qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-8-30 12:04:28

本帖最后由 sam.to 于 2010.8.31 15:30 编辑

6ecf664d41fe3afaf4a17c962824a975 db1.ex2e
bde2a0bf5ca41bd84a8cfe3a2fec7853 qd.ex2e

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25867871	db1.ex2e	376 KB	UNDER ANALYSIS
25867872	qd.ex2e	416 KB	UNDER ANALYSIS

Hello,

81401714_280687390_db1.ex2e - Trojan-Dropper.Win32.Agent.cwpo,
81401714_280687391_qd.ex2e - Trojan-Dropper.Win32.Agent.cwpp

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

--
Best regards, Alexander Antukh
Virus analyst, Kaspersky Lab.

Please find a detailed report concerning each individual sample below:

Filename

Result

db1.ex2e

MALWARE

The file 'db1.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Zlob.bnc.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

qd.ex2e

MALWARE

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Zlob.bnb.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2010-8-30 12:42:46

sonar 干掉

显示全部楼层 · 发表于 2010-8-30 13:34:27

6ecf664d41fe3afaf4a17c962824a975 db1.ex2e
bde2a0bf5ca41bd84a8cfe3a2fec7853 qd.ex2e

to kl,ll, ...
sam.to 发表于 2010.8.30 12:04

要密码？

显示全部楼层 · 发表于 2010-8-30 13:41:43

回复 261楼 sam.to 的帖子
ess kill

显示全部楼层 · 发表于 2010-8-30 13:42:28

回复 263楼 三生缘石 的帖子

密码；infected

显示全部楼层 · 发表于 2010-8-30 13:43:45

回复

密码；infected
jayavira 发表于 2010.8.30 13:42

你测试了我就不测了

显示全部楼层 · 发表于 2010-8-30 13:58:48

回复 261楼 sam.to 的帖子
未知威胁 UDS:DangerousObject.Multi.Generic
未知威胁 UDS:DangerousObject.Multi.Generic

显示全部楼层 · 发表于 2010-8-30 20:21:02

本帖最后由 sam.to 于 2010.8.31 17:21 编辑

46611e4d7887676b44b43511614ab09f db1.exe
e09659ad8018477a6cd2e31b32380c1e qd.exe2

to kl,ll,mcacfee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25868315	db1.exe2	376 KB	UNDER ANALYSIS
25868316	qd.exe2	416 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename

Result

db1.exe2

MALWARE

The file 'db1.exe2' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.cwrv.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.58.

Filename

Result

qd.exe2

MALWARE

The file 'qd.exe2' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.cwrx.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.58.

显示全部楼层 · 发表于 2010-8-30 22:22:34

试了一下Macfee ，可以！

显示全部楼层 · 发表于 2010-8-30 22:33:42

to MMPC

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)