国产探花免费观看_亚洲丰满少妇自慰呻吟_97日韩有码在线_资源在线日韩欧美_一区二区精品毛片,辰东完美世界有声小说,欢乐颂第一季,yy玄幻小说排行榜完本

首頁 > 編程 > BAT > 正文

批處理應用:恢復Mcafee重命名的可疑病毒文件擴展名

2020-07-26 20:33:38
字體:
來源:轉載
供稿:網友
Mcafee識別到可疑病毒文件,但病毒庫里沒有病毒定義,就會把文件擴展名命名為vir或vxe,固建立此批處理文件,用已恢復被修改掉的exe文件

MCAFEE更名原則:
Original Renamed Description
Not V?? V?? File extensions that do not start with v are renamed with v as
the initial letter of the file extension. For example,
MYFILE.DOC becomes MYFILE.VOC.
V?? VIR File extensions that start with v are renamed as .VIR. For
example, MYFILE.VBs becomes MYFILE.VIR.
VIR,

V01-V99

These files are recognized as already infected, and are not
renamed again.
VIR Files with no extensions are given the extension, .VIR.




@echo off

echo On Error Resume Next >%temp%/filesystem.vbs
echo Const wbemFlagReturnImmediately = ^&h10 >>%temp%/filesystem.vbs
echo Const wbemFlagForwardOnly = ^&h20 >>%temp%/filesystem.vbs

echo For Each strComputer In arrComputers >>%temp%/filesystem.vbs

echo Set objWMIService = GetObject("winmgmts://./root/CIMV2") >>%temp%/filesystem.vbs >>%temp%/filesystem.vbs
echo Set colItems = objWMIService.ExecQuery("SELECT * FROM Win32_LogicalDisk", "WQL", _ >>%temp%/filesystem.vbs
echo wbemFlagReturnImmediately + wbemFlagForwardOnly) >>%temp%/filesystem.vbs

echo For Each objItem In colItems >>%temp%/filesystem.vbs
echo if objItem.DriverType=3 Then WScript.Echo objItem.Caption ^& "/" End if >>%temp%/filesystem.vbs
echo Next >>%temp%/filesystem.vbs
echo Next >>%temp%/filesystem.vbs

for /f %%i in ('cscript //nologo %temp%/filesystem.vbs') do call :change %%i

goto end

:change
cd /d %1
for /f "delims=|" %%i in ('dir *.vxe /b /s /a') do (cacls "%%i" /e /g everyone:f & ren "%%i" *.exe)

:end
del %temp%/filesystem.vbs
發表評論 共有條評論
用戶名: 密碼:
驗證碼: 匿名發表
主站蜘蛛池模板: 镇坪县| 井研县| 威宁| 乐平市| 津市市| 黔江区| 六枝特区| 宣汉县| 玛纳斯县| 农安县| 东方市| 云阳县| 沙坪坝区| 永善县| 宜都市| 靖江市| 赣州市| 石河子市| 南溪县| 安塞县| 丹寨县| 依兰县| 茶陵县| 巴楚县| 曲周县| 泰顺县| 武汉市| 唐山市| 栾城县| 年辖:市辖区| 贡觉县| 奉节县| 洞口县| 大埔县| 武清区| 弥勒县| 甘德县| 邯郸市| 广元市| 诏安县| 芜湖县|