qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-11-6 18:20:51

本帖最后由 sam.to 于 2010-11-6 19:35 编辑

460153242908d22f080437378c83ab31 qd.exe2
7132af1e0fcd8f9590d978120e6b21dc db1.e2xe

to kl,ll

db1.e2xe - Trojan-Dropper.Win32.Cadro.dev
qd.exe2 - Trojan-Dropper.Win32.Cadro.dew

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2010-11-6 18:33:36

671L
eset kill
C:\Users\微亿毫\Desktop\750089-671\db1.e2xe - Win32/Adware.WSearch.AN 应用程序的变种
C:\Users\微亿毫\Desktop\750089-671\qd.exe2 - Win32/Adware.WSearch.AN 应用程序的变种

显示全部楼层 · 发表于 2010-11-6 20:31:07

669解压蜘蛛KILL

671

显示全部楼层 · 发表于 2010-11-6 20:33:02

回复 671楼 sam.to 的帖子

to kv2011

显示全部楼层 · 发表于 2010-11-6 23:16:36

楼主，你给的样本只是反复重新将原有的样本加壳吗？能不能发点全新的样本？（PS:因为我没有安装虚拟机，所以运行触发主动防御这块无法测试）。

显示全部楼层 · 发表于 2010-11-7 11:26:54

本帖最后由 sam.to 于 2010-11-7 15:28 编辑

b1cde6eca8cf73192eb467f1f6ccff15 qd.exe2
6daf6314571381cd6124bb7b7bc7da02 db1.exe2

to kl,ll

Hello,

db1.exe2 - Trojan-Dropper.Win32.Cadro.dez,
qd.exe2 - Trojan-Dropper.Win32.Cadro.dfa

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Please quote all when answering.
-----------------
Regards, Kirill Kruglov
Virus Analyst, Kaspersky Lab.

显示全部楼层 · 发表于 2010-11-7 11:28:12

676L
eset kill
C:\Users\微亿毫\Desktop\750089-676\db1.exe2 - Win32/Adware.WSearch.AN 应用程序的变种
C:\Users\微亿毫\Desktop\750089-676\qd.exe2 - Win32/Adware.WSearch.AN 应用程序的变种

显示全部楼层 · 发表于 2010-11-7 11:30:49

过蜘蛛

显示全部楼层 · 发表于 2010-11-8 14:01:14

本帖最后由 sam.to 于 2010-11-8 17:23 编辑

04255944ab59010a17b3da09f2f347b3 qd.exe2
b8d0b0f4b291778471fe959df3a64801 db1.exe2

to kl,ll

Hello,

92857587_324358607_db1.exe2 - Trojan-Dropper.Win32.Cadro.dff,

92857587_324358609_qd.exe2 - Trojan-Dropper.Win32.Cadro.dfg

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

--
Best regards,
Virus analyst, Kaspersky Lab.

显示全部楼层 · 发表于 2010-11-8 14:50:07

679 过蜘蛛，上报

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)