推 hojoe:x大您好，我照著您寫的步驟做了，但是刪除完之後，再一次用 02/15 07:36
→ hojoe:Spyware Doctor掃毒還是掃到一模一樣的病毒.. 02/15 07:37
→ xiaoyao:您可能要問問廠商那邊如何處理囉 02/15 23:00
→ hojoe:是我不知道要把唯讀取消就刪除，問題已解決，謝謝>< 02/16 02:15
※ 引述《hojoe (木馬病毒不要來><)》之銘言：
: PO文請使用下列格式並將有要求的檔案附上
: 資料越詳細才有辦法了解情況並作適當處理
: 1.問題描述：
: 請在下面說明碰到的中毒情形，越詳細越好(可貼圖說明)：
: 開啟程式的速度變得很慢，有時候會當機，網頁常常出現無法回應
: 2.掃毒報告：
: 請先使用掃毒軟體執行全機掃描後將掃毒結果傳到置底空間
: 如會掃描很久請最少掃描以下位置和防毒軟體顯示的中毒檔案位置：
: C:\Windows\System32 C:\Windows C:\Program Files
: 請盡可能提供掃毒報告，如無法掃描請務必註明，也可使用線上掃毒掃描報告
: 線上掃毒使用方式請看精華區
: Avira AntiVir掃不到任何病毒，
: Spyware Doctor 6.0.0.386版本掃到1個威脅程式跟109個病毒，但是無法清除
: 3.系統輔助分析軟體掃描報告：
: 此處報告為需了解你系統內有何程式啟動和常駐所必須要的報告
: 請將掃描結果上傳至置底空間，置底空間無法使用者請改用http://www.kotuha.com
: 使用方式：
: Combofix： http://reinfors.googlepages.com/Combofix.html
: Hijackthis： http://reinfors.googlepages.com/Hijackthis
: SRENG： http://reinfors.googlepages.com/SRENG.html
: 如無法使用網路請看精華區 1 - 8 使用方式
: 4.報告連結：
: 請將掃描報告(log)貼於下方 (上面的全要)
: Combofix ：http://sun.cis.scu.edu.tw/~92a39/upload/34504.txt
: Hijackthis：http://sun.cis.scu.edu.tw/~92a39/upload/34505.txt
: SRENG ：http://sun.cis.scu.edu.tw/~92a39/upload/34506.txt
: 掃毒報告 ：附上Spyware Doctor 6.0.0.386版本的掃毒報告:
: http://www.badongo.com/pic/5288042
: http://www.badongo.com/pic/5288128
: http://www.badongo.com/pic/5288152
: http://www.badongo.com/pic/5288173
: http://www.badongo.com/pic/5288211
: http://www.badongo.com/pic/5288215
: http://www.badongo.com/pic/5288216
: http://www.badongo.com/pic/5288221
: 拜託各位大大幫我解毒<(_ _)>
疑似廣告插件
1.[新增移除程式]
尋找是否有"CiD Help" 若有則移除
2.[網際網路選項]
Temporary Internet Files → 刪除檔案
記錄 → 清除紀錄
3.打開C:\Documents and Settings\All Users\Application Data
搜尋*.exe
移除奇怪的exe檔
4.打開C:\WINDOWS\system32\drivers\etc
尋找hosts檔
右鍵選擇以記事本開啟
移除以下list
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 www.drivecleaner.com ## added by CiD
127.0.0.1 www.errorprotector.com ## added by CiD
127.0.0.1 www.errorsafe.com ## added by CiD
127.0.0.1 www.systemdoctor.com ## added by CiD
127.0.0.1 www.utils.winfixer.com ## added by CiD
127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
127.0.0.1 www.win-virus-pro.com ## added by CiD
127.0.0.1 www.winantispam.com ## added by CiD
127.0.0.1 www.winantispy.com ## added by CiD
127.0.0.1 www.winantispyware.com ## added by CiD
127.0.0.1 www.winantivirus.com ## added by CiD
127.0.0.1 www.winantiviruspro.com ## added by CiD
127.0.0.1 www.windrivecleaner.com ## added by CiD
127.0.0.1 www.windrivesafe.com ## added by CiD
127.0.0.1 www.winfixer.com ## added by CiD
127.0.0.1 www.winfixer2006.com ## added by CiD
127.0.0.1 www.winsoftware.com ## added by CiD
除了上述列舉之外
可按照你Spyware Doctor掃描出的 127.0.0.1 **********
予以刪除
--
※ 發信站: 批踢踢實業坊(ptt.cc)
※ 編輯: xiaoyao 來自: 220.129.168.88 (02/15 00:21)