Trojaner-Board - pc läuft nicht mehr richtig, friert ein, booted auch schon mal selbst .logfile

´wie meinste denn das ? alles kopieren? DAS aaaalles???

Code:

Antivirus         Version         letzte aktualisierung         Ergebnis

a-squared         4.5.0.41         2009.10.24         -

AhnLab-V3         5.0.0.2         2009.10.23         -

AntiVir         7.9.1.44         2009.10.23         -

Antiy-AVL         2.0.3.7         2009.10.23         -

Authentium         5.1.2.4         2009.10.24         -

Avast         4.8.1351.0         2009.10.24         -

AVG         8.5.0.423         2009.10.24         -

BitDefender         7.2         2009.10.24         -

CAT-QuickHeal         10.00         2009.10.24         -

ClamAV         0.94.1         2009.10.24         -

Comodo         2717         2009.10.24         -

DrWeb         5.0.0.12182         2009.10.24         -

eSafe         7.0.17.0         2009.10.22         -

eTrust-Vet         35.1.7082         2009.10.23         -

F-Prot         4.5.1.85         2009.10.24         -

F-Secure         9.0.15370.0         2009.10.22         -

Fortinet         3.120.0.0         2009.10.24         -

GData         19         2009.10.24         -

Ikarus         T3.1.1.72.0         2009.10.24         -

Jiangmin         11.0.800         2009.10.24         -

K7AntiVirus         7.10.879         2009.10.24         -

Kaspersky         7.0.0.125         2009.10.24         -

McAfee         5781         2009.10.24         -

McAfee+Artemis         5781         2009.10.24         -

McAfee-GW-Edition         6.8.5         2009.10.24         -

Microsoft         1.5202         2009.10.24         -

NOD32         4539         2009.10.24         -

Norman         6.03.02         2009.10.23         -

nProtect         2009.1.8.0         2009.10.24         -

Panda         10.0.2.2         2009.10.24         -

PCTools         4.4.2.0         2009.10.19         -

Prevx         3.0         2009.10.24         -

Rising         21.52.52.00         2009.10.24         -

Sophos         4.46.0         2009.10.24         -

Sunbelt         3.2.1858.2         2009.10.24         -

Symantec         1.4.4.12         2009.10.24         -

TheHacker         6.5.0.2.053         2009.10.24         -

TrendMicro         8.950.0.1094         2009.10.24         -

VBA32         3.12.10.11         2009.10.23         -

ViRobot         2009.10.23.2003         2009.10.23         -

VirusBuster         4.6.5.0         2009.10.24         -

weitere Informationen

File size: 133616 bytes

MD5   : 8f375b046872ec056a5174ad364e47f6

SHA1  : f41bfefb9868ff763236c295e1774c221bbbfc7d

SHA256: c36686be7fd9d8d9da8b18d596e5038cf8d576df3acb7a4bd9e736772e849836

PEInfo: PE Structure information
 

( base data )

entrypointaddress.: 0x6BA1

timedatestamp.....: 0x4A0867BC (Mon May 11 20:00:28 2009)

machinetype.......: 0x14C (Intel I386)
 

( 5 sections )

name viradd virsiz rawdsiz ntrpy md5

.text 0x1000 0xD6A4 0xE000 6.49 5f8a57b002d2c6183ed6b026d9bfc9ec

.rdata 0xF000 0xBD8E 0xC000 5.38 c3c9f52560382c2d8ce711bc306290ab

.data 0x1B000 0x2A1C 0x1000 3.74 d3a5c2f028c424241cb4e4674415aa75

.rsrc 0x1E000 0x368 0x1000 0.92 09fb6326f8c58d53bcf6dc290022c0e7

.reloc 0x1F000 0x1DD0 0x2000 4.96 087857ef483bfbe9715cdfc116a5cdd0
 

( 3 imports )
 

