[psac]

NOD32發現病毒後的問題
ID: 59
1. NOD32 發現病毒，怎麼辦？ (NOD32 detected a virus, what should I do?)
一個紅色視窗會出現，通知你找到一隻病毒，請按在那視窗按 "清除"。 如問題持續，請聯絡技術支援。
A red window would appear, notifying you that the a virus is found, please click "Clean" in that window. If problem persists, please contact support.
ID: 60
2. AMON 發現病毒，怎麼辦？ (Amon detected a virus, what should I do?)
請試按 "清除" 。如 Amon 不能將之清除，你可按 "重新命名" 或 "刪除"。如不能完成，你可使用手動掃瞄器：
到開始> 程式集> Eset > NOD32
在 "掃瞄對像" 頁 選擇要掃瞄的對象(雙按合適的圖示)
按 "清除" 按擊
如病毒不能被清除，你可使用 "重新命名" 或 "刪除" 按鍵。
Try to click on the button "Clean". If Amon can not clean it, you can try to click on the buttons "Rename" or "Delete". If this also can not be completed, you can clean, rename or delete the virus with NOD32 On demand scanner:
Go to Start > Programs > Eset > NOD32
In the "Scanning Targets" tab select the resources you want to scan by double click on the appropriate icon
Click on the "Clean" button
If the virus can be cleaned - the problem is solved - if not, you can use the "Rename" or "Delete" buttons.
ID: 61
3. 怎樣重新啟動至安全模式？ (How to restart the computer in safe mode?)
重新啟動電腦
Reboot the Computer.
當電腦重新啟動時, 請按數次鍵盤上的F8直至啟動清單出現
Press "F8" many times during machine reboot until the bootup selection menu is shown.
選擇"安全模式"
Choose "Safe Mode".
進入安全模式後, 請執行NOD32病毒移除工具以掃瞄及清除病毒
After entering Safe Mode, run the NOD32 virus cleaner to start scan your computer and remove the virus.
進行掃瞄並等待直至整個過程完成
Scanning runs until completion.
重新啟動電腦至"正常模式"
Restart the computer to "Normal Mode".
ID: 62
4. 怎樣傳送病毒樣本到 Eset？ (How could I send a sample to Eset?)
請以 zip 形式壓縮該檔案，以密碼 "infected" 保護，然後以附件形式電郵至 samples@nod32.com。
Please zip the file, with password "infected", and then send it as an attachment to samples@nod32.com
ID: 63
5. NOD32 會否偵測這病毒？ Does NOD32 detect this virus?
如你曾聽過這病毒，而這是一隻真病毒而非謠傳 - NOD32 很大機會偵測得到。很少時候 NOD32 不能偵測一隻新的病毒 - 通過一個國際防毒機構，通常在數分鐘內我們就會得悉一隻新病毒的潛在威脅。它會被處理及在有須要時我們會提供一個早期的更新。在更新後將不會再有危險。當普羅大眾得悉此病毒時，NOD32 的顧客已無後顧之憂。
If you have heard of it and it is a real virus not a hoax - then NOD32 probably detects it. Occasionally a new virus will come out that NOD32 will not detect - just occasionally - within minutes - through an international organization of AV organizations we will be made aware of the potential threat - it will be accessed and if necessary a preliminary update to NOD32 will be released. After updating to the latest virus database there should be no danger. By the time the general public is aware of the threat - there will be no threat to NOD32 customers.
ID: 64
6. NOD32 偵測多少只病毒？ (How many viruses does NOD32 detect?)
因為我們的智慧式偵測模式並不規限於指定數目的已知病毒，所以 NOD32 能偵測到無限的病毒。是的，有時候有些新的病毒 NOD32 偵測不到 - 但這情況極少發生。
Since our heuristics are not fixed to some specific set of known viruses the number of viruses that NOD32 detects is infinite. Yes there are some that are developed from time to time that NOD32 will not detect - but there are very few of those.
ID: 65
7. 被感染檔案在自我回復，怎麼辦？ (The infected files are still restoring themselves. What to do?)
很可能你使用的系統是 Windows ME 或 Windows XP。這個系統預設會回復系統檔案，這些檔案會被系統自動地備份到系統磁碟機的資料夾 "_restore" (通常是資料夾"C:\_restore")。在這情況下被感染的檔案有可能在備份的檔案中，並且"不能被刪除"。
解決辦法
Windows ME
右擊桌面上的 "我的電腦" 圖示，選擇 "內容"
按 "效能">"檔案系統"
按 "疑難排解"
勾選 "關閉系統還原"
按確定，關閉及重新啟動系統
注意：建議在移除受感染檔案後回再次啟動系統還原：不要勾選 "關閉系統還原" 的方格
Windows XP
右擊桌面上的 "我的電腦" 圖示，選擇 "內容"
按 "系統還原"
勾選"關閉所有磁碟上的系統還原"
按確定，關閉及重新啟動系統
注意：建議在移除受感染檔案後回再次啟動系統還原：不要勾選 "關閉系統還原"
You are most probably using one of the latter operating system - Windows ME or Windows XP on your machine. These systems are by default using the option for restoring the system files, which system automatically backups to the directory "_restore" on the system disk(normally to the directory "C:\_restore"). This way it is possible that the infected files join the backed-up files and become "undeletable".
Solution
Windows ME
Right click on the "My Computer" icon on the Windows desktop and click "Properties"
Click on "Performance">"File system"
Click "Troubleshooting"
Check "Disable system restore"
Click on OK, Close and restart the system
Note: It is recommended to return to the standard behaviour of the system after the removal of the infected files - by unchecking the "Disable system restore"
Windows XP
Right click on the "My Computer" icon on the Windows desktop and click "Properties"
Click on the "System Restore"
Check "Turn off System Restore on all Drives"
Click OK, Close and restart the system
Note: It is recommended to return to the standard behaviour of the system after removal of the infected files - by unchecking the "Disable system restore"
ID: 81
8. 如何在安全模式清除病毒? How can I clean viruses in safe mode?
如有需要, 請把本頁列印出來, 然後跟著一步一步來做。
If necessary, please print out this page and follow the steps one by one.
1
重新啟動電腦
Restart your computer

