找回密码
 加入华同
搜索
黄金广告位联系EMAIL:[email protected] 黄金广告[email protected]
查看: 820|回复: 4

求助.电脑高手

[复制链接]
发表于 2006-12-3 21:40:12 | 显示全部楼层 |阅读模式
我的移动硬盘里有病毒.病毒名为:Trojan.DL.Agent.apb.我怎么也删不了.最后我把移动硬盘文件全删了. 我用正版的瑞星杀病软件杀了.可是他还是里面.真是奇怪.后来点了移动硬盘的属性.但里面还有文件.我真的搞不懂了.文件不知道在哪.
发表于 2006-12-3 22:08:29 | 显示全部楼层
我认为,虽然属性里面还显示有文件的空间,但是这些空间只是一个空壳子。如果你整理一下你的移动硬盘,比如说进行碎片整理,或者是用超级兔子优化一下,这些空间就没有了' A  u4 a. B+ E, w
如果这么做了还显示有文件存在,很大的可能是磁盘出现了坏道,不过不用担心,病毒造成的坏道,一般是逻辑坏道,只要格式化后就能消除。如果你的移动硬盘曾经磕过碰过,有物理坏道也是很可能的,这种情况只能找专业人员修复了( m9 u/ B, S0 c0 X! j9 j
谁有不同看法?
回复

使用道具 举报

发表于 2006-12-4 13:29:27 | 显示全部楼层
Common name: Agent.APB 4 _: L+ m/ l) s- \% k
  
; L8 ^3 |1 m% M+ a2 d2 xTechnical name: Bck/Agent.APB ; ~7 s2 k- i% @; n
  8 n$ g& i  w4 ]. k: m* Z6 \
Threat level: Low
- }# P7 N2 V% Q! ?5 D; O  
  W1 E" `, M- m: I* tType: Backdoor 6 Z/ o) n- t, V& {* H# l. e
  
5 s1 Z9 K0 A6 _) G! m, g! D) ^2 @Effects:   
- G0 q, C0 h1 Z: G4 PIt installs a proxy server, opens a random port on the affected computer and provides its author with the information necessary to access it remotely. One of its components provides it with the ability to make downloads, so that it can update itself.5 R0 h6 W  |3 S) S. T& t+ k$ \

7 Z( G& j: z7 n/ W2 K ' W6 U6 Y/ N2 N9 R( X! J& q( j
  3 R# @& V! E' F/ c: i8 U
Affected platforms:  Windows 2003/XP/2000/NT/ME/98/95
) z4 S( X3 T- l
/ Y* @, j5 t; H: E* ?% e: |$ R5 W  + y, I/ N6 x% |$ F$ \$ a: @
First detected on: Sept. 27, 2005 % p; ^3 l- E, q+ V
  , ^6 j0 r6 R% \
Detection updated on: Sept. 29, 2005 8 a- \% a# t, ~+ m- r6 s
  
% ^- F) z! `# v% UIn circulation? No
  ^; I8 k* c- V: q  & j7 X/ y* ]* l3 T$ W) }! H* y
Proactive protection: Yes, using TruPrevent Technologies  & e- J  T* D7 ?
8 r: x. F% j- r1 A
  
! `& e+ j0 {& k/ h6 ], ], @  U 1 v4 o* h4 N+ _9 e" @8 {0 \# T
Brief Description  % b$ u( J% n7 M( ]' X

; X, x0 K3 W+ ^; k; w7 P8 U; |7 }( ~Agent.APB is a backdoor that installs a proxy server, and opens a random port on the affected computer.
6 h- s) k# n8 h) @* N6 u0 g- Z4 a: z" b& t. B1 o* C% [
Then, it makes GET requests of a specific format to three different websites in order to notify its authors that the computer has been compromised and supply them with the necessary information to access it remotely: number of the port opened, version of the operating system, last known IP address, etc.5 Q2 J6 ]* Z0 f: L% t

3 Q. ^+ W; u; r7 v) t. KAdditionally, one of the components of Agent.APB provides it with the ability to make downloads, so that it can update itself.6 p' x% p; u3 d# E9 h2 g

* K1 i- e; p+ P5 J8 b0 c$ Z) SAgent.APB does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.
. b7 h8 a6 G; h7 F6 F1 z& K# y
& }; }% e0 G8 C3 N1 _
' j$ W3 K6 V) c9 `5 A) I6 uVisible Symptoms   0 ~# \& C- D2 B7 h7 D8 T3 Q% R; G8 U

+ y  X. p  H: F$ X7 E2 D! Y! |Agent.APB is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.
8 T( e& [  R/ n9 c* p9 p. U' X8 H2 s' H3 ?
上面是这个病毒的特征,用panda可以删除
回复

使用道具 举报

发表于 2006-12-4 13:33:46 | 显示全部楼层
http://www.qqsafe.cn/Article/Catalog8/202.html这个网页上面有完整的清楚方法。是中文
回复

使用道具 举报

 楼主| 发表于 2006-12-5 18:27:51 | 显示全部楼层
真心谢谢以上的楼主.我在这里表示感谢.谢谢.
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 加入华同

本版积分规则

Archiver|手机版|小黑屋|华人同志

GMT+8, 2024-12-26 22:05 , Processed in 0.061271 second(s), 6 queries , Redis On.

Powered by Discuz! X3.5

© 2001-2024 Discuz! Team.

快速回复 返回顶部 返回列表