刚刚360突然提示我的病毒，请各位大哥看看是否是病毒！KIS7.0没报

显示全部楼层 · 发表于 2008-7-17 09:38:43

刚刚准备魔兽360突然提示我发现该盗号木马，可我装的KIS7.0却放过它。。请各位大虾看看是不是病毒

显示全部楼层 · 发表于 2008-7-17 09:56:27

avast Win32:Trojan-gen {Other}

显示全部楼层 · 发表于 2008-7-17 10:15:54

国内杀毒软件都放过。。。

显示全部楼层 · 发表于 2008-7-17 10:53:19

The file 'oodagrs.dll' has been determined to be 'UNDER ANALYSIS'.

显示全部楼层 · 发表于 2008-7-17 10:57:22

avira free 飘，高射炮打下来

显示全部楼层 · 发表于 2008-7-17 11:00:16

00001E48 10001E48    0 VeriSign, Inc.1+0)
00001E60 10001E60    0 "VeriSign Time Stamping Services CA0
00001F14 10001F14    0 _zj1.
00001FBC 10001FBC    0 (0&0$
00001FCD 10001FCD    0 http://ocsp.verisign.com0
00002001 10002001    0 :0806
0000200B 1000200B    0 0http://crl.verisign.com/ThawteTimestampingCA.crl0
0000207B 1000207B    0 TSA2048-1-530
000020D2 100020D2    0 ?7!Op1
00002162 10002162    0 VeriSign, Inc.1+0)
0000217A 1000217A    0 "VeriSign Time Stamping Services CA0
000021A1 100021A1    0 031204000000Z
000021B0 100021B0    0 081203235959Z0W1
000021D7 100021D7    0 VeriSign, Inc.1/0-
000021EF 100021EF    0 &VeriSign Time Stamping Services Signer0
00002241 10002241    0 Dfu]~
0000227E 1000227E    0 \|f5_
0000234F 1000234F    0 (0&0$
00002360 10002360    0 http://ocsp.verisign.com0
0000238E 1000238E    0 ,0*0(
00002398 10002398    0 "http://crl.verisign.com/tss-ca.crl0
000023FD 100023FD    0 TSA2048-1-540
00002499 10002499    0 )qM.u
000024FE 100024FE    0 OG05!
00002565 10002565    0 VeriSign, Inc.1705
0000257D 1000257D    0 .Class 3 Public Primary Certification Authority0
000025B0 100025B0    0 040716000000Z
000025BF 100025BF    0 140715235959Z0
000025E7 100025E7    0 VeriSign, Inc.1
00002600 10002600    0 VeriSign Trust Network1;09
00002620 10002620    0 2Terms of use at https://www.verisign.com/rpa (c)041.0,
0000265D 1000265D    0 %VeriSign Class 3 Code Signing 2004 CA0
000026ED 100026ED    0 "'$l8
00002797 10002797    0 HRHo8
000027CD 100027CD    0 =0;09
000027EF 100027EF    0 https://www.verisign.com/rpa01
00002813 10002813    0 *0(0&
0000281D 1000281D    0 http://crl.verisign.com/pca3.crl0
0000289A 1000289A    0 Class3CA2048-1-430
000028BC 100028BC    0 ==d6|h
000028F4 100028F4    0 VeriSign, Inc.1705
0000290C 1000290C    0 .Class 3 Public Primary Certification Authority
00002A29 10002A29    0 VeriSign, Inc.1
00002A42 10002A42    0 VeriSign Trust Network1;09
00002A62 10002A62    0 2Terms of use at https://www.verisign.com/rpa (c)041.0,
00002A9F 10002A9F    0 %VeriSign Class 3 Code Signing 2004 CA0
00002AC9 10002AC9    0 060810000000Z
00002AD8 10002AD8    0 071016235959Z0
00002B00 10002B00    0 Berlin1
00002B11 10002B11    0 Berlin1
00002B22 10002B22    0 O and O Software GmbH1>0<
00002B41 10002B41    0 5Digital ID Class 3 - Microsoft Software Validation v21
00002B82 10002B82    0 O and O Software GmbH0
00002C64 10002C64    0 90705
00002C6E 10002C6E    0 /http://CSC3-2004-crl.verisign.com/CSC3-2004.crl0D
00002CA6 10002CA6    0 =0;09
00002CC8 10002CC8    0 https://www.verisign.com/rpa0
00002D06 10002D06    0 i0g0$
00002D17 10002D17    0 http://ocsp.verisign.com0?
00002D3C 10002D3C    0 3http://CSC3-2004-aia.verisign.com/CSC3-2004-aia.cer0
00002D83 10002D83    0 ==d6|h
00002E47 10002E47    0 }'K9!
00002E7C 10002E7C    0 ph7{Z
00002E98 10002E98    0 { ->1
00002EF9 10002EF9    0 VeriSign, Inc.1
00002F12 10002F12    0 VeriSign Trust Network1;09
00002F32 10002F32    0 2Terms of use at https://www.verisign.com/rpa (c)041.0,
00002F6F 10002F6F    0 %VeriSign Class 3 Code Signing 2004 CA
000030D4 100030D4    0 0g0S1
000030F0 100030F0    0 VeriSign, Inc.1+0)
00003108 10003108    0 "VeriSign Time Stamping Services CA
00003178 10003178    0 070511000620Z0

