VBS script virus VBS big quantity of preferred functions that we've got a brand new comprehending, it can be now it also began to spend attention to it. VBS code locally by Windows Script Host (WSH) interpreted. VBS script execution can't do without WSH, WSH offers a Microsoft-based 32-bit Windows platform, and language-independent mechanism to explain the script, which can make the script straight in the Windows desktop or command prompt. Making use of WSH,
Windows 7 Professional, people can manipulate the WSH object, ActiveX objects, registry and file program. In Windows 2000, WSH can also be used to access the Windows NT Energetic Directory company.
having a VBS script composed in the document window interface interpreted by wscript.exe, and cscript.exe file in the character interpreted from the interface. wscript.exe is actually a scripting language interpreter, is the fact that it would make the script could be executed, as the implementation with the identical batch. About VBS we should know even more than I do, so do not bullshit, straight in to the subject, see my summary of VBS in the system security Magical bar.
one, to the registry editor to unlock
use Notepad to edit the following:
DIM WSH
SET WSH = WSCRIPT.CreateObject ( WSH.POPUP ( 'pop-up concept 1. WSH.Regwrite DisableRegistryTools 'to the registry editor to unlock
WSH.POPUP ( 'pop-up concept help save to. vbs file extension, use double click on.
Second,
Office 2010 Activation, flip off the default Win NT/2000 sharing
use Notepad to edit the subsequent:
Dim WSHShell 'define variable
set WSHShell = CreateObject ( Dim fso, dc
Set fso = CreateObject ( set dc = fso.Drives' entry to all drive letter
For Each d in dc
Dim str
WSHShell.run ( next
WSHShell.run ( WSHShell.run ( now to check, first open the cmd.exe, enter the net share command to determine their share around the machine. Double click on to run stopshare.vbs, will see the window flash off. Then in cmd, enter web share command, this time sharing the list did not acquire the
1. New Roman III exhibits the local IP address
a great number of times, we need to have to understand the machine's IP handle, even though could be performed employing many different software program, but with a VBS script is also pretty easy. Use Notepad to edit the following:
one. Dim WS
two. Set WS = CreateObject ( 3. IPAddress = WS.LocalIP
four. MsgBox help save the contents of the previously mentioned ShowIP.vbs,
Office Professional 2007, double-click the implementation with the neighborhood IP address can be obtained.
Fourth, the use of scripting deletion log
After the good results of the invasion method the very first factor hackers do is distinct the log,
Microsoft Office Professional 2010, the remote manage in the event the other graphical interface or from your terminal logged to the machine, delete the log just isn't a tricky task, though it has also, because of the log services is running, but in contrast to http,
Windows 7 Ultimate Key, ftp this company, you possibly can stop in the command line, then get rid of the command line utilizing net stop eventlog can't be stopped, so some people think the command line is pretty tricky to remove the log the truth is not the case, as an example, use the script in the VMI plan can delete the log, but additionally very easy and convenient. Supply code is as follows:
one. strComputer = two. Set objWMIService = GetObject ( 3. & four. strComputer & 5. dim mylogs (three)
6. mylogs (1) = 7. mylogs (2) = 8. mylogs (three) = 9. for Every logs in mylogs
10. Set colLogFiles = objWMIService.ExecQuery _
11. ( 12. For Each and every objLogfile in colLogFiles
13. objLogFile.ClearEventLog ()
14. Next
15. subsequent
above code will save cleanevent.vbs files. Within the over code, 1st get the object object, and then use its clearEventLog () method to delete the log. Create an array, application, security, program, if there are other logs may also add an array. Then having a for loop, eliminate just about every element from the array, the individual logs.