作者triste (麥肯錫之夢)
看板AntiVirus
標題Re: [中毒] 電腦運作速度變很慢....
時間Fri Jul 24 00:50:39 2009
4.如上述處理過後皆無法解決時，則請描述中毒的檔案位置以及處理過程
並附上系統分析報告
Combofix ：
http://kotuha.com/file/9AgKx-ComboFix.html
Hijackthis :
http://kotuha.com/file/nFM3O-hijackthis.html
SRENG ：
http://kotuha.com/file/e4zXY-SREngLOG.html
掃毒報告 ：
--
※ 發信站: 批踢踢實業坊(ptt.cc)
◆ From: 66.183.177.148
1F：→ triste:先謝謝願意撥冗指點的高手了Q_Q 07/23 10:52
2F：推 KarasuTW:按開始 - 執行 - notepad.exe ，貼上以下網頁內容 07/23 11:54
4F：→ KarasuTW:然後選檔案-另存新檔，點一下桌面，檔名打 CFScript.txt 07/23 11:54
5F：→ KarasuTW:檔案類型選所有檔案，編碼選 ANSI，好了以後把 cfscript 07/23 11:55
6F：→ KarasuTW:拖曳到 combofix 的圖示上面放手，讓它再掃一次。 07/23 11:55
7F：→ KarasuTW:處理完把 LOG 貼上來。 07/23 11:55
8F：→ KarasuTW: 還有就是你小紅傘沒更新定義碼 -3- 07/23 12:04
Some quick update as required..
http://kotuha.com/file/jj1to-Log.html
One interesting fact is My Antivir actually told me my virus definition has
already been up to date as below screenshot.
http://kotuha.com/file/oSQsS-123.html
Is there any instructions about how to manually update this? Or why the Antivi
user interface couldn't get the right status of virus definition?
Please feel free to correct me if any idea above is incorrect or misunderstood.
Apprecaite you guys great help.
(Plz don't blame me for Eng typing ~>_<~,
can't type Chinese on my office machine..)
--
※ 發信站: 批踢踢實業坊(ptt.cc)
◆ From: 139.142.65.19
9F：推 KarasuTW:我需要的是 Combofix 的 log... 07/24 01:03
10F：→ KarasuTW:那個 log 看起來不像 combofix 產生的 O_O 07/24 01:04
12F：→ triste:stupid mistake... 07/24 01:17
13F：推 KarasuTW:乾淨了，按開始 - 執行 - combofix /u 07/24 01:26
14F：→ KarasuTW:Antivir 的更新看起來也 OK 了。 07/24 01:26
15F：→ KarasuTW:可以的話把 C:\QooBox 裡面的東西 ZIP 起來上載到badongo 07/24 01:28
16F：→ KarasuTW:然後把網址寄給 TypeZero 作採樣用，請參考 #1ANP_o0g 07/24 01:29
17F：→ triste:so there is no virus in my system but just a sys 07/24 01:54
18F：→ triste:performance issue over there? Or the virus were just 07/24 01:55
19F：→ triste:cleaned thru the instructions you gave me? (Just out 07/24 01:55
20F：→ triste:of curious) 07/24 01:55
21F：推 neofire:7/23開始都有這問題....不少人喔....掃完毒也是一樣,唉 07/24 07:18
22F：推 KarasuTW:有中毒，然後毒被清除掉了 後面不是說要 sampling 嗎 XD 07/24 07:21
23F：→ KarasuTW:沒中毒就不用採樣了 07/24 07:21