Norton19.1.1.3处理病毒还是有些慢且资源占用高

剑步如飞

早上样本：http://bbs.kafan.cn/forum.php?mo ... ;extra=#pid21166832
更新完病毒库，“File Insight”处理了将近7分钟，不过还是有成果的：






Full Path: c:\users\jianfei\desktop\pusk\pusk.exe
____________________________
____________________________
On computers as of Not Available
Last Used 2011/9/23 at 8:53:00
Startup Item No
Launched No
____________________________
____________________________
Unknown
Number of users in the Norton Community that have used this file: Unknown
____________________________
Unknown
This file release is currently not known.
____________________________
High
This file risk is high.
____________________________
Threat Details
Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.
____________________________
http://bbs.kafan.cn/forum.php?mo ... DQ3OTEyNXwxMDkxNjk1 Downloaded File pusk.exe
Threat name:
Trojan.FakeAV from
bbs.kafan.cn
____________________________
File Actions
File: c:\users\jianfei\desktop\pusk\pusk.exe
Removed
____________________________
Registry Actions
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter->EnabledV8:1
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system->EnableLUA:1
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusDisableNotify:0
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirewallDisableNotify:0
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->UpdatesDisableNotify:0
Repaired
Registry change: HKEY_USERS\S-1-5-21-2177557438-1307303724-1019489038-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\->DisableTaskMgr:0
Repaired
Registry change: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\->DisableTaskMgr:0
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon->Userinit:C:\Windows\system32\Userinit.exe
Repaired
Registry change: HKEY_USERS\S-1-5-21-2177557438-1307303724-1019489038-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\->NoActiveDesktopChanges:0
Repaired
Registry change: HKEY_USERS\S-1-5-21-2177557438-1307303724-1019489038-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\->NoSetActiveDesktop:0
Repaired
Registry change: HKEY_USERS\S-1-5-21-2177557438-1307303724-1019489038-1000\Software\Microsoft\Internet Explorer\Desktop\General->Wallpaper
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\->NoActiveDesktopChanges:0
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\->NoSetActiveDesktop:0
Repaired
Registry change: HKEY_CLASSES_ROOT\.exe\
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\
Repaired
Registry change: HKEY_USERS\S-1-5-21-2177557438-1307303724-1019489038-1000\Software\Microsoft\Internet Explorer\Download->CheckExeSignatures:yes
Repaired
Registry change: HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Download->CheckExeSignatures:yes
Repaired
Registry change: HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Download->CheckExeSignatures:yes
Repaired
____________________________
File Thumbprint - SHA:
a36181a719e517fb1e9dcb3582158dab525a9790766376f8d1e572d76c0c1704
____________________________
File Thumbprint - MD5:
153977536a5dfa80d7d74fb5062549a5
____________________________

逍遥东华

看来改善不多啊

映像劫持

慢慢打磨  我等极品了 再回来用NIS

642238883

话虽如此，norton的处理过程还真彻底

riwenxiao

本人感觉没什么大的改善，还是比较卡，准备继续换回2011了

dopod2009

处理还是蛮彻底的

剑步如飞

642238883 发表于 2011-9-23 10:31
话虽如此，norton的处理过程还真彻底

是啊，如果cpu 100%负荷连续工作了将近10分钟还不给处理彻底那就没必要用Norton了。