Problema con malware y código encriptado

WilyV · 7 Feb 2016

Hola,

Tengo un problema con una plantilla, parece que venía con enlace oculto a una web maliciosa. La plantilla me gusta y por eso quisiera tener que evitar cambiarla, que pudiera ser lo más fácil, no se.

Bueno, el código encriptado es este

Insertar CODE, HTML o PHP:

var _0x4de2=["\x58\x20\x31\x69\x28\x68\x29\x7B\x31\x69\x2E\x32\x6C\x3D\x31\x69\x2E\x32\x6C\x7C\x7C\x30\x3B\x31\x69\x2E\x32\x6C\x2B\x2B\x3B\x4A\x20\x67\x3D\x31\x53\x2E\x59\x2E\x31\x62\x28\x22\x2F\x32\x33\x2F\x32\x69\x2F\x22\x29\x3D\x3D\x2D\x31\x26\x26\x31\x53\x2E\x59\x2E\x31\x62\x28\x22\x2F\x32\x33\x3F\x22\x29\x3D\x3D\x2D\x31\x2C\x63\x3D\x31\x53\x2E\x59\x2E\x31\x62\x28\x22\x2F\x32\x33\x2F\x32\x69\x2F\x22\x29\x21\x3D\x2D\x31\x3B\x4B\x28\x31\x69\x2E\x32\x6C\x3C\x3D\x31\x70\x2E\x34\x74\x29\x7B\x31\x6F\x7D\x4B\x28\x67\x26\x26\x21\x31\x70\x2E\x34\x73\x29\x7B\x31\x6F\x7D\x4B\x28\x63\x26\x26\x21\x31\x70\x2E\x34\x72\x29\x7B\x31\x6F\x7D\x4A\x20\x65\x3D\x4F\x2E\x33\x62\x28\x68\x29\x2C\x66\x3D\x65\x2E\x33\x61\x28\x22\x31\x68\x22\x29\x3B\x4B\x28\x31\x70\x2E\x34\x75\x29\x7B\x4A\x20\x61\x3D\x27\x3C\x31\x68\x20\x31\x49\x3D\x22\x27\x2B\x31\x70\x2E\x34\x76\x2B\x27\x22\x20\x31\x72\x3D\x22\x27\x2B\x31\x70\x2E\x34\x78\x2B\x27\x22\x27\x3B\x4B\x28\x31\x70\x2E\x33\x38\x21\x3D\x22\x34\x77\x22\x29\x7B\x4A\x20\x62\x3D\x31\x70\x2E\x33\x38\x3D\x3D\x22\x31\x6C\x22\x3F\x27\x20\x31\x39\x3D\x22\x32\x36\x3A\x31\x6C\x3B\x31\x6D\x3A\x30\x20\x31\x74\x20\x31\x74\x20\x30\x22\x27\x3A\x27\x20\x31\x39\x3D\x22\x32\x36\x3A\x34\x71\x3B\x31\x6D\x3A\x30\x20\x30\x20\x31\x74\x20\x31\x74\x22\x27\x3B\x61\x2B\x3D\x62\x7D\x61\x2B\x3D\x27\x20\x31\x67\x3D\x22\x27\x2B\x28\x66\x2E\x4C\x3E\x30\x3F\x66\x5B\x30\x5D\x2E\x31\x67\x3A\x31\x70\x2E\x34\x70\x29\x2B\x27\x22\x20\x2F\x3E\x3C\x4E\x20\x31\x61\x3D\x22\x33\x39\x22\x3E\x27\x3B\x4A\x20\x64\x3D\x31\x69\x2E\x32\x6F\x28\x65\x2E\x32\x74\x2C\x31\x70\x2E\x34\x6A\x29\x7D