oops, replied instead of replying to all

---------- Forwarded message ----------
From: Ben Wiley Sittler <bsittler <at> gmail.com>
Date: Jul 23, 2006 12:06 PM
Subject: Re: [FoRK] What does this Javascript do?
To: Corinna <corinna.schultz <at> gmail.com>

not malicious. it's a matrix-style "falling green numbers" animated
effect written to the internet explorer document object model (works
in opera too.) the comments look to be turkish (or at least a turkic
language,) but translationbooth.com's free turkish -> english produced
nothing particularly interesting...

also, that's not really obfuscated, just compact ;)

On 7/22/06, Corinna <corinna.schultz <at> gmail.com> wrote:
> I don't know too much JS, and the main thing
> I'm wondering is if this code does anything
> malicious. A blog I frequet was hacked today
> and was replaced by a page which contained
> this JS. It's obviously written in an
> obfuscatory manner...
>
> ------
>
> if (document.all){
> Cols=22;
> Cl=24; //Peşpeşe geliş mesafeleri!
> Cs=100; //Sayfaya enine yayılış mesafeleri!
> Ts=10; //Rakamların büyüklükleri!
> Tc='#008800';//Renk
> Tc1='#00ff00';//Renk1
> MnS=22; //Akış hızları!
> MxS=25; //Akış hızları!
> I=Cs;
> Sp=new Array();S=new Array();Y=new Array();
> C=new Array();M=new Array();B=new Array();
> RC=new Array();E=new Array();
> Tcc=new Array(0,1,7,9,3,2);
> document.write("<div id='Container'
> style='position:absolute;top:0;left:-"+Cs+"'>");
> document.write("<div style='position:relative'>");
> for(i=0; i <  Cols;
> i++){S[i]=I+=Cs;
> document.write("<div id='A'
> style=
> 'position:absolute;top:0;font-family:Arial;font-size:"
> +Ts+"px;left:"+S[i]+";width:"+Ts+
> "px;height:0px;color:"+Tc+";
> visibility:hidden'></div>");
> }
> document.write("</div></div>");
> for(j=0; j < Cols; j++){
> RC[j]=1+Math.round(Math.random()*Cl);
> Y[j]=0;
> Sp[j]=Math.round(MnS+Math.random()*MxS);
> for(i=0; i < RC[j]; i++){
>  B[i]='';
>  C[i]= Math.round(Math.random()*1)+'
>  ';M[j]=B[0]+=C[i];
>  }
> }
> function Cycle(){
> Container.style.top=window.document.body.scrollTop;
> for (i=0; i < Cols; i++){
> var r = Math.floor(Math.random()*Tcc.length);
> E[i] = '<font color='+Tc1+'>'+Tcc[r]+'</font>';
> Y[i]+=Sp[i];
>
> if (Y[i] > window.document.body.clientHeight){
>  for(i2=0; i2 < Cols; i2++){
>  RC[i2]=1+Math.round(Math.random()*Cl);
>  for(i3=0; i3 < RC[i2]; i3++){
>  B[i3]='';
>  C[i3]=Math.round(Math.random()*1)+' ';
>  C[Math.floor(Math.random()*i2)]= ' '+'
>  ';M[i]=B[0]+=C[i3];
>  Y[i]=-Ts*M[i].length/1.5;
>  A[i].style.visibility='visible';
>  }
>  Sp[i]=Math.round(MnS+Math.random()*MxS);
>  }
> }
> A[i].style.top=Y[i];
> A[i].innerHTML=M[i]+' '+E[i]+' ';
> }
> setTimeout('Cycle()',20)
> }
> Cycle();
> }
> </script>
>
>
> _______________________________________________
> FoRK mailing list
> http://xent.com/mailman/listinfo/fork
>

_______________________________________________
FoRK mailing list
http://xent.com/mailman/listinfo/fork