> advapi32.dll: RegOpenKeyExA, RegQueryValueExA, RegCloseKey

> kernel32.dll: FreeLibrary, GetProcAddress, LoadLibraryA, lstrlenA, InterlockedDecrement, InterlockedIncrement, GetModuleFileNameA, WaitForSingleObject, ReleaseMutex, CloseHandle, CreateMutexA, lstrlenW, InitializeCriticalSection, DeleteCriticalSection, LeaveCriticalSection, UnmapViewOfFile, MapViewOfFile, CreateFileMappingA, CreateFileA, OpenFileMappingA, GetTempPathA, GetCurrentProcessId, WideCharToMultiByte, MultiByteToWideChar, GetVersionExA, GetThreadLocale, GetLocaleInfoA, GetACP, EnterCriticalSection, InterlockedExchange, ExitProcess, RtlUnwind, RaiseException, GetLastError, DeleteFileW, GetCurrentThreadId, GetCommandLineA, HeapAlloc, HeapFree, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, TlsAlloc, SetLastError, TlsFree, TlsSetValue, TlsGetValue, GetModuleHandleA, SetUnhandledExceptionFilter, HeapReAlloc, TerminateProcess, GetCurrentProcess, HeapSize, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapDestroy, HeapCreate, VirtualFree, UnhandledExceptionFilter, WriteFile, VirtualAlloc, IsBadWritePtr, VirtualQuery, IsBadReadPtr, IsBadCodePtr, GetOEMCP, GetCPInfo, GetStringTypeA, GetStringTypeW, SetFilePointer, SetStdHandle, FlushFileBuffers, LCMapStringA, LCMapStringW, VirtualProtect, GetSystemInfo, SetEndOfFile, ReadFile

> shell32.dll: ShellExecuteExA
 

( 0 exports )

TrID  : File type identification

Win32 Executable MS Visual C++ (generic) (53.1%)

Windows Screen Saver (18.4%)

Win32 Executable Generic (12.0%)

Win32 Dynamic Link Library (generic) (10.6%)

Generic Win/DOS Executable (2.8%)

ssdeep: 1536:MQ2k3f3gr7WJJ62M8vtpdJo+rSO8iLhR8zVULjePWwxfFkEbxx65RlW6xYre4kPm:MQRvgWJJNvBZLgzVUcvxx65RlWOYi44m

PEiD  : -

RDS   : NSRL Reference Data Set

-

Code:

Antivirus          Version          letzte aktualisierung          Ergebnis

a-squared        4.5.0.50        2010.04.26        -

AhnLab-V3        5.0.0.2        2010.04.26        -

AntiVir        8.2.1.224        2010.04.26        -

Antiy-AVL        2.0.3.7        2010.04.26        -

Authentium        5.2.0.5        2010.04.26        -

Avast        4.8.1351.0        2010.04.26        -

Avast5        5.0.332.0        2010.04.26        -

AVG        9.0.0.787        2010.04.26        -

BitDefender        7.2        2010.04.26        -

CAT-QuickHeal        10.00        2010.04.26        -

ClamAV        0.96.0.3-git        2010.04.26        -

Comodo        4684        2010.04.26        -

DrWeb        5.0.2.03300        2010.04.26        -

eSafe        7.0.17.0        2010.04.26        -

eTrust-Vet        35.2.7448        2010.04.24        -

F-Prot        4.5.1.85        2010.04.26        -

F-Secure        9.0.15370.0        2010.04.26        -

Fortinet        4.0.14.0        2010.04.26        -

GData        21        2010.04.26        -

Ikarus        T3.1.1.80.0        2010.04.26        -

Jiangmin        13.0.900        2010.04.26        -

Kaspersky        7.0.0.125        2010.04.26        -

McAfee        5.400.0.1158        2010.04.26        -

McAfee-GW-Edition        6.8.5        2010.04.26        -

Microsoft        1.5703        2010.04.26        -

NOD32        5063        2010.04.26        -

Norman        6.04.11        2010.04.26        -

nProtect        2010-04-26.01        2010.04.26        -

Panda        10.0.2.7        2010.04.26        -

PCTools        7.0.3.5        2010.04.26        -

Prevx        3.0        2010.04.26        -

Rising        22.45.00.04        2010.04.26        -

Sophos        4.53.0        2010.04.26        -

Sunbelt        6224        2010.04.26        -

Symantec        20091.2.0.41        2010.04.26        -

TheHacker        6.5.2.0.269        2010.04.26        -

TrendMicro        9.120.0.1004        2010.04.26        -

TrendMicro-HouseCall        9.120.0.1004        2010.04.26        -

VBA32        3.12.12.4        2010.04.26        -

ViRobot        2010.4.26.2294        2010.04.26        -

VirusBuster        5.0.27.0        2010.04.26        -

weitere Informationen

File size: 125424 bytes

MD5...: d6838e30488a61c839b3ac1f5e33cd78

SHA1..: 6aa4712497c5613f4f2d6f722601e7b39453bb71

SHA256: 31e243e901777153282285e01454719cf290dae4fa1c0969fb145bde2d51d9f5

ssdeep: 1536:Xawj93sUDJRC0D0i8dzaMmwNU94mep7g8/zaqdiIr+9yLEMDbw:XP3soC3w

Nwa41dGqdiD5H

PEiD..: -

PEInfo: PE Structure information
 

( base data )

