35

sam.to

Scanned file:   0509.rar  - Infected
0509.rar/dbhlp32.exe - OK
0509.rar/dbhlp32.exe - OK
0509.rar/Domino.exe - OK
0509.rar/dvpzzriz.exe - OK
0509.rar/dvpzzriz.exe - OK
0509.rar/fmbiost.exe - OK
0509.rar/fmbiost.exe - OK
0509.rar/fmsbbqi.exe - OK
0509.rar/fmsbbqi.exe - OK
0509.rar/fmsjhif.exe - OK
0509.rar/fmsjhif.exe - OK
0509.rar/hefcndy.exe - OK
0509.rar/hefcndy.exe - OK
0509.rar/huifitc.exe - OK
0509.rar/huifitc.exe - OK
0509.rar/mfchlp64.exe - OK
0509.rar/mfchlp64.exe - OK
0509.rar/msosdohs00.dll - OK
0509.rar/msosdohs00.dll - OK
0509.rar/msosdohs01.dll - OK
0509.rar/msosdohs01.dll - OK
0509.rar/msosdohs.dat - OK
0509.rar/msosfmsq00.dll - infected by Trojan-PSW.Win32.OnLineGames.adxc
0509.rar/msosfmsq.dat - OK
0509.rar/msosmhfp00.dll - OK
0509.rar/msosmhfp00.dll - OK
0509.rar/msosmhfp.dat - OK
0509.rar/msosmnsf00.dll - OK
0509.rar/msosmnsf00.dll - OK
0509.rar/msosmnsf.dat - OK
0509.rar/msosping00.dll - OK
0509.rar/msosping00.dll - OK
0509.rar/msosping.dat - OK
0509.rar/nicozftp00.dll - OK
0509.rar/nicozftp00.dll - OK
0509.rar/ptshell.exe - OK
0509.rar/ptshell.exe - OK
0509.rar/SysDaJHv.dll - infected by Trojan-PSW.Win32.OnLineGames.actc
0509.rar/SysWoWa8.dll - OK
0509.rar/SysWoWa8.dll - OK
0509.rar/ticisms.exe - OK
0509.rar/ticisms.exe - OK
0509.rar/yuiabct.exe - OK
0509.rar/yuiabct.exe - OK
0509.rar/4.exe - infected by Trojan-PSW.Win32.OnLineGames.adkl
0509.rar/5.exe - infected by Trojan-PSW.Win32.OnLineGames.adwi
0509.rar/12.exe - OK
0509.rar/12.exe - OK
0509.rar/15.exe - infected by Trojan-PSW.Win32.OnLineGames.acoo
0509.rar/19.exe - infected by Trojan-PSW.Win32.OnLineGames.adup
0509.rar/34.exe - infected by Trojan-PSW.Win32.QQPass.btb
0509.rar/anistio.exE - OK
0509.rar/anistio.exE - OK
0509.rar/bincdwsa.exe - infected by Trojan-PSW.Win32.OnLineGames.adwl
0509.rar/cinfonmc.exe - OK
0509.rar/cinfonmc.exe - OK

Hello.
New malicious software was found in the attached file.
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com



已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aegf        檔案: N:\v4\0509.rar/dbhlp32.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aedo        檔案: N:\v4\0509.rar/dvpzzriz.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aecx        檔案: N:\v4\0509.rar/fmbiost.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aegg        檔案: N:\v4\0509.rar/fmsbbqi.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aecd        檔案: N:\v4\0509.rar/fmsjhif.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aecx        檔案: N:\v4\0509.rar/hefcndy.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aefs        檔案: N:\v4\0509.rar/huifitc.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aegh        檔案: N:\v4\0509.rar/mfchlp64.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-Proxy.Win32.Xorpix.er        檔案: N:\v4\0509.rar/msosdohs00.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-Proxy.Win32.Xorpix.er        檔案: N:\v4\0509.rar/msosdohs01.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.adxc        檔案: N:\v4\0509.rar/msosfmsq00.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aedp        檔案: N:\v4\0509.rar/msosmhfp00.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-Proxy.Win32.Xorpix.ep        檔案: N:\v4\0509.rar/msosmnsf00.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-Proxy.Win32.Xorpix.eq        檔案: N:\v4\0509.rar/msosping00.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aegj        檔案: N:\v4\0509.rar/nicozftp00.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aeen        檔案: N:\v4\0509.rar/ptshell.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.actc        檔案: N:\v4\0509.rar/SysDaJHv.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aegk        檔案: N:\v4\0509.rar/SysWoWa8.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aedw        檔案: N:\v4\0509.rar/ticisms.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aedk        檔案: N:\v4\0509.rar/yuiabct.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.adkl        檔案: N:\v4\0509.rar/4.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.adwi        檔案: N:\v4\0509.rar/5.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aedv        檔案: N:\v4\0509.rar/12.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.acoo        檔案: N:\v4\0509.rar/15.exe2//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.adup        檔案: N:\v4\0509.rar/19.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.QQPass.btb        檔案: N:\v4\0509.rar/34.exe2//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aefc        檔案: N:\v4\0509.rar/anistio.exE2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.adwl        檔案: N:\v4\0509.rar/bincdwsa.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aefw        檔案: N:\v4\0509.rar/cinfonmc.exe2//FSG


