• 17-08-2008, 11:42:16
    #1
    Arkadaşlar.Hackhell.com dan aldığım pop up kodu karspersky da trojen uyarısı veriyor.

    Kod bu

    <SCRIPT LANGUAGE="JavaScript"> <!--  
    //frequency cap,1 pop-under per number of hours
    var frequencyCap = 5; //hours 
    function setCookie(cookieName,cookieValue, expirehours) {
    if (frequencyCap > 0){
    var today = new Date();
    var expire = new Date();
    expire.setTime(today.getTime() + 3600000 * frequencyCap);
    document.cookie = cookieName+"="+escape(cookieValue)
    + ";expires="+expire.toGMTString() + "; path=/";
    }else{
    document.cookie = cookieName+"="+escape(cookieValue) + "; path=/";
    }
    }
    function ReadCookie(cookieName) {
    var theCookie=""+document.cookie;
    var ind=theCookie.indexOf(cookieName);
    if (ind==-1 || cookieName=="") return ""; 
    var ind1=theCookie.indexOf(';',ind);
    if (ind1==-1) ind1=theCookie.length; 
    return unescape(theCookie.substring(ind+cookieName.length+1,ind1));
    }
    if (ReadCookie('PayPopupAds31') != 'yes')  
    { 
    setCookie('PayPopupAds31','yes', frequencyCap); 
    //<a href="http://www.hackhell.com">HackheLL</a>
    //Pop-Under Code Here
    document.write('<SCRI'+'PT LANGUAGE="JavaScript1.1" '); 
    document.write(' SRC="http://www.site.com/reklam/reklam.js">');
    document.write('</SCR'+'IPT>'); 
    //Pop-Under Code End
    } 
    // --> </SCRIPT>
    Js si
    function blockError(){return true;}
    
    
    
    window.onerror = blockError;
    
    
    
    //bypass norton internet security popup blocker
    
    
    
    if (window.SymRealWinOpen){window.open = SymRealWinOpen;}
    
    
    
    if (window.NS_ActualOpen) {window.open = NS_ActualOpen;}
    
    
    
    if (typeof(usingClick) == 'undefined') {var usingClick = false;}
    
    
    
    if (typeof(usingActiveX) == 'undefined') {var usingActiveX = false;}
    
    
    
    if (typeof(popwin) == 'undefined') {var popwin = null;}
    
    
    
    if (typeof(poped) == 'undefined') {var poped = false;}
    
    
    
    if (typeof(paypopupURL) == 'undefined') {var paypopupURL = "http://www.hemen100kontor.com/?affiliateID=58695";}
    
    
    
    var blk = 1;
    
    
    
    var setupClickSuccess = false;
    
    
    
    var googleInUse = false;
    
    
    
    var myurl = location.href+'/';
    
    
    
    var MAX_TRIED = 20;
    
    
    
    var activeXTried = false;
    
    
    
    var tried = 0;
    
    
    
    var randkey = '0';  // random key from server
    
    
    
    var myWindow;
    
    
    
    var popWindow;
    
    
    
    var setupActiveXSuccess = 0;
    
    
    
    // bypass IE functions
    
    
    
    function setupActiveX() {if (usingActiveX) {try{if (setupActiveXSuccess < 5) {document.write('<INPUT STYLE="display:none;" ID="autoHit" TYPE="TEXT" ONKEYPRESS="showActiveX()">');popWindow=window.createPopup();popWindow.document.body.innerHTML='<DIV ID="objectRemover"><OBJECT ID="getParentDiv" STYLE="position:absolute;top:100px;left:100px;" WIDTH=800 HEIGHT=600 DATA="'+myurl+'/paypopup.html" TYPE="text/html"></OBJECT></DIV>';document.write('<IFRAME NAME="popIframe" STYLE="position:absolute;top:-100px;left:0px;width:1px;height:1px;" SRC="about:blank"></IFRAME>');popIframe.document.write('<OBJECT ID="getParentFrame" STYLE="position:absolute;top:0px;left:0px;" WIDTH=800 HEIGHT=600 DATA="'+myurl+'/paypopup.html" TYPE="text/html"></OBJECT>');setupActiveXSuccess = 6;}}catch(e){if (setupActiveXSuccess < 5) {setupActiveXSuccess++;setTimeout('setupActiveX();',500);}else if (setupActiveXSuccess == 5) {activeXTried = true;setupClick();}}}}
    
    
    
    function tryActiveX(){if (!activeXTried && !poped) {if (setupActiveXSuccess == 6 && googleInUse && popWindow && popWindow.document.getElementById('getParentDiv') && popWindow.document.getElementById('getParentDiv').object && popWindow.document.getElementById('getParentDiv').object.parentWindow) {myWindow=popWindow.document.getElementById('getParentDiv').object.parentWindow;}else if (setupActiveXSuccess == 6 && !googleInUse && popIframe && popIframe.getParentFrame && popIframe.getParentFrame.object && popIframe.getParentFrame.object.parentWindow){myWindow=popIframe.getParentFrame.object.parentWindow;popIframe.location.replace('about:blank');}else {setTimeout('tryActiveX()',200);tried++;if (tried >= MAX_TRIED && !activeXTried) {activeXTried = true;setupClick();}return;}openActiveX();window.windowFired=true;self.focus();}}
    
    
    
    function openActiveX(){if (!activeXTried && !poped) {if (myWindow && window.windowFired){window.windowFired=false;document.getElementById('autoHit').fireEvent("onkeypress",(document.createEventObject().keyCode=escape(randkey).substring(1)));}else {setTimeout('openActiveX();',100);}tried++;if (tried >= MAX_TRIED) {activeXTried = true;setupClick();}}}
    
