Wmbot 1737 Ölümsüzlük Ekli Süper İçeri!!!

MD5:   f15418b93ec8dffe0c0ec3eea33c9227
First received:   2009.06.09 18:13:27 UTC
Tarih:   2009.06.11 07:36:27 UTC [>4D]
Sonuçlar:   26/39

[url]http://www.virustotal.com/tr/analisis/901c40b12bf35ab082f7056148923393d6f68c2dba97eb67ed76fdd34c1e55f9-1244705787[/url]

Dosya 8befcb8316a22681b25d0543af58ad00d39cd87b.EXE alýndýðý zaman 2009.06.11 07:36:27 (UTC)
şimdiki Durumu: tamamlandý
Sonuç: 26/39 (66.67%)
 Formatlanmýş
Sonuçlarý yazdýr.  Antivirüs   Versiyon   Son Güncelleştirme   Sonuç
a-squared   4.5.0.18   2009.06.09   -
AhnLab-V3   5.0.0.2   2009.06.09   Win-Trojan/AVKill.23040
AntiVir   7.9.0.183   2009.06.09   SPR/Perflogger.163.15
Antiy-AVL   2.0.3.1   2009.06.09   Monitor/Win32.Perflogger
Authentium   5.1.2.4   2009.06.09   -
Avast   4.8.1335.0   2009.06.08   Win32:Trojan-gen {Other}
AVG   8.5.0.339   2009.06.09   Perflogger.T
BitDefender   7.2   2009.06.09   Trojan.Peflog.CB
CAT-QuickHeal   10.00   2009.06.09   -
ClamAV   0.94.1   2009.06.09   -
Comodo   1284   2009.06.09   -
DrWeb   5.0.0.12182   2009.06.09   Trojan.Peflog.148
eSafe   7.0.17.0   2009.06.09   Spyware.Gen
eTrust-Vet   31.6.6549   2009.06.09   -
F-Prot   4.4.4.56   2009.06.08   -
F-Secure   8.0.14470.0   2009.06.09   Monitor.Win32.Perflogger.163
Fortinet   3.117.0.0   2009.06.09   Keylog/Perflogger
GData   19   2009.06.09   Trojan.Peflog.CB
Ikarus   T3.1.1.59.0   2009.06.09   -
K7AntiVirus   7.10.757   2009.06.08   not-a-virus:Monitor.Win32.Perflogger
McAfee   5641   2009.06.09   W32/Mariofev!enc
McAfee+Artemis   5641   2009.06.09   W32/Mariofev!enc
McAfee-GW-Edition   6.7.6   2009.06.09   Trojan.Agent.23040
Microsoft   1.4701   2009.06.09   MonitoringTool:Win32/PerfectKeylogger
NOD32   4142   2009.06.09   Win32/PerfectKeylogger
Norman      2009.06.09   Malware.GQQU
nProtect   2009.1.8.0   2009.06.09   -
Panda   10.0.0.14   2009.06.09   W32/Xor-encoded.A
PCTools   4.4.2.0   2009.06.09   TrojanSpy..Perfloger.S
Prevx   3.0   2009.06.09   -
Rising   21.33.14.00   2009.06.09   Worm.Agent.mr
Sophos   4.42.0   2009.06.09   Perfect Keylogger
Sunbelt   3.2.1858.2   2009.06.09   Perfect Keylogger
Symantec   1.4.4.12   2009.06.09   Spyware.Perfect
TheHacker   6.3.4.3.342   2009.06.08   -
TrendMicro   8.950.0.1092   2009.06.09   -
VBA32   3.12.10.6   2009.06.08   Monitor.Win32.Perflogger.163
ViRobot   2009.6.9.1775   2009.06.09   -
VirusBuster   4.6.5.0   2009.06.09   TrojanSpy..Perfloger.S
Ýlave Bilgiler
File size: 373270 bytes
MD5  : f15418b93ec8dffe0c0ec3eea33c9227
SHA1  : 901810b00e93878f8f77d065964bd9d0ce282874
SHA256: 901c40b12bf35ab082f7056148923393d6f68c2dba97eb67ed76fdd34c1e55f9
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1000
timedatestamp.....: 0x3CE1015C (Tue May 14 14:21:48 2002)
machinetype.......: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x11000 0x10200 6.43 cd2320e9f81690d9d5dae76de1da8879
.data 0x12000 0x6000 0x800 4.36 dcc7b4f93348ec2d9e5f22d4eded0be9
.idata 0x18000 0x1000 0xE00 4.38 667eeb8f5b5db58fe5dae93c7c1d16c1
.rsrc 0x19000 0x712C 0x7200 4.57 85c820ced37967e6806e691a43c88e7f

