qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2011-3-11 09:48:49

本帖最后由留侯于 2011-3-11 09:49 编辑

大蜘蛛：
750089-1099\99.dll - infected with Trojan.MulDrop1.59382
750089-1099\99.dll - packed by PECOMPACT

显示全部楼层 · 发表于 2011-3-11 10:45:18

本帖最后由 Ricty 于 2011-3-11 10:47 编辑

1094L&1099L 红伞扫描报

显示全部楼层 · 发表于 2011-3-11 13:07:47

金山没反应

显示全部楼层 · 发表于 2011-3-12 17:31:00

本帖最后由 sam.to 于 2011-3-14 17:15 编辑

2B61AB153A6B95A19AA471A6BE1D2F74

to kl,ll,mcafee

99.dll - Trojan-Dropper.Win32.Cadro.ewn

显示全部楼层 · 发表于 2011-3-12 17:38:56

大蜘蛛：
750089-1104\99.dll - infected with Trojan.MulDrop1.59382
750089-1104\99.dll - packed by PECOMPACT

显示全部楼层 · 发表于 2011-3-12 17:53:10

1104L
eset kill
C:\Users\微亿毫\Desktop\750089-1104\99.dll - 可能是 Win32/Adware.WSearch.AN 应用程序的变种

显示全部楼层 · 发表于 2011-3-12 19:49:28

回复 1104楼 sam.to 的帖子

TrojanDropper.Cadro.az BY KV2011

显示全部楼层 · 发表于 2011-3-12 22:32:32

1104L
360 SD Kill

显示全部楼层 · 发表于 2011-3-15 11:54:24

本帖最后由 sam.to 于 2011-3-15 18:51 编辑

AE929ED213A21693E756F1D1E371FA2F

TO kl,ll,mcafee,comodo,avira,dr.web,clamwin

The file '99.dll' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Agent.49152.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 6.35.00.137.

99.dll - Trojan-Dropper.Win32.Cadro.ewr

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

--
Best regards,
Virus analyst, Kaspersky Lab.

显示全部楼层 · 发表于 2011-3-15 12:29:54

1109L
360 SD QVM37 Kill

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)