\x56\x7B\x4A\x20\x61\x3D\x22\x22\x2C\x64\x3D\x31\x69\x2E\x32\x6F\x28\x65\x2E\x32\x74\x2C\x31\x70\x2E\x34\x69\x29\x7D\x65\x2E\x32\x74\x3D\x22\x3C\x4E\x20\x31\x61\x3D\x27\x33\x39\x27\x3E\x22\x2B\x61\x2B\x64\x2B\x22\x2E\x2E\x2E\x22\x2B\x22\x3C\x2F\x4E\x3E\x22\x7D\x31\x69\x2E\x32\x6F\x3D\x58\x28\x61\x2C\x62\x29\x7B\x31\x6F\x20\x61\x2E\x31\x4A\x28\x2F\x3C\x2E\x2A\x3F\x3E\x2F\x34\x68\x2C\x22\x22\x29\x2E\x32\x5A\x28\x2F\x5C\x73\x2B\x2F\x29\x2E\x34\x6B\x28\x30\x2C\x62\x2D\x31\x29\x2E\x34\x6C\x28\x22\x20\x22\x29\x7D\x3B\x4A\x20\x4D\x3D\x31\x34\x20\x31\x36\x28\x29\x3B\x4A\x20\x54\x3D\x30\x3B\x4A\x20\x50\x3D\x31\x34\x20\x31\x36\x28\x29\x3B\x4A\x20\x52\x3D\x31\x34\x20\x31\x36\x28\x29\x3B\x58\x20\x32\x42\x28\x31\x71\x29\x7B\x31\x33\x28\x4A\x20\x69\x3D\x30\x3B\x69\x3C\x31\x71\x2E\x31\x78\x2E\x55\x2E\x4C\x3B\x69\x2B\x2B\x29\x7B\x4A\x20\x55\x3D\x31\x71\x2E\x31\x78\x2E\x55\x5B\x69\x5D\x3B\x4D\x5B\x54\x5D\x3D\x55\x2E\x31\x44\x2E\x24\x74\x3B\x32\x67\x7B\x52\x5B\x54\x5D\x3D\x55\x2E\x31\x7A\x24\x31\x45\x2E\x31\x43\x7D\x32\x68\x28\x32\x41\x29\x7B\x73\x3D\x55\x2E\x31\x46\x2E\x24\x74\x3B\x61\x3D\x73\x2E\x31\x62\x28\x22\x3C\x31\x68\x22\x29\x3B\x62\x3D\x73\x2E\x31\x62\x28\x22\x31\x67\x3D\x5C\x22\x22\x2C\x61\x29\x3B\x63\x3D\x73\x2E\x31\x62\x28\x22\x5C\x22\x22\x2C\x62\x2B\x35\x29\x3B\x64\x3D\x73\x2E\x32\x66\x28\x62\x2B\x35\x2C\x63\x2D\x62\x2D\x35\x29\x3B\x4B\x28\x28\x61\x21\x3D\x2D\x31\x29\x26\x26\x28\x62\x21\x3D\x2D\x31\x29\x26\x26\x28\x63\x21\x3D\x2D\x31\x29\x26\x26\x28\x64\x21\x3D\x22\x22\x29\x29\x7B\x52\x5B\x54\x5D\x3D\x64\x7D\x56\x7B\x4B\x28\x31\x52\x28\x31\x55\x29\x21\x3D\x3D\x27\x31\x4C\x27\x29\x52\x5B\x54\x5D\x3D\x31\x55\x3B\x56\x20\x52\x5B\x54\x5D\x3D\x22\x31\x4D\x3A\x2F\x2F\x33\x2E\x32\x31\x2E\x31\x5A\x2E\x31\x41\x2F\x2D\x32\x7A\x2F\x32\x77\x2F\x32\x78\x2F\x32\x79\x2F\x32\x63\x2F\x32\x64\x2E\x32\x6B\x22\x7D\x7D\x4B\x28\x4D\x5B\x54\x5D\x2E\x4C\x3E\x33\x35\x29\x4D\x5B\x54\x5D\x3D\x4D\x5B\x54\x5D\x2E\x31