qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-7-30 12:43:25

本帖最后由 sam.to 于 2010.7.30 16:22 编辑

17916C6B1ADC4058BACD77EE65EA86EB

to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25827455	qd.ex2e	640 KB	UNDER ANALYSIS

Hello,

Trojan-Dropper.Win32.Agent.cnmi

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

Please quote all when answering.
-----------------
Regards, Kirill Kruglov
Virus Analyst, Kaspersky Lab.

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Purgodoor.A.6.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.10.19.

显示全部楼层 · 发表于 2010-7-30 13:26:24

微点已杀

显示全部楼层 · 发表于 2010-7-30 19:11:47

96，101
费尔杀

显示全部楼层 · 发表于 2010-7-30 19:41:06

本帖最后由 sam.to 于 2010.7.30 21:30 编辑

A42BB30B04CACB1FB050C6539D2E84D5

to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25827830	qd.e1xe	640 KB	UNDER ANALYSIS

The file 'qd.e1xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.WSearch.B.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Hello,

qd.exe - Trojan-Dropper.Win32.Agent.cnny

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

-------------------------------------------
Best wishes, Pavel Firsov.
Virus analyst , Kaspersky Lab.
_____________________________
Ph.: +7(095)797-8700
Fax.: +7 (495) 948-43-31
newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com
--------------------------------------------
http://www.kaspersky.ru/virusscanner - online scan
http://www.kaspersky.com/helpdesk.html - technical support

显示全部楼层 · 发表于 2010-7-30 19:45:23

#104
to panda

显示全部楼层 · 发表于 2010-7-30 19:45:48

本帖最后由 ablhr 于 2010.7.30 19:48 编辑

104
微点杀了

显示全部楼层 · 发表于 2010-7-31 07:09:42

101 eset kill
Win32/Adware.WSearch.AJ 应用程序的变种

显示全部楼层 · 发表于 2010-7-31 07:23:51

回复 104楼 sam.to 的帖子

ess kill

2010-7-31 7:32:19 文件系统实时防护文件 D:\下载文件夹\qd.e1xe Win32/Adware.WSearch.AJ 应用程序的变种通过删除清除 - 已隔离 WWW-738C9D7CF42\Administrator 在应用程序新建的文件上发生事件: D:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2010-7-31 12:21:36

本帖最后由 sam.to 于 2010.8.2 12:00 编辑

3522C0007F1EC8DD95CA245EFF23E79A

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25828815	qd.e2xe	640 KB	UNDER ANALYSIS

Hello,

qd.e2xe - Trojan-Dropper.Win32.Mudrop.jqy

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

Regards, Kuskov Vladimir
Virus Analyst

The file 'qd.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Mudrop.jqy.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.10.26.

显示全部楼层 · 发表于 2010-7-31 14:28:20

回复 109楼 sam.to 的帖子

ess kill

2010-7-31 14:37:27 文件系统实时防护文件 D:\下载文件夹\qd.e2xe Win32/Adware.WSearch.AJ 应用程序的变种通过删除清除 - 已隔离 WWW-738C9D7CF42\Administrator 在应用程序新建的文件上发生事件: D:\Program Files\WinRAR\WinRAR.exe.

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)