这代码如何解密？

qigang

嘿嘿，抓点下来。

深红的雪

解了一下

    [frame]http://w18.vg/bf.gif 连不上，估计都是http://w18.vg/s.exe
    [frame]http://w18.vg/lz.gif
        [object] http://w18.vg/s.exe
    [frame]http://w18.vg/xl.gif
        [object] http://w18.vg/s.exe
    [frame]http://w18.vg/ms.gif
        [object] http://w18.vg/s.exe
    [frame]http://w18.vg/baidu.gif
        [object] http://w18.vg/calc.cab
    [frame]http://w18.vg/real.gif
        [object] http://w18.vg/s.exe

icka

千千静听网站挂的就是这个

Graybird

Starting the file scan:

Begin scan in 'E:\Antivir\addr.js'
Begin scan in 'E:\Antivir\s.exe'
E:\Antivir\s.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Tiny.aid
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\calc.cab'
E:\Antivir\calc.cab
  [0] Archive type: CAB (Microsoft)
  --> s.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Tiny.aid
      [INFO]      The file was deleted!

The file 'addr.js' has been determined to be 'UNDER ANALYSIS'.

上报~

[ 本帖最后由 Graybird 于 2008-2-19 10:15 编辑 ]

啊弥陀佛

微点砍掉

liangxy

我汗,我一进来,费尔就报毒,搞得我神经兮兮的,还以为卡饭中招了````

swans

我也以为是

Graybird

The file 'addr.js' has been determined to be 'MALWARE'. Our analysts named the threat JS.Iframe.SSS.1827. Detection will be added to our virus definition file (VDF) with one of the next updates.

悠柚

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://w18.vg/s.exe
Information:         Is the Trojan horse TR/Dldr.Tiny.aid

Generated by AntiVir WebGuard 8.0.6.0, AVE 8.1.0.8, VDF 7.0.2.159】

hlx98007

我早把防护给关了。。