Viruses on the Internet are getting more and more rampant. Nowadays, it is nothing new to disable anti-virus software by modifying the registry of anti-virus software. I am also suffering from this problem. Recently, my computer has been infected with ghost. pif, this file is disguised as a malicious Ws2_32.dll file in the antivirus software directory, so that the anti-virus software cannot load Ws2_32.dll normally, the anti-virus software fails to start, and the error "0xc00000ba" is prompted.
So I created a new batch called antivir to prevent anti-virus software from being disabled. The Code section is as follows (the red part ):
@ Echo off close echo
Cd \ to the root directory
Cd/d % systemdrive % convert to System Disk root directory
Cd program files \ rising \ rav go to the anti-virus software installation directory
Rd ws2_32.dll/s/q Delete the ws2_32.dll File
Copy % windir % \ system32 \ ws2_32.dll copy ws2_32.dll under system32 to the antivirus software installation directory
Attrib + s + h + r ws2_32.dll sets ws2_32.dll as a read-only file, system file, and hidden file attribute.
Put the batch processing on the desktop. If the anti-virus software is disabled using the forged Ws2_32.dll file, double-click it to use the anti-virus software normally.