你能帮我解密吗?我的博客网站被这样的脚本入侵了

问题描述 投票:0回答:1

这是脚本片段:

var _0xa217=["\x73\x68\x69\x66\x74","\x70\x75\x73\x68","\x6F\x6D","\x6E\x42","\x32\x30\x70\ x78\x3B\x20\x63\x6F\x6C\x6F","\x72\x3A\x23\x31\x34\x31\x37\x32\x30\x3B","\x66\x64\x66\x63\x3B\ x20\x66\x6F\x6E\x74","\x6E\x4C\x20\x3E\x2A\x7B\x6D\x61\x72\x67","\x6F\x63\x6B\x3A\x34\x30\x70\ x78\x7D\x20","\x36\x70\x78\x7D\x20\x2E\x69\x6E\x4C\x63","\x7D\x20\x2E\x69\x6E\x4C\x62\x7B\x74\ x65","\x78\x74\x2D\x74\x72\x61\x6E\x73\x66\x6F","\x0A","\x6E\x4C\x2D\x63\x22\x3E\x0A\x20\x20 \x20","\x6C\x6F\x63\x61\x74\x69\x6F\x6E","\x20\x6C\x65\x67\x61\x6C\x6C\x79\x20\x6F","\x72\ x20\x63\x6F\x6E\x74\x61\x63\x74\x20","\x74\x68\x65\x20\x64\x65\x76\x65\x6C\x6F","\x63\x6C\x61\ x73\x73\x3D\x22\x66\x6C\x65","\x22\x3E\x3A\x20\x4D\x65\x64\x69\x61\x6E","\x20\x20\x20\x3C\x61\ x20\x63\x6C\x61\x73","\x2D\x6C\x61\x62\x65\x6C\x3D\x22\x43\x6F",.....

完整的脚本代码位于此 Google Drive 中: https://drive.google.com/file/d/118nmZiWVJya-GKZdyV_uzPyk2-OrIA4R/view?usp=sharing

我的博客网站被这样的代码入侵,我不知道这意味着什么。请帮助我。

javascript blogger
1个回答
0
投票

它已被混淆,这是使用 deobfuscate.io 进行反混淆的第一个位:

var license_0x47ae09 = license_0x5084;
(function (bahja, pender) {
  var sharnika = license_0x5084;
  var denesa = bahja();
  while (true) {
    try {
      var lissandro = parseInt(sharnika(395)) / 1 + parseInt(sharnika(393)) / 2 + parseInt(sharnika(440)) / 3 * (parseInt(sharnika(298)) / 4) + parseInt(sharnika(170)) / 5 * (parseInt(sharnika(192)) / 6) + -parseInt(sharnika(353)) / 7 * (-parseInt(sharnika(249)) / 8) + -parseInt(sharnika(189)) / 9 * (parseInt(sharnika(347)) / 10) + -parseInt(sharnika(429)) / 11;
      if (lissandro === pender) {
        break;
      } else {
        denesa.push(denesa.shift());
      }
    } catch (ebubechukwu) {
      denesa.push(denesa.shift());
    }
  }
}(license_0x79eb, 455365));
dataProduct = license_0x47ae09(331);
databaseDomain = license_0x47ae09(385) + license_0x47ae09(199) + "om";
triggerError = "nB";
triggerType = license_0x47ae09(283);
const cssFixed = license_0x47ae09(311) + license_0x47ae09(388) + license_0x47ae09(226) + license_0x47ae09(168) + license_0x47ae09(390) + license_0x47ae09(314) + "20px; colo" + "r:#141720;" + license_0x47ae09(386) + license_0x47ae09(181) + "fdfc; font" + license_0x47ae09(169) + license_0x47ae09(278) + license_0x47ae09(342) + "nL >*{marg" + license_0x47ae09(231) + license_0x47ae09(409) + license_0x47ae09(285) + license_0x47ae09(329) + license_0x47ae09(261) + "ock:40px} " + license_0x47ae09(442) + license_0x47ae09(167) + "6px} .inLc" + license_0x47ae09(207) + license_0x47ae09(404) + license_0x47ae09(293) + license_0x47ae09(282) + license_0x47ae09(387) + "} .inLb{te" + "xt-transfo" + license_0x47ae09(325) + license_0x47ae09(264) + license_0x47ae09(400) + "\n";
const htmlFixed = license_0x47ae09(172) + license_0x47ae09(312) + license_0x47ae09(270) + license_0x47ae09(299) + license_0x47ae09(291) + 'nL-c">\n   ' + license_0x47ae09(305) + license_0x47ae09(302) + license_0x47ae09(335) + license_0x47ae09(416) + window.location[license_0x47ae09(220)] + (license_0x47ae09(345) + license_0x47ae09(324) + license_0x47ae09(384) + license_0x47ae09(222) + " legally o" + "r contact " + "the develo" + license_0x47ae09(310) + license_0x47ae09(173) + license_0x47ae09(362) + license_0x47ae09(224) + license_0x47ae09(291) + license_0x47ae09(318) + license_0x47ae09(349) + license_0x47ae09(420) + 