    
    
    function showActiveX(){if (!activeXTried && !poped) {if (googleInUse) {window.daChildObject=popWindow.document.getElementById('objectRemover').children(0);window.daChildObject=popWindow.document.getElementById('objectRemover').removeChild(window.daChildObject);}newWindow=myWindow.open(paypopupURL,'Ads','scrollbars=1,resizable=1,menubar=1,location=1,top=10000,left=10000,WIDTH=800,HEIGHT=600');if (newWindow) {newWindow.blur();self.focus();activeXTried = true;poped = true;}else {if (!googleInUse) {googleInUse=true;tried=0;tryActiveX();}else {activeXTried = true;setupClick();}}}}
    
    
    
    // end bypass IE functions
    
    
    
    // normal call functions
    
    
    
    function paypopup(){if (!poped) {if(!usingClick && !usingActiveX) {popwin = window.open(paypopupURL,'Ads','scrollbars=1,resizable=1,menubar=1,location=1,top=10000,left=10000,WIDTH=800,HEIGHT=600');if (popwin) {poped = true;}self.focus();}}if (!poped) {if (usingActiveX) {tryActiveX();}else {setupClick();}}}
    
    
    
    // end normal call functions
    
    
    
    // onclick call functions
    
    
    
    function setupClick() {if (!poped && !setupClickSuccess){if (window.Event) document.captureEvents(Event.CLICK);prePaypopOnclick = document.onclick;document.onclick = gopop;self.focus();setupClickSuccess=true;}}
    
    
    
    function gopop() {if (!poped) {popwin = window.open(paypopupURL,'Ads','scrollbars=1,resizable=1,menubar=1,location=1,top=10000,left=10000,WIDTH=800,HEIGHT=600');if (popwin) {poped = true;}self.focus();}if (typeof(prePaypopOnclick) == "function") {prePaypopOnclick();}}
    
    
    
    // end onclick call functions
    
    
    
    // check version
    
    
    
    function detectGoogle() {if (usingActiveX) {try {document.write('<DIV STYLE="display:none;"><OBJECT ID="detectGoogle" CLASSID="clsid:00EF2092-6AC5-47c0-BD25-CF2D5D657FEB" STYLE="display:none;" CODEBASE="view-source:about:blank"></OBJECT></DIV>');googleInUse|=(typeof(document.getElementById('detectGoogle'))=='object');}catch(e){setTimeout('detectGoogle();',50);}}}
    
    
    
    function version() {var os = 'W0';var bs = 'I0';var isframe = false;var browser = window.navigator.userAgent;if (browser.indexOf('Win') != -1) {os = 'W1';}if (browser.indexOf("SV1") != -1) {bs = 'I2';}else if (browser.indexOf("Opera") != -1) {bs = "I0";}else if (browser.indexOf("Firefox") != -1) {bs = "I0";}else if (browser.indexOf("Microsoft") != -1 || browser.indexOf("MSIE") != -1) {bs = 'I1';}if (top.location != this.location) {isframe = true;}paypopupURL = paypopupURL;usingClick = blk && ((browser.indexOf("SV1") != -1) || (browser.indexOf("Opera") != -1) || (browser.indexOf("Firefox") != -1));usingActiveX = blk && (browser.indexOf("SV1") != -1) && !(browser.indexOf("Opera") != -1) && ((browser.indexOf("Microsoft") != -1) || (browser.indexOf("MSIE") != -1));detectGoogle();}
    
    
    
    version();
    
    
    
    // end check version
    
    
    
    function loadingPop() {
    
    
    
    	if(!usingClick && !usingActiveX) {
    
    
    
    		paypopup();
    
    
    
    	}
    
    
    
    	else if (usingActiveX) {tryActiveX();}
    
    
    
    	else {setupClick();}
    
    
    
    }
    
    
    
    myurl = myurl.substring(0, myurl.indexOf('/',8));
    
    
    
    if (myurl == '') {myurl = '.';}
    
    
    
    setupActiveX();
    
    
    
    loadingPop();
    
    
    
    self.focus();

    Yardımcı olursanız sevinirim.Yada bana sp2 ye takılmayan ve herseferidne açılmayan pop up verirseniz sevinirim tşkler
  • 17-08-2008, 11:45:40
    #2
    Üyeliği durduruldu
    Artık sp3 var unutma
  • 17-08-2008, 11:46:09
    #3
    Kimlik doğrulama veya yönetimden onay bekliyor.
    Regal adlı üyeden alıntı: mesajı görüntüle
    Arkadaşlar.Hackhell.com dan aldığım pop up kodu karspersky da trojen uyarısı veriyor.
    Evet, browserlerden kaçırmayı başardık. Ancak henüz internet security destekli antivirüslerden değil. Üzerinden çalışıyoruz. siteye girdiğinizde, sizde js uyarısı almazsanız, bilin ki başardık. Kopyalıyıp kullanabilirsiniz
  • 17-08-2008, 11:46:28
    #4
    Biliyorum şuan çözüm istiyorum
  • 17-08-2008, 12:45:43
    #5
    Kimlik doğrulama veya yönetimden onay bekliyor.
    ktunnel.com'un popup unu incelemeni tavsiye ederim ie7 de engelliyor fakat tıklayınca açılıyor.Opera 9.51 açılmıyor. 9.25 de açılıyor.(9.25 kullanırken site sorunu bildir demiştim ondan sonra açılmamaya başladı popuplar)