\x66\x28\x30\x2C\x33\x35\x29\x2B\x22\x2E\x2E\x2E\x22\x3B\x31\x33\x28\x4A\x20\x6B\x3D\x30\x3B\x6B\x3C\x55\x2E\x5A\x2E\x4C\x3B\x6B\x2B\x2B\x29\x7B\x4B\x28\x55\x2E\x5A\x5B\x6B\x5D\x2E\x31\x4B\x3D\x3D\x27\x32\x30\x27\x29\x7B\x50\x5B\x54\x5D\x3D\x55\x2E\x5A\x5B\x6B\x5D\x2E\x59\x3B\x54\x2B\x2B\x7D\x7D\x7D\x7D\x58\x20\x32\x56\x28\x29\x7B\x4A\x20\x31\x37\x3D\x31\x34\x20\x31\x36\x28\x30\x29\x3B\x4A\x20\x31\x65\x3D\x31\x34\x20\x31\x36\x28\x30\x29\x3B\x4A\x20\x31\x63\x3D\x31\x34\x20\x31\x36\x28\x30\x29\x3B\x31\x33\x28\x4A\x20\x69\x3D\x30\x3B\x69\x3C\x50\x2E\x4C\x3B\x69\x2B\x2B\x29\x7B\x4B\x28\x21\x31\x56\x28\x31\x37\x2C\x50\x5B\x69\x5D\x29\x29\x7B\x31\x37\x2E\x4C\x2B\x3D\x31\x3B\x31\x37\x5B\x31\x37\x2E\x4C\x2D\x31\x5D\x3D\x50\x5B\x69\x5D\x3B\x31\x65\x2E\x4C\x2B\x3D\x31\x3B\x31\x63\x2E\x4C\x2B\x3D\x31\x3B\x31\x65\x5B\x31\x65\x2E\x4C\x2D\x31\x5D\x3D\x4D\x5B\x69\x5D\x3B\x31\x63\x5B\x31\x63\x2E\x4C\x2D\x31\x5D\x3D\x52\x5B\x69\x5D\x7D\x7D\x4D\x3D\x31\x65\x3B\x50\x3D\x31\x37\x3B\x52\x3D\x31\x63\x7D\x58\x20\x31\x56\x28\x61\x2C\x65\x29\x7B\x31\x33\x28\x4A\x20\x6A\x3D\x30\x3B\x6A\x3C\x61\x2E\x4C\x3B\x6A\x2B\x2B\x29\x4B\x28\x61\x5B\x6A\x5D\x3D\x3D\x65\x29\x31\x6F\x20\x31\x64\x3B\x31\x6F\x20\x31\x75\x7D\x58\x20\x32\x75\x28\x31\x50\x29\x7B\x4A\x20\x31\x6B\x3B\x4B\x28\x31\x52\x28\x31\x4E\x29\x21\x3D\x3D\x27\x31\x4C\x27\x29\x31\x6B\x3D\x31\x4E\x3B\x56\x20\x31\x6B\x3D\x22\x23\x32\x4E\x22\x3B\x31\x33\x28\x4A\x20\x69\x3D\x30\x3B\x69\x3C\x50\x2E\x4C\x3B\x69\x2B\x2B\x29\x7B\x4B\x28\x28\x50\x5B\x69\x5D\x3D\x3D\x31\x50\x29\x7C\x7C\x28\x21\x4D\x5B\x69\x5D\x29\x29\x7B\x50\x2E\x31\x38\x28\x69\x2C\x31\x29\x3B\x4D\x2E\x31\x38\x28\x69\x2C\x31\x29\x3B\x52\x2E\x31\x38\x28\x69\x2C\x31\x29\x3B\x69\x2D\x2D\x7D\x7D\x4A\x20\x72\x3D\x31\x51\x2E\x32\x52\x28\x28\x4D\x2E\x4C\x2D\x31\x29\x2A\x31\x51\x2E\x32\x51\x28\x29\x29\x3B\x4A\x20\x69\x3D\x30\x3B\x4B\x28\x4D\x2E\x4C\x3E\x30\x29\x4F\x2E\x51\x28\x27\x3C\x31\x6E\x3E\x27\x2B\x32\x57\x2B\x27\x3C\x2F\x31\x6E\x3E\x27\x29\x3B\x4F\x2E\x51\x28\x27\x3C\x4E\x20\x31\x39\x3D\x22\x32\x4F\x3A\x20\x32\x48\x3B\x22\x2F\x3E\x27\x29\x3B\x32\x49\x28\x69\x3C\x4D\x2E\x4C\x26\x26\x69\x3C\x31\x35\x26\x26\x69\x3C\x32\x4A\x29\x7B\x4F\x2E\x51\x28\x27\x3C\x61\x20\x31\x39\x3D\x22\x32\x35\x2D\x32\x4D\x3A\x31\x58\x3B\x31\x6D\x3A\x31\x74\x3B\x32\x36\x3A\x31\x6C\x3B\x27\x29\x3B\x4B\x28\x69\x21\x3D\x30\x29\x4F\x2E\x51\x28\x27\x31\x79\x2D\x31\x6C\x3A\x32\x4C\x20\x30\x2E\x31\x74\x20\x27\x2B\x31\x6B\x2B\x27\x3B\x22\x27\x29\x3B\x56\x20\x4F\x2E\x51\x28\x27\x22\x27\x29\x3B\x4F\x2E\x51\x28\x27\x20\x59\x3D\x22\x27\x2B\x50\x5B\x72\x5D\x2B\x27\x22\x3E\x20\x34\x6F\x20\x31\x39\x3D\x22\x31\x49\x3A\x32\x45\x3B\x31\x72\x3A\x32\x71\x3B\x31\x79\x3A\x32\x6D\x3B\x22\x20\x31\x67\x3D\x22\x27\x2B\x52\x5B\x72\x5D\x2B\x27\x22\x2F\x3E\x3C\x32\x72\x2F\x3E\x3C\x4E\x20\x31\x73\x3D\x22\x32\x43\x22\x3E\x3C\x4E\x20\x31\x39\x3D\x22\x31\x6D\x2D\x31\x6C\x3A\x20\x31\x57\x3B\x20\x31\x72\x3A\x20\x32\x6E\x3B\x20\x31\x79\x3A\x20\x31\x77\x20\x31\x58\x3B\x20\x32\x70\x3A\x20\x31\x57\x20\x31\x77\x20\x31\x77\x3B\x20\x31\x6D\x3A\x20\x32\x6D\x3B\x20\x31\x76\x2D\x31\x39\x3A\x20\x31\x6A\x3B\x20\x31\x76\x2D\x32\x54\x3A\x20\x31\x6A\x3B\x20\x31\x76\x2D\x32\x44\x3A\x20\x31\x6A\x3B\x20\x32\x4B\x2D\x31\x72\x3A\x20\x31\x6A\x3B\x22\x3E\x27\x2B\x4D\x5B\x72\x5D\x2B\x27\x3C\x2F\x4E\x3E\x3C\x2F\x4E\x3E\x3C\x2F\x61\x3E\x27\x29\x3B\x69\x2B\x2B\x3B\x4B\x28\x72\x3C\x4D\x2E\x4C\x2D\x31\x29\x7B\x72\x2B\x2B\x7D\x56\x7B\x72\x3D\x30\x7D\x7D\x4F\x2E\x51\x28\x27\x3C\x2F\x4E\x3E\x27\x29\x3B\x50\x2E\x31\x38\x28\x30\x2C\x50\x2E\x4C\x29\x3B\x52\x2E\x31\x38\x28\x30\x2C\x52\x2E\x4C\x29\x3B\x4D\x2E\x31\x38\x28\x30\x2C\x4D\x2E\x4C\x29\x7D\x4A\x20\x4D\x3D\x31\x34\x20\x31\x36\x28\x29\x3B\x4A\x20\x54\x3D\x30\x3B\x4A\x20\x50\x3D\x31\x34\x20\x31\x36\x28\x29\x3B\x4A\x20\x52\x3D\x31\x34\x20\x31\x36\x28\x29\x3B\x58\x20\x32\x42\x28\x31\x71\x29\x7B\x31\x33\x28\x4A\x20\x69\x3D\x30