2 BOTS in einem von mir

Antivirus Version letzte aktualisierung Ergebnis 
a-squared 4.0.0.101 2009.05.02 - 
AhnLab-V3 5.0.0.2 2009.05.01 - 
AntiVir 7.9.0.160 2009.05.02 - 
Antiy-AVL 2.0.3.1 2009.04.30 - 
Authentium 5.1.2.4 2009.05.01 - 
Avast 4.8.1335.0 2009.05.01 - 
AVG 8.5.0.327 2009.05.01 - 
BitDefender 7.2 2009.05.02 - 
CAT-QuickHeal 10.00 2009.05.02 - 
ClamAV 0.94.1 2009.05.02 - 
Comodo 1147 2009.05.02 - 
DrWeb 4.44.0.09170 2009.05.02 - 
[B][COLOR="Red"]eSafe 7.0.17.0 2009.04.30 Suspicious File [/COLOR][/B]
eTrust-Vet 31.6.6487 2009.05.02 - 
F-Prot 4.4.4.56 2009.05.01 - 
F-Secure 8.0.14470.0 2009.05.02 - 
Fortinet 3.117.0.0 2009.05.02 - 
GData 19 2009.05.02 - 
Ikarus T3.1.1.49.0 2009.05.02 - 
K7AntiVirus 7.10.722 2009.05.02 - 
Kaspersky 7.0.0.125 2009.05.02 - 
McAfee 5602 2009.05.01 - 
McAfee+Artemis 5602 2009.05.01 - 
McAfee-GW-Edition 6.7.6 2009.05.02 - 
Microsoft 1.4602 2009.05.02 - 
NOD32 4049 2009.05.01 - 
Norman 6.01.05 2009.04.30 - 
nProtect 2009.1.8.0 2009.05.02 - 
Panda 10.0.0.14 2009.05.02 - 
PCTools 4.4.2.0 2009.05.02 - 
Prevx1 3.0 2009.05.02 - 
Rising 21.27.41.00 2009.05.01 - 
Sophos 4.41.0 2009.05.02 - 
Sunbelt 3.2.1858.2 2009.05.02 - 
Symantec 1.4.4.12 2009.05.02 - 
TheHacker 6.3.4.1.317 2009.05.02 - 
TrendMicro 8.950.0.1092 2009.05.01 - 
VBA32 3.12.10.4 2009.05.02 - 
ViRobot 2009.5.1.1717 2009.05.01 - 
VirusBuster 4.6.5.0 2009.05.01 - 
weitere Informationen 
File size: 2739847 bytes 
MD5...: fc569f42ab7765f0ada65b9f6ace445c 
SHA1..: 0e51f9da8ab8c2b0ec1eeb169bd4d934fe94f95b 
SHA256: 644379ee0f9ad86ddcdfee3e9dc0f44dcca28aade0332b3feec682137c200b68 
SHA512: 07b3202765c4140ae2c9e38d688d6abb2536743d7d4f3e997250ad821dc9002a
7ee39f326311fa6ca083618e2f851b1190647e2a2e93fad884632f06bb7fa683 
ssdeep: 49152:StARhECHubD24gUnDaqNJLuFlgdXb0ERMibwiyad7xR:SGRED24rnDnNJL
uFudXb0bxG
 
PEiD..: UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser 
TrID..: File type identification
UPX compressed Win32 Executable (43.8%)
Win32 EXE Yoda's Crypter (38.1%)
Win32 Executable Generic (12.2%)
Generic Win/DOS Executable (2.8%)
DOS Executable Generic (2.8%) 
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x3005d0
timedatestamp.....: 0x4951fa17 (Wed Dec 24 09:00:07 2008)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0x1000 0x2c0000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0x2c1000 0x40000 0x3f800 7.93 8464a4f6a9b2553dfca2ad7b00ace13a
.rsrc 0x301000 0x25a000 0x259200 6.96 bb60b64bce4f6e8ee151118c2f7c9e64

( 16 imports ) 
> KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
> ADVAPI32.dll: AddAce
> COMCTL32.dll: ImageList_Remove
> COMDLG32.dll: GetSaveFileNameW
> GDI32.dll: BitBlt
> MPR.dll: WNetGetConnectionW
> ole32.dll: CoInitialize
> OLEAUT32.dll: -
> PSAPI.DLL: EnumProcesses
> SHELL32.dll: DragFinish
> USER32.dll: GetDC
> USERENV.dll: LoadUserProfileW
> VERSION.dll: VerQueryValueW
> WININET.dll: FtpOpenFileW
> WINMM.dll: timeGetTime
> WSOCK32.dll: -

( 0 exports ) 
 
PDFiD.: - 
RDS...: NSRL Reference Data Set
- 
[B][COLOR="Red"]packers (Kaspersky): PE_Patch.UPX, UPX 
packers (F-Prot): UPX [/COLOR][/B]