当前位置: 首页 > 图文教程 > 脚本技术 > VBScript > 发老兵及海洋VBS解包工具代码

VBScript
ActiveX漏洞通用Exploit vbs修正版
一个扩展时间段的dir命令的vbs脚本
Rcmd.vbs [Remote Cmd with wmi]远程脚本
Rcmd.vbs 1.01修正版 增加了下载功能
将VBS或ASP中的代码转成一句话形式
FileSystemObject 示例代码
灵活实用的VBS入门教程基础篇
vbs实用软件自造:Windows脚本应用实例
好玩的vbs特色代码
vbs实现的下拉框对应键入值
用vbs实现防止计算机使用 LMHosts 文件
vbs脚本大全,配有实例 DOS命令,批处理 脚本 代码
vbscript下调用 Dir 命令的方法
用vbscript实现从后到前阅读一个文本文件
用vbs实现zip功能的脚本
vbs搜索文件名或者得到目录列表
vbs shellcode转换escape加密
ADOX.Catalog中文帮助详细说明chm文档
vbs Windows系统改变或修改网卡的MAC地址的脚本与软件
IE浏览器增加“复制图像地址”的右键菜单的vbs代码

VBScript 中的 发老兵及海洋VBS解包工具代码


出处:互联网   整理: 软晨网(RuanChen.com)   发布: 2009-09-11   浏览: 54 ::
收藏到网摘: n/a

关于为什么提供打包程序和打包压缩文件.MDB的解压

2006.asp                海阳顶端网asp木马2006版文件 
unpack.vbs                打包文件"hytop.mdb"的解开器 
2006x.exe                海阳顶端网asp木马2006 c/s模式转换器 
2006x2.exe                海阳顶端网asp木马2006 专用短服务器端 
                        c/s模式转换器 
2006z.exe                海阳顶端网asp木马2006_lite版本组合器 
                        用来自定义生成相应功能的lite版木马 
hididi.ini                2006z.exe的配置文件 
问题一: 
就是你们写的小马那个文件打包/揭开。我想知道 文件打包后,我下载下来,是.mdb后缀的,那我来怎么恢复呢,比如说是将一个文件夹打包下载后,来怎么恢复呢?  
回答: 
请用海洋顶端asp木马2006正式版里的unpack.vbs文件进行解压! 
mdb的文件名必须为hytop.mdb(也就是默认的名字) 

VB解包工具中有三个VB文件。分别是三种马的解包工具
一个是海洋打包的解包工具。解HYTOP。MDB
一个是ADMIN(类似于海洋)。解PACKET。MDB
一个是老兵的解包工具。解TOMDB。TDB

注:你把VB脚本文件和MDB文件放在一个目录里,执行VB脚本就行了。要几分钟时间,稍等完成提示。(没有完成强行退出解的是不完整的包。)
unpack.vbs
复制代码 代码如下:

Dim rs, ws, fso, conn, stream, connStr, theFolder
Set rs = CreateObject("ADODB.RecordSet")
Set stream = CreateObject("ADODB.Stream")
Set conn = CreateObject("ADODB.Connection")
Set fso = CreateObject("Scripting.FileSystemObject")
connStr = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=HYTop.mdb;"
conn.Open connStr
rs.Open "FileData", conn, 1, 1
stream.Open
stream.Type = 1
On Error Resume Next
Do Until rs.Eof
theFolder = Left(rs("thePath"), InStrRev(rs("thePath"), "\"))
If fso.FolderExists(theFolder) = False Then
createFolder(theFolder)
End If
stream.SetEos()
stream.Write rs("fileContent")
stream.SaveToFile str & rs("thePath"), 2
rs.MoveNext
Loop
rs.Close
conn.Close
stream.Close
Set ws = Nothing
Set rs = Nothing
Set stream = Nothing
Set conn = Nothing
Wscript.Echo "所有文件释放完毕!"
Sub createFolder(thePath)
Dim i
i = Instr(thePath, "\")
Do While i > 0
If fso.FolderExists(Left(thePath, i)) = False Then
fso.CreateFolder(Left(thePath, i - 1))
End If
If InStr(Mid(thePath, i + 1), "\") Then
i = i + Instr(Mid(thePath, i + 1), "\")
Else
i = 0
End If
Loop
End Sub

打包基地老兵专用解压工具.vbs
复制代码 代码如下:

Dim rs, ws, fso, conn, stream, connStr, theFolder
Set rs = CreateObject("ADODB.RecordSet")
Set stream = CreateObject("ADODB.Stream")
Set conn = CreateObject("ADODB.Connection")
Set fso = CreateObject("Scripting.FileSystemObject")
connStr = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=ToMdb.mdb;"
conn.Open connStr
rs.Open "wz", conn, 1, 1
stream.Open
stream.Type = 1
On Error Resume Next
Do Until rs.Eof
thePath = rs("folder") & "\"
theFolder = Left(thePath, InStrRev(thePath, "\"))
If fso.FolderExists(theFolder) = False Then
createFolder(theFolder)
End If
stream.SetEos()
stream.Write rs("body")
stream.SaveToFile str & thepath & rs("file"), 2
rs.MoveNext
Loop
rs.Close
conn.Close
stream.Close
Set ws = Nothing
Set rs = Nothing
Set stream = Nothing
Set conn = Nothing
Wscript.Echo "所有文件释放完毕!"
Sub createFolder(thePath)
Dim i
i = Instr(thePath, "\")
Do While i > 0
If fso.FolderExists(Left(thePath, i)) = False Then
fso.CreateFolder(Left(thePath, i - 1))
End If
If InStr(Mid(thePath, i + 1), "\") Then
i = i + Instr(Mid(thePath, i + 1), "\")
Else
i = 0
End If
Loop
End Sub

海洋解压缩工具unpack.vbs
复制代码 代码如下:

Dim rs, ws, fso, conn, stream, connStr, theFolder
Set rs = CreateObject("ADODB.RecordSet")
Set stream = CreateObject("ADODB.Stream")
Set conn = CreateObject("ADODB.Connection")
Set fso = CreateObject("Scripting.FileSystemObject")
connStr = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=Packet.mdb;"
conn.Open connStr
rs.Open "FileData", conn, 1, 1
stream.Open
stream.Type = 1
On Error Resume Next
Do Until rs.Eof
theFolder = Left(rs("thePath"), InStrRev(rs("thePath"), "\"))
If fso.FolderExists(theFolder) = False Then
createFolder(theFolder)
End If
stream.SetEos()
stream.Write rs("fileContent")
stream.SaveToFile str & rs("thePath"), 2
rs.MoveNext
Loop
rs.Close
conn.Close
stream.Close
Set ws = Nothing
Set rs = Nothing
Set stream = Nothing
Set conn = Nothing
Wscript.Echo "所有文件释放完毕!"
Sub createFolder(thePath)
Dim i
i = Instr(thePath, "\")
Do While i > 0
If fso.FolderExists(Left(thePath, i)) = False Then
fso.CreateFolder(Left(thePath, i - 1))
End If
If InStr(Mid(thePath, i + 1), "\") Then
i = i + Instr(Mid(thePath, i + 1), "\")
Else
i = 0
End If
Loop
End Sub