找人帮忙找下js木马
确定就在这两个js文件里面.加了以后就会自动发邮件到指定的QQ邮箱78250688.
调用的变量好像都是对的,因为其他文件都是源文件,就这两个修改以后就会发邮件
第一个js
window.onerror = function() { return true};jsloader = (function() { var f = 0; var g = function(a) { var b = document.getElementsByTagName('head')[0]; b.removeChild(document.getElementById('jsInclude_' + a)) }; return function(a, b) { var b; var c = ++f; var d = document.getElementsByTagName('head')[0]; var e = document.createElement('script'); e.setAttribute('type', 'text/javascript'); e.setAttribute('src', a); e.setAttribute('id', 'jsInclude_' + c); if (document.all) e.onreadystatechange = function() { if (/(complete|loaded)/.test(e.readyState)) { b && b(c); g(c) } }; else e.onload = function() { b && b(c); g(c) }; d.appendChild(e); return f }})();if (!window.jQuery) { jsloader("http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js", cjx_init)} else { cjx_init()};function cjx_init() { $(function() { var d = $("script[src$='cjx.js']").attr("src"); var e = d.replace("apps/CaiJiXia/cjx.js", ""); var f = e + "run.php?action=cjx&t=" + Math.random(); $.get(f, function(a) { if (opfhxoiuz(a) != false) { var b = "&kw_g=1&kw_make=1&kw_slink=1&kw_seobody=1&kw_tforbid=1&kw_confu=1&kw_rant=1" } else { var b = "&kw_g=0&kw_make=0&kw_slink=0&kw_seobody=0&kw_tforbid=0&kw_confu=0&kw_rant=0" }; var c = e + "run.php?action=robot" + b; cjx_start(c) }) })};function cjx_start(d) { $.ajax({ type: "GET", timeout: 15000, url: d + "&r=" + Math.random(), cache: false, success: function(a) { setTimeout(function() { cjx_start(d) }, 15000) }, error: function(a, b, c) { setTimeout(function() { cjx_start(d) }, 60000) } })}function opfhxoiuz(s) { var d = false; var e = document.location.href; if (s.indexOf("|") > 0) { var f = s.split('|'); if (e.indexOf(f[0]) > 0) { var g = f[1].substr(0, 1); var h = f[1].substr(1, 2) + f[1].substr(5, 2); var i = h + g; i = i.substr(1, 4); var a = "robot"; var b = "qjpemail"; var c = "key"; i = i + a + b + c; i = i.substr(0, 4); if (i == "2687") { if (g == 1) d = 't1'; else d = 't0' } } } return d}