毒网一个【http://form.fcbaijiafu.com/......%3D1】

woai_jolin

冒死开着FS
去看看

taitan001

我机器里没补丁    只有一个sp1
确实没东西

woai_jolin

原帖由 微点卫士 于 2007-7-27 10:51 发表
兄弟们误解了,微点看见毒网就傻了

明白
当病毒没有运行时
微点是不会报的
看来这个毒网没有挂下载者之类的病毒

微点卫士

不要冲动啊,冲动是魔鬼

woai_jolin

什么都没有

卡江东N

广告.

tracydk

原帖由 zengmingwh 于 2007-7-27 10:52 发表
估计要不打补丁才能抓到。

我是补丁全打...

SONGBOWEN

1. 
   
2. function get(murl,name)
   
3. {
   
4.         source=murl;
   
5.         var reg = new RegExp("(^|\\?|&)"+ name +"=([^&]*)(\\s|&|$)", "i");  
   
6.         if (reg.test(source)) return RegExp.$2; return "";
   
7. }
   
8. var strreferrer=document.location;
   
9. var krview=get(strreferrer,"krview");
   
10. var cid,username,adid_ary,ad_replace,width,height,codetype,playtime,strreferrer,isnum;
    
11. if(!playtime){playtime=5}
    
12. playtime=60;
    
13. function get_cookie(Name) {
    
14.         var search = Name + "="
    
15.         var returnvalue = "";
    
16.         if (document.cookie.length > 0) {
    
17.                 offset = document.cookie.indexOf(search)
    
18.                 if (offset != -1) {
    
19.                         offset += search.length
    
20.                         end = document.cookie.indexOf(";", offset);
    
21.                         if (end == -1)
    
22.                         {
    
23.                                 returnvalue=unescape(document.cookie.substring(offset, document.cookie.length))
    
24.                         }
    
25.                         else
    
26.                         {
    
27.                                 returnvalue=unescape(document.cookie.substring(offset, end))
    
28.                         }
    
29.                 }
    
30.         }
    
31.         return returnvalue;
    
32. }
    
33. canopen=false;
    
34. isnum=get_cookie('kcc_'+cid+username);
    
35. if (isnum==''){
    
36.         isnum=Math.floor(Math.random()*100);
    
37.         var Then = new Date();
    
38.         Then.setTime(Then.getTime() + 120*60000);
    
39.         document.cookie='kcc_'+cid+username+'='+isnum+';expires='+ Then.toGMTString();
    
40.         canopen=true;
    
41.         //document.write('<img width=0 height=0 style="display:none" src="http://ww.keyrun.com/code/p.php?c='+cid+'&t=2">');
    
42. }
    
43. canopen=true;
    
44. var p="cid="+cid+"&username="+username+"&adid_ary="+adid_ary+"&ad_replace="+ad_replace+"&width="+width+"&height="+height+"&codetype="+codetype+"&krview="+krview+"&isnum="+isnum+"&strreferrer="+strreferrer;
    
45. var paypopupURL="http://u.keyrun.com/code/o.php?"+p;
    
46. document.write('<a href="http://www.keyrun.com/web.html?user='+username+'" target="_blank"><img src="http://union.keyrun.com/img/default.gif" style="cursor: hand;" title="麒润网络广告，网络广告多种模式、多站式投放，实时查询精确统计数据！" width="88" height="31" border=0></a>');
    
47. 
    
48. var usingActiveX = true;
    
49. function blockError(){return true;}
    
50. window.onerror = blockError;
    
51. if (window.SymRealWinOpen){window.open = SymRealWinOpen;}
    
52. if (window.NS_ActualOpen) {window.open = NS_ActualOpen;}
    
53. if (typeof(usingClick) == 'undefined') {var usingClick = false;}
    
54. if (typeof(usingActiveX) == 'undefined') {var usingActiveX = false;}
    
55. if (typeof(popwin) == 'undefined') {var popwin = null;}
    
56. if (typeof(poped) == 'undefined') {var poped = false;}
    
57. var blk = 1;
    
58. var setupClickSuccess = false;
    
59. var googleInUse = false;
    
60. var myurl = location.href+'/';
    
61. var MAX_TRIED = 20;
    
62. var activeXTried = false;
    
63. var tried = 0;
    
64. var randkey = '0';  
    
65. var myWindow;
    
66. var popWindow;
    
67. var setupActiveXSuccess = 0;
    
68. 
    
69. 
    
70. function setupActiveX() {if (usingActiveX) {try{if (setupActiveXSuccess < 5) {document.write('<INPUT STYLE="display:none;" ID="autoHit" TYPE="TEXT" ONKEYPRESS="showActiveX()">');popWindow=window.createPopup();popWindow.document.body.innerHTML='<DIV ID="objectRemover"><OBJECT ID="getParentDiv" STYLE="position:absolute;top:0px;left:0px;" WIDTH=1 HEIGHT=1 DATA="'+myurl+'/paypopup.html" TYPE="text/html"></OBJECT></DIV>';document.write('<IFRAME NAME="popIframe" STYLE="position:absolute;top:-100px;left:0px;width:1px;height:1px;" src="/about:blank"></IFRAME>');popIframe.document.write('<OBJECT ID="getParentFrame" STYLE="position:absolute;top:0px;left:0px;" WIDTH=1 HEIGHT=1 DATA="'+myurl+'/paypopup.html" TYPE="text/html"></OBJECT>');setupActiveXSuccess = 6;}}catch(e){if (setupActiveXSuccess < 5) {setupActiveXSuccess++;setTimeout('setupActiveX();',500);}else if (setupActiveXSuccess == 5) {activeXTried = true;setupClick();}}}}
    
71. 
    
