脚本宝典收集整理的这篇文章主要介绍了批处理应用：恢复Mcafee重命名的可疑病毒文件扩展名，脚本宝典觉得挺不错的，现在分享给大家，也给大家做个参考。

Mcafee识别到可疑病毒文件，但病毒库里没有病毒定义，就会把文件扩展名命名为vir或vxe，固建立此批处理文件，用已恢复被修改掉的exe文件

MCAFEE更名原则：

Original renamed	Description
Not V?? V??	File extensions that do not start wITh v are renamed with v as
	the initial letter of the file extension. For example,
	MYFILE.DOC becomes MYFILE.VOC.
V?? VIR	File extensions that start with v are renamed as .VIR. For
	example, MYFILE.vbs becomes MYFILE.VIR.
VIR, V01-V99	These files are recognized as already infected, and are not renamed again.
VIR	Files with no extensions are given the extension, .VIR.

@echo off

echo On Error Resume Next >%temp%\fileSystem.vbs
echo Const wbemFlagReturnImmediately = ^&h10 >>%temp%\filesystem.vbs
echo Const wbemFlagForwardOnly = ^&h20 >>%temp%\filesystem.vbs

echo For each strComputer In arrComputers >>%temp%\filesystem.vbs

echo Set objWMIService = GetObject("winmgmts:\\.\root\CIMV2") >>%temp%\filesystem.vbs >>%temp%\filesystem.vbs
echo Set colItems = objWMIService.ExecQuery("SELECT * From Win32_LOGicaldisk", "WQL", _ >>%temp%\filesystem.vbs
echo wbemFlagReturnImmediately + wbemFlagForwardOnly) >>%temp%\filesystem.vbs

echo For Each obJITem In colItems >>%temp%\filesystem.vbs
echo if objItem.DriverTyPE=3 Then WScript.Echo objItem.Caption ^& "\" End if >>%temp%\filesystem.vbs
echo Next >>%temp%\filesystem.vbs
echo Next >>%temp%\filesystem.vbs

for /f %%i in ('cscript //nologo %temp%\filesystem.vbs') do call :change %%i

goto end

:change
cd /d %1
for /f "delims=|" %%i in ('dir *.vxe /b /s /a') do (cacls "%%i" /e /g everyone:f & ren "%%i" *.exe)

:end
del %temp%\filesystem.vbs

脚本宝典总结

以上是脚本宝典为你收集整理的批处理应用：恢复Mcafee重命名的可疑病毒文件扩展名全部内容，希望文章能够帮你解决批处理应用：恢复Mcafee重命名的可疑病毒文件扩展名所遇到的问题。

如果觉得脚本宝典网站内容还不错，欢迎将脚本宝典推荐好友。

本图文内容来源于网友网络收集整理提供，作为学习参考使用，版权属于原作者。
如您有任何意见或建议可联系处理。小编QQ：384754419，请注明来意。