一些

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.SunGame.u
病毒： Trojan.PSW.Win32.GameOL.gby
病毒： Trojan.PSW.Win32.SunOnline.ol
病毒： Trojan.PSW.Win32.GamesOnline.acs
病毒： Trojan.PSW.Win32.SO2Online.bx
病毒： RootKit.Win32.Undef.hu   
病毒： Trojan.PSW.Win32.XYOnline.aen
病毒： Trojan.PSW.Win32.GameOL.nov
病毒： Trojan.PSW.Win32.GamesOnline.abi
病毒： Trojan.PSW.Win32.LMir.bpj
病毒： Trojan.PSW.Win32.QQHX.txd
病毒： Trojan.PSW.Win32.GameOL.nom
病毒： Trojan.PSW.Win32.GamesOnline.abn
病毒： Trojan.PSW.Win32.Shanda.bi
病毒： RootKit.Win32.Undef.gt   
病毒： Trojan.PSW.Win32.GamesOnline.yf
病毒： Trojan.PSW.Win32.GameOL.nix
病毒： Trojan.PSW.Win32.GameOL.nqh
病毒： Trojan.PSW.Win32.GamesOnline.abg
病毒： Trojan.PSW.Win32.GameOL.npc
病毒： Trojan.PSW.Win32.GamesOnline.yq
病毒： Trojan.Win32.StartPage.mcy
病毒： RootKit.Win32.Undef.hv   
病毒： Trojan.PSW.Win32.GameOL.non
病毒： Trojan.PSW.Win32.GamesOnline.abh
病毒： RootKit.Win32.Undef.hc   
病毒： Trojan.PSW.Win32.GameOL.nks
病毒： Worm.Win32.PaBug.hf      
病毒： Trojan.PSW.Win32.GamesOnline.aat

未清除病毒种类列表：
病毒： 未知 Windows 病毒            

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.45.62

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:10.exe<UPack>:10.exe <- Trojan.Psw.Onlinegames.Ahvq : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:11.exe <- Trojan.Psw.Onlinegames.Ajeu : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:12.exe <- Trojan.Psw.Onlinegames.Aiik : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:4.exe <- Trojan.Psw.Onlinegames.Aeec : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:4.exe<UPack>:4.exe <- Trojan.Psw.Onlinegames.Aeec : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:4.exe<UPack>:4.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Aeee : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:8.exe <- Trojan.Psw.Onlinegames.Aian : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a1.exe <- Trojan.Psw.Onlinegames.Adrp : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a1.exe<FSG>:a1.exe <- Trojan.Psw.Onlinegames.Adrp : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a10.exe <- Trojan.Psw.Onlinegames.Ajgl : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a16.exe<UPack>:a16.exe <- Trojan.Psw.Lmir.Bpc : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a16.exe<UPack>:a16.exe<DLLRES>:J9996660.exe <- Trojan.Psw.Lmir.Bvi : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a18.exe<FSG>:a18.exe <- Trojan.Psw.Onlinegames.Aeen : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a18.exe<FSG>:a18.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Aegw : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a20.exe<UPack>:a20.exe <- Trojan.Psw.Onlinegames.Abfh : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a20.exe<UPack>:a20.exe<DLLRES>:ABCDE0.exe <- Trojan.Psw.Onlinegames.Abfd : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a21.exe<FSG>:a21.exe <- Trojan.Psw.Onlinegames.Aeoa : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a21.exe<FSG>:a21.exe<DLLRES>:res0.exe<UPack>:res0.exe <- Trojan.Psw.Onlinegames.Aenz : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a21.exe<FSG>:a21.exe<DLLRES>:res1.exe <- Trojan.Rootkit.Agent.Ald : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a22.exe <- Trojan.Psw.Onlinegames.Aidc : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a22.exe<FSG>:a22.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Aidc : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a27.exe <- Trojan.Psw.Onlinegames.Aedw : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a27.exe<FSG>:a27.exe <- Trojan.Psw.Onlinegames.Aedw : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a27.exe<FSG>:a27.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Aegx : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a28.exe <- Trojan.Startpage.Bbq : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a28.exe<FSG>:a28.exe <- Trojan.Startpage.Avr : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a3.exe <- Trojan.Psw.Onlinegames.Aiyg : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a3.exe<FSG>:a3.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Aiyd : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a4.exe <- Trojan.Psw.Onlinegames.Ajbv : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a5.exe <- Trojan.Psw.Onlinegames.Aidr : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a6.exe <- Trojan.Psw.Qqpass.Bzg : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a6.exe<UPX>:a6.exe <- Trojan.Psw.Qqpass.Buw : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a6.exe<UPX>:a6.exe<DLLRES>:FILE0.exe <- Trojan.Psw.Qqpass.Bux : No action
C:\Documents and Settings\All Users\Documents\Test\bingdu.rar<RAR>:a7.exe <- Trojan.Psw.Onlinegames.Ajbr : No action



