Author Topic: 为什么会把ghost的文件给杀掉  (Read 7452 times)

0 Members and 1 Guest are viewing this topic.

Offline zx1z1

  • Newbie
  • *
  • Posts: 3
为什么会把ghost的文件给杀掉
« on: September 29, 2007, 10:39:30 AM »
 ??? ???为什么会把ghost的文件给杀掉一旦杀掉就没法使用了

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4143
  • Some days..... MOS...this bug's for you
Re: 为什么会把ghost的文件给杀掉
« Reply #1 on: September 29, 2007, 10:41:43 AM »
Ahh...care to add a little more info?????

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 84597
  • No support PMs thanks
Re: 为什么会把ghost的文件给杀掉
« Reply #2 on: September 29, 2007, 02:54:18 PM »
Quote from: Bablefish translation of title
Why can for massacre the ghost document

Quote
Why Huh could Huh for massacre the ghost document once massacres has no way to use

Note some of the Chinese Simplified ?? got converted to smilies.

But we most certainly need some more information.
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.1.2449 (build 21.1.5968.561) UI-1.0.597/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: 为什么会把ghost的文件给杀掉
« Reply #3 on: September 29, 2007, 08:30:41 PM »
Well... it should be an English-only forum...
Could you please, go to an automated translation service, copy & paste your text and get, at least, an automated translation of your writings?
Thanks.

http://world.altavista.com/
http://dictionary.reference.com/translate/text.html
http://www.freetranslation.com/
http://www.worldlingo.com/en/products_services/worldlingo_translator.html
http://translation2.paralink.com/
The best things in life are free.

Offline puppy1984

  • Newbie
  • *
  • Posts: 6
Re: 为什么会把ghost的文件给杀掉
« Reply #4 on: September 30, 2007, 02:28:15 AM »
let me try to translate ;D
some files produced by ghost are deleted ,which caused ghost cannot work.
PS: i also think it is a false positive.
1KG_su.exe which is produced by ghost v11 is regarded as Win32:trojan-gen.{others}.
o(∩_∩)o...

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: 为什么会把ghost的文件给杀掉
« Reply #5 on: September 30, 2007, 07:47:49 PM »
some files produced by ghost are deleted
i also think it is a false positive.
Symantec Ghost I suppose... Can you reinstall the application?
Did you test the installation with the last VPS (virus database) version?
To know if a file is a false positive, please submit it to JOTTI or VirusTotal and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com
Please, mention in the body of the message why you think it is a false positive and the password used. Thanks.
VirusTotal and Jotti both have file size limits 10 and 15MB each.

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the 'a' blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button...
You can use wildcards like * and ?. But be carefull, you should 'exclude' that many files that let your system in danger.
After that, please, periodically check it - scan it into Chest, right clicking the file -  there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected as being infected then you can also remove it from the Exclusion list.

This link is a tutorial on how to help correct a virus detection that you believe to be false:
http://forum.avast.com/index.php?topic=25009.msg204838#msg204838
or http://forum.avast.com/index.php?topic=7779.msg62586#msg62586
The best things in life are free.

Offline puppy1984

  • Newbie
  • *
  • Posts: 6
Re: 为什么会把ghost的文件给杀掉
« Reply #6 on: October 01, 2007, 03:38:33 AM »
hi,tech.i followed your suggestion,and sent suspicious files to http://www.virustotal.com/ and got the report below.but i still do not confirm it is whether a virus or not
结果: 10/32 (31.25%)

反病毒引擎 版本 最后更新 扫描结果
AhnLab-V3 2007.9.29.0 2007.09.28 Win-Trojan/Encpk.653081
AntiVir 7.6.0.18 2007.09.30 TR/Agent.653081
Authentium 4.93.8 2007.10.01 -
Avast 4.7.1043.0 2007.09.30 Win32:Trojan-gen. {Other}
AVG 7.5.0.488 2007.10.01 Win32/Kenfa
BitDefender 7.2 2007.10.01 -
CAT-QuickHeal 9.00 2007.09.29 -
ClamAV 0.91.2 2007.10.01 -
DrWeb 4.33 2007.09.30 -
eSafe 7.0.15.0 2007.09.30 -
eTrust-Vet 31.2.5174 2007.09.30 -
Ewido 4.0 2007.09.30 -
FileAdvisor 1 2007.10.01 -
Fortinet 3.11.0.0 2007.09.30 -
F-Prot 4.3.2.48 2007.10.01 -
F-Secure 6.70.13030.0 2007.10.01 -
Ikarus T3.1.1.12 2007.10.01 Packed.Win32.Klone.af
Kaspersky 7.0.0.125 2007.10.01 -
McAfee 5130 2007.09.28 -
Microsoft 1.2803 2007.10.01 -
NOD32v2 2561 2007.10.01 -
Norman 5.80.02 2007.09.28 -
Panda 9.0.0.4 2007.09.30 Suspicious file
Prevx1 V2 2007.10.01 Malware.Gen
Rising 19.42.61.00 2007.09.30 -
Sophos 4.22.0 2007.10.01 Mal/EncPk-U
Sunbelt 2.2.907.0 2007.09.28 VIPRE.Suspicious
Symantec 10 2007.10.01 -
TheHacker 6.2.6.074 2007.09.30 -
VBA32 3.12.2.4 2007.09.30 -
VirusBuster 4.3.26:9 2007.09.30 -
Webwasher-Gateway 6.0.1 2007.09.30 Trojan.Agent.653081
o(∩_∩)o...

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: 为什么会把ghost的文件给杀掉
« Reply #7 on: October 01, 2007, 03:46:11 AM »
Symantec Ghost I suppose... Can you reinstall the application?
Did you test the installation with the last VPS (virus database) version?
Seems a false positive, but can you answer the previous questions?
The best things in life are free.

Offline NewTaMax

  • Newbie
  • *
  • Posts: 15
Re: 为什么会把ghost的文件给杀掉
« Reply #8 on: October 01, 2007, 06:16:01 AM »
我不知道AVAST会把GHOST文件当作压缩文件打开,我好象没有影像,一般不会的。出现这种情况请检查你的电脑,有可能中了病毒,中了一些恶性病毒就会自动删GHO文件。

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: 为什么会把ghost的文件给杀掉
« Reply #9 on: October 01, 2007, 04:54:03 PM »
As I've posted above, this it should be an English-only forum...
http://forum.avast.com/index.php?topic=30685.msg254051#msg254051
The best things in life are free.