Qvod 9X

显示全部楼层 · 发表于 2009-7-12 17:14:06

kill all
Begin scan in 'G:\virus\Qvod 9X'
G:\virus\Qvod 9X\Qvod (2).exe
  [0] Archive type: RSRC
[DETECTION] Is the TR/Dropper.Gen Trojan
G:\virus\Qvod 9X\Qvod (3).exe
  [0] Archive type: RSRC
[DETECTION] Is the TR/Dropper.Gen Trojan
G:\virus\Qvod 9X\Qvod (4).exe
  [0] Archive type: RSRC
[DETECTION] Is the TR/Dropper.Gen Trojan
G:\virus\Qvod 9X\Qvod (5).exe
  [0] Archive type: RSRC
[DETECTION] Is the TR/Dropper.Gen Trojan
G:\virus\Qvod 9X\Qvod (6).exe
  [0] Archive type: RSRC
[DETECTION] Is the TR/Dropper.Gen Trojan
G:\virus\Qvod 9X\Qvod (7).exe
  [0] Archive type: RSRC
[DETECTION] Is the TR/Dropper.Gen Trojan
G:\virus\Qvod 9X\Qvod (8).exe
  [0] Archive type: RSRC
[DETECTION] Is the TR/Dropper.Gen Trojan
G:\virus\Qvod 9X\Qvod (9).exe
  [0] Archive type: RSRC
[DETECTION] Is the TR/Dropper.Gen Trojan
G:\virus\Qvod 9X\Qvod.exe
  [0] Archive type: RSRC
[DETECTION] Is the TR/Dropper.Gen Trojan

显示全部楼层 · 发表于 2009-7-12 17:15:37

瑞星解压剩下三个
卡巴全部PASS

显示全部楼层 · 发表于 2009-7-12 17:17:25

RS20090712171243234193
RS20090712171310109373
RS20090712171337781404

显示全部楼层 · 发表于 2009-7-12 17:22:19

查询编号：RS20090712171243234193
文件名称：Qvod (3).exe
文件MD5：4EC3D21A9E83FF83FB0F16A35C88DA5E
文件状态：病毒文件
病毒名称：Trojan.Win32.Generic.51EA7242
解决版本：22.03.06.16

查询编号：RS20090712171310109373
文件名称：Qvod (4).exe
文件MD5：1787AEE5F8B7FC53638C80737778CE12
文件状态：病毒文件
病毒名称：Trojan.Win32.Generic.51EA7245
解决版本：22.03.06.16

查询编号：RS20090712171337781404
文件名称：Qvod (7).exe
文件MD5：E2E074D13E9FE60D2251FE023AEA7C24
文件状态：病毒文件
病毒名称：Trojan.Win32.Generic.51EA7246
解决版本：22.03.06.16

显示全部楼层 · 发表于 2009-7-12 17:28:33

2009-07-12 17:25:59 创建文件    操作:阻止
进程路径:E:\Qvod 9X\Qvod 9X\Qvod.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\AB0MQoTJWZ
触发规则:所有程序规则->Documents and Settings文件夹设置->?:\Documents and Settings\*\Local Settings\Temp\*

2009-07-12 17:25:59 创建文件    操作:阻止
进程路径:E:\Qvod 9X\Qvod 9X\Qvod.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\FcEzDR3WvU
触发规则:所有程序规则->Documents and Settings文件夹设置->?:\Documents and Settings\*\Local Settings\Temp\*

2009-07-12 17:25:59 运行应用程序    操作:阻止并结束进程
进程路径:E:\Qvod 9X\Qvod 9X\Qvod.exe
文件路径:C:\WINDOWS\system32\cmd.exe
命令行:/c copy "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AB0MQoTJWZ" /b + "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\FcEzDR3WvU" /b "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\3.exe"
触发规则:所有程序规则->系统程序_黑名单->*\cmd.exe

显示全部楼层 · 发表于 2009-7-12 17:28:42

过卡巴KAV6.0.

大蜘蛛杀
Qvod (2).exe\data001;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X\Qvod (2).exe;Trojan.MulDrop.32557;;
Qvod (2).exe;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X;Container contains infected objects;;
Qvod (3).exe\data001;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X\Qvod (3).exe;Trojan.MulDrop.32557;;
Qvod (3).exe;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X;Container contains infected objects;;
Qvod (4).exe\data001;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X\Qvod (4).exe;Trojan.MulDrop.32557;;
Qvod (4).exe;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X;Container contains infected objects;;
Qvod (5).exe\data001;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X\Qvod (5).exe;Trojan.MulDrop.32557;;
Qvod (5).exe;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X;Container contains infected objects;;
Qvod (6).exe\data001;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X\Qvod (6).exe;Trojan.MulDrop.32557;;
Qvod (6).exe;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X;Container contains infected objects;;
Qvod (7).exe\data001;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X\Qvod (7).exe;Trojan.MulDrop.32557;;
Qvod (7).exe;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X;Container contains infected objects;;
Qvod (8).exe\data001;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X\Qvod (8).exe;Trojan.MulDrop.32557;;
Qvod (8).exe;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X;Container contains infected objects;;
Qvod (9).exe\data001;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X\Qvod (9).exe;Trojan.MulDrop.32557;;
Qvod (9).exe;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X;Container contains infected objects;;
Qvod.exe\data001;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X\Qvod.exe;Trojan.MulDrop.32557;;
Qvod.exe;D:\My Documents\桌面\test\Qvod_9X\Qvod 9X;Container contains infected objects;;

显示全部楼层 · 发表于 2009-7-12 17:36:54

TR/Dropper.Gen Trojan X9

显示全部楼层 · 发表于 2009-7-12 17:44:52

瑞星2010

显示全部楼层 · 发表于 2009-7-12 18:34:57

KIS8.0 Kill
2009-7-12 18:33:53 http://bbs.kafan.cn/attachment.p ... 30&t=1247394816 Internet Explorer 处理错误: Trojan-Dropper.Win32.Mudrop.bmj 启发式分析计算的威胁级别值较高
2009-7-12 18:33:53 http://bbs.kafan.cn/attachment.p ... ;t=1247394816//Qvod 9X/Qvod (2).exe//iMUL//NSPack Internet Explorer 拒绝: Trojan-Dropper.Win32.Mudrop.bmj 启发式分析计算的威胁级别值较高
2009-7-12 18:33:53 http://bbs.kafan.cn/attachment.p ... ;t=1247394816//Qvod 9X/Qvod (2).exe//iMUL//NSPack Internet Explorer 检测到: Trojan-Dropper.Win32.Mudrop.bmj 启发式分析计算的威胁级别值较高

[病毒样本] Qvod 9X

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源