Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.javascript > #23135
| From | "ViLco" <villiber@tin.it> |
|---|---|
| Newsgroups | comp.lang.javascript |
| Subject | Re: Can anyone decode this malware script? |
| Date | 2014-02-17 16:51 +0100 |
| Organization | A noiseless patient Spider |
| Message-ID | <ldtb6o$33q$1@dont-email.me> (permalink) |
| References | <ldt9ai$j4h$2@speranza.aioe.org> <ldtaqf$hr$1@dont-email.me> |
ViLco wrote: > I'd start by converting those hexadecimal values to the corresponding > ascii character. The string ykzjr1 gives http://nursingpharm.com, > probably the remaining part does something in order to redirect the > browser there, check it out Some info on that scammers' site http://www.sitejabber.com/reviews/www.nursingpharm.com -- "Un pasto senza vino e' come un giorno senza sole" Anthelme Brillat Savarin
Back to comp.lang.javascript | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Can anyone decode this malware script? Javascript Guy <"Javascript"@Guy. com> - 2014-02-17 10:22 -0500
Re: Can anyone decode this malware script? "ViLco" <villiber@tin.it> - 2014-02-17 16:45 +0100
Re: Can anyone decode this malware script? "ViLco" <villiber@tin.it> - 2014-02-17 16:51 +0100
Re: Can anyone decode this malware script? Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-02-18 01:21 +0100
csiph-web