qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-8-13 14:52:48

#199
FS.
qd.e3xe - Generic.Rugo.33316EB0
db1.ex2e - Generic.Rugo.6771758C
killed both.

显示全部楼层 · 发表于 2010-8-13 15:02:36

大蜘蛛清空

显示全部楼层 · 发表于 2010-8-13 15:46:46

卡巴检出

显示全部楼层 · 发表于 2010-8-13 18:27:20

卡巴检出
FDXLMC 发表于 2010.8.13 15:46

那个?

显示全部楼层 · 发表于 2010-8-13 18:36:02

回复 205楼 sam.to 的帖子

最后面那个

显示全部楼层 · 发表于 2010-8-13 18:41:57

本帖最后由 sam.to 于 2010.8.16 15:48 编辑

ab4480e38baf69e6b45709d79656954f qd.exe
a21d3f2dbf6e724c99e28d0fd1317685 db1.exe1

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25846322	db1.exe1	412 KB	UNDER ANALYSIS
25846323	qd.exe2	452 KB	UNDER ANALYSIS

Hello,

79308866_270975061_db1.exe1 - Trojan-Dropper.Win32.Agent.csaa,
79308866_270975062_qd.exe2 - Trojan-Dropper.Win32.Agent.csab

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Please quote all when answering.
-----------------
Regards, Kirill Kruglov
Virus Analyst, Kaspersky Lab.

Please find a detailed report concerning each individual sample below:

Filename

Result

db1.exe1

MALWARE

The file 'db1.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/WSearch.421888.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

qd.exe2

MALWARE

The file 'qd.exe2' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Agent.462848.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2010-8-13 18:53:49

207
启发，to xandora(panda)

显示全部楼层 · 发表于 2010-8-13 19:38:39

207 eset kill
Win32/Adware.WSearch.AJ 应用程序的变种

显示全部楼层 · 发表于 2010-8-13 23:43:48

#207
FS.
qd.e3xe - Generic.Rugo.B07143C9
db1.ex2e - Generic.Rugo.46A16AAD
killed both.

显示全部楼层 · 发表于 2010-8-14 13:19:00

本帖最后由 sam.to 于 2010.8.16 12:03 编辑

13a82d31fdc6c7a46ea9cc584504e3e1 db1.e3xe
ee55e598e130ceacfc87706cbe68e2a7 qd.ex2e

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25847019	db1.e3xe	412 KB	UNDER ANALYSIS
25847020	qd.ex2e	452 KB	UNDER ANALYSIS

db1.e3xe - Trojan-Dropper.Win32.Agent.cseb

qd.ex2e - Trojan-Dropper.Win32.Agent.csec

以上文件包含恶意代码，下次更新后即可查杀。感谢您的上报。

Please find a detailed report concerning each individual sample below:

Filename

Result

db1.e3xe

MALWARE

The file 'db1.e3xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.cseb.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.10.183.

Filename

Result

qd.ex2e

MALWARE

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.csec.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.10.183.

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)