来看看是什么病毒

zachary1202

晚上从远景上看到访问了这个地址：h**p://down.sec120.com/chenshisan，立刻IE中所有文字就很快都消失，感觉
可能中毒了，马上断网，查看PG的alerts,发现PG被绕过，有未经允许的程序运行。平时我有sandbox浏览网页，于是立刻清空sandbox内容，就在同时PC已经无法使用，不停弹出磁盘空间不足。重启后目前正常，没有问题。附上PG日志未经允许的程序运行记录  [EXECUTION] Commandline - [ "c:\program files\sandboxie\start.exe" /box:defaultbox delete_sandbox ]
Mon 02 - 23:45:59 [EXECUTION] "c:\program files\sandboxie\start.exe" was allowed to run
                  [EXECUTION] Started by "c:\program files\sandboxie\control.exe" [816]
                  [EXECUTION] Commandline - [ "c:\program files\sandboxie\start.exe" /box:defaultbox delete_sandbox ]
Mon 02 - 23:46:00 [EXECUTION] "c:\program files\sandboxie\start.exe" was allowed to run
                  [EXECUTION] Started by "Unknown Process" [2504]
                  [EXECUTION] Commandline - [ "c:\program files\sandboxie\start.exe" delete_sandbox_phase2 ]
Mon 02 - 23:46:10 [EXECUTION] "c:\windows\system32\cmd.exe" was allowed to run