一下的批处理是什么意思。解说。

显示全部楼层 · 2011-3-28 17:04:26

@echo off
echo Dim WshSHell,FSO >F5.vbs
echo On Error Resume Next >>F5.vbs
echo Set WshSHell = WScript.CreateObject("WScript.Shell") >>F5.vbs
echo Set FSO = CreateObject("Scripting.FileSystemObject") >>F5.vbs
echo Set OF = FSO.OpenTextFile(FSO.BuildPath(FSO.GetSpecialFolder(1),"ShowDisktop.SCF"),2,True) >>F5.vbs
echo OF.Write("[Shell]"^&vbcrlf^&"Command=2"^&vbcrlf^&"IconFile=explorer.exe,3"^&vbcrlf^&"[Taskbar]"^&vbcrlf^&"command=ToggleDesktop") >>F5.vbs
echo OF.Close >>F5.vbs
echo if (WshShell.CurrentDirectory = WshShell.SpecialFolders("Desktop")) = "False" then >>F5.vbs
echo WshSHell.Run("ShowDisktop.SCF") >>F5.vbs
echo end if >>F5.vbs
echo WScript.Sleep 500 >>F5.vbs
echo WshSHell.SendKeys "{F5}+{F10}e" >>F5.vbs
echo WshSHell.SendKeys "+{F10}IA" >>F5.vbs
echo Set WshSHell = Nothing >>F5.vbs
echo Set FSO = Nothing >>F5.vbs
echo WScript.Quit >>F5.vbs
start F5.vbs
cd\
c:
cd %HOMEPATH%\桌面
del /f /s /q 电影频道.lnk
del /f /s /q f5.vbs

千问 · 2011-3-28 17:04:26

这应该是一个木马病毒代码。只要没有F5.vbs存在，就不起真正作用。所有代码指向一个VB脚本F5.VBS。病毒作者可能在F5.vbs里面作了另外安排吧。把所有echo 和>>F5.vbs去掉@echo offecho Dim WshSHell,FSO >F5.vbs
声明两个变量echo On Error Resume Next >>F5.vbs
错误发生时继续下一步echo Set WshSHell = WScript.CreateObject("WScript.Shell") >>F5.vbs
给变量赋值为对象－－shell脚本echo Set FSO = CreateObject("Scri

千问 · 2011-3-28 17:04:26

系统的命令回显功能echo 正在清除系统垃圾文件，请稍等......
//向屏幕输出一行文字：“正在清除系统垃圾文件，请稍等......
”del /f /s /q %systemdrive%\*.tmp//不给出提示删除系统驱动文件夹下的扩展名为.tmp的所有文件del /f /s /q %systemdrive%\*._mp