Oradaki "Application data" açıklaması base64 algoritması ile encode edilmiş. Çözülmüş hali burada:
Version: WlFBXUJQVFZaRE5DRkNVJClSOyQ7ViAsAAdVPyE8IzBzZHt+dzMkIjskIzZFcnR9eGp/Rzc7R3J4b3FDMQ==
ImageBase: 0AAA0000
Eip: 49CCEB0
Eax: 7030000
Ecx: 9D54A24
Edx: 0
Ebx: 0
Esi: 9D5496C
Edi: 6FB0000
Ebp: 534E64C
Esp: 534E520
-1
Code = [204]
- 0
- 204
- 227
- 0
- []
> C:WINDOWSExplorer.EXE
> C:WINDOWSsystem32
tdll.dll
> C:WINDOWSsystem32kernel32.dll
> C:WINDOWSsystem32ADVAPI32.dll
> C:WINDOWSsystem32RPCRT4.dll
> C:WINDOWSsystem32Secur32.dll
> C:WINDOWSsystem32BROWSEUI.dll
> C:WINDOWSsystem32GDI32.dll
> C:WINDOWSsystem32USER32.dll
> C:WINDOWSsystem32msvcrt.dll
> C:WINDOWSsystem32ole32.dll
> C:WINDOWSsystem32SHLWAPI.dll
> C:WINDOWSsystem32OLEAUT32.dll
> C:WINDOWSsystem32SHDOCVW.dll
> C:WINDOWSsystem32CRYPT32.dll
> C:WINDOWSsystem32MSASN1.dll
> C:WINDOWSsystem32CRYPTUI.dll
> C:WINDOWSsystem32WINTRUST.dll
> C:WINDOWSsystem32IMAGEHLP.dll
> C:WINDOWSsystem32NETAPI32.dll
> C:WINDOWSsystem32WININET.dll
> C:WINDOWSsystem32WLDAP32.dll
> C:WINDOWSsystem32VERSION.dll
> C:WINDOWSsystem32SHELL32.dll
> C:WINDOWSsystem32UxTheme.dll
> C:WINDOWSsystem32ShimEng.dll
> C:WINDOWSAppPatchAcGenral.DLL
> C:WINDOWSsystem32WINMM.dll
> C:WINDOWSsystem32MSACM32.dll
> C:WINDOWSsystem32USERENV.dll
> C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03comctl32.dll
> C:WINDOWSsystem32comctl32.dll
> C:WINDOWSsystem32appHelp.dll
> C:WINDOWSsystem32CLBCATQ.DLL
> C:WINDOWSsystem32COMRes.dll
> C:WINDOWSSystem32cscui.dll
> C:WINDOWSSystem32CSCDLL.dll
> C:WINDOWSSystem32 hemeui.dll
> C:WINDOWSSystem32MSIMG32.dll
> C:WINDOWSsystem32xpsp2res.dll
> C:WINDOWSSystem32actxprxy.dll
> C:WINDOWSsystem32MLANG.dll
> C:WINDOWSsystem32urlmon.dll
> C:WINDOWSsystem32LINKINFO.dll
> C:WINDOWSsystem32
tshrui.dll
> C:WINDOWSsystem32ATL.DLL
> C:WINDOWSsystem32
saenh.dll
> C:WINDOWSsystem32msi.dll
> C:WINDOWSsystem32WINSTA.dll
> C:WINDOWSSystem32webcheck.dll
> C:WINDOWSSystem32WSOCK32.dll
> C:WINDOWSSystem32WS2_32.dll
> C:WINDOWSSystem32WS2HELP.dll
> C:WINDOWSSystem32stobject.dll
> C:WINDOWSSystem32BatMeter.dll
> C:WINDOWSSystem32POWRPROF.dll
> C:WINDOWSSystem32SETUPAPI.dll
> C:WINDOWSSystem32WTSAPI32.dll
> C:WINDOWSsystem32wdmaud.drv
> C:WINDOWSsystem32msacm32.drv
> C:WINDOWSsystem32midimap.dll
> C:WINDOWSsystem32NETSHELL.dll
> C:WINDOWSsystem32
tutils.dll
> C:WINDOWSsystem32credui.dll
> C:WINDOWSsystem32iphlpapi.dll
> C:WINDOWSsystem32SXS.DLL
> C:Program FilesCommon FilesAdobeAcrobatActiveXPDFShell.dll
Adobe Systems, Inc.
PDF Shell Extension
8.1.0.0
PDFShell
Copyright 2000-2007 Adobe Systems, Inc.