'class="fle' + license_0x47ae09(179) + license_0x47ae09(238) + license_0x47ae09(373) + '">: Median' + license_0x47ae09(242) + license_0x47ae09(213) + license_0x47ae09(174) + license_0x47ae09(237) + license_0x47ae09(364) + license_0x47ae09(421) + license_0x47ae09(346) + license_0x47ae09(377) + license_0x47ae09(204) + license_0x47ae09(194) + license_0x47ae09(229) + license_0x47ae09(431) + license_0x47ae09(218) + license_0x47ae09(380) + license_0x47ae09(307) + "   <a clas" + license_0x47ae09(369) + license_0x47ae09(200) + license_0x47ae09(339) + '-label="Co' + 'ntact us" ' + license_0x47ae09(182) + license_0x47ae09(319) + license_0x47ae09(199) + license_0x47ae09(183) + license_0x47ae09(308) + "      <spa" + license_0x47ae09(303) + license_0x47ae09(251) + license_0x47ae09(171) + ' class="li' + license_0x47ae09(328) + license_0x47ae09(424) + license_0x47ae09(257) + 'h d="M14.4' + "301 5.9299" + "3L20.5001 " + "11.9999L14" + ".4301 18.0" + license_0x47ae09(239) + license_0x47ae09(394) + license_0x47ae09(289) + license_0x47ae09(344) + license_0x47ae09(269) + license_0x47ae09(236) + license_0x47ae09(368) + license_0x47ae09(244));
function showPopUpEror() {
  var lashawnta = license_0x47ae09;
  var ovi = {AuRIT: lashawnta(292), Jbrsa: lashawnta(254), BpzwR: function (melaynie, naiya) {
    return melaynie == naiya;
  }, jdUBD: lashawnta(283), tEcNZ: function (rumsey, elizha, arlesia) {
    return rumsey(elizha, arlesia);
  }, hTrlh: "interval", nPUlx: function (eberardo, bonard, triva) {
    return eberardo(bonard, triva);
  }};
  var yoona = document[lashawnta(217) + "ent"](ovi[lashawnta(260)]);
  var reneasha = document["createElem" + lashawnta(370)](ovi[lashawnta(295)]);
  reneasha[lashawnta(296)] = cssFixed;
  yoona.innerHTML = htmlFixed;
  document[lashawnta(284)][lashawnta(355)](reneasha);
  if (ovi[lashawnta(363)](triggerType, ovi[lashawnta(326)])) {
    ovi[lashawnta(211)](setTimeout, function () {
      var brayston = lashawnta;
      document[brayston(316)][brayston(296)] = "";
      document[brayston(316)].append(yoona);
    }, 500);
  }
  ;
  if (ovi[lashawnta(363)](triggerType, ovi[lashawnta(273)])) {
    ovi[lashawnta(235)](setInterval, function () {
      var aneva = lashawnta;
      document[aneva(316)][aneva(296)] = "";
      document[aneva(316)][aneva(355)](yoona);
    }, 500);
  }
}
if (document[license_0x47ae09(435) + license_0x47ae09(248)](triggerError)) {
  var StatusActiveDomain = function (rashanna) {
    var veyonce = license_0x47ae09;
    var avanthika = {dwcsB: function (kaveah, domineek) {
      return kaveah == domineek;
    }, gsYKc: function (joneer) {
      return joneer();
    }, QRvay: veyonce(360) + veyonce(397) + "ive! Buy t" + veyonce(376) + "legally to" + veyonce(208) + "s."};
    if (avanthika[veyonce(184)](rashanna, false)) {
      avanthika[veyonce(351)](showPopUpEror);
      console[veyonce(197)](avanthika.QRvay);
    }
    ;
    if (avanthika[veyonce(184)](rashanna, true)) {
      console[veyonce(197)]("Your domai" + veyonce(188) + veyonce(341) + "ou for buy" + veyonce(315) + veyonce(281) + veyonce(258));
    }
  };
} else {
  showPopUpEror();
}
;
function getFeeds(latascha, tawne) {
  var roula = license_0x47ae09;
  var aashini = {};
  aashini[roula(443)] = roula(245);
  aashini[roula(265)] = roula(338);
  var zoha = aashini;
  var glennis = zoha[roula(443)][roula(352)]("|");
  var irlanda = 0;
  while (true) {
