可疑进程

显示全部楼层 · 发表于 2007-3-16 22:59:24

进程文件:	wfdmgr.exe
进程名称:	W32/Mytob-C Worm
英文描述:	wfdmgr.exe is a process which is registered as W32/Mytob-C Worm. This virus is distributed via the Internet through e-mail and comes in the form of an e-mail message, in the hopes that you open its hostile attachment. The worm has its own SMTP engine which means it gathers E-mails from your local computer and re-distributes itself. In worst cases this worm can allow attackers to access your computer, stealing passwords and personal data. This process is a security risk and should b信诌息惩进骸程替库暮息栓processlib.net悯bbs.processlib.net咬www.processlib.net铬www.processlib.net适e removed from your system.
进程分析:	unknown

安全等级 (0-5): 4 (N/A无危险 5最危险)
间碟软件: 否
广告软件: 否
病毒: 是
木马: 是
我在网上查到说是木马，红伞没报，不知道是不是
附上文件

显示全部楼层 · 发表于 2007-3-16 23:40:18

运行后只弹出来一个命令提示符

显示全部楼层 · 发表于 2007-3-17 00:00:27

Wdfmgr.exe 是系统文件，而LZ所贴的文字内容 “wfdmgr.exe” 是worm 伪装成的。
两个不一样

显示全部楼层 · 发表于 2007-3-17 00:12:47

谢谢楼上的，明白了