2
在 Windows 啟動前連續地按「F8」(大概是一秒按一次), 直至看見以下畫面, 然後選擇安全模式
Before Windows starts, repeatedly press F8 (about once every second) until you see the following screen and select "Safe Mode"

3
選擇正確的 Windows
Choose the appropriate Windows

4
確定使用安全模式, 按「是」
Confirm to enter safe mode, press YES

5
在安全模式中, 按「開始」->「所有程式」->「Eset」->「NOD32」
In Safe Mode, Press "Start -> All programs -> Eset -> NOD32"

6
在工具列中按下滑鼠右鍵, 選擇「工作管理員」
Right click on the task bar, select "Task Manager"

7
在工作管理員中, 按「處理程式」網頁面, 再按「explorer.exe」, 再按「結束處理程式」
In the Task Manager, press "process" and select "explorer.exe" and then press "End Process"

8
按「是」確定結束處理程式, 然後桌面的「工具列」會清失, 這是正常的
Press YES to confirm ending the process, you will notice the task bar will have disappeared. Don't worry, this is normal.

9
在 NOD32 手動掃瞄器中, 按「動作」網頁面, 再按圖中所示作出設定, 最後按「檢查及清除」
In the NOD32 manual scanner, press "Action" tab and make changes referring to the following picture. After that, press "Scan and Clean"

10
等候掃瞄, 所見藍色及綠色的是沒有問題的資迅, 如果看見紅色, 即是發現病毒, 根據我們之前的設定, 所有病毒會被自動刪除, 你不需要按任何鍵指示電腦刪除病毒
Wait for scanning. All the blue and green text are normal information. Lines in red indicate viruses have been discovered. According to our previous settings, all viruses will be cleaned and deleted automatically.

11
掃瞄完成後, 按「離開」, 並按「是」儲存剛才「動作」中的設定
After scanning is complete, press "Quit" and press "Yes" to confirm saving the settings.

12
在「工作管理員」中, 按「關機」及選擇「重新啟動」即可。
In the "Task Manager", press "Shut down" and select "Restart".

13
如果你不小心關閉了「工作管理員」, 請先按 Ctrl 和 Alt, 再按 Delete 來開啟
If you have closed the Task Manager, please hold the Ctrl and Alt keys, and then press Delete to bring up the Task Manager.

ID: 84
9. 如何清除 NewHeur_PE 病毒 ? (How to clean NewHeur_PE virus? )
NewHeur_PE 是 NOD32 智慧式偵測模式偵測出來的威脅，建議你在安全模式下掃瞄你的電腦。(NewHeur_PE is threats detected by Advance Heuristics, please scan your computer in safe mode.)
如有需要, 請把本頁列印出來, 然後跟著一步一步來做。
If necessary, please print out this page and follow the steps one by one.
重新啟動電腦
Restart your computer

在 Windows 啟動前連續地按「F8」, 直至看見以下畫面, 然後選擇安全模式
Before Windows starts, repeatedly press F8 until you see the following screen and select "Safe Mode"

選擇正確的 Windows
Choose the appropriate Windows

確定使用安全模式, 按「是」
Confirm to enter safe mode, press YES

在安全模式中, 按「開始」->「所有程式」->「Eset」->「NOD32」
In Safe Mode, Press "Start -> All programs -> Eset -> NOD32"

在工具列中按下滑鼠右鍵, 選擇「工作管理員」
Right click on the task bar, select "Task Manager"

在工作管理員中, 按「處理程式」網頁面, 再按「explorer.exe」, 再按「結束處理程式」
In the Task Manager, press "process" and select "explorer.exe" and then press "End Process"

按「是」確定結束處理程式, 然後桌面的「工具列」會清失, 這是正常的
Press YES to confirm ending the process, you will notice the task bar will have disappeared. Don't worry, this is normal.