    switch (glennis[irlanda++]) {
      case "0":
        document[roula(435) + roula(248)]("databaseJson")[roula(358)]();
        continue;
      case "1":
        document[roula(284)][roula(355)](javeya);
        continue;
      case "2":
        var javeya = document[roula(217) + "ent"](zoha[roula(265)]);
        continue;
      case "3":
        javeya.id = "databaseJson";
        continue;
      case "4":
        javeya.src = latascha + tawne;
        continue;
    }
    ;
    break;
  }
}
getFeeds("//" + databaseDomain + (license_0x47ae09(288) + license_0x47ae09(255) + license_0x47ae09(415) + license_0x47ae09(414) + license_0x47ae09(175) + license_0x47ae09(410) + license_0x47ae09(372) + license_0x47ae09(196) + "ck="), license_0x47ae09(412) + license_0x47ae09(401));
function license_0x5084(rashya, claritsa) {
  var luster = license_0x79eb();
  license_0x5084 = function (azelia, dolphus) {
    azelia = azelia - 166;
    var darinesha = luster[azelia];
    return darinesha;
  };
  return license_0x5084(rashya, claritsa);
}
function checkDomainData(oluwatoyin) {
  var minde = license_0x47ae09;
  var mertle = {XUVLY: "12|1|0|9|8" + minde(371) + minde(263) + "5", RtzpO: function (cipriana, kernell) {
    return cipriana > kernell;
  }, dAjNK: function (nayli, treves) {
    return nayli <= treves;
  }, bBwbE: function (tapatha, arbedella) {
    return tapatha < arbedella;
  }, FxSGt: function (gessell, qwanisha) {
    return gessell === qwanisha;
  }, ufncN: function (ridah, breeaunna) {
    return ridah === breeaunna;
  }, mRHqF: minde(378) + minde(383), uyOCg: function (drennen, daizja, glenva) {
    return drennen(daizja, glenva);
  }, ZoagI: function (marranda, kahlia) {
    return marranda + kahlia;
  }, Haplm: minde(186) + minde(437) + "callback=", NcePu: function (francene, allessa) {
    return francene < allessa;
  }};
  var batu = mertle.XUVLY.split("|");
  var eland = 0;
  while (true) {
    switch (batu[eland++]) {
      case "0":
        if (mertle[minde(177)](chakia, 150)) {
          var elouisa = 150;
        }
        ;
        continue;
      case "1":
        var chakia = shresht[minde(279) + "$totalResu" + minde(327)].$t;
        continue;
      case "2":
        var marjorine = new Array;
        continue;
      case "3":
        ;
        ;
        continue;
      case "4":
        ;
        ;
        continue;
      case "5":
        ;
        ;
        continue;
      case "6":
        var chanc = new Array;
        continue;
      case "7":
        ;
        ;
        continue;
      case "8":
        if (mertle[minde(193)](chakia, 150)) {
          var elouisa = chakia;
        }
        ;
        continue;
      case "9":
        ;
        ;
        continue;
      case "10":
        for (var krymson = 0; mertle.bBwbE(krymson, elouisa); krymson++) {
          if (mertle[minde(317)](shresht[minde(225)][krymson][minde(408)].$t, undefined)) {} else {
            chanc[krymson] = shresht[minde(225)][krymson][minde(408)].$t;
          }
        }
        ;
        continue;
      case "11":
        if (mertle[minde(247)](marjorine[chanc[minde(250)](dataProduct)], undefined)) {
          console[minde(197)](mertle[minde(294)]);
        } else {
          mertle[minde(230)](getFeeds, mertle[minde(216)](marjorine[chanc[minde(250)](dataProduct)], mertle[minde(411)]), minde(412) + minde(180));
        }