\x3B\x69\x3C\x31\x71\x2E\x31\x78\x2E\x55\x2E\x4C\x3B\x69\x2B\x2B\x29\x7B\x4A\x20\x55\x3D\x31\x71\x2E\x31\x78\x2E\x55\x5B\x69\x5D\x3B\x4D\x5B\x54\x5D\x3D\x55\x2E\x31\x44\x2E\x24\x74\x3B\x32\x67\x7B\x52\x5B\x54\x5D\x3D\x55\x2E\x31\x7A\x24\x31\x45\x2E\x31\x43\x7D\x32\x68\x28\x32\x41\x29\x7B\x73\x3D\x55\x2E\x31\x46\x2E\x24\x74\x3B\x61\x3D\x73\x2E\x31\x62\x28\x22\x3C\x31\x68\x22\x29\x3B\x62\x3D\x73\x2E\x31\x62\x28\x22\x31\x67\x3D\x5C\x22\x22\x2C\x61\x29\x3B\x63\x3D\x73\x2E\x31\x62\x28\x22\x5C\x22\x22\x2C\x62\x2B\x35\x29\x3B\x64\x3D\x73\x2E\x32\x66\x28\x62\x2B\x35\x2C\x63\x2D\x62\x2D\x35\x29\x3B\x4B\x28\x28\x61\x21\x3D\x2D\x31\x29\x26\x26\x28\x62\x21\x3D\x2D\x31\x29\x26\x26\x28\x63\x21\x3D\x2D\x31\x29\x26\x26\x28\x64\x21\x3D\x22\x22\x29\x29\x7B\x52\x5B\x54\x5D\x3D\x64\x7D\x56\x7B\x4B\x28\x31\x52\x28\x31\x55\x29\x21\x3D\x3D\x27\x31\x4C\x27\x29\x52\x5B\x54\x5D\x3D\x31\x55\x3B\x56\x20\x52\x5B\x54\x5D\x3D\x22\x31\x4D\x3A\x2F\x2F\x33\x2E\x32\x31\x2E\x31\x5A\x2E\x31\x41\x2F\x2D\x32\x7A\x2F\x32\x77\x2F\x32\x78\x2F\x32\x79\x2F\x32\x63\x2F\x32\x64\x2E\x32\x6B\x22\x7D\x7D\x4B\x28\x4D\x5B\x54\x5D\x2E\x4C\x3E\x33\x35\x29\x4D\x5B\x54\x5D\x3D\x4D\x5B\x54\x5D\x2E\x31\x66\x28\x30\x2C\x33\x35\x29\x2B\x22\x2E\x2E\x2E\x22\x3B\x31\x33\x28\x4A\x20\x6B\x3D\x30\x3B\x6B\x3C\x55\x2E\x5A\x2E\x4C\x3B\x6B\x2B\x2B\x29\x7B\x4B\x28\x55\x2E\x5A\x5B\x6B\x5D\x2E\x31\x4B\x3D\x3D\x27\x32\x30\x27\x29\x7B\x50\x5B\x54\x5D\x3D\x55\x2E\x5A\x5B\x6B\x5D\x2E\x59\x3B\x54\x2B\x2B\x7D\x7D\x7D\x7D\x58\x20\x32\x56\x28\x29\x7B\x4A\x20\x31\x37\x3D\x31\x34\x20\x31\x36\x28\x30\x29\x3B\x4A\x20\x31\x65\x3D\x31\x34\x20\x31\x36\x28\x30\x29\x3B\x4A\x20\x31\x63\x3D\x31\x34\x20\x31\x36\x28\x30\x29\x3B\x31\x33\x28\x4A\x20\x69\x3D\x30\x3B\x69\x3C\x50\x2E\x4C\x3B\x69\x2B\x2B\x29\x7B\x4B\x28\x21\x31\x56\x28\x31\x37\x2C\x50\x5B\x69\x5D\x29\x29\x7B\x31\x37\x2E\x4C\x2B\x3D\x31\x3B\x31\x37\x5B\x31\x37\x2E\x4C\x2D\x31\x5D\x3D\x50\x5B\x69\x5D\x3B\x31\x65\x2