qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

网名丢失

红伞一个没报出！

ablhr

304
avast kills

sam.to

d133e6536a87f7ed12136e1b3334fb99   qd.exe2
cf0667657e3f6f71bc75026ca3fee203   db1.ex1e

to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25874224	750089-312.rar	357.51 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25874225	db1.ex1e	368 KB	UNDER ANALYSIS
25874226	qd.exe2	408 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename	Result
db1.ex1e	MALWARE

The file 'db1.ex1e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.cyhg.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.87.

Filename	Result
qd.exe2	MALWARE

The file 'qd.exe2' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.cyhh.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.87.

jayavira

回复 313楼 sam.to  的帖子

to eset

http://samples.nod32.com.sg/inde ... f71bc75026ca3fee203

http://samples.nod32.com.sg/inde ... 7ed12136e1b3334fb99
   

sam.to

8659384d01383f38ad07201a65ac6edd   qd.ex2e
b8bd1c5c92d6df66c409005242387fbe   db1.ex2e

to kl,ll,mcafee,comodo,avira


A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25875304	db1.ex2e	368 KB	UNDER ANALYSIS
25875305	qd.ex2e	412 KB	UNDER ANALYSIS

Hello,

db1.ex2e - Trojan-Dropper.Win32.Agent.cylw,

qd.ex2e - Trojan-Dropper.Win32.Agent.cylx

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

--
Best regards,
Virus analyst, Kaspersky Lab.







Please find a detailed report concerning each individual sample below:

Filename	Result
db1.ex2e	MALWARE

The file 'db1.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat Adware/Dldr.WSearch.AN.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename	Result
qd.ex2e	MALWARE

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat Adware/Dldr.WSearch.AN.Detection will be added to our virus definition file (VDF) with one of the next updates.

submit to trendlabs

sam.to

97cbafd5a6a6c859c03056f4d2aa604e   db1.e2xe
8659384d01383f38ad07201a65ac6edd   qd.ex2e

to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25875425	750089-317.rar	631.28 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25875426	db1.e2xe	368 KB	UNDER ANALYSIS
25875305	qd.ex2e	412 KB	UNDER ANALYSIS

Hello,

db1.e2xe - Trojan-Dropper.Win32.Agent.cymu,
qd.ex2e - Trojan-Dropper.Win32.Agent.cylx

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.


Please quote all when answering.
-----------------
Regards, Kirill Kruglov
Virus Analyst, Kaspersky Lab.



Please find a detailed report concerning each individual sample below:

Filename

Result

db1.e2xe

MALWARE

The file 'db1.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat Adware/Dldr.WSearch.AN.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

qd.ex2e

MALWARE

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat Adware/Dldr.WSearch.AN.Detection will be added to our virus definition file (VDF) with one of the next updates.

submit to trendlabs

jayavira

315-317
ess 清空

sam.to

a06ed4fee3c8308d904e07aa8b252992   qd.ex2e
2470752d8c36951ff281f210a2571f77   db1.e1xe


to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25876468	750089-320.rar	356.95 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25876469	db1.e1xe	368 KB	UNDER ANALYSIS
25876470	qd.ex2e	408 KB	UNDER ANALYSIS

db1.e1xe - Trojan-Dropper.Win32.Agent.cysh,
qd.ex2e - Trojan-Dropper.Win32.Agent.cysi

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Regards, Vitaly Vorobiov
Virus Analyst



Please find a detailed report concerning each individual sample below:

Filename

Result

db1.e1xe

MALWARE

The file 'db1.e1xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.aek.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

qd.ex2e

MALWARE

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.aef.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.