        ;
        continue;
      case "12":
        var shresht = oluwatoyin.feed;
        continue;
      case "13":
        for (var liler = 0; mertle[minde(228)](liler, elouisa); liler++) {
          if (shresht[minde(225)][liler][minde(432)][3] === undefined) {
            if (mertle.ufncN(shresht.entry[liler][minde(432)][1][minde(215)], undefined)) {} else {
              marjorine[liler] = shresht[minde(225)][liler][minde(432)][1][minde(210)];
            }
          } else {
            marjorine[liler] = shresht[minde(225)][liler][minde(432)][3][minde(210)];
          }
        }
        ;
        continue;
    }
    ;
    break;
  }
}
function checkDomainTitle(jalaiah) {
  var sosefina = license_0x47ae09;
  var kernis = {TrbTs: function (dantasia, mariacamila) {
    return dantasia === mariacamila;
  }, IuFAl: function (tametria, bevelyn) {
    return tametria < bevelyn;
  }, fXDYq: function (disha, richel) {
    return disha(richel);
  }, qiTdv: function (addesyn, beauti) {
    return addesyn(beauti);
  }};
  if (kernis[sosefina(191)](jalaiah[sosefina(225)][sosefina(391)], undefined)) {} else {
    var ivena = jalaiah.entry[sosefina(391)].$t;
    if (kernis[sosefina(240)](ivena.indexOf(window[sosefina(309)][sosefina(220)]), 0)) {
      kernis[sosefina(407)](StatusActiveDomain, true);
    } else {
      kernis[sosefina(256)](StatusActiveDomain, true);
    }
  }
}
document[license_0x47ae09(435) + license_0x47ae09(367) + "me"]("nB")[0][license_0x47ae09(266)][license_0x47ae09(358)]("nJs");
var inputs = document[license_0x47ae09(203) + license_0x47ae09(274)](".widget input[type=search], .w" + license_0x47ae09(403) + license_0x47ae09(201) + license_0x47ae09(406) + license_0x47ae09(375) + "pe=email]," + " .widget t" + license_0x47ae09(187));
for (var i = 0; i < inputs.length; i++) {
  var input = inputs[i];
  input[license_0x47ae09(198) + license_0x47ae09(185)]("input", function () {
    var zuheyla = license_0x47ae09;
    var giovannina = {};
    giovannina.MFCYA = zuheyla(379);
    giovannina[zuheyla(323)] = zuheyla(320);
    var kaidra = giovannina;
    var kyliam = this.value ? kaidra[zuheyla(428)] : kaidra[zuheyla(323)];
    this[zuheyla(419) + "te"]("data-filled", kyliam);
  });
}
;
window[license_0x47ae09(433)] = function () {
  var vaidehi = license_0x47ae09;
  var kailiyah = {};
  kailiyah.OrdrR = ".mainH";
  kailiyah[vaidehi(259)] = function (kriston, riylee) {
    return kriston > riylee;
  };
  kailiyah[vaidehi(423)] = function (branisha, shekayla) {
    return branisha > shekayla;
  };
  var geralene = kailiyah;
  const coletha = document[vaidehi(203) + vaidehi(354)](geralene[vaidehi(297)])[vaidehi(266)];
  if (geralene.NtCgM(document[vaidehi(316)][vaidehi(280)], 20) || geralene.GYhJJ(document[vaidehi(436) + vaidehi(434)][vaidehi(280)], 20)) {
    coletha[vaidehi(268)]("s");
  } else {
    coletha[vaidehi(358)]("s");
  }
};
(function () {
  var janaki = license_0x47ae09;
  var delno = {};
  delno[janaki(321)] = janaki(330) + "3";
  delno.HwjXY = "iframe";
  delno.EPlWw = janaki(389) + janaki(426);
  delno[janaki(241)] = janaki(348) + "r";
  delno[janaki(405)] = janaki(357);
  delno[janaki(417)] = function (karil, celleste) {
    return karil + celleste;
  };
  delno[janaki(333)] = function (sytha, eduardo) {
    return sytha + eduardo;
  };
  delno[janaki(350)] = janaki(337) + "w.youtube." + janaki(445);
