hxxp://hot-adulttube08.com/freemovie/486/1/
--> hxxp://hotcodecstars.com/download/502/0/0/
--> hxxp://hotcodecstars.com/soft/akfuokfhdlgf/502cfed0fb0/MediaTubeCodec.exe

av detection: 1/32 (3.12%)

AhnLab-V3 2008.4.10.2 2008.04.10 -
AntiVir 7.6.0.81 2008.04.10 -
Authentium 4.93.8 2008.04.10 -
Avast 4.8.1169.0 2008.04.10 -
AVG 7.5.0.516 2008.04.09 -
BitDefender 7.2 2008.04.10 -
CAT-QuickHeal 9.50 2008.04.10 -
ClamAV 0.92.1 2008.04.10 -
DrWeb 4.44.0.09170 2008.04.10 -
eSafe 7.0.15.0 2008.04.09 -
eTrust-Vet 31.3.5687 2008.04.10 -
Ewido 4.0 2008.04.10 -
F-Prot 4.4.2.54 2008.04.08 -
F-Secure 6.70.13260.0 2008.04.10 -
FileAdvisor 1 2008.04.10 -
Fortinet 3.14.0.0 2008.04.10 -
Ikarus T3.1.1.26.0 2008.04.10 Win32.SuspectCrc
Kaspersky 7.0.0.125 2008.04.10 -
McAfee 5270 2008.04.09 -
Microsoft 1.3408 2008.04.10 -
NOD32v2 3015 2008.04.10 -
Norman 5.80.02 2008.04.09 -
Panda 9.0.0.4 2008.04.10 -
Prevx1 V2 2008.04.10 -
Rising 20.39.31.00 2008.04.10 -
Sophos 4.28.0 2008.04.10 -
Sunbelt 3.0.1032.0 2008.04.08 -
Symantec 10 2008.04.10 -
TheHacker 6.2.92.271 2008.04.10 -
VBA32 3.12.6.4 2008.04.06 -
VirusBuster 4.3.26:9 2008.04.09 -
Webwasher-Gateway 6.6.2 2008.04.10 -

weitere Informationen
Tamano archivo: 115200 bytes
MD5...: e9cc8c20b0e682c77b97e6787de16e5d
SHA1..: 8be674dec4fcf14ae853a5c20a9288bff3e0520a
SHA256: ef854d21cbf297ee267f22049b773ffeb4c1ff1a3e55227cc2a260754699d644
SHA512: 1a3b9b2d16a4404b29675ab1132ad542840058fd356e0f145afe5d0c1d9e1653
de28314cd24406b85f09a9ec874c4339967d9e7acb327065448096c5734502c7
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1012475
timedatestamp.....: 0x3b7d8410 (Fri Aug 17 20:52:32 2001)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x126b0 0x12800 6.19 28f821ddc492e7c89b132aeb7e8947e7
.data 0x14000 0x101c 0xa00 3.59 8e8381392a4f163121ab9e1cfbe54486
.rsrc 0x16000 0x8a70 0x8c00 5.23 f6f507b4f5cbf01cc2684b6c1d32db17

( 6 imports )
> SHELL32.dll: ShellAboutW
> msvcrt.dll: __CxxFrameHandler, _CxxThrowException, wcstoul, toupper, wcschr, memmove, wcslen, _wcsrev, _c_exit, _exit, _XcptFilter, _cexit, exit, _acmdln, __getmainargs, _initterm, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, __3@YAXPAX@Z, __1type_info@@UAE@XZ, _controlfp, _except_handler3, _terminate@@YAXXZ
> ADVAPI32.dll: RegOpenKeyExA, RegQueryValueExA, RegCloseKey
> KERNEL32.dll: GetModuleHandleA, LoadLibraryA, GetProcAddress, GlobalCompact, GlobalAlloc, GlobalFree, GlobalReAlloc, lstrcmpW, Sleep, WriteProfileStringW, GetStartupInfoA, GlobalSize, GlobalUnlock, CreateEventW, CreateThread, ResetEvent, lstrcpynW, SetEvent, WaitForSingleObject, CloseHandle, lstrcatW, lstrlenW, LocalReAlloc, LocalFree, LocalAlloc, GetProfileStringW, GlobalLock, GetCommandLineW, lstrcpyW, GetProfileIntW
> GDI32.dll: SetBkColor, SetTextColor, SetBkMode
> USER32.dll: GetMenu, SetDlgItemInt, GetWindowTextW, CheckDlgButton, HideCaret, CallWindowProcW, DrawTextW, WinHelpW, PostQuitMessage, GetDlgCtrlID, ScreenToClient, ChildWindowFromPoint, DefWindowProcW, IsClipboardFormatAvailable, EnableMenuItem, TrackPopupMenuEx, GetDesktopWindow, OpenClipboard, GetClipboardData, CharNextA, CloseClipboard, GetSysColor, DialogBoxParamW, EndDialog, MessageBeep, GetSubMenu, CheckRadioButton, SetWindowTextW, SetFocus, SetCursor, CharNextW, RegisterClassExW, GetSysColorBrush, LoadCursorW, LoadIconW, InvalidateRect, UpdateWindow, ShowWindow, SendMessageW, SetDlgItemTextW, CheckMenuItem, CheckMenuRadioItem, SetWindowPos, OffsetRect, MapWindowPoints, GetClientRect, EnableWindow, LoadMenuW, SetWindowLongW, GetWindowLongW, CreateDialogParamW, GetDlgItem, DestroyMenu, DestroyWindow, SetMenu, GetWindowRect, SystemParametersInfoW, DispatchMessageW, TranslateMessage, TranslateAcceleratorW, IsChild, IsDialogMessageW, GetMessageW, LoadAcceleratorsW, CreateWindowExW, MessageBoxW, LoadStringW, SetProcessDefaultLayout, GetProcessDefaultLayout

( 0 exports )

another website requiring this 'codec':

hxxp://hot-softportal.com

Malware is now downloaded from