Is this script safe to use?

Discussion in 'other software & services' started by amarildojr, Oct 20, 2015.

  1. amarildojr

    amarildojr Registered Member

    Joined:
    Aug 8, 2013
    Posts:
    1,989
    Location:
    Brasil
    I was wondering if there's anything suspicious about the following lines:

    Code:
    :: Created by: Shawn Brink
    :: http://www.sevenforums.com
    :: Tutorial: http://www.sevenforums.com/tutorials/91738-windows-update-reset.html
    
    
    net stop bits
    net stop wuauserv
    net stop appidsvc
    net stop cryptsvc
    Ipconfig /flushdns
    Del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"
    sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
    sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
    cd /d %windir%\system32
    Ren %systemroot%\system32\catroot2 catroot2.bak
    regsvr32.exe /s atl.dll
    regsvr32.exe /s urlmon.dll
    regsvr32.exe /s mshtml.dll
    regsvr32.exe /s shdocvw.dll
    regsvr32.exe /s browseui.dll
    regsvr32.exe /s jscript.dll
    regsvr32.exe /s vbscript.dll
    regsvr32.exe /s scrrun.dll
    regsvr32.exe /s msxml.dll
    regsvr32.exe /s msxml3.dll
    regsvr32.exe /s msxml6.dll
    regsvr32.exe /s actxprxy.dll
    regsvr32.exe /s softpub.dll
    regsvr32.exe /s wintrust.dll
    regsvr32.exe /s dssenh.dll
    regsvr32.exe /s rsaenh.dll
    regsvr32.exe /s gpkcsp.dll
    regsvr32.exe /s sccbase.dll
    regsvr32.exe /s slbcsp.dll
    regsvr32.exe /s cryptdlg.dll
    regsvr32.exe /s oleaut32.dll
    regsvr32.exe /s ole32.dll
    regsvr32.exe /s shell32.dll
    regsvr32.exe /s initpki.dll
    regsvr32.exe /s wuapi.dll
    regsvr32.exe /s wuaueng.dll
    regsvr32.exe /s wuaueng1.dll
    regsvr32.exe /s wucltui.dll
    regsvr32.exe /s wups.dll
    regsvr32.exe /s wups2.dll
    regsvr32.exe /s wuweb.dll
    regsvr32.exe /s qmgr.dll
    regsvr32.exe /s qmgrprxy.dll
    regsvr32.exe /s wucltux.dll
    regsvr32.exe /s muweb.dll
    regsvr32.exe /s wuwebv.dll
    regsvr32 /s wudriver.dll
    netsh winsock reset
    net start bits
    net start wuauserv
    net start appidsvc
    net start cryptsvc
    bitsadmin.exe /reset /allusers
    http://www.sevenforums.com/attachme...eset_reregister_windows_update_components.bat
     
  2. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    5,089
    Not suspicious as installing anything new (malware...) but it does reset quite a few things.

    What it does is:
    - stops four services
    - flushes dns
    - deletes qmgr0.dat and qmgr1.dat files (?)
    - sets security descriptors for bits and update service (?)
    - renames catroot2 folder (?)
    - registers dlls
    - resets winsock
    - starts four services
    - cancels all jobs in BITS

    I don't know if steps marked with (?) can cause any problem. I would definitely backup my system before running this batch.

    EDIT: since the link is only to BAT file I don't know what are instructions. I hope you don't have to replace DLLs that you register with this batch.
     
  3. amarildojr

    amarildojr Registered Member

    Joined:
    Aug 8, 2013
    Posts:
    1,989
    Location:
    Brasil
  4. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    5,089
    OK, it's nothing suspicious in that bat file, but you still are messing with system resources. System image should be taken IMO.
     
  5. amarildojr

    amarildojr Registered Member

    Joined:
    Aug 8, 2013
    Posts:
    1,989
    Location:
    Brasil
    Yup. I just noticed that all commands are also listed on a Microsoft page.

    Thank you for your help! :D
     
  6. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    5,089
    You're welcome :)
     
Loading...