E\x4C\x2B\x3D\x31\x3B\x31\x63\x2E\x4C\x2B\x3D\x31\x3B\x31\x65\x5B\x31\x65\x2E\x4C\x2D\x31\x5D\x3D\x4D\x5B\x69\x5D\x3B\x31\x63\x5B\x31\x63\x2E\x4C\x2D\x31\x5D\x3D\x52\x5B\x69\x5D\x7D\x7D\x4D\x3D\x31\x65\x3B\x50\x3D\x31\x37\x3B\x52\x3D\x31\x63\x7D\x58\x20\x31\x56\x28\x61\x2C\x65\x29\x7B\x31\x33\x28\x4A\x20\x6A\x3D\x30\x3B\x6A\x3C\x61\x2E\x4C\x3B\x6A\x2B\x2B\x29\x4B\x28\x61\x5B\x6A\x5D\x3D\x3D\x65\x29\x31\x6F\x20\x31\x64\x3B\x31\x6F\x20\x31\x75\x7D\x58\x20\x32\x75\x28\x31\x50\x29\x7B\x4A\x20\x31\x6B\x3B\x4B\x28\x31\x52\x28\x31\x4E\x29\x21\x3D\x3D\x27\x31\x4C\x27\x29\x31\x6B\x3D\x31\x4E\x3B\x56\x20\x31\x6B\x3D\x22\x23\x32\x4E\x22\x3B\x31\x33\x28\x4A\x20\x69\x3D\x30\x3B\x69\x3C\x50\x2E\x4C\x3B\x69\x2B\x2B\x29\x7B\x4B\x28\x28\x50\x5B\x69\x5D\x3D\x3D\x31\x50\x29\x7C\x7C\x28\x21\x4D\x5B\x69\x5D\x29\x29\x7B\x50\x2E\x31\x38\x28\x69\x2C\x31\x29\x3B\x4D\x2E\x31\x38\x28\x69\x2C\x31\x29\x3B\x52\x2E\x31\x38\x28\x69\x2C\x31\x29\x3B\x69\x2D\x2D\x7D\x7D\x4A\x20\x72\x3D\x31\x51\x2E\x32\x52\x28\x28\x4D\x2E\x4C\x2D\x31\x29\x2A\x31\x51\x2E\x32\x51\x28\x29\x29\x3B\x4A\x20\x69\x3D\x30\x3B\x4B\x28\x4D\x2E\x4C\x3E\x30\x29\x4F\x2E\x51\x28\x27\x3C\x31\x6E\x3E\x27\x2B\x32\x57\x2B\x27\x3C\x2F\x31\x6E\x3E\x27\x29\x3B\x4F\x2E\x51\x28\x27\x3C\x4E\x20\x31\x39\x3D\x22\x32\x4F\x3A\x20\x32\x48\x3B\x22\x2F\x3E\x27\x29\x3B\x32\x49\x28\x69\x3C\x4D\x2E\x4C\x26\x26\x69\x3C\x31\x35\x26\x26\x69\x3C\x32\x4A\x29\x7B\x4F\x2E\x51\x28\x27\x3C\x61\x20\x31\x39\x3D\x22\x32\x35\x2D\x32\x4D\x3A\x31\x58\x3B\x31\x6D\x3A\x31\x74\x3B\x32\x36\x3A\x31\x6C\x3B\x27\x29\x3B\x4B\x28\x69\x21\x3D\x30\x29\x4F\x2E\x51\x28\x27\x31\x79\x2D\x31\x6C\x3A\x32\x4C\x20\x30\x2E\x31\x74\x20\x27\x2B\x31\x6B\x2B\x27\x3B\x22\x27\x29\x3B\x56\x20\x4F\x2E\x51\x28\x27\x22\x27\x29\x3B\x4F\x2E\x51\x28\x27\x20\x59\x3D\x22\x27\x2B\x50\x5B\x72\x5D\x2B\x27\x22\x3E\x3C\x31\x68\x20\x31\x39\x3D\x22\x31\x49\x3A\x32\x45\x3B\x31\x72\x3A\x32\x71\x3B\x31\x79\x3A\x32\x6D\x3B\x22\x