Hello ,
Thank you for contacting Sophos Technical Support.
This threat is now detected as Troj/KillAV-GH
The IDE to detect this threat is published in auto-ays.ide
Please update Sophos Anti-Virus, verify the IDE file mentioned above is located in C:\Program Files\Sophos\Sophos Anti-Virus\, and run a Full System Scan to clean up this threat.
---
To create a new Full System Scan to clean up threats, please perform the following:
You should turn off System Restore before running a Full System Scan. Go to Start > Control Panel > Performance and Maintenance. Double-click System and then select the System Restore tab. Select the Turn off System Restore on all drives checkbox, then click Apply and then Yes.
Right click the blue Sophos shield on the taskbar and choose "Open Sophos Anti-Virus"
Click on "Set up a new scan". Give the scan a name, ensure you have checkmarked all of the local hard drives and removable drives under My Computer and click on "Configure this scan" at the bottom.
On the Options tab, ensure that Scanning level is set to "Normal (recommended)". Under Scanning options, ensure that "Scan all files", "Scan for adware/PUAs" and "Scan for suspicious files and rootkits" are checkmarked.
Click on the Cleanup tab. Ensure that "Automatically clean up items that contain virus/spyware" is checkmarked and the two radio buttons are set to "Do nothing" (which actually means to leave the virus there, but block all access to it if cleanup fails). Checkmark "Automatically clean up adware/PUAs" and click OK.
Click on "Save and Start". Reboot the computer once the scan completes.
---
Alternatively, create a Sophos Bootable Anti-Virus CD and scan the machine from the bootable environment.
Sophos Bootable Anti-Virus: download and CD creation instructions:
http://www.sophos.com/support/knowledgebase/article/52011.html
You can download the Sophos Bootable Anti-Virus CD from the following URL:
https://secure.sophos.com/support/updates/dp/full/sbav_10_sfx.exe
Please submit any additional samples as per the following KB:
Submitting samples of suspicious files to Sophos
http://www.sophos.com/support/knowledgebase/article/11490.html
Regards,
Martin Merriman
Sophos Technical Support
www.sophos.com/support/
SOPHOS - simply secure
-----Original Message-----
From: suke.cl@qq.com
Sent: 22-Jan-2010 11:38 PM
To: samples@sophos.com,
Cc:
________________________________
WARNING: One or more of the attachments (Virus.zip) in this e-mail have been removed because they might exhibit potentially malicious behaviour.
The original attachments have been automatically sent to SophosLabs for analysis. If the attachments are clean, you should receive them within 30 minutes of this e-mail.
If you have not received the attachments within 60 minutes of this e-mail and wish to receive them, please contact your local IT Service Desk and state the following:
ID: 4B5A7D17_9871_2761_1
Server: uk-pmx2.brown.sophos
________________________________
Virus |
发表于 2010-1-24 11:33:47
昨天裝了SAO護士,卡死...卸除之
楼主
我这无比流畅
1月份測試完之後我就不用TPAV了...
