China DOS Union

If the list of suspicious files in article P can be made into a form, and then the registry search and file search commands are used to search the local machine's files and registry according to the form, and the found suspicious file names are displayed or a report is generated. This can not only avoid modification of the registry but also reduce the generation of junk files

The elder upstairs, I don't quite understand what you mean.
My main purpose of this immunity package is to prevent getting poisoned, not to facilitate antivirus after being poisoned.
As for whether adding registry defense will make the registry bloated and affect the machine performance, I think it should not.
Because there are very few registry entries, unless it is a malignant full-disk infection type like Panda. And for empty folders, I think it should not affect the system performance either.

The landlord should consider using the for statement. Things like temp, system32, and other batch labels are completely needed.

I'll give an example. The batch label ProgramFiles section:

cd /d %ProgramFiles%
set id=0

:loop
for %%i in ( %systemroot%\system32 ) do (
md pro%id%.exe&&echo y|cacls %%i\pro%id%.exe /d everyone&&attrib +s +h +r %%i\pro%id%.exe
set /a id=+1
if %id%=19 goto eof
goto loop
)
The code hasn't been tested, but I think there's no need to write so many garbage files (folders) to %systemroot%\system32 in batch processing.

[ Last edited by koala on 2007-10-1 at 08:57 PM ]

Bump it myself. ......

Please clarify your request. You just said "定一下，下载个" which is rather incomplete. Please provide the full context or clarify what exactly needs to be translated or what the complete content is.

The post of the brother has sunk! Update oh

The compressed package is damaged and has issues.

Downloaded, can't open, file is corrupted

Collected, a classic!

Dealing with mirror hijacking, it seems this trick is enough. Just set the permissions properly, no need to delete.

echo Windows Registry Editor Version 5.00>a.reg

echo [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]>>a.reg
regedit /s a.reg
@del a.reg

Oh, what's going on? The one I downloaded doesn't work??? Both times I downloaded it, it couldn't be extracted. End error~~~~~