[求救] RKIT/Agent.aago root kit

看板AntiVirus (防毒)作者rodmantw時間16年前 (2010/01/01 00:46)推噓0(0推 0噓 3→)

留言3則, 2人參與討論串1/1

1. 敘述問題：我的作業系統是Vista 前幾天開始發生無法關機之狀況使用小紅傘掃了之後有掃到 RKIT/Agent.aago root kit 但無法刪除有使用 EFix 但也無法刪除出現下面文字 Begin scan in 'C:\' <S3A6591D005> C:\hiberfil.sys [WARNING] The file could not be opened! [NOTE] This file is a Windows system file. [NOTE] This file cannot be opened for scanning. C:\pagefile.sys [WARNING] The file could not be opened! [NOTE] This file is a Windows system file. [NOTE] This file cannot be opened for scanning. C:\Windows\System32\drivers\myifm.sys [DETECTION] Contains recognition pattern of the RKIT/Agent.aago root kit [WARNING] The file could not be opened! Begin scan in 'F:\' Beginning disinfection: C:\Windows\System32\drivers\myifm.sys [DETECTION] Contains recognition pattern of the RKIT/Agent.aago root kit [WARNING] An error has occurred and the file was not deleted. ErrorID: 26004 [WARNING] The source file could not be found. [NOTE] Attempting to perform action using the ARK library. [WARNING] Error in ARK library [WARNING] The file could not be marked for deleting after reboot. Error description: 附加到系統的某個裝置失去作用。請問這有關係嗎?? 2. 系統資料： Vista 3. 分析報告： EFix：http://sun.cis.scu.edu.tw/~92a39/upload/37808.txt Combofix：http://sun.cis.scu.edu.tw/~92a39/upload/37809.txt hijackthis：http://sun.cis.scu.edu.tw/~92a39/upload/37810.txt Sreng2：http://sun.cis.scu.edu.tw/~92a39/upload/37811.txt 感謝協助 ><" -- ※ 發信站: 批踢踢實業坊(ptt.cc) ◆ From: 220.129.234.205