显示全部楼层 · 发表于 2008-7-17 11:02:51

一个DLL文件

显示全部楼层 · 发表于 2008-7-17 12:34:31

VirSCAN.org Scanned Report :
Scanned time : 2008/07/17 12:25:17 (CST)
Scanner results: 33%的杀软(12/36)报告发现病毒
File Name    : oodagrs.dll
File Size    : 12989 byte
File Type    : PE32 executable for MS Windows (DLL) (GUI) Intel 80386 32-bi
MD5          : ebd1344cc42a85e2debd95ff457aa590
SHA1          : 38d08d9005caa5b51510b377831f99bb95d2da26
Online report  : http://virscan.org/report/1dcac22ca8dcdc1eea23f20b4f24acf9.html

Scanner       Engine Ver    Sig Ver          Sig Date Time Scan result
a-squared    3.5.0.22       2008.07.16       2008-07-16  2.15 -
安博士V3    2008.07.17.00 2008.07.17       2008-07-17  0.84 -
AntiVir       7.8.0.68       7.0.5.128       2008-07-16  2.06 -
Arcavir       1.0.4          200807151947    2008-07-15  1.19 -
AVAST!       3.0.1          080717-0       2008-07-17  0.00 Win32:Trojan-gen {Other}
AVG          7.5.51.442    270.5.0/1556    2008-07-16  1.72 -
BitDefender 7.60825.1381522 7.20037          2008-07-17  2.59 -
CA (VET)    9.0.0.143    31.6.5961       2008-07-17  0.65 -
ClamAV       0.93.3       7730             2008-07-17  0.01 PUA.Packed.UPack
Comodo       2.11          2.0.0.586       2008-07-15  0.42 -
CP Secure    1.1.0.715    2008.07.16       2008-07-16  5.70 -
Dr.Web       4.44.0.9170    2008.07.16       2008-07-16  3.21 -
ewido       4.0.0.2       2008.07.16       2008-07-16  2.67 -
F-Prot       4.4.4.56       20080716       2008-07-16  1.00 Possible W32/Heuristic-210!Eldorado (damaged, not disinfectable)
F-Secure    5.51.6100    2008.07.16.11    2008-07-16  0.07 -
飞塔          2.81-3.11    9.322          2008-07-17  1.61 Suspicious
ViRobot       20080716       2008.07.16       2008-07-16  0.47 -
Ikarus       T3.1.01.26    2008.07.16.71106  2008-07-16  2.54 Trojan-Dropper.Win32.Agent.ane
江民杀毒    11.0.706       2008.07.17       2008-07-17  1.22 -
卡巴斯基    5.5.10       2008.07.16       2008-07-16  0.05 -
金山毒霸    2008.1.14.15 2008.7.16.17    2008-07-16  0.64 -
迈克菲       5.2.00       5340             2008-07-16  2.22 -
Microsoft    1.3704       2008.07.02       2008-07-02  6.12 VirTool:Win32/Obfuscator.C(Suspicious)
mks_vir       2.01          2008.07.15       2008-07-15  2.46 -
Norman       5.93.01       5.93.00          2008-07-16  4.47 W32/Suspicious_U.gen
熊猫卫士    9.05.01       2008.07.16       2008-07-16  1.83 -
趋势科技    8.700-1004    5.412.08       2008-07-16  0.02 TROJ_ZEROML.MM
Quick Heal    9.50          2008.07.15       2008-07-15  1.50 Trojan.Zeroml.mm
瑞星          20.0          20.53.22.00    2008-07-16  0.81 -
Sophos       2.75.4       4.31             2008-07-17  1.88 Mal/EncPk-BW
Sunbelt       3.1.1536.1    2143             2008-07-14  0.49 -
赛门铁克    1.3.0.24       20080716.005    2008-07-16  0.04 Infostealer.Gampass
nProtect    2008-07-15.00 1681762          2008-07-15  3.64 -
The Hacker    6.2.96       v00381          2008-07-13  0.40 W32/Behav-Heuristic-060
VBA32       3.12.8.0       20080716.0857    2008-07-16  1.09 -
VirusBuster 4.5.11.10    10.82.12/595718 2008-07-15  0.79 -

显示全部楼层 · 发表于 2008-7-17 12:40:26

可怜的 OO 磁盘整理

显示全部楼层 · 发表于 2008-7-17 20:31:56

McAfee miss

[病毒样本] 刚刚360突然提示我的病毒，请各位大哥看看是否是病毒！KIS7.0没报

本帖子中包含更多资源