qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-8-12 17:23:30

回复 178楼 sam.to 的帖子

ess kill

显示全部楼层 · 发表于 2010-8-12 17:28:09

回复 181楼 jayavira 的帖子

这个HIPS怎么加的//

显示全部楼层 · 发表于 2010-8-12 17:32:32

回复 182楼 62590423 的帖子

水印功能
水印可以使用图片也可以使用文字啊

显示全部楼层 · 发表于 2010-8-12 17:35:04

回复 183楼 jayavira 的帖子

用winsnap加的？

显示全部楼层 · 发表于 2010-8-12 17:35:57

回复 184楼 62590423 的帖子

不是
我使用的截图工具是HyperSnap

显示全部楼层 · 发表于 2010-8-12 17:55:10

#178
FS清空
Trojan.Generic.KD.26045

显示全部楼层 · 发表于 2010-8-12 18:00:35

回复 184楼 62590423 的帖子
绿色简化版winsnap也可加。

显示全部楼层 · 发表于 2010-8-12 18:03:02

回复 187楼 hj5abc 的帖子

找到这个功能了

显示全部楼层 · 发表于 2010-8-12 20:38:41

本帖最后由 sam.to 于 2010.8.13 11:53 编辑

bf43fd40c731a07cabfcc43e06355f01 qd.exe
a5f28802b36590ab5227400e2aff37fc db1.ex3e

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25845593	qd.e2xe	452 KB	UNDER ANALYSIS
25845594	db1.ex3e	412 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename

Result

qd.e2xe

MALWARE

The file 'qd.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat ADSPY/WSearch.AB.The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or byusing of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

db1.ex3e

MALWARE

The file 'db1.ex3e' has been determined to be 'MALWARE'.
Our analysts named the threat ADSPY/WSearch.AC.The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or byusing of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection will be added to our virus definition file (VDF) with one of the next updates.

Hello,

db1.ex3e - Trojan-Dropper.Win32.Agent.crlx,
qd.e2xe - Trojan-Dropper.Win32.Agent.crly

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

-------------------------------------------
Regards, Ivan Kargapoltsev.
Virus analyst , Kaspersky Lab.

显示全部楼层 · 发表于 2010-8-12 20:43:51

189
启发，to xandora(panda)

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)