ZT 熊猫烧香病毒专杀工具(李俊)测试报告！

飞天

转自霏凡
根据本人亲身体验，李俊开发的专杀工具可以关闭病毒进程，但只能杀destop_.ini文件，病毒体.exe和html并没有清楚。如果运行exe可再次感染。

结论：此杀毒工具不能真正杀掉病毒体exe和html文件代码。需要用杀毒软件的专杀工具再次杀毒。

扫描进程:[System Process]
扫描进程:System
扫描进程:SMSS.EXE
扫描进程:CSRSS.EXE
扫描进程:WINLOGON.EXE
扫描进程:SERVICES.EXE
扫描进程:LSASS.EXE
扫描进程:svchost.exe
扫描进程:spoolsv.exe
扫描进程:svchost.exe
扫描进程:regsvc.exe
扫描进程:VMwareService.e
扫描进程:WinMgmt.exe
扫描进程:svchost.exe
扫描进程:explorer.exe
扫描进程:VMwareUser.exe
扫描进程:internat.exe
扫描进程:conime.exe
扫描进程:ncscv32.exe
关闭木马进程:ncscv32.exe
扫描进程:? ?+??@?w.exe
扫描进程:[System Process]
扫描进程:System
扫描进程:SMSS.EXE
扫描进程:CSRSS.EXE
扫描进程:WINLOGON.EXE
扫描进程:SERVICES.EXE
扫描进程:LSASS.EXE
扫描进程:svchost.exe
扫描进程:spoolsv.exe
扫描进程:svchost.exe
扫描进程:regsvc.exe
扫描进程:VMwareService.e
扫描进程:WinMgmt.exe
扫描进程:svchost.exe
扫描进程:explorer.exe
扫描进程:VMwareUser.exe
扫描进程:internat.exe
扫描进程:conime.exe
扫描进程:? ?+??@?w.exe
C:\Program Files\Desktop__.ini 删除成功!
C:\Program Files\Accessories\Desktop__.ini 删除成功!
C:\Program Files\Accessories\Imagevue\Desktop__.ini 删除成功!
C:\Program Files\ACDSee\Desktop__.ini 删除成功!
C:\Program Files\ACDSee\PlugIns\Desktop__.ini 删除成功!
C:\Program Files\Intel\Desktop__.ini 删除成功!
C:\Program Files\Intel\INFInst\Desktop__.ini 删除成功!
C:\Program Files\Kaspersky Lab\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\1033\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\2052\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\Addins\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\Borders\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\HTML\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\Library\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\Queries\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\Samples\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\Shortcut Bar\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\Shortcut Bar\Office\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\Startup\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\Xlators\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Office\XLStart\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Templates\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Templates\2052\Desktop__.ini 删除成功!
C:\Program Files\Microsoft Office\Templates\Presentation Designs\Desktop__.ini 删除成功!
C:\Program Files\VMware\Desktop__.ini 删除成功!
C:\Program Files\VMware\VMware Tools\Desktop__.ini 删除成功!
C:\Program Files\VMware\VMware Tools\Drivers\Desktop__.ini 删除成功!
C:\Program Files\VMware\VMware Tools\Drivers\hgfs\Desktop__.ini 删除成功!
C:\Program Files\VMware\VMware Tools\Drivers\mouse\Desktop__.ini 删除成功!
C:\Program Files\VMware\VMware Tools\Drivers\scsi\Desktop__.ini 删除成功!
C:\Program Files\VMware\VMware Tools\Drivers\video\Desktop__.ini 删除成功!
C:\Program Files\VMware\VMware Tools\Drivers\vmxnet\Desktop__.ini 删除成功!
C:\Program Files\WinRAR\Desktop__.ini 删除成功!
C:\Program Files\WinRAR\Formats\Desktop__.ini 删除成功!
C:\RECYCLER\Desktop__.ini 删除成功!
C:\RECYCLER\S-1-5-21-1993962763-1645522239-839522115-1000\Desktop__.ini 删除成功!

lovekaba

所以我早上就提醒大家先不要下了用,因为还没有得到检测和证实,现在版主也说了,大家应该相信了吧.