Infrastructure

Petya 랜섬웨어 차단 batch file

duraboys 2017. 6. 28. 22:22

https://stackoverflow.com/questions/1894967/how-to-request-administrator-access-inside-a-batch-file




https://twitter.com/0xAmit/status/879778335286452224


98% sure that the name is is perfc.dll Create a file in c:\windows called perfc with no extension and won't run! SHARE!!



위에 글대로 한다면 다음과 같이 처리 할 수 있다.

시작 → 실행 → cmd 


rem. > %windir%\perfc


rem. > %windir%\perfc.dat


attrib +R %windir%\perfc.*


클리앙 Accelerator 님이 도움을 주셨습니다.

https://drive.google.com/file/d/0B1y5IY8KeAGUWGFDMENHeGxJcWM/view