PC-Heaven.DE

Zitat

Antivirus Version letzte aktualisierung Ergebnis
a-squared 4.5.0.50 2010.03.24 -
AhnLab-V3 5.0.0.2 2010.03.24 -
AntiVir 8.2.1.196 2010.03.24 -
Antiy-AVL 2.0.3.7 2010.03.24 -
Authentium 5.2.0.5 2010.03.24 -
Avast 4.8.1351.0 2010.03.24 -
Avast5 5.0.332.0 2010.03.24 -
AVG 9.0.0.787 2010.03.24 -
BitDefender 7.2 2010.03.24 -
CAT-QuickHeal 10.00 2010.03.24 -
ClamAV 0.96.0.0-git 2010.03.24 -
Comodo 4372 2010.03.24 -
DrWeb 5.0.1.12222 2010.03.24 -
eSafe 7.0.17.0 2010.03.24 -
eTrust-Vet 35.2.7386 2010.03.24 -
F-Prot 4.5.1.85 2010.03.24 -
F-Secure 9.0.15370.0 2010.03.24 -
Fortinet 4.0.14.0 2010.03.24 -
GData 19 2010.03.24 -
Ikarus T3.1.1.80.0 2010.03.24 -
Jiangmin 13.0.900 2010.03.24 -
K7AntiVirus 7.10.1004 2010.03.22 -
Kaspersky 7.0.0.125 2010.03.24 -
McAfee 5930 2010.03.24 -
McAfee+Artemis 5930 2010.03.24 -
McAfee-GW-Edition 6.8.5 2010.03.24 Heuristic.BehavesLike.Win32.Dropper.L
Microsoft 1.5605 2010.03.24 -
NOD32 4972 2010.03.24 -
Norman 6.04.10 2010.03.24 -
nProtect 2009.1.8.0 2010.03.24 -
Panda 10.0.2.2 2010.03.24 -
PCTools 7.0.3.5 2010.03.24 -
Prevx 3.0 2010.03.24 -
Rising 22.40.02.03 2010.03.24 -
Sophos 4.51.0 2010.03.24 -
Sunbelt 6069 2010.03.24 -
Symantec 20091.2.0.41 2010.03.24 -
TheHacker 6.5.2.0.242 2010.03.24 -
TrendMicro 9.120.0.1004 2010.03.24 -
VBA32 3.12.12.2 2010.03.24 -
ViRobot 2010.3.24.2242 2010.03.24 -
VirusBuster 5.0.27.0 2010.03.24 -
weitere Informationen
File size: 64512 bytes
MD5...: 1047516b168618c941b014a3da5ea4f1
SHA1..: c619a1e65fcc83182bbfe19547bc3ecce0d1d796
SHA256: 159ac783df6b8117c109425d5d568dd5aaeb6185b5822402c9cb58770c01ffad
ssdeep: 384:hS7p+tmeTUnH2K24/Epb0uo8un3xjFwOujHnCt1xq3UZU9w1xq3UZU92pl/:
k74mqq/Epb0yajwOMHCdZU9qZU9W/
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x2369
timedatestamp.....: 0x4b4686d7 (Fri Jan 08 01:13:59 2010)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x1bb6 0x1c00 6.31 2b93e5520f457c6755f1f6941c2739fb
.rdata 0x3000 0xcdc 0xe00 4.73 4eeeaed49672ff076701771291fde5be
.data 0x4000 0x430 0x200 1.17 564ac70a5af0c4755466bd1badd2027a
.rsrc 0x5000 0xc4c0 0xc600 4.39 04ae8a745854aa4389c33d5e74031e42
.reloc 0x12000 0x404 0x600 3.45 69cd1721ee0c966ef168f44c92d3056f

( 4 imports )
> KERNEL32.dll: CloseHandle, GetLastError, OpenMutexW, ReleaseMutex, WaitForSingleObject, MoveFileExW, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, QueryPerformanceCounter, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetStartupInfoW, InterlockedCompareExchange, Sleep, InterlockedExchange, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, GetTickCount
> WINSPOOL.DRV: -
> SHELL32.dll: ShellExecuteW
> MSVCR90.dll: _adjust_fdiv, __setusermatherr, __p__fmode, _encode_pointer, __set_app_type, _unlock, __dllonexit, _lock, _onexit, _decode_pointer, _except_handler4_common, _crt_debugger_hook, _terminate@@YAXXZ, __type_info_dtor_internal_method@type_info@@QAEXXZ, _invoke_watson, _controlfp_s, _configthreadlocale, _initterm_e, _initterm, _wcmdln, exit, _XcptFilter, _exit, _cexit, __wgetmainargs, _amsg_exit, memset, free, memcpy_s, iswspace, wcsstr, wcscspn, wcsspn, memmove_s, __3@YAXPAX@Z, _CxxThrowException, __p__commode, __CxxFrameHandler3

( 0 exports )
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher....: Spigot, Inc.
copyright....: Copyright (c) 2005-2010 Spigot, Inc.
product......: Widgi Toolbar
description..: WidgiHelper Application
original name: WidgiHelper.exe
internal name: WidgiHelper.exe
file version.: 1, 1, 2, 16
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

Zitat

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:55:55, on 25.03.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
C:\Programme\Ahead\InCD\InCD.exe
C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLDial.exe
C:\Programme\QuickTime\qttask.exe
C:\Programme\Gemeinsame Dateien\AOL\1252794521\ee\AOLSoftware.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE
C:\Programme\Logitech\Logitech WebCam Software\LWS.exe
C:\Programme\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\Programme\Sony\Content Transfer\ContentTransferWMDetector.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Messenger\MSMSGS.EXE
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\Programme\Creative\Shared Files\Media Sniffer\MtdAcq.EXE
C:\Programme\Logitech\Logitech Vid\Vid.exe
C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programme\DNA\btdna.exe
C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Programme\AOL 9.0\aoltray.exe
C:\Programme\Gemeinsame Dateien\Logishrd\LQCVFX\COCIManager.exe
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\PROGRA~1\GEMEIN~1\aol\ACS\AOLacsd.exe