Virus/rapport hijackthis

Salut , voici les rapports que tu ma demander :

query.dll:

Antivirus Version Dernière mise à jour Résultat
a-squared 4.5.0.41 2009.10.20 -
AhnLab-V3 5.0.0.2 2009.10.20 -
AntiVir 7.9.1.35 2009.10.20 -
Antiy-AVL 2.0.3.7 2009.10.21 -
Authentium 5.1.2.4 2009.10.21 -
Avast 4.8.1351.0 2009.10.20 -
AVG 8.5.0.420 2009.10.20 -
BitDefender 7.2 2009.10.21 -
CAT-QuickHeal 10.00 2009.10.20 -
ClamAV 0.94.1 2009.10.21 -
Comodo 2675 2009.10.21 -
DrWeb 5.0.0.12182 2009.10.21 -
eSafe 7.0.17.0 2009.10.19 -
eTrust-Vet 35.1.7075 2009.10.19 -
F-Prot 4.5.1.85 2009.10.20 -
F-Secure 9.0.15300.0 2009.10.20 -
Fortinet 3.120.0.0 2009.10.21 -
GData 19 2009.10.21 -
Ikarus T3.1.1.72.0 2009.10.21 -
Jiangmin 11.0.800 2009.10.20 -
K7AntiVirus 7.10.875 2009.10.20 -
Kaspersky 7.0.0.125 2009.10.21 -
McAfee 5777 2009.10.20 -
McAfee+Artemis 5777 2009.10.20 -
McAfee-GW-Edition 6.8.5 2009.10.21 -
Microsoft 1.5101 2009.10.20 -
NOD32 4527 2009.10.20 -
Norman 6.03.02 2009.10.20 -
nProtect 2009.1.8.0 2009.10.20 -
Panda 10.0.2.2 2009.10.20 -
PCTools 4.4.2.0 2009.10.19 -
Prevx 3.0 2009.10.21 -
Rising 21.52.20.00 2009.10.21 -
Sophos 4.46.0 2009.10.21 -
Sunbelt 3.2.1858.2 2009.10.20 -
Symantec 1.4.4.12 2009.10.21 -
TheHacker 6.5.0.2.049 2009.10.20 -
TrendMicro 8.950.0.1094 2009.10.21 -
VBA32 3.12.10.11 2009.10.20 -
ViRobot 2009.10.21.1997 2009.10.21 -
VirusBuster 4.6.5.0 2009.10.20 -
Information additionnelle
File size: 1440768 bytes
MD5...: 93249c0ccee363056b06d8e7094bee4d
SHA1..: 38bc59008991d82728ec445c033294388af43a79
SHA256: 1e3beab65ce3bef481fe255dd7436aec4968a6f379d89114f8c1f5972a44ab76
ssdeep: 24576:8NYLh980E3yiF2XjYmt1T/reWHWaWSp9A9cTpSeYqqe2RrB29+S:8CLhXH
PjYE1T/rYaWSo9cdSe9qea09+S

PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0xf3799
timedatestamp.....: 0x4a60a3f3 (Fri Jul 17 16:16:51 2009)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x13f0ff 0x13f200 6.49 0e5a2a8436fffae8a5a897d8a8454192
.orpc 0x141000 0x33 0x200 0.84 ac63cc8d495b3762bb7a9a0cb6ac8222
.data 0x142000 0xa73c 0x7a00 3.46 f35852a808dca498d69f94151d089f17
.rsrc 0x14d000 0x81e4 0x8200 3.51 92b77ce30d25f4c43209c9c22a546ae3
.reloc 0x156000 0x1062a 0x10800 6.11 75bbdfdda92f7a3c07b4ddb40c4156d2

( 10 imports )
> msvcrt.dll: _terminate@@YAXXZ, _onexit, __dllonexit, __1type_info@@UAE@XZ, __3@YAXPAX@Z, _adjust_fdiv, _initterm, sprintf, _except_handler3, strcspn, wcsncmp, _ultow, mbstowcs, free, realloc, malloc, _wcslwr, bsearch, iswalpha, _errno, _itow, _wfopen, wcsspn, isalpha, strtoul, strchr, strncpy, toupper, towupper, _wcsupr, towlower, iswdigit, wcstod, swscanf, iswspace, fgets, fclose, qsort, _strnicmp, _stricmp, wcscspn, isdigit, _ftol, _wcsnicmp, wcsncpy, wcsstr, memmove, wcsrchr, wcstoul, wcstombs, _wsplitpath, _wcsicmp, isxdigit, wcstol, wcschr, wcscat, wcscmp, _CxxThrowException, wcscpy, __CxxFrameHandler, swprintf, wcslen, __set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
> ntdll.dll: RtlCaptureStackBackTrace, NtQuerySystemInformation, NtQuerySystemTime, NtSetInformationFile, NtCreateEvent, NtWaitForSingleObject, NtQueryInformationProcess, NtQuerySecurityObject, NtNotifyChangeDirectoryFile, NtCancelIoFile, NtQueryDirectoryFile, NtQueryInformationFile, NtOpenFile, NtQueryVolumeInformationFile, NtOpenProcessToken, NtOpenThreadToken, NtQueryInformationToken, NtDuplicateToken, RtlInitAnsiString, RtlUpcaseUnicodeChar, RtlQueryRegistryValues, NtNotifyChangeKey, NtOpenKey, RtlDosPathNameToNtPathName_U, NtCreateFile, RtlFreeHeap, NtFsControlFile, NtDeviceIoControlFile, RtlInitUnicodeString, RtlOemStringToUnicodeString, RtlUnicodeStringToOemString, NtClose, RtlNtStatusToDosError
> USER32.dll: GetLastInputInfo, PeekMessageW, MsgWaitForMultipleObjects, TranslateMessage, DispatchMessageW, RegisterDeviceNotificationW, UnregisterDeviceNotification, wsprintfW
> RPCRT4.dll: CStdStubBuffer_CountRefs, NdrCStdStubBuffer_Release, NdrDllRegisterProxy, UuidFromStringW, NdrDllGetClassObject, NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, IUnknown_Release_Proxy, CStdStubBuffer_QueryInterface, CStdStubBuffer_AddRef, CStdStubBuffer_Connect, CStdStubBuffer_Disconnect, CStdStubBuffer_Invoke, CStdStubBuffer_IsIIDSupported, NdrDllUnregisterProxy, CStdStubBuffer_DebugServerQueryInterface, CStdStubBuffer_DebugServerRelease
> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> SHELL32.dll: SHGetDesktopFolder, SHBindToParent
> SHLWAPI.dll: -
> KERNEL32.dll: ReadFileEx, WriteFileEx, WaitForMultipleObjectsEx, OpenEventW, TryEnterCriticalSection, GlobalLock, DisconnectNamedPipe, CancelIo, CreateNamedPipeW, ConnectNamedPipe, PeekNamedPipe, QueueUserAPC, GetVersionExW, SetPriorityClass, OpenProcess, DuplicateHandle, ReadProcessMemory, GetThreadTimes, LocalFileTimeToFileTime, GetLocalTime, GetSystemPowerStatus, GetStringTypeW, CreateProcessW, SwitchToThread, IsDBCSLeadByteEx, GetCPInfo, SetNamedPipeHandleState, WaitNamedPipeW, TransactNamedPipe, InitializeCriticalSectionAndSpinCount, HeapAlloc, HeapFree, HeapSize, IsBadWritePtr, HeapDestroy, HeapCreate, GetExitCodeProcess, GlobalUnlock, LoadLibraryExW, GetThreadPriority, WaitForMultipleObjects, SetThreadPriority, GetLogicalDrives, GetSystemDirectoryW, CompareFileTime, SetProcessWorkingSetSize, GetComputerNameW, OpenFileMappingW, VirtualUnlock, MoveFileW, CopyFileW, SleepEx, ResumeThread, SetErrorMode, InterlockedCompareExchange, GetSystemInfo, ReleaseMutex, CreateMutexW, InterlockedExchange, lstrlenA, GetCurrentThread, SearchPathW, GetCalendarInfoW, GetSystemTime, GetFileAttributesExW, SetCurrentDirectoryW, GetCurrentDirectoryW, CompareStringW, FoldStringW, FileTimeToSystemTime, SystemTimeToFileTime, CreateThread, VirtualAlloc, VirtualFree, GetThreadLocale, SetThreadLocale, GetModuleHandleW, FormatMessageW, GetUserDefaultLCID, IsValidLocale, GetSystemDefaultLCID, WaitForSingleObject, GetACP, MultiByteToWideChar, WideCharToMultiByte, SetEvent, DisableThreadLibraryCalls, LoadLibraryW, GetLocaleInfoW, ExpandEnvironmentStringsW, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSection, InterlockedDecrement, InterlockedIncrement, SetLastError, GetModuleFileNameW, FreeLibrary, GetProcAddress, LoadLibraryA, Sleep, RemoveDirectoryW, FindClose, FindNextFileW, DeleteFileW, FindFirstFileW, LocalFree, GetLastError, LCMapStringW, GetFileAttributesW, SetFileAttributesW, CreateDirectoryW, DeviceIoControl, CreateFileW, QueryDosDeviceW, GetDriveTypeW, GetLongPathNameW, LocalAlloc, GlobalFree, GlobalAlloc, GetVolumeInformationW, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetDiskFreeSpaceW, GetDiskFreeSpaceExW, CloseHandle, CreateFileMappingW, WriteFile, UnmapViewOfFile, FlushViewOfFile, FlushFileBuffers, CreateEventW, ResetEvent, WaitForSingleObjectEx, SetEndOfFile, SetFilePointer, GetOverlappedResult, ReadFile, GetFileSize, MapViewOfFile
> ADVAPI32.dll: SetFileSecurityW, LsaNtStatusToWinError, LsaRetrievePrivateData, LsaFreeMemory, LsaOpenPolicy, LsaCreateSecret, LsaOpenSecret, LsaClose, LsaSetSecret, QueryServiceConfigW, RegConnectRegistryW, ChangeServiceConfigW, ControlService, StartServiceW, RegEnumValueW, RegOpenKeyExW, OpenSCManagerW, OpenServiceW, RegEnumKeyExW, RegDeleteValueW, RegQueryValueExW, QueryServiceStatus, CloseServiceHandle, RegOpenKeyW, RegCreateKeyExW, RegSetValueExW, RegCloseKey, RegDeleteKeyW, AddAce, InitializeSecurityDescriptor, InitializeAcl, FreeSid, AllocateAndInitializeSid, CopySid, GetLengthSid, RegEnumKeyW, RegOpenKeyA, ImpersonateLoggedOnUser, RevertToSelf, RegisterEventSourceW, DeregisterEventSource, ReportEventW, SetNamedSecurityInfoW, GetNamedSecurityInfoW, AccessCheck, LogonUserW, OpenThreadToken, SetServiceStatus, RegisterServiceCtrlHandlerExW, SetSecurityDescriptorDacl, GetSecurityDescriptorLength, ImpersonateNamedPipeClient, SetSecurityDescriptorSacl, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, RegQueryInfoKeyW, AddAccessAllowedAce, GetUserNameW
> ole32.dll: CoGetClassObject, CoCreateInstance, PropSysFreeString, PropSysAllocString, StringFromGUID2, StgConvertPropertyToVariant, StgOpenStorage, PropVariantClear, PropVariantCopy, CoFileTimeNow, CoSetProxyBlanket, CreateBindCtx, FreePropVariantArray, StgConvertVariantToProperty, StgPropertyLengthAsVariant, CoUninitialize, CoInitializeEx, CoFreeUnusedLibraries, CreateStreamOnHGlobal, CLSIDFromString, CoTaskMemAlloc, CoTaskMemFree, GetClassFile

