复制代码 代码如下:
::echo特征:在每个盘根目录下自动生成sxs.exe,autorun.inf文件,有的还在windows\system32下生成SVOHOST.exe或sxs.exe,文件属性为隐含属性。自动禁用杀毒软件
::解决方法:建立批处理文件(内容)
@echooff
taskkill/f/imsxs.exe/t
taskkill/f/imSVOHOST.exe/t
c:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
d:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
e:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
f:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
g:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
h:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
i:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
j:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
k:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
l:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
m:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
n:
attribsxs.exe-a-h-s
del/s/q/fsxs.exe
attribautorun.inf-a-h-s
del/s/q/fautorun.inf
regdeleteHKLM\Software\Microsoft\windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHOWALL/VCheckedValue/f
regaddHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL/v"CheckedValue"/t"REG_DWORD"/d"1"/f
REGDELETEHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run/Vsxs.exe/f
REGDELETEHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run/VSVOHOST.exe/f
exit