  delno[janaki(334)] = ".lazyYt";
  delno.JkmRS = function (kyriana, taimak) {
    return kyriana < taimak;
  };
  delno[janaki(246)] = janaki(322) + janaki(232);
  delno[janaki(277)] = janaki(306);
  delno[janaki(300)] = janaki(209) + janaki(223);
  delno[janaki(286)] = janaki(356);
  delno[janaki(427)] = "alt";
  delno[janaki(336)] = janaki(206) + janaki(178);
  var clauzell = delno;
  var lillynn = document[janaki(203) + janaki(274)](clauzell[janaki(334)]);
  for (var roko = 0; clauzell.JkmRS(roko, lillynn[janaki(313)]); roko++) {
    var kiele = clauzell[janaki(246)][janaki(352)]("|");
    var khadar = 0;
    while (true) {
      switch (kiele[khadar++]) {
        case "0":
          sendi.setAttribute("data-src", yannah);
          continue;
        case "1":
          var sendi = new Image;
          continue;
        case "2":
          sendi.setAttribute(clauzell.fvolm, janaki(195));
          continue;
        case "3":
          sendi[janaki(198) + janaki(185)](janaki(399), function () {
            var shavonda = janaki;
            lillynn[roko][shavonda(392) + "d"](sendi);
          }(roko));
          continue;
        case "4":
          sendi[janaki(419) + "te"](janaki(357), "data:image/png;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs=");
          continue;
        case "5":
          var yannah = clauzell[janaki(333)]("https://im" + janaki(381) + janaki(366), lillynn[roko][janaki(227)][janaki(343)]) + clauzell[janaki(300)];
          continue;
        case "6":
          lillynn[roko].addEventListener(clauzell[janaki(286)], function () {
            var savaughn = janaki;
            var keiryn = clauzell[savaughn(321)][savaughn(352)]("|");
            var rayven = 0;
            while (true) {
              switch (keiryn[rayven++]) {
                case "0":
                  var ravae = document[savaughn(217) + "ent"](clauzell[savaughn(425)]);
                  continue;
                case "1":
                  ravae[savaughn(419) + "te"](clauzell.EPlWw, "");
                  continue;
                case "2":
                  this[savaughn(296)] = "";
                  continue;
                case "3":
                  this[savaughn(392) + "d"](ravae);
                  continue;
                case "4":
                  ravae[savaughn(419) + "te"](clauzell[savaughn(241)], "0");
                  continue;
                case "5":
                  ravae.setAttribute(clauzell[savaughn(405)], clauzell.cbFSD(clauzell[savaughn(333)](clauzell[savaughn(350)], this.dataset[savaughn(343)]), "?rel=0&showinfo=0&au" + savaughn(422)));
                  continue;
              }
              ;
              break;
            }
          });
          continue;
        case "7":
          sendi[janaki(419) + "te"](clauzell[janaki(427)], clauzell[janaki(336)]);
          continue;
      }
      ;
      break;
    }
  }
}());
var license_0x1b0d17 = {};
license_0x1b0d17.rootMargin = "1px";
Defer[license_0x47ae09(190)](license_0x47ae09(398), 100, license_0x47ae09(361), null, license_0x1b0d17), license_0x47ae09(267) != typeof infinite_scroll && infinite_scroll.on("load", function () {
  var stanely = license_0x47ae09;
  var quindara = {};
  quindara[stanely(441)] = stanely(396);
  var haydee = quindara;
  var anupriya = {};
  anupriya[stanely(252)] = haydee[stanely(441)];
