doorszhong - 2007-4-8 15:38:00
电脑说中了个什么ROOTKIT
下了个RootkitReveal,SCAN了一会,出现下面的东西,怎办,下一步?
HKLM\SECURITY\Policy\Secrets\SAC* 2005-1-29 15:40 0 bytes Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SAI* 2005-1-29 15:40 0 bytes Key name contains embedded nulls (*)
C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\PdmHist\728.AD2AFD5A01C779A6.history\00000000.bak 2007-4-8 14:32 1.43 MB Hidden from Windows API.
C:\Documents and Settings\ 2007-4-8 14:34 49 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\ 2007-4-8 14:34 49 bytes Hidden from Windows API.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 22:42 2.56 MB Hidden from Windows API.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 20:56 2.08 MB Hidden from Windows API.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 21:39 1.94 MB Hidden from Windows API.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 22:39 1.49 MB Hidden from Windows API.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 22:12 1.84 MB Hidden from Windows API.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 22:56 1.99 MB Hidden from Windows API.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 22:42 2.56 MB Visible in Windows API, but not in MFT or directory index.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 20:56 2.08 MB Visible in Windows API, but not in MFT or directory index.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 21:39 1.94 MB Visible in Windows API, but not in MFT or directory index.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 22:39 1.49 MB Visible in Windows API, but not in MFT or directory index.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 22:12 1.84 MB Visible in Windows API, but not in MFT or directory index.
F:\game\Warcraft III\save\Profile1\Blizzard\ 2006-6-1 22:56 1.99 MB Visible in Windows API, but not in MFT or directory index.
© 2000 - 2026 Rising Corp. Ltd.