warnung im internet explorer? |
||
---|---|---|
#0
| ||
12.10.2008, 00:34
...neu hier
Beiträge: 3 |
||
|
||
12.10.2008, 00:40
Ehrenmitglied
Beiträge: 29434 |
#17
Hallo crack0r
führe wenigstens das Combofix-Script aus, so wird die Registry gereinigt... dazu findet man fast nichts im net.... Hast du eine Ahnung, was das ist ??? aon\Onlinefestplatte\OnlineFestplatte.exe « mache einen Scan mit dr.web und berichte, ob was gefunden wurde http://virus-protect.org/cureit.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
||
12.10.2008, 12:04
...neu hier
Beiträge: 3 |
#18
Nein, ich weiß nicht was dass ist, es wurde 1 Virus gefunden und "Verschoben" (wohin?), der Ordner in dem er war, war nicht wichtig und ich hab ihn gelöscht, vielen dank für deine Hilfe ^^
|
|
|
||
virustotal Ergebnisse:
Antivirus Version letzte aktualisierung Ergebnis
AhnLab-V3 2008.10.10.1 2008.10.10 -
AntiVir 7.8.1.34 2008.10.11 -
Authentium 5.1.0.4 2008.10.11 -
Avast 4.8.1248.0 2008.10.11 -
AVG 8.0.0.161 2008.10.11 -
BitDefender 7.2 2008.10.12 -
CAT-QuickHeal 9.50 2008.10.11 -
ClamAV 0.93.1 2008.10.11 -
DrWeb 4.44.0.09170 2008.10.11 -
eSafe 7.0.17.0 2008.10.08 -
eTrust-Vet 31.6.6141 2008.10.10 -
Ewido 4.0 2008.10.11 -
F-Prot 4.4.4.56 2008.10.11 -
F-Secure 8.0.14332.0 2008.10.11 -
Fortinet 3.113.0.0 2008.10.11 -
GData 19 2008.10.11 -
Ikarus T3.1.1.34.0 2008.10.11 -
K7AntiVirus 7.10.491 2008.10.11 -
Kaspersky 7.0.0.125 2008.10.12 -
McAfee 5403 2008.10.11 -
Microsoft 1.4005 2008.10.11 -
NOD32 3515 2008.10.11 -
Norman 5.80.02 2008.10.10 -
Panda 9.0.0.4 2008.10.11 Suspicious file
PCTools 4.4.2.0 2008.10.11 -
Prevx1 V2 2008.10.12 -
Rising 20.65.42.00 2008.10.10 -
SecureWeb-Gateway 6.7.6 2008.10.11 -
Sophos 4.34.0 2008.10.11 -
Sunbelt 3.1.1715.1 2008.10.11 -
Symantec 10 2008.10.11 -
TheHacker 6.3.1.0.108 2008.10.11 -
TrendMicro 8.700.0.1004 2008.10.10 -
VBA32 3.12.8.6 2008.10.10 -
ViRobot 2008.10.10.1416 2008.10.10 -
VirusBuster 4.5.11.0 2008.10.11 -
weitere Informationen
File size: 253976 bytes
MD5...: 834b66042cf4163b6278dc1ac4885903
SHA1..: a47f9b30616284bd0a22d39d84672c910ea1f994
SHA256: 28a1bc420b7f46d0736c5c308ec4ed5a68544c1fc76bc20c8c6ecadc97b4571c
SHA512: 1e552968eee58e9f81c2ebef7dde75b4109c45f085f1f48ffc3bc198d73b1af7
c1157b45590ae48bc6562f8a1909c6e2f07e85ad6e6136b4ae37154f06d3e887
PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (59.5%)
Windows Screen Saver (20.6%)
Win32 Executable Generic (13.4%)
Generic Win/DOS Executable (3.1%)
DOS Executable Generic (3.1%)
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x40bea6
timedatestamp.....: 0x4799e2c6 (Fri Jan 25 13:23:18 2008)
machinetype.......: 0x14c (I386)
( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x12de8 0x12e00 6.51 34a3515a25d5183fe5c9a9e2b521cb0e
.rdata 0x14000 0x6720 0x6800 5.31 9d1a2fa794a41c44b739c5022eab2160
.data 0x1b000 0x2724 0x1000 5.43 328f783051ed70eba310a1f2bb7c1b78
.rsrc 0x1e000 0x21ea8 0x22000 4.76 594b6d4ee3bce69fd64ada2657b35f24
