刚才我的NOD32监控失灵了。。。

卡住了

随便在样本区下了个东西 解压后Nod32监控竟然没反应 Nod32手动扫描发现了病毒 我注意到AMON显示一直停留在一个叫index.dat文件上 并没有随着我的解压新建等操作监视文件 重起计算机后再次解压样本 监控报了。。。

  真是奇怪了


9月11日 早7：07补：监控纪录 从时间可以看出我重起前和重起后的区别

Event Log的
Time Module Event User
2007-9-11 6:36:03 Kernel Statistical information has been sent to ESET, spol. s r.o.
2007-9-10 23:15:56 NOD32 An alert has been generated. See the on-demand scanner Log for details. LEE-0E6574BE745\lee
2007-9-10 23:14:41 NOD32 An alert has been generated. See the on-demand scanner Log for details. LEE-0E6574BE745\lee
2007-9-10 23:10:14 NOD32 An alert has been generated. See the on-demand scanner Log for details. LEE-0E6574BE745\lee
2007-9-10 21:25:22 Kernel The virus signature database has been successfully updated to version 2519 (20070910).
2007-9-10 18:24:25 Kernel The virus signature database has been successfully updated to version 2518 (20070910).
2007-9-10 11:57:16 Kernel The virus signature database has been successfully updated to version 2517 (20070910).
2007-9-10 6:51:06 Kernel The virus signature database has been successfully updated to version 2516 (20070909).
2007-9-9 17:41:42 NOD32 An alert has been generated. See the on-demand scanner Log for details. LEE-0E6574BE745\lee

Threat Log的
Time Module Object Name Threat Action User Information
2007-9-11 6:47:00 AMON file C:\Documents and Settings\lee\Desktop\s368\s368.exe a variant of Win32/PSW.OnLineGames.NBR trojan quarantined - deleted  Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe. The file was moved to quarantine. You may close this window.
2007-9-10 23:26:48 AMON file C:\Documents and Settings\lee\Desktop\s368\s368.exe a variant of Win32/PSW.OnLineGames.NBR trojan quarantined - deleted  Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe. The file was moved to quarantine. You may close this window.
2007-9-10 23:18:50 AMON file C:\Documents and Settings\lee\Desktop\s368\s368.exe a variant of Win32/PSW.OnLineGames.NBR trojan quarantined - deleted  Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe. The file was moved to quarantine. You may close this window.
2007-9-9 17:41:58 AMON file C:\Documents and Settings\lee\Desktop\gg\gg.exe probably a variant of Win32/PSW.OnLineGames.NEP trojan quarantined - deleted  Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe. The file was moved to quarantine. You may close this window.

Scanner的（不能复制 只好截图）


[ 本帖最后由 卡住了 于 2007-9-11 07:10 编辑 ]

jhtl

你的名字。

武赫大叔

真有此事？

yczhou

发个图上来,你这样有枪手之嫌的!

卡住了

要是提个问题就是枪手 那以后没人敢说话了。。。
我用的NOD32 2.7 E版 pplive账号 同时开启的监控有360 还装有AVG反马但未开监控
我也想发图 可我原贴都写清楚了 我发现问题后立即重起电脑了

[ 本帖最后由 卡住了 于 2007-9-11 06:52 编辑 ]

卡住了

我补了纪录文件

xffsfy

NOD32监控和360冲突的那个问题解决了没？

htoziwy

我的却是AMON老是出现问题，我使用的是官方简体中文2.70.39，用官方默认设置的服务器升级。出现问题一般是在开机进入Windows界面后，就跳出个对话框提示。我一般看到提示就马上重启系统，有时就不提示了。如果还提示就重装NOD32。常有这个现象，郁闷死了 ，偏偏又找不到其它喜欢的杀软件，只好默默地忍受
有谁能帮我看看是什么问题，帮我解决一下吗？？

卡住了

原帖由 xffsfy 于 2007-9-11 17:39 发表
NOD32监控和360冲突的那个问题解决了没？

啥冲突呀？我现在桌面留了一个压缩的样本 随时解压测试NOD32有反应没 过几天打算重装系统。。。。

xffsfy

原帖由 卡住了 于 2007-9-11 21:04 发表



啥冲突呀？我现在桌面留了一个压缩的样本 随时解压测试NOD32有反应没 过几天打算重装系统。。。。

记得很久之前说NOD32的AMON监控到360的一个文件的时候就会卡住，不知道解决了没