Twenty-nine

qigang

瑞星病毒查杀结果报告(75/31)

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.nxa
病毒： Trojan.PSW.Win32.SunGame.u
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.nxl
病毒： Trojan.PSW.Win32.ZhuXian.ht
病毒： Trojan.PSW.Win32.GamesOnline.aey
病毒： Trojan.PSW.Win32.GameOL.nvb
病毒： RootKit.Win32.RESSDT.bg  
病毒： RootKit.Win32.RESSDT.bg  
病毒： Worm.Win32.PaBug.hk      
病毒： Trojan.PSW.Win32.GameOL.nwc
病毒： Trojan.PSW.Win32.GameOL.nwc

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.47.32

The EQs

C:\Users\Administrator\Desktop\virus(2).rar » RAR » da14.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da2.exe - Win32/PSW.OnLineGames.OAF trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da3.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da4.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da5.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da6.exe - probably a variant of Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da7.exe - Win32/PSW.OnLineGames.OAF trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da8.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da9.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da10.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da11.exe - probably a variant of Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da12.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da13.exe - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da1.exe - a variant of Win32/PSW.OnLineGames.XZN trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da15.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da16.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da17.exe - a variant of Win32/PSW.OnLineGames.XZN trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da18.exe - a variant of Win32/PSW.QQPass.NCZ trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da19.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da20.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da21.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da22.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da23.exe - a variant of Win32/PSW.OnLineGames.XZN trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da24.exe - probably a variant of Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da25.exe - probably unknown NewHeur_PE virus
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da26.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da27.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da28.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\virus(2).rar » RAR » da29.exe - probably a variant of Win32/Genetik trojan

挪威的冬天

信息        2008-06-05  22:55:23        您此次查毒清除了22个病毒                       
信息        2008-06-05  22:55:23        您此次查毒共查出22个病毒以及危险代码                       
信息        2008-06-05  22:55:23        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件57个                       
信息        2008-06-05  22:55:23        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒

kingmuro

sbbdms

Kaspersky miss two
TO KL

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus'
C:\Documents and Settings\Administrator\桌面\virus\da1.exe
  [0] Archive type: OVL
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amax
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da10.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da11.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.276
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da12.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da13.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alna
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da14.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da15.exe
      [DETECTION] Is the Trojan horse TR/Agent.7680
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da16.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da17.exe
  [0] Archive type: OVL
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amax
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da18.exe
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da19.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da2.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da20.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da21.exe
      [DETECTION] Is the Trojan horse TR/Agent.7680
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da22.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da23.exe
  [0] Archive type: OVL
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amax
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da24.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amfb
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da25.exe
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da26.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da27.exe
      [DETECTION] Is the Trojan horse TR/Agent.7680
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da28.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da29.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da3.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da4.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da5.exe
      [DETECTION] Is the Trojan horse TR/Agent.7680
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da6.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.267
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da7.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da8.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\da9.exe
      [DETECTION] Is the Trojan horse TR/Agent.7680
      [NOTE]      The file was deleted!


End of the scan: 星期五 2008年6月6日  04:31
Used time: 00:19 min

The scan has been done completely.

      1 Scanning directories
     29 Files were scanned
     32 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     29 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -3 Files not concerned
      0 Archives were scanned
      0 Warnings
     29 Notes

