JavaScript отключён. Чтобы полноценно использовать наш сайт, включите JavaScript в своём браузере.

Ответить в теме

Сообщение: [QUOTE="Phoenix, post: 165626, member: 6535"] [ATTACH=full]15030[/ATTACH] что за ошибка ? из-за этого [URL='http://www.ss64.com/nt/set.html']set[/URL] tmp="%~dp0temp" [URL='http://www.ss64.com/nt/set.html']set[/URL] temp=%tmp% .... И на это [code=batch]echo %programfiles%>>%homedrive%\forum_drweb\critical.txt if exist "%programfiles(x86)%" echo %programfiles(x86)%>>%homedrive%\forum_drweb\critical.txt[/CODE] Вывел два раза Program Files (x86).. В старой версии скрипта были твики реестра, но поскольку они глючили я их упразднил. Посмотрите пожалуйста что тут не так. И строку включения сервера сценариев добавить. [spoiler] [code=batch]@echo off gjhgehg delete "hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HijackThis.exe" /f gjhgehg delete "hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\launch.exe" /f gjhgehg delete "hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\xyz.pif" /f gjhgehg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe" /f gjhgehg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe" /f gjhgehg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe" /f gjhgehg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe" /f gjhgehg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe" /f gjhgehg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\makecab.exe" /f gjhgehg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe" /f gjhgehg ADD "HKEY_CLASSES_ROOT\exefile\shell\runas\command" /ve /t REG_SZ /d "%1" %* /f echo test > c:\test\asdfg.txt IF NOT EXIST c:\test\asdfg.txt (echo ‘®§¤ ©вҐ Ї ЇЄг C:\TEST! CREATE FOLDER C:\TEST! & GOTO end) del /f /q c:\test\asdfg.txt ver IF EXIST launch.exe ren launch.exe xyz.pif IF EXIST xyz.pif.exe ren xyz.pif.exe xyz.pif IF EXIST xyz.pif..exe ren xyz.pif..exe xyz.pif IF NOT EXIST xyz.pif (echo ‚л ¤®«¦л ЇҐаҐЁ¬Ґ®ў вм Cureit ў xyz.pif ! You should properly rename Cureit! & GOTO files) IF EXIST c:\test\cureit-fast.log del /f /q c:\test\cureit-fast.log echo on ver >> c:\test\cureit-fast.log echo %HOMEDRIVE%\Documents and Settings\*.exe>critical.txt echo %HOMEDRIVE%\Documents and Settings\*.dll>> critical.txt echo %HOMEDRIVE%\Documents and Settings\*.sys>> critical.txt echo %HOMEDRIVE%\Documents and Settings\*.tmp>> critical.txt echo %HOMEDRIVE%\users\*.exe>> critical.txt echo %HOMEDRIVE%\users\*.dll>> critical.txt echo %HOMEDRIVE%\users\*.sys>> critical.txt echo %HOMEDRIVE%\users\*.tmp>> critical.txt echo %windir%\fonts\*.exe>> critical.txt echo %windir%\Cursors>> critical.txt start /wait xyz.pif /fast /al /ok /ar- /rp+c:\test\cureit-fast.log start /wait xyz.pif /fast- /shell /ok /al /rp+c:\test\cureit-fast.log /sd- %windir% start /wait xyz.pif /fast- /shell /ok /ar- /rp+c:\test\cureit-fast.log /@c:\test\critical.txt @echo off :files echo on IF NOT EXIST c:\test\cureit-fast.log (echo ЋвбгвбвўгҐв «®Ј! Absent log file! & GOTO end) dir %windir% /a /o:g-d >> c:\test\cureit-fast.log dir %windir%\system32 /a /o:g-d >> c:\test\cureit-fast.log dir %windir%\system32\drivers /a /o:g-d >> c:\test\cureit-fast.log dir c:\test /a >> c:\test\cureit-fast.log @echo off echo on start /wait makecab cureit-fast.log cureit-results.cab explorer c:\test\ :end [/CODE] [/spoiler]([B]msg[/B] - ошибка 1702 при получении имени сеанса - о чём тут ? (хр) - тут с RPC вроде что то..) [/QUOTE]

Проверка