不报的不是毒

Kitman

32
Begin scan in 'C:\Documents and Settings\Administrator\桌面\0509.rar'
C:\Documents and Settings\Administrator\桌面\0509.rar
C:\Documents and Settings\Administrator\桌面\0509.rar
  [0] Archive type: RAR
    --> dvpzzriz.exe2
          [DETECTION] Is the Trojan horse TR/Onlinegames.NVI
    --> fmbiost.exe2
          [DETECTION] Is the Trojan horse TR/Hijacker.Gen
    --> fmsbbqi.exe2
          [DETECTION] Is the Trojan horse TR/Hijacker.Gen
    --> fmsjhif.exe2
          [DETECTION] Is the Trojan horse TR/Hijacker.Gen
    --> hefcndy.exe2
          [DETECTION] Is the Trojan horse TR/Hijacker.Gen
    --> huifitc.exe2
          [DETECTION] Is the Trojan horse TR/Hijacker.Gen
    --> mfchlp64.exe2
          [DETECTION] Is the Trojan horse TR/Hijacker.Gen
    --> msosdohs00.dll
          [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
    --> msosdohs01.dll
          [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
  --> msosfmsq00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.adxc
  --> msosmhfp00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aedp
  --> msosmnsf00.dll
      [DETECTION] Is the Trojan horse TR/Proxy.Xorpix.EP
    --> msosping00.dll
          [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
    --> nicozftp00.dll
          [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
    --> ptshell.exe2
          [DETECTION] Is the Trojan horse TR/Hijacker.Gen
    --> SysDaJHv.dll
          [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
    --> SysWoWa8.dll
          [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
    --> ticisms.exe2
          [DETECTION] Is the Trojan horse TR/Hijacker.Gen
    --> yuiabct.exe2
          [DETECTION] Is the Trojan horse TR/Hijacker.Gen
    --> 4.exe2
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> 5.exe2
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.adwk
    --> 12.exe2
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ala
    --> 19.exe2
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.adwk
    --> 34.exe2
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.QQpass.btc
    --> anistio.exE2
          [DETECTION] Is the Trojan horse TR/Hijacker.Gen
    --> bincdwsa.exe2
          [DETECTION] Is the Trojan horse TR/Hijacker.Gen
      [NOTE]      A backup was created as '48546a51.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!


End of the scan: 2008年5月9日  23:13
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
     36 Files were scanned
     32 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

wangjay1980

K

IllusionWing

漏了一个
有几个是病毒的配置文件

挪威的冬天

信息        2008-05-09  23:21:48        您此次查毒清除了21个病毒                       
信息        2008-05-09  23:21:48        您此次查毒共查出21个病毒以及危险代码                       
信息        2008-05-09  23:21:48        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件66个                       
信息        2008-05-09  23:21:48        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒

细路(L)

avk08   KILL29...

1112482  Domino.exe2  48 KB  CLEAN
25015058  msosdohs.dat  384 Byte  UNDER ANALYSIS
25015059  msosfmsq.dat  256 Byte  UNDER ANALYSIS
25003834  msosmhfp.dat  256 Byte  CLEAN
25015060  msosmnsf.dat  256 Byte  UNDER ANALYSIS
25015061  msosping.dat  128 Byte  UNDER ANALYSIS

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.ka
病毒： Trojan.PSW.Win32.GameOL.gbv
病毒： Trojan.Win32.AvKiller.ar
病毒： Trojan.PSW.Win32.GamesOnline.wb
病毒： Trojan.PSW.Win32.SunOnline.nz
病毒： Trojan.PSW.Win32.GameOL.je
病毒： Worm.Win32.PaBug.gy      
病毒： Trojan.PSW.Win32.GameOL.gau
病毒： Trojan.PSW.Win32.GameOL.gbk

用户来源：互联网

软件版本：20.43.42
22个

oil

郁冰兰雪

EAV