scottxzt

C:\Documents and Settings\Administrator\桌面\virus.rar        OK
C:\Documents and Settings\Administrator\桌面\virus.rar=>da14.exe        Infected: Generic.Malware.SBdldg.B5BD9759
C:\Documents and Settings\Administrator\桌面\virus.rar=>da14.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da14.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da2.exe        Infected: Generic.Malware.SBdldg.27320494
C:\Documents and Settings\Administrator\桌面\virus.rar=>da2.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da2.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da3.exe        Infected: Generic.Malware.SBdldg.41F14DD8
C:\Documents and Settings\Administrator\桌面\virus.rar=>da3.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da3.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da4.exe        Infected: Trojan.Dropper.RWY
C:\Documents and Settings\Administrator\桌面\virus.rar=>da4.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da4.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da5.exe        Infected: Trojan.PWS.OnlineGames.YYE
C:\Documents and Settings\Administrator\桌面\virus.rar=>da5.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da5.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da6.exe        Infected: Trojan.PWS.OnlineGames.YYN
C:\Documents and Settings\Administrator\桌面\virus.rar=>da6.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da6.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da7.exe        Infected: Generic.Malware.SBdldg.8A2CD849
C:\Documents and Settings\Administrator\桌面\virus.rar=>da7.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da7.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da8.exe        Infected: Generic.Malware.SBdldg.DC9ADBCB
C:\Documents and Settings\Administrator\桌面\virus.rar=>da8.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da8.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da9.exe        Infected: Trojan.PWS.OnlineGames.YYF
C:\Documents and Settings\Administrator\桌面\virus.rar=>da9.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da9.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da10.exe        Infected: Generic.Malware.SBdldg.09ABB445
C:\Documents and Settings\Administrator\桌面\virus.rar=>da10.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da10.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da11.exe        Infected: Generic.PWS.Games.4.36E33CC2
C:\Documents and Settings\Administrator\桌面\virus.rar=>da11.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da11.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da12.exe        Infected: Trojan.PWS.OnlineGames.YXK
C:\Documents and Settings\Administrator\桌面\virus.rar=>da12.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da12.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da13.exe        Infected: Generic.PWS.Games.4.A2259D30
C:\Documents and Settings\Administrator\桌面\virus.rar=>da13.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da13.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da1.exe        Infected: Trojan.PWS.OnlineGames.YXF
C:\Documents and Settings\Administrator\桌面\virus.rar=>da1.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da1.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da15.exe        OK
C:\Documents and Settings\Administrator\桌面\virus.rar=>da16.exe        Infected: Trojan.PWS.OnlineGames.YXK
C:\Documents and Settings\Administrator\桌面\virus.rar=>da16.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da16.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da17.exe        Infected: Trojan.PWS.OnlineGames.YXF
C:\Documents and Settings\Administrator\桌面\virus.rar=>da17.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da17.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da18.exe        Infected: Generic.PWStealer.84BD79F5
C:\Documents and Settings\Administrator\桌面\virus.rar=>da18.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da18.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da19.exe        Infected: Generic.Malware.SBdldg.3EE2356C
C:\Documents and Settings\Administrator\桌面\virus.rar=>da19.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da19.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da20.exe        Infected: Generic.Malware.SBdldg.66AB88F5
C:\Documents and Settings\Administrator\桌面\virus.rar=>da20.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da20.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da21.exe        Infected: Trojan.PWS.OnlineGames.YYE
C:\Documents and Settings\Administrator\桌面\virus.rar=>da21.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da21.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da22.exe        Infected: Trojan.PWS.OnlineGames.YXK
C:\Documents and Settings\Administrator\桌面\virus.rar=>da22.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da22.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da23.exe        Infected: Trojan.PWS.OnlineGames.YXF
C:\Documents and Settings\Administrator\桌面\virus.rar=>da23.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da23.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da24.exe        Infected: Trojan.Patched.BZ
C:\Documents and Settings\Administrator\桌面\virus.rar=>da24.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da24.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da25.exe        OK
C:\Documents and Settings\Administrator\桌面\virus.rar=>da26.exe        Infected: Trojan.PWS.OnlineGames.YXK
C:\Documents and Settings\Administrator\桌面\virus.rar=>da26.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da26.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da27.exe        Infected: Trojan.PWS.OnlineGames.YYE
C:\Documents and Settings\Administrator\桌面\virus.rar=>da27.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da27.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da28.exe        Infected: Trojan.PWS.OnlineGames.YXK
C:\Documents and Settings\Administrator\桌面\virus.rar=>da28.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da28.exe        Move failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da29.exe        Infected: Generic.Malware.SBdldg.8228DCB4
C:\Documents and Settings\Administrator\桌面\virus.rar=>da29.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\virus.rar=>da29.exe        Move failed

hddgmon

nvc 29

csliss

结果: 找到 27 恶意软件
Trojan-PSW.Win32.OnLineGames.alqk (病毒)

    * F:\virus.rar\da14.exe

Trojan-PSW.Win32.OnLineGames.ajoo (病毒)

    * F:\virus.rar\da2.exe

Trojan-PSW.Win32.OnLineGames.akwe (病毒)

    * F:\virus.rar\da3.exe

Trojan-PSW.Win32.OnLineGames.alzp (病毒)

    * F:\virus.rar\da4.exe

Trojan-PSW.Win32.OnLineGames.amya (病毒)

    * F:\virus.rar\da5.exe

Trojan-PSW.Win32.Agent.aof (病毒)

    * F:\virus.rar\da6.exe

Trojan-PSW.Win32.OnLineGames.ajoi (病毒)

    * F:\virus.rar\da7.exe

Trojan-PSW.Win32.OnLineGames.ajpx (病毒)

    * F:\virus.rar\da8.exe

Trojan-PSW.Win32.OnLineGames.ambh (病毒)

    * F:\virus.rar\da10.exe

Trojan-PSW.Win32.OnLineGames.ammu (病毒)

    * F:\virus.rar\da11.exe

Trojan-PSW.Win32.OnLineGames.alvs (病毒)

    * F:\virus.rar\da12.exe
    * F:\virus.rar\da16.exe

Trojan-PSW.Win32.OnLineGames.alna (病毒)

    * F:\virus.rar\da13.exe

Trojan-PSW.Win32.OnLineGames.ambs (病毒)

    * F:\virus.rar\da1.exe
    * F:\virus.rar\da23.exe

Trojan-PSW.Win32.OnLineGames.akzo (病毒)

    * F:\virus.rar\da15.exe

Trojan-PSW.Win32.OnLineGames.ambu (病毒)

    * F:\virus.rar\da17.exe

Trojan-PSW.Win32.QQPass.cci (病毒)

    * F:\virus.rar\da18.exe

Trojan-PSW.Win32.OnLineGames.akyb (病毒)

    * F:\virus.rar\da19.exe

Trojan-PSW.Win32.OnLineGames.amqs (病毒)

    * F:\virus.rar\da20.exe

Trojan-PSW.Win32.OnLineGames.amqt (病毒)

    * F:\virus.rar\da21.exe
    * F:\virus.rar\da27.exe

Trojan-PSW.Win32.OnLineGames.amal (病毒)

    * F:\virus.rar\da22.exe
    * F:\virus.rar\da26.exe
    * F:\virus.rar\da28.exe

Trojan-PSW.Win32.OnLineGames.amas (病毒)

    * F:\virus.rar\da24.exe

Trojan-PSW.Win32.OnLineGames.ajqf (病毒)

    * F:\virus.rar\da29.exe

sbbdms

Hello,

da5.exe_ - Trojan-PSW.Win32.OnLineGames.amya,
da9.exe_ - Trojan-PSW.Win32.OnLineGames.anab

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: virus.rar