Advertisement
Guest User

Quttera web malware scanner detected suspicious decoder

a guest
Jul 20th, 2013
113
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. /*
  2.  * Quttera web malware scanner detected
  3.  * suspicious packed decryption module
  4.  */
  5.  
  6. eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('9 f="x+/=";p e(a){a=y(a);9 b="";9 c,7,8="";9 d,g,1,5="";9 i=0;q{c=a.m(i++);7=a.m(i++);8=a.m(i++);d=c>>2;g=((c&3)<<4)|(7>>4);1=((7&r)<<2)|(8>>6);5=8&z;j(s(7)){1=5=k}A j(s(8)){5=k}b=b+f.h(d)+f.h(g)+f.h(1)+f.h(5);c=7=8="";d=g=1=5=""}t(i<a.u);v b}p w(a){9 b="";9 c,7,8="";9 d,g,1,5="";9 i=0;q{d=f.l(a.h(i++));g=f.l(a.h(i++));1=f.l(a.h(i++));5=f.l(a.h(i++));c=(d<<2)|(g>>4);7=((g&r)<<4)|(1>>2);8=((1&3)<<6)|5;b=b+n.o(c);j(1!=k){b=b+n.o(7)}j(5!=k){b=b+n.o(8)}c=7=8="";d=g=1=5=""}t(i<a.u);v B(b)}',38,38,'|enc3||||enc4||chr2|chr3|var||||||keyStr|enc2|charAt||if|64|indexOf|charCodeAt|String|fromCharCode|function|do|15|isNaN|while|length|return||ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789|escape|63|else|unescape'.split('|'),0,{}))
  7.  
  8. /*
  9.  * decoded decryption module
  10.  */
  11. var keyStr = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
  12.  
  13. function e(a) {
  14.     a = escape(a);
  15.     var b = "";
  16.     var c, chr2, chr3 = "";
  17.     var d, enc2, enc3, enc4 = "";
  18.     var i = 0;
  19.     do {
  20.         c = a.charCodeAt(i++);
  21.         chr2 = a.charCodeAt(i++);
  22.         chr3 = a.charCodeAt(i++);
  23.         d = c >> 2;
  24.         enc2 = ((c & 3) << 4) | (chr2 >> 4);
  25.         enc3 = ((chr2 & 15) << 2) | (chr3 >> 6);
  26.         enc4 = chr3 & 63;
  27.         if (isNaN(chr2)) {
  28.             enc3 = enc4 = 64
  29.         } else if (isNaN(chr3)) {
  30.             enc4 = 64
  31.         }
  32.         b = b + keyStr.charAt(d) + keyStr.charAt(enc2) + keyStr.charAt(enc3) + keyStr.charAt(enc4);
  33.         c = chr2 = chr3 = "";
  34.         d = enc2 = enc3 = enc4 = ""
  35.     } while (i < a.length);
  36.     return b
  37. }
  38.  
  39. function w(a) {
  40.     var b = "";
  41.     var c, chr2, chr3 = "";
  42.     var d, enc2, enc3, enc4 = "";
  43.     var i = 0;
  44.     do {
  45.         d = keyStr.indexOf(a.charAt(i++));
  46.         enc2 = keyStr.indexOf(a.charAt(i++));
  47.         enc3 = keyStr.indexOf(a.charAt(i++));
  48.         enc4 = keyStr.indexOf(a.charAt(i++));
  49.         c = (d << 2) | (enc2 >> 4);
  50.         chr2 = ((enc2 & 15) << 4) | (enc3 >> 2);
  51.         chr3 = ((enc3 & 3) << 6) | enc4;
  52.         b = b + String.fromCharCode(c);
  53.         if (enc3 != 64) {
  54.             b = b + String.fromCharCode(chr2)
  55.         }
  56.         if (enc4 != 64) {
  57.             b = b + String.fromCharCode(chr3)
  58.         }
  59.         c = chr2 = chr3 = "";
  60.         d = enc2 = enc3 = enc4 = ""
  61.     } while (i < a.length);
  62.     return unescape(b)
  63. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement