Trojaner-Board - Hilfe benötigt für eine Auswertung

Bräuchte bitte eure Hilfe für diese Auswertung Danke im vorraus

Antivirus Version letzte aktualisierung Ergebnis
AhnLab-V3 2008.6.13.1 2008.06.13 -
AntiVir 7.8.0.55 2008.06.14 ADSPY/Agent.PB
Authentium 5.1.0.4 2008.06.14 W32/Adware-Vapsup!Maximus
Avast 4.8.1195.0 2008.06.14 Win32:Agent-LTS
AVG 7.5.0.516 2008.06.14 Downloader.Adload.LO
BitDefender 7.2 2008.06.15 -
CAT-QuickHeal 9.50 2008.06.14 -
ClamAV 0.92.1 2008.06.15 -
DrWeb 4.44.0.09170 2008.06.14 -
eSafe 7.0.15.0 2008.06.12 -
eTrust-Vet 31.6.5873 2008.06.14 Win32/Pripecs!generic
Ewido 4.0 2008.06.14 -
F-Prot 4.4.4.56 2008.06.12 W32/Adware-Vapsup!Maximus
F-Secure 6.70.13260.0 2008.06.14 Trojan.Win32.Vapsup.gra
Fortinet 3.14.0.0 2008.06.14 -
GData 2.0.7306.1023 2008.06.14 Trojan.Win32.Vapsup.gra
Ikarus T3.1.1.26.0 2008.06.15 AdWare.NetAdware.S
Kaspersky 7.0.0.125 2008.06.15 Trojan.Win32.Vapsup.gra
McAfee 5317 2008.06.13 -
Microsoft 1.3604 2008.06.15 TrojanDownloader:Win32/Zlob.IC
NOD32v2 3186 2008.06.13 -
Norman 5.80.02 2008.06.13 -
Panda 9.0.0.4 2008.06.14 -
Prevx1 V2 2008.06.15 -
Rising 20.48.52.00 2008.06.14 -
Sophos 4.30.0 2008.06.15 -
Sunbelt 3.0.1145.1 2008.06.05 -
Symantec 10 2008.06.15 -
TheHacker 6.2.92.350 2008.06.14 -
VBA32 3.12.6.7 2008.06.14 suspected of Downloader.Zlob.5
VirusBuster 4.3.26:9 2008.06.12 -
Webwasher-Gateway 6.6.2 2008.06.14 Ad-Spyware.Agent.PB
weitere Informationen
File size: 229376 bytes
MD5...: 5534997d7b1253a5e192a8ee1f974f65
SHA1..: 9fece23a84819201b3dd0f685391bfce47501935
SHA256: fd4606903d69796c3e45c0216614a73a7844d63258eb9cd5c0973b224cceaa17
SHA512: 34d020534d3fc3742675a580b639b4f949c01f45d4377e65a79d2b6a8e5f4ea6
8870e2f68f0868582050afc4968052722921b96d7b0514954c083c52be24d853
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x10018f1a
timedatestamp.....: 0x48520b0e (Fri Jun 13 05:52:14 2008)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2bd6e 0x2c000 6.53 215028032f6b81ca4ab062ac491c0e0d
.data 0x2d000 0x3180 0x2000 2.43 293d388ac0d18e4b94892d0a1ea1586f
.rsrc 0x31000 0x51e0 0x6000 4.10 8cf026224ba2140eb7f55388d0e3f6b4
.reloc 0x37000 0x2536 0x3000 4.13 827554c4b0f0fed3f045c86b034cc47b

