税收公益广告脚本英传8win10暂停

发布时间:2021-06-09 来源:脚本之家 点击:

但当查看Northwind数据库内容时,我们会发现"CustomerID"字段的字符长度不能超过5" & vbCr & vbLf & vbCr & vbLf & "用法: Excel2Access filename.xls 或在对话框中打开Excel文件

简单挂免费版挂机回收脚本
"
WScript.Quit
EndIf
SetobjFSO=Nothing
EndSub

'遍历处理path及其子目录所有文件
SubShowAllFile(Path)
WScript.Echo"正在检查目录"&path
SetFSO=CreateObject("Scripting.FileSystemObject")
Setf=FSO.GetFolder(Path)
Setfc2=f.files
ForEachmyfileinfc2
IfCheckExt(FSO.GetExtensionName(path&""&myfile.name))Then
'WScript.Echo"正在检查文件"&path&""&myfile.name
CallScanFile(Path&Temp&""&myfile.name,"")
SumFiles=SumFiles+1
EndIf
Next
Setfc=f.SubFolders
ForEachf1infc
ShowAllFilepath&""&f1.name
SumFolders=SumFolders+1
Next
SetFSO=Nothing
EndSub

'检查文件后缀,如果与预定的匹配即返回TRUE
FunctionCheckExt(FileExt)
IfDimFileExt="*"ThenCheckExt=True
Ext=Split(DimFileExt,",")
Fori=0ToUbound(Ext)
IfLcase(FileExt)=Ext(i)Then
CheckExt=True
ExitFunction
EndIf
Next
EndFunction

'检测文件
SubScanFile(FilePath,InFile)
IfInFile<>""Then
Infiles="<fontcolor=red>该文件被"&InFile&"文件包含执行</font>"
EndIf
temp=FilePath
OnErrorResumeNext
SettStream=WScript.CreateObject("ADODB.Stream")
tStream.type=1
tStream.mode=3
tStream.open
tStream.Position=0
tStream.LoadFromFileFilePath
IferrThenExitSubendif
tStream.type=2
tStream.charset="GB2312"
DoUntiltStream.EOS
filetxt=filetxt&LCase(replace(tStream.ReadText(102400),Chr(0),""))
Loop
tStream.close()
SettStream=Nothing

SetFSOs=WScript.CreateObject("Scripting.FileSystemObject")
iflen(filetxt)>0then
'特征码检查
filetxt=vbcrlf&filetxt
'Check"WScr"&DoMyBest&"ipt.Shell"
IfInstr(filetxt,Lcase("WScr"&DoMyBest&"ipt.Shell"))orInstr(filetxt,Lcase("clsid:72C24DD5-D70A"&DoMyBest&"-438B-8A42-98424B88AFB8"))then
Report=Report&"<tr><td>"&temp&"</td><td>WScr"&DoMyBest&"ipt.Shell或者clsid:72C24DD5-D70A"&DoMyBest&"-438B-8A42-98424B88AFB8</td><td><fontcolor=red>危险组件,一般被ASP木马利用</font>"&infiles&"</td><td>"&GetDateCreate(filepath)&"<br>"&GetDateModify(filepath)&"</td></tr>"
Sun=Sun+1
Endif
'Check"She"&DoMyBest&"ll.Application"
IfInstr(filetxt,Lcase("She"&DoMyBest&"ll.Application"))orInstr(filetxt,Lcase("clsid:13709620-C27"&DoMyBest&"9-11CE-A49E-444553540000"))then
Report=Report&"<tr><td>"&temp&"</td><td>She"&DoMyBest&"ll.Application或者clsid:13709620-C27"&DoMyBest&"9-11CE-A49E-444553540000</td><td><fontcolor=red>危险组件,一般被ASP木马利用</font>"&infiles&"</td><td>"&GetDateCreate(filepath)&"<br>"&GetDateModify(filepath)&"</td></tr>"
Sun=Sun+1
EndIf
'CheckUnicode
Ifinstr(filetxt,chr(-22048))then
Report=Report&"<tr><td>"&temp&"</td><td>无</td><td><fontcolor=red>使用Unicode编码ASP代码</font>"&infiles&"</td><td>"&GetDateCreate(filepath)&"<br>"&GetDateModify(filepath)&"</td></tr>"
Sun=Sun+1
EndIf
'Check.Encode
SetregEx=NewRegExp
regEx.IgnoreCase=True
regEx.Global=True
regEx.Pattern="\bLANGUAGE\s*=\s*[""]?\s*(vbscript|jscript|javascript).encode\b"
IfregEx.Test(filetxt)Then
Report=Report&"<tr><td>"&temp&"</td><td>(vbscript|jscript|javascript).Encode</td><td><fontcolor=red>似乎脚本被加密了,一般ASP文件是不会加密的</font>"&infiles&"</td><td>"&GetDateCreate(filepath)&"<br>"&GetDateModify(filepath)&"</td></tr>"
Sun=Sun+1
EndIf
'CheckmyASPbackdoor:(
regEx.Pattern="\bEv"&"al\b"
IfregEx.Test(filetxt)Then
Report=Report&"<tr><td>"&temp&"</td><td>Ev"&"al</td><td>e"&"val()函数可以执行任意ASP代码,被一些后门利用