entrypointaddress.: 0x1a0b0

timedatestamp.....: 0x49e8d808 (Fri Apr 17 19:27:04 2009)

machinetype.......: 0x200 (IA64)
 

( 7 sections )

name viradd virsiz rawdsiz ntrpy md5

.text 0x2000 0x16600 0x16600 5.14 0bfa7bab222de79ac9883b8c9641fff1

.rdata 0x1a000 0x365a 0x3800 4.22 b6cf82e50f9a73490e7ed4eb79f22f18

.pdata 0x1e000 0x774 0x800 4.34 3e550977be0c78ae4198ffdbab2f5b7d

.srdata 0x20000 0xc4 0x200 2.10 9d3e1b0b052d030a769236ea50a10818

.sdata 0x22000 0xad8 0xa00 2.51 81d13efe84a51b74ea0cf8f5d297054f

.data 0x24000 0x2e60 0x1600 2.52 bd2d49fc76fd660952f9d04b964f285d

.rsrc 0x28000 0x2e8 0x400 2.47 71f0fd1d0efb7a7b7eeaad9b56a2bc29
 

( 4 imports )

> ADVAPI32.dll: RegCloseKey, RegOpenKeyA, RegFlushKey, RegSetValueExA, RegDeleteValueA, RegQueryValueExA, RegOpenKeyExA, CloseServiceHandle, OpenSCManagerA, QueryServiceConfigA, OpenServiceA, StartServiceA, DeleteService, QueryServiceStatus, ControlService, CreateServiceA

> USER32.dll: wsprintfW, wsprintfA, DefWindowProcA, SetTimer, PeekMessageA, TranslateMessage, DispatchMessageA, KillTimer, DestroyWindow, UnregisterClassA, RegisterClassExA, CreateWindowExA, ShowWindow, UpdateWindow

> SETUPAPI.dll: SetupInstallServicesFromInfSectionA, SetupOpenInfFileA, SetupDiGetDeviceInstallParamsA, SetupDiCreateDeviceInfoList, SetupDiGetClassDevsA, SetupDiEnumDeviceInfo, SetupDiDestroyDeviceInfoList, SetupDiSetClassInstallParamsA, SetupDiCallClassInstaller, SetupCloseInfFile

> KERNEL32.dll: InitializeCriticalSection, RtlPcToFileHeader, FlushFileBuffers, SetStdHandle, GetStringTypeW, GetStringTypeA, VirtualQuery, GetSystemInfo, VirtualAlloc, VirtualProtect, GetLocaleInfoA, SetFilePointer, CloseHandle, GetExitCodeProcess, WaitForSingleObject, CreateProcessA, GetSystemDirectoryA, lstrcpyA, GetProcAddress, LoadLibraryA, GetSystemDirectoryW, FreeLibrary, GetVersionExA, FindClose, FindFirstFileA, lstrcmpiA, lstrlenA, DeleteFileA, GetWindowsDirectoryA, CreateFileA, GetLastError, Sleep, GetCurrentProcess, SetFileAttributesA, MultiByteToWideChar, WideCharToMultiByte, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, HeapFree, HeapAlloc, LCMapStringA, LCMapStringW, TlsFree, GetCurrentThreadId, TlsSetValue, SetLastError, TlsGetValue, TlsAlloc, EnterCriticalSection, LeaveCriticalSection, RtlUnwind2, GetACP, GetOEMCP, GetCPInfo, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, UnhandledExceptionFilter, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetFileType, DeleteCriticalSection, HeapCreate
 

( 0 exports )

RDS...: NSRL Reference Data Set

-

trid..: Win64 Executable Generic (95.5%)

Generic Win/DOS Executable (2.2%)

