进程文件: ewerfw.exe or ewerfw

进程名称: 木马.W32.BAGLE

描述:

ewerfw.exe is a process which is registered as 木马.W32.BAGLE. It takes advantage of the Windows LSASS vulnerability, which creates a buffer overflow and instigates your computer to shut down. To see more information about this vulnerability please look at the following Microsoft bulletin: http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx.

This process is a security risk and should be removed from your system.

Recommendation for ewerfw.exe:

DISABLE AND REMOVE ewerfw.exe IMMEDIATELY. This process is most likely a virus or trojan.

Author:

Part Of: 木马.W32.BAGLE

安全等级 (0-5): 4

间谍软件: No

病毒: Yes ( Remove ewerfw.exe )

木马: Yes ( Remove ewerfw.exe )

Memory Usage: N/A

System Process: No

Background Process: Yes

Uses Network: Yes

Hardware Related: No

Common ewerfw.exe Errors: N/A

进程位置: unknown

程序用途: unknown

作者: unknown

属于: Trojan.W32.BAGLE

安全等级 (0-5): 4 (N/A无危险 5最危险)

间谍软件: 否

广告软件: 否

病毒: 是

木马: 是

系统进程: 否

应用程序: 否

后台程序: 是

使用访问: 是

访问互联网: 是