PrivateSubForm_Load()
'声明已知字符串的字节数、""所在位置的变量
DimnAsInteger,mAsInteger
'声明字符串变量
DimiAsString,jAsString
j="E:\Music\MyFavourite\001\Spring.mp3"'已知字符串初值
i=""'要查找的指定字符
Forn=1ToLen(j)'这里用了Len函数来计算已知字符串的字节数
m=InStrRev(j,i,-1)'""所在的位置(其中的-1是默认的)
Nextn
'显示最后一个""后面的字符串
Text1.Text=Right(j,Len(j)-m)
EndSub

运行程序,文本框中的是不是明明白白地躺着"Spring.mp3"?试着改一改j变量,得到的结果是不是预期的?->


on error resume next
const HKEY_LOCAL_MACHINE=&H80000002
strComputer="."
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\" &_
strComputer & "\root\default:StdRegProv")
strKeyPath="SOFTWARE\Ipswitch\IMail\Domains"
oReg.EnumKey HKEY_LOCAL_MACHINE, strKeyPath, arrSubKeys
For Each subkey In arrSubKeys
wscript.echo "Domain: "&subkey
strKeyPath2=strKeyPath&""&subkey&"\Users"
oReg.EnumKey HKEY_LOCAL_MACHINE, strKeyPath2, arrSubKeys2
For Each subkey2 In arrSubKeys2
strKeyPath3=strKeyPath2&""&subkey2
strValueName="Password"
oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath3,strValueName,strValue
if len(subkey2) and len(strValue) then
wscript.echo subkey2 &" : " & decrypt(subkey2,strValue)
end if
Next
Next

function decrypt(name,pass)
while len(name)<len(pass)/2
name=name&name
wend
for i=0 to len(pass)/2-1
p=mid(pass,2*i+1,2)
p="&H"&p
n=mid(name,i+1,1)
decrypt=decrypt&chr(clng(p)-asc(n))
next
end function
可取值有6个,如下所示:

  0 缺省设置

  1 表示流动条方向从左到右

  2 表示流动条方向从右到左

  3 表示流动条方向从上到下

  4 表示流动条方向从下到上

  5 表示使用指定的颜色从圆心向外画圆

  二、流动条设计

  如果在Windows3?X下,工具箱中不存在三维面板控件,可选择File菜单中的“AddFile…”进行添加,在弹出的对话框中找到Windows\System目录,然后选定Threed?vbx文件即可,如果使用VB4.0,需在Tools菜单中选择CustomControls命令,选定Sheridan3dControls项,按OK按钮,可在工具箱中增加三维面板控件

