超强的病毒 怎么也杀不干净

波导的勇者

卡巴杀之

yimiha

我是昨天晚上中这个毒的，杀毒软件被杀掉，360直接被删除。不知道有没有专杀工具。

大肚而为

回复 28楼 Markel.Scofield  的帖子
可能是我没表达清楚，我说的打开就是双击运行了。

   

hddu

2010-08-23 22:56:33    运行应用程序      操作:允许
进程路径:C:\WINDOWS\explorer.exe
文件路径:F:\virus\Bingdu\Bingdu\7daa6d53.exe
触发规则:应用程序规则->系统程序->%windir%\Explorer.EXE->?:\*

2010-08-23 22:56:36    修改文件      操作:阻止并结束进程
进程路径:F:\virus\Bingdu\Bingdu\7daa6d53.exe
文件路径:C:\WINDOWS\system32\appmgmts.dll
触发规则:所有程序规则->需要保护的文件->%windir%\system32\appmgmts.dll

2010-08-23 22:56:42    运行应用程序      操作:允许
进程路径:C:\WINDOWS\explorer.exe
文件路径:F:\virus\Bingdu\Bingdu\18c03f57.exe
触发规则:应用程序规则->系统程序->%windir%\Explorer.EXE->?:\*

2010-08-23 22:56:45    修改文件      操作:阻止并结束进程
进程路径:F:\virus\Bingdu\Bingdu\18c03f57.exe
文件路径:C:\WINDOWS\system32\appmgmts.dll
触发规则:所有程序规则->需要保护的文件->%windir%\system32\appmgmts.dll

2010-08-23 22:56:50    运行应用程序      操作:允许
进程路径:C:\WINDOWS\explorer.exe
文件路径:F:\virus\Bingdu\Bingdu\43f95dbf.exe
触发规则:应用程序规则->系统程序->%windir%\Explorer.EXE->?:\*

2010-08-23 22:56:53    修改文件      操作:阻止并结束进程
进程路径:F:\virus\Bingdu\Bingdu\43f95dbf.exe
文件路径:C:\WINDOWS\system32\appmgmts.dll
触发规则:所有程序规则->需要保护的文件->%windir%\system32\appmgmts.dll

网名丢失

没敢运行，不过红伞可以扫出来！

wjcharles

MSE kill

Microsoft Antimalware has detected spyware or other potentially unwanted software.
For more information please see the following:
http://go.microsoft.com/fwlink/? ... threatid=2147575279
        Name: Trojan:Win32/Meredrop
        ID: 2147575279
        Severity: Severe
        Category: Trojan
        Path: file:C:\Users\Administrator\Downloads\Bingdu\Bingdu\18c03f57.exe
        Detection Origin: Local machine
        Detection Type: Concrete
        Detection Source: Real-Time Protection
        Status: Suspended
        User:
        Process Name: C:\Program Files\WinRAR\WinRAR.exe
        Signature Version: AV: 1.89.175.0, AS: 1.89.175.0
        Engine Version: 1.1.6103.0

Microsoft Antimalware has detected spyware or other potentially unwanted software.
For more information please see the following:
http://go.microsoft.com/fwlink/? ... threatid=2147575279
        Name: Trojan:Win32/Meredrop
        ID: 2147575279
        Severity: Severe
        Category: Trojan
        Path: file:C:\Users\Administrator\Downloads\Bingdu\Bingdu\18c03f57.exe;file:C:\Users\Administrator\Downloads\Bingdu\Bingdu\43f95dbf.exe
        Detection Origin: Local machine
        Detection Type: Concrete
        Detection Source: Real-Time Protection
        Status: Suspended
        User:
        Process Name: C:\Program Files\WinRAR\WinRAR.exe
        Signature Version: AV: 1.89.175.0, AS: 1.89.175.0
        Engine Version: 1.1.6103.0

Microsoft Antimalware has detected spyware or other potentially unwanted software.
For more information please see the following:
http://go.microsoft.com/fwlink/? ... threatid=2147575279
        Name: Trojan:Win32/Meredrop
        ID: 2147575279
        Severity: Severe
        Category: Trojan
        Path: file:C:\Users\Administrator\Downloads\Bingdu\Bingdu\18c03f57.exe;file:C:\Users\Administrator\Downloads\Bingdu\Bingdu\43f95dbf.exe;file:C:\Users\Administrator\Downloads\Bingdu\Bingdu\7daa6d53.exe
        Detection Origin: Local machine
        Detection Type: Concrete
        Detection Source: Real-Time Protection
        Status: Suspended
        User:
        Process Name: C:\Program Files\WinRAR\WinRAR.exe
        Signature Version: AV: 1.89.175.0, AS: 1.89.175.0
        Engine Version: 1.1.6103.0

yjwfdc

实机运行，金山卫士拦截。

发不了图。

O(∩_∩)O哈哈~

病毒名： Trojan-Dropper.Win32.Bototer
建议： 保存并删除
特征Id: 1431062

--by ikarus

25636

Avira:
WORM/Qvod.A.109

xcffl

毒霸完全报毒