为什么卡巴8会被过??

显示全部楼层 · 发表于 2008-6-9 23:41:20

這是一個bug...
因為這個樣本沒過卡7
目前已經跟GBT大頭討論中了

2008/6/9 ¤U¤È 11:20:28 C:\WINDOWS\CCTV.exe Process seems to be a P2P worm.
2008/6/9 ¤U¤È 11:20:28 C:\WINDOWS\CCTV.exe Attempt to terminate process
2008/6/9 ¤U¤È 11:20:42 C:\WINDOWS\CCTV.exe Attempt to terminate process: successfully
2008/6/9 ¤U¤È 11:20:28 C:\WINDOWS\CCTV.exe Error placing C:\WINDOWS\CCTV.exe in quarantine (access denied or object not found)
2008/6/9 ¤U¤È 11:20:59 C:\Program Files\Common Files\Microsoft Shared\Speech\sapisvr.exe Rollback
2008/6/9 ¤U¤È 11:20:59 C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe Rollback
2008/6/9 ¤U¤È 11:20:59 C:\Program Files\Common Files\InstallShield\Professional\RunTime701\Intel32\DotNetInstaller.exe Rollback
2008/6/9 ¤U¤È 11:20:59 C:\Documents and Settings\Administrator\®à±\·P®¦£².exe Rollback
2008/6/9 ¤U¤È 11:20:59 C:\Documents and Settings\Administrator\®à±\©¯ºÖ³á.exe Rollback
2008/6/9 ¤U¤È 11:20:59 C:\Documents and Settings\Administrator\®à±\avp.exe Rollback: error code 20000050
2008/6/9 ¤U¤È 11:20:59 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DFCB95.tmp Rollback
2008/6/9 ¤U¤È 11:20:28 C:\WINDOWS\CCTV.exe Rollback completed
2008/6/9 ¤U¤È 11:21:08 C:\Documents and Settings\Administrator\®à±\avp.exe Process seems to be a P2P worm.
2008/6/9 ¤U¤È 11:21:08 C:\Documents and Settings\Administrator\®à±\avp.exe Attempt to terminate process
2008/6/9 ¤U¤È 11:21:12 C:\Documents and Settings\Administrator\®à±\avp.exe Attempt to terminate process: successfully
2008/6/9 ¤U¤È 11:21:08 C:\Documents and Settings\Administrator\®à±\avp.exe C:\Documents and Settings\Administrator\®à±\avp.exe quarantined.
2008/6/9 ¤U¤È 11:21:14 C:\Program Files\Common Files\InstallShield\Professional\RunTime701\Intel32\DotNetInstaller.exe Rollback
2008/6/9 ¤U¤È 11:21:14 C:\Documents and Settings\Administrator\®à±\·P®¦£².exe Rollback
2008/6/9 ¤U¤È 11:21:14 C:\Documents and Settings\Administrator\®à±\©¯ºÖ³á.exe Rollback
2008/6/9 ¤U¤È 11:21:14 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DFEAE7.tmp Rollback
2008/6/9 ¤U¤È 11:21:08 C:\Documents and Settings\Administrator\®à±\avp.exe Rollback completed

显示全部楼层 · 发表于 2008-6-10 01:05:30

不是吧，这样的bug存在实在是有点恶心人了

显示全部楼层 · 发表于 2008-6-10 07:22:35

偶试过，没有感染，是交互模式。

显示全部楼层 · 发表于 2008-6-10 16:16:43

一部动漫

显示全部楼层 · 发表于 2008-6-10 17:50:48

卡巴也有打瞌睡的时候。

显示全部楼层 · 发表于 2008-7-9 11:12:19

没事顶起来..让某些人看看

显示全部楼层 · 发表于 2008-7-9 11:27:10

原帖由 testhawk 于 2008-7-9 11:12 发表
没事顶起来..让某些人看看

呵呵，你看看现在还会被过吗？

显示全部楼层 · 发表于 2008-7-9 11:29:05

几月前的毒，如果现在还会被过那真无药可救了

显示全部楼层 · 发表于 2008-7-9 11:32:09

这里仅仅是证明卡巴曾被过这一事实.某些人没必要拼命否定卡巴曾被过的事实而已

显示全部楼层 · 发表于 2008-7-9 11:33:20

http://bbs.kafan.cn/viewthread.p ... page%3D1&page=4 39樓

为什么卡巴8会被过??

回复 2楼 nealee 的帖子