitchChannelName

RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win32 Executable Generic (58.3%)
Win16/32 Executable Delphi generic (14.1%)
Generic Win/DOS Executable (13.7%)
DOS Executable Generic (13.6%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned