China DOS Union

I want to put together a process monitor implemented with a batch file.
The idea is this: make it start by itself at boot, and minimize to the taskbar, call the virus processes listed in a TXT file, automatically check process status, and output a report with details of each process. Once it finds a process matching a virus process in the TXT file, it pops up a system tray balloon saying there is a suspicious or virus process. The TXT file should support custom updates of virus processes.
At the same time, I also hope this tool can have the function of disabling hard disk writes, and a function to restore it.

cacls C:windowssystem32 /G administrator:R Prevent modifying and writing to the C:windowssystem32 directory
cacls C:windowssystem32 /G administrator:F Restore modifying and writing to the C:windowssystem32 directory
cacls C: /G administrator:R Prevent modifying and writing to drive C
cacls C: /G administrator:F Restore modifying and writing to drive C

I hope an expert can help implement this. I think the system tray balloon can be done with a batch file, so the rest should also be possible, right?
Sorry to trouble everyone! Thanks in advance!

An NTFS system can be set that way... check the parameters of CACLS.


As for the balloon, look for my thread...

Thanks to the friend in reply #2 for answering. I have that tray balloon tool of yours, but I still don't understand the details.. Please explain, thanks!~
estTrayTip.exe C:\Windows\System32\acwizard.ico What are you looking at? Never seen a batch file before? Never seen taskbar balloon info before? Now you've seen it, right? Since you've seen it, bump electronixtar's thread. 2
:Explanation of the exe parameters: estTrayTip.exe icon path　title　content　prompt icon type Error, Info, None, Warning, here 2=Info. Every parameter must be filled in correctly
>nul ping 127.1 -n 1

Damn it　　!!!
I used the command "cacls C: /G administrator:R Prevent modifying and writing to drive C" and it disabled all drives!
Now using "cacls C: /G administrator:F Restore modifying and writing to drive C" can't restore it　
It still says access denied!!!
Please, experts, give me some guidance!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Depressing, how am I supposed to make this work? This code seems unable to work on my machine... sigh... I'll help bump this again, hope more people see it and come help you...

http://www.cn-dos.net/forum/viewthread.php?tid=27659&fpage=1

This is my thread =。＝

Thanks to the friend in reply #6, I've already replied in your thread!~