qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

sam.to

230ef1ba13cd9f6f9f896f1fea2c966f   qd.e2xe
2dd3285e1f31d7700708861318499054   db1.exe1

to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25878782	750089-341.rar	356.67 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25878783	qd.e2xe	408 KB	UNDER ANALYSIS
25878784	db1.exe1	368 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename

Result

qd.e2xe

MALWARE

The file 'qd.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.ahk.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

db1.exe1

MALWARE

The file 'db1.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.ahm.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

jayavira

回复 341楼 sam.to  的帖子
ess 清空

chenjava

to anchiva

sam.to

4d59edac211eaa55d497cd4a63887b10   qd.e1xe
3ef75b796afa62bad353e5156449e395   db1.ex2e


to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25878906	750089-344.rar	356.68 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25878907	qd.e1xe	408 KB	UNDER ANALYSIS
25878908	db1.ex2e	368 KB	UNDER ANALYSIS

db1.ex2e - Trojan-Dropper.Win32.Agent.czdg
qd.e1xe - Trojan-Dropper.Win32.Agent.czdh


Please find a detailed report concerning each individual sample below:

Filename

Result

qd.e1xe

MALWARE

The file 'qd.e1xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.aht.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

db1.ex2e

MALWARE

The file 'db1.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.ahv.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

瓜皮猫

ESS kill 2
C:\Users\Desktop\750089-344\db1.ex2e - Win32/Adware.WSearch.AN 应用程序 的变种
C:\Users\Desktop\750089-344\qd.e1xe - Win32/Adware.WSearch.AN 应用程序 的变种

vmzy

360杀毒
750089-341\db1.exe1        广告程序(Adware/Win32.WSearch.AN)
750089-341\qd.e2xe        广告程序(Adware/Win32.WSearch.AN)

750089-344\db1.ex2e        广告程序(Adware/Win32.WSearch.AN)
750089-344\qd.e1xe        广告程序(Adware/Win32.WSearch.AN)

sam.to

a6f7c3cf9f31d4922dd5c87967b51989   qd.exe2
2c1d5b7d1851936ca30bfb04fa3b30b6   db1.ex1e


to kl,ll,mcafee,avira

File ID	Filename	Size (Byte)	Result
25879232	750089-347.rar	358.07 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25879233	db1.ex1e	368 KB	UNDER ANALYSIS
25879234	qd.exe2	408 KB	UNDER ANALYSIS

db1.ex1e - Trojan-Dropper.Win32.Agent.czes,

qd.exe2 - Trojan-Dropper.Win32.Agent.czer

jayavira

回复 347楼 sam.to  的帖子
ess 清空

sam.to

f9626a432170d972c1693c9b84ad1ec9   db1.e2xe
ef4b1f9cda3d4a0748a2aa2e9f81986c   qd.e1xe

to kl,ll,mcafee,avira

File ID	Filename	Size (Byte)	Result
25879753	750089-349.rar	357.18 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25879754	qd.e1xe	408 KB	UNDER ANALYSIS
25879755	db1.e2xe	368 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename

Result

qd.e1xe

MALWARE

The file 'qd.e1xe' has been determined to be 'MALWARE'.
Our analysts named the threat ADSPY/WSearch.AC.The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or byusing of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

db1.e2xe

MALWARE

The file 'db1.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat ADSPY/WSearch.AF.The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or byusing of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection will be added to our virus definition file (VDF) with one of the next updates.



Please find a detailed report concerning each individual sample below:

Filename

Result

db1.ex1e

MALWARE

The file 'db1.ex1e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Siggen.B.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

qd.exe2

MALWARE

The file 'qd.exe2' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Siggen.C.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

无微不至

已上报NOD32病毒样本提交系统