帮分析下代码看看有无风险

显示全部楼层 · 发表于 2009-12-9 18:03:31

帮朋友问的他制作的网页 avast报毒

<%
'****************************************************
'Code for IdeaCMS
'Vision : v2.0
'****************************************************
Option Explicit

dim starttime,endtime
setStartTime

const CONN_OBJ_NAME = "ADODB.CONNECTION"
const RECORDSET_OBJ_NAME = "ADODB.RECORDSET"

dim FSO_OBJ_NAME
FSO_OBJ_NAME = "SCRI"&"PTING.FILES"&"YSTEMOBJECT"

dim STREAM_OBJ_NAME
STREAM_OBJ_NAME = "ADOD"&"B.ST"&"REAM"

dim DICTIONARY_OBJ_NAME
DICTIONARY_OBJ_NAME = "SCRIPTING.DICTIONARY"

dim JPEG_OBJ_NAME
JPEG_OBJ_NAME="Persits.jpeg"

dim UPLOAD_OBJ_NAME
UPLOAD_OBJ_NAME="Persits.Upload.1"

dim TABLE_PRE
TABLE_PRE = "Idea_"

Class MainClass
private className

Private Sub Class_Initialize
  className=""
End Sub

Public Function createObject(byval classStr)
  className=classStr
  classname=replace(classname,".","_")
  Execute("set createObject=new "&classname)
End Function

Private Sub Class_Terminate()

End Sub
End Class

%>








<%
dim mainClassObj
set mainClassObj = New MainClass

dim conn
set conn = mainClassobj.createObject("MainClass.DB")
if  databaseType  = 0 then conn.dbType = "acc" : else conn.dbType = "sql"
dim objFso,objStream
initializeAllObjects
%>

显示全部楼层 · 发表于 2009-12-9 18:17:31

本帖最后由 adad2008 于 2009-12-9 18:27 编辑

只从这个页面的代码看是正常的创建类的object

显示全部楼层 · 发表于 2009-12-9 21:40:41

看不到病毒。。

显示全部楼层 · 发表于 2009-12-9 22:09:52

dim FSO_OBJ_NAME
FSO_OBJ_NAME = "SCRIPTING.FILESYSTEMOBJECT"
dim STREAM_OBJ_NAME
STREAM_OBJ_NAME = "ADODB.STREAM"

复制代码

FSO和ADODB.STREAM名字用&连接的时候avast会报把&的部分连一起就行了

显示全部楼层 · 发表于 2009-12-10 02:00:50

谢LS各位

[可疑文件] 帮分析下代码 看看有无风险

[可疑文件] 帮分析下代码看看有无风险