qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-7-31 14:52:33

109 to xandora(panda)

显示全部楼层 · 发表于 2010-8-1 11:38:11

本帖最后由 sam.to 于 2010.8.2 23:24 编辑

B68039BC90F6B0FA8CBE45EB52D7DBFA

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25830102	qd.e2xe	640 KB	UNDER ANALYSIS

Hello,

qd.e2xe - Trojan-Dropper.Win32.Mudrop.jra

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

-------------------------------------------
Regards, Ivan Kargapoltsev.
Virus analyst , Kaspersky Lab.
_____________________________
Ph.: +7(095)797-8700
Fax.: +7 (495) 948-43-31
newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com
--------------------------------------------
http://www.kaspersky.ru/virusscanner - online scan
http://www.kaspersky.com/helpdesk.html - technical support

The file 'qd.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Purgodoor.A.12.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.

显示全部楼层 · 发表于 2010-8-1 14:34:56

回复 112楼 sam.to 的帖子

ess kill

2010-8-1 14:44:24 文件系统实时防护文件 D:\下载文件夹\qd.e2xe Win32/Adware.WSearch.AJ 应用程序的变种通过删除清除 - 已隔离 WWW-738C9D7CF42\Administrator 在应用程序新建的文件上发生事件: D:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2010-8-1 15:16:18

112 金山网盾 miss

显示全部楼层 · 发表于 2010-8-2 00:36:27

112
to xandora(panda)

显示全部楼层 · 发表于 2010-8-2 12:04:51

本帖最后由 sam.to 于 2010.8.2 18:01 编辑

19be54428fef481e8029a7354d0e1afd

to kl,ll,mcafee,comdoo,avira

File ID	Filename	Size (Byte)	Result
25831395	qd.e1xe	640 KB	UNDER ANALYSIS

Hello,

qd.e1xe - Trojan-Dropper.Win32.Agent.cobo

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Regards, Kuskov Vladimir
Virus Analyst

The file 'qd.e1xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.WSearch.A.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2010-8-2 13:27:29

回复 116楼 sam.to 的帖子

ess kill

2010-8-2 13:38:00 文件系统实时防护文件 D:\下载文件夹\qd.e1xe Win32/Adware.WSearch.AJ 应用程序的变种通过删除清除 - 已隔离 WWW-738C9D7CF42\Administrator 在应用程序新建的文件上发生事件: D:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2010-8-2 14:05:39

回复 116楼 sam.to 的帖子
kv2010 Adware/MsLock.oq

显示全部楼层 · 发表于 2010-8-2 18:20:26

本帖最后由 sam.to 于 2010.8.3 19:46 编辑

1d6e10f6586301b6db1d8dbe8c38f351 qd.exe

to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25831842	qd.e0xe	640 KB	UNDER ANALYSIS

Hello,

qd.e0xe - Trojan-Dropper.Win32.Mudrop.jrt

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Best regards, Unuchek Roman

已确定“qd.e0xe”文件是“MALWARE”。
我们的分析人员将这种威胁命名为“TR/Drop.Mudrop.jrt”。术语“TR/”指的是能够窥探数据、侵犯您的隐私或对系统进行不需要的修改的特洛伊木马。从版本 7.10.10.49 开始，我们的病毒定义文件(VDF)中将添加这项检测。

显示全部楼层 · 发表于 2010-8-2 20:37:12

116
Trj/CI.A

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)