我用的是卡巴斯基个人版
原来就一个进程现在怎么两个了
都是avp.exe 一个是系统的一个是用户的
參考答案:我也有一样的问题 哈哈 但肯定不是病毒 我发现都很久了
1.要判定AVP.EXE是不是病毒... 其实很简单.. 运行.msconfig.把所有的启动程序都禁用. 重启电脑.看看进程里面还有没有avp.exe. 如果有就估计是中了病毒.一般禁用所有启动项.不运行任何程序.有25-27个进程.. 如果多于这个数值.. 就很有可能中了病毒/木马.
2.看一下avp.exe所在的目录，如果是在卡巴安装目录下，则应该是正常文件。如果不是，则可能是病
看一下卡巴是怎么说的:
问:Hi,
I am using KAV 6.0.
In Netstats , I see avp.exe is building many connections to various destinations and dont understand why is this happening. I dont think this are the update servers of Kaspersky. Can anyone tell me the logic behind this please ?
Why am I getting connections from Russia, and Israel ?
Some examples ;
inetnum: 195.151.171.0 - 195.151.171.255
netname: ROSPRINT-NET
descr: (9999) WEBHosting, Moscow
country: RU
////////////////////////////////////////////////////////
inetnum: 212.143.0.0 - 212.143.255.255
org: ORG-NL5-RIPE
netname: IL-NETVISION-990329
descr: NetVision Ltd
country: IL Haifa 31905
address: Haifa 31905
address: Israel
Thanks in advance
Guney
答:Hi guney & welcome
Because 6.0 filters everything through a proxy, 6.0 does not contact any other servers than it's own update servers in Russia, Japan, China, Holland and the US.
问:Thank You Don
Ok and thanks for the info , but I still see avp.exe is connected to 212.143.22.36
which seems to be a file ratings site. But I have no interest in this web site.
The ip is located in Haifa, israel.
Since I have paid for this software to protect my self against viruses and spyware, I really hate to see such a thing. What do I have to do with an israeli website ?
答:Isn't that the Web Protection feature? When you visit one site, you are actually connected to 4-5 different sites (third parties of the main site). Probably avp is actually trying to protect you by checking the traffic from or to there. Just guessing...
Paul Wynant
Moscow, Russia
楼主知道答案了吧