( 823 exports )
__0CAllocStorageVariant@@QAE@AAUtagPROPVARIANT@@AAVPMemoryAllocator@@@Z, __0CAllocStorageVariant@@QAE@AAVPDeSerStream@@AAVPMemoryAllocator@@@Z, __0CAllocStorageVariant@@QAE@PBDAAVPMemoryAllocator@@@Z, __0CAllocStorageVariant@@QAE@PBGAAVPMemoryAllocator@@@Z, __0CAllocStorageVariant@@QAE@PBU_GUID@@AAVPMemoryAllocator@@@Z, __0CAllocStorageVariant@@QAE@W4VARENUM@@KAAVPMemoryAllocator@@@Z, __0CCatState@@QAE@XZ, __0CCategorizationSet@@QAE@ABV0@@Z, __0CCategorizationSet@@QAE@I@Z, __0CCiAdminParams@@QAE@PAVCLangList@@@Z, __0CCiRegParams@@QAE@PBG@Z, __0CColumnSet@@QAE@I@Z, __0CColumns@@QAE@ABV0@@Z, __0CColumns@@QAE@I@Z, __0CDFA@@QAE@PBGAAVCTimeLimit@@E@Z, __0CDbColId@@QAE@ABU_GUID@@PBG@Z, __0CDbColId@@QAE@ABUtagDBID@@@Z, __0CDbColId@@QAE@ABV0@@Z, __0CDbColId@@QAE@XZ, __0CDbColumnNode@@QAE@ABUtagDBID@@H@Z, __0CDbColumns@@QAE@I@Z, __0CDbContentRestriction@@QAE@PBGABUtagDBID@@KK@Z, __0CDbContentRestriction@@QAE@PBGABVCDbColumnNode@@KK@Z, __0CDbNatLangRestriction@@QAE@PBGABUtagDBID@@K@Z, __0CDbNatLangRestriction@@QAE@PBGABVCDbColumnNode@@K@Z, __0CDbPropIDSet@@QAE@XZ, __0CDbQueryResults@@QAE@XZ, __0CDbSelectNode@@QAE@XZ, __0CDbSortSet@@QAE@I@Z, __0CDefColumnRegEntry@@QAE@XZ, __0CDriveInfo@@QAE@PBGK@Z, __0CDynStream@@QAE@PAVPMmStream@@@Z, __0CEventItem@@QAE@GGKGKPBX@Z, __0CEventLog@@QAE@PBG0@Z, __0CException@@QAE@XZ, __0CFileBuffer@@QAE@AAVCFileMapView@@I@Z, __0CFileMapView@@QAE@PBG@Z, __0CFilterDaemon@@QAE@AAVCiProxy@@AAVCCiFrameworkParams@@AAVCLangList@@PAEKPAUICiCFilterClient@@@Z, __0CFullPath@@QAE@PBG@Z, __0CFullPath@@QAE@PBGI@Z, __0CFullPropSpec@@QAE@AAVPDeSerStream@@@Z, __0CFullPropSpec@@QAE@ABV0@@Z, __0CFwAsyncWorkItem@@QAE@AAVCWorkManager@@AAVCWorkQueue@@@Z, __0CFwEventItem@@QAE@GKGKPAX@Z, __0CGenericCiProxy@@QAE@AAVCSharedNameGen@@KK@Z, __0CGetDbProps@@QAE@XZ, __0CImpersonateRemoteAccess@@QAE@PAVCImpersonationTokenCache@@@Z, __0CImpersonationTokenCache@@QAE@PBG@Z, __0CIndexTable@@QAE@AAVCiStorage@@AAVCTransaction@@@Z, __0CInternalPropertyRestriction@@QAE@KKABVCStorageVariant@@PAVCRestriction@@@Z, __0CKeyArray@@QAE@HH@Z, __0CLangList@@QAE@PAUICiCLangRes@@K@Z, __0CLocalGlobalPropertyList@@QAE@K@Z, __0CLocalGlobalPropertyList@@QAE@PAVCEmptyPropertyList@@HPBGK@Z, __0CMachineAdmin@@QAE@PBGH@Z, __0CMemSerStream@@QAE@I@Z, __0CMemSerStream@@QAE@PAEK@Z, __0CMetaDataMgr@@QAE@HW4CiVRootTypeEnum@@KPBG@Z, __0CMmStream@@QAE@KH@Z, __0CMmStreamConsecBuf@@QAE@XZ, __0CNatLanguageRestriction@@QAE@PBGABVCFullPropSpec@@K@Z, __0CNodeRestriction@@QAE@KI@Z, __0CNormalizer@@QAE@AAVPNoiseList@@@Z, __0CPathParser@@QAE@PBGK@Z, __0CPerfMon@@QAE@PBG@Z, __0CPersDeComp@@QAE@AAVPDirectory@@KAAVCPhysIndex@@KHH@Z, __0CPhysStorage@@IAE@AAVPStorage@@AAVPStorageObject@@KIPAVPMmStream@@HIH@Z, __0CPhysStorage@@IAE@AAVPStorage@@AAVPStorageObject@@KPAVPMmStream@@W4EOpenMode@1@HIH@Z, __0CPidLookupTable@@QAE@XZ, __0CPidRemapper@@QAE@ABVCPidMapper@@AAV_$XInterface@UIPropertyMapper@@@@PAVCRestriction@@PAVCColumnSet@@PAVCSortSet@@@Z, __0CPropListFile@@QAE@PAVCEmptyPropertyList@@HPBGK@Z, __0CPropNameArray@@QAE@AAVPDeSerStream@@@Z, __0CPropNameArray@@QAE@I@Z, __0CPropStoreManager@@QAE@K@Z, __0CPropertyRestriction@@QAE@KABVCFullPropSpec@@ABVCStorageVariant@@@Z, __0CPropertyRestriction@@QAE@XZ, __0CPropertyStoreWids@@QAE@AAVCPropStoreManager@@@Z, __0CPropertyValueParser@@QAE@AAVCQueryScanner@@GK@Z, __0CQMemSerStream@@QAE@I@Z, __0CQueryScanner@@QAE@PBGHKH@Z, __0CRangeKeyRepository@@QAE@XZ, __0CRangeRestriction@@QAE@XZ, __0CRcovStrmAppendTrans@@QAE@AAVPRcovStorageObj@@@Z, __0CRcovStrmMDTrans@@QAE@AAVPRcovStorageObj@@W4MDOp@0@K@Z, __0CRcovStrmTrans@@IAE@AAVPRcovStorageObj@@W4RcovOpType@@@Z, __0CRegAccess@@QAE@KPBG@Z, __0CRegChangeEvent@@QAE@PBGH@Z, __0CRegNotify@@QAE@PBG@Z, __0CRequestClient@@QAE@PBGPAUIDBProperties@@@Z, __0CRequestQueue@@QAE@IIIHIIABU_GUID@@@Z, __0CScopeRestriction@@QAE@PBGHH@Z, __0CSdidLookupTable@@QAE@XZ, __0CSizeSerStream@@QAE@XZ, __0CSort@@QAE@I@Z, __0CSortSet@@QAE@I@Z, __0CStandardPropMapper@@QAE@XZ, __0CSvcQuery@@QAE@PBGPAUIDBProperties@@@Z, __0CSynRestriction@@QAE@ABVCKey@@KKKH@Z, __0CTimeLimit@@QAE@KK@Z, __0CTransaction@@QAE@XZ, __0CUnfilteredRestriction@@QAE@XZ, __0CValueNormalizer@@QAE@AAVPKeyRepository@@@Z, __0CVirtualString@@QAE@I@Z, __0CWin32RegAccess@@QAE@PAUHKEY__@@PBG@Z, __0CWordRestriction@@QAE@ABVCKeyBuf@@KKKH@Z, __0CWorkQueue@@QAE@IW4WorkQueueType@0@@Z, __0CiStorage@@QAE@PBGAAUICiCAdviseStatus@@KKH@Z, __0SStorageObject@@QAE@PAVPStorageObject@@@Z, __1_$XPtr@VCDbCmdTreeNode@@@@QAE@XZ, __1_$XPtr@VCDbColumnNode@@@@QAE@XZ, __1_$XPtr@VCDbProjectListAnchor@@@@QAE@XZ, __1_$XPtr@VCDbProjectListElement@@@@QAE@XZ, __1CAllocStorageVariant@@IAE@XZ, __1CCatState@@QAE@XZ, __1CCatalogAdmin@@QAE@XZ, __1CCatalogEnum@@QAE@XZ, __1CColumns@@QAE@XZ, __1CContentRestriction@@QAE@XZ, __1CDFA@@QAE@XZ, __1CDbCmdTreeNode@@QAE@XZ, __1CDbColumns@@QAE@XZ, __1CDbContentBaseRestriction@@QAE@XZ, __1CDbProp@@QAE@XZ, __1CDbPropBaseRestriction@@QAE@XZ, __1CDbPropIDSet@@QAE@XZ, __1CDbPropSet@@QAE@XZ, __1CDbQueryResults@@QAE@XZ, __1CDbSortKey@@QAE@XZ, __1CDbSortSet@@QAE@XZ, __1CDynStream@@QAE@XZ, __1CEventItem@@QAE@XZ, __1CEventLog@@QAE@XZ, __1CFileMapView@@QAE@XZ, __1CFilterDaemon@@QAE@XZ, __1CFullPropSpec@@QAE@XZ, __1CFwAsyncWorkItem@@UAE@XZ, __1CFwEventItem@@QAE@XZ, __1CGenericCiProxy@@UAE@XZ, __1CImpersonateClient@@QAE@XZ, __1CImpersonateSystem@@QAE@XZ, __1CImpersonationTokenCache@@QAE@XZ, __1CInternalPropertyRestriction@@QAE@XZ, __1CKeyArray@@QAE@XZ, __1CLangList@@QAE@XZ, __1CMachineAdmin@@QAE@XZ, __1CMemSerStream@@UAE@XZ, __1CMetaDataMgr@@QAE@XZ, __1CMmStream@@UAE@XZ, __1CNatLanguageRestriction@@QAE@XZ, __1CNodeRestriction@@QAE@XZ, __1CNotRestriction@@QAE@XZ, __1COccRestriction@@QAE@XZ, __1CParseCommandTree@@QAE@XZ, __1CPerfMon@@QAE@XZ, __1CPhraseRestriction@@QAE@XZ, __1CPhysStorage@@UAE@XZ, __1CPidLookupTable@@QAE@XZ, __1CPidRemapper@@QAE@XZ, __1CProcess@@QAE@XZ, __1CPropStoreManager@@QAE@XZ, __1CPropertyList@@UAE@XZ, __1CPropertyRestriction@@QAE@XZ, __1CPropertyStore@@QAE@XZ, __1CPropertyStoreWids@@QAE@XZ, __1CQMemSerStream@@UAE@XZ, __1CQueryUnknown@@QAE@XZ, __1CRangeKeyRepository@@UAE@XZ, __1CRangeRestriction@@QAE@XZ, __1CRegChangeEvent@@QAE@XZ, __1CRegNotify@@MAE@XZ, __1CRestriction@@QAE@XZ, __1CScopeAdmin@@QAE@XZ, __1CScopeEnum@@QAE@XZ, __1CScopeRestriction@@QAE@XZ, __1CSdidLookupTable@@QAE@XZ, __1CSizeSerStream@@UAE@XZ, __1CSort@@QAE@XZ, __1CSynRestriction@@QAE@XZ, __1CVirtualString@@QAE@XZ, __1CWin32RegAccess@@QAE@XZ, __1CWordRestriction@@QAE@XZ, __1CWorkManager@@QAE@XZ, __1CWorkQueue@@QAE@XZ, __1SStorageObject@@QAE@XZ, __3CDbCmdTreeNode@@SGXPAX@Z, __3CDbColId@@SGXPAX@Z, __3CDbContent@@SGXPAX@Z, __3CDbParameter@@SGXPAX@Z, __3CDbPropSet@@SGXPAX@Z, __4CDbByGuid@@QAEAAV0@ABV0@@Z, __4CDbColId@@QAEAAV0@ABV0@@Z, __8CDbColId@@QBEHABV0@@Z, _AbortWorkItems@CWorkManager@@QAEXXZ, _Accept@CQueryScanner@@QAEXXZ, _AcceptCommand@CQueryScanner@@QAEXXZ, _AcceptWord@CQueryScanner@@QAEXXZ, _AccessCheck@CSdidLookupTable@@QAEHKPAXKAAH@Z, _AcqBuf@CQMemSerStream@@QAEPAEXZ, _AcqLine@CQueryScanner@@QAEPAGH@Z, _AcqPath@CQueryScanner@@QAEPAGXZ, _AcqPhrase@CQueryScanner@@QAEPAGXZ, _AcqRst@CRangeKeyRepository@@QAEPAVCRangeRestriction@@XZ, _AcqWord@CQueryScanner@@QAEPAGXZ, _AcquireRead@CPropertyStore@@AAEXAAVCReadWriteLockRecord@@@Z, _Add@CDbColumns@@QAEHABVCDbColId@@I@Z, _Add@CDbQueryResults@@QAEXPAGK@Z, _Add@CDbSortSet@@QAEHABVCDbColId@@KI@Z, _Add@CDbSortSet@@QAEHABVCDbSortKey@@I@Z, _Add@CKeyArray@@QAEHHABVCKey@@@Z, _Add@CKeyArray@@QAEHHABVCKeyBuf@@@Z, _Add@CWorkQueue@@QAEXPAVPWorkItem@@@Z, _AddArg@CEventItem@@QAEXK@Z, _AddArg@CEventItem@@QAEXPBD@Z, _AddArg@CEventItem@@QAEXPBG@Z, _AddArg@CFwEventItem@@QAEXK@Z, _AddArg@CFwEventItem@@QAEXPBG@Z, _AddCachedProperty@CCatalogAdmin@@QAEXABVCFullPropSpec@@KKKH@Z, _AddCatalog@CCatState@@QAEXAAV_$XPtrST@G@@@Z, _AddCatalog@CMachineAdmin@@QAEXPBG0@Z, _AddChild@CNodeRestriction@@QAEXPAVCRestriction@@AAI@Z, _AddDir@CCatState@@QAEXAAV_$XPtrST@G@@@Z, _AddEntry@CCombinedPropertyList@@UAEXPAVCPropEntry@@H@Z, _AddEntry@CPropertyList@@UAEXPAVCPropEntry@@H@Z, _AddError@CEventItem@@QAEXK@Z, _AddKey@CSynRestriction@@QAEXABVCKeyBuf@@@Z, _AddMachine@CCatState@@QAEXAAV_$XPtrST@G@@@Z, _AddRef@CDbProperties@@UAGKXZ, _AddRef@CEmptyPropertyList@@UAGKXZ, _AddRef@CEnumString@@UAGKXZ, _AddRef@CEnumWorkid@@UAGKXZ, _AddRef@CFwPropertyMapper@@UAGKXZ, _AddRef@CQueryUnknown@@UAGKXZ, _AddRefWorkThreads@CWorkQueue@@QAEXXZ, _AddScope@CCatalogAdmin@@QAEXPBG0H00@Z, _AddSortColumn@CDbSortNode@@QAEHABUtagDBID@@HK@Z, _AddTable