wmiaqsrv.exe

最新推荐文章于 2024-09-23 16:59:13 发布

songq

最新推荐文章于 2024-09-23 16:59:13 发布

阅读量547

点赞数

文章标签： windows system service command google 服务器

本文链接：https://blog.csdn.net/songq/article/details/1477384

版权

今天发现服务器进程中有个wmiaqsrv.exe,感觉有问题，于是百度没有发现资料，看来还得google了，发现一下介绍：

Name: WMI-Service
Filename: wmiaqsrv.exe
Command: C:/Windows/System32/wmiaqsrv.exe
Description: Added by the Troj/Mdrop-AIA multi-dropper backdoor Trojan.
File Location: %System%
Startup Type: This startup entry is installed as a Windows NT, 2000, 2003, or XP service.
Service Name: WmiAqSrv
Service Display Name: WMI-Service
HijackThis Category: O23 Entry
Note: %System% is a variable that refers to the Windows System folder. By default this is C:/Windows/System for Windows 95/98/ME, C:/Winnt/System32 for Windows NT/2000, or C:/Windows/System32 for Windows XP.

按照介绍中的说明看来是一个木马，于是禁用该服务。