qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-8-20 16:26:03

218

ESET NOD32 emptied.
db1.e3xe - probably a variant of Win32/Adware.WSearch application
qd.ex3e - probably a variant of Win32/Adware.WSearch application

显示全部楼层 · 发表于 2010-8-20 16:26:59

回复 218楼 sam.to 的帖子

启发,to eset

显示全部楼层 · 发表于 2010-8-20 20:18:47

214,218
mp 清空

显示全部楼层 · 发表于 2010-8-20 20:39:41

江民kill

显示全部楼层 · 发表于 2010-8-21 18:41:58

本帖最后由 sam.to 于 2010.8.22 11:55 编辑

3bfb8ffb147bdf4e50df14d0d84f0da0 qd.e2xe
0781a3040dcced5ae6fc1aff10878395 db1.e2xe

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25856835	db1.e2xe	384 KB	MALWARE
25856836	qd.e2xe	424 KB	MALWARE

Hello,

Trojan-Dropper.Win32.Agent.cuba

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

Please quote all when answering.
-----------------
Regards, Kirill Kruglov
Virus Analyst, Kaspersky Lab.

Please find a detailed report concerning each individual sample below:

Filename

Result

db1.e2xe

MALWARE

The file 'db1.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat ADSPY/Wsearch.AC.1.The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or byusing of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 7.10.10.239.

Filename

Result

qd.e2xe

MALWARE

The file 'qd.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat ADSPY/Wsearch.AC.1.The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or byusing of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 7.10.10.239.

显示全部楼层 · 发表于 2010-8-21 19:38:59

225

ESET NOD32 emptied.
db1.e2xe - probably a variant of Win32/Adware.WSearch application
qd.e2xe - probably a variant of Win32/Adware.WSearch application

显示全部楼层 · 发表于 2010-8-21 20:05:57

红伞杀完了！

显示全部楼层 · 发表于 2010-8-21 20:08:18

to bd

显示全部楼层 · 发表于 2010-8-21 22:28:49

jiangmin kill2

显示全部楼层 · 发表于 2010-8-21 22:33:59

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)