DOS Executable Generic (2.2%)

Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)

pdfid.: -

sigcheck:

publisher....: Sonic Solutions

copyright....: Copyright (c) Sonic Solutions

product......: n/a

description..: PX Install Application

original name: PxInsI64.EXE

internal name: PxInsI64.EXE

file version.: 3.00.93.0

comments.....: n/a

signers......: Sonic Solutions

VeriSign Class 3 Code Signing 2004 CA

Class 3 Public Primary Certification Authority

signing date.: 9:28 PM 4/17/2009

verified.....: -

Code:

 Datei pxcpyi64.exe empfangen 2010.04.26 19:24:22 (UTC)

Status: Laden ... Wartend Warten Überprüfung Beendet Nicht gefunden Gestoppt

Ergebnis: 0/41 (0%)

Laden der Serverinformationen...

Ihre Datei wartet momentan auf Position: 1.

Geschätzte Startzeit ist zwischen 38 und 55 Sekunden.

Dieses Fenster bis zum Abschluss des Scans nicht schließen.

Der Scanner, welcher momentan Ihre Datei bearbeitet ist momentan gestoppt. Wir warten einige Sekunden um Ihr Ergebnis zu erstellen.

Falls Sie längern als fünf Minuten warten, versenden Sie bitte die Datei erneut.

Ihre Datei wird momentan von VirusTotal überprüft,

Ergebnisse werden sofort nach der Generierung angezeigt.

Filter Filter

Drucken der Ergebnisse Drucken der Ergebnisse

Datei existiert nicht oder dessen Lebensdauer wurde überschritten

Dienst momentan gestoppt. Ihre Datei befindet sich in der Warteschlange (position: ). Diese wird abgearbeitet, wenn der Dienst wieder startet.
 

SIe können auf einen automatischen reload der homepage warten, oder ihre email in das untere formular eintragen. Klicken Sie auf "Anfragen", damit das System sie benachrichtigt wenn die Überprüfung abgeschlossen ist.

Email:         

        

