命令行(CMD)下搞定卡巴斯基

2017-11-30    来源:

容器云强势上线!快速搭建集群,上万Linux镜像随意使用

最近无聊,随便看看,渗透一个内网的服务器,装的卡巴斯基,什么东西都被杀了,上了个不被杀的端口转发工具,估计是被拦截了,反弹不出来,于是在想怎么搞定卡巴斯基!

突然想到看看卡巴斯基的能不能支持命令行,一看,果然:

===========================
D:\Kaspersky Internet Security 6.0>avp /?
Kaspersky Anti-Virus (R) 6.0.0.299
Copyright (C) Kaspersky Lab 1996-2006. All rights reserved.

Usage: avp.com command [options]

command Specifies the command to be executed.
HELP Show help
SCAN Start new scan
UPDATE Update databases and optionally application modules
ROLLBACK Rollback previously updated databases
START Start specified task
STOP Stop running task
PAUSE Pause running task
RESUME Resume paused task
STATUS Show task status
STATISTICS Show task statistics
EXPORT Export settings
IMPORT Import settings
ADDKEY Add key file
ACTIVATE Perform online activation
EXIT Exit product

Examples:
avp.com [ /? | HELP ]
avp.com command /?
avp.com HELP command
avp.com HELP SCAN
avp.com UPDATE /?

D:\Kaspersky Internet Security 6.0>avp status

Task State Completion Description
---------------------------------------------------
AntiPhishingService running
Anti_Hacker paused
Anti_Spam paused
Anti_Spy paused
AVService running
Behavior_Blocking paused
File_Monitoring paused
HTTP running
IMAP running
MailWasher running
Mail_Monitoring paused
NNTP running
POP3 running
ProcMon running
Rollback stopped
Scan_Critical_Areas stopped
Scan_My_Computer stopped
Scan_Objects completed
Scan_Quarantine stopped
Scan_Startup running 23% //这里扫描开始了,下面我终止掉
SMTP running
Spamtest stopped
StartupService stopped
TrafficMonitor running
Updater completed
Web_Monitoring paused

D:\Kaspersky Internet Security 6.0>avp stop Scan_Startup /password=tlm //这里我已经设置好了密码了

D:\Kaspersky Internet Security 6.0>avp status Scan_Startup
Scan_Startup stopped //扫描已经重新终止!

============================

但是卡巴斯基是不能够直接退出的,需要先设置密码,没有设置密码不允许退出:

============================


D:\Kaspersky Internet Security 6.0>avp exit
Error: Password required to exit

D:\Kaspersky Internet Security 6.0>

============================

命令行中也没看到如何设置密码,但是可以导出和导入配置文件,那我们可以从这里入手,先在本地装上相同的卡巴斯基,设置好密码和相关配置,然后导出,,把文件传送到服务器上然后导入,命令是:

============================

D:\Kaspersky Internet Security 6.0>avp export
Kaspersky Anti-Virus (R) 6.0.0.299
Copyright (C) Kaspersky Lab 1996-2006. All rights reserved.

Usage: EXPORT <Profile|taskid> <filename>
<filename[.<ext>|.txt]> File to save settings

Examples:
avp.com EXPORT rtp rtp_settings.dat - binary export
avp.com EXPORT fm fm_settings.txt - plain export

D:\Kaspersky Internet Security 6.0>avp import
Kaspersky Anti-Virus (R) 6.0.0.299
Copyright (C) Kaspersky Lab 1996-2006. All rights reserved.

Usage: IMPORT <filename>
<filename> File to restore settings

Examples:
avp.com IMPORT settings.dat

D:\Kaspersky Internet Security 6.0>

============================

此方法没有测试,因为服务器是装的服务器版本的,我装的是6.0互联网安全套装,配置文件肯定是不一样的,我这里的服务器也装的卡巴斯基,但是这几天服务器在调试,等过几天我再测试看看,先把这个思路放出来,如果有什么不到之处,还请大家指正!

标签: 安全 服务器 互联网 互联网安全

版权申明:本站文章部分自网络,如有侵权,请联系:west999com@outlook.com
特别注意:本站所有转载文章言论不代表本站观点!
本站所提供的图片等素材,版权归原作者所有,如需使用,请与原作者联系。

上一篇:微软IE8曝重大漏洞 启明星辰第一时间主动响应

下一篇:云计算存在固有危险性