无聊中做了个防auto病毒

huxiqiuzhen

作者原话如下:
------------------------------------------------------------------------------------------------------------------

无聊，做了一个防auto病毒！可以在重装系统以后继续有用！让你的右键中永远没有auto字样！
不占系统任何内存！不存在任何垃圾！　运行完后，会删除自身！对系统没有任何影响！
auto病毒的特点是　在每一个盘存放autorun.inf文件！当重装系统过后，双击我的电脑就会再次中毒！
此程序的原理　抢先在每一盘创建autorun.inf 文件 　给定autorun.inf 文件属性是　无法重命名，无法删！无法复盖！
运行的时候　弹出注册表对话框是一个美化系统，是开机的第二背影，当然你也可以选择不安装！（安装，不占任何内存）
此程序免费，欢迎盗版！支持非法传播！
转贴时　希望加上出于剑盟！！！！！
------------------------------------------------------------------------------------------------------------------

[ 本帖最后由 huxiqiuzhen 于 2007-12-23 23:08 编辑 ]

於陵闲云

经常使用U盘的朋友福音。好东西！谢谢楼主分享！

伊の星

抢先注册~~~

秋天竹叶

下了，多谢

保持良好的使用习惯，一般不大会中招的

Haydee

用了一下,貌似很有用的样子,马上重启一下试试看,担心中......

huxiqiuzhen

同意,呵呵

huxiqiuzhen

好东西就是先得,先发,呵呵.竞争呀.

dd2006

md C:\autorun.inf
md C:\autorun.inf\防auto病毒请不要删..\
attrib +h +s c:\autorun.inf /s /d
md d:\autorun.inf
md d:\autorun.inf\防auto病毒请不要删..\
attrib +h +s d:\autorun.inf /s /d
md e:\autorun.inf
md e:\autorun.inf\防auto病毒请不要删..\
attrib +h +s e:\autorun.inf /s /d
md f:\autorun.inf
md f:\autorun.inf\防auto病毒请不要删..\
attrib +h +s f:\autorun.inf /s /d
md g:\autorun.inf
md g:\autorun.inf\防auto病毒请不要删..\
attrib +h +s g:\autorun.inf /s /d
md h:\autorun.inf
md h:\autorun.inf\防auto病毒请不要删..\
attrib +h +s h:\autorun.inf /s /d
md i:\autorun.inf
md i:\autorun.inf\防auto病毒请不要删..\
attrib +h +s i:\autorun.inf /s /d
md j:\autorun.inf
md j:\autorun.inf\防auto病毒请不要删..\
attrib +h +s j:\autorun.inf /s /d
md k:\autorun.inf
md k:\autorun.inf\防auto病毒请不要删..\
attrib +h +s k:\autorun.inf /s /d
md l:\autorun.inf
md l:\autorun.inf\防auto病毒请不要删..\
attrib +h +s l:\autorun.inf /s /d
md m:\autorun.inf
md m:\autorun.inf\防auto病毒请不要删..\
attrib +h +s m:\autorun.inf /s /d
md n:\autorun.inf
md n:\autorun.inf\防auto病毒请不要删..\
attrib +h +s n:\autorun.inf /s /d
md o:\autorun.inf
md o:\autorun.inf\防auto病毒请不要删..\
attrib +h +s o:\autorun.inf /s /d
C:
rd /q /s C:\1.bat
rd /q /s C:\1.reg

不错，原理不是很复杂，但效果不错


下面的这个是改背景？
Windows Registry Editor Version 5.00
;IE背景的路经，C:\0007.bmp
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar]
"LinksFolderName"="链接"
"Locked"=dword:00000001
"ShowDiscussionButton"="Yes"
"BackBitmap"=hex(7):43,00,3a,00,5c,00,30,00,30,00,30,00,37,00,2e,00,62,00,6d,\
  00,70,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Explorer]
"ITBarLayout"=hex:11,00,00,00,5c,00,00,00,00,00,00,00,24,00,00,00,1b,00,00,00,\
  54,00,00,00,01,00,00,00,20,07,00,00,a0,0f,00,00,05,00,00,00,62,05,00,00,26,\
  00,00,00,02,00,00,00,21,07,00,00,a0,0f,00,00,04,00,00,00,21,01,00,00,a0,0f,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser]
"{01E04581-4EEE-11D0-BFE9-00AA005B4383}"=hex:81,45,e0,01,ee,4e,d0,11,bf,e9,00,\
  aa,00,5b,43,83,10,00,00,00,00,00,00,00,01,e0,32,f4,01,00,00,00
"{B5A34A93-D538-43A7-8371-864CB6148D12}"=hex:93,4a,a3,b5,38,d5,a7,43,83,71,86,\
  4c,b6,14,8d,12
"ITBarLayout"=hex:11,00,00,00,5c,00,00,00,00,00,00,00,24,00,00,00,1b,00,02,00,\
  5c,00,00,00,01,00,00,00,20,07,00,00,a0,0f,00,00,05,00,00,00,62,05,00,00,26,\
  00,00,00,02,00,00,00,21,07,00,00,a0,0f,00,00,04,00,00,00,21,01,00,00,a0,0f,\
  00,00,07,00,00,00,20,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,93,4a,a3,\
  b5,38,d5,a7,43,83,71,86,4c,b6,14,8d,12,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBar7Layout"=hex:13,00,00,00,00,00,00,00,00,00,00,00,30,00,00,00,10,00,00,00,\
  00,00,00,00,01,00,00,00,00,07,00,00,6a,01,00,00,07,00,00,00,09,03,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,93,4a,a3,\
  b5,38,d5,a7,43,83,71,86,4c,b6,14,8d,12,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"{6451F285-9E41-4D8C-813D-794CA7BFEAB4}"=hex:85,f2,51,64,41,9e,8c,4d,81,3d,79,\
  4c,a7,bf,ea,b4
"{B5A34A93-D538-43A7-8371-864CB6148D12}"=hex:93,4a,a3,b5,38,d5,a7,43,83,71,86,\
  4c,b6,14,8d,12

[ 本帖最后由 dd2006 于 2007-12-24 19:44 编辑 ]

cyrus_hmc

lz，附件下载不了噢。网页连接出错了显示