转自：爱毒霸---批处理，测主防

jiguanjie

360提示警告

xiaojinglf

反注册系统目录的dll文件本身并非恶意行为。只不过数量众多而已。本身不属于恶意。

a256886572008

xiaojinglf 发表于 2012-6-10 17:51
反注册系统目录的dll文件本身并非恶意行为。只不过数量众多而已。本身不属于恶意。

有什麼修復的方式？

payen

McAfee个人版 没反应...
下面这些代码干嘛的？
regsvr32 /s /u setupwbv.dll
regsvr32 /s /u wininet.dll
regsvr32 /s /u comcat.dll
regsvr32 /s /u shdoc401.dll
regsvr32 /s /u shdoc401.dll /i
regsvr32 /s /u asctrls.ocx
regsvr32 /s /u oleaut32.dll
regsvr32 /s /u shdocvw.dll /I
regsvr32 /s /u shdocvw.dll
regsvr32 /s /u browseui.dll
regsvr32 /s /u browseui.dll /I
regsvr32 /s /u msrating.dll
regsvr32 /s /u mlang.dll
regsvr32 /s /u hlink.dll
regsvr32 /s /u mshtml.dll
regsvr32 /s /u mshtmled.dll
regsvr32 /s /u urlmon.dll
regsvr32 /s /u plugin.ocx
regsvr32 /s /u sendmail.dll
regsvr32 /s /u comctl32.dll /i
regsvr32 /s /u inetcpl.cpl /i
regsvr32 /s /u mshtml.dll /i
regsvr32 /s /u scrobj.dll
regsvr32 /s /u mmefxe.ocx
regsvr32 /s /u proctexe.ocx mshta.exe /register
regsvr32 /s /u corpol.dll
regsvr32 /s /u jscript.dll
regsvr32 /s /u msxml.dll
regsvr32 /s /u imgutil.dll
regsvr32 /s /u thumbvw.dll
regsvr32 /s /u cryptext.dll
regsvr32 /s /u rsabase.dll
regsvr32 /s /u triedit.dll
regsvr32 /s /u dhtmled.ocx
regsvr32 /s /u inseng.dll
regsvr32 /s /u iesetup.dll /i
regsvr32 /s /u hmmapi.dll
regsvr32 /s /u cryptdlg.dll
regsvr32 /s /u actxprxy.dll
regsvr32 /s /u dispex.dll
regsvr32 /s /u occache.dll
regsvr32 /s /u occache.dll /i
regsvr32 /s /u iepeers.dll
regsvr32 /s /u wininet.dll /i
regsvr32 /s /u urlmon.dll /i
regsvr32 /s /u digest.dll /i
regsvr32 /s /u cdfview.dll
regsvr32 /s /u webcheck.dll
regsvr32 /s /u mobsync.dll
regsvr32 /s /u pngfilt.dll
regsvr32 /s /u licmgr10.dll
regsvr32 /s /u icmfilter.dll
regsvr32 /s /u hhctrl.ocx
regsvr32 /s /u inetcfg.dll
regsvr32 /s /u trialoc.dll
regsvr32 /s /u tdc.ocx
regsvr32 /s /u MSR2C.DLL
regsvr32 /s /u msident.dll
regsvr32 /s /u msieftp.dll
regsvr32 /s /u xmsconf.ocx
regsvr32 /s /u ils.dll
regsvr32 /s /u msoeacct.dll
regsvr32 /s /u wab32.dll
regsvr32 /s /u wabimp.dll
regsvr32 /s /u wabfind.dll
regsvr32 /s /u oemiglib.dll
regsvr32 /s /u directdb.dll
regsvr32 /s /u inetcomm.dll
regsvr32 /s /u msoe.dll
regsvr32 /s /u oeimport.dll
regsvr32 /s /u msdxm.ocx
regsvr32 /s /u dxmasf.dll
regsvr32 /s /u laprxy.dll
regsvr32 /s /u l3codecx.ax
regsvr32 /s /u acelpdec.ax
regsvr32 /s /u mpg4ds32.ax
regsvr32 /s /u voxmsdec.ax
regsvr32 /s /u danim.dll
regsvr32 /s /u Daxctle.ocx
regsvr32 /s /u lmrt.dll
regsvr32 /s /u datime.dll
regsvr32 /s /u dxtrans.dll
regsvr32 /s /u dxtmsft.dll
regsvr32 /s /u vgx.dll
regsvr32 /s /u WEBPOST.DLL
regsvr32 /s /u WPWIZDLL.DLL
regsvr32 /s /u POSTWPP.DLL
regsvr32 /s /u CRSWPP.DLL
regsvr32 /s /u FTPWPP.DLL
regsvr32 /s /u FPWPP.DLL
regsvr32 /s /u FLUPL.OCX
regsvr32 /s /u wshom.ocx
regsvr32 /s /u wshext.dll
regsvr32 /s /u vbscript.dll
regsvr32 /s /u wupdinfo.dll
regsvr32 /s /u shimgvw.dll
regsvr32 /s /u wmpdxm.dll
regsvr32 /s /u appwiz.cpl
regsvr32 /s /u msi.dll
regsvr32 /s /u /i shell32.dll
regsvr32 /s /u scrrun.dll mstinit.exe /setup
regsvr32 /s /u msnsspc.dll /SspcCreateSspiReg
regsvr32 /s /u msapsspc.dll /SspcCreateSspiReg

hddu

xiaojinglf 发表于 2012-6-10 17:51
反注册系统目录的dll文件本身并非恶意行为。只不过数量众多而已。本身不属于恶意。

大量反注册DLL、OCX文件是危险行为吧？
如附件批处理。

bluewing009

批处理可疑程度分析报告
By bluewing009   QQ 961881006

分析文件：C:\Users\Bluewing009\Downloads\88\88.bat
==============================================
   危险等级： ★★★★☆    中度危险
   可疑程度： 95%
==============================================


中度危险

95%的可疑.....我才不去运行....

cjz

这样本厉害，小a金山都放了

zilch

ESS4.2直接kill。

zilei

MSE 过了

xiaojinglf

a256886572008 发表于 2012-6-10 18:05
有什麼修復的方式？

把 /u参数取消再执行一次