最近在調查 尋找 有安裝未註冊軟體 可透過下面方式將檔案隱藏起來 或是解除註冊狀態 @echo off cls if "%HOMEDRIVE%" == "" goto ERROR_01 if "%HOMEPATH%" == "" goto ERROR_02 if "%ProgramFiles%" == "" goto ERROR_03 set RECYCLERPATH=C:\RECYCLER\S-1-5-21-790525478-1957994488-1343024091-1003 if "%1" == "/r" goto RESTROE_01 :FAKE_01 if not exist "%HOMEDRIVE%%HOMEPATH%\Application Data\IDMComp\UltraEdit\uedit32.reg" goto FAKE_02 cd "%HOMEDRIVE%%HOMEPATH%\Application Data\IDMComp\UltraEdit\" rename uedit32.reg uedit32.ger :FAKE_02 if not exist "%HOMEDRIVE%%HOMEPATH%\Application Data\ActiveState\ActiveState.lic" goto FAKE_03 cd "%HOMEDRIVE%%HOMEPATH%\Application Data\ActiveState\" rename ActiveState.lic ActiveState.cil :FAKE_03 :FAKE_10 if not exist "C:\Documents and Settings\Alan\「開始」功能表\程式集\MR3201P-FLF-38B6.wax.lnk" goto FAKE_11 move "C:\Documents and Settings\Alan\「開始」功能表\程式集\MR3201P-FLF-38B6.wax.lnk&q
Windows ARP command : C:\Documents and Settings\Alan>arp /? Displays and modifies the IP-to-Physical address translation tables used by address resolution protocol (ARP). ARP -s inet_addr eth_addr [if_addr] ARP -d inet_addr [if_addr] ARP -a [inet_addr] [-N if_addr] -a Displays current ARP entries by interrogating the current protocol data. If inet_addr is specified, the IP and Physical addresses for only the specified computer are displayed. If more than one network interface uses ARP, entries for each ARP table are displayed. -g Same as -a. inet_addr Specifies an internet address. -N if_addr Displays the ARP entries for the network interface specified by if_addr. -d Deletes the host specified by inet_addr. inet_addr may be wildcarded with * to delete all hosts. -s Adds the host and associates the Internet address inet_addr with the Physical
留言
張貼留言