在 NOD32 手動掃瞄器中, 按「動作」網頁面, 再按圖中所示作出設定, 最後按「檢查及清除」
In the NOD32 manual scanner, press "Action" tab and make changes referring to the following picture. After that, press "Scan and Clean"

等候掃瞄, 所見藍色及綠色的是沒有問題的資迅, 如果看見紅色, 即是發現病毒, 根據我們之前的設定, 所有病毒會被自動刪除, 你不需要按任何鍵指示電腦刪除病毒
Wait for scanning. All the blue and green text are normal information. Lines in red indicate viruses have been discovered. According to our previous settings, all viruses will be cleaned and deleted automatically.

掃瞄完成後, 按「離開」, 並按「是」儲存剛才「動作」中的設定
After scanning is complete, press "Quit" and press "Yes" to confirm saving the settings.

在「工作管理員」中, 按「關機」及選擇「重新啟動」即可。
In the "Task Manager", press "Shut down" and select "Restart".

如果你不小心關閉了「工作管理員」, 請先按 Ctrl 和 Alt, 再按 Delete 來開啟
If you have closed the Task Manager, please hold the Ctrl and Alt keys, and then press Delete to bring up the Task Manager.

ID: 91
10. 發現不能清除 / 刪除的病毒 (A virus cannot be cleaned/deleted)
有時候, 你會發現一些病毒不能被清除或刪除, 原因是這些病毒正在運作中。就好像你開啟了一個 Microsoft Word 的檔案時, 你不能把它刪除或重新命名一樣。這個時候, 你可以進入安全模式, 在病毒不運作的時候, 來把它刪除。你可以參考 http://www.nod32.com.hk/support/faq.php?id=81 得到詳細示範。但如果你發現有些檔案在安全模式都不能刪除, 很有可能這些是壓縮檔案。在預設的情況下, NOD32 不會刪除有病毒的壓縮檔。你可以透過以下設定, 讓 NOD32 刪除有病毒的壓縮檔。
注: 在設定中我們會勾選「複製到隔離區」, 萬一你有用的檔案被刪除了, 也可以在 NOD32 隔離區中復原過來。
Sometimes you are unable to clean or delete a virus. It is because the virus is running. It is like when you open a Microsoft Word file, you cannot delete or rename it. Then, you can enter the safe mode, where the virus is not running, to delete the virus. You may refer to http://www.nod32.com.hk/support/faq.php?id=81 for details. However, if you find that some infected files cannot be deleted even in the safe mode, they are probably zipped files. By default, NOD32 does not delete infected zipped files. You can make the following settings and let NOD32 delete infected zipped files automatically.
Note: In the settings we always check the box "Copy to Quarantine". In case a deleted file is found useful, you can restore it from the NOD32 Quarantine.
首先, 開啟 NOD32 控制中心, 選擇 「NOD32」, 再按「深入分析」
First, open the NOD32 Control Center, click "NOD32" and then "In-depth analysis"

深入分析會自動開始掃瞄, 請按「停止」, 以作其後的設定
Scanning will start automatically, please click "Stop" so that we can change some settings.

選擇「動作」網頁面, 並按下圖作設定
Click the "Action" tab, then make settings referring to the following figure.

在下拉選單選擇「開機磁區」, 並按下圖作設定
Choose "Boot sectors" from the pull down menu, then make settings referring to the following figure.

在下拉選單選擇「壓縮檔」, 並按下圖作設定
Choose "Archives" from the pull down menu, then make settings referring to the following figure.

在下拉選單選擇「自我解壓檔」, 並按下圖作設定
Choose "Self-extracting archives" from the pull down menu, then make settings referring to the following figure.

在下拉選單選擇「執行時間壓縮器」, 並按下圖作設定
Choose "Run-time packers" from the pull down menu, then make settings referring to the following figure.

在下拉選單選擇「電郵」, 並按下圖作設定
Choose "Email" from the pull down menu, then make settings referring to the following figure.

在下拉選單選擇「操作記憶體」, 並按下圖作設定。最後按「檢查及清除」
Choose "Operating memory" from the pull down menu, then make settings referring to the following figure.

圖中所見所有藍色的都是正常的資迅。
而紅色的是發現病毒, 根據我們以上作的設定, 所有感染檔案 (包括壓縮檔), 也會被自動清除/刪除 (圖中箭咀所指位置)
ALL the lines in blue are normal information.
The red lines indicate viruses are found. According to our previous settings, all infected files (including archives) will be cleaned/deleted automatically (see the arrows)

掃瞄完成後請按「離開」, 並按「是」儲存我們剛才作的設定
After the scan is complete, click "Quit" and then "Yes" to save the settings.

ID: 109
11. 當對某個文件使用右鍵---nod32掃瞄的時,掃瞄結束後,當掃瞄結果顯示有病毒存在時,nod32并沒有提示我進行任何殺毒操作
你可以設定右鍵掃瞄自動清除及刪除病毒, (NOD32 控制中心 >>NOD32 >> 執行 NOD32 >> 設定檔 >> 右鍵選單設定檔 >> 動作 >> 設定你所希望的動作, 例如先清除後刪除)