|
dato
高级用户
积分 916
发帖 377
注册 2004-3-8
状态 离线
|
『第 31 楼』:
使用 LLM 解释/回答一下
偶尔搜索到这帖，一直想要的方案，呵呵，
要是能够在程序从外部移动硬盘拷贝到电脑的过程中就删除那就好了，不知道熊猫病毒是怎么实现即时删除.gho文件的。
Occasionally found this post, the solution I've been wanting all along, heh.
It would be great if it could delete while the program is copying from an external hard drive to the computer. I don't know how the Panda virus achieves deleting.gho files in real time.
|
http://dato.ys168.com
google search bot
http://dato.minidns.net/ |
|
 2007-11-11 16:35 |
|
|
xiandan703
初级用户
积分 62
发帖 32
注册 2007-10-12
状态 离线
|
『第 32 楼』:
使用 LLM 解释/回答一下
哈哈~~最近我也在学习批处理~~~~~~~~~~~~~··
Haha~~Recently I've also been learning batch processing~~~~~~~~~~~~~··
|
|
|
2007-11-11 18:09 |
|
|
basdk
新手上路
积分 7
发帖 3
注册 2006-11-23
状态 离线
|
『第 33 楼』:
使用 LLM 解释/回答一下
在这里向各位学习了好多东西。都是高手！
现在好多系统都是用GHOST版本安装的，为了安全，这些系统都禁止运行.vbs脚本，所以，最好不要用.vbs
Last edited by basdk on 2007-12-6 at 06:58 AM ]
I've learned a lot from everyone here. All are experts!
Now many systems are installed using GHOST versions. For safety, these systems prohibit running.vbs scripts, so it's best not to use.vbs
Last edited by basdk on 2007-12-6 at 06:58 AM ]
|
|
|
2007-12-6 06:53 |
|
|
liang8050
新手上路
积分 16
发帖 6
注册 2008-5-27
状态 离线
|
『第 34 楼』:
使用 LLM 解释/回答一下
7楼的老大：我编了个注册表文件，怎么导入不进去？提示无效或只能导入二位制
是关于禁止QQ游戏的，文件如下：
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun]
"1"="qqgame.exe"
请各位高手指点
Lao Da on the 7th floor: I made a registry file, but why can't I import it? It prompts invalid or can only import binary. It's about forbidding QQ games. The file is as follows:
Windows Registry Editor Version 5.00
"1"="qqgame.exe"
Please ask all experts for guidance
|
|
|
2008-5-27 10:24 |
|
|
liang8050
新手上路
积分 16
发帖 6
注册 2008-5-27
状态 离线
|
『第 35 楼』:
使用 LLM 解释/回答一下
tianzizhi
我是个新手，请问tn zhang 是什么意思，我想好好学学批处理，看些什么资料。
谢谢
tianzizhi
I'm a newbie. What does "tn zhang" mean? I want to learn batch processing well. What materials should I read?
Thanks
|
|
|
2008-5-27 11:04 |
|
|
acaigg
初级用户
积分 115
发帖 92
注册 2010-12-24
状态 离线
|
|
|
2010-12-29 17:13 |
|
|
eminjin
新手上路
积分 10
发帖 10
注册 2010-11-18
状态 离线
|
『第 37 楼』:
使用 LLM 解释/回答一下
楼主可以换个思路。
比如，你怕C盘，D盘，E盘等盘被安装qqgame，那么很简单么，在每个盘下，相应的目录下，新建一个文本文件，然后改名为qqgame.exe，然后设置权限为只读。
如果害怕被暴力破解，那么也很简单，随便找个后台程序（没啥副作用的），改名为qqgame.exe，然后关联到一个进程上去，开机就运行这个进程。那么qqgame这个程序就不太容易被删了。
如果允许安装，只是想运行之后，在tasklist里把进程杀掉，那么就弄个后台进程，监视tasklist。不过这也没根本解决问题，因为别人只要把qqgame重命名就好了么。
还有一种手段，就是把自己的网络做成proxy，设置用户名密码。这样几乎很难破解。
最后一种，我不确定，就是禁止qqgame对应的端口。
希望可以给楼主一些灵感。
The LZ can change the way of thinking.
For example, if you are afraid that QQGame will be installed on disks like C, D, E, etc., it's very simple. Under the corresponding directories of each disk, create a text file, then rename it to qqgame.exe, and then set the permission to read-only.
If you are afraid of being cracked violently, it's also very simple. Find any background program (with no side effects), rename it to qqgame.exe, then associate it with a process, and it will run at startup. Then the QQGame program is not easy to be deleted.
If installation is allowed but you just want to kill the process in tasklist after running it, then make a background process to monitor tasklist. But this doesn't fundamentally solve the problem, because others can just rename QQGame.
Another method is to make your own network a proxy and set a username and password. In this way, it's almost difficult to crack.
Finally, I'm not sure. It's to prohibit the port corresponding to QQGame.
Hope to give the LZ some inspirations.
|
|
|
2011-1-10 19:04 |
|
