引用:
作者: plunderer
C:\System Volume Information\_restore{4E0227D...15-5E97E5C4B88D}\RP358\A0116320.dll
這在系統還原的備份檔內, 防毒軟體殺不掉...關閉系統還原就行了
C:\Program Files\Super Rabbit\magicset\magicset.exe
應該是誤報
其他的就交給防毒軟體刪除吧
P.S
O10 - Unknown file in Winsock LSP: c:\windows\system32\uunsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\uunsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\uunsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\uunsp.dll
這幾項若直接用 HJ 修復可能會造成無法上網, 建議使用專門工具修復
LSPFix http://www.cexx.org/lspfix.htm
|
C:\Documents and Settings\OFC\Local Settings\Temp\cc.exe
→Infected: Trojan-Dropper.Win32.Agent.ahjk 1
C:\Documents and Settings\OFC\Local Settings\Temporary Internet Files\Content.IE5\4H6F4TQB\ff[1].rar
→Infected: Trojan.Win32.RaMag.a 1
C:\Documents and Settings\OFC\Local Settings\Temporary Internet Files\Content.IE5\71T3IEM9\cc[1].rar
→Infected: Trojan.Win32.RaMag.a 1
C:\System Volume Information\_restore{4E0227D...15-5E97E5C4B88D}\RP358\A0116320.dll
C:\Program Files\Super Rabbit\magicset\magicset.exe
C:\WINDOWS\system32\godert0.dll
大大:那這幾個檔能解釋是啥嗎?有害處嗎?