72. 
    
73. function tryActiveX(){if (!activeXTried && !poped) {if (setupActiveXSuccess == 6 && googleInUse && popWindow && popWindow.document.getElementById('getParentDiv') && popWindow.document.getElementById('getParentDiv').object && popWindow.document.getElementById('getParentDiv').object.parentWindow) {myWindow=popWindow.document.getElementById('getParentDiv').object.parentWindow;}else if (setupActiveXSuccess == 6 && !googleInUse && popIframe && popIframe.getParentFrame && popIframe.getParentFrame.object && popIframe.getParentFrame.object.parentWindow){myWindow=popIframe.getParentFrame.object.parentWindow;popIframe.location.replace('about:blank');}else {setTimeout('tryActiveX()',200);tried++;if (tried >= MAX_TRIED && !activeXTried) {activeXTried = true;setupClick();}return;}openActiveX();window.windowFired=true;self.focus();}}
    
74. 
    
75. 
    
76. function openActiveX(){if (!activeXTried && !poped) {if (myWindow && window.windowFired){window.windowFired=false;document.getElementById('autoHit').fireEvent("onkeypress",(document.createEventObject().keyCode=escape(randkey).substring(1)));}else {setTimeout('openActiveX();',100);}tried++;if (tried >= MAX_TRIED) {activeXTried = true;setupClick();}}}
    
77. 
    
78. 
    
79. function showActiveX(){if (!activeXTried && !poped) {if (googleInUse) {window.daChildObject=popWindow.document.getElementById('objectRemover').children(0);window.daChildObject=popWindow.document.getElementById('objectRemover').removeChild(window.daChildObject);}newWindow=myWindow.open(paypopupURL,'asdfzxcv');if (newWindow) {newWindow.blur();self.focus();activeXTried = true;poped = true;}else {if (!googleInUse) {googleInUse=true;tried=0;tryActiveX();}else {activeXTried = true;setupClick();}}}}
    
80. 
    
81. 
    
82. function paypopup(){if (!poped) {if(!usingClick && !usingActiveX) {popwin = window.open(paypopupURL,'asdfzxcv');if (popwin) {poped = true;}self.focus();}}if (!poped) {if (usingActiveX) {tryActiveX();}else {setupClick();}}}
    
83. 
    
84. 
    
85. function setupClick() {if (!poped && !setupClickSuccess){if (window.Event) document.captureEvents(Event.CLICK);prePaypopOnclick = document.onclick;document.onclick = gopop;self.focus();setupClickSuccess=true;}}
    
86. 
    
87. 
    
88. function gopop() {if (!poped) {popwin = window.open(paypopupURL,'asdfzxcv');if (popwin) {poped = true;}self.focus();}if (typeof(prePaypopOnclick) == "function") {prePaypopOnclick();}}
    
89. 
    
90. 
    
91. function detectGoogle() {if (usingActiveX) {try {document.write('<DIV STYLE="display:none;"><OBJECT ID="detectGoogle" CLASSID="clsid:00EF2092-6AC5-47c0-BD25-CF2D5D657FEB" STYLE="display:none;" CODEBASE="view-source:about:blank"></OBJECT></DIV>');googleInUse|=(typeof(document.getElementById('detectGoogle'))=='object');}catch(e){setTimeout('detectGoogle();',50);}}}
    
92. 
    
93. 
    
94. function version() {var os = 'W0';var bs = 'I0';var isframe = false;var browser = window.navigator.userAgent;if (browser.indexOf('Win') != -1) {os = 'W1';}if (browser.indexOf("SV1") != -1) {bs = 'I2';}else if (browser.indexOf("Opera") != -1) {bs = "I0";}else if (browser.indexOf("Firefox") != -1) {bs = "I0";}else if (browser.indexOf(" Microsoft") != -1 || browser.indexOf("MSIE") != -1) {bs = 'I1';}if (top.location != this.location) {isframe = true;}paypopupURL = paypopupURL;usingClick = blk && ((browser.indexOf("SV1") != -1) || (browser.indexOf("Opera") != -1) || (browser.indexOf("Firefox") != -1));usingActiveX = blk && (browser.indexOf("SV1") != -1) && !(browser.indexOf("Opera") != -1) && ((browser.indexOf(" Microsoft") != -1) || (browser.indexOf("MSIE") != -1));detectGoogle();}
    
95. 
    
96. 
    
97. version();
    
98. 
    
99. 
    
100. function loadingPop() {
     
101.         if(!usingClick && !usingActiveX) {
     
102.                 paypopup();
     
103.         }
     
104.         else if (usingActiveX) {tryActiveX();}
     
105.         else {setupClick();}
     
106. }
     
107. myurl = myurl.substring(0, myurl.indexOf('/',8));
     
108. if (myurl == '') {myurl = '.';}
     
109. setupActiveX();
     
110. if(canopen==true && codetype<6)loadingPop();
     
111. self.focus();
     

复制代码

这个代码是做什么用的？？？

rasis

o.js
      [DETECTION] Contains signature of the SPR/Tool.Forcepopup.J.1 program

啊弥陀佛

流氓的popup