

<script language="JavaScript" type="text/javascript" src="/abc/abc.js"></script>
(abc代表真实路径,在这我就不公布,做人要厚道:-))找到这个JS文件的真实路径把这个JS文件下载了下来,打开JS文件发现如下代码:
document.writeln("<iframe scrolling='no' frameborder='0' marginheight='0' marginwidth='0' width='750' height='270' allowTransparency src=/abc/abc_ad.htm></iframe>");
我本来以为到这一步就可以看到庐山真面目了,没想到还没完,打开abc_ad.htm页面,查看源代码:<html>
<head>
<meta http-equiv="Content-Language" content="zh-cn">
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>广告位</title>
<style type="text/css">
body { font-size: 12px; font-family: 宋体;margin: 0px;}
td { font-size: 12px; font-family: 宋体; line-height: 18px;}
a {color: #111111; text-decoration: none}
a:hover { color: #ff8c40; text-decoration: underline}
</style>
</head>
<body>
<iframe scrolling='no' frameborder='0' marginheight='0' marginwidth='0' width='770' height='265' allowTransparency src=http://www.abc.com/abc.htm></iframe>
<br>
</body>
</html>









