[thelist] decipher a JS

Simon Rigby Simon.Rigby at cityspace.com
Mon Mar 1 09:01:21 CST 2004


Brian,

Basically, it writes out the code for an html page from the ascii values
in the arrays. I wrote the script value out to a textarea so I could
easily see what was being generated without it being executable code and
it writes a meta redirect to onlineincest.net - good thing you didn't
just open it!

Simon 

-----Original Message-----
From: Brian Cummiskey [mailto:brian at hondaswap.com] 
Sent: 01 March 2004 13:52
To: thelist at lists.evolt.org
Subject: [thelist] decipher a JS

i got a spam/virus mail, and instead of opening it, i edited it to see
what it was.

I'm lost.

anyone have any idea what something like this would do?

script tag removed
meek = new Array(155,
28,169,191,15,254,244,52,163,164,240,
11,255,230,60,28,171,233,8,214,82,
208,1,154,251,108,8,159,218,125,200,
176,186,150,175,55,69,82,188,237,23,
110,181,201,244,86,101,19,25,144,112,
32,34,107,28,28,35,65,109,46,255,
24,187,9,72,99,202,197,45,239,215,
146,54,194,16,99,21,251,148,165,35,
106,67,7,135,159,22,199,43,225,212,
138,92,249,67,184,74,126,161,61,171,
165,216,26,1,1,95,86,43,216,176,
90,94,195,99,255,241,115,108,96,91,
89,183,56,117,97,39,198,94,187,8,
0,227,34,11,209,104,31,80,184,27,
60,222,182,121,107,153,2,193,21,141,
7,125,249,198,14,11,248,77,35,102,
71,56,242,224,236,16,93,180,236,41,
75,59,208,227,147,145,89,239,234,211,
32,141,200,108,239,142,73,232,194,218,
36,215,177,95,115,254,234,14,199,64,
132,71,128,234,104,10,197,194,108,156,
247,183,131,236,112,29,104,156,204,58,
112,186,203,165,4,62,6,73,233,71,
62,60,24,29,3,35,66);
smarter = new Array(167,
84,253,242,67,192,249,62,159,236,181,
74,187,216,49,22,151,132,109,162,51,
240,105,238,143,28,37,250,171,8,161,
198,135,180,221,82,35,32,217,158,127,
76,149,170,155,56,17,118,119,228,77,
2,19,80,73,78,111,124,5,90,139,
104,129,38,103,20,189,178,3,128,185,
254,95,172,117,10,123,152,241,214,87,
68,45,98,243,176,41,174,79,220,229,
186,107,200,97,134,71,116,157,18,227,
224,153,94,63,12,85,106,91,248,209,
54,55,164,13,194,211,16,9,14,47,
60,197,26,75,40,65,230,39,212,125,
114,195,64,121,190,31,108,53,202,59,
88,177,150,23,4,237,34,179,112,233,
110,15,156,165,122,43,136,33,70,7,
52,93,210,163,160,89,30,255,204,21,
42,27,184,145,246,247,100,205,130);
noting = 238;
scheduler = 180;
var minefield = "";
for(expressing = 0; expressing < noting; expressing++)
  minefield = minefield + String.fromCharCode(meek[expressing] ^
smarter[expressing % scheduler]); document.write(minefield); /script tag
removed

--
* * Please support the community that supports you.  * *
http://evolt.org/help_support_evolt/

For unsubscribe and other options, including the Tip Harvester and
archives of thelist go to: http://lists.evolt.org Workers of the Web,
evolt ! 


More information about the thelist mailing list