好奇怪的一个木马

显示全部楼层 · 发表于 2010-1-12 22:52:54

怎么跑到小红伞的文件里了

Starting the file scan:
Begin scan in 'C:\' <WIN7>
C:\hiberfil.sys
[WARNING] The file could not be opened!
[NOTE]    This file is a Windows system file.
[NOTE]    This file cannot be opened for scanning.
C:\ProgramData\Avira\AntiVir Desktop\TEMP\AVSCAN-20100112-215534-3AB305ED\AVSCAN-0000001B
[DETECTION] Is the TR/Dropper.Gen Trojan
C:\Windows\Temp\TMP000000A7C0B9AD02D50AEB24
[DETECTION] Is the TR/Dropper.Gen Trojan
[WARNING] The file could not be copied to the quarantine directory.
[WARNING] The source file could not be found.
[NOTE]    Attempting to perform action using the ARK library.
[NOTE]    A backup was created as '4b9c817d.qua'  ( QUARANTINE )
Begin scan in 'D:\'
Begin scan in 'E:\'
E:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE]    This file is a Windows system file.
[NOTE]    This file cannot be opened for scanning.
Begin scan in 'F:\'
Begin scan in 'G:\'

显示全部楼层 · 发表于 2010-1-12 22:57:27

真奇怪

显示全部楼层 · 发表于 2010-1-12 23:02:27

嗯...还是很早以前出现过的木马
MS会改注册表吧

但是我最近也没下什么东西呀
就下了个Win7和联想的驱动,还去N网下了个130M显卡的驱动
上网的时候也就是在百度里搜下不知道的东西,要不进知道,要不进论坛
还中了马,真悲剧

最悲剧是在小红伞的文件里- -

显示全部楼层 · 发表于 2010-1-13 11:46:29

看不懂

显示全部楼层 · 发表于 2010-1-13 12:21:40

等待高人。。

显示全部楼层 · 发表于 2010-1-13 12:57:16

[:26:]等待高人

[讨论] 好奇怪的一个木马