qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-8-12 21:46:11

189 eset kill
Win32/Adware.WSearch.AJ 应用程序的变种

显示全部楼层 · 发表于 2010-8-12 23:48:48

#189
FS清空
Trojan.Generic.KD.26045.
PS.感觉这类马是自动生成器生成的..

显示全部楼层 · 发表于 2010-8-12 23:54:54

微点拦截。

显示全部楼层 · 发表于 2010-8-13 12:16:02

本帖最后由 sam.to 于 2010.8.16 12:26 编辑

c2787533e75d656d1a8879d7e9b3e9e8 db1.ex2e
42a2ef4c3b6c54f62cdfa5d55ab50a50 qd.e3xe

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25846114	qd.e3xe	452 KB	UNDER ANALYSIS
25846115	db1.ex2e	412 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename	Result
qd.e3xe	MALWARE

The file 'qd.e3xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.BHO.462848.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename	Result
db1.ex2e	MALWARE

The file 'db1.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.HBO.421888.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

db1.ex2e - Trojan-Dropper.Win32.Agent.crzn,
qd.e3xe - Trojan-Dropper.Win32.Agent.cryp

显示全部楼层 · 发表于 2010-8-13 12:57:17

回复 194楼 sam.to 的帖子

Dr.web 6.0
db1.ex2e;C:\Documents and Settings\all\桌面\750089-193;Trojan.MulDrop1.41564;已刪除。;
qd.e3xe;C:\Documents and Settings\all\桌面\750089-193;Trojan.MulDrop1.41564;已刪除。;

显示全部楼层 · 发表于 2010-8-13 13:06:47

194 panda heuristic 2x
to xandora(panda)

显示全部楼层 · 发表于 2010-8-13 13:39:42

#194
FS
qd.e3xe - Generic.Rugo.001CD15E
db1.ex2e - Generic.Rugo.A5056FF6
-----------------
bd换报发法了.

显示全部楼层 · 发表于 2010-8-13 13:48:30

回复 194楼 sam.to 的帖子

ess kill

显示全部楼层 · 发表于 2010-8-13 14:22:10

本帖最后由 sam.to 于 2010.8.13 17:05 编辑

fce711563bdb0497521a46ef7d5dbfbf qd.exe
236503458db4cd950776e3120bc63f6a db1.ex2e

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25846167	qd.e3xe	452 KB	UNDER ANALYSIS
25846168	db1.ex2e	412 KB	UNDER ANALYSIS

您好，

79298671_270916826_db1.ex2e - Trojan-Dropper.Win32.Agent.cryy,
79298671_270916827_qd.e3xe - Trojan-Dropper.Win32.Agent.cryz

以上文件包含恶意代码，下次更新后即可查杀。感谢您的上报。

回复时请引用全部邮件。

Please find a detailed report concerning each individual sample below:

Filename

Result

qd.e3xe

MALWARE

The file 'qd.e3xe' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Agent.EA.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

db1.ex2e

MALWARE

The file 'db1.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.abt.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2010-8-13 14:26:02

回复 199楼 sam.to 的帖子

ess 清空

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)