if the process looks suspicious to you, it wouldn't get to you. it looks to me like another 3721 trick try Windows Defender (MS anti-spyware) (it found me a cns.exe and cns.dll in /system32/ last time)
Thanks. I'm running spybot to see if it can find anything.
g*a
6 楼
Thanks. I'll try.
【在 x****m 的大作中提到】 : if the process looks suspicious to you, it wouldn't get to you. : it looks to me like another 3721 trick : try Windows Defender (MS anti-spyware) (it found me a cns.exe and cns.dll in : /system32/ last time)
x*m
7 楼
did you run a full scan? a quick scan won't get you anything. and you may try rebooting your box, check the "task manager" (process explorer preferred) and delete any run32dll.exe you see, if any, see if that solves the problem (only before your next reboot). If the run32dll revived, or deleting run32dll can solve the problem for the moment, you can pretty much be sure its a 3721 embed. Getting rid of that is another story, but at least you know where to start