作者m530kimo (噗噗)
看板AntiVirus
标题[问题] 卡巴一直疯狂跑出可疑程式执行
时间Thu Nov 20 18:10:29 2008
不好意思 我知道要先使用置底的软体做出报告之後再来问问题
可是我的卡巴斯基一直疯狂跑出有可疑程式执行
例如 2008/11/20 下午 05:59:03 程序 C:\Program Files\Internet Explorer\IEXPLORE.EXE (PID: 3288): 已封锁 修改 Microsoft Internet Explorer 的外挂程式设定 (key HKEY_USERS\S-1-5-21-1229272821-1788223648-725345543-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser, value ITBarLayout, data 11 00 00 00 5c 00 00 00 00 00 00 00 34 00 00 00 1f 00 00 00 56 00 00 00 01 00 00 00 20 07 00 00 a0 0f 00 00 05 00 00 00 62 05 00 00 26 00 00 00 02 00 00 00 21 07 00 00 a0 0f 00 00 04 00 00 00 21 01 00 00 a0 0f 00
00 03 00 00 00 20 03 00 00 00 00 00 00 08 00 00 00 29 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b1 c2 18 23 65 49 d4 11 9b 18 00 90 27 a5 cd 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00) 的尝试。
又如2008/11/20 下午 05:57:45 程序 C:\WINDOWS\system32\wuauclt.exe (PID: 5224): 已允许 载入新的或修改过的模组 的尝试。
或是2008/11/20 下午 05:57:41 程序 C:\Program Files\Real\RealPlayer\realplay.exe (PID: 3984): 已允许 载入新的或修改过的模组 的尝试。
我一直按拒绝这个动作的执行
可是不到三秒又会跳出来
而且我看报告的纪录 好像有些程式趁我不注意已经自己允许执行更改过了
我不知道要怎麽办...我不知道那是什麽东西
想要用置底的方法扫出来又怕卡巴关掉我电脑就完蛋了...
是不是因为我昨天使用确定有毒的随身碟有关?
可是我一插入就马上格式化也马上电脑扫毒了
本来一插入有跑出有特洛依病毒的视窗也没再跳出...
可是下午变成这种我没办法解决的状况
现在到底要怎麽办 有没有人可以告诉我..
如果文章不合板规请拜托告诉我
真是抱歉 因为我去女性电脑问题板询问都一直没人回
电脑里有很多重要的文件...现在真是六神无主
--
※ 发信站: 批踢踢实业坊(ptt.cc)
◆ From: 59.112.239.58
1F:推 Tequila7211:先乖乖按照置底方式跑报告出来 11/20 18:33
2F:→ m530kimo:所以可以关防毒软体罗??因为我是怕不能关防毒 11/20 18:37
3F:→ m530kimo:谢谢你!! 11/20 18:37
4F:推 hirokofan:如果log不会用,至少先跑置底闪光的EFix 11/21 07:44