感谢斑主大师.贴上用process explorer得到的processing runingProcess PID CPU Description Company Name
System Idle Process 0 84.07
Interrupts n/a Hardware Interrupts
DPCs n/a 0.88 Deferred Procedure Calls
System 4
smss.exe 904 Windows NT Session Manager Microsoft Corporation
csrss.exe 992 0.88 Client Server Runtime Process Microsoft Corporation
winlogon.exe 1016 Windows NT Logon Application Microsoft Corporation
services.exe 1060 1.77 Services and Controller app Microsoft Corporation
ibmpmsvc.exe 1284
svchost.exe 1324 Generic Host Process for Win32 Services Microsoft Corporation
1XConfig.exe 3236 8021XConfig Module Intel
wmiprvse.exe 232 WMI Microsoft Corporation
svchost.exe 1416 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1564 Generic Host Process for Win32 Services Microsoft Corporation
wuauclt.exe 3816 Automatic Updates Microsoft Corporation
EvtEng.exe 1668 EvtEng Module Intel Corporation
S24EvMon.e (more...)
嗯,
只有这个比较特别, 看看能不能kill掉
BL515.EXE 1308
如果BL515不是问题所在, 那么可能就是你主贴里的 UPDATE_W.EXE, 确实是个worm
http://www.sophos.com/virusinfo/analyses/w32rbotew.html
还有你怎么同时有norton AV 和 trend micro? 一般来说 ,只能运行其中一个
BL515.EXE 1308
如果BL515不是问题所在, 那么可能就是你主贴里的 UPDATE_W.EXE, 确实是个worm
http://www.sophos.com/virusinfo/analyses/w32rbotew.html
还有你怎么同时有norton AV 和 trend micro? 一般来说 ,只能运行其中一个
Freedom is slavery.
Ignorance is strength.