PDFShell.dll
8.1.0.0
Adobe PDF Shell Extension
> C:WINDOWSWinSxSx86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fbMSVCR80.dll
> C:WINDOWSsystem32MPR.dll
> C:WINDOWSSystem32drprov.dll
> C:WINDOWSSystem32
tlanman.dll
> C:WINDOWSSystem32NETUI0.dll
> C:WINDOWSSystem32NETUI1.dll
> C:WINDOWSSystem32NETRAP.dll
> C:WINDOWSSystem32SAMLIB.dll
> C:WINDOWSSystem32davclnt.dll
> C:WINDOWSsystem32shdoclc.dll
> C:WINDOWSsystem32
vcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
6.14.10.9131
NvCpl
(C) NVIDIA Corporation. All rights reserved.
NVCPL.DLL
6.14.10.9131
NVIDIA Compatible Windows 2000 Display driver, Version 91.31
> C:WINDOWSsystem32comdlg32.dll
> C:WINDOWSsystem32WINSPOOL.DRV
> C:WINDOWSsystem32OLEACC.dll
> C:WINDOWSsystem32MSVCP60.dll
> C:WINDOWSsystem32NVRSTR.DLL
NVIDIA Corporation
NVIDIA Turkish language resource library
6.14.10.9131
NvRsTr
(C) NVIDIA Corporation. All rights reserved.
NvRsTr.dll
6.14.10.9131
NVIDIA Compatible Windows 2000 Display driver, Version 91.31
> C:WINDOWSsystem32NTMARTA.DLL
> C:WINDOWSsystem32
vshell.dll
6.14.10.11038
6.14.10.11038
> C:WINDOWSsystem32rowselc.dll
> C:WINDOWSsystem32MSGINA.dll
> C:WINDOWSsystem32ODBC32.dll
> C:WINDOWSsystem32odbcint.dll
> C:WINDOWSsystem32DUSER.dll
> C:WINDOWSsystem32l3codeca.acm
Fraunhofer Institut Integrierte Schaltungen IIS
MPEG Layer-3 Audio Codec for MSACM
1, 9, 0, 0305
l3codec.acm
Copyright © 1996-1999 Fraunhofer Institut Integrierte Schaltungen IIS
l3codec.acm
1, 0, 0, 0
MPEG Layer-3 Audio Codec for MSACM
> C:WINDOWSWinSxSx86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82gdiplus.dll
> C:WINDOWSsystem32mscms.dll
> C:WINDOWSsystem32PortableDeviceApi.dll
> C:WINDOWSSystem32sti.dll
> C:WINDOWSSystem32CFGMGR32.dll
> C:PROGRA~1WINZIPWZSHLSTB.DLL
StringFileInfo: U.S. English
WinZip Computing, Inc.
WinZip Shell Extension DLL
4.1 (32-bit)
WZSTUBSE.DLL
Copyright (c) WinZip Computing, Inc. 1991-2001 - All Rights Reserved
WinZip is a registered trademark of WinZip Computing, Inc
WZSTUBSE.DLL
8.1 (4278)
WinZip
> C:Program FilesUnlockerUnlockerCOM.dll
> C:Program FilesWinRAR
arext.dll
> C:Program FilesEset
odshex.dll
> C:Program FilesGlobalSCAPECuteFTP 8 ProfessionalCuteShell.dll
GlobalSCAPE Texas, LP.
CuteFTP Shell Integration Module
50, 6, 3, 2
CuteShell
(c) 1999-2006 GlobalSCAPE Texas, LP. All rights reserved.