@CDbNestingNode@@QAEHPAVCDbCmdTreeNode@@@Z, _AddToWorkList@CWorkManager@@QAEXPAVCFwAsyncWorkItem@@@Z, _AddToWorkQueue@CFwAsyncWorkItem@@QAEXXZ, _AllocAndCopyWString@CDbCmdTreeNode@@SGPAGPBG@Z, _AllocHeapAndCopy@@YGPAGPBGAAK@Z, _AllocHeapAndGetWString@@YGPAGAAVPDeSerStream@@@Z, _Append@CEnumString@@QAEXPBG@Z, _Append@CEnumWorkid@@QAEXK@Z, _AppendChild@CDbCmdTreeNode@@IAEXPAV1@@Z, _AppendListElement@CDbListAnchor@@IAEHGABUtagDBID@@@Z, _AppendListElement@CDbListAnchor@@IAEHPAVCDbCmdTreeNode@@@Z, _AppendListElement@CDbProjectListAnchor@@QAEHABUtagDBID@@PAG@Z, _BeginTransaction@CPropStoreManager@@QAEKXZ, _BindIFilter@CCiOle@@SGJPBGPAUIUnknown@@PAPAUIFilter@@H@Z, _BorrowBuffer@CPhysStorage@@QAEPAKKHH@Z, _BorrowNewBuffer@CPhysStorage@@QAEPAKK@Z, _BuildRegistryPropertiesKey@@YGXAAV_$XArray@G@@PBG@Z, _BuildRegistryScopesKey@@YGXAAV_$XArray@G@@PBG@Z, _CIShutdown@@YGXXZ, _ChangeCurrentCatalog@CCatState@@QAEXPBG@Z, _ChangeCurrentDepth@CCatState@@QAEXH@Z, _ChangeCurrentMachine@CCatState@@QAEXPBG@Z, _ChangeCurrentScope@CCatState@@QAEXPBG@Z, _ChangeDirty@CPropStoreInfo@@AAEXH@Z, _CheckError@CLocalGlobalPropertyList@@QAEJAAKPAPAG@Z, _CheckError@CPropListFile@@QAEJAAKPAPAG@Z, _CheckHasIndexTable@CiStorage@@SGHPBG@Z, _CiGetPassword@@YGHPBG0PAG@Z, _CiNtOpen@@YGPAXPBGKKK@Z, _CiNtOpenNoThrow@@YGJAAPAXPBGKKK@Z, _Cleanup@CDbColId@@QAEXXZ, _Cleanup@CDbProp@@QAEXXZ, _CleanupDataValue@CDbCmdTreeNode@@IAEXXZ, _ClearList@CCombinedPropertyList@@QAEXXZ, _ClearList@CPropertyList@@QAEXXZ, _Clone@CDbCmdTreeNode@@QBEPAV1@H@Z, _Clone@CEnumString@@UAGJPAPAUIEnumString@@@Z, _Clone@CNodeRestriction@@QBEPAV1@XZ, _Clone@COccRestriction@@QBEPAV1@XZ, _Clone@CRestriction@@QBEPAV1@XZ, _Close@CPhysStorage@@QAEXXZ, _Close@CPipeClient@@IAEXXZ, _Close@CPropSetMap@COLEPropManager@@QAEXXZ, _CloseRecord@CPropStoreManager@@QAEXPAVCCompositePropRecord@@@Z, _CloseRecord@CPropStoreManager@@QAEXPAVCCompositePropRecordForWrites@@@Z, _CoTaskAllocator@@3VCCoTaskAllocator@@A, _Commit@CRcovStrmAppendTrans@@QAEXXZ, _Commit@CRcovStrmMDTrans@@QAEXXZ, _Commit@CRcovStrmWriteTrans@@QAEXXZ, _ContainsDrive@CDriveInfo@@SGHPBG@Z, _Copy@CDbParameter@@QAEHABUtagDBPARAMETER@@@Z, _Copy@CDbProp@@QAEHABUtagDBPROP@@@Z, _Copy@CDbPropSet@@QAEHABUtagDBPROPSET@@@Z, _CreateSubdirs@CMachineAdmin@@QAEXPBG@Z, _DataWriteRead@CRequestClient@@QAEXPAXK0KAAK@Z, _DecodeEscapes@@YGXPAGAAK0@Z, _DecodeHtmlNumeric@@YGXPAG@Z, _DecodeURLEscapes@@YGXPAEAAKPAGK@Z, _DeleteRecord@CPropStoreManager@@QAEXK@Z, _DeleteRegistryParamNoThrow@CCatalogAdmin@@QAEXPBG@Z, _DetermineDriveType@CiStorage@@SGIPBG@Z, _DisableCI@CMachineAdmin@@QAEHXZ, _DisableNotification@CRegNotify@@QAEXXZ, _DisableVPathNotify@CMetaDataMgr@@QAEXXZ, _Disconnect@CRequestClient@@QAEXXZ, _DoFailTest@@YGXJ@Z, _DoIt@CCopyRcovObject@@QAEJXZ, _DoUpdates@CFilterDaemon@@QAEJXZ, _Done@CFwAsyncWorkItem@@QAEXXZ, _DumpWorkId@@YGJPBGKPAEAAK00K@Z, _Empty@CPidLookupTable@@QAEXXZ, _Empty@CPropStoreManager@@QAEXXZ, _Empty@CRcovStrmWriteTrans@@QAEXXZ, _Empty@CSdidLookupTable@@QAEXXZ, _EnableCI@CMachineAdmin@@QAEHXZ, _EnableVPathNotify@CMetaDataMgr@@QAEXPAVCMetaDataVPathChangeCallBack@@@Z, _EndTransaction@CPropStoreManager@@QAEXKHKK@Z, _Enum@CWin32RegAccess@@QAEHPAGK@Z, _EnumPropInfo@CEmptyPropertyList@@UAGJKPAPBGPAPAUtagDBID@@PAGPAI@Z, _EnumVPaths@CMetaDataMgr@@QAEXAAVCMetaDataCallBack@@@Z, _EnumVServers@CMetaDataMgr@@QAEXAAVCMetaDataVirtualServerCallBack@@@Z, _EnumerateFilesInDir@CiStorage@@SGXPBGAAVCEnumString@@@Z, _EnumerateProperty@CPidLookupTable@@QAEHAAVCFullPropSpec@@AAI@Z, _EnumerateValues@CRegAccess@@QAEXPAGAAVCRegCallBack@@@Z, _Eof@CMmStreamConsecBuf@@QAEHXZ, _ExtensionHasScriptMap@CMetaDataMgr@@QAEHPBG@Z, _FPSToPROPID@CPidConverter@@UAEJABVCFullPropSpec@@AAK@Z, _FastInit@CPropStoreManager@@QAEXPAVCiStorage@@@Z, _FetchProperty@COLEPropManager@@QAEXABU_GUID@@ABUtagPROPSPEC@@PAUtagPROPVARIANT@@PAI@Z, _FillMax@CKeyArray@@QAEHH@Z, _Find@CCombinedPropertyList@@UAEPBVCPropEntry@@PBG@Z, _Find@CEmptyPropertyList@@QAEPBVCPropEntry@@ABVCDbColId@@@Z, _Find@CPropertyList@@UAEPBVCPropEntry@@ABVCDbColId@@@Z, _Find@CPropertyList@@UAEPBVCPropEntry@@PBG@Z, _Find@CStaticPropertyList@@UAEPBVCPropEntry@@PBG@Z, _FindPropid@CPidLookupTable@@QAEHABVCFullPropSpec@@AAKH@Z, _Flush@CDynStream@@QAEXXZ, _Flush@CPhysStorage@@QAEXH@Z, _Flush@CPropStoreManager@@QAEXXZ, _FlushIdle@CCiOle@@SGXXZ, _FormFullTree@CTextToTree@@QAEPAUtagDBCOMMANDTREE@@XZ, _FormQueryTree@@YGPAVCDbCmdTreeNode@@AAV1@AAVCCatState@@PAUIColumnMapper@@HH@Z, _Get@CRegAccess@@QAEKPBG@Z, _Get@CRegAccess@@QAEXPBGPAGI@Z, _Get@CWin32RegAccess@@QAEHPBGAAK@Z, _Get@CWin32RegAccess@@QAEHPBGPAGIH@Z, _GetAllEntries@CPropertyList@@UAEJPAPAVCPropEntry@@K@Z, _GetBOOL@CAllocStorageVariant@@QBEFI@Z, _GetBackupSize@CPropStoreManager@@QAEKK@Z, _GetBlob@CMemDeSerStream@@UAEXPAEK@Z, _GetBlob@CQMemDeSerStream@@UAEXPAEK@Z, _GetBrowserCodepage@@YGKAAVCWebServer@@K@Z, _GetByte@CMemDeSerStream@@UAEEXZ, _GetByte@CQMemDeSerStream@@UAEEXZ, _GetCD@CCatState@@QAEPBGXZ, _GetCGIVariable@CWebServer@@QAEHPBDAAV_$XArray@G@@AAK@Z, _GetCGIVariableW@CWebServer@@QAEHPBGAAV_$XArray@G@@AAK@Z, _GetCLSID@CAllocStorageVariant@@QBE_AU_GUID@@I@Z, _GetCY@CAllocStorageVariant@@QBE_ATtagCY@@I@Z, _GetCategory@CCatState@@QBEPBGI@Z, _GetChar@CMemDeSerStream@@UAEXPADK@Z, _GetChar@CQMemDeSerStream@@UAEXPADK@Z, _GetColumn@CCatState@@QBEPBGI@Z, _GetCommandChar@CQueryScanner@@QAEGXZ, _GetDATE@CAllocStorageVariant@@QBENI@Z, _GetDWORDParam@CCatalogAdmin@@QAEHPBGAAK@Z, _GetDWORDParam@CMachineAdmin@@QAEHPBGAAK@Z, _GetDiskSpace@CDriveInfo@@QAEXAA_J0@Z, _GetDouble@CMemDeSerStream@@UAENXZ, _GetDouble@CQMemDeSerStream@@UAENXZ, _GetDrive@CDriveInfo@@SGXPBGPAG@Z, _GetEntryBuffer@CGenericCiProxy@@QAEPAEAAK@Z, _GetFILETIME@CAllocStorageVariant@@QBE_AU_FILETIME@@I@Z, _GetFileName@CPathParser@@QBEHPAGAAK@Z, _GetFileSystem@CDriveInfo@@QAE_AW4eFileSystem@1@H@Z, _GetFloat@CMemDeSerStream@@UAEMXZ, _GetFloat@CQMemDeSerStream@@UAEMXZ, _GetGUID@CMemDeSerStream@@UAEXAAU_GUID@@@Z, _GetGUID@CQMemDeSerStream@@UAEXAAU_GUID@@@Z, _GetGlobalPropListFile@@YGPAVCPropListFile@@XZ, _GetGlobalStaticPropertyList@@YGPAVCStaticPropertyList@@XZ, _GetI2@CAllocStorageVariant@@QBEFI@Z, _GetI4@CAllocStorageVariant@@QBEJI@Z, _GetI8@CAllocStorageVariant@@QBE_AT_LARGE_INTEGER@@I@Z, _GetLCIDFromString@@YGKPAG@Z, _GetLPSTR@CAllocStorageVariant@@QBEPADI@Z, _GetLPWSTR@CAllocStorageVariant@@QBEPAGI@Z, _GetLocation@CCatalogAdmin@@QAEPBGXZ, _GetLong@CMemDeSerStream@@UAEJXZ, _GetLong@CQMemDeSerStream@@UAEJXZ, _GetNumber@CQueryScanner@@QAEHAAJAAH@Z, _GetNumber@CQueryScanner@@QAEHAAKAAH@Z, _GetNumber@CQueryScanner@@QAEHAA_JAAH@Z, _GetNumber@CQueryScanner@@QAEHAA_KAAH@Z, _GetOffset@CKeyDeComp@@QAEXAAUBitOffset@@@Z, _GetOleDBErrorInfo@@YGJPAUIUnknown@@ABU_GUID@@KIPAUtagERRORINFO@@PAPAUIErrorInfo@@@Z, _GetOleError@@YGJAAVCException@@@Z, _GetPhysicalPath@CWebServer@@QAEKPBGPAGKK@Z, _GetPropInfo@CEmptyPropertyList@@QAEHABVCDbColId@@PAPBGPAGPAI@Z, _GetPropInfo@CEmptyPropertyList@@QAEHPBGPAPAVCDbColId@@PAGPAI@Z, _GetPropInfoFromId@CEmptyPropertyList@@UAGJPBUtagDBID@@PAPAGPAGPAI@Z, _GetPropInfoFromName@CEmptyPropertyList@@UAGJPBGPAPAUtagDBID@@PAGPAI@Z, _GetPropType@CEmptyPropertyList@@SGGI@Z, _GetPropTypeCount@CEmptyPropertyList@@SGIXZ, _GetPropTypeName@CEmptyPropertyList@@SGPBGI@Z, _GetProperties@CDbProperties@@UAGJKQBUtagDBPROPIDSET@@PAKPAPAUtagDBPROPSET@@@Z, _GetProperties@CGetDbProps@@QAEXPAUIDBProperties@@K@Z, _GetPropertyInfo@CDbProperties@@UAGJKQBUtagDBPROPIDSET@@PAKPAPAUtagDBPROPINFOSET@@PAPAG@Z, _GetR4@CAllocStorageVariant@@QBEMI@Z, _GetR8@CAllocStorageVariant@@QBENI@Z, _GetSZParam@CMachineAdmin@@QAEHPBGPAGK@Z, _GetScodeError@@YGJAAVCException@@@Z, _GetSecret@@YGHPBG0PAPAGPAK@Z, _GetSectorSize@CDriveInfo@@QAEKXZ, _GetSortProp@CCatState@@QBEXIPAPBGPAW4SORTDIR@@@Z, _GetStackTrace@@YGXPADK@Z, _GetStartupData@CGenericCiProxy@@QAEPBEAAU_GUID@@AAK@Z, _GetStorage@CPropStoreManager@@QAEAAVPStorage@@K@Z, _GetStr@CKey@@QBEPAGXZ, _GetStr@CKeyBuf@@QBEPAGXZ, _GetString@CMemDeSerStream@@UAEPADXZ, _GetString@CQMemDeSerStream@@UAEPADXZ, _GetStringDbRestriction@@YGPAVCDbRestriction@@PBGKPAUIColumnMapper@@K@Z, _GetStringFromLCID@@YGPBGK@Z, _GetStringFromLCID@@YGXKPAG@Z, _GetTotalSizeInKB@CPropStoreManager@@QAEKXZ, _GetTotalSizeInKB@CPropertyStore@@QAEKXZ, _GetULong@CMemDeSerStream@@UAEKXZ, _GetULong@CQMemDeSerStream@@UAEKXZ, _GetUShort@CMemDeSerStream@@UAEGXZ, _GetUShort@CQMemDeSerStream@@UAEGXZ, _GetUserHdrInfo@CIndexTable@@QAEXAAIAAH@Z, _GetVPathAccess@CMetaDataMgr@@QAEKPBG@Z, _GetVPathAuthorization@CMetaDataMgr@@QAEKPBG@Z, _GetVPathSSLAccess@CMetaDataMgr@@QAEKPBG@Z, _GetVolumeName@CDriveInfo@@QAEPBGH@Z, _GetWChar@CMemDeSerStream@@UAEXPAGK@Z, _GetWChar@CQMemDeSerStream@@UAEXPAGK@Z, _GetWString@CMemDeSerStream@@UAEPAGXZ, _GetWString@CQMemDeSerStream@@UAEPAGXZ, _GetWeight@CDbCmdTreeNode@@QBEJXZ, _Grow@CDynStream@@QAEXAAVPStorage@@K@Z, _GrowBuffer@CVirtualString@@AAEXK@Z, _HTMLEscapeW@@YGXPBGAAVCVirtualString@@K@Z, _Impersonate@CImpersonateClient@@AAEXXZ, _Init@CFileMapView@@QAEXXZ, _Init@CMmStreamConsecBuf@@QAEXPAVPMmStream@@@Z, _Init@CPidLookupTable@@QAEHPAVPRcovStorageObj@@@Z, _Init@CRcovStorageHdr@@QAEXK@Z, _Init@CRegChangeEvent@@QAEXXZ, _Init@CSdidLookupTable@@QAEHPAVCiStorage@@@Z, _InitIterator@CCombinedPropertyList@@UAEXXZ, _InitIterator@CPropertyList@@UAEXXZ, _InitIterator@CStaticPropertyList@@UAEXXZ, _Initialize@CImpersonationTokenCache@@QAEXPBGHHHKKK@Z, _InitializeForRead@CDynStream@@QAEXXZ, _InitializeForWrite@CDynStream@@QAEXK@Z, _InsertChild@CDbCmdTreeNode@@IAEXPAV1@@Z, _IsCIDialect@CDbPropertyRestriction@@QAEHXZ, _IsCIEnabled@CMachineAdmin@@QAEHXZ, _IsCIPaused@CMachineAdmin@@QAEHXZ, _IsCIStarted@CMachineAdmin@@QAEHXZ, _IsCIStopped@CMachineAdmin@@QAEHXZ, _IsCatalogInactive@CCatalogAdmin@@QAEHXZ, _IsDirectoryWritable@@YGHPBG@Z, _IsIISAdminUp@CMetaDataMgr@@SGHAAH@Z, _IsImpersonated@CImpersonateSystem@@SGHXZ, _IsLeaf@CRestriction@@QBEHXZ, _IsNullPointerVariant@@YGHPAUtagPROPVARIANT@@@Z, _IsPaused@CCatalogAdmin@@QAEHXZ, _IsRunningAsSystem@CImpersonateSystem@@SGHXZ, _IsSameDrive@CDriveInfo@@QAEHPBG@Z, _IsScopeValid@@YGJPBGIH@Z, _IsStarted@CCatalogAdmin@@QAEHXZ, _IsStopped@CCatalogAdmin@@QAEHXZ, _IsValid@CAllocStorageVariant@@QBEHXZ, _IsValid@CNodeRestriction@@QBEHXZ, _IsValid@COccRestriction@@QBEHXZ, _IsValid@CRestriction@@QBEHXZ, _IsWaitingForDocument@CFilterDaemon@@QAEHXZ, _IsWriteProtected@CDriveInfo@@QAEHXZ, _Load@CLocalGlobalPropertyList@@QAEXQBG@Z, _LocaleToCodepage@@YGKK@Z, _LokNewWorkId@CPropertyStore@@AAEKKHH@Z, _LokUpdate@CCatStateInfo@@QAEHXZ, _LongInit@CPropStoreManager@@QAEXAAHAAKP6GXKHPBX@Z2@Z, _Lookup@CPropStoreInfo@@AAEIK@Z, _LookupSDID@CSdidLookupTable@@QAEKPAXK@Z, _MakeBackupCopy@CPhysStorage@@QAEXAAV1@AAVPSaveProgressTracker@@@Z, _MakeBackupCopy@CPidLookupTable@@QAEXAAVPRcovStorageObj@@AAVPSaveProgressTracker@@@Z, _MakeBackupCopy@CPropStoreManager@@QAEXPAUIProgressNotify@@AAHAAVCiStorage@@PAUICiEnumWorkids@@PAPAUIEnumString@@@Z, _MakeICommand@@YGJPAPAUIUnknown@@PBG1PAU1@@Z, _MakeISearch@@YGJPAPAUISearchQueryHits@@PAVCDbRestriction@@PBG@Z, _MakeLocalICommand@@YGJPAPAUIUnknown@@PAUICiCDocStore@@PAU1@@Z, _MakeMetadataICommand@@YGJPAPAUIUnknown@@W4CiMetaData@@PBG2PAU1@@Z, _MakePath@CFullPath@@QAEXPBG@Z, _MakePath@CFullPath@@QAEXPBGI@Z, _MakePrivileged@CImpersonateSystem@@AAEXXZ, _Map@CMmStreamConsecBuf@@QAEXK@Z, _MarkDirty@CDynStream@@QAEHXZ, _Marshall@CBaseStorageVariant@@QBEXAAVPSerStream@@@Z, _Marshall@CContentRestriction@@QBEXAAVPSerStream@@@Z, _Marshall@CDbByGuid@@QBEXAAVPSerStream@@@Z, _Marshall@CDbCmdTreeNode@@QBEXAAVPSerStream@@@Z, _Marshall@CDbColId@@QBEXAAVPSerStream@@@Z, _Marshall@CDbContentVector@@QBEXAAVPSerStream@@@Z, _Marshall@CDbNumeric@@QBEXAAVPSerStream@@@Z, _Marshall@CDbParameter@@QBEXAAVPSerStream@@@Z, _Marshall@CDbProp@@QBEXAAVPSerStream@@@Z, _Marshall@CDbPropSet@@QBEXAAVPSerStream@@@Z, _Marshall@CFullPropSpec@@QBEXAAVPSerStream@@@Z, _Marshall@CNatLanguageRestriction@@QBEXAAVPSerStream@@@Z, _Marshall@CNodeRestriction@@QBEXAAVPSerStream@@@Z, _Marshall@CNotRestriction@@QBEXAAVPSerStream@@@Z, _Marshall@CPropNameArray@@QBEXAAVPSerStream@@@Z, _Marshall@CPropertyRestriction@@QBEXAAVPSerStream@@@Z, _Marshall@CRestriction@@QBEXAAVPSerStream@@@Z, _Marshall@CVectorRestriction@@QBEXAAVPSerStream@@@Z, _MinPageInUse@CBufferCache@@QAEHAAK@Z, _MinPageInUse@CPhysStorage@@QAEHAAK@Z, _MultiByteToXArrayWideChar@@YGKPBEKIAAV_$XArray@G@@@Z, _My_wcstoui64@@YA_KPBGPAPAGH@Z, _NameToReal@CPidRemapper@@QAEKPBVCFullPropSpec@@@Z, _NewStemmer@CCiOle@@SGPAUIStemmer@@ABU_GUID@@@Z, _NewWordBreaker@CCiOle@@SGPAUIWordBreaker@@ABU_GUID@@@Z, _Next@CCatalogEnum@@QAEHXZ, _Next@CCombinedPropertyList@@UAEPBVCPropEntry@@XZ, _Next@CEnumString@@UAGJKPAPAGPAK@Z, _Next@CEnumWorkid@@UAGJKPAK0@Z, _Next@CPropertyList@@UAEPBVCPropEntry@@XZ, _Next@CScopeEnum@@QAEHXZ, _Next@CStaticPropertyList@@UAEPBVCPropEntry@@XZ, _NextWorkId@CPropertyStoreWids@@QAEKXZ, _NotifyWriteRead@CRequestClient@@QAEHPAX0K0KAAK@Z, _NumberOfColumns@CCatState@@QBEIXZ, _NumberOfSortProps@CCatState@@QBEIXZ, _Open@CMmStream@@QAEXPBGKKKKH@Z, _Open@COLEPropManager@@QAEHABVCFunnyPath@@@Z, _OpenExclusive@CMmStream@@QAEXPAGH@Z, _OpenFileFromPath@@YGPAU_iobuf@@PBG@Z, _OpenRecord@CPropStoreManager@@QAEPAVCCompositePropRecord@@KPAE@Z, _OpenRecordForWrites@CPropStoreManager@@QAEPAVCCompositePropRecordForWrites@@KPAE@Z, _ParseCatalogURL@@YGJPBGAAV_$XPtrST@G@@1@Z, _ParseExpression@CParseCommandTree@@QAEPAVCRestriction@@PAVCDbCmdTreeNode@@@Z, _ParseOneLine@CPropertyList@@SGXAAVCQueryScanner@@HAAV_$XPtr@VCPropEntry@@@@@Z, _ParseQueryPhrase@CQueryParser@@QAEPAVCDbRestriction@@XZ, _ParseStringColumns@@YGPAVCDbColumns@@PBGPAUIColumnMapper@@KPAVPVariableSet@@PAV_$CDynArray@G@@@Z, _ParseTree@CParseCommandTree@@QAEXPAVCDbCmdTreeNode@@@Z, _Pause@CCatalogAdmin@@QAEHXZ, _PauseCI@CMachineAdmin@@QAEHXZ, _PeekULong@CMemDeSerStream@@UAEKXZ, _PeekULong@CQMemDeSerStream@@UAEKXZ, _PidToRealPid@CPidMapper@@QAEKK@Z, _PropertyToPropId@CStandardPropMapper@@QAEKABVCFullPropSpec@@H@Z, _PropertyToPropid@CFwPropertyMapper@@UAGJPBUtagFULLPROPSPEC@@HPAK@Z, _PutByte@CQMemSerStream@@UAEXE@Z, _PutMaxValue@CValueNormalizer@@QAEXKAAKW4VARENUM@@@Z, _PutMinValue@CValueNormalizer@@QAEXKAAKW4VARENUM@@@Z, _PutValue@CValueNormalizer@@QAEXKAAKABVCStorageVariant@@@Z, _PutWString@@YGXAAVPSerStream@@PBG@Z, _PutWString@CDbCmdTreeNode@@SGXAAVPSerStream@@PBG@Z, _Query@CQueryParser@@AAEPAVCDbRestriction@@PAVCDbNodeRestriction@@@Z, _QueryCatalogAdmin@CCatalogEnum@@QAEPAVCCatalogAdmin@@XZ, _QueryCatalogAdmin@CMachineAdmin@@QAEPAVCCatalogAdmin@@PBG@Z, _QueryCatalogEnum@CMachineAdmin@@QAEPAVCCatalogEnum@@XZ, _QueryInterface@CDbProperties@@UAGJABU_GUID@@PAPAX@Z, _QueryInterface@CEmptyPropertyList@@UAGJABU_GUID@@PAPAX@Z, _QueryInterface@CEnumString@@UAGJABU_GUID@@PAPAX@Z, _QueryInterface@CEnumWorkid@@UAGJABU_GUID@@PAPAX@Z, _QueryInterface@CFwPropertyMapper@@UAGJABU_GUID@@PAPAX@Z, _QueryInterface@CQueryUnknown@@UAGJABU_GUID@@PAPAX@Z, _QueryPidLookupTable@CiStorage@@QAEPAVPRcovStorageObj@@K@Z, _QueryScopeAdmin@CCatalogAdmin@@QAEPAVCScopeAdmin@@PBG@Z, _QueryScopeAdmin@CScopeEnum@@QAEPAVCScopeAdmin@@XZ, _QueryScopeEnum@CCatalogAdmin@@QAEPAVCScopeEnum@@XZ, _QueryScopeList@CiStorage@@QAEPAVPRcovStorageObj@@K@Z, _QuerySdidLookupTable@CiStorage@@QAEPAVPRcovStorageObj@@K@Z, _QueryVirtualScopeList@CiStorage@@QAEPAVPRcovStorageObj@@K@Z, _ReBuild@CPidRemapper@@QAEXABVCPidMapper@@@Z, _ReInit@CQueryUnknown@@QAEXKPAPAVCRowset@@@Z, _ReInitializeIISScopes@CImpersonationTokenCache@@QAEXXZ, _ReOpenStream@CPhysIndex@@EAEXXZ, _Read@CDynStream@@QAEKPAXK@Z, _Read@CRcovStrmTrans@@QAEKPAXK@Z, _Read@CRegAccess@@QAEKPBGK@Z, _Read@CRegAccess@@QAEPAGPBG0@Z, _ReadPrimaryProperty@CPropStoreManager@@QAEHKKAAUtagPROPVARIANT@@@Z, _ReadProperty@COLEPropManager@@QAEHABVCFullPropSpec@@AAUtagPROPVARIANT@@@Z, _ReadProperty@CPropStoreManager@@QAEHAAVCCompositePropRecord@@KAAUtagPROPVARIANT@@@Z, _ReadProperty@CPropStoreManager@@QAEHAAVCCompositePropRecord@@KAAUtagPROPVARIANT@@PAEPAI@Z, _ReadProperty@CPropStoreManager@@QAEHAAVCCompositePropRecord@@KPAUtagPROPVARIANT@@PAI@Z, _ReadProperty@CPropStoreManager@@QAEHKKAAUtagPROPVARIANT@@@Z, _ReadProperty@CPropStoreManager@@QAEHKKAAUtagPROPVARIANT@@PAEPAI@Z, _ReadProperty@CPropStoreManager@@QAEHKKPAUtagPROPVARIANT@@PAI@Z, _ReadProperty@CPropertyStore@@QAEHAAVCPropRecordNoLock@@KPAUtagPROPVARIANT@@PAI@Z, _ReadProperty@CPropertyStore@@QAEHKKAAUtagPROPVARIANT@@@Z, _Recognize@CDFA@@QAEEPBG@Z, _Refresh@CCiRegParams@@QAEXPAUICiAdminParams@@H@Z, _Refresh@CDefColumnRegEntry@@QAEXH@Z, _RefreshParams@CWorkQueue@@QAEXKK@Z, _Release@CDbProperties@@UAGKXZ, _Release@CEmptyPropertyList@@UAGKXZ, _Release@CEnumString@@UAGKXZ, _Release@CEnumWorkid@@UAGKXZ, _Release@CFwPropertyMapper@@UAGKXZ, _Release@CImpersonateRemoteAccess@@QAEXXZ, _Release@CQueryUnknown@@UAGKXZ, _Release@CWorkQueue@@QAEXPAVCWorkThread@@@Z, _ReleaseRead@CPropertyStore@@AAEXAAVCReadWriteLockRecord@@@Z, _ReleaseWorkThreads@CWorkQueue@@QAEXXZ, _Remove@CColumns@@QAEXI@Z, _Remove@CDbSortSet@@QAEXI@Z, _Remove@CSort@@QAEXI@