某贴挖 25

jimmyleo

D:\DOWNLOAD\S\soc8.exe  detected: Trojan-PSW.Win32.OnLineGames.sdo
D:\DOWNLOAD\S\soc7.exe  detected: Trojan-PSW.Win32.OnLineGames.ssq

挪威的冬天

信息        2008-03-13  13:25:28        您此次查毒清除了20个病毒                       
信息        2008-03-13  13:25:28        您此次查毒共查出20个病毒以及危险代码                       
信息        2008-03-13  13:25:28        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件50个                       
信息        2008-03-13  13:25:28        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-03-13  13:25:28        D:\Desktop\S.rar\soc10.exe        Win32.Troj.OnlineGameT.am.107664        清除成功       
病毒        2008-03-13  13:25:28        D:\Desktop\S.rar\soc1.exe        Win32.Troj.OnLineGamesT.ax.94208        清除成功       
病毒        2008-03-13  13:25:28        D:\Desktop\S.rar\soc9.exe        Win32.Troj.OnLineGamesT.b.20198        清除成功       
病毒        2008-03-13  13:25:28        D:\Desktop\S.rar\soc8.exe        Win32.Troj.OnlineGamesT.af.57344        清除成功       
病毒        2008-03-13  13:25:28        D:\Desktop\S.rar\soc7.exe        Win32.Troj.OnlineGamesT.af.57344        清除成功       
病毒        2008-03-13  13:25:28        D:\Desktop\S.rar\soc6.exe        Win32.Troj.OnlineGamesT.af.57344        清除成功       
病毒        2008-03-13  13:25:28        D:\Desktop\S.rar\soc5.exe        Win32.Troj.OnlineGamesT.e.94315        清除成功       
病毒        2008-03-13  13:25:28        D:\Desktop\S.rar\soc4.exe        Win32.Troj.OnlineGamesT.ty.98304        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc3.exe        Win32.Troj.OnlineGamesT.e.94315        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc25.exe        Win32.PSWTroj.OnlineGames.qi.106617        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc20.exe        Win32.Troj.GamesHackT.gu.94304        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc2.exe        Win32.Troj.OnlineGamesT.e.94315        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc19.exe        Win32.Troj.GamesHackT.gu.94304        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc17.exe        Win32.Troj.OnlineGameT.am.107664        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc16.exe        Win32.Troj.OnlineGamesT.zy.32923        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc15.exe        Win32.Troj.GamesHackT.gu.94304        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc14.exe        Win32.Troj.OnlineGamesT.zy.32923        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc13.exe        Win32.Troj.OnlineGamesT.zy.32923        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc12.exe        Win32.Troj.OnlineGameT.am.107664        清除成功       
病毒        2008-03-13  13:25:27        D:\Desktop\S.rar\soc11.exe        Win32.Troj.OnlineGamesT.zy.32923        清除成功

zzh161

我觉得测试组的人会恨hunters的

PS，费尔全杀，3个启发

leonfg

ESET 21
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc11.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc12.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc13.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc14.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc15.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc16.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc17.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc18.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc19.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc2.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc20.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc25.exe - a variant of Win32/PSW.QQPass.NCZ trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc3.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc4.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc5.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc6.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc7.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc8.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc9.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc1.exe - a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\GUNDAM\桌面\S.rar » RAR » soc10.exe - a variant of Win32/PSW.OnLineGames.MUG trojan

spaceplane

BD 21

spaceplane

E:\pic\_PICtemp\S.rar
  [0] Archive type: RAR
  --> soc11.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.olm.2
  --> soc12.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLin.8918.A
  --> soc13.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> soc14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tds
  --> soc15.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> soc16.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rxqe
  --> soc17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.sqb
  --> soc18.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> soc19.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> soc2.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> soc20.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> soc21.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> soc22.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> soc23.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> soc24.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> soc25.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> soc3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> soc4.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> soc5.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> soc6.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> soc7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.szv
  --> soc8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.soa.11
  --> soc9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
  --> soc1.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.djg.2
  --> soc10.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
      [WARNING]   The file was ignored!


End of the scan: 2008年3月13日  14:10
Used time: 00:26 min

The scan has been done completely.