  Defer[stanely(190)](stanely(398), 100, stanely(361), null, anupriya);
});
const docHeight = () => {
  var dvaughn = license_0x47ae09;
  var zahavi = {};
  zahavi[dvaughn(304)] = ".nB";
  zahavi[dvaughn(287)] = dvaughn(253);
  var dailee = zahavi;
  const tymberlynn = document["querySelec" + dvaughn(354)](dailee[dvaughn(304)]);
  tymberlynn[dvaughn(254)][dvaughn(301) + "y"](dailee[dvaughn(287)], window.innerHeight + "px");
};
window[license_0x47ae09(198) + "stener"]("resize", docHeight);
function license_0x79eb() {
  var leisy = ["NcePu", "agodesain.", "uyOCg", "in:auto; m", "7|3|6", "light", "msapplicat", "nPUlx", "    </a>\n ", "flex basel", '" data-tex', '699"></pat', "IuFAl", "dvIcd", " UI</span>", "r-style]", "div>\n", "2|4|3|1|0", "pXixm", "ufncN", "ById", "6733880uMKepo", "indexOf", "us</span>\n", "rootMargin", "--vHeight", "style", "ts/summary", "qiTdv", '4 24"><pat', "ly.", "NtCgM", "AuRIT", " margin-bl", "SKeJs", "3|10|4|11|", "se; font-w", "MZJlr", "classList", "undefined", "add", "th></svg>\n", "x cInherit", "amQrH", "irDHU", "hTrlh", "torAll", "dark", ".nB", "fvolm", ";line-heig", "openSearch", "scrollTop", "heme legal", "text); fle", "timeout", "head", "20px} .inL", "jgvXE", "ixDJA", "/feeds/pos", '"M3.5 12H2', "#1e1e1e", 'v class="i', "div", "attr(data-", "mRHqF", "Jbrsa", "innerHTML", "OrdrR", "8SFRMYZ", ' u">\n  <di', "zdqnd", "setPropert", "'note wr'>", "n>Contact ", "iiAhC", " <p class=", "class", "  </div>\n ", 'ct.html">\n', "location", "per to act", "\n.inL{widt", 's="inL fle', "length", ");padding:", "ing this t", "body", "FxSGt", "nLc flex c", "s://www.ja", "false", "TILNQ", "5|1|2|0|4|", "ciugX", "t register", "rm:upperca", "jdUBD", "lts", 'ne r" view', "c{gap:5px;", "0|4|1|5|2|", "Median UI", "NeAai", "hBMia", "gNmGq", "The domain", "EvyYy", "https://ww", "script", ' i18" aria', "meta[name=", "e! Thank y", "ht:1.4} .i", "embed", '0.33"></pa', "</u> is no", ">: <a clas", "50gUMaNf", "frameborde", 'olumn">\n  ', "uZfjl", "gsYKc", "split", "7wGGSZf", "tor", "append", "click", "src", "remove", "kJZet", "Your domai", "loaded", " domain.</", "BpzwR", 'ine" data-', "le-web-app", "com/vi/", "sByClassNa", " </div>\n</", 's="inLb bu', "ent", "|7|2|6|13|", "-results=9", 't="Product', "default", "t input[ty", "his theme ", 's="extL" h', "Feed not f", "true", "</span>\n  ", "g.youtube.", "ion-navbut", "ound", "ed. Buy th", "license.ja", "background", "x:0 0 80px", "h:100%;hei", "allowfulls", "(--vHeight", "content", "appendChil", "1402098zHFeEZ", "h><path d=", "51700Cfnxjc", "1px", "n is inact", ".lazy", "load", "eight:500}", "nData", "Kfrja", "idget inpu", "e{content:", "kSwGR", "t], .widge", "fXDYq", "title", "ax-width:4", "pdated&max", "Haplm", "checkDomai", "PhOCe", "-in-script", "/?alt=json", " <u>", "cbFSD", "aYiGC", "setAttribu", "    <span ", 'text="Web"', "toplay=1", "GYhJJ", 'Box="0 0 2', "HwjXY", "creen", "sLPYZ", "MFCYA", "13777181MdYxPs", "FGSsY", 'com">Jago ', "link", "onscroll", "ement", "getElement", "documentEl", "in-script&", "apple-mobi", "TNdDP", "463107yqTcQF", "TaCBB", ".inLc >*{c", "vorWZ", "setItem", "com/embed/", "-status-ba", "olumn-gap:", "height:var", "-size:14px", "5rcdWJZ", "      <svg", "\n<div clas", "ivate this", 'an class="', "&orderby=u", "theme", "RtzpO", "deo", "x baseline", "nTitle", "-color:#ff", 'href="http', "om/p/conta", "dwcsB", "stener", "?alt=json-", "extarea", "n is activ", "446373DoIZWS", "dom", "TrbTs", "315594iRcPPM", "dAjNK", "://theme.j", "lazy", "999&callba", "log", "addEventLi", "godesain.c", "tton sc op", "t[type=tex", "getAttribu", "querySelec", 'ref="https', "ton-color]", "Youtube vi", " >*::befor", " support u", "/sddefault", "href", "tEcNZ", "MkoWc", "\n      <sp", "getItem", "rel", "ZoagI", "createElem", "Desain</a>", "uDLnz", "hostname", "nQMVr", "is product", ".jpg", "p>\n    <di", "entry", "ght:100vh;", "dataset"];
