为什么NIS处理一次病毒or风险，就要重启？

loboy

咋这样啊？？

t60zwq

同问，也出现同样问题。

gsyd

在跑流程,

787635976

为了安全吧  立即重启后能彻底杀掉病毒吧   毕竟有些顽固病毒杀了之后会在淤生出来

givemeakiss

我也是呀, 杀个U盘 都要重启

星夜孤独

因为那些病毒可能修改了系统的关键部位（比如说注册表什么的），诺顿处理病毒和其他杀软不同，诺顿会分析病毒，看看病毒会修改系统哪些东西，从而清除的时候能够比较彻底的把病毒清除，不留下病毒的“尸体”，这就是为什么诺顿在处理病毒的时候速度比较慢了
这是好事啊。目前能像诺顿这样能清除病毒的杀软不多。

loboy

我只是确认一下是不是都这样  避免NIS被改了

再见武藤兰

诺顿扫描的时间太长了，而且他还东扫一下西扫一下，不像红伞卡巴那些的集中扫完一个盘再扫下一个盘。。。这个是何解啊

hao198411

诺顿把我的很多软件都误杀了
哎~~~~~~
还要 我一个一个的恢复
真郁闷

无尽藏海

对于已经分析过的样本类型，会进行修复，很机械傻瓜的，即使样本没运行过

Infostealer.Banker.C
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Restart Required
-----------
28 Registry Entries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon->Userinit:C:\WINDOWS\system32\userinit.exe, - Restart Required
HKEY_USERS\S-1-5-21-1801674531-879983540-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run->userinit - Restart Required
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run->userinit - Restart Required
HKEY_USERS\S-1-5-21-1801674531-879983540-682003330-500\Software\Microsoft\Windows\CurrentVersion\Run->userinit - Restart Required
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run->userinit - Restart Required
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run->userinit - Restart Required
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion->Win32 - Restart Required
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network->UID - Restart Required
HKEY_USERS\S-1-5-21-1801674531-879983540-682003330-1003\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network->UID - Restart Required
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network->UID - Restart Required
HKEY_USERS\S-1-5-21-1801674531-879983540-682003330-500\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network->UID - Restart Required
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network->UID - Restart Required
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network->UID - Restart Required
HKEY_USERS\S-1-5-21-1801674531-879983540-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\{19127AD2-394B-70F5-C650-B97867BAA1F7} - Restart Required
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\{19127AD2-394B-70F5-C650-B97867BAA1F7} - Restart Required
HKEY_USERS\S-1-5-21-1801674531-879983540-682003330-500\Software\Microsoft\Windows\CurrentVersion\Explorer\{19127AD2-394B-70F5-C650-B97867BAA1F7} - Restart Required
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\{19127AD2-394B-70F5-C650-B97867BAA1F7} - Restart Required
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\{19127AD2-394B-70F5-C650-B97867BAA1F7} - Restart Required
HKEY_USERS\S-1-5-21-1801674531-879983540-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\{35106240-D2F0-DB35-716E-127EB80A0299} - Restart Required
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\{35106240-D2F0-DB35-716E-127EB80A0299} - Restart Required
HKEY_USERS\S-1-5-21-1801674531-879983540-682003330-500\Software\Microsoft\Windows\CurrentVersion\Explorer\{35106240-D2F0-DB35-716E-127EB80A0299} - Restart Required
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\{35106240-D2F0-DB35-716E-127EB80A0299} - Restart Required
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\{35106240-D2F0-DB35-716E-127EB80A0299} - Restart Required
HKEY_USERS\S-1-5-21-1801674531-879983540-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\{43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} - Restart Required
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\{43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} - Restart Required
HKEY_USERS\S-1-5-21-1801674531-879983540-682003330-500\Software\Microsoft\Windows\CurrentVersion\Explorer\{43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} - Restart Required
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\{43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} - Restart Required
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\{43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} - Restart Required
5 Files
C:\WINDOWS\system32\ntos.exe - Restart Required
C:\WINDOWS\system32\wsnpoem\audio.dll - Restart Required
C:\WINDOWS\system32\wsnpoem\video.dll - Restart Required
C:\WINDOWS\system32\wsnpoem - Restart Required
d:\kafan virlist 2009.11.01\kafan virlist 2009.11.01\091101-a-29.exe - Deleted
1 Browser Cache