qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-7-29 15:45:03

88
to fl

显示全部楼层 · 发表于 2010-7-29 18:07:44

本帖最后由 sam.to 于 2010.7.30 12:28 编辑

647CBD954B46BAA8AA67D7B16DC1CF7C

to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25826513	qd.e2xe	640 KB	UNDER ANALYSIS

The file 'qd.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Agent.655360.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Hello,

Trojan-Dropper.Win32.Agent.cnkk

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

Best Regards,
Oleg Yurzin

显示全部楼层 · 发表于 2010-7-29 18:09:41

to kl,ll,mcafee,comodo,avira
sam.to 发表于 2010.7.29 18:07

解压密码是多少

显示全部楼层 · 发表于 2010-7-29 19:27:15

92
费尔杀
回复 93楼 langzi2009 的帖子
infected

显示全部楼层 · 发表于 2010-7-29 20:17:18

Trj/CI.A

显示全部楼层 · 发表于 2010-7-29 22:34:39

本帖最后由 sam.to 于 2010.7.30 16:21 编辑

8D91C2410C60919D03354E7D3199C8E2

to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25826698	qd.e1xe	640 KB	UNDER ANALYSIS

Hello,

qd.e1xe - Trojan-Dropper.Win32.Agent.cnjw

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Best Regards,
Oleg Yurzin

Malware Analyst
Kaspersky Lab

The file 'qd.e1xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Advertise.A.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2010-7-30 06:26:28

回复 92楼 sam.to 的帖子

ess kill

2010-7-30 6:35:50 文件系统实时防护文件 D:\下载文件夹\qd.e2xe Win32/Adware.WSearch.AJ 应用程序的变种通过删除清除 - 已隔离 WWW-738C9D7CF42\Administrator 在应用程序新建的文件上发生事件: D:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2010-7-30 06:27:35

回复 96楼 sam.to 的帖子

ess kill

2010-7-30 6:37:01 文件系统实时防护文件 D:\下载文件夹\qd.e1xe Win32/Adware.WSearch.AJ 应用程序的变种通过删除清除 - 已隔离 WWW-738C9D7CF42\Administrator 在应用程序新建的文件上发生事件: D:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2010-7-30 07:10:36

96
Trj/CI.A

显示全部楼层 · 发表于 2010-7-30 07:52:49

病毒名： not-a-virus:AdWare.Win32.BHO
建议：保存并删除
特征Id: 1419564

--by ikarus

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

评分

评分