ESET 报EFI/CpmpuTrace.A

比卡诺微

ESET 报EFI/CpmpuTrace.A,这个可信吗？第一次遇到这种，之前没遇到过，升级win11后第一次全盘管理员扫描发现的。

846472713

ESET值得信赖

anthonyqian

CompuTrace by Absolute Software is legitimate. However, it uses a small agent rpcnetp.exe that contains a vulnerability allowing communication with any CC server that was exploited by malware.

The fact that CompuTrace is detected on your machine does not mean that you are infected and that malware is running on your machine. Also the fact that CompuTrace is stored in UEFI prevents deletion and the only thing you can do is upgrade UEFI to a version that does not contain it. It depends on your motherboard's manufactured if such UEFI upgrade is available. Therefore all you can do is to exclude UEFI CompuTrace from detection.

----Marcos

wwwab

部分厂商电脑Bios里面的一个企业定位电脑的功能，防偷窃系统软件，本身也是合法的一个uefi后门，但是此前爆出漏洞层出不穷，所以估计eset就添加了检测

http://blog.nsfocus.net/lojack-c ... -tracking-analysis/

进入Bios关闭该功能或者询问一下厂商刷个Bios，然后重建引导区重装一下系统看看

比卡诺微

wwwab 发表于 2022-8-27 11:15
部分厂商电脑Bios里面的一个企业定位电脑的功能，防偷窃系统软件，本身也是合法的一个uefi后门，但是此前爆 ...

感谢大佬。

比卡诺微

anthonyqian 发表于 2022-8-27 11:11
----Marcos

感谢大佬。

比卡诺微

846472713 发表于 2022-8-27 11:10
ESET值得信赖

感谢大佬。

tdsskiller

还真有机器被安了这玩意啊？用个dumper搞出来分享一下

pal家族

一般bios里会有设置 让你永久关闭 可能关掉之后就检测不到了
也可能 需要更新计算器厂商提供的最新固件 去官网找找吧

charlesacer

我电脑之前也是  但一直找不到关闭选项，问过供应商客服  说这机器停产不管了