求助．电脑高手

心灵的港湾

我的移动硬盘里有病毒．病毒名为：Trojan.DL.Agent.apb．我怎么也删不了．最后我把移动硬盘文件全删了．　我用正版的瑞星杀病软件杀了．可是他还是里面．真是奇怪．后来点了移动硬盘的属性．但里面还有文件．我真的搞不懂了．文件不知道在哪．

armymanuse

我认为，虽然属性里面还显示有文件的空间，但是这些空间只是一个空壳子。如果你整理一下你的移动硬盘，比如说进行碎片整理，或者是用超级兔子优化一下，这些空间就没有了
如果这么做了还显示有文件存在，很大的可能是磁盘出现了坏道，不过不用担心，病毒造成的坏道，一般是逻辑坏道，只要格式化后就能消除。如果你的移动硬盘曾经磕过碰过，有物理坏道也是很可能的，这种情况只能找专业人员修复了
谁有不同看法？

rulingdanny

Common name: Agent.APB
  
Technical name: Bck/Agent.APB
  
' _% c6 ~" W1 O/ Z! J- ^# {) ~: ^  EThreat level: Low
+ t' ]; H* W+ b+ \# [  
) }1 h( f& C& v7 `Type: Backdoor
" o+ x7 v% Q- k/ V9 G& i* Z  
$ r0 G9 u, S  t0 IEffects:   
' i1 ]8 \1 t8 D8 B6 T/ E! k! }It installs a proxy server, opens a random port on the affected computer and provides its author with the information necessary to access it remotely. One of its components provides it with the ability to make downloads, so that it can update itself.


  
Affected platforms:  Windows 2003/XP/2000/NT/ME/98/95

% d, w& {; y' |0 q# ~4 a6 `7 K  
5 [: @5 c9 u) n1 d- WFirst detected on: Sept. 27, 2005
  z, J2 {  \, K) u/ q  
Detection updated on: Sept. 29, 2005
' q, K4 R% k* ?0 s8 f  
4 T: t) i: Y4 U6 w( p% W/ \, k3 OIn circulation? No
  
1 P  M* |4 L) I1 l- `3 a/ U! DProactive protection: Yes, using TruPrevent Technologies  
9 S6 P4 d( ~% C+ f8 q( u' P
% T1 |8 p8 |3 X0 h* Z! E6 [) ~  

. K" m# v! p/ tBrief Description  

) `( r! N  I' ~0 `7 |Agent.APB is a backdoor that installs a proxy server, and opens a random port on the affected computer.
# `0 z7 M. I' j  W. J# p% D
Then, it makes GET requests of a specific format to three different websites in order to notify its authors that the computer has been compromised and supply them with the necessary information to access it remotely: number of the port opened, version of the operating system, last known IP address, etc.
( S* V4 r, i+ g7 K0 z
+ s4 N! ]5 u* V3 Z+ yAdditionally, one of the components of Agent.APB provides it with the ability to make downloads, so that it can update itself.

9 q* s' m: |& K; f  ]8 H% fAgent.APB does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.


Visible Symptoms   
/ y: M4 x. i6 `. U& j
Agent.APB is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.
! G* h+ N% M" ^( L
上面是这个病毒的特征，用panda可以删除

rulingdanny

http://www.qqsafe.cn/Article/Catalog8/202.html这个网页上面有完整的清楚方法。是中文

心灵的港湾

真心谢谢以上的楼主.我在这里表示感谢.谢谢.