|
|
发表于 2026-10-16 22:57:38
|
显示全部楼层
本帖最后由 chiannet 于 2026-10-16 23:20 编辑
- _SUB RUN_DrvCeo
- ENVI &PS1=%Temp%\Get_DrvCeo.ps1
- FILE %&PS1%
- WRIT-UTF8 %&PS1%,+0,$pageUrl = "https://www.sysceo.com/software-softwarei-id-258.html"
- WRIT-UTF8 %&PS1%,+0,try {
- WRIT-UTF8 %&PS1%,+0, $response = Invoke-WebRequest -Uri $pageUrl -UseBasicParsing -ErrorAction Stop
- WRIT-UTF8 %&PS1%,+0, $html = $response.Content
- WRIT-UTF8 %&PS1%,+0, $md5 = ""
- WRIT-UTF8 %&PS1%,+0, $md5Pattern = '当前文件MD5值：([A-F0-9]{32})'
- WRIT-UTF8 %&PS1%,+0, if ($html -match $md5Pattern) { $md5 = $matches[1] }
- WRIT-UTF8 %&PS1%,+0, $linkPatterns = @('https?://cdn-download\.soft\.360\.cn/[^"''\s]*')
- WRIT-UTF8 %&PS1%,+0, $foundLinks = @()
- WRIT-UTF8 %&PS1%,+0, foreach ($pattern in $linkPatterns) {
- WRIT-UTF8 %&PS1%,+0, $matches = [regex]::Matches($html, $pattern, [System.Text.RegularExpressions.RegexOptions]::IgnoreCase)
- WRIT-UTF8 %&PS1%,+0, foreach ($match in $matches) {$foundLinks += $match.Value}
- WRIT-UTF8 %&PS1%,+0, }
- WRIT-UTF8 %&PS1%,+0, $filteredLinks = $foundLinks | Select-Object -Unique
- WRIT-UTF8 %&PS1%,+0, if ($filteredLinks.Count -gt 0) {foreach ($link in $filteredLinks) {Write-Output "$link $md5"}}
- WRIT-UTF8 %&PS1%,+0,} catch {Write-Error $_.Exception.Message}
- EXEC*N &L=!Powershell -ExecutionPolicy Bypass -File "%&PS1%"
- FILE %&PS1%
- MSTR CeoDL,Hash=<1><2>%&L%
- LSTR T=6,%CeoDL%
- FIND $%T%=https:,!TEAM WRIT %WINDIR%\PRE_DPINST.LOG,+0, 无法获取DrvCeo下载链接！|EXIT _SUB
- FNAM CeoN=%CeoDL%
- ENVI CeoN=%TEMP%\%CeoN%.exe
- CALC #TI=0
- LOOP #%TI%<6,
- {
- FILE %CeoN%.exe
- CALC #TI=%TI%+1
- EXEC =!Curl.exe -L -k --fail --retry 2 --connect-timeout 30 -o "%CeoN%" "%CeoDL%"
- IFEX %CeoN%,
- {
- HASH %CeoN%,hPSW,MD5
- FIND $%hPSW%=%Hash%,
- {
- EXEC %CeoN% /S
- Wait 12000
- CALC #T2=2
- LOOP #%T2%<101,
- {
- Find DrvCeo.exe,TEAM Wait 6000|CALC #T2=%T2%+1!EXIT LOOP
- }
- FIND #%T2%<101,ENVI &STR=DrvCeo在%T2%秒内运行完毕。!TEAM KILL DrvCeo.exe|ENVI &STR=DrvCeo运行超过10分钟程序未结束，已被强制KILL。
- WRIT %WINDIR%\PRE_DPINST.LOG,$+0, %&STR%
- EXIT LOOP
- }!
- {
- WRIT %WINDIR%\PRE_DPINST.LOG,+0, 下载的文件哈希值对不上，第%TI%次重新下载。
- }
- }!
