360查杀出的木马.卡巴，小红伞不报

411

卡巴，小红伞不报,结果如下

a-squared	3.0.0.126	2007.11.26	2007-11-26	-	6.426
AntiVir	7.6.0.35	7.0.1.16	2007-11-28	-	5.058
Arcavir	1.0.4	200711272118	2007-11-27	-	2.328
AVAST	1.0.8	071127-0	2007-11-27	-	4.981
AVG	7.5.49.442	269.16.9/1155	2007-11-27	-	3.061
BitDefender	7.60825.956912	7.16000	2007-11-28	-	5.334
CA (VET)	9.0.0.143	31.3.5333	2007-11-28	-	0.942
ClamAV	0.91.2	4934	2007-11-28	-	0.563
Comodo	2.11	2.0.0.357	2007-11-28	-	1.079
CP Secure	1.1.0.655	2007.11.28	2007-11-28	-	5.012
Dr.WEB	4.44.0.9170	2007.11.28	2007-11-28	-	3.274
ewido	4.0.0.2	2007.11.27	2007-11-27	-	2.426
F-PROT	4.4.1.52	20071127	2007-11-27	-	1.444
F-SECURE	5.51.6100	2007.11.28.03	2007-11-28	-	2.929
IKARUS	T3.1.01.15	2007.11.26.69895	2007-11-26	-	1.456
MKS_VIR	2.01	2007.11.28	2007-11-28	-	7.265
NOD32	2.70.10	2690	2007-11-28	-	0.005
NORMAN	5.91.08	5.90	2007-11-26	-	6.757
nProtect	2007-11-28.00	1071649	2007-11-28	-	8.300
Prevx	V2	20071128	2007-11-28	TROJAN.PWDSTEALER.GEN	3.875
QuickHeal	9.00	2007.11.27	2007-11-27	-	3.109
SOPHOS	2.49.1	4.21	2007-11-28	-	6.919
The Hacker	6.2.9	v00144	2007-11-27	-	0.805
VBA32	3.12.2.5	20071128.0717	2007-11-28	-	2.052
ViRobot	20071127	2007.11.27	2007-11-27	-	0.375
VirusBuster	4.3.19:9	9.115.12/11.0	2007-11-28	-	1.516
卡巴斯基	5.5.10	2007.11.28	2007-11-28	-	4.506
安博士V3	2007.11.28.01	2007.11.28	2007-11-28	-	2.008
江民杀毒	10.00.650	2007.11.27	2007-11-27	-	1.197
熊猫卫士	9.04.03.0001	2007.11.26	2007-11-26	-	2.878
瑞星	19.0	20.20.20.00	2007-11-28	-	1.393
赛门铁克	1.3.0.24	20071127.002	2007-11-27	-	0.232
趋势	8.500-1001	4.852.07	2007-11-28	-	0.045
迈克菲	5.2.00	5172	2007-11-27	-	1.509
金山毒霸	2007.6.20.249	2007.11.28	2007-11-28	-	1.025
飞塔	2.81-3.11	8.426	2007-11-27	-	1.954

FBAV

看看

FBAV

误报

mofunzone

We received the following archive files:
File ID         Filename         Size (Byte)        Result
2251892         lo.rar        244.4 KB        OK


A listing of files contained inside archives alongside their results can be found below:File ID         Filename         Size (Byte)        Result
2209907         lo.dll         594.5 KB         KNOWN CLEAN



Please find a detailed report concerning each individual sample below: Filename        Result
lo.dll         KNOWN CLEAN


The file 'lo.dll' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Microsoft Windows XP (KB939653)'.

moonsilver

rs pass

sam.to

上报看看

aerbeisi

这个东西我上报过，是误报，是微软的文件，不过病毒把文件名改了。正常的文件应该是URLMON.DLL，也就是病毒把这个文件改名了，比对一下md5，urlmon.dll和lo.dll是一样的。也就是现在system32目录下有两个urlmon.dll和lo.dll，可以把lo.dll这个文件删了。

qigang

不是病毒。

sam.to

Hello,

lo.dll

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

sam.to

http://virscan.org/report/ca466582a2d6988abb8278c9cf8def1e.html
Prevx已不杀