CuteShell.DLL
8, 0, 0, 0
Shell Integration DLL
> C:WINDOWSsystem32syncui.dll
> C:WINDOWSsystem32RASAPI32.DLL
> C:WINDOWSsystem32
asman.dll
> C:WINDOWSsystem32TAPI32.dll
> C:WINDOWSsystem32msv1_0.dll
> C:WINDOWSsystem32sensapi.dll
> C:WINDOWSsystem32imon.dll
Eset
NOD32 IMON - Internet scanning support
2, 70, 31
NOD32 IMON
Copyright (c) 1992-2005 Eset
NOD, NOD32, AMON, ESET are registered trademarks of Eset
IMON.DLL
2, 70, 31
NOD32 Antivirus System
> C:WINDOWSsystem32mswsock.dll
> C:WINDOWSsystem32hnetcfg.dll
> C:WINDOWSSystem32wshtcpip.dll
> C:WINDOWSsystem32
asadhlp.dll
> C:WINDOWSsystem32DNSAPI.dll
> C:WINDOWSSystem32winrnr.dll
> C:WINDOWSsystem32ddraw.dll
> C:WINDOWSsystem32DCIMAN32.dll
> C:Program FilesCommon FilesAheadLibAdvrCntr.dll
Ahead Software AG
AdvrCntr Module
1,2,12, 2314
AdvrCntr
Copyright (c) 1995-2003 Ahead Software and its licensors
AdvrCntr.DLL
1,2,12, 2314
AdvrCntr Module
> C:WINDOWSsystem32ac3acm.acm
http://fcchandler.home.comcast.net/
fccHandler
AC-3 ACM Codec
1, 31, 0, 0
AC3ACM
Copyright © 2005 by fccHandler
AC3ACM.acm
1, 31, 0, 0
AC-3 ACM Codec
> C:WINDOWSSystem32mydocs.dll
> C:WINDOWSSystem32sendmail.dll
> C:WINDOWSSystem32zipfldr.dll
> C:Program FilesMSN Messengerfsshext.8.1.0178.00.dll
> C:WINDOWSsystem32wpdshext.dll
> C:WINDOWSSystem32shgina.dll
> C:WINDOWSsystem32Audiodev.dll
> C:WINDOWSsystem32WMVCore.DLL
> C:WINDOWSsystem32WMASF.DLL
> C:WINDOWSsystem32wiashext.dll
> C:WINDOWSdropcpyr.dll
> C:WINDOWSsystem32DSOUND.dll
> C:WINDOWSsystem32cryptnet.dll
> C:WINDOWSsystem32WINHTTP.dll
> C:DOCUME~1MEZARC~1LOCALS~1TempRar$EX00.953Flashgetfgmgr.dll
www.flashget.com
www.flashget.com
Flashget BHO Manager
1, 8, 4, 1007
Flashget BHO Manager
Copyright 2006
1, 8, 4, 1007
> C:WINDOWSsystem32wmpshell.dll
> C:WINDOWSsystem32WZCSAPI.DLL
> C:WINDOWSSystem32jscript.dll
> C:WINDOWSsystem32msdmo.dll
6.5.2600.2180
6.5.2600.2180
> C:WINDOWSsystem32MFPlat.DLL
> C:WINDOWSSystem32shimgvw.dll
> C:WINDOWSsystem32ImgUtil.dll
> C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
Adobe Systems Incorporated
Adobe PDF Helper for Internet Explorer
8.0.0.2006102200
AcroIEHelper
Copyright 1984-2006 Adobe Systems Incorporated and its licensors. All rights reserved.
AcroIEHelper.DLL
8.0.0.2006102200
AcroIEHelper Library
> C:Program FilesMicrosoft OfficeOFFICE11msohev.dll
> C:WINDOWSSystem32shmedia.dll
> C:WINDOWSSystem32MSVFW32.dll
> C:WINDOWSSystem32AVIFIL32.dll
> C:WINDOWSSystem32qedit.dll
> C:WINDOWSsystem32quartz.dll
> C:WINDOWSSystem32devenum.dll
> C:Program FilesK-Lite Codec Packfiltersvsfilter.dll
Visit http://gabest.org/ for updates.
Gabest
VobSub & TextSub filter for DirectShow/VirtualDub/Avisynth
1, 0, 1, 3
VSFilter
Copyright (C) 2001-2006 Gabest
VSFilter.DLL
1, 0, 1, 3
VSFilter
> C:WINDOWSsystem32DivXMedia.ax
DivXNetworks
DivX® Media Filter
0.0.0.028
DivXMedia
Copyright © DivXNetworks, 2001-2005
DivXMedia.ax
0.0.0.028
DivX® Media Filter
> C:PROGRA~1TOTALV~1RealMediaSplitter.ax
http://gabest.org/
Gabest
RealMedia Splitter
1, 0, 1, 1
RealMedia Splitter
Copyright (C) 2003-2005
RealMediaSplitter.ax
1, 0, 1, 1
RealMedia Splitter
> C:WINDOWSsystem32divxdec.ax
DivX, Inc.
DivX® Decoder Filter
6.7.0.1
DivXdec.ax
Copyright © DivX, Inc., 2001-2007
DivXdec.ax
6.7.0.1
DivX® Decoder Filter
> C:Program FilesCommon FilesAheadDSFilterNeVideo.ax
Nero AG
MPEG-1/2/4 & AVC video decoder w/ DxVA
3,2,0,20c
Copyright (c) 2005 Nero AG and its licensors
NeVideo.ax
2, 0, 2, 46
Nero Suite
Bunların ne anlama geldiğini bilmiyorum ama birçok dinamik kütüphane hasar görmüş gibi geliyor bana.
Let`s make this world a better place to live !
|
Del.icio.us
Digg
Facebook
Furl
Google
Blink
Simpy
Spurl
Y! MyWeb