{"id":75,"date":"2010-05-18T18:07:15","date_gmt":"2010-05-18T15:07:15","guid":{"rendered":"http:\/\/rexxer.kharkov.ru\/?p=75"},"modified":"2010-05-18T18:07:15","modified_gmt":"2010-05-18T15:07:15","slug":"skript-otklyucheniya-autorun-dopolneniya","status":"publish","type":"post","link":"https:\/\/dety.net.ua\/?p=75","title":{"rendered":"\u0421\u043a\u0440\u0438\u043f\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f Autorun + \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f"},"content":{"rendered":"

@cls
\n@echo off
\necho 1. Verifying services
\necho —————————————-
\necho WUASERV\u00a0\u00a0 &&@Sc.exe query wuauserv | findstr STATE
\necho BITS\u00a0\u00a0\u00a0\u00a0\u00a0 &&@Sc.exe query bits | findstr STATE
\necho WINDEFEND &&@Sc.exe query windefend | findstr STATE
\necho —————————————-
\necho #
\necho 2. Verifying netsvc in registry
\necho —————————————-
\n@reg query “HKLMSOFTWAREMicrosoftWindows NTCurrentVersionSvcHostnetsvcs”
\necho —————————————-
\necho #
\necho 3. Autorun turn OFF
\necho —————————————-
\n@reg.exe add HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer \/v NoDriveTypeAutoRun \/t REG_DWORD \/d 0xff \/f
\necho —————————————-
\necho #
\necho 4. Show hiding files turn ON
\necho —————————————-
\n@reg.exe add HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL \/v CheckedValue \/t REG_DWORD \/d 0x1 \/f
\necho —————————————-
\necho #
\necho 5. Windows Defender detect autorun turn ON
\necho —————————————-
\n@reg.exe add HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun \/v “Windows Defender” \/t REG_EXPAND_SZ \/d “%ProgramFiles%Windows DefenderMSASCui.exe -hide” \/f
\necho —————————————-
\necho Done …
\npause<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

@cls @echo off echo 1. Verifying services echo —————————————- echo WUASERV\u00a0\u00a0 &&@Sc.exe query wuauserv | findstr STATE echo BITS\u00a0\u00a0\u00a0\u00a0\u00a0 &&@Sc.exe query bits | findstr STATE echo WINDEFEND &&@Sc.exe query windefend | findstr STATE echo —————————————- echo # echo 2. Verifying netsvc in registry echo —————————————- @reg query “HKLMSOFTWAREMicrosoftWindows NTCurrentVersionSvcHostnetsvcs” echo —————————————- echo # echo 3. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,12],"tags":[],"class_list":["post-75","post","type-post","status-publish","format-standard","hentry","category-novosti","category-windows"],"_links":{"self":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts\/75","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=75"}],"version-history":[{"count":0,"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts\/75\/revisions"}],"wp:attachment":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=75"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=75"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=75"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}