Two lines of CSS to solve, a total of 5 options
One
Iframe{n1ifm:expression (this.src= ' About:blank ', this.outerhtml= ');} * * This line of code is to solve the problem of an IFRAME!
Script{nojs1:expression (This.src.toLowerCase (). IndexOf (' http ') ==0)? document.write (' Trojan was successfully quarantined! ’):‘’);}
Principle: "Script" marked by the src into lowercase, and then see if the "http" start of the Outland JS script file, if it is, the page content empty and write "Trojan was successfully isolated!" ”。 otherwise normal display. Disadvantage: Visitors cannot see the page that is infected with the "script" Trojan.
Two
Iframe{nifm2:expression (this.src= ' About:blank ', this.outerhtml= ');}
Script{no2js:expression (This.src.toLowerCase (). IndexOf (' http ') ==0)? Document.close (): "");
Principle: The document.write () of the JS file in Outland is forced off by using Document.close (). The Trojan has not yet finished writing, only part of the forced cache output, the rest will not be written again.
Three
Iframe{ni3fm:expression (this.src= ' About:blank ', this.outerhtml= ');}
Script{n3ojs:expression (This.src.toLowerCase (). IndexOf (' http ') ==0)? Document.execcommand (' Stop '): ');
Principle: The same to the JS file in Outland, immediately call IE private ExecCommand method to stop all requests on the page, so the next JS file is also forced to stop downloading. Just like we clicked the "Stop" button on the browser. It seems that this is JS analog IE stop button a method.
Four
Iframe{nif4m:expression (this.src= ' About:blank ', this.outerhtml= ');}
Script{noj4s:expression (if (this.src.indexOf (' http ') ==0) this.src= ' res://ieframe.dll/dnserror.htm ');
Principle: The JS file in the IE404 of SRC rewrite cost to the address of the wrong page, so that the JS code in Outland will not be downloaded.
Five
Iframe{nifm5:expression (this.src= ' About:blank ', this.outerhtml= ');}
Script{noj5s:expression (This.id.toLowerCase (). IndexOf (' Vok ')! =-1)? document.write (' Trojan was successfully quarantined! ’):‘’));}
The fifth scenario of the page HTML source code "script" to add "LH" as the prefix of the ID, such as LHWEATHERJSAPI, "script src=" ***/**.js "id=" Lhsearchjsapi ""/script "