瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 急!!!Exploit.ActiveXComponent.a 瑞星连这个也杀不了???

1   1  /  1  页   跳转

急!!!Exploit.ActiveXComponent.a 瑞星连这个也杀不了???

急!!!Exploit.ActiveXComponent.a 瑞星连这个也杀不了???

昨天检查了电脑,发现有Exploit.ActiveXComponent.a 这个病毒,但是杀不了。今天下载了最新的升级包安装,但是还是显示“清除失败”!查了瑞星的病毒库,说是普通文件病毒,但是为什么就杀不呢???

请问是怎么回事???

还有,为什么我在瑞星主程序里点击“在线升级”后就自动卸载瑞星??
最后编辑2005-09-07 17:00:44
分享到:
gototop
 

大部分在c:\quarantine下,但也有的在别的目录下。都是我新建的目录。

请问怎样清除呀??我是菜鸟,请说具体一点,谢谢!
gototop
 

晕.."在线升级"那个图标这个大我还会点错吗??点击后连接更新第二个文件时就自动卸载瑞星啦.

Exploit.ActiveXComponent.a 这个文件到底有什么危害????
gototop
 

还有,公司里的内部邮箱这几天每天都收到上百封邮箱,内容有:

Your message

  To:      umopoki@eximagen.com.mx
  Subject: Re: Feliz Navidad!
  Sent:    Thu, 6 Jan 2005 19:00:00 -0500

did not reach the following recipient(s):

umopoki@eximagen.com.mx on Wed, 7 Sep 2005 02:44:22 -0500
    The recipient name is not recognized
The MTS-ID of the original message is: c=us;a= ;p=eximagen, s.a.
d;l=SERVEREX0509070744RPM3X6FZ
    MSEXCH:IMS:Eximagen, S.A. de C.V.:EXIMAGEN:SERVEREX 0 (000C05A6) Unknown
Recipient

-----------------------

Dies ist eine automatisch erstellte Benachrichtigung über den Zustellstatus.

Übermittlung an folgende Empfänger fehlgeschlagen.

      lelo@cimt-ag.de

-------------------------------

您发送的邮件中带有 W32/Zafi.d@MM 病毒, 系统拒绝投递.

----- Original message follows.
Received: from [218.19.1.220]; Wed, 7 Sep 2005 16:10:22 +0800
Message-ID: <x274501784.2161041429216375285@lkggkrong>
From: Wellkind <sales@wellkind.cn>
To: <libe@waterdrop.cn>
Subject: Re: Merry Christmas!
Date: 星期三, 07 九月 2005
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=---=extPart_751_0742_33003523.12210751"
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

This is a multi-part message in MIME format.

------=extPart_751_0742_33003523.12210751
Content-Type: multipart/related;
type=ultipart/alternative";
boundary=---=extPart_101_0288_75406122.07423300"


------=extPart_101_0288_75406122.07423300
Content-Type: multipart/alternative;
boundary=---=extPart_107_5107_42330035.35231010"


------=extPart_107_5107_42330035.35231010
Content-Type: text/plain;
charset=so-8859-1"
Content-Transfer-Encoding: quoted-printable

   

:) Wellkind
------=extPart_107_5107_42330035.35231010
Content-Type: text/html;
charset=so-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2523" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT color=#008000><FONT face="Comic Sans MS"><FONT size=4><FONT size=6>*
</FONT><FONT size=4>  ....<IMG alt="" hspace=0
src="cid:000501c4d3e8$a2bcc490$6701a8c0@Tomi" align=baseline
border=0> ....  <FONT size=5> *</FONT></FONT></DIV>
<DIV><FONT face="Comic Sans MS" size=4></FONT> </DIV>
<DIV><FONT color=#008000 face="Comic Sans MS" size=4><STRONG>:) Wellkind<DIV> </DIV>
<DIV><FONT color=#008000 face="Comic Sans MS"
size=2>___________________________________________________________________</FONT></DIV>
<DIV><FONT size=2><STRONG><U><FONT color=#0000ff face=Arial>
http://waterdrop.cn/postcard.htm6407
</U>
<FONT color=#008000>- Picture Size: 11 KB, Mail: +OK</FONT></STRONG></FONT></DIV></BODY></HTML>

------=extPart_107_5107_42330035.35231010--

------=extPart_101_0288_75406122.07423300
Content-Type: image/gif;
name=.gif"
Content-Transfer-Encoding: base64
Content-ID: <000501c4d3e8$a2bcc490$6701a8c0@Tomi>

R0lGODlhGAAUAKECAAICov7+AgAAAAAAACH/C05FVFNDQVBFMi4wAwEAAAAh+QQJCgACACwAAAAA
GAAUAAACTJQPqQvnD4KcNLTnYrVaXtxVCfVl2+lhQuihJXIu0wKh8zibthXDdogrsUg/32ZI0ol2
L5YGJwLJiFHQj6EyKHaWrLHnRQwTYSnNUQAAIfkECQoAAgAsAgAAABUAFAAAAkmUBakL5waCnDS0
h6pM9J6oWeDmjFtIfprZleEyKSq6cSlb4VaGmvals3RGDV3wlqOleMLYq2TrrB5Bhgd63GEgtOs2
Wtt+F48CACH5BAkKAAIALAEAAAAWABQAAAJIlA2pC+cHgpw0tIeqTPS6qFng9oxbSH6a2ZXhMikQ
2nEpu74C3tU3yrJZdi/ar8JrZWK91UeRQ2KSDE9JqMPMgNor0tqFLB4FACH+JyhDKSBodHRwOi8v
cGFyYWxsYXgubnNrLnN1IDIwMDABVVNTUENNVAA7

------=extPart_101_0288_75406122.07423300--

------=extPart_751_0742_33003523.12210751
Content-Type: application/octet-stream;
name=ostcard.htm6407.bat"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename=ostcard.htm6407.bat"
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--------------------------------------

请问这是什么病毒??用什么软件可以杀?瑞星2005(版本17.43.20)能杀不?
gototop
 

谢谢你...

再问六楼一下,第五楼里的那些邮件是不是也是这个病毒在作怪?
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT