qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

显示全部楼层 · 发表于 2010-7-27 12:09:06

本帖最后由 sam.to 于 2010.7.28 16:37 编辑

1275741895B790A9B700EAB2AEBA2403

to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25823107	qd.ex2e	640 KB	UNDER ANALYSIS

Hello,

Trojan-Dropper.Win32.Agent.cmqe

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

Best Regards,
Oleg Yurzin

Malware Analyst
Kaspersky Lab

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Wsearch.B.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2010-7-27 12:18:10

ESET NOD32 detected.

显示全部楼层 · 发表于 2010-7-27 12:44:01

回复 69楼 sam.to 的帖子

数字kill

显示全部楼层 · 发表于 2010-7-27 18:38:58

本帖最后由 sam.to 于 2010.7.28 16:38 编辑

A77C776E343681C94B164FF8134322CC

to kl,ll,mcafee,comdoo,avira

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25823436	qd.ex2e	640 KB	UNDER ANALYSIS

Hello,

qd.ex2e - Trojan-Dropper.Win32.Agent.cmsf

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Regards, Kuskov Vladimir
Virus Analyst

The file 'qd.ex2e' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Zlob.bmy.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2010-7-28 06:40:24

回复 74楼 sam.to 的帖子

ess kill

Win32/Adware.WSearch.AJ 应用程序的变种

显示全部楼层 · 发表于 2010-7-28 06:42:03

类别: 特洛伊木马植入程序

说明: 这个程序很危险，它安装其他程序。

建议: 立即删除这个软件。

Microsoft Security Essentials 检测到可能会侵害您的隐私或损坏计算机的程序。即使不删除这些程序，仍然可以访问它们所使用的文件(不推荐)。若要访问这些文件，请选择“允许”操作，并单击“应用操作”。如果此选项不可用，请以管理员身份登录或请求本地管理员提供帮助。

项目:
containerfile:C:\Users\zhouxing\Downloads\qd.rar
file:C:\Users\zhouxing\Downloads\qd.rar->qd.ex2e
webfile:C:\ProgramData\Microsoft\Microsoft Antimalware\LocalCopy\{8EF1BA68-6776-44C0-A376-372E37039D1F}-qd.rar|http://bbs.kafan.cn/forum.php?mo ... yNzA0OTN8NTQ4NzU%3D
webfile:C:\Users\zhouxing\Downloads\qd.rar|http://bbs.kafan.cn/forum.php?mo ... yNzA0OTN8NTQ4NzU%3D

联机获取有关此项目的详细信息。

显示全部楼层 · 发表于 2010-7-28 06:45:40

74 to xandora(panda)

显示全部楼层 · 发表于 2010-7-28 08:45:44

毒霸杀

显示全部楼层 · 发表于 2010-7-28 09:13:26

74 to norman

显示全部楼层 · 发表于 2010-7-28 12:23:23

本帖最后由 sam.to 于 2010.7.28 16:39 编辑

42F25475F43CFB538C276C5B85018FB6

to kl,ll,mcafee,comdoo,avira

File ID	Filename	Size (Byte)	Result
25824421	qd.exe2	640 KB	UNDER ANALYSIS

Hello,

qd.exe2 - Trojan-Dropper.Win32.Agent.cmxq

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

The file 'qd.exe2' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Purgodoor.A.3.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.09.226.

[病毒样本] qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)