诺顿报毒，求鉴定，感谢，

显示全部楼层 · 发表于 2018-11-30 17:50:02

诺顿报毒，求鉴定，感谢，

显示全部楼层 · 发表于 2018-11-30 17:55:07

[url=home.php?mod=space&uid=331734]@echo[/url] off
rem script: @rgadguard and abbodi406
setlocal EnableExtensions
setlocal EnableDelayedExpansion
set "params=%*"
cd /d "%~dp0" && ( if exist "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs" ) && fsutil dirty query %systemdrive% 1>nul 2>nul || ( echo Set UAC = CreateObject^("Shell.Application"^) : UAC.ShellExecute "cmd.exe", "/k cd ""%~sdp0"" && %~s0 %params%", "", "runas", 1 >> "%temp%\getadmin.vbs" && "%temp%\getadmin.vbs" && exit /B )
if not exist "%cd%\bin\wimlib-imagex.exe" goto :Convert_lite
:GO_DOWN
for /f "tokens=3 delims=: " %%b in ('dism /english /online /Get-Intl ^| find /i "System locale"') do (
call bin\lang-uup.cmd -en
if /i %%b==ru-RU call bin\lang-uup.cmd -ru
)
set "file_main=%~n0"
set "aria2=bin\aria2c.exe"
set "rand=%random%"
set "down_temp=%rand%\down"
set "aria2Script=%rand%\aria2_script.txt"
set "BuildInfo=17763.1"
set "lang_def=zh-cn"
set "destDir=uup/!BuildInfo!/!lang_def!/amd64"
set "updateId=0b7df39b-34e2-467b-8cc9-97207f9e916a"
mkdir %rand%
%aria2% -x16 -s16 -d"%rand%" -o"aria2_script.txt" "https://uup.rg-adguard.net/api/GetFiles?id=!updateId!&lang=!lang_def!&edition=Professional&txt=yes"
if %ERRORLEVEL% GTR 0 goto DOWNLOAD_ERROR
for %%i in ("%aria2Script%") do (if /i %%~zi LEQ 10 goto ERROR_API)
:Tools
set update_en=OFF
set update_num=0
for /f "tokens=1 skip=2" %%a in ('find /N "Windows10.0-KB" "%aria2Script%"') do (
set /a update_num+=1
)
for /f "tokens=6 delims=[]. " %%G in ('ver') do (
if %%G LEQ 9599 set update_num=0
)
if /i %update_num% neq 0 (set update_en=ON)
:Go_down
title %lang_titke_download%...
%aria2% -x16 -s16 -j5 -c -R -d"%destDir%" -i"%aria2Script%"
if %ERRORLEVEL% GTR 0 goto DOWNLOAD_ERROR
erase /q /s "%aria2Script%" >NUL 2>&1
color 0a
call bin\convert-UUP.cmd %cd%\uup\!BuildInfo!\!lang_def!\amd64 %update_en%
goto EOF
:Convert_lite
for /f "tokens=3 delims=:. " %%f in ('bitsadmin.exe /CREATE /DOWNLOAD "Download convert_lite" ^| findstr "Created job"') do set GUID=%%f
title Download convert_lite...
bitsadmin /transfer %GUID% /download /priority foreground https://uup.rg-adguard.net/dl/convert_lite.cab "%cd%\convert_lite.cab"
if NOT EXIST convert_lite.cab goto ERROR_API
expand convert_lite.cab -f:* %cd% >nul
del /f /q convert_lite.cab >nul 2>&1
goto :GO_DOWN
:DOWNLOAD_ERROR
color 0c
echo We have encountered an error while downloading files.
erase /q /s "%aria2Script%" >NUL 2>&1
pause
goto EOF
:ERROR_API
color 0c
echo Error getting links to download UUP files.
echo Try again a few minutes later.
erase /q /s "%aria2Script%" >NUL 2>&1
pause
goto EOF
:EOF
exit

复制代码

显示全部楼层 · 发表于 2018-11-30 17:56:47

本帖最后由 dreams521 于 2018-11-30 18:02 编辑

卡巴 miss

显示全部楼层 · 发表于 2018-11-30 17:58:30

诺顿报的什么毒啊。。

https://uup.rg-adguard.net/dl/convert_lite.cab 这货，IE提示无法验证，内部驱动文件有微软签名。

dism++这个程序，平时用不到。不要把系统优化看的那么严重。

这个链接似乎对你有用，不防看看：
https://msdn.microsoft.com/zh-cn ... s/hardware/dn898515(v=vs.85).aspx

显示全部楼层 · 发表于 2018-11-30 17:59:19

火绒miss

显示全部楼层 · 发表于 2018-11-30 19:37:07

调用cmd和powershell，不会联网，但打开N多的窗口，会把电脑搞死。。

其它不清楚。。。

显示全部楼层 · 发表于 2018-11-30 20:24:05

我这Norton不报
默认主动启发

Scan Statistics:
Scan Start:
Local: 2018/11/30 20:21
UTC: 2018/11/30 12:21
Scan Time: 0 seconds
Scan Targets: C:\Users\DrClef\Desktop\creatingISO_17763.1_zh-cn_amd64_Professional.cmd
Counts:
Total items scanned: 1
- Files & Directories: 1
- Registry Entries: 0
- Processes & Startup Items: 0
- Network & Browser Items: 0
- Other: 0
- Trusted Files: 0
- Skipped Files: 0
Total security risks detected: 0
Total items resolved: 0
Total items that require attention: 0
Resolved Threats:
No risks have been resolved
Unresolved Threats:
No unresolved risks

复制代码

显示全部楼层 · 发表于 2018-11-30 21:08:24

Avira miss

显示全部楼层 · 发表于 2018-11-30 23:08:50

bd scan miss

显示全部楼层 · 发表于 2018-12-1 14:47:28

bd scan miss

[其他相关] 诺顿报毒，求鉴定，感谢，

本帖子中包含更多资源

本帖子中包含更多资源