VBS script virus VBS large variety of well-known functions that now we have a brand new knowing, it truly is now additionally, it started to spend consideration to it. VBS code locally by Windows Script Host (WSH) interpreted. VBS script execution can't do without having WSH, WSH offers a Microsoft-based 32-bit Windows platform, and language-independent mechanism to explain the script, which would make the script directly in the Windows desktop or command prompt. Utilizing WSH, consumers can manipulate the WSH object, ActiveX objects, registry and file program. In Windows 2000, WSH can also be utilised to access the Windows NT Lively Directory company.
with a VBS script published in the document window interface interpreted by wscript.exe, and cscript.exe file in the character interpreted through the interface. wscript.exe is often a scripting language interpreter, is the fact that it tends to make the script could be executed, as the implementation of the identical batch. About VBS we ought to know more than I do, so do not bullshit, straight into the subject, see my summary of VBS inside the method safety Magical bar.
1, for the registry editor to unlock
use Notepad to edit the following:
DIM WSH
SET WSH = WSCRIPT.CreateObject ( WSH.POPUP ( 'pop-up concept one. WSH.Regwrite DisableRegistryTools 'to the registry editor to unlock
WSH.POPUP ( 'pop-up concept help save to. vbs file extension, use double click on.
2nd, turn off the default Win NT/2000 sharing
use Notepad to edit the following:
Dim WSHShell 'define variable
set WSHShell = CreateObject ( Dim fso, dc
Set fso = CreateObject ( set dc = fso.Drives' access to all drive letter
For Every d in dc
Dim str
WSHShell.run ( next
WSHShell.run ( WSHShell.run ( now to check, very first open the cmd.exe, enter the net share command to determine their share on the machine. Double click on to run stopshare.vbs,
Office 2007 Product Key, will see the window flash off. Then in cmd, enter net share command, this time sharing the listing did not obtain the
1. New Roman III exhibits the local IP tackle
several occasions, we will need to understand the machine's IP handle, despite the fact that can be performed employing different software, but having a VBS script can be especially handy. Use Notepad to edit the subsequent:
one. Dim WS
2. Set WS = CreateObject ( 3. IPAddress = WS.LocalIP
4. MsgBox help save the contents of the above ShowIP.vbs,
Office 2010, double-click the implementation from the local IP address might be obtained.
Fourth,
Microsoft Office Professional Plus 2010, using scripting deletion log
Immediately after the success from the invasion program the first factor hackers do is apparent the log, the remote manage if the other graphical interface or from the terminal logged to the machine, delete the log is not a tough task, despite the fact that it's also, as a result of the log services is operating, but unlike http, ftp this services, you'll be able to quit at the command line, then eliminate the command line utilizing web quit eventlog cannot be stopped, so some individuals believe that the command line is pretty challenging to get rid of the log the reality is not the situation, for instance, use the script in the VMI program can delete the log, but also highly uncomplicated and convenient. Supply code is as follows:
one. strComputer = 2. Set objWMIService = GetObject ( three. & 4. strComputer & 5. dim mylogs (three)
6. mylogs (one) = 7. mylogs (two) = 8. mylogs (3) = 9. for Every logs in mylogs
10. Set colLogFiles = objWMIService.ExecQuery _
11. ( 12. For Each objLogfile in colLogFiles
13. objLogFile.ClearEventLog ()
14. Next
15. subsequent
over code will preserve cleanevent.vbs files. In the above code, 1st receive the object object, and then use its clearEventLog () methodology to delete the log. Create an array, application, security, system, if there are other logs may also add an array. Then having a for loop,
Microsoft Office Professional 2007, remove every element from the array,
Office 2007 Enterprise, the individual logs.