站内搜索

Google

博客作者



sxs.exe 的查杀.bat

上一篇 / 下一篇  2008-03-18 14:59:53 / 个人分类:网络

万客化工在线@z1~/h(i(f

::echo 特征:在每个盘根目录下自动生成sxs.exe,autorun.inf文件,有的还在windows\system32下生成SVOHOST.exe 或 sxs.exe ,文件属性为隐含属性。自动禁用杀毒软件

}9]9b E|0h&f h0

FvS4B#wJ!sY"a/Z0::解决方法:建立批处理文件 (内容)
cCeqLF5f0@echo off万客化工在线9R*E Vs)cs
taskkill /f /im sxs.exe /t万客化工在线j { X H t;r9IYu kG
taskkill /f /im SVOHOST.exe /t万客化工在线9R5a.g@nm?
c:
_%F8nq%A0attrib sxs.exe -a -h -s 
"@NzfBsG/v'}0u0del /s /q /f sxs.exe 
$oFJ+]'gQ"|(~L0attrib autorun.inf -a -h -s 
MU4y#X1DT0del /s /q /f autorun.inf 
*c:R.YE-c5qO0d:万客化工在线gu qq0pu
attrib sxs.exe -a -h -s 
.\&x3`,@F0del /s /q /f sxs.exe 
4x)x.ygq(Qo0attrib autorun.inf -a -h -s 万客化工在线@l)?R(UX xx.N
del /s /q /f autorun.inf 
r$r I8PU0e:
c dj6VF Wm?&r0attrib sxs.exe -a -h -s 
PWDlC0del /s /q /f sxs.exe 
w6h^ vdCy0attrib autorun.inf -a -h -s 
e*G0AAS3F Y6i0del /s /q /f autorun.inf 
"Qd}w:TG8j/L@0f:万客化工在线xi2o4G2p]Y
attrib sxs.exe -a -h -s 万客化工在线U{`iUOP
del /s /q /f sxs.exe 万客化工在线:Zj.l\B/K E
attrib autorun.inf -a -h -s 
SG9m}xu4J4P5T:q0del /s /q /f autorun.inf 万客化工在线#n&coBX(Q
g:万客化工在线!nG`3P(t:FT T
attrib sxs.exe -a -h -s 万客化工在线L`#J dgK
del /s /q /f sxs.exe 
(T,a0hq9E9i0attrib autorun.inf -a -h -s 
G'it-fPAP@ \0del /s /q /f autorun.inf
C-m*y0} ^!tS0h:万客化工在线Utk~ l
attrib sxs.exe -a -h -s 
%}? X?}s%YG3]0del /s /q /f sxs.exe 万客化工在线7e`L&WC`c
attrib autorun.inf -a -h -s 万客化工在线!U$C#gL|
del /s /q /f autorun.inf
U9UO1ZI @0i:万客化工在线H"Q Q4Uj,k~fuW"z
attrib sxs.exe -a -h -s 
}(|F k:Fg}0del /s /q /f sxs.exe 
6b c-n/x R0attrib autorun.inf -a -h -s 万客化工在线2mz8LmL d ?j!H#^4X|
del /s /q /f autorun.inf万客化工在线/` M Y:sx8eJg
j:万客化工在线[ WG Lou:K#Gllhd
attrib sxs.exe -a -h -s 万客化工在线Q3FWb2y
del /s /q /f sxs.exe 万客化工在线xhhQG&aQ
attrib autorun.inf -a -h -s 万客化工在线%p,s l4zVj)N&t
del /s /q /f autorun.inf
*a+~zt,NC'jF!v0k:
3|~KnH(d`)|,Mm0attrib sxs.exe -a -h -s 万客化工在线2I7VD:V4E;D(A P \
del /s /q /f sxs.exe 
i]-It1es d\0attrib autorun.inf -a -h -s 
J/d/O.C%[ H^,`0del /s /q /f autorun.inf万客化工在线LG#GeEa5_
l:万客化工在线dc8lz\ dF
attrib sxs.exe -a -h -s 万客化工在线2?G4Lf*i![Q7X"P
del /s /q /f sxs.exe 
R'`&T(m Z"z/]0attrib autorun.inf -a -h -s 万客化工在线G5|/|V$Ipx
del /s /q /f autorun.inf万客化工在线(g UU'Q5W
m:
x$@R'G,Y R(X0attrib sxs.exe -a -h -s 
,d!g fX?xqS(N0del /s /q /f sxs.exe 
b#D/[ ZK }P%?!Q0attrib autorun.inf -a -h -s 
#b!R0rvk,OV1`0del /s /q /f autorun.inf
U0S!S%s]+W p{0n:万客化工在线6eAGUJF{!XB
attrib sxs.exe -a -h -s 
{5u{~?l[5^0del /s /q /f sxs.exe 
Lh?,lu`0attrib autorun.inf -a -h -s 万客化工在线/H|Lh5^$P
del /s /q /f autorun.inf万客化工在线!K.QK3J3fw
reg delete HKLM\Software\Microsoft\windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHOWALL /V CheckedValue /f
tP&u x)_,O0reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL /v "CheckedValue" /t "REG_DWORD" /d "1" /f
g j@-_h#k Q5s0REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /V sxs.exe /f万客化工在线 { t6@9r6N*x#oog
REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /V SVOHOST.exe /f
?Li(F K'c$o`4v0exit万客化工在线m(C.QDJi Y
 
V ?0Uv8x`F\0 万客化工在线@L [ H_3c1v ^d@$ixZ

G Do:xT3B SaT'O0万客化工在线3~]'o2w-Djb




TAG: echo sxs exe

 

评分:0

我来说两句

显示全部

:loveliness: :handshake :victory: :funk: :time: :kiss: :call: :hug: :lol :'( :Q :L ;P :$ :P :o :@ :D :( :)