Z, _Remove@CWorkQueue@@QAEXPAVPWorkItem@@@Z, _RemoveCatalog@CMachineAdmin@@QAEXPBGH@Z, _RemoveCatalogFiles@CMachineAdmin@@QAEXPBG@Z, _RemoveChild@CNodeRestriction@@QAEPAVCRestriction@@I@Z, _RemoveFirstChild@CDbCmdTreeNode@@IAEPAV1@XZ, _RemoveScope@CCatalogAdmin@@QAEXPBG@Z, _Reopen@CPhysStorage@@QAEXH@Z, _ReportEventW@CEventLog@@QAEXAAVCEventItem@@@Z, _ReportEventW@CFwEventItem@@QAEXAAUICiCAdviseStatus@@@Z, _RequiresFlush@CPhysStorage@@QAEHK@Z, _Reset@CRegChangeEvent@@QAEXXZ, _ResetBuffer@CQueryScanner@@QAEXPBG@Z, _ResetType@CAllocStorageVariant@@IAEXAAVPMemoryAllocator@@@Z, _Resume@CProcess@@QAEXXZ, _ReturnBuffer@CPhysStorage@@QAEXKHH@Z, _Rewind@CMmStreamConsecBuf@@QAEXXZ, _SaComputeSize@@YGKGAAUtagSAFEARRAY@@@Z, _SaCreateAndCopy@@YGHAAVPMemoryAllocator@@PAUtagSAFEARRAY@@PAPAU2@@Z, _SaCreateData@@YGHAAVPVarAllocator@@GAAUtagSAFEARRAY@@1H@Z, _Seek@CRcovStrmTrans@@QAEHK@Z, _Serialize@CDbQueryResults@@QBEXAAVPSerStream@@@Z, _Set@CPidRemapper@@QAEXAAV_$XArray@K@@@Z, _SetAlias@CScopeAdmin@@QAEXPBG@Z, _SetBOOL@CStorageVariant@@QAEXFI@Z, _SetBSTR@CAllocStorageVariant@@QAEXPAGAAVPMemoryAllocator@@@Z, _SetBSTR@CStorageVariant@@QAEXPAGI@Z, _SetBackupSize@CPropStoreManager@@QAEXKK@Z, _SetCD@CCatState@@QAEXPBG@Z, _SetCLSID@CStorageVariant@@QAEXU_GUID@@I@Z, _SetCY@CStorageVariant@@QAEXTtagCY@@I@Z, _SetCatalog@CCatState@@QAEXPBG@Z, _SetColumn@CCatState@@QAEXPBGI@Z, _SetCurrentProperty@CQueryParser@@AAEXPBGW4PropertyType@@@Z, _SetDATE@CStorageVariant@@QAEXNI@Z, _SetDWORDParam@CCatalogAdmin@@QAEXPBGK@Z, _SetDWORDParam@CMachineAdmin@@QAEXPBGK@Z, _SetDefaultProperty@CCatState@@QAEXPBG@Z, _SetEndKey@CRangeRestriction@@QAEXABVCKeyBuf@@@Z, _SetExclude@CScopeAdmin@@QAEXH@Z, _SetFILETIME@CStorageVariant@@QAEXU_FILETIME@@I@Z, _SetI2@CStorageVariant@@QAEXFI@Z, _SetI4@CStorageVariant@@QAEXJI@Z, _SetI8@CStorageVariant@@QAEXT_LARGE_INTEGER@@I@Z, _SetLPSTR@CStorageVariant@@QAEXPBDI@Z, _SetLPWSTR@CStorageVariant@@QAEXPBGI@Z, _SetLocale@CCatState@@QAEXPBG@Z, _SetLogonInfo@CScopeAdmin@@QAEXPBG0AAVCCatalogAdmin@@@Z, _SetMappedCacheSize@CPropStoreManager@@QAEXKK@Z, _SetNumberOfColumns@CCatState@@QAEXI@Z, _SetNumberOfSortProps@CCatState@@QAEXI@Z, _SetPath@CScopeAdmin@@QAEXPBG@Z, _SetPhrase@CContentRestriction@@QAEXPBG@Z, _SetPhrase@CNatLanguageRestriction@@QAEXPBG@Z, _SetPriority@CGenericCiProxy@@QAEXKK@Z, _SetProperties@CDbProperties@@UAGJKQAUtagDBPROPSET@@@Z, _SetProperty@CDbColId@@QAEHPBG@Z, _SetProperty@CDbPropBaseRestriction@@QAEHABUtagDBID@@@Z, _SetProperty@CDbPropBaseRestriction@@QAEHABVCDbColumnNode@@@Z, _SetProperty@CFullPropSpec@@QAEHPBG@Z, _SetProperty@CFullPropSpec@@QAEXK@Z, _SetR4@CStorageVariant@@QAEXMI@Z, _SetR8@CStorageVariant@@QAEXNI@Z, _SetRestriction@CDbSelectNode@@QAEHPAVCDbCmdTreeNode@@@Z, _SetRunningAsSystem@CImpersonateSystem@@SGXXZ, _SetSZParam@CMachineAdmin@@QAEXPBG0K@Z, _SetScopeProperties@@YGXPAUICommand@@IPBQBGPBK11@Z, _SetScopePropertiesNoThrow@@YGJPAUICommand@@IPBQBGPBK11@Z, _SetSecret@@YGXPBG00K@Z, _SetSortProp@CCatState@@QAEXPBGW4SORTDIR@@I@Z, _SetStartKey@CRangeRestriction@@QAEXABVCKeyBuf@@@Z, _SetUI1@CStorageVariant@@QAEXEI@Z, _SetUI2@CStorageVariant@@QAEXGI@Z, _SetUI4@CStorageVariant@@QAEXKI@Z, _SetUI8@CStorageVariant@@QAEXT_ULARGE_INTEGER@@I@Z, _SetValue@CPropertyRestriction@@QAEXAAUtagBLOB@@@Z, _SetValue@CPropertyRestriction@@QAEXPAG@Z, _SetValue@CPropertyRestriction@@QAEXPAU_GUID@@@Z, _SetWeight@CDbCmdTreeNode@@QAEXJ@Z, _Setup@CPropStoreManager@@QAEXKKKKHK@Z, _Shrink@CDynStream@@QAEXAAVPStorage@@K@Z, _ShrinkFromFront@CPhysStorage@@QAEKKK@Z, _ShrinkToFit@CPhysStorage@@QAEXXZ, _Shutdown@CCiOle@@SGXXZ, _Shutdown@CPropStoreManager@@QAEXXZ, _Shutdown@CShtOle@@QAEXXZ, _Shutdown@CWorkQueue@@QAEXXZ, _Size@CDbQueryResults@@QAEKXZ, _Skip@CEnumString@@UAGJK@Z, _Skip@CEnumWorkid@@UAGJK@Z, _SkipBlob@CMemDeSerStream@@UAEXK@Z, _SkipBlob@CQMemDeSerStream@@UAEXK@Z, _SkipByte@CMemDeSerStream@@UAEXXZ, _SkipByte@CQMemDeSerStream@@UAEXXZ, _SkipChar@CMemDeSerStream@@UAEXK@Z, _SkipChar@CQMemDeSerStream@@UAEXK@Z, _SkipDouble@CMemDeSerStream@@UAEXXZ, _SkipDouble@CQMemDeSerStream@@UAEXXZ, _SkipFloat@CMemDeSerStream@@UAEXXZ, _SkipFloat@CQMemDeSerStream@@UAEXXZ, _SkipGUID@CMemDeSerStream@@UAEXXZ, _SkipGUID@CQMemDeSerStream@@UAEXXZ, _SkipLong@CMemDeSerStream@@UAEXXZ, _SkipLong@CQMemDeSerStream@@UAEXXZ, _SkipULong@CMemDeSerStream@@UAEXXZ, _SkipULong@CQMemDeSerStream@@UAEXXZ, _SkipUShort@CMemDeSerStream@@UAEXXZ, _SkipUShort@CQMemDeSerStream@@UAEXXZ, _SkipWChar@CMemDeSerStream@@UAEXK@Z, _SkipWChar@CQMemDeSerStream@@UAEXK@Z, _Start@CCatalogAdmin@@QAEHXZ, _StartCI@CMachineAdmin@@QAEHXZ, _Stop@CCatalogAdmin@@QAEHXZ, _StopCI@CMachineAdmin@@QAEHXZ, _StopFiltering@CFilterDaemon@@QAEXXZ, _StrLen@CKey@@QBEIXZ, _StrLen@CKeyBuf@@QBEIXZ, _SystemExceptionTranslator@@YAXIPAU_EXCEPTION_POINTERS@@@Z, _TransferNode@CDbCmdTreeNode@@QAEXPAV1@@Z, _TreeCount@CRestriction@@QBEKXZ, _TunePerformance@CMachineAdmin@@QAEXHGG@Z, _URLEscapeW@@YGXPBGAAVCVirtualString@@KH@Z, _UnMarshall@CDbByGuid@@QAEHAAVPDeSerStream@@@Z, _UnMarshall@CDbCmdTreeNode@@QAEHAAVPDeSerStream@@@Z, _UnMarshall@CDbColId@@QAEHAAVPDeSerStream@@@Z, _UnMarshall@CDbContentVector@@QAEHAAVPDeSerStream@@@Z, _UnMarshall@CDbNumeric@@QAEHAAVPDeSerStream@@@Z, _UnMarshall@CDbParameter@@QAEHAAVPDeSerStream@@@Z, _UnMarshall@CDbProp@@QAEHAAVPDeSerStream@@@Z, _UnMarshall@CDbPropSet@@QAEHAAVPDeSerStream@@@Z, _UnMarshall@CDbProperties@@QAEHAAVPDeSerStream@@@Z, _UnMarshall@CRestriction@@SGPAV1@AAVPDeSerStream@@@Z, _UnMarshallTree@CDbCmdTreeNode@@SGPAV1@AAVPDeSerStream@@@Z, _UnPickle@@YGXHAAV_$XPtr@VCColumnSet@@@@AAV_$XPtr@VCRestriction@@@@AAV_$XPtr@VCSortSet@@@@AAV_$XPtr@VCCategorizationSet@@@@AAVCRowsetProperties@@AAV_$XPtr@VCPidMapper@@@@PAEK@Z, _Unmap@CRcovStrmTrans@@IAEXW4DataCopyNum@CRcovStorageHdr@@@Z, _UpdateContentIndex@@YGKPBG00H@Z, _UpdateDiskLowInfo@CDiskFreeStatus@@QAEXXZ, _VT_VARIANT_EQ@@YGHABUtagPROPVARIANT@@0@Z, _VT_VARIANT_GE@@YGHABUtagPROPVARIANT@@0@Z, _VT_VARIANT_GT@@YGHABUtagPROPVARIANT@@0@Z, _VT_VARIANT_LE@@YGHABUtagPROPVARIANT@@0@Z, _VT_VARIANT_LT@@YGHABUtagPROPVARIANT@@0@Z, _VT_VARIANT_NE@@YGHABUtagPROPVARIANT@@0@Z, _ValidateScopeRestriction@@YGHPAVCRestriction@@@Z, _Value@CDbScalarValue@@QAEXAAVCStorageVariant@@@Z, _VerifyConsistency@PRcovStorageObj@@QAEXXZ, _VerifyThreadHasAdminPrivilege@@YGXXZ, _WideCharToXArrayMultiByte@@YGKPBGKIAAV_$XArray@E@@@Z, _Write@CDynStream@@QAEXPAXK@Z, _Write@CRcovStrmTrans@@IAEXPBXK@Z, _WritePrimaryProperty@CPropStoreManager@@QAEJAAVCCompositePropRecordForWrites@@KABVCStorageVariant@@@Z, _WritePrimaryProperty@CPropStoreManager@@QAEJKKABVCStorageVariant@@@Z, _WriteProperty@CPropStoreManager@@QAEJAAVCCompositePropRecordForWrites@@KABVCStorageVariant@@@Z, _WriteProperty@CPropStoreManager@@QAEJKKABVCStorageVariant@@@Z, _WritePropertyInNewRecord@CPropStoreManager@@QAEKKABVCStorageVariant@@@Z, __FindGroupListAnchor@CDbNestingNode@@AAEPAVCDbProjectListAnchor@@XZ, __FindOrAddAnchor@CDbProjectNode@@AAEPAVCDbProjectListAnchor@@XZ, __FindOrAddAnchor@CDbSortNode@@AAEPAVCDbSortListAnchor@@XZ, __FindOrAddValueNode@CDbPropertyRestriction@@AAEPAVCDbScalarValue@@XZ, __ImpersonateIf@CImpersonateRemoteAccess@@AAEHPBG0K@Z, __dwLastCheckMoment@CGlobalPropFileRefresher@@0KA, __ftFile@CGlobalPropFileRefresher@@0U_FILETIME@@A, __pGlobalPropListFile@CLocalGlobalPropertyList@@0PAVCPropListFile@@A, __wcsFileName@CGlobalPropFileRefresher@@0PAGA, __wcstoui64@@YA_KPBGPAPAGH@Z, _ciDelete@@YGXPAX@Z, _ciIsValidPointer@@YGHPBX@Z, _ciNew@@YGPAXI@Z, _fgetsw@CFileBuffer@@QAEKAAV_$XGrowable@G$0BAE@@@@Z, _wcsipattern@@YGPAGPAGPBG@Z, BeginCacheTransaction, BindIFilterFromStorage, BindIFilterFromStream, CIBuildQueryNode, CIBuildQueryTree, CICreateCommand, CIGetGlobalPropertyList, CIMakeICommand, CIRestrictionToFullTree, CIState, CITextToFullTree, CITextToFullTreeEx, CITextToSelectTree, CITextToSelectTreeEx, CiCreateSecurityDescriptor, CiSvcMain, CollectCIISAPIPerformanceData, CollectCIPerformanceData, CollectFILTERPerformanceData, DllCanUnloadNow, DllGetClassObject, DllRegisterServer, DllUnregisterServer, DoneCIISAPIPerformanceData, DoneCIPerformanceData, DoneFILTERPerformanceData, EndCacheTransaction, FsCiShutdown, InitializeCIISAPIPerformanceData, InitializeCIPerformanceData, InitializeFILTERPerformanceData, LoadBinaryFilter, LoadIFilter, LoadTextFilter, LocateCatalogs, LocateCatalogsA, LocateCatalogsW, SetCatalogState, SetupCache, SetupCacheEx, SvcEntry_CiSvc, _AbortMerges@16, _ForceMasterMerge@16, _LoadBHIFilter@16, _StartFWCiSvcWork@12, _StopFWCiSvcWork@16

RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: DirectShow filter (47.4%)
Windows OCX File (29.1%)
Win32 EXE PECompact compressed (generic) (9.7%)
Win32 Executable MS Visual C++ (generic) (8.8%)
Win32 Executable Generic (2.0%)
sigcheck:
publisher....: Microsoft Corporation
copyright....: (c) Microsoft Corporation. Tous droits r_serv_s.
product......: Syst_me d_exploitation Microsoft_ Windows_
description..: Biblioth_que de requ_te et d_indexation de Index Server
original name: query.dll
internal name: query.dll
file version.: 5.1.2600.5847 (xpsp_sp3_gdr.090717-1358)
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

msasn1.dll:

Antivirus Version Dernière mise à jour Résultat
a-squared 4.5.0.41 2009.10.20 -
AhnLab-V3 5.0.0.2 2009.10.20 -
AntiVir 7.9.1.35 2009.10.20 -
Antiy-AVL 2.0.3.7 2009.10.21 -
Authentium 5.1.2.4 2009.10.21 -
Avast 4.8.1351.0 2009.10.20 -
AVG 8.5.0.420 2009.10.20 -
BitDefender 7.2 2009.10.21 -
CAT-QuickHeal 10.00 2009.10.20 -
ClamAV 0.94.1 2009.10.21 -
Comodo 2675 2009.10.21 -
DrWeb 5.0.0.12182 2009.10.21 -
eSafe 7.0.17.0 2009.10.19 -
eTrust-Vet 35.1.7075 2009.10.19 -
F-Prot 4.5.1.85 2009.10.20 -
F-Secure 9.0.15300.0 2009.10.20 -
Fortinet 3.120.0.0 2009.10.21 -
GData 19 2009.10.21 -
Ikarus T3.1.1.72.0 2009.10.21 -
Jiangmin 11.0.800 2009.10.20 -
K7AntiVirus 7.10.875 2009.10.20 -
Kaspersky 7.0.0.125 2009.10.21 -
McAfee 5777 2009.10.20 -
McAfee+Artemis 5777 2009.10.20 -
McAfee-GW-Edition 6.8.5 2009.10.21 -
Microsoft 1.5101 2009.10.20 -
NOD32 4527 2009.10.20 -
Norman 6.03.02 2009.10.20 -
nProtect 2009.1.8.0 2009.10.20 -
Panda 10.0.2.2 2009.10.20 -
PCTools 4.4.2.0 2009.10.19 -
Prevx 3.0 2009.10.21 -
Rising 21.52.20.00 2009.10.21 -
Sophos 4.46.0 2009.10.21 -
Sunbelt 3.2.1858.2 2009.10.20 -
Symantec 1.4.4.12 2009.10.21 -
TheHacker 6.5.0.2.049 2009.10.20 -
TrendMicro 8.950.0.1094 2009.10.21 -
VBA32 3.12.10.11 2009.10.20 -
ViRobot 2009.10.21.1997 2009.10.21 -
VirusBuster 4.6.5.0 2009.10.20 -
Information additionnelle
File size: 58880 bytes
MD5...: 6bf05fb48e745e5ee0abf9c029453e84
SHA1..: 1d978d6d5517886a3990bf444f2d7abb0983809e
SHA256: f9772b5d24b4892e2403d02b2adfec2df01ee15f3b2b6e483a6821d26cf92ccf
ssdeep: 1536:0Vu3fbmRY6qb9cyiYLwmkRHotM4H7jvY9SIWB7Ox3lA/:0Q3fbmRY6qb9cy
i7RRHot3IwIWlU3q/

PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x33a1
timedatestamp.....: 0x4aa180e6 (Fri Sep 04 21:04:38 2009)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xd623 0xd800 6.63 fdee2bc0b8a132e6ff7b5834ca220069
.data 0xf000 0x38 0x200 0.28 dd17253f931693a8867aad45d3087ecb
.rsrc 0x10000 0x3f0 0x400 3.39 e76e2c1c681c351cd241cf05e9ee49d4
.reloc 0x11000 0x294 0x400 4.58 0ae2daf5cf2a4de723bdd7fc74f72fa7

( 3 imports )
> KERNEL32.dll: LocalReAlloc, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, MultiByteToWideChar, SetLastError, DisableThreadLibraryCalls, lstrcpyA, LoadLibraryA, GetProcAddress, CloseHandle, LocalFree, LocalAlloc, lstrlenA, lstrcmpA, FreeLibrary
> msvcrt.dll: _adjust_fdiv, malloc, _initterm, free, _ultoa, _ui64toa, _atoi64, memmove, _fpclass, _ftol, _finite, frexp, memchr, ldexp, strchr, strtod
> USER32.dll: wsprintfA

( 266 exports )
ASN1BERDecBitString, ASN1BERDecBitString2, ASN1BERDecBool, ASN1BERDecChar16String, ASN1BERDecChar32String, ASN1BERDecCharString, ASN1BERDecCheck, ASN1BERDecDouble, ASN1BERDecEndOfContents, ASN1BERDecEoid, ASN1BERDecExplicitTag, ASN1BERDecFlush, ASN1BERDecGeneralizedTime, ASN1BERDecLength, ASN1BERDecMultibyteString, ASN1BERDecNotEndOfContents, ASN1BERDecNull, ASN1BERDecObjectIdentifier, ASN1BERDecObjectIdentifier2, ASN1BERDecOctetString, ASN1BERDecOctetString2, ASN1BERDecOpenType, ASN1BERDecOpenType2, ASN1BERDecPeekTag, ASN1BERDecS16Val, ASN1BERDecS32Val, ASN1BERDecS8Val, ASN1BERDecSXVal, ASN1BERDecSkip, ASN1BERDecTag, ASN1BERDecU16Val, ASN1BERDecU32Val, ASN1BERDecU8Val, ASN1BERDecUTCTime, ASN1BERDecUTF8String, ASN1BERDecZeroChar16String, ASN1BERDecZeroChar32String, ASN1BERDecZeroCharString, ASN1BERDecZeroMultibyteString, ASN1BERDotVal2Eoid, ASN1BEREncBitString, ASN1BEREncBool, ASN1BEREncChar16String, ASN1BEREncChar32String, ASN1BEREncCharString, ASN1BEREncCheck, ASN1BEREncDouble, ASN1BEREncEndOfContents, ASN1BEREncEoid, ASN1BEREncExplicitTag, ASN1BEREncFlush, ASN1BEREncGeneralizedTime, ASN1BEREncLength, ASN1BEREncMultibyteString, ASN1BEREncNull, ASN1BEREncObjectIdentifier, ASN1BEREncObjectIdentifier2, ASN1BEREncOctetString, ASN1BEREncOpenType, ASN1BEREncRemoveZeroBits, ASN1BEREncS32, ASN1BEREncSX, ASN1BEREncTag, ASN1BEREncU32, ASN1BEREncUTCTime, ASN1BEREncUTF8String, ASN1BEREncZeroMultibyteString, ASN1BEREoid2DotVal, ASN1BEREoid_free, ASN1CEREncBeginBlk, ASN1CEREncBitString, ASN1CEREncChar16String, ASN1CEREncChar32String, ASN1CEREncCharString, ASN1CEREncEndBlk, ASN1CEREncFlushBlkElement, ASN1CEREncGeneralizedTime, ASN1CEREncMultibyteString, ASN1CEREncNewBlkElement, ASN1CEREncOctetString, ASN1CEREncUTCTime, ASN1CEREncZeroMultibyteString, ASN1DecAbort, ASN1DecAlloc, ASN1DecDone, ASN1DecRealloc, ASN1DecSetError, ASN1EncAbort, ASN1EncDone, ASN1EncSetError, ASN1Free, ASN1PERDecAlignment, ASN1PERDecBit, ASN1PERDecBits, ASN1PERDecBoolean, ASN1PERDecChar16String, ASN1PERDecChar32String, ASN1PERDecCharString, ASN1PERDecCharStringNoAlloc, ASN1PERDecComplexChoice, ASN1PERDecDouble, ASN1PERDecExtension, ASN1PERDecFlush, ASN1PERDecFragmented, ASN1PERDecFragmentedChar16String, ASN1PERDecFragmentedChar32String, ASN1PERDecFragmentedCharString, ASN1PERDecFragmentedExtension, ASN1PERDecFragmentedIntx, ASN1PERDecFragmentedLength, ASN1PERDecFragmentedTableChar16String, ASN1PERDecFragmentedTableChar32String, ASN1PERDecFragmentedTableCharString, ASN1PERDecFragmentedUIntx, ASN1PERDecFragmentedZeroChar16String, ASN1PERDecFragmentedZeroChar32String, ASN1PERDecFragmentedZeroCharString, ASN1PERDecFragmentedZeroTableChar16String, ASN1PERDecFragmentedZeroTableChar32String, ASN1PERDecFragmentedZeroTableCharString, ASN1PERDecGeneralizedTime, ASN1PERDecInteger, ASN1PERDecMultibyteString, ASN1PERDecN16Val, ASN1PERDecN32Val, ASN1PERDecN8Val, ASN1PERDecNormallySmallExtension, ASN1PERDecObjectIdentifier, ASN1PERDecObjectIdentifier2, ASN1PERDecOctetString_FixedSize, ASN1PERDecOctetString_FixedSizeEx, ASN1PERDecOctetString_NoSize, ASN1PERDecOctetString_VarSize, ASN1PERDecOctetString_VarSizeEx, ASN1PERDecS16Val, ASN1PERDecS32Val, ASN1PERDecS8Val, ASN1PERDecSXVal, ASN1PERDecSeqOf_NoSize, ASN1PERDecSeqOf_VarSize, ASN1PERDecSimpleChoice, ASN1PERDecSimpleChoiceEx, ASN1PERDecSkipBits, ASN1PERDecSkipFragmented, ASN1PERDecSkipNormallySmall, ASN1PERDecSkipNormallySmallExtension, ASN1PERDecSkipNormallySmallExtensionFragmented, ASN1PERDecTableChar16String, ASN1PERDecTableChar32String, ASN1PERDecTableCharString, ASN1PERDecTableCharStringNoAlloc, ASN1PERDecU16Val, ASN1PERDecU32Val, ASN1PERDecU8Val, ASN1PERDecUTCTime, ASN1PERDecUXVal, ASN1PERDecUnsignedInteger, ASN1PERDecUnsignedShort, ASN1PERDecZeroChar16String, ASN1PERDecZeroChar32String, ASN1PERDecZeroCharString, ASN1PERDecZeroCharStringNoAlloc, ASN1PERDecZeroTableChar16String, ASN1PERDecZeroTableChar32String, ASN1PERDecZeroTableCharString, ASN1PERDecZeroTableCharStringNoAlloc, ASN1PEREncAlignment, ASN1PEREncBit, ASN1PEREncBitIntx, ASN1PEREncBitVal, ASN1PEREncBits, ASN1PEREncBoolean, ASN1PEREncChar16String, ASN1PEREncChar32String, ASN1PEREncCharString, ASN1PEREncCheckExtensions, ASN1PEREncComplexChoice, ASN1PEREncDouble, ASN1PEREncExtensionBitClear, ASN1PEREncExtensionBitSet, ASN1PEREncFlush, ASN1PEREncFlushFragmentedToParent, ASN1PEREncFragmented, ASN1PEREncFragmentedChar16String, ASN1PEREncFragmentedChar32String, ASN1PEREncFragmentedCharString, ASN1PEREncFragmentedIntx, ASN1PEREncFragmentedLength, ASN1PEREncFragmentedTableChar16String, ASN1PEREncFragmentedTableChar32String, ASN1PEREncFragmentedTableCharString, ASN1PEREncFragmentedUIntx, ASN1PEREncGeneralizedTime, ASN1PEREncInteger, ASN1PEREncMultibyteString, ASN1PEREncNormallySmall, ASN1PEREncNormallySmallBits, ASN1PEREncObjectIdentifier, ASN1PEREncObjectIdentifier2, ASN1PEREncOctetString_FixedSize, ASN1PEREncOctetString_FixedSizeEx, ASN1PEREncOctetString_NoSize, ASN1PEREncOctetString_VarSize, ASN1PEREncOctetString_VarSizeEx, ASN1PEREncOctets, ASN1PEREncRemoveZeroBits, ASN1PEREncSeqOf_NoSize, ASN1PEREncSeqOf_VarSize, ASN1PEREncSimpleChoice, ASN1PEREncSimpleChoiceEx, ASN1PEREncTableChar16String, ASN1PEREncTableChar32String, ASN1PEREncTableCharString, ASN1PEREncUTCTime, ASN1PEREncUnsignedInteger, ASN1PEREncUnsignedShort, ASN1PEREncZero, ASN1PERFreeSeqOf, ASN1_CloseDecoder, ASN1_CloseEncoder, ASN1_CloseEncoder2, ASN1_CloseModule, ASN1_CreateDecoder, ASN1_CreateDecoderEx, ASN1_CreateEncoder, ASN1_CreateModule, ASN1_Decode, ASN1_Encode, ASN1_FreeDecoded, ASN1_FreeEncoded, ASN1_GetDecoderOption, ASN1_GetEncoderOption, ASN1_SetDecoderOption, ASN1_SetEncoderOption, ASN1bitstring_cmp, ASN1bitstring_free, ASN1char16string_cmp, ASN1char16string_free, ASN1char32string_cmp, ASN1char32string_free, ASN1charstring_cmp, ASN1charstring_free, ASN1generalizedtime_cmp, ASN1intx2int32, ASN1intx2uint32, ASN1intx_add, ASN1intx_free, ASN1intx_setuint32, ASN1intx_sub, ASN1intx_uoctets, ASN1intxisuint32, ASN1objectidentifier2_cmp, ASN1objectidentifier_cmp, ASN1objectidentifier_free, ASN1octetstring_cmp, ASN1octetstring_free, ASN1open_cmp, ASN1open_free, ASN1uint32_uoctets, ASN1utctime_cmp, ASN1utf8string_free, ASN1ztchar16string_cmp, ASN1ztchar16string_free, ASN1ztchar32string_free, ASN1ztcharstring_cmp, ASN1ztcharstring_free

RDS...: NSRL Reference Data Set
-
pdfid.: -
sigcheck:
publisher....: Microsoft Corporation
copyright....: (c) Microsoft Corporation. All rights reserved.
product......: Microsoft_ Windows_ Operating System
description..: ASN.1 Runtime APIs
original name: msasn1.dll
internal name: msasn1.dll
file version.: 5.1.2600.5875 (xpsp_sp3_gdr.090904-1413)
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

trid..: Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)

atapi.sys:

Antivirus Version Dernière mise à jour Résultat
a-squared 4.5.0.41 2009.10.20 -
AhnLab-V3 5.0.0.2 2009.10.20 -
AntiVir 7.9.1.35 2009.10.20 -
Antiy-AVL 2.0.3.7 2009.10.21 -
Authentium 5.1.2.4 2009.10.21 -
Avast 4.8.1351.0 2009.10.20 -
AVG 8.5.0.420 2009.10.20 -
BitDefender 7.2 2009.10.21 -
CAT-QuickHeal 10.00 2009.10.20 -
ClamAV 0.94.1 2009.10.21 -
Comodo 2675 2009.10.21 -
DrWeb 5.0.0.12182 2009.10.21 -
eSafe 7.0.17.0 2009.10.19 Win32.Rootkit
eTrust-Vet 35.1.7075 2009.10.19 -
F-Prot 4.5.1.85 2009.10.20 -
F-Secure 9.0.15300.0 2009.10.20 -
Fortinet 3.120.0.0 2009.10.21 -
GData 19 2009.10.21 -
Ikarus T3.1.1.72.0 2009.10.21 -
Jiangmin 11.0.800 2009.10.20 -
K7AntiVirus 7.10.875 2009.10.20 -
Kaspersky 7.0.0.125 2009.10.21 -
McAfee 5777 2009.10.20 -
McAfee+Artemis 5777 2009.10.20 -
McAfee-GW-Edition 6.8.5 2009.10.21 -
Microsoft 1.5101 2009.10.20 -
NOD32 4527 2009.10.20 -
Norman 6.03.02 2009.10.20 -
nProtect 2009.1.8.0 2009.10.20 -
Panda 10.0.2.2 2009.10.20 -
PCTools 4.4.2.0 2009.10.19 -
Prevx 3.0 2009.10.21 -
Rising 21.52.20.00 2009.10.21 -
Sophos 4.46.0 2009.10.21 -
Sunbelt 3.2.1858.2 2009.10.20 -
Symantec 1.4.4.12 2009.10.21 -
TheHacker 6.5.0.2.049 2009.10.20 -
TrendMicro 8.950.0.1094 2009.10.21 -
VBA32 3.12.10.11 2009.10.20 -
ViRobot 2009.10.21.1997 2009.10.21 -
VirusBuster 4.6.5.0 2009.10.20 -
Information additionnelle
File size: 96512 bytes
MD5...: 9f3a2f5aa6875c72bf062c712cfa2674
SHA1..: a719156e8ad67456556a02c34e762944234e7a44
SHA256: b4df1d2c56a593c6b54de57395e3b51d288f547842893b32b0f59228a0cf70b9
ssdeep: 1536:MwXpkfV74F1D7yNEZIHRRJMohmus27G1j/XBoDQi7oaRMJfYHFktprll1Kb
DD0uu:MQ+N74vkEZIxMohjsimBoDTRMBwFktZu

PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x159f7
timedatestamp.....: 0x4802539d (Sun Apr 13 18:40:29 2008)
machinetype.......: 0x14c (I386)

( 9 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x380 0x97ba 0x9800 6.45 0d7d81391f33c6450a81be1e3ac8c7b7
NONPAGE 0x9b80 0x18e8 0x1900 6.48 c74a833abd81cc5d037de168e055ad29
.rdata 0xb480 0xa64 0xa80 4.31 8523651899e28819a14bf9415af25708
.data 0xbf00 0xd94 0xe00 0.45 3575b51634ae7a56f55f1ee0a6213834
PAGESCAN 0xcd00 0x157f 0x1580 6.20 dc4c309c4db9576daa752fdd125fccf9
PAGE 0xe280 0x61da 0x6200 6.46 40b83d4d552384e58a03517a98eb4863
INIT 0x14480 0x22be 0x2300 6.47 906462abc478368424ea462d5868d2e3
.rsrc 0x16780 0x3e0 0x400 3.36 8fd2d82e745b289c28bc056d3a0d62ab
.reloc 0x16b80 0xd20 0xd80 6.39 ce2b0898cc0e40b618e5df9099f6be45

