史萊姆論壇 - 查看單個文章 - 電腦白痴shimano中毒請求協助part1-2

shimano · 2009-12-05, 09:27 PM

版區管理員,我己經掃過了二次,我發現感染的
1.Win32:Adware-gen[adw]我無法刪除也無法移到隔離區,移動/重新命名也不能處理.都出現"操作無法支援這種壓縮檔"這無解了嗎?以下是avast日誌所列的警告名單如下:
2009/12/5 下午 08:40:21 Administrator 1256 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\Documents and Settings\Administrator\Local Settings\Application Data\Downloaded Installations\{D647E6DF-D2DD-454C-BAF3-DEBB48E83E45}\ACDSee 10 (Traditional Chinese).msi\Binary.NewBinary5\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2009/12/5 下午 08:42:48 Administrator 1256 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\Program Files\Alwil Software\Avast4\DATA\moved\[Embedded_I#08040].vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2009/12/5 下午 08:45:22 Administrator 1256 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\Installer\637bf.msi\Binary.NewBinary5\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2009/12/5 下午 08:49:32 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc25.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2009/12/5 下午 08:49:40 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc26.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2009/12/5 下午 08:58:24 Administrator 1256 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\Documents and Settings\Administrator\Local Settings\Application Data\Downloaded Installations\{D647E6DF-D2DD-454C-BAF3-DEBB48E83E45}\ACDSee 10 (Traditional Chinese).msi\Binary.NewBinary5\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2009/12/5 下午 09:01:16 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc27\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2009/12/5 下午 09:01:32 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc28.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2009/12/5 下午 09:01:41 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc29.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2009/12/5 下午 09:01:51 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc30.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2009/12/5 下午 09:01:58 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc31.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2009/12/5 下午 09:10:07 Administrator 1256 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\Installer\637bf.msi\Binary.NewBinary5\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file.
2.這次我没有掃那個隨身硬碟,我想直接格式化,請問我該如何做?它的usb連接我的電腦會不會把裡面的病毒再傳到我的電腦裡呢?
3.有三個檔案另外在avast病毒隔離區裡系統檔案及所有隔離區裡有3個我重新掃描是顯示無毒的:
1.kernel32.dll c:\windows\system32 無毒
2.winsock.dll c:\windows\system32 無毒
3.wnsock32.dll c:\windows\system32 無毒
請問這三個檔我要復原它們嗎?

2009-12-05, 09:27 PM	#8 (permalink)
shimano 註冊會員榮譽勳章勳章總數0 UID - 334034 在線等級: 註冊日期: 2009-12-03 文章: 9 精華: 0 現金: 16 金幣資產: 16 金幣	電腦白痴shimno中毒請求協助part1-2 版區管理員,我己經掃過了二次,我發現感染的 1.Win32:Adware-gen[adw]我無法刪除也無法移到隔離區,移動/重新命名也不能處理.都出現"操作無法支援這種壓縮檔"這無解了嗎?以下是avast日誌所列的警告名單如下: 2009/12/5 下午 08:40:21 Administrator 1256 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\Documents and Settings\Administrator\Local Settings\Application Data\Downloaded Installations\{D647E6DF-D2DD-454C-BAF3-DEBB48E83E45}\ACDSee 10 (Traditional Chinese).msi\Binary.NewBinary5\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2009/12/5 下午 08:42:48 Administrator 1256 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\Program Files\Alwil Software\Avast4\DATA\moved\[Embedded_I#08040].vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2009/12/5 下午 08:45:22 Administrator 1256 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\Installer\637bf.msi\Binary.NewBinary5\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2009/12/5 下午 08:49:32 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc25.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2009/12/5 下午 08:49:40 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc26.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2009/12/5 下午 08:58:24 Administrator 1256 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\Documents and Settings\Administrator\Local Settings\Application Data\Downloaded Installations\{D647E6DF-D2DD-454C-BAF3-DEBB48E83E45}\ACDSee 10 (Traditional Chinese).msi\Binary.NewBinary5\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2009/12/5 下午 09:01:16 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc27\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2009/12/5 下午 09:01:32 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc28.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2009/12/5 下午 09:01:41 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc29.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2009/12/5 下午 09:01:51 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc30.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2009/12/5 下午 09:01:58 Administrator 1484 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\RECYCLER\S-1-5-21-1801674531-1770027372-1417001333-500\Dc31.vir\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2009/12/5 下午 09:10:07 Administrator 1256 Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\Installer\637bf.msi\Binary.NewBinary5\$SHELL[17]\IdnKw\$R0\[Embedded_I#08040]" file. 2.這次我没有掃那個隨身硬碟,我想直接格式化,請問我該如何做?它的usb連接我的電腦會不會把裡面的病毒再傳到我的電腦裡呢? 3.有三個檔案另外在avast病毒隔離區裡系統檔案及所有隔離區裡有3個我重新掃描是顯示無毒的: 1.kernel32.dll c:\windows\system32 無毒 2.winsock.dll c:\windows\system32 無毒 3.wnsock32.dll c:\windows\system32 無毒請問這三個檔我要復原它們嗎?

	送花文章: 0, 收花文章: 4 篇, 收花: 6 次