Scanned objects : 146

Infected objects : 34

allinwonderi

[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\1.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\10.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\11.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\12.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\13.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\14.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\15.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\16.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\17.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\18.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\19.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\2.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\3.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\4.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\5.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\6.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\7.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\8.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\9.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a12.exe->(embedded)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a16.exe
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a18.exe->(FSG)
[Found security risk]         <W32/OnlineGames.C.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a2.exe->(embedded)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a20.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a21.exe->(embedded)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a22.exe->(FSG)
[Found possible security risk]         <W32/Heuristic-KPP!Eldorado (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a23.exe->(embedded)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a26.exe->(embedded)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a27.exe->(FSG)
[Found Trojan]         <W32/Trojan2.WRQ (exact, damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a28.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a29.exe->exefile->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a3.exe->(embedded)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a5.exe->(embedded)
[Found security risk]         <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a6.exe->(UPX)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a7.exe->exefile->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\bingdu.rar->bingdu\a9.exe->exefile->(UPack)

---------------------------------------------------------------------
Scan ended:        2008-5-25, 19:33:45
Duration:        0:00:23

Scan result:

Scanned files:                 6
Infected objects:         36
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

sam.to

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Maslennikov Denis
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

尤金卡巴斯基

已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajom        文件　: G:\Temp\bingdu.rar/bingdu\1.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ahvq        文件　: G:\Temp\bingdu.rar/bingdu\10.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajeu        文件　: G:\Temp\bingdu.rar/bingdu\11.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aiik        文件　: G:\Temp\bingdu.rar/bingdu\12.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Agent.qnn        文件　: G:\Temp\bingdu.rar/bingdu\13.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Agent.qnn        文件　: G:\Temp\bingdu.rar/bingdu\14.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajoq        文件　: G:\Temp\bingdu.rar/bingdu\15.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajod        文件　: G:\Temp\bingdu.rar/bingdu\16.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aind        文件　: G:\Temp\bingdu.rar/bingdu\17.exe//UPack//#
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajoi        文件　: G:\Temp\bingdu.rar/bingdu\18.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajod        文件　: G:\Temp\bingdu.rar/bingdu\19.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajoi        文件　: G:\Temp\bingdu.rar/bingdu\2.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajop        文件　: G:\Temp\bingdu.rar/bingdu\3.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aeec        文件　: G:\Temp\bingdu.rar/bingdu\4.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajoo        文件　: G:\Temp\bingdu.rar/bingdu\5.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajom        文件　: G:\Temp\bingdu.rar/bingdu\6.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajon        文件　: G:\Temp\bingdu.rar/bingdu\7.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aian        文件　: G:\Temp\bingdu.rar/bingdu\8.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Agent.qnn        文件　: G:\Temp\bingdu.rar/bingdu\9.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.adrp        文件　: G:\Temp\bingdu.rar/bingdu\a1.exe//FSG//PEPatch
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajgl        文件　: G:\Temp\bingdu.rar/bingdu\a10.exe//PE_Patch.UPX//UPX
已隔离：病毒 Heur.Trojan.Generic (修改)        文件　: G:\Temp\bingdu.rar/bingdu\a11.exe
已删除：木马程序 Trojan-Dropper.Win32.Agent.rxx        文件　: G:\Temp\bingdu.rar/bingdu\a12.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajgo        文件　: G:\Temp\bingdu.rar/bingdu\a13.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajjv        文件　: G:\Temp\bingdu.rar/bingdu\a14.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajgm        文件　: G:\Temp\bingdu.rar/bingdu\a15.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.Lmir.bvh        文件　: G:\Temp\bingdu.rar/bingdu\a16.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajox        文件　: G:\Temp\bingdu.rar/bingdu\a17.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aeen        文件　: G:\Temp\bingdu.rar/bingdu\a18.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajgf        文件　: G:\Temp\bingdu.rar/bingdu\a19.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajhl        文件　: G:\Temp\bingdu.rar/bingdu\a2.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.abfh        文件　: G:\Temp\bingdu.rar/bingdu\a20.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aeoa        文件　: G:\Temp\bingdu.rar/bingdu\a21.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aidc        文件　: G:\Temp\bingdu.rar/bingdu\a22.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajjx        文件　: G:\Temp\bingdu.rar/bingdu\a24.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajbt        文件　: G:\Temp\bingdu.rar/bingdu\a25.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajlu        文件　: G:\Temp\bingdu.rar/bingdu\a26.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aedw        文件　: G:\Temp\bingdu.rar/bingdu\a27.exe//FSG
已删除：木马程序 Trojan.Win32.StartPage.avr        文件　: G:\Temp\bingdu.rar/bingdu\a28.exe//FSG//PEPatch
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajoh        文件　: G:\Temp\bingdu.rar/bingdu\a29.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aiyg        文件　: G:\Temp\bingdu.rar/bingdu\a3.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajbv        文件　: G:\Temp\bingdu.rar/bingdu\a4.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aidr        文件　: G:\Temp\bingdu.rar/bingdu\a5.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.QQPass.bzg        文件　: G:\Temp\bingdu.rar/bingdu\a6.exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajbr        文件　: G:\Temp\bingdu.rar/bingdu\a7.exe//PE_Patch//UPack
已隔离：病毒 Heur.Trojan.Generic (修改)        文件　: G:\Temp\bingdu.rar/bingdu\a8.exe//FSG

explorer

推多了