qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-8-8 23:40:32

#146
f-secure清空

显示全部楼层 · 发表于 2010-8-9 06:58:10

mcafee artemis!

显示全部楼层 · 发表于 2010-8-9 13:29:37

本帖最后由 sam.to 于 2010.8.10 18:09 编辑

603605af9d451fe0073b31b01895c981 db1.ex3e
da366107dfcdffcde2edc28ab8901f7e qd.ex2e

to kl,ll,comodo,avira,mcafee

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25841533	qd.ex2e	448 KB	UNDER ANALYSIS
25841534	db1.ex3e	408 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename

Result

qd.ex2e

MALWARE

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.aan.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

db1.ex3e

MALWARE

The file 'db1.ex3e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.abk.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2010-8-9 13:35:14

153

ESET NOD32 emptied.
db1.ex3e - Win32/Adware.WSearch.AJ 应用程序的变种
qd.ex2e - Win32/Adware.WSearch.AJ 应用程序的变种

显示全部楼层 · 发表于 2010-8-9 22:20:15

本帖最后由 sam.to 于 2010.8.10 19:42 编辑

378dabd2d46edfd21bb611ada9b3d146 db1.e3xe
9bc95281c28a1320837dd243871d9bd7 qd.ex3e

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25842062	db1.e3xe	408 KB	UNDER ANALYSIS
25842063	qd.ex3e	448 KB	UNDER ANALYSIS

Hello,

78346815_268632728_db1.e3xe - Trojan-Dropper.Win32.Agent.cqor,
78346815_268632729_qd.ex3e - Trojan-Dropper.Win32.Agent.cqqi

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Please quote all when answering.
-----------------
Regards, Kirill Kruglov
Virus Analyst, Kaspersky Lab.

Filename

Result

db1.e3xe

MALWARE

The file 'db1.e3xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.cqor.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.10.128.

Filename

Result

qd.ex3e

MALWARE

The file 'qd.ex3e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.cqqi.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.10.127.

显示全部楼层 · 发表于 2010-8-9 22:26:07

155 eset kill
Win32/Adware.WSearch.AJ 应用程序

显示全部楼层 · 发表于 2010-8-10 17:41:15

本帖最后由 sam.to 于 2010.8.10 22:26 编辑

63c0f2532fa3dac859c324cc1fecdce9 qd.ex2e
d8fb76e4ef6d466a983687f14c8108f2 db1.e3xe

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25843077	db1.e3xe	412 KB	UNDER ANALYSIS
25843078	qd.ex2e	452 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename

Result

db1.e3xe

MALWARE

The file 'db1.e3xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.acd.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

qd.ex2e

MALWARE

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.asd.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2010-8-10 17:42:29

卡巴啥

显示全部楼层 · 发表于 2010-8-10 18:39:43

157 eset kill Win32/Adware.WSearch.AJ 应用程序的变种

显示全部楼层 · 发表于 2010-8-10 19:04:03

157 to xandora(panda)

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)