我按你的方法试了下
显示的是这些
Active connections
proto local address foreign address state PID
下了个木马克星杀一大堆
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0054223.exe 发现木马:tro2005-7-30-VCMnet7 updated 030905,38021
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0054223.exe木马已经清除.
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0055118.exe 发现木马:tro2005-9-5-server,780288
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0055118.exe木马已经清除.
C:\WINDOWS\Setup.exe 怀疑为木马.
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0054224.dll 发现木马:Tro2006-1-1,90112
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0054224.dll木马已经清除.
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0054225.dll 发现广告程序:tro2005-5-31-spyware-hookdll,73728
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0054225.dll广告已经清除.
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0054226.dll 发现木马:tro2005-6-11-nsp,19968
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0054226.dll木马已经清除.
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0054227.dll 发现木马:Tro2006-1-1,29408
C:\System Volume Information\_restore{EB64E17A-F156-4AA0-8E97-B0E43410E362}\RP56\A0054227.dll木马已经清除.
C:\WINDOWS\system32\idnoe.dll 怀疑为CNNIC广告
这个C:\WINDOWS\Setup.exe 怀疑为木马 怎么清理掉哇
|