Quote:
|
Originally Posted by fedfest
Got a mail from a surfer saying that his virus blocker whent nuts on my front page, so I check it out and sure enough, burried in the html of the index file theres a string of java code that does not belong 
Checked all sites and found it on 2 other pages too, so looks like some fucker haced into the server and placed the code.. Talking with host about that now.
What i really would like to find out is what this code does, and if it leaves some trail, like to a website or something, so that i can maybe track down who's behind this.. only most of it looks like this "%99%C1%CA%D7%BD%D0%D1%DA%C9%..." so i have no clue what to make of it.. Any script wizzes that can help ?
 |
Did it start like that?
e = '0x00' + '22';str1 = (...)
I got the same one. Itīs a trojan which has to be uploaded through ftp. If itīs the same source code (javascript), you should change your ftp logins at once. Donīt use the same login and pw combination for ftp and for sponsor sites.