刚发现一个巨牛B的病毒主流全无视

潇湘剑雨

请大家鉴定

hsezbmh

过mse，to

Love=卡巴+费尔

z2009

过 ess 4.2 x64
过360卫士

star_xing

卡巴2011无视～

猪头无双

avast miss
http://www.virustotal.com/file-scan/report.html?id=8c9cd28bea1a3710dc497a8ba62e1096e5ed2b180070c271d34584770dce4767-1293897527

看来AVG\MCAFEE、趋势、铁壳是非主流杀软

蝉鸣时

To ESET.

Thank you for your submission.
The detection for this threat will be included in our next signature update.

______________.exe - Win32/TrojanClicker.Small.NCF trojan

Regards,

Mazur Krzysztof
Virus Researcher
ESET spol. s r.o.

红草

无视

414447992

360kill

caoyuan1162

2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{afb31683-15c2-11e0-a8c9-806d6172696f}\BaseClass        阻止        [注册表]*        值: Drive
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{afb31682-15c2-11e0-a8c9-806d6172696f}\BaseClass        阻止        [注册表]*        值: Drive
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{afb31680-15c2-11e0-a8c9-806d6172696f}\BaseClass        阻止        [注册表]*        值: Drive
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Personal        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\My Documents
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Documents        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\Documents
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Desktop        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\桌面
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Desktop        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\桌面
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass        阻止        [注册表]*        值: 0x00000001(1)
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName        阻止        [注册表]*        值: 0x00000001(1)
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet        阻止        [注册表]*        值: 0x00000001(1)
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass        阻止        [注册表]*        值: 0x00000001(1)
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName        阻止        [注册表]*        值: 0x00000001(1)
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet        阻止        [注册表]*        值: 0x00000001(1)
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cookies        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\Cookies
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\吾爱破解免费.exe        阻止        [注册表]*        值: setup Setup                                                  
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        创建新进程        c:\documents and settings\administrator\local settings\temp\吾爱破解免费.exe        阻止        [应用程序]*        命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\吾爱破解免费.exe"
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\吾爱破解免费版.exe        阻止        [注册表]*        值: 吾爱破解免费版
2011-1-2 00:27:37        c:\documents and settings\administrator\桌面\吾爱破解免费版.exe        创建新进程        c:\documents and settings\administrator\local settings\temp\吾爱破解免费版.exe        阻止        [应用程序]*        命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\吾爱破解免费版.exe"