qvod&other[update_629-638][567L]

显示全部楼层 · 发表于 2010-6-5 12:40:24

D:\downloads\223-225.rar > RAR > 7AABC56727AE9FA621B74D886D41A933 - Win32/TrojanDownloader.Adload.NGP 特洛伊木马的变种
D:\downloads\223-225.rar > RAR > 3B1C949758A8931573A7D937BDF3BC06 > NSIS > Qvod.exe - Win32/TrojanDownloader.Adload.NGP 特洛伊木马的变种

显示全部楼层 · 发表于 2010-6-5 13:20:39

223-225
mpav kill

显示全部楼层 · 发表于 2010-6-5 13:38:26

up to 225

Starting the file scan:

Begin scan in 'C:\Users\morgan\Desktop\223-225.rar'
C:\Users\morgan\Desktop\223-225.rar
[0] Archive type: RAR
  [DETECTION] Contains HEUR/Malware suspicious code
  --> 7AABC56727AE9FA621B74D886D41A933
--> Object
  [DETECTION] Contains HEUR/Malware suspicious code
  --> 3B1C949758A8931573A7D937BDF3BC06
[1] Archive type: NSIS
--> [TempDir]/Qvod.exe
--> Object
  [DETECTION] Is the TR/Dldr.Clic.nbp.1 Trojan

Beginning disinfection:
C:\Users\morgan\Desktop\223-225.rar
[DETECTION] Is the TR/Dldr.Clic.nbp.1 Trojan
[WARNING] The file was ignored!

显示全部楼层 · 发表于 2010-6-5 19:34:30

223-235 2x to comodo

显示全部楼层 · 发表于 2010-6-6 09:15:55

显示全部楼层 · 发表于 2010-6-6 11:02:29

更新

显示全部楼层 · 发表于 2010-6-6 11:03:58

226-228
ess kill3个

http://bbs.kafan.cn/forum.php?mo ... zU3OTMzNjN8NDAxODAz 多个威胁连接中断 - 已隔离通过应用程序访问 web 时检测到威胁: E:\谷歌浏览器\chrome.exe.
http://bbs.kafan.cn/forum.php?mo ... zU3OTMzNjN8NDAxODAz > RAR > 3E419B576178DBD1F808056C508A905A Win32/AutoRun.Delf.EP 蠕虫的变种
http://bbs.kafan.cn/forum.php?mo ... zU3OTMzNjN8NDAxODAz > RAR > 3E419B576178DBD1F808056C508A905A > RAR > Server.exe Win32/AutoRun.Delf.EP 蠕虫的变种
http://bbs.kafan.cn/forum.php?mo ... zU3OTMzNjN8NDAxODAz > RAR > A3E1E583A18B44569062B8ED9E83483D Win32/TrojanDownloader.Adload.NGP 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zU3OTMzNjN8NDAxODAz > RAR > 976A5E14070CBACC38B983DE5F05D8C0 Win32/AutoRun.Delf.EP 蠕虫的变种
http://bbs.kafan.cn/forum.php?mo ... zU3OTMzNjN8NDAxODAz > RAR > 976A5E14070CBACC38B983DE5F05D8C0 > RAR > Server.exe Win32/AutoRun.Delf.EP 蠕虫的变种

显示全部楼层 · 发表于 2010-6-6 11:06:59

226-228
2x to autovin(panda)

显示全部楼层 · 发表于 2010-6-6 11:18:23

226-228.rar (285.3 KB)

2个木马，一个可疑
by panda cloud

显示全部楼层 · 发表于 2010-6-6 11:24:45

[病毒样本] qvod&other[update_629-638][567L]

本帖子中包含更多资源

本帖子中包含更多资源