全新 MS04-011 EXPLOIT 今晚首现 f642004-05-01 08:49:53

open task manager to see if there are processes like:

avserve.exe, 914_up.exe, xax.exe running. if so you are hit.
also open c:\windows\system32\drivers\etc\hosts to see if the worm has added all av site mapping to 127.0.0.1
or, simply try to go to www.symantec.com, if you cannot go there, you are hit.

you cannot find any info about this worm at any av company yet.

我的电脑上只有lsass.exe,没有上面所提的,是否感染?

老兄，你是没病乱投医，

谢谢! 我知道lsass的本意,但前面的贴子f64老大说是中

神经病