大量伪快播(Qvod.exe,click.exe,duogua.exe),天天更新 (637 楼有新)

sam.to

aa25697d49e068487d348e1ab90c6280   Qvodplayer.exe4
214029fd60c815bfd117ead495461a78   duogua.exe3
e817c649369eca9137d177d9998e9906   click.exe2
d57356ce29c17cd227ea9ed85574811b   Qvodplayer.exe1

to kl,ll,mcafee,comodo,eset,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25809440	Qvodplayer.exe1	88.5 KB	UNDER ANALYSIS
25809441	click.exe2	87 KB	UNDER ANALYSIS
25809442	duogua.exe3	84 KB	UNDER ANALYSIS
25809443	Qvodplayer.exe4	88.5 KB	UNDER ANALYSIS

http://sample.nod32.com.hk/index.php?a=query〈=0&md5=d57356ce29c17cd227ea9ed85574811b
http://sample.nod32.com.hk/index.php?a=query〈=0&md5=e817c649369eca9137d177d9998e9906
http://sample.nod32.com.hk/index.php?a=query&md5=214029fd60c815bfd117ead495461a78
http://sample.nod32.com.hk/index.php?a=query〈=0&md5=aa25697d49e068487d348e1ab90c6280






Please find a detailed report concerning each individual sample below:

Filename

Result

Qvodplayer.exe1

MALWARE

The file 'Qvodplayer.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Adload.Y.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

click.exe2

MALWARE

The file 'click.exe2' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Zbot.B.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

duogua.exe3

MALWARE

The file 'duogua.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Adload.Y.14.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

Qvodplayer.exe4

MALWARE

The file 'Qvodplayer.exe4' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Adload.Y.13.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

100008.exe

MALWARE

ssama

401

Trojan.Generic.KD.20774 (2x) (Engine BD),
Win32:Downloader-ECU [Trj] (4x) (Engine avast!)
By G Data

恋亿晓

bbs2811125

金山网盾下载 kill

jason_jiang

401
Trj/CI.A x4

ablhr

401
费尔杀

sam.to

20efede7ffe9e7d8dc21b459bc3f9284   Qvodplayer.exe4
fad26d48fbaa8b7e34469fef2ce7fe49   duogua.exe3
62a22f840a62515f86d2413a545e8d18   click.exe2
3ce467f49ce6b8fafcea2811ae0c296b   Qvodplayer.exe1


to kl,ll,mcafee,comodo,avira,eset


http://sample.nod32.com.hk/index ... 8fafcea2811ae0c296b
http://sample.nod32.com.hk/index ... 15f86d2413a545e8d18
http://sample.nod32.com.hk/index ... b7e34469fef2ce7fe49
http://sample.nod32.com.hk/index ... 7d8dc21b459bc3f9284

File ID	Filename	Size (Byte)	Result
25809865	Qvodplayer.exe1	88.5 KB	UNDER ANALYSIS
25809866	click.exe2	87 KB	UNDER ANALYSIS
25809867	duogua.exe3	84 KB	UNDER ANALYSIS
25809868	Qvodplayer.exe4	88.5 KB	UNDER ANALYSIS

Filename

Result

Qvodplayer.exe1

MALWARE

The file 'Qvodplayer.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Agent.90624.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

click.exe2

MALWARE

The file 'click.exe2' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Agent.cvv.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

duogua.exe3

MALWARE

The file 'duogua.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Agent.dxcpf.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

Qvodplayer.exe4

MALWARE

The file 'Qvodplayer.exe4' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Adload.Y.12.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

8073176430

回复 407楼 sam.to  的帖子
上报辛苦了

   

sam.to

42b125945dc85a14fa76f59edd9c8e7b   Qvodplayer.exe1
767e96f276a5589ed5fe074c334cda4f   click.exe2
bc8382f2a55a13b50544d46c63260b89   duogua.exe3
5b2233a85a93caf40553e5e9516d7665   Qvodplayer.exe4
c33e0a6b3db8d2d3d8f0339abd9afeac   Qvodplayer.exe5


to kl,ll,mcafee,comodo,avira,eset



A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25810625	Qvodplayer.exe1	88.5 KB	UNDER ANALYSIS
25810626	click.exe2	87 KB	UNDER ANALYSIS
25810627	duogua.exe3	84 KB	UNDER ANALYSIS
25810628	Qvodplayer.exe4	88.5 KB	UNDER ANALYSIS
25810629	Qvodplayer.exe5	88.5 KB	UNDER ANALYSIS

http://sample.nod32.com.hk/index.php?a=query〈=0&md5=42b125945dc85a14fa76f59edd9c8e7b


http://sample.nod32.com.hk/index.php?a=query〈=0&md5=767e96f276a5589ed5fe074c334cda4f


http://sample.nod32.com.hk/index.php?a=query〈=0&md5=bc8382f2a55a13b50544d46c63260b89


http://sample.nod32.com.hk/index.php?a=query〈=0&md5=5b2233a85a93caf40553e5e9516d7665


http://samples.nod32.com.hk/index.php?a=query〈=2&md5=c33e0a6b3db8d2d3d8f0339abd9afeac







Hello,

click.exe_, duogua.exe_ - Trojan-Downloader.Win32.Agent.ebkv,
Qvodplayer.exe4, Qvodplayer.exe5, Qvodplayer.exe_ - Trojan-Downloader.Win32.Agent.ebkw

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Best regards, Unuchek Roman





Please find a detailed report concerning each individual sample below:

Filename

Result

Qvodplayer.exe1

MALWARE

The file 'Qvodplayer.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Adload.Y.9.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

click.exe2

MALWARE

The file 'click.exe2' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Agent.ebkv.1.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.09.122.

Filename

Result

duogua.exe3

MALWARE

The file 'duogua.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Agent.ebkv.2.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.09.122.

Filename

Result

Qvodplayer.exe4

MALWARE

The file 'Qvodplayer.exe4' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Adload.Y.6.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

Qvodplayer.exe5

MALWARE

The file 'Qvodplayer.exe5' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Adload.Y.7.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

波导的勇者

MPAVkill 5