QVOD样本

taoyuan237

下载地址
http://dl.qvod994.com/qvodsetup.exe
TO RS
查询编号：RS20090707092633250262

taiyangshenqi

DR/Delphi.Gen

fatezero

木马程序 Trojan-Dropper.Win32.Mudrop.bby

schumi小粉

McAfee 已自动阻止和删除 特洛伊木马程序。

关于此 特洛伊木马程序
已检测到: PWS-OnlineGames.eb.gen.b (特洛伊木马程序), PWS-OnlineGames.eb.gen.b (特洛伊木马程序)
位置: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\2NDTJCFX\qvodsetup[1].exe


2009-07-07 10:54:37 文件保护(修改文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\23\qvodsetup.exe
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temp\qvod690.exe
2009-07-07 10:54:37 文件保护(修改文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\23\qvodsetup.exe
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temp\qvod.exe
2009-07-07 10:54:37 应用程序保护(修改其它进程内存)     操作:阻止
进程路径:C:\WINDOWS\explorer.exe
目标进程:C:\Documents and Settings\Administrator\桌面\新建文件夹\23\qvodsetup.exe

[ 本帖最后由 schumi小粉 于 2009-7-7 10:54 编辑 ]

kkgh

费尔  Trojan.Delf.ify.dpsf

smarty

Microsoft Security Essentials

尤金卡巴斯基

Hello,

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.
Trojan-Dropper.Win32.Mudrop.bcv


Regards, Tatarinov Ivan
Virus Analyst

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com