qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-9-1 08:07:32

submit to MMPC

显示全部楼层 · 发表于 2010-9-1 12:25:03

本帖最后由 sam.to 于 2010.9.1 18:48 编辑

4566b6e0c164d9b6ead75da4606dafea qd.ex2e
c645de9ce591d3c324ac167e074e9e34 db1.ex2e

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25870155	db1.ex2e	392 KB	UNDER ANALYSIS
25870156	qd.ex2e	432 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename

Result

db1.ex2e

MALWARE

The file 'db1.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Zlob.401408.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

qd.ex2e

MALWARE

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Zlob.442368.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

db1.ex2e - Trojan-Dropper.Win32.Agent.cxcq
qd.ex2e - Trojan-Dropper.Win32.Agent.cxcr

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Best Regards, Kaspersky Lab

显示全部楼层 · 发表于 2010-9-1 12:26:22

本帖最后由 62590423 于 2010.9.1 12:36 编辑

eset的广谱还真是顽强啊

卡巴云杀1

显示全部楼层 · 发表于 2010-9-1 13:32:42

回复 282楼 sam.to 的帖子
ess 清空

显示全部楼层 · 发表于 2010-9-1 13:38:36

类别：已解决的安全风险
日期和时间,风险,活动,状态,推荐的操作
2010-9-1 13:37,中,p.dll (Adware.Rugo) 检测方 Auto-Protect,已阻止,已解决 - 不采取操作
类别：已解决的安全风险
日期和时间,风险,活动,状态,推荐的操作,路径 - 文件名
2010-9-1 13:38,高,检测到 qd.exe (qd.exe) (检测方: SONAR),已隔离,已解决 - 不采取操作,c:\documents and settings\administrator\桌面\qd.exe

类别：隔离区
日期和时间,风险,活动,状态,推荐的操作,路径 - 文件名
2010-9-1 13:38,高,检测到 qd.exe (qd.exe) (检测方: SONAR),已隔离,已解决 - 不采取操作,c:\documents and settings\administrator\桌面\qd.exe

类别：SONAR 活动
日期和时间,风险,活动,状态,推荐的操作,路径 - 文件名
2010-9-1 13:38,高,检测到 qd.exe (qd.exe) (检测方: SONAR),已隔离,已解决 - 不采取操作,c:\documents and settings\administrator\桌面\qd.exe

显示全部楼层 · 发表于 2010-9-1 22:26:17

本帖最后由 sam.to 于 2010.9.3 11:55 编辑

edd2358797861618fea3db0f9074f022 qd.ex2e
e044569129be715516b2361a1f600759 db1.e2xe

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25870669	db1.e2xe	392 KB	UNDER ANALYSIS
25870670	qd.ex2e	432 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename

Result

db1.e2xe

MALWARE

The file 'db1.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Zlob.401408.A.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

qd.ex2e

MALWARE

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Zlob.401408.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.68.

db1.e2xe - Trojan-Dropper.Win32.Agent.cxgo,
qd.ex2e - Trojan-Dropper.Win32.Agent.cxgn

显示全部楼层 · 发表于 2010-9-1 23:15:12

TO Symantec

显示全部楼层 · 发表于 2010-9-2 06:50:28

回复 286楼 sam.to 的帖子
ess kill

显示全部楼层 · 发表于 2010-9-2 12:06:10

本帖最后由 sam.to 于 2010.9.2 15:56 编辑

6146bdf2dc72081b701e0531f5520e67 db1.ex1e
a9a586a271aba8a4e08229a3a6ad845e qd.exe2

to kl,ll,mcafee,comodo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25871195	db1.ex1e	376 KB	UNDER ANALYSIS
25871196	qd.exe2	416 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename

Result

db1.ex1e

MALWARE

The file 'db1.ex1e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Zlob.385024.B.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

qd.exe2

MALWARE

The file 'qd.exe2' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Agent.425984.X.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2010-9-2 12:17:53

750089-289.rar
SP
KILL ALL
Troj/BHO-QJ

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)