      0 Scanning directories
     26 Files were scanned
     20 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:

1688388728

反病毒专家 AntiVirusKit 2007 扫描病毒日志记录
版本
双引擎反病毒签名 3/13/2008
开始时间: 3/13/2008 14:08
引擎: KAV 引擎 (AVK 18.3070), AVST 引擎 (AVKB 18.165)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: soc1.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.ryh (KAV 引擎), Win32:OnLineGames-CUW [Trj] (AVST 引擎)
对象: soc10.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.rwl (KAV 引擎)
对象: soc11.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.rxps (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: soc12.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.sem (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: soc13.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.tct (KAV 引擎)
对象: soc14.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.tct (KAV 引擎)
对象: soc15.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.tmj (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: soc16.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.rxps (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: soc17.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.sem (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: soc18.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.tzt (KAV 引擎), Win32:OnLineGames-CTZ [Trj] (AVST 引擎)
对象: soc19.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.tmj (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: soc2.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Win32:Onlinegames-CDA [Trj] (AVST 引擎)
对象: soc20.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.tmj (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: soc21.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Win32:Agent-SOA [Trj] (AVST 引擎)
对象: soc22.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Win32:Agent-SOA [Trj] (AVST 引擎)
对象: soc23.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Win32:Agent-SOA [Trj] (AVST 引擎)
对象: soc24.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Win32:Agent-SOA [Trj] (AVST 引擎)
对象: soc25.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Win32:OnLineGames-BSI [Trj] (AVST 引擎)
对象: soc3.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.tzx (KAV 引擎)
对象: soc4.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.tcr (KAV 引擎)
对象: soc5.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.teb (KAV 引擎), Win32:OnLineGames-CTZ [Trj] (AVST 引擎)
对象: soc6.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.tzz (KAV 引擎)
对象: soc7.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.szv (KAV 引擎)
对象: soc8.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.soa (KAV 引擎)
对象: soc9.exe
        路径: D:\样本\S
狀態: 病毒文件已删除
        病毒: Trojan-PSW.Win32.OnLineGames.rkf (KAV 引擎), Win32:OnLineGames-BPY [Trj] (AVST 引擎)
扫描完成: 3/13/2008 14:08
    已检查 25 个文件
    已发现 25 个染毒文件

mofunzone

antivir v8
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\S'
C:\Documents and Settings\Administrator\My Documents\S\
  soc1.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Is the Trojan horse TR/Drop.Agent.djg.2
      [NOTE]      The file was deleted!
  soc10.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  soc11.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Online.olm.2
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  soc12.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnLin.8918.A
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  soc13.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!
  soc14.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tds
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  soc15.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!
  soc16.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rxqe
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  soc17.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.sqb
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  soc18.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  soc19.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc2.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  soc20.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc21.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  soc22.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  soc23.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  soc24.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  soc25.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [NOTE]      The file was deleted!
  soc3.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  soc4.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tcq.4
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  soc5.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.TJR.9
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  soc6.exe
    [0] Archive type: OVL
    --> Object
    --> Object
      [NOTE]      The file was deleted!
  soc7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.szv
      [NOTE]      The file was deleted!
  soc8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.soa.11
      [NOTE]      The file was deleted!
  soc9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
      [NOTE]      The file was deleted!


End of the scan: 2008年3月13日  00:36
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
     25 Files were scanned
     20 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
     25 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      0 Archives were scanned
      8 Warnings
     25 Notes

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.min
病毒： Trojan.PSW.Win32.GamesOnline.oz
病毒： Trojan.PSW.Win32.GameOL.mjf
病毒： Trojan.PSW.Win32.OnlineGames.eop
病毒： Trojan.PSW.Win32.QQSG.cz
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.mks
病毒： Trojan.PSW.Win32.GameOL.mjq
病毒： Trojan.PSW.Win32.GameOL.mhi
病毒： Trojan.PSW.Win32.SunOnline.mu
病毒： Trojan.PSW.Win32.GamesOnline.oe

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.35.31

红心王子

木马名称:Trojan-PSW.Win32.OnLineGame.paj

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\SOC15.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.pai

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\SOC19.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-PSW.Win32.OnLineGame.ixs

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\SOC4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.xzl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\SOC1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-PSW.Win32.OLGames.znn

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\SOC10.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?