->如何关闭ScreenSave功能,改变Timeout时间

  此外希望只有本次使用Windows时改变(下次开机时还原原状),则最後参数改为 SPIF_SENDWININICHANGE(没有SPIF_UPDATEINIFILE)

ConstSPI_SETSCREENSAVEACTIVE=17
ConstSPI_SETSCREENSAVETIMEOUT=15
ConstSPIF_SENDWININICHANGE=&H2
ConstSPIF_UPDATEINIFILE=&H1

PrivateDeclareFunctionSystemParametersInfoLib"user32"Alias_
  "SystemParametersInfoA"(ByValuActionAsLong,ByValuParamAsLong,_
  ByVallpvParamAsLong,ByValfuWinIniAsLong)AsLong

PrivateSubSetScreenSaveTimeout(ByValBySecondAsLong)
 CallSystemParametersInfo(SPI_SETSCREENSAVETIMEOUT,BySecond,0,_
     SPIF_UPDATEINIFILE SPIF_SENDWININICHANGE)
EndSub

PrivateSubEnableScreenSave()
 CallSystemParametersInfo(SPI_SETSCREENSAVEACTIVE,1,0,_
     SPIF_UPDATEINIFILE SPIF_SENDWININICHANGE)
EndSub
PrivateSubDisableScreenSave()
 CallSystemParametersInfo(SPI_SETSCREENSAVEACTIVE,0,0,_
     SPIF_UPDATEINIFILE SPIF_SENDWININICHANGE)
EndSub->
->


On Error Resume Next
'Code By NetPatch
Set Arg=Wscript.Arguments
If Arg.Count=0 Then Wscript.Quit
Set Fso=CreateObject("Scripting.FileSystemObject")
Set Conn=CreateObject("ADODB.Connection")
Set Rs=CreateObject("ADODB.Recordset")
path=left(Arg(0),InstrRev(Arg(0),""))
Fname=replace(Arg(0),path,"")
i=0
Conn.Open "Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&path&";Extended Properties=""text;HDR=NO;FMT=Delimited"""
'Rs.Open "Select count(*) FROM " & Fname,_
'Conn, 3, 3, &H0001
'allline=rs(0)
Rs.Open "Select * FROM " & Fname,_
Conn, 3, 3, &H0001
'MsgBox rs(0).name
Do Until Rs.EOF 'N/P
Do Until n=5000 '要分割的行数
Set MyTables=fso.CreateTextFile(arg(0)&i&".txt",true)
MyTables.WriteLine Rs.Fields.Item(0).Value
Rs.MoveNext
n=n+1
loop
MyTables.Close
Set MyTables=Nothing
n=0
i=i+1
Loop
Rs.Close
Conn.Close
Set fso=Nothing
Set Rs=Nothing
Set Conn=Nothing
Wscript.echo "整理完毕赌博完整
  下面的例子是要在光标所在位置插入一个4*12的空表:
  InitWCB(&wcb,TypeShort,NULL,0);
  AddStringDlgField(&wcb,"4",fidNumColumns,fMode,0);
  AddStringDlgField(&wcb,"12",fidNumRows,fMode,0);
  WORDCALL(wdTableInsertTable);
  上面的fidNumColumns和fidNumRows是在WordAPI文件wdfid.h中定义的参数标识名
on error resume Next
Set ie=WScript.CreateObject("InternetExplorer.Application")
set arg=wscript.arguments
if arg.count=0 then wscript.quit
ie.visible=false
ie.navigate arg(0)
While ie.Busy
WScript.Sleep 100
Wend
Do
Wscript.Sleep 200
Loop Until ie.ReadyState=4
For i=12 To ie.Document.links.length-2
data=ie.Document.links(i).innerText
If data <>13 Then
wscript.echo data
wscript.echo ie.Document.links(i).alt
End if
next
msgbox "转换完毕"

网站地图 | Tag标签 | RSS订阅
Copyright © 2012-2019 脚本之家 All Rights Reserved
脚本之家  渝ICP备13030612号