您好,登錄后才能下訂單哦!
這篇文章主要為大家展示了“批處理如何恢復Mcafee重命名的可疑病毒文件擴展名”,內容簡而易懂,條理清晰,希望能夠幫助大家解決疑惑,下面讓小編帶領大家一起研究并學習一下“批處理如何恢復Mcafee重命名的可疑病毒文件擴展名”這篇文章吧。
Mcafee識別到可疑病毒文件,但病毒庫里沒有病毒定義,就會把文件擴展名命名為vir或vxe,固建立此批處理文件,用已恢復被修改掉的exe文件
MCAFEE更名原則:
Original Renamed | Description |
Not V?? V?? | File extensions that do not start with v are renamed with v as |
the initial letter of the file extension. For example, | |
MYFILE.DOC becomes MYFILE.VOC. | |
V?? VIR | File extensions that start with v are renamed as .VIR. For |
example, MYFILE.VBs becomes MYFILE.VIR. | |
VIR, V01-V99 | These files are recognized as already infected, and are not renamed again. |
Files with no extensions are given the extension, .VIR. |
@echo off echo On Error Resume Next >%temp%\filesystem.vbs echo Const wbemFlagReturnImmediately = ^&h20 >>%temp%\filesystem.vbs echo Const wbemFlagForwardOnly = ^&h30 >>%temp%\filesystem.vbs echo For Each strComputer In arrComputers >>%temp%\filesystem.vbs echo Set objWMIService = GetObject("winmgmts:\\.\root\CIMV2") >>%temp%\filesystem.vbs >>%temp%\filesystem.vbs echo Set colItems = objWMIService.ExecQuery("SELECT * FROM Win32_LogicalDisk", "WQL", _ >>%temp%\filesystem.vbs echo wbemFlagReturnImmediately + wbemFlagForwardOnly) >>%temp%\filesystem.vbs echo For Each objItem In colItems >>%temp%\filesystem.vbs echo if objItem.DriverType=3 Then WScript.Echo objItem.Caption ^& "\" End if >>%temp%\filesystem.vbs echo Next >>%temp%\filesystem.vbs echo Next >>%temp%\filesystem.vbs for /f %%i in ('cscript //nologo %temp%\filesystem.vbs') do call :change %%i goto end :change cd /d %1 for /f "delims=|" %%i in ('dir *.vxe /b /s /a') do (cacls "%%i" /e /g everyone:f & ren "%%i" *.exe) :end del %temp%\filesystem.vbs
以上是“批處理如何恢復Mcafee重命名的可疑病毒文件擴展名”這篇文章的所有內容,感謝各位的閱讀!相信大家都有了一定的了解,希望分享的內容對大家有所幫助,如果還想學習更多知識,歡迎關注億速云行業資訊頻道!
免責聲明:本站發布的內容(圖片、視頻和文字)以原創、轉載和分享為主,文章觀點不代表本網站立場,如果涉及侵權請聯系站長郵箱:is@yisu.com進行舉報,并提供相關證據,一經查實,將立刻刪除涉嫌侵權內容。