进程和DLL文件查询
ntrootkit.exe 进程资料
ntrootkit.exe是什么进程?
进程信息 | |
进程文件: | ntrootkit.exe |
---|---|
进程名称: | ntrootkit.exe |
中文描述: | I-Worm/Raleka“瑞莱卡”病毒,这是一个利用微软DCOMRPC漏洞(MS03-026)进行传播的网络蠕虫。病毒运行后,从指定站点下载文件ntrootkit.exe和ntrootkit.reg,执行ntrootkit.exe文件,开启6667端口,连接指定的IRC服务器,加入到指定的聊天室里,昵称的前4个字符是被感染计算机名。开启大于32767的任意端口,侦听黑客指令,在远程计算机上创建并执行文件down.com,利用微软DCOMRPC漏洞(MS03-026)进行传播。创建日志文件,记录所有被感染计算机的IP地址,以致于不重复感染。 |
程序用途: | 未知 |
进程作者: | 未知 |
进程属性 | ||
系统进程: | 否 | |
---|---|---|
应用程序: | 否 | |
后台程序: | 否 | |
使用访问: | 否 | |
访问网络: | 否 | |
进程行为 | ||
危险等级: | 2 (N/A无危险 5最危险) | |
间碟软件: | 否 | |
广告软件: | 否 | |
病毒进程: | 是 | |
木马进程: | 否 |
进程查询结果由 xpcha.com 提供
热门进程
- QQLiveUp.exe QQLiveUp.exe
- pcclient.exe Trend Micro PC-Cillin Component
- searchindexer.exe
- lsass.exe Local Security Authority Service
- dwm.exe dwm.exe
- feedback.exe feedback.exe
- ocraware.exe Ocraware
- lviss.exe Worm.Ircbot.Gen.lviss
- msascui.exe Microsoft Windows Defender Antispyware
- ereg.exe
- devenv.exe Microsoft Visual Studio
- InfoMgr.exe InfoMgr.exe
- vaioupdt.exe Sony Vaio Update
- wmiadap.exe AutoDiscovery/AutoPurge (ADAP) Service
- LienVandeKelderrr.exe LienVandeKelderrr.exe
- lkcitdl.exe National Instruments Part of Logos
- mscoree.dll Microsoft .NET Runtime Execution Engine
- MotoMidMan.exe MotoMidMan.exe
- pcfmgr.exe PowerPannel
- lsm.exe lsm.exe
网友正在查
- ntrootkit.exe
- navautoupdate.exe
- imjpmig.exe
- smsonx32.exe
- msmlll.exe
- unsecapp.exe
- msreg.exe
- ftsrch.dll
- jrunsvc.exe
- scvhosts.exe
- jgdw400.dll
- 191001002.exe
- eserver.exe
- FTPXx.Tmp.exe
- fsg.exe
- TVloge.exe
- is5a6fe.exe
- tsc.exe
- AV2Wav.exe
- link.exe
- prizesurfer.exe
- switcher.exe
- WomWipe.exe
- hhs32.pif
- myagtsvc.exe
- gator.exe
- Messenger.exe
- llass.exe
- mcvsrte.exe
- qumk.exe
- Recmail.dll
- audiodev.dll
- ups.exe
- acombo3d.exe
- serevcs.exe
- pexplorer.exe
- shprrprthbt.exe
- 风无憾备忘录.exe
- dirkey.exe
- 7SVOHOST.exe
- winfile.exe
- rt7eng.exe
- csrse.exe
- so3d.exe
- Hacker.dll
- XTrap.xt
- nscntrl.exe
- icq.exe
- audiodg.exe
- vb2.exe
- kvfw.exe
- oieng400.dll
- atray.exe
- wintime.exe
- hydradm.exe
- NetUSB.exe
- FileForceKiller.exe
- jsru.dll
- cfiavdit.exe
- sbwatchdog.exe
- vrvwatchserver.exe
- ver.exe
- gpkbd.exe
- ipxroute.exe
- fifa07.exe
- spyaxe.exe
- wgpro32.exe
- dmomj.exe
- kbdycc.dll
- TrojanKiller.exe
- msrepl40.dll
- fips.exe
- ssdpapi.dll
- cdees.exe
- mcshield.exe
- traydate.exe
- timessquare.exe
- sataraid.exe
- cryptsvc.dll
- taskbarsvr.exe
- aclservice.exe
- flashksk.exe
- bind_8468.exe
- internet_Server.exe
- unzip.exe
- dianlei.exe
- lockbr.exe
- startpage.exe
- Spoolv.exe
- wt35w0g1.exe
- svrmgrl.exe
- upxg.exe
- pdexplo.exe
- oasclnt.exe
- svchqst.exe
- CHS.EXE
- Ctfmom.exe
- fuckrav.dll
- webkey.exe
- msgrru32.dll