Question

我的电脑进程有病毒吗?>>>>>>????

IEXPLORE.EXE new 00
conime.exe new 00
taskmgr.ese new 02
SVCHOST.EXE SYSTEM 00
KPFW32.EXE new 05
ALG.EXE LOCAL SERVICE 00
ctfmon.exe new 00
KMailmon.EXE new 00
realplayer.exe new 00
rundll32.exe new 08
SOUNDMAN.EXE new 00
KAVSTart.EXE new 00
Vm_sti.exe new 00
rundll32.exe SYSTEM 00
SPOOLSV.EXE SYSTEM 00
KWatch.EXE SYSTEM 00
EXPLORER.EXE new 02
rundll.exe SYSTEM 00
KPFWSvc.EXE SYSTEM 00

SVCHOST.EXE LOCAL SERVICE 00
SVCHOST.EXE NETWORK SERVICE 00
SVCHOST.EXE SYSTEM 00
SVCHOST.EXE NETWORK SERVICE 00
SVCHOST.EXE SYSTEM 00

LSASS.EXE SYSTEM 00
SERVICES.EXE SYSTEM 00
winlogon.exe SYSTEM 00
csrss.exe SYSTEM 00
smss.exe SYSTEM 00
System SYSTEM 00
System Idle P... SYSTEM 86
以上为“任务管理器”中的 “进程”
希望高手指点哪些是病毒！！哪些是不需要的程序！！如何删除！！

Answer 1

SVCHOST.EXE SYSTEM 00 这个很可疑
rundll32.exe SYSTEM 00 这个很可疑(一般不会出现)

这些是一定要的:

SVCHOST.EXE LOCAL SERVICE 00
SVCHOST.EXE NETWORK SERVICE 00
SVCHOST.EXE SYSTEM 00
SVCHOST.EXE NETWORK SERVICE 00
SVCHOST.EXE SYSTEM 00
LSASS.EXE SYSTEM 00
SERVICES.EXE SYSTEM 00
winlogon.exe SYSTEM 00
csrss.exe SYSTEM 00
smss.exe SYSTEM 00
System SYSTEM 00
System Idle P... SYSTEM 86

你下载一个icesword(冰刃),强制关闭不用的进程(效果比任务管理器要好,是骨灰级的工具)

地址:http://www.17aq.com/Soft/SD/200607/20060705110602.htm
用法:斩断系统“黑手”——IceSword冰刃（推荐）
http://old.jcwcn.com/news/news008/fanghu/200509/20050926193218.html
icesword 是如何列出隐藏进程？
http://www.chkh.com/Article/hkjj/jmjm/200601/Article_12709.html

Answer 2

您好：如果怀疑系统存在病毒，建议您安装瑞星杀毒软件V16版本升级到最新病毒库后进行病毒扫描查杀，下载地址：http://pc.rising.com.cn/

Answer 3

SOUNDMAN.EXE new 00是音效管理器，可以关了的 SPOOLSV.EXE SYSTEM 00 是连接打印机的，如果你没这个需要。也可以关了的