( 4 imports )
> KERNEL32.dll: CloseHandle, CreateDirectoryW, MoveFileW, WaitForSingleObject, Sleep, FindFirstFileW, FindClose, GetProcAddress, LoadLibraryW, GetLastError, MultiByteToWideChar, WriteFile, SetFilePointer, SystemTimeToFileTime, GetFileAttributesW, ReadFile, GetCurrentDirectoryW, LocalFileTimeToFileTime, WideCharToMultiByte, SetFileTime, SetEndOfFile, CreateFileW, lstrcpynW, GetSystemTime, GetLocaleInfoA, FindNextFileW, FileTimeToSystemTime, FileTimeToLocalFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapFree, HeapAlloc, GetCurrentThreadId, GetCommandLineA, GetVersionExA, GetProcessHeap, RaiseException, RtlUnwind, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, HeapSize, ExitProcess, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, GetConsoleCP, GetConsoleMode, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetCPInfo, GetACP, GetOEMCP, LCMapStringA, LCMapStringW, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, HeapReAlloc, GetModuleFileNameA, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, GetTimeZoneInformation, LoadLibraryA, InitializeCriticalSection, CompareStringA, CompareStringW, SetEnvironmentVariableA, SetEnvironmentVariableW, SetStdHandle, FlushFileBuffers, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, GetStringTypeA, GetStringTypeW, CreateFileA
> USER32.dll: GetDesktopWindow, GetWindow, MessageBoxW
> ADVAPI32.dll: RegSetValueExW, RegQueryValueExW, RegDeleteValueW
> ole32.dll: CoInitialize

( 0 exports )

File size: 155648 bytes
MD5...: fb4259851720bf8f65414998c21b0f5e
SHA1..: ab6fa7f81cfc0253cfaefecbc515593ad0d5d134
SHA256: 5dbda975ca413f368b06ff09c1669e93cc1907e339d7d1533ffe05c9bc33313b
SHA512: f7c6e21a7bca1b9cecbe6a3775655d34282c0e59f9f2c48ea62ccd3b9f826595
76408402dd30d22d98ac170058f52088584adebec38a402ecead01af12d08626
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1000ad07
timedatestamp.....: 0x48520d7c (Fri Jun 13 06:02:36 2008)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x16629 0x17000 6.59 97596180599577a93bc6804bdc55b914
.rdata 0x18000 0x63d5 0x7000 4.84 0e20ef3fe03f2498973a828e9ddcee31
.data 0x1f000 0x38a0 0x2000 3.65 44b5d8f3453dd1e316f354a62414d847
.rsrc 0x23000 0x1d20 0x2000 4.32 d14b1685aa4d1f4347be72d369ad03dd
.reloc 0x25000 0x254e 0x3000 4.02 4df417bb438fd91a6673520e17c75f8a

( 6 imports )
> COMCTL32.dll: ImageList_SetBkColor, ImageList_Destroy, ImageList_Create, ImageList_ReplaceIcon
> KERNEL32.dll: GetLastError, lstrcmpiW, GetModuleFileNameW, InterlockedIncrement, FreeLibrary, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, GetModuleHandleW, DisableThreadLibraryCalls, FlushInstructionCache, GetCurrentProcess, DeleteCriticalSection, SetLastError, FlushFileBuffers, CloseHandle, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, lstrlenW, InterlockedDecrement, LoadLibraryW, GetProcAddress, GetCurrentThreadId, GetStringTypeW, GetStringTypeA, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetVersionExA, InterlockedCompareExchange, HeapFree, GetProcessHeap, HeapAlloc, LoadLibraryA, IsProcessorFeaturePresent, VirtualFree, VirtualAlloc, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, LocalFree, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RtlUnwind, HeapReAlloc, GetCommandLineA, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, Sleep, HeapSize, ExitProcess, HeapDestroy, HeapCreate, WriteFile, GetStdHandle, GetModuleFileNameA, GetCPInfo, GetOEMCP, LCMapStringA, WideCharToMultiByte, LCMapStringW, SetHandleCount, GetFileType, GetStartupInfoA
> USER32.dll: GetWindowLongW, ShowWindow, CreateWindowExW, UnregisterClassA, LoadCursorW, GetClassInfoExW, GetClientRect, CharNextW, GetSysColor, CallWindowProcW, RegisterClassExW, SetWindowLongW, DefWindowProcW, DestroyWindow, IsWindow, SendMessageW
> ADVAPI32.dll: RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegDeleteKeyW
> ole32.dll: CoTaskMemFree, CoCreateInstance, StringFromGUID2, CoTaskMemAlloc, CoTaskMemRealloc
> OLEAUT32.dll: -, -, -, -, -, -, -, -, -

( 4 exports )
DllCanUnloadNow, DllGetClassObject, DllRegisterServer, DllUnregisterServer