又中招了…

C:\prsc32.exe
C:\WINDOWS\system32\dllcache\prsc32.exe

这个东东会将自己安装为一个系统服务程序(名为Windows Process Sevices),网上没能搜索到比较详细的介绍,应该是个木马程序,也不知道感染多少天了,只知道前些天有一回无意间看进程列表中多了几个看不到的cmd.exe和ftp.exe,可能就是它引起的,sigh,自己的警惕性是越来越差了,看来也不能老是让机器在网上裸奔了…赶紧全盘扫描一次先。

附清除方法:杀进程,删文件,删服务。

This entry was posted in 软件应用 and tagged . Bookmark the permalink.

发表评论

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / 更改 )

Twitter picture

You are commenting using your Twitter account. Log Out / 更改 )

Facebook photo

You are commenting using your Facebook account. Log Out / 更改 )

Google+ photo

You are commenting using your Google+ account. Log Out / 更改 )

Connecting to %s