  license_0x79eb = function () {
    return leisy;
  };
  return license_0x79eb();
}
docHeight();
const d = document, l = localStorage, b = d["querySelec" + license_0x47ae09(354)](license_0x47ae09(276)), m = d["querySelec" + license_0x47ae09(354)](license_0x47ae09(340) + "theme-colo" + "r]"), mM = d[license_0x47ae09(203) + license_0x47ae09(354)](license_0x47ae09(340) + license_0x47ae09(234) + license_0x47ae09(382) + license_0x47ae09(205)), mA = d[license_0x47ae09(203) + license_0x47ae09(354)](license_0x47ae09(340) + license_0x47ae09(438) + license_0x47ae09(365) + license_0x47ae09(166) + license_0x47ae09(243)), c = m.getAttribute(license_0x47ae09(391)), cM = mM[license_0x47ae09(202) + "te"]("content"), cA = mA[license_0x47ae09(202) + "te"]("content"), iniTheme = license_0x47ae09(374), setTheme = simitrio => {
  var eleyna = license_0x47ae09;
  var karen = {};
  karen[eleyna(413)] = function (pierino, jevin) {
    return pierino === jevin;
  };
  karen.TNdDP = "dark";
  karen[eleyna(212)] = eleyna(391);
  karen[eleyna(402)] = eleyna(290);
  karen[eleyna(359)] = eleyna(176);
  karen[eleyna(332)] = "default";
  karen.aYiGC = eleyna(233);
  var kenishia = karen;
  b.setAttribute("data-theme", simitrio);
  if (kenishia[eleyna(413)](simitrio, kenishia[eleyna(439)])) {
    m.setAttribute(kenishia.MkoWc, kenishia[eleyna(402)]);
    mM[eleyna(419) + "te"](kenishia[eleyna(212)], eleyna(290));
    mA.setAttribute(kenishia[eleyna(212)], kenishia.Kfrja);
  } else {
    m[eleyna(419) + "te"](kenishia[eleyna(212)], c);
    mM.setAttribute(kenishia[eleyna(212)], cM);
    mA[eleyna(419) + "te"](eleyna(391), cA);
  }
  ;
  switch (simitrio) {
    case eleyna(374):
      l.setItem(kenishia[eleyna(359)], kenishia[eleyna(332)]);
      break;
    case eleyna(275):
      l[eleyna(444)](kenishia[eleyna(359)], eleyna(275));
      break;
    case kenishia[eleyna(418)]:
      l[eleyna(444)](eleyna(176), kenishia[eleyna(418)]);
      break;
  }
}, setThemeOn = () => {
  var lesliee = license_0x47ae09;
  var hudaifa = {nQMVr: lesliee(176), FGSsY: function (shatasha, anvee) {
    return shatasha(anvee);
  }, SKeJs: function (royalene, haider) {
    return royalene === haider;
  }, amQrH: "dark", irDHU: lesliee(391), uDLnz: lesliee(290)};
  saveTheme = l[lesliee(214)](hudaifa[lesliee(221)]);
  saveTheme ? b[lesliee(419) + "te"]("data-theme", saveTheme) : hudaifa[lesliee(430)](setTheme, iniTheme);
  if (hudaifa[lesliee(262)](saveTheme, hudaifa[lesliee(271)])) {
    m.setAttribute(hudaifa[lesliee(272)], lesliee(290));
    mM[lesliee(419) + "te"](hudaifa[lesliee(272)], hudaifa[lesliee(219)]);
    mA.setAttribute(hudaifa[lesliee(272)], hudaifa[lesliee(219)]);
  } else {
    m[lesliee(419) + "te"](hudaifa[lesliee(272)], c);
    mM[lesliee(419) + "te"](hudaifa[lesliee(272)], cM);
    mA[lesliee(419) + "te"](hudaifa[lesliee(272)], cA);
  }
};
setThemeOn();

看起来是勒索软件,删除文件即可。

© www.soinside.com 2019 - 2024. All rights reserved.