( 9 imports )
> SHFOLDER.dll: SHGetFolderPathA
> COMCTL32.dll: -
> KERNEL32.dll: GetFileSize, CreateFileA, ReadFile, LoadLibraryA, CreateDirectoryA, VirtualProtect, GetLocaleInfoA, SetEndOfFile, VirtualQuery, InterlockedExchange, SetEnvironmentVariableA, CompareStringW, CompareStringA, GetCPInfo, GetOEMCP, GetACP, GetStringTypeW, MultiByteToWideChar, GetStringTypeA, IsBadCodePtr, IsBadReadPtr, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, SetFilePointer, FlushFileBuffers, SetStdHandle, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, UnhandledExceptionFilter, GetModuleFileNameA, HeapSize, WideCharToMultiByte, SetUnhandledExceptionFilter, IsBadWritePtr, HeapReAlloc, VirtualAlloc, VirtualFree, WriteFile, TerminateProcess, ExitProcess, GetFileType, GetStdHandle, SetHandleCount, GetCommandLineA, GetStartupInfoA, RaiseException, RtlUnwind, GetProcessHeap, DeleteFileA, MoveFileA, GetVersionExA, GetProcAddress, GetSystemInfo, lstrcmpiA, GetModuleHandleA, HeapAlloc, HeapFree, HeapDestroy, HeapCreate, Sleep, LCMapStringW, CreateMutexA, GetLogicalDriveStringsA, GetDriveTypeA, ReleaseMutex, GetFileAttributesA, GetCurrentThread, GetCurrentProcess, CloseHandle, GetLastError, LCMapStringA, GetCurrentThreadId
> USER32.dll: EndDialog, EnableWindow, GetDlgItemTextA, IsDlgButtonChecked, SetWindowTextA, LoadImageA, CheckDlgButton, MoveWindow, GetWindowTextLengthA, DestroyIcon, MessageBoxA, ShowWindow, GetDlgItem, SetDlgItemTextA, RemovePropA, SetWindowLongA, CallWindowProcA, GetPropA, SetCursor, LoadCursorA, CreateDialogParamA, SendDlgItemMessageA, DialogBoxParamA, SendMessageA, CreateWindowExA, UpdateWindow, GetMessageA, TranslateAcceleratorA, TranslateMessage, DispatchMessageA, FindWindowA, LoadIconA, RegisterClassA, DefWindowProcA, SetFocus, SendMessageTimeoutA, PostMessageA, PostQuitMessage, LoadMenuA, GetSubMenu, DeleteMenu, SetMenuDefaultItem, GetCursorPos, SetForegroundWindow, TrackPopupMenu, DestroyMenu, UnregisterClassA, GetParent, SetPropA, GetWindowLongA, GetCapture, InvalidateRect, SetCapture, GetWindowRect, ClientToScreen, PtInRect, ReleaseCapture
> GDI32.dll: CreateSolidBrush, GetStockObject, DeleteObject, CreateFontIndirectA, SetTextColor, GetObjectA
> ADVAPI32.dll: RegCloseKey, RegQueryValueExA, OpenThreadToken, OpenProcessToken, GetTokenInformation, AllocateAndInitializeSid, EqualSid, FreeSid, RegOpenKeyExA, RegDeleteValueA, RegQueryInfoKeyA, RegEnumKeyA, RegDeleteKeyA, RegSetValueExA, RegCreateKeyExA
> SHELL32.dll: ShellExecuteA, Shell_NotifyIconA, SHChangeNotify
> WININET.dll: HttpSendRequestExA, InternetWriteFile, HttpEndRequestA, HttpOpenRequestA, HttpAddRequestHeadersA, InternetSetCookieA, HttpSendRequestA, InternetOpenA, InternetConnectA, InternetAttemptConnect, InternetReadFile, InternetCloseHandle, InternetGetConnectedState
> MPR.dll: WNetAddConnection2A, WNetGetConnectionA, WNetCancelConnection2A
( 0 exports )