sxs.exe 的查杀.bat

8B ]s v3XX?5mG0::echo 特征：在每个盘根目录下自动生成sxs.exe,autorun.inf文件，有的还在windows\system32下生成SVOHOST.exe 或 sxs.exe ，文件属性为隐含属性。自动禁用杀毒软件万客化工在线S {e(q?jc|

U!l'KgP `0uR0::解决方法：建立批处理文件 （内容）
ch2^#b0u9\ B0@echo off万客化工在线9^1x(^Z2Z#L*F
taskkill /f /im sxs.exe /t
b S1h~/R;v0taskkill /f /im SVOHOST.exe /t
.^2bh,JOS d0c:万客化工在线L K:v*n-xp
s,m3R Lh6J
attrib sxs.exe -a -h -s 万客化工在线u-k}bXD*_rH#G
del /s /q /f sxs.exe 万客化工在线*c"QZv/cH3U!kS$Y
attrib autorun.inf -a -h -s 
9\%X4Q1vxL0del /s /q /f autorun.inf 
"U[*QL Oav0d:
Wf6EKI?V*s0attrib sxs.exe -a -h -s 万客化工在线7P4G#gC6xX EO
|C
del /s /q /f sxs.exe 万客化工在线5j4Qy~XTh
attrib autorun.inf -a -h -s 
g9P6I0P0ol0del /s /q /f autorun.inf 
R3Z,HOMc0e:万客化工在线nh/C&W `i;|,{:q4X V
attrib sxs.exe -a -h -s 万客化工在线{;Mp(p ~7Y;D!t#KK
del /s /q /f sxs.exe 万客化工在线r#| wx jG*H
attrib autorun.inf -a -h -s 
(R Z1QI%y8i0del /s /q /f autorun.inf 万客化工在线 m2{-B!?@
~9rin
f:
;C$EO {u$`8r0attrib sxs.exe -a -h -s 
;U&T@}OU0U}3j+y9g0del /s /q /f sxs.exe 万客化工在线2Jq)rX
P)Q;hh"t3}
attrib autorun.inf -a -h -s 万客化工在线:H9G.J-E&]
del /s /q /f autorun.inf 万客化工在线i0seI/yx(sD
g:
'|:_i(wGH(x0attrib sxs.exe -a -h -s 
A)P!JTtF0del /s /q /f sxs.exe 
Pr7u Y3MY"^ Q0attrib autorun.inf -a -h -s 万客化工在线9Du0R;o"e;o2o
del /s /q /f autorun.inf
0E9`)p)pq$A0h:
Mhh#}v0attrib sxs.exe -a -h -s 万客化工在线 mw,S:[ZOZ o
del /s /q /f sxs.exe 万客化工在线5D#NqisP|
attrib autorun.inf -a -h -s 万客化工在线 U'p+T~}+{8o
del /s /q /f autorun.inf
\1}y"G-f-C#F0i:万客化工在线 DlIA+Z"ph~:}%L
attrib sxs.exe -a -h -s 万客化工在线f5b+vsk| J
del /s /q /f sxs.exe 万客化工在线J@\gXk+_
attrib autorun.inf -a -h -s 万客化工在线 k*Y~s/|-~)ei3Ep;Z
del /s /q /f autorun.inf万客化工在线Z2gvn*S$M8H"f
j:
*[/E,Oa ft[Od0attrib sxs.exe -a -h -s 
p;h4{gNDX0del /s /q /f sxs.exe 万客化工在线$` F L2X#AJ
attrib autorun.inf -a -h -s 万客化工在线$Q.m9m#Dk W6M
del /s /q /f autorun.inf
s9e.UGBI r0k:
(ZwbqsW0attrib sxs.exe -a -h -s 
gX7~)Y
x&GW1H0del /s /q /f sxs.exe 万客化工在线*ln-HG"K9S
attrib autorun.inf -a -h -s 
qV5A9wP3L'j0del /s /q /f autorun.inf万客化工在线xccc M
l:万客化工在线&@.B-G/bK9I%\0H){$f
attrib sxs.exe -a -h -s 万客化工在线H9PvH8Z~mf
del /s /q /f sxs.exe 万客化工在线Gfsd!Wk"D
attrib autorun.inf -a -h -s 
@yZ#C#B9\5v {^0del /s /q /f autorun.inf
%l1`O2w[0m:
p?o#C1L&Lc0attrib sxs.exe -a -h -s 万客化工在线,kW q5Jo-h4k
del /s /q /f sxs.exe 
}X$P~1V9P.F0attrib autorun.inf -a -h -s 
|Ks1Z:K9g
|Y&]h0del /s /q /f autorun.inf万客化工在线Rs9o8wASfH*f
n:万客化工在线EL3|-@Q-b
attrib sxs.exe -a -h -s 
.uF/nMn^B:^*['g0del /s /q /f sxs.exe 
.^{:WWv:rc
x `0attrib autorun.inf -a -h -s 
^ g/oCZD&F0del /s /q /f autorun.inf万客化工在线h5ic9qj`U$[
reg delete HKLM\Software\Microsoft\windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHOWALL /V CheckedValue /f万客化工在线7Oc6S#d"i ni!pvD
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL /v "CheckedValue" /t "REG_DWORD" /d "1" /f万客化工在线%Wg[T!C]_$S;a._I
REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /V sxs.exe /f
!Ht-v6}6idX5sg0REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /V SVOHOST.exe /f万客化工在线*KXu)Ht(A
exit
t\aOq2['_0 
9y qA8m|z:bQ0 万客化工在线bGuW*G*D5{Y{0U:@{*[
万客化工在线C3o'A SkY%J#W
万客化工在线kc I$dR;MV}(Jb"jOS:|