( 7 imports )

> advapi32.dll: AdjustTokenPrivileges, LookupPrivilegeValueA, OpenProcessToken, RegCloseKey, RegOpenKeyExA, RegQueryValueExA, SetFileSecurityA, SetFileSecurityW
> comctl32.dll: -
> gdi32.dll: DeleteObject
> kernel32.dll: CloseHandle, CompareStringA, CreateDirectoryA, CreateDirectoryW, CreateFileA, CreateFileW, DeleteFileA, DeleteFileW, DosDateTimeToFileTime, ExitProcess, ExpandEnvironmentStringsA, FileTimeToDosDateTime, FileTimeToLocalFileTime, FileTimeToSystemTime, FindClose, FindFirstFileA, FindFirstFileW, FindNextFileA, FindNextFileW, FindResourceA, FormatMessageA, FreeLibrary, GetCommandLineA, GetCurrentDirectoryA, GetCurrentProcess, GetDateFormatA, GetFileAttributesA, GetFileAttributesW, GetFileType, GetFullPathNameA, GetLastError, GetLocaleInfoA, GetModuleFileNameA, GetModuleHandleA, GetNumberFormatA, GetProcAddress, GetProcessHeap, GetStdHandle, GetTempPathA, GetTickCount, GetTimeFormatA, GetVersionExA, HeapAlloc, HeapFree, HeapReAlloc, LoadLibraryA, LocalFileTimeToFileTime, LocalFree, MoveFileA, MoveFileExA, MultiByteToWideChar, ReadFile, SetCurrentDirectoryA, SetEndOfFile, SetFileAttributesA, SetFileAttributesW, SetFilePointer, SetFileTime, SetLastError, Sleep, WaitForSingleObject, WideCharToMultiByte, WriteFile, lstrcmpiA
> ole32.dll: CoCreateInstance, OleInitialize, OleUninitialize
> shell32.dll: SHBrowseForFolderA, SHFileOperationA, SHGetFileInfoA, SHGetMalloc, SHGetSpecialFolderLocation, ShellExecuteExA, SHGetPathFromIDListA
> user32.dll: CharToOemBuffA, CharUpperA, CreateWindowExA, DestroyIcon, DestroyWindow, DialogBoxParamA, DispatchMessageA, EnableWindow, EndDialog, FindWindowExA, GetClassNameA, GetClientRect, GetDlgItem, GetDlgItemTextA, GetMessageA, GetSysColor, GetSystemMetrics, GetWindow, GetWindowLongA, GetWindowRect, GetWindowTextA, GetWindowTextLengthA, LoadIconA, LoadStringA, MapWindowPoints, MessageBoxA, OemToCharA, OemToCharBuffA, PeekMessageA, PostMessageA, SendDlgItemMessageA, SendMessageA, SetDlgItemTextA, SetFocus, SetMenu, SetWindowLongA, SetWindowPos, SetWindowTextA, ShowWindow, TranslateMessage, wsprintfA, wvsprintfA

( 0 exports )
TrID  : File type identification
WinRAR Self Extracting archive (96.2%)
Win32 Executable Generic (1.5%)
Win32 Dynamic Link Library (generic) (1.4%)
Generic Win/DOS Executable (0.3%)
DOS Executable Generic (0.3%)
ssdeep: -
PEiD  : WinRAR 32-bit SFX Module
packers (Kaspersky): PE-Crypt.XorPE, PE-Crypt.XorPE
packers (F-Prot): RAR
RDS  : NSRL Reference Data Set
-