农场外挂(MISS主流)

as4524

http://www.rayfile.com/files/40601e94-d196-11de-aadc-0014221b798a/
我菜鸟
不会分割.
主流MISS

[ 本帖最后由 as4524 于 2009-11-15 13:21 编辑 ]

天使的愤怒

没有病毒呀~

as4524

主流的都MISS

62590423

Win32:Malware-gen
非主流小A kill
to mp

yangtairan

McAfee enterprise 8.7i 报generic!bg.fxm特洛伊。居然是启发,而且还没用artemis.......

rok827

to avira

adad2008

kv主防

e:\documents and settings\xubo\桌面\qq_nc_2.0\qq_nc_2.0\qq农场宝贝.exe     http://www.q65.cn     27%可疑率

e:\documents and settings\xubo\桌面\qq_nc_2.0\qq_nc_2.0\qq农场宝贝.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Directory = E:\Documents and Settings\xubo\Local Settings\Temporary Internet Files\Content.IE5     2009-11-15 14:22:37     
e:\documents and settings\xubo\桌面\qq_nc_2.0\qq_nc_2.0\qq农场宝贝.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Path1\CachePath = E:\Documents and Settings\xubo\Local Settings\Temporary Internet Files\Content.IE5\Cache1     2009-11-15 14:23:04     
e:\documents and settings\xubo\桌面\qq_nc_2.0\qq_nc_2.0\qq农场宝贝.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Path2\CachePath = E:\Documents and Settings\xubo\Local Settings\Temporary Internet Files\Content.IE5\Cache2     2009-11-15 14:23:05     
e:\documents and settings\xubo\桌面\qq_nc_2.0\qq_nc_2.0\qq农场宝贝.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Path3\CachePath = E:\Documents and Settings\xubo\Local Settings\Temporary Internet Files\Content.IE5\Cache3     2009-11-15 14:23:06     
e:\documents and settings\xubo\桌面\qq_nc_2.0\qq_nc_2.0\qq农场宝贝.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Path4\CachePath = E:\Documents and Settings\xubo\Local Settings\Temporary Internet Files\Content.IE5\Cache4     2009-11-15 14:23:07     
e:\documents and settings\xubo\桌面\qq_nc_2.0\qq_nc_2.0\qq农场宝贝.exe     创建注册表键     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders     2009-11-15 14:23:09     
e:\documents and settings\xubo\桌面\qq_nc_2.0\qq_nc_2.0\qq农场宝贝.exe     创建注册表键     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders     2009-11-15 14:23:10     
e:\documents and settings\xubo\桌面\qq_nc_2.0\qq_nc_2.0\qq农场宝贝.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common AppData = E:\Documents and Settings\All Users.WINNT\Application Data     2009-11-15 14:23:10     
e:\documents and settings\xubo\桌面\qq_nc_2.0\qq_nc_2.0\qq农场宝贝.exe     发现可疑程序     
修改注册表;
创建文件;
创建注册表键;
连接网络;     2009-11-15 14:23:26     
e:\documents and settings\xubo\桌面\qq_nc_2.0\qq_nc_2.0\qq农场宝贝.exe     发现可疑程序     
修改注册表;
创建文件;
创建注册表键;
连接网络;

[ 本帖最后由 adad2008 于 2009-11-15 14:25 编辑 ]

wang20503

那个开心农场啊

尤金卡巴斯基

To KL

尤金卡巴斯基

#####.exe_

以上文件不包含恶意代码。