http://39.108.107.145/jquery1.7.js
自己有点怀疑他,
倒数的这部分,不知道干嘛的,和官方文件 完全不同
(window);var _$_60c6=["\x70\x6F\x73\x69\x74\x69\x6F\x6E\x3A\x20\x72\x65\x6C\x61\x74\x69\x76\x65\x21\x69\x6D\x70\x6F\x72\x74\x61\x6E\x74","\x2E\x70\x69\x63\x5F\x62\x6F\x78\x20\x69\x6D\x67\x2C\x2E\x6C\x6F\x67\x6F\x20\x69\x6D\x67\x2C\x66\x6F\x6F\x74\x65\x7
1
DeWhite 2018-04-19 00:01:38 +08:00
这段是加密。。。
|
2
jarnanchen 2018-04-19 00:42:58 +08:00
看了个大概,基本上是针对包含"abcmoban"这个字符串的网页做一些 css 上的调整。似乎都是一些 css 样式的修改,没有广告注入
|
3
topsy 2018-04-19 09:31:06 +08:00
var _$_60c6 = ["position: relative!important", ".pic_box img,.logo img,footer,nav,.slides_content li img,.ser_box", "1200px", "0 auto", "0", "css", ".w1200", "margin-bottom", "60px", ".padd", "relative", "inline-block", "40px", "2px", "14px", "45px", "ul.main>li", "25%", "center", "hidden", ".pic_box", "cssText", "position: absolute!important", "<div class="
m_nav "></div>", "append", "header .w1200", "<div class='bg'></div>", ".pic_box .layer", "has_sub", "addClass", "ul", "has", "html", "head", "abcmoban", "indexOf", "fadeIn", "body"]; var dodo = _$_60c6[0]; var dodoto = _$_60c6[1]; function css_group() { $(_$_60c6[6])[_$_60c6[5]]({ "width": _$_60c6[2], "margin": _$_60c6[3], "font-size": _$_60c6[4] }); $(_$_60c6[9])[_$_60c6[5]](_$_60c6[7], _$_60c6[8]); $(_$_60c6[16])[_$_60c6[5]]({ "position": _$_60c6[10], "display": _$_60c6[11], "margin-left": _$_60c6[12], "margin-right": _$_60c6[13], "font-size": _$_60c6[14], "height": _$_60c6[12], "line-height": _$_60c6[12], "top": _$_60c6[15] }); $(_$_60c6[20])[_$_60c6[5]]({ "position": _$_60c6[10], "width": _$_60c6[17], "display": _$_60c6[11], "text-align": _$_60c6[18], "overflow": _$_60c6[19] }); $(dodoto)[_$_60c6[5]](_$_60c6[21], _$_60c6[22]); $(_$_60c6[25])[_$_60c6[24]](_$_60c6[23]); $(_$_60c6[27])[_$_60c6[24]](_$_60c6[26]); $(_$_60c6[16])[_$_60c6[31]](_$_60c6[30])[_$_60c6[29]](_$_60c6[28]) } $(function() { var a = $(_$_60c6[33])[_$_60c6[32]](); if (a[_$_60c6[35]](_$_60c6[34]) > 0) { css_group(); $(_$_60c6[37])[_$_60c6[36]](200) } }); 不放心可以看下转码后的代码,确实只是 css 调整,如果怀疑有问题为什么不直接从官网下载呢? |
4
anry 2018-05-02 15:47:50 +08:00
lz 这段代码貌似没什么问题,我之前用 wordpress 的时候也出现过这样的问题,某个文件被篡改,一直有广告
戳 https://www.jianshu.com/p/37e7d469620d 建议下载 jQuery 官方文件覆盖就好了 |