• 	Enter your search terms
  	Web www.linabbs.com Submit search form

• Linabbs's blog

  • website redirect and anti-virus won?t run
  • Can?t update AVG or go to Windows update page
  • Cannot access anti-virus websites
  • [Active] Sinowal.Trojan and a few Others
  • [Resolved] newly file added to pendrive keep continue being deleted
  • [InActive] Does Anyone know what foxcglm.exe is?
  • IE and Firefox will not Start after Virus Removal
  • [Active] IE and Firefox not running apparent virus / malware issue
  • [ACTIVE]Slow Running Computer
  • [Active] Microsoft download blocked Google links hijacked.

• Categories

  • Virus
  • Windows7

• Recent Comments

• Recent Posts

  • website redirect and anti-virus won’t run
  • Can’t update AVG or go to Windows update page
  • Cannot access anti-virus websites
  • [Active] Sinowal.Trojan and a few Others
  • [Resolved] newly file added to pendrive keep continue being deleted

• Archives

  • January 2009
  • August 2008
  • January 2008
  • December 2007

• Blogroll

  • Linabbs
• 
  

• Pages

  • About

• Meta

  • Register
  • Login
  • Entries RSS
  • Comments RSS
  • WordPress.org

• Spam Blocked

  14 spam comments

  blocked by
  Akismet

中了cmd.exe病毒，看了很多帖子，但找不到解决贴中描述的病毒文件和注册表值，只在进程里有cmd.exe，求教

进程中有cmd.exe的话未必是什么cmd.exe病毒。

首先要看进程中cmd.exe的文件路径，如果是在system32文件夹下的话就说明是系统的进程。同时也可以证明你中了远程控制的病毒，如灰鸽子。

远程控制的病毒你最好先用杀毒软件扫描一下，如果没扫描出来，可以看一下可疑的进程。包括explorer.exe进程中的模块是否有可疑的DLL文件。

如果不会具体操作的话，只能多试几个杀毒软件了。

Related Posts:

• December 19, 2007 -- Backdoor.Win32.Ceckno.ed
• December 17, 2007 -- winsysms_1.dll
• January 5, 2009 -- [Resolved] Error message
• January 5, 2009 -- [Active] can’t find dll file/pop-up error.
• January 3, 2009 -- system32\drivers\services.exe
• January 18, 2008 -- Win32 OR Troj OR PswQQ
• December 28, 2007 -- cmxxl.dll
• December 28, 2007 -- Trojan.Win32.Agent.akv
• December 26, 2007 -- reyoll25.dll reyoll25.sys
• December 26, 2007 -- lssass.exe

written by lina \\ tags: cmd.exe, DLL, explorer.exe, system32

Comments