...很多杀毒软件没被扫描出来高级质量

显示全部楼层 · 发表于 2012-4-22 00:33:40

Comodo 5.1 12112 2012-04-20 TestSignature.VBS.TrojanDownloader.Small.~L
Microsoft 1.8304 2012.04.21 2012-04-21 TrojanDownloader:VBS/Psyme.Y
熊猫卫士 9.05.01 2012.04.20 2012-04-20 JS/Psyme.gen
超级巡警Trojan.Vbs.Webshell.b Trojan.Vbs.Webshell.b

显示全部楼层 · 发表于 2012-4-22 22:29:16

确实高质量,xp运行出现下面情况。

显示全部楼层 · 发表于 2012-4-22 22:35:51

rem This vbs is improved by bluewing009 for command line to get a file from web
rem The usage is as follow (CMD):cscript //NoLogo /e:vbscript Web_Download.vbs "Web download's URL" "your save file's path"
Set Web_Download = CreateObject("Microsoft.XMLHTTP")
Web_Download.Open "GET",Wscript.Arguments.Item(0),0
Web_Download.Send()
Set Web_Save = CreateObject("ADODB.Stream")
Web_Save.Mode = 3
Web_Save.Type = 1
Web_Save.Open()
Web_Save.Write(Web_Download.responseBody)
Web_Save.SaveToFile Wscript.Arguments.Item(1),2

复制代码

rem This vbs is improved by bluewing009 for command line to get a html file's code and change form utf-8 to ansi
rem The usage is as follow (CMD):cscript //NoLogo /e:vbscript Web_Page_Download.vbs "Web download's URL" "your save file's path"
Set Web_Download = CreateObject("Microsoft.XMLHTTP")
Web_Download.Open "GET",Wscript.Arguments.Item(0),0
Web_Download.Send()
Set Web_Save = CreateObject("ADODB.Stream")
Web_Save.Mode = 3
Web_Save.Type = 1
Web_Save.Open()
Web_Save.Write(Web_Download.responseBody)
Web_Save.SaveToFile Wscript.Arguments.Item(1),2
Dim read
Set Change_Code = CreateObject("ADODB.Stream")
Change_Code.Type = 2
Change_Code.Mode = 3
Change_Code.CharSet = "utf-8"
Change_Code.Open
Change_Code.LoadFromFile Wscript.Arguments.Item(1)
read = Change_Code.ReadText
Change_Code.Position = 0
Change_Code.CharSet = "gbk"
Change_Code.WriteText read
Change_Code.SetEOS
Change_Code.SaveToFile Wscript.Arguments.Item(1), 2
Change_Code.Close
Set Change_Code = Nothing

复制代码

显示全部楼层 · 发表于 2012-4-22 23:08:36

兄弟巡警没有报毒啊

显示全部楼层 · 发表于 2012-4-23 10:54:26

Kevin_Memo 发表于 2012-4-22 22:35

这段代码看起来没什么危险行为

显示全部楼层 · 发表于 2012-4-23 11:58:13

To ESET

显示全部楼层 · 发表于 2012-4-23 12:00:31

mse 杀

[可疑文件] ...很多杀毒软件没被扫描出来高级质量

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块