- {
- WRIT %WINDIR%\PRE_DPINST.LOG,+0, 无法下载文件。
- EXIT LOOP
- }
- }
- EXEC*N &SID=!Powershell -NoProfile -ExecutionPolicy Bypass -Command "([Security.Principal.WindowsIdentity]::GetCurrent()).User.Value"
- FORX * HKU\%SID%\Software\Microsoft\Windows\CurrentVersion\UFH\SHC HKLM\SYSTEM\CurrentControlSet\Services\bam\State\UserSettings\%SID%,&A,
- {
- EXEC* &P=!Reg Query "%&A%"
- FORX *NL &P,&T,
- {
- LPOS &i=\DrvCeo,1,%&T%
- FIND #%&i%>0,
- {
- LPOS &TY=REG_BINARY,1,%&T%
- FIND #%&TY%=0,
- {
- MSTR &ID=<1>%&T%
- REGI %&A%\%&ID%=
- }!
- {
- Forx /S %Desktop%\实用工具\SuperUser64.exe,&SU,1,
- {
- CALC #&TY=%&TY%-1
- LSTR &ID=%&TY%,%&T%
- MSTR -trimleft -trimright &ID=%&ID%
- EXEC =!"%&SU%" /ws Reg Delete "%&A%" /f /v "%&ID%"
- }
- }
- }
- }
- }
- EXEC =!netsh advfirewall firewall delete rule name="Aria2"
- PATH #%SystemDrive%\DrvPath
- PATH #%Windir%\Temp\Sysceo
- FORX @%ProgramData%\Microsoft\Windows\Start Menu\Programs\驱动总裁*,&P,0,PATH #%&P%
- FILE %PUBLIC%\Desktop\驱动总裁.lnk
- FILE %CeoN%
- ENVI &DrvCeoS=
- REGI --init --ak HKLM\SOFTWARE\WOW6432Node\,&SubKeys
- FORX *NL &SubKeys,&T,
- {
- LPOS &i=DrvCeo,1,%&T%
- FIND #%&i%>0,TEAM ENVI &DrvCeoS=%&T%|EXIT FORX
- }
- FIND $%&DrvCeoS%=,
- {
- REGI --init --ak HKLM\SOFTWARE\,&SubKeys
- FORX *NL &SubKeys,&T,
- {
- LPOS &i=DrvCeo,1,%&T%
- FIND #%&i%>0,TEAM ENVI &DrvCeoS=%&T%|EXIT FORX
- }
- }
- FORX * \WOW6432Node\ \,&A,
- {
- FIND $%&DrvCeoS%=,!
- {
- ENVI &IP=
- REGI $HKLM\SOFTWARE%&A%%&DrvCeoS%\InstPath,&IP
- FIND $%&IP%=,!
- {
- FDIR &UP=%&IP%
- FNAM &NN=%&UP%
- FIND $%&NN%=SysCeo,PATH #%&UP%!PATH #%&IP%
- }
- REGI HKLM\SOFTWARE%&A%%&DrvCeoS%\!
- REGI HKLM\SOFTWARE%&A%Microsoft\Windows\CurrentVersion\Uninstall\%&DrvCeoS%\!
- }
- REGI HKLM\SOFTWARE%&A%SysCeo\!
- }
- PATH #%ProgramFiles%\SysCeo
- PATH #%ProgramFiles(x86)%\SysCeo
- WRIT %WINDIR%\PRE_DPINST.LOG,+0, 已清理 DrvCeo 痕迹。
- _END
RUN_DrvCeo.7z
(2.01 KB, 下载次数: 2)
主要功能，自动获取DrvCeo2.X版，核对MD5值无问题后，自动运行之，等待10min，超时kill，打扫痕迹退出。
脚本里用到了SuperUser64.exe提权工具，请自备。我放在%Desktop%\实用工具\下，如果没有它，HKLM\SYSTEM\CurrentControlSet\Services\bam\State\UserSettings\%SID%下drvceo相关条目砍不掉。
|
|
楼主: kedion
闽公网安备35020302032614号 )
IP卡
狗仔卡
