瑞星卡卡安全论坛在线技术支持在线技术支持[已关闭] 中了Win32.Tenga和Win32.Parite.b怎么办啊??急救啊!!

12   2  /  2  页   跳转

中了Win32.Tenga和Win32.Parite.b怎么办啊??急救啊!!

回复: 中了Win32.Tenga和Win32.Parite.b怎么办啊??急救啊!!

我就杀了个C盘,就查出1208个Win32.Parite.b病毒啊.怎么回事啊??要了命了,在这么搞,真得该换换杀软了啊]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
gototop
 

回复:中了Win32.Tenga和Win32.Parite.b怎么办啊??急救啊!!

1.将d:\\system\\windows目录下的所有exe文件不包括(flcess.exe 和sysexplorer.exe) ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
设为读取,将d:\\bar目录下的exe文件设为读取; ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
2.将e:\\profiles目录下的历史记录目录设为读取; ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
3.禁用文件系统对象FileSystemObject ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
方法:直接查找scrrun.dll文件删除或者改名。 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
4. 加入注册表,禁止下载IE相关控件(ActiveX),可以将此文件拷入d:\\system\\newreg目录下,然后选 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
择通知工作站升级; ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
注册表如下: ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
REGEDIT4 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Compatibility\\{B83FC273-3522-4CC6-92EC-75CC86678DA4}] ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
"Compatibility Flags"=dword:00000400 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Compatibility\\{9A578C98-3C2F-4630-890B-FC04196EF420}] ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
"Compatibility Flags"=dword:00000400 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Compatibility\\{CF051549-EDE1-40F5-B440-BCD646CF2C25}] ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
"Compatibility Flags"=dword:00000400 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Compatibility\\{4EDBBAEA-F509-49F6-94D1-ECEC4BE5B686}] ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
"Compatibility Flags"=dword:00000400 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Compatibility\\{BC207F7D-3E63-4ACA-99B5-FB5F8428200C}] ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
"Compatibility Flags"=dword:00000400 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Compatibility\\{9BBC1154-218D-453C-97F6-A06582224D81}] ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
"Compatibility Flags"=dword:00000400 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Compatibility\\{00000566-0000-0010-8000-00AA006D2EA4}] ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
"Compatibility Flags"=dword:00000400 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Compatibility\\{4B106874-DD36-11D0-8B44-00A024DD9EFF}] ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
"Compatibility Flags"=dword:00000400 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Compatibility\\{6E449683_C509_11CF_AAFA_00AA00B6015C}] ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
"Compatibility Flags"=dword:00000400 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
注意:强制禁止下载.把存放IE临时文件的文件夹设置为读取权限。(这样可能有些语聊的网站,需要下载 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
语聊插件的不能正常使用了) ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
5.在服务器安装防火墙; ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
以下为变态方法,作为杀毒方法的后续,如果想要安全可以加入: ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
6.专杀工具spant,可以加到启动组中,工作站启动随时可以杀病毒; ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
7.将所有文件设为只读(不包括网络游戏的EXE文件); ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
8.删除IE浏览器,暂时避过WIN32病毒风头 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
有朋友用过这种方法,觉得不错,上面提到专杀工具spant。我觉得还可以。 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
从网上下载了流行病毒查杀工具spant.然后一个盘复制一个spant.我是四个盘. ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
因为win32.parite.a这种病毒是感染EXE文件,下载后没毒的文件,只要你运行了,在去查就会提示有毒.我 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
们执行了spant后,关闭了,就算杀了毒,这个文件在没杀之前已经感染. ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
所以在C盘放一个,杀后,删除此spant,在用另一个去杀. ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
重启,F8进入安全模式.然后就是漫长的杀毒.虽然漫长但是我忍了,真希望这次能彻底删除,还不错,终 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
于OK了。不过发现一些软件不能用了,就当捡了西瓜丢了芝麻好了,具体什么原因导致软件不能运行,我 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
也不想追查了,重新解压缩一遍好了。 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Spant杀毒工具还不错,可以杀 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.Bboy ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.Bboy.dll ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.CodeRed2 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.NewSuper ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.NewSuper.dll ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.NewSuper.inf ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.NewSuper.maker ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.PopWeb.hao ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.PopWeb.mail263 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.52mm ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.dj3344 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.hao114 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.hao3344 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.jinboy ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.ktv530 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.mmm110 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.mmqm ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.nicex ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.qq3344 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.qq886 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.QQSender.yy518 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Trojan.StarPage ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win32.Funlove.4070 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win32.Founlove.4608 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win32.Parite.176128 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win32.Parite.a ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win32.Parite.b ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win32.Xorala.2048 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.1003 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.1010 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.1019 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.1024 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.1026 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.1040 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.1042 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.1230 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.1262 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.1363 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.876 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Win95.CIH.973 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.KillMsBlast ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Klez.h ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Lentin.m ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.LovGate.c ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.LovGate.dll ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.LovGate.e ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.LovGate.f ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.LovGate.h ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.LovGate.h.49152 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.LovGate.i ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.LovGate.i.49152 ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.LovGate.j ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.LovGate.k ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Mimail ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.MsBlast ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Nimda ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Nimda.e ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Nimda.h ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Opasoft.a ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Opasoft.d ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Opasoft.e ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Randex.d ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Sobig.a ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Sobig.b ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Sobig.c ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Sobig.d ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Sobig.e ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Sobig.f ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Swen ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Tanatos.b ]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
Worm.Tanatos.dll]ê&defÂl³÷Ñbbs.ikaka.comVâÆ\@}K
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT