一个CF外-挂，上传多引擎在线查杀，有30%报毒，国内一片空白！！！

justore

仅仅是外怪的话不包夜正常吧

媚_妩

安天防线没反应，诺顿灭之

dannes456

金山卫士下载保护“安全”

老妖静

网络版A6没失望！给力！

DoctorL

这坑爹的玩意儿

is泰迪熊吖

有的杀软在解压的过程中才报

hddu

无危险性，只是修改了主页，可以手动恢复。

2011-04-07 14:06:14    修改文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:16    修改文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:17    修改文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\index.dat
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:18    修改文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\index.dat
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:19    修改文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:20    修改文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:21    修改注册表内容      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
注册表名称:1400
更改后:0
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:22    修改注册表内容      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
注册表名称:Start Page
更改后:http://www.kuqi5.com/?bv
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:24    删除注册表      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
注册表名称:ProxyServer
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:26    删除注册表      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
注册表名称:ProxyOverride
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:27    删除注册表      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
注册表名称:AutoConfigURL
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:28    修改注册表内容      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
注册表名称:SavedLegacySettings
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:29    创建文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@hi.baidu[1].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:30    修改文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@hi.baidu[1].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:32    创建文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\GXY7GDYB\%E5%AE%98%E6%96%B9%E4%B8%8B%E8%BD%BD[1].htm
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:33    删除文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@hi.baidu[2].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:34    创建文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4DIFWXIZ\i[1].js
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:35    创建文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@hi.baidu[2].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:36    修改文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@hi.baidu[2].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:37    删除文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@hi.baidu[1].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:38    创建文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\GXY7GDYB\2bae4a4f49c8bd1c6a63e53f[1].htm
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:39    创建文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@hi.baidu[1].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:40    修改文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@hi.baidu[1].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:41    删除文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@hi.baidu[2].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:42    创建文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@xie.6dad[1].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:43    修改文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@xie.6dad[1].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:44    删除文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Cookies\administrator@xie.6dad[2].txt
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:45    创建文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4DIFWXIZ\show[1].htm
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:46    创建文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\63AJ6LID\cp[1].js
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:47    创建注册表值      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Health\{6664AE7F-4BA9-4609-B73D-589A5F73A234}
注册表名称:[Key]
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:52    创建文件      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\OPQR4HIJ\log1[1].js
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

2011-04-07 14:06:53    删除注册表      操作:允许
进程路径:F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Health\{6664AE7F-4BA9-4609-B73D-589A5F73A234}
注册表名称:[Key]
触发规则:应用程序规则->123->F:\virus\CF伴侣透视\CF伴侣透视网吧家庭通用版0405.exe

留侯

大蜘蛛clean，文件打了包：
CF伴侣透视网吧家庭通用版0406.exe 已打包，方式： FLY-CODE
CF伴侣透视网吧家庭通用版0406.exe 已打包，方式： VMPROTECT
CF伴侣透视网吧家庭通用版0406.exe 已打包，方式： BINARYRES
CF伴侣透视网吧家庭通用版0406.exe 已打包，方式： FLY-CODE
CF伴侣透视网吧家庭通用版0406.exe 已打包，方式： VMPROTECT

ioton

外-挂除非是自己写的，要不都不要信。。。

arsh

小 A拦截