sxs.exe 的查杀.bat
上一篇 / 下一篇 2008-03-18 14:59:53 / 个人分类:网络
::echo 特征:在每个盘根目录下自动生成sxs.exe,autorun.inf文件,有的还在windows\system32下生成SVOHOST.exe 或 sxs.exe ,文件属性为隐含属性。自动禁用杀毒软件
}9]9bE|0h&f h0FvS4B#wJ!sY"a/Z0::解决方法:建立批处理文件 (内容)
cCeqLF5f0@echo off万客化工在线9R*E Vs)cs
taskkill /f /im sxs.exe /t万客化工在线j
{
XH t;r9IYukG
taskkill /f /im SVOHOST.exe /t万客化工在线9R5a.g@nm?
c:
_%F8nq%A0attrib sxs.exe -a -h -s
"@NzfBsG/v'}0u0del /s /q /f sxs.exe
$oFJ+]'gQ"|(~L0attrib autorun.inf -a -h -s
MU4y#X1DT0del /s /q /f autorun.inf
*c:R.YE-c5qO0d:万客化工在线guqq0pu
attrib sxs.exe -a -h -s
.\&x3`,@F0del /s /q /f sxs.exe
4x)x.ygq(Qo0attrib autorun.inf -a -h -s 万客化工在线@l)?R(UX
xx.N
del /s /q /f autorun.inf
r$rI8PU0e:
c
dj6VF W m?&r0attrib sxs.exe -a -h -s
PWDlC0del /s /q /f sxs.exe
w6h^vdCy0attrib autorun.inf -a -h -s
e*G0AAS3F
Y6i0del /s /q /f autorun.inf
"Qd}w:TG8j/L@0f:万客化工在线xi2o4G2p]Y
attrib sxs.exe -a -h -s 万客化工在线U{`iUOP
del /s /q /f sxs.exe 万客化工在线:Zj.l\B/K E
attrib autorun.inf -a -h -s
SG9m}xu4J4P5T:q0del /s /q /f autorun.inf 万客化工在线#n&coBX(Q
g:万客化工在线!nG`3P(t:FT
T
attrib sxs.exe -a -h -s 万客化工在线L`#J
dgK
del /s /q /f sxs.exe
(T,a0hq9E9i0attrib autorun.inf -a -h -s
G'it-fPAP@
\0del /s /q /f autorun.inf
C-m*y0} ^!tS0h:万客化工在线Utk~ l
attrib sxs.exe -a -h -s
%}?
X?}s%YG3]0del /s /q /f sxs.exe 万客化工在线7e`L&WC`c
attrib autorun.inf -a -h -s 万客化工在线!U$C#gL|
del /s /q /f autorun.inf
U9UO1ZI @0i:万客化工在线H"Q Q4Uj,k~fuW"z
attrib sxs.exe -a -h -s
}(|Fk:Fg}0del /s /q /f sxs.exe
6bc-n/xR0attrib autorun.inf -a -h -s 万客化工在线2mz8LmL
d ?j!H#^4X|
del /s /q /f autorun.inf万客化工在线/`MY:sx8eJg
j:万客化工在线[
WGLou:K#Gllhd
attrib sxs.exe -a -h -s 万客化工在线Q3FWb2y
del /s /q /f sxs.exe 万客化工在线xhhQG&aQ
attrib autorun.inf -a -h -s 万客化工在线%p,sl4zVj)N&t
del /s /q /f autorun.inf
*a+~zt,NC'jF!v0k:
3|~KnH(d`)|,Mm0attrib sxs.exe -a -h -s 万客化工在线2I7V D:V4E;D(AP \
del /s /q /f sxs.exe
i]-It1esd\0attrib autorun.inf -a -h -s
J/d/O.C%[
H^,`0del /s /q /f autorun.inf万客化工在线LG#GeEa5_
l:万客化工在线dc8lz\dF
attrib sxs.exe -a -h -s 万客化工在线2?G4Lf*i![Q7X"P
del /s /q /f sxs.exe
R'`&T(m
Z"z/]0attrib autorun.inf -a -h -s 万客化工在线G5|/|V$I px
del /s /q /f autorun.inf万客化工在线(g
UU'Q5W
m:
x$@R'G,Y R(X0attrib sxs.exe -a -h -s
,d!gfX?xqS(N0del /s /q /f sxs.exe
b#D/[
ZK } P%?!Q0attrib autorun.inf -a -h -s
#b!R0rvk,OV1`0del /s /q /f autorun.inf
U0S!S%s]+W p{0n:万客化工在线6eAGUJF{!XB
attrib sxs.exe -a -h -s
{5u{~?l[5^0del /s /q /f sxs.exe
Lh?,lu`0attrib autorun.inf -a -h -s 万客化工在线/H|Lh5^$P
del /s /q /f autorun.inf万客化工在线!K.QK3J3fw
reg delete HKLM\Software\Microsoft\windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHOWALL /V CheckedValue /f
tP&ux)_,O0reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL /v "CheckedValue" /t "REG_DWORD" /d "1" /f
gj@-_h#k
Q5s0REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /V sxs.exe /f万客化工在线 { t6@9r6N*x#oog
REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /V SVOHOST.exe /f
?Li(FK'c$o`4v0exit万客化工在线m(C.QDJi
Y
V ?0Uv8x`F \0 万客化工在线@L[
H_3c1v ^d@$ixZ
GDo:xT3B S aT'O0万客化工在线3~]'o2w-Djb
相关阅读:
- IP 安全策略关闭了常见的危险端口 (jjyypi, 2008-3-18)