( 3 imports )
> ntoskrnl.exe: RtlInitUnicodeString, swprintf, KeSetEvent, IoCreateSymbolicLink, IoGetConfigurationInformation, IoDeleteSymbolicLink, MmFreeMappingAddress, IoFreeErrorLogEntry, IoDisconnectInterrupt, MmUnmapIoSpace, ObReferenceObjectByPointer, IofCompleteRequest, RtlCompareUnicodeString, IofCallDriver, MmAllocateMappingAddress, IoAllocateErrorLogEntry, IoConnectInterrupt, IoDetachDevice, KeWaitForSingleObject, KeInitializeEvent, KeCancelTimer, RtlAnsiStringToUnicodeString, RtlInitAnsiString, IoBuildDeviceIoControlRequest, IoQueueWorkItem, MmMapIoSpace, IoInvalidateDeviceRelations, IoReportDetectedDevice, IoReportResourceForDetection, RtlxAnsiStringToUnicodeSize, NlsMbCodePageTag, PoRequestPowerIrp, KeInsertByKeyDeviceQueue, PoRegisterDeviceForIdleDetection, sprintf, MmMapLockedPagesSpecifyCache, ObfDereferenceObject, IoGetAttachedDeviceReference, IoInvalidateDeviceState, ZwClose, ObReferenceObjectByHandle, ZwCreateDirectoryObject, IoBuildSynchronousFsdRequest, PoStartNextPowerIrp, IoCreateDevice, RtlCopyUnicodeString, IoAllocateDriverObjectExtension, RtlQueryRegistryValues, ZwOpenKey, RtlFreeUnicodeString, IoStartTimer, KeInitializeTimer, IoInitializeTimer, KeInitializeDpc, KeInitializeSpinLock, IoInitializeIrp, ZwCreateKey, RtlAppendUnicodeStringToString, RtlIntegerToUnicodeString, ZwSetValueKey, KeInsertQueueDpc, KefAcquireSpinLockAtDpcLevel, IoStartPacket, KefReleaseSpinLockFromDpcLevel, IoBuildAsynchronousFsdRequest, IoFreeMdl, MmUnlockPages, IoWriteErrorLogEntry, KeRemoveByKeyDeviceQueue, MmMapLockedPagesWithReservedMapping, MmUnmapReservedMapping, KeSynchronizeExecution, IoStartNextPacket, KeBugCheckEx, KeRemoveDeviceQueue, KeSetTimer, _allmul, MmProbeAndLockPages, _except_handler3, PoSetPowerState, IoOpenDeviceRegistryKey, RtlWriteRegistryValue, RtlDeleteRegistryValue, _aulldiv, strstr, _strupr, KeQuerySystemTime, IoWMIRegistrationControl, KeTickCount, IoAttachDeviceToDeviceStack, IoDeleteDevice, ExAllocatePoolWithTag, IoAllocateWorkItem, IoAllocateIrp, IoAllocateMdl, MmBuildMdlForNonPagedPool, MmLockPagableDataSection, IoGetDriverObjectExtension, MmUnlockPagableImageSection, ExFreePoolWithTag, IoFreeIrp, IoFreeWorkItem, InitSafeBootMode, RtlCompareMemory, PoCallDriver, memmove, MmHighestUserAddress
> HAL.dll: KfAcquireSpinLock, READ_PORT_UCHAR, KeGetCurrentIrql, KfRaiseIrql, KfLowerIrql, HalGetInterruptVector, HalTranslateBusAddress, KeStallExecutionProcessor, KfReleaseSpinLock, READ_PORT_BUFFER_USHORT, READ_PORT_USHORT, WRITE_PORT_BUFFER_USHORT, WRITE_PORT_UCHAR
> WMILIB.SYS: WmiSystemControl, WmiCompleteRequest

( 0 exports )

RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher....: Microsoft Corporation
copyright....: (c) Microsoft Corporation. All rights reserved.
product......: Microsoft_ Windows_ Operating System
description..: IDE/ATAPI Port Driver
original name: atapi.sys
internal name: atapi.sys
file version.: 5.1.2600.5512 (xpsp.080413-2108)
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=9f3a2f5aa6875c72bf062c712cfa2674' target='_blank'>https://www.symantec.com?md5=9f3a2f5aa6875c72bf062c712cfa2674</a>
packers (Kaspersky): PE_Patch

drivers-atapi.sys:

Antivirus Version Dernière mise à jour Résultat
a-squared 4.5.0.41 2009.10.20 -
AhnLab-V3 5.0.0.2 2009.10.20 -
AntiVir 7.9.1.35 2009.10.20 -
Antiy-AVL 2.0.3.7 2009.10.21 -
Authentium 5.1.2.4 2009.10.21 -
Avast 4.8.1351.0 2009.10.20 -
AVG 8.5.0.420 2009.10.20 -
BitDefender 7.2 2009.10.21 -
CAT-QuickHeal 10.00 2009.10.20 -
ClamAV 0.94.1 2009.10.21 -
Comodo 2675 2009.10.21 -
DrWeb 5.0.0.12182 2009.10.21 -
eSafe 7.0.17.0 2009.10.19 Win32.Rootkit
eTrust-Vet 35.1.7075 2009.10.19 -
F-Prot 4.5.1.85 2009.10.20 -
F-Secure 9.0.15300.0 2009.10.20 -
Fortinet 3.120.0.0 2009.10.21 -
GData 19 2009.10.21 -
Ikarus T3.1.1.72.0 2009.10.21 -
Jiangmin 11.0.800 2009.10.20 -
K7AntiVirus 7.10.875 2009.10.20 -
Kaspersky 7.0.0.125 2009.10.21 -
McAfee 5777 2009.10.20 -
McAfee+Artemis 5777 2009.10.20 -
McAfee-GW-Edition 6.8.5 2009.10.21 -
Microsoft 1.5101 2009.10.20 -
NOD32 4527 2009.10.20 -
Norman 6.03.02 2009.10.20 -
nProtect 2009.1.8.0 2009.10.20 -
Panda 10.0.2.2 2009.10.20 -
PCTools 4.4.2.0 2009.10.19 -
Prevx 3.0 2009.10.21 -
Rising 21.52.20.00 2009.10.21 -
Sophos 4.46.0 2009.10.21 -
Sunbelt 3.2.1858.2 2009.10.20 -
Symantec 1.4.4.12 2009.10.21 -
TheHacker 6.5.0.2.049 2009.10.20 -
TrendMicro 8.950.0.1094 2009.10.21 -
VBA32 3.12.10.11 2009.10.20 -
ViRobot 2009.10.21.1997 2009.10.21 -
VirusBuster 4.6.5.0 2009.10.20 -
Information additionnelle
File size: 96512 bytes
MD5...: 9f3a2f5aa6875c72bf062c712cfa2674
SHA1..: a719156e8ad67456556a02c34e762944234e7a44
SHA256: b4df1d2c56a593c6b54de57395e3b51d288f547842893b32b0f59228a0cf70b9
ssdeep: 1536:MwXpkfV74F1D7yNEZIHRRJMohmus27G1j/XBoDQi7oaRMJfYHFktprll1Kb
DD0uu:MQ+N74vkEZIxMohjsimBoDTRMBwFktZu

PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x159f7
timedatestamp.....: 0x4802539d (Sun Apr 13 18:40:29 2008)
machinetype.......: 0x14c (I386)

( 9 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x380 0x97ba 0x9800 6.45 0d7d81391f33c6450a81be1e3ac8c7b7
NONPAGE 0x9b80 0x18e8 0x1900 6.48 c74a833abd81cc5d037de168e055ad29
.rdata 0xb480 0xa64 0xa80 4.31 8523651899e28819a14bf9415af25708
.data 0xbf00 0xd94 0xe00 0.45 3575b51634ae7a56f55f1ee0a6213834
PAGESCAN 0xcd00 0x157f 0x1580 6.20 dc4c309c4db9576daa752fdd125fccf9
PAGE 0xe280 0x61da 0x6200 6.46 40b83d4d552384e58a03517a98eb4863
INIT 0x14480 0x22be 0x2300 6.47 906462abc478368424ea462d5868d2e3
.rsrc 0x16780 0x3e0 0x400 3.36 8fd2d82e745b289c28bc056d3a0d62ab
.reloc 0x16b80 0xd20 0xd80 6.39 ce2b0898cc0e40b618e5df9099f6be45

( 3 imports )
> ntoskrnl.exe: RtlInitUnicodeString, swprintf, KeSetEvent, IoCreateSymbolicLink, IoGetConfigurationInformation, IoDeleteSymbolicLink, MmFreeMappingAddress, IoFreeErrorLogEntry, IoDisconnectInterrupt, MmUnmapIoSpace, ObReferenceObjectByPointer, IofCompleteRequest, RtlCompareUnicodeString, IofCallDriver, MmAllocateMappingAddress, IoAllocateErrorLogEntry, IoConnectInterrupt, IoDetachDevice, KeWaitForSingleObject, KeInitializeEvent, KeCancelTimer, RtlAnsiStringToUnicodeString, RtlInitAnsiString, IoBuildDeviceIoControlRequest, IoQueueWorkItem, MmMapIoSpace, IoInvalidateDeviceRelations, IoReportDetectedDevice, IoReportResourceForDetection, RtlxAnsiStringToUnicodeSize, NlsMbCodePageTag, PoRequestPowerIrp, KeInsertByKeyDeviceQueue, PoRegisterDeviceForIdleDetection, sprintf, MmMapLockedPagesSpecifyCache, ObfDereferenceObject, IoGetAttachedDeviceReference, IoInvalidateDeviceState, ZwClose, ObReferenceObjectByHandle, ZwCreateDirectoryObject, IoBuildSynchronousFsdRequest, PoStartNextPowerIrp, IoCreateDevice, RtlCopyUnicodeString, IoAllocateDriverObjectExtension, RtlQueryRegistryValues, ZwOpenKey, RtlFreeUnicodeString, IoStartTimer, KeInitializeTimer, IoInitializeTimer, KeInitializeDpc, KeInitializeSpinLock, IoInitializeIrp, ZwCreateKey, RtlAppendUnicodeStringToString, RtlIntegerToUnicodeString, ZwSetValueKey, KeInsertQueueDpc, KefAcquireSpinLockAtDpcLevel, IoStartPacket, KefReleaseSpinLockFromDpcLevel, IoBuildAsynchronousFsdRequest, IoFreeMdl, MmUnlockPages, IoWriteErrorLogEntry, KeRemoveByKeyDeviceQueue, MmMapLockedPagesWithReservedMapping, MmUnmapReservedMapping, KeSynchronizeExecution, IoStartNextPacket, KeBugCheckEx, KeRemoveDeviceQueue, KeSetTimer, _allmul, MmProbeAndLockPages, _except_handler3, PoSetPowerState, IoOpenDeviceRegistryKey, RtlWriteRegistryValue, RtlDeleteRegistryValue, _aulldiv, strstr, _strupr, KeQuerySystemTime, IoWMIRegistrationControl, KeTickCount, IoAttachDeviceToDeviceStack, IoDeleteDevice, ExAllocatePoolWithTag, IoAllocateWorkItem, IoAllocateIrp, IoAllocateMdl, MmBuildMdlForNonPagedPool, MmLockPagableDataSection, IoGetDriverObjectExtension, MmUnlockPagableImageSection, ExFreePoolWithTag, IoFreeIrp, IoFreeWorkItem, InitSafeBootMode, RtlCompareMemory, PoCallDriver, memmove, MmHighestUserAddress
> HAL.dll: KfAcquireSpinLock, READ_PORT_UCHAR, KeGetCurrentIrql, KfRaiseIrql, KfLowerIrql, HalGetInterruptVector, HalTranslateBusAddress, KeStallExecutionProcessor, KfReleaseSpinLock, READ_PORT_BUFFER_USHORT, READ_PORT_USHORT, WRITE_PORT_BUFFER_USHORT, WRITE_PORT_UCHAR
> WMILIB.SYS: WmiSystemControl, WmiCompleteRequest

( 0 exports )

RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher....: Microsoft Corporation
copyright....: (c) Microsoft Corporation. All rights reserved.
product......: Microsoft_ Windows_ Operating System
description..: IDE/ATAPI Port Driver
original name: atapi.sys
internal name: atapi.sys
file version.: 5.1.2600.5512 (xpsp.080413-2108)
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=9f3a2f5aa6875c72bf062c712cfa2674' target='_blank'>https://www.symantec.com?md5=9f3a2f5aa6875c72bf062c712cfa2674</a>
packers (Kaspersky): PE_Patch