qvod&other[update_629-638][567L]

显示全部楼层 · 发表于 2010-6-4 09:35:44

更新

显示全部楼层 · 发表于 2010-6-4 09:38:29

回复 282# fatezero 的帖子
219-222.rar (414.26 KB) 小a拦截

显示全部楼层 · 发表于 2010-6-4 09:41:01

219-222
ess kill4个

http://bbs.kafan.cn/forum.php?mo ... zU2MTU1NzV8NDAxODAz 多个威胁连接中断 - 已隔离通过应用程序访问 web 时检测到威胁: E:\谷歌浏览器\chrome.exe.
http://bbs.kafan.cn/forum.php?mo ... zU2MTU1NzV8NDAxODAz > RAR > 97sese.exe Win32/AutoRun.Delf.EP 蠕虫的变种
http://bbs.kafan.cn/forum.php?mo ... zU2MTU1NzV8NDAxODAz > RAR > 97sese.exe > RAR > server.exe Win32/AutoRun.Delf.EP 蠕虫的变种
http://bbs.kafan.cn/forum.php?mo ... zU2MTU1NzV8NDAxODAz > RAR > qvod(1).exe Win32/AutoRun.Delf.EP 蠕虫的变种
http://bbs.kafan.cn/forum.php?mo ... zU2MTU1NzV8NDAxODAz > RAR > qvod(1).exe > RAR > Server.exe Win32/AutoRun.Delf.EP 蠕虫的变种
http://bbs.kafan.cn/forum.php?mo ... zU2MTU1NzV8NDAxODAz > RAR > Qvod.exe Win32/TrojanDownloader.Adload.NGP 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zU2MTU1NzV8NDAxODAz > RAR > QvodSetup5.exe 可能是 Win32/AntiAV.NGB 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zU2MTU1NzV8NDAxODAz > RAR > QvodSetup5.exe > RAR > kuaibo.exe 可能是 Win32/AntiAV.NGB 特洛伊木马的变种

显示全部楼层 · 发表于 2010-6-4 09:57:47

219-222 to autovin(panda)

显示全部楼层 · 发表于 2010-6-4 11:24:03

219-222
mpav kiill

显示全部楼层 · 发表于 2010-6-4 16:44:45

up to 222
Starting the file scan:

Begin scan in 'C:\Users\morgan\Desktop\219-222.rar'
C:\Users\morgan\Desktop\219-222.rar
[0] Archive type: RAR
  [DETECTION] Is the TR/Hijacker.Gen Trojan
  --> 97sese.exe
[1] Archive type: RAR SFX (self extracting)
--> server.exe
  [DETECTION] Is the TR/Hijacker.Gen Trojan
--> VodSetupPlus3.exe
  [DETECTION] Is the TR/Lisiu.A.5 Trojan
  --> qvod(1).exe
[1] Archive type: RAR SFX (self extracting)
--> Server.exe
  [DETECTION] Is the TR/Hijacker.Gen Trojan
--> VodSetupPlus3.exe
  [DETECTION] Is the TR/Lisiu.A.5 Trojan
  --> Qvod.exe
--> Object
  [DETECTION] Contains HEUR/Malware suspicious code
  --> QvodSetup5.exe
[1] Archive type: RAR SFX (self extracting)
--> kuaibo.exe
--> Object
  [DETECTION] Is the TR/Crypt.XDR.Gen Trojan

显示全部楼层 · 发表于 2010-6-4 20:03:44

219-222
1x to comodo

显示全部楼层 · 发表于 2010-6-5 10:27:35

更新

显示全部楼层 · 发表于 2010-6-5 10:39:57

223-225
ess kill3x

http://bbs.kafan.cn/forum.php?mo ... zU3MDU0ODN8NDAxODAz 多个威胁连接中断 - 已隔离通过应用程序访问 web 时检测到威胁: E:\谷歌浏览器\chrome.exe.
http://bbs.kafan.cn/forum.php?mo ... zU3MDU0ODN8NDAxODAz > RAR > 355CE6F6C06E5DFB0DB951FF58A6008B 可能是 Win32/Statik 潜在的不受欢迎应用程序的变种
http://bbs.kafan.cn/forum.php?mo ... zU3MDU0ODN8NDAxODAz > RAR > 7AABC56727AE9FA621B74D886D41A933 Win32/TrojanDownloader.Adload.NGP 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zU3MDU0ODN8NDAxODAz > RAR > 3B1C949758A8931573A7D937BDF3BC06 Win32/TrojanDownloader.Adload.NGP 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zU3MDU0ODN8NDAxODAz > RAR > 3B1C949758A8931573A7D937BDF3BC06 > NSIS > Qvod.exe Win32/TrojanDownloader.Adload.NGP 特洛伊木马的变种

显示全部楼层 · 发表于 2010-6-5 10:46:07

223-225
1x to autovin(panda)

[病毒样本] qvod&other[update_629-638][567L]