Antivirus         Version         letzte aktualisierung         Ergebnis

a-squared        4.5.0.50        2010.04.26        -

AhnLab-V3        5.0.0.2        2010.04.26        -

AntiVir        8.2.1.224        2010.04.26        -

Antiy-AVL        2.0.3.7        2010.04.26        -

Authentium        5.2.0.5        2010.04.26        -

Avast        4.8.1351.0        2010.04.26        -

Avast5        5.0.332.0        2010.04.26        -

AVG        9.0.0.787        2010.04.26        -

BitDefender        7.2        2010.04.26        -

CAT-QuickHeal        10.00        2010.04.26        -

ClamAV        0.96.0.3-git        2010.04.26        -

Comodo        4684        2010.04.26        -

DrWeb        5.0.2.03300        2010.04.26        -

eSafe        7.0.17.0        2010.04.26        -

eTrust-Vet        35.2.7448        2010.04.24        -

F-Prot        4.5.1.85        2010.04.26        -

F-Secure        9.0.15370.0        2010.04.26        -

Fortinet        4.0.14.0        2010.04.26        -

GData        21        2010.04.26        -

Ikarus        T3.1.1.80.0        2010.04.26        -

Jiangmin        13.0.900        2010.04.26        -

Kaspersky        7.0.0.125        2010.04.26        -

McAfee        5.400.0.1158        2010.04.26        -

McAfee-GW-Edition        6.8.5        2010.04.26        -

Microsoft        1.5703        2010.04.26        -

NOD32        5063        2010.04.26        -

Norman        6.04.11        2010.04.26        -

nProtect        2010-04-26.01        2010.04.26        -

Panda        10.0.2.7        2010.04.26        -

PCTools        7.0.3.5        2010.04.26        -

Prevx        3.0        2010.04.26        -

Rising        22.45.00.04        2010.04.26        -

Sophos        4.53.0        2010.04.26        -

Sunbelt        6224        2010.04.26        -

Symantec        20091.2.0.41        2010.04.26        -

TheHacker        6.5.2.0.269        2010.04.26        -

TrendMicro        9.120.0.1004        2010.04.26        -

TrendMicro-HouseCall        9.120.0.1004        2010.04.26        -

VBA32        3.12.12.4        2010.04.26        -

ViRobot        2010.4.26.2294        2010.04.26        -

VirusBuster        5.0.27.0        2010.04.26        -

weitere Informationen

File size: 123888 bytes

MD5...: cc6f6cf21f19588095f84293880ca11c

SHA1..: 0f6b12fe4e85833ba18ce5788a5cd7711fe1a9b4

SHA256: 06c207cb1f66d9535d5e15ebc1a90aa250d1510a0db89c55c49b8577b04626ee

ssdeep: 1536:LknNdmijfCAm1V4Ng3/2W/eBfGVacsA67pKxTY8GPtKyJBiKmMGDbq:MNuv

r/eBfGKKxyFKyJBiKmMj

PEiD..: -

PEInfo: PE Structure information
 

( base data )

entrypointaddress.: 0x1a060

timedatestamp.....: 0x49d29c6c (Tue Mar 31 22:42:52 2009)

machinetype.......: 0x200 (IA64)
 

( 7 sections )

name viradd virsiz rawdsiz ntrpy md5

.text 0x2000 0x160c0 0x16200 5.15 cb75952b99c941df14b8db5617d5ec5e

.rdata 0x1a000 0x3332 0x3400 4.15 d19f84358189d63b82d0d58ecb9d5365

.pdata 0x1e000 0x75c 0x800 4.31 8830df97808f88eeccb81855ef519e27

.srdata 0x20000 0xcc 0x200 2.10 e5d67a94a84b1789d63683f8a1a58c55

.sdata 0x22000 0xa20 0xa00 2.15 c2cfe7306e79a743487ae5c30a262e00

.data 0x24000 0x2d80 0x1400 2.55 3b05d75ac22ad4f8a440ec7912dc1960

.rsrc 0x28000 0x654 0x800 5.05 1f29e6a10ae6ecdadfbc6c26217c412b
 

( 3 imports )

> ADVAPI32.dll: RegCloseKey, RegSetValueExA, RegCreateKeyExA, RegDeleteValueA, RegQueryValueExA, RegOpenKeyA, RegCreateKeyA

> VERSION.dll: GetFileVersionInfoA, VerQueryValueA, GetFileVersionInfoSizeA

> KERNEL32.dll: GetProcessHeap, SetEndOfFile, ReadFile, GetStringTypeW, GetStringTypeA, VirtualQuery, GetSystemInfo, VirtualAlloc, VirtualProtect, GetLocaleInfoA, InitializeCriticalSection, RtlPcToFileHeader, GetSystemDirectoryA, CloseHandle, GetExitCodeProcess, WaitForSingleObject, CreateProcessA, lstrcpyA, GetWindowsDirectoryA, GetModuleFileNameA, GetLastError, DeleteFileA, SetFileAttributesA, CreateFileA, CompareFileTime, GetFileTime, CopyFileA, MoveFileExA, GetTempPathA, GetTempFileNameA, FindClose, FindFirstFileA, FreeLibrary, GetProcAddress, LoadLibraryA, GetCurrentProcess, GetVersionExA, MultiByteToWideChar, WideCharToMultiByte, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, HeapFree, HeapAlloc, EnterCriticalSection, LeaveCriticalSection, RtlUnwind2, LCMapStringA, LCMapStringW, TlsFree, GetCurrentThreadId, TlsSetValue, SetLastError, TlsGetValue, TlsAlloc, GetACP, GetOEMCP, GetCPInfo, ExitProcess, WriteFile, GetStdHandle, UnhandledExceptionFilter, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetFileType, DeleteCriticalSection, HeapCreate, SetFilePointer, SetStdHandle, FlushFileBuffers
 

( 0 exports )

RDS...: NSRL Reference Data Set

-

pdfid.: -

trid..: Win64 Executable Generic (95.5%)

Generic Win/DOS Executable (2.2%)

DOS Executable Generic (2.2%)

Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)

sigcheck:

publisher....: Sonic Solutions

copyright....: Copyright (c) Sonic Solutions

product......: n/a

description..: PX Install Application

original name: PxCpyI64.EXE

internal name: PxCpyI64.EXE

file version.: 1.00.57.0

comments.....: n/a

signers......: Sonic Solutions

VeriSign Class 3 Code Signing 2004 CA

Class 3 Public Primary Certification Authority

signing date.: 12:43 AM 4/1/2009

verified.....: -