Page is a not externally linkable
- WebmasterWorld
-- Webmaster General
---- decipher a chunk of malware


SteveWh - 4:54 pm on Jul 6, 2010 (gmt 0)


An initial guess would be that each 2 digit pair is the hex code for an ASCII char. By that method, the first 8 digits decode to 0D0A, which is a carriage return + line feed.

Another guess is that the string is decoded or transformed by the inurl.js file fetched from the remote site.


Thread source:: http://www.webmasterworld.com/webmaster/4165201.htm
Brought to you by WebmasterWorld: http://www.webmasterworld.com