qd.exe及db1.exe (此帖已完,1394楼有新帖子的地址)

绅博周幸

to kl,ll,mcafee,comdoo,avira




Hello,

qd.exe2 - Trojan-Dropper.Win32.Agent.cmxq

N ...
sam.to 发表于 2010.7.28 12:23

类别: 特洛伊木马植入程序

说明: 这个程序很危险，它安装其他程序。

建议: 立即删除这个软件。

Microsoft Security Essentials 检测到可能会侵害您的隐私或损坏计算机的程序。即使不删除这些程序，仍然可以访问它们所使用的文件(不推荐)。若要访问这些文件，请选择“允许”操作，并单击“应用操作”。如果此选项不可用，请以管理员身份登录或请求本地管理员提供帮助。

项目:
containerfile:C:\Users\zhouxing\Downloads\qd.rar
file:C:\Users\zhouxing\Downloads\qd.rar->qd.exe2
webfile:C:\ProgramData\Microsoft\Microsoft Antimalware\LocalCopy\{92ACE9F4-BDA3-41E9-BCF8-67FDDB49B9DC}-qd.rar|http://bbs.kafan.cn/forum.php?mo ... yOTU3NzF8NTQ4NzU%3D
webfile:C:\Users\zhouxing\Downloads\qd.rar|http://bbs.kafan.cn/forum.php?mo ... yOTU3NzF8NTQ4NzU%3D

联机获取有关此项目的详细信息。

ablhr

71,74,80
费尔杀

jayavira

回复 80楼 sam.to  的帖子

ess kill

   Win32/Adware.WSearch.AJ 应用程序 的变种
   

sam.to

96996BF06244ACFFFAB7669837B5D721


to kl,ll,mcafee,comodo,avira

File ID	Filename	Size (Byte)	Result
25824786	qd.e2xe	640 KB	UNDER ANALYSIS

The file 'qd.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Purgodoor.A.4.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.09.249.



qd.e2xe - Trojan-Dropper.Win32.Agent.cnad

jason_jiang

84 to xandora(panda)

8073176430

84 eset kill
Win32/Adware.WSearch.AJ 应用程序 的变种

62590423

mse就这样加了通杀

sam.to

e3373fa6fbf1156f8775268ceebcfc3a

to kl,ll,mcafee,comodo,avira


A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25826187	qd.e2xe	640 KB	UNDER ANALYSIS

Hello,

qd.e2xe - Trojan-Dropper.Win32.Agent.cngf

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.








The file 'qd.e2xe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Purgodoor.A.5.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.09.251.

jayavira

回复 88楼 sam.to  的帖子

ess kill

2010-7-29 14:57:15        文件系统实时防护        文件        D:\下载文件夹\qd.e2xe        Win32/Adware.WSearch.AJ 应用程序 的变种        通过删除清除 - 已隔离        WWW-738C9D7CF42\Administrator        在应用程序新建的文件上发生事件: D:\Program Files\WinRAR\WinRAR.exe.
   

hansyu

88
Norton SONAR kill
to SSR & xandora(panda)