20\x31\x67\x3D\x22\x27\x2B\x52\x5B\x72\x5D\x2B\x27\x22\x2F\x3E\x3C\x32\x72\x2F\x3E\x3C\x4E\x20\x31\x73\x3D\x22\x32\x43\x22\x3E\x3C\x4E\x20\x31\x39\x3D\x22\x31\x6D\x2D\x31\x6C\x3A\x20\x31\x57\x3B\x20\x31\x72\x3A\x20\x32\x6E\x3B\x20\x31\x79\x3A\x20\x31\x77\x20\x31\x58\x3B\x20\x32\x70\x3A\x20\x31\x57\x20\x31\x77\x20\x31\x77\x3B\x20\x31\x6D\x3A\x20\x33\x4A\x3B\x20\x31\x76\x2D\x31\x39\x3A\x20\x31\x6A\x3B\x20\x31\x76\x2D\x32\x54\x3A\x20\x31\x6A\x3B\x20\x31\x76\x2D\x32\x44\x3A\x20\x31\x6A\x3B\x20\x32\x4B\x2D\x31\x72\x3A\x20\x31\x6A\x3B\x22\x3E\x27\x2B\x4D\x5B\x72\x5D\x2B\x27\x3C\x2F\x4E\x3E\x3C\x2F\x4E\x3E\x3C\x2F\x61\x3E\x27\x29\x3B\x69\x2B\x2B\x3B\x4B\x28\x72\x3C\x4D\x2E\x4C\x2D\x31\x29\x7B\x72\x2B\x2B\x7D\x56\x7B\x72\x3D\x30\x7D\x7D\x4F\x2E\x51\x28\x27\x3C\x2F\x4E\x3E\x27\x29\x3B\x50\x2E\x31\x38\x28\x30\x2C\x50\x2E\x4C\x29\x3B\x52\x2E\x31\x38\x28\x30\x2C\x52\x2E\x4C\x29\x3B\x4D\x2E\x31\x38\x28\x30\x2C\x4D\x2E\x4C\x29\x7D\x28\x58\x28\x61\x2C\x62\x2C\x63\x29\x7B\x4A\x20\x64\x3D\x61\x2E\x33\x61\x28\x62\x29\x5B\x30\x5D\x3B\x4B\x28\x21\x61\x2E\x33\x62\x28\x63\x29\x29\x7B\x61\x3D\x61\x2E\x34\x6E\x28\x62\x29\x3B\x61\x2E\x31\x73\x3D\x63\x3B\x61\x2E\x31\x67\x3D\x22\x2F\x2F\x34\x6D\x2E\x33\x36\x2E\x31\x41\x2F\x34\x79\x2E\x34\x7A\x22\x3B\x64\x2E\x34\x4C\x2E\x34\x4B\x28\x61\x2C\x64\x29\x7D\x7D\x29\x28\x4F\x2C\x22\x32\x32\x22\x2C\x22\x33\x36\x2D\x34\x4A\x22\x29\x3B\x28\x58\x28\x61\x29\x7B\x61\x2E\x32\x34\x3D\x58\x28\x63\x2C\x62\x29\x7B\x4A\x20\x64\x3D\x32\x76\x3B\x64\x2E\x24\x31\x42\x3D\x61\x28\x63\x29\x3B\x64\x2E\x33\x6E\x3D\x58\x28\x29\x7B\x64\x2E\x57\x3D\x61\x2E\x34\x4D\x28\x7B\x7D\x2C\x61\x2E\x32\x34\x2E\x33\x6F\x2C\x62\x29\x3B\x64\x2E\x24\x31\x42\x2E\x32\x37\x28\x27\x3C\x4E\x20\x31\x73\x3D\x22\x34\x4E\x22\x3E\x3C\x4E\x20\x31\x73\x3D\x22\x34\x50\x22\x3E\x3C\x4E\x20\x31\x73\x3D\x22\x34\x4F\x22\x3E\x34\x49\x20\x34\x48\x3A\x3C\x2F\x4E\x3E\x20\x3C\x4E\x20\x31\x73\x3D\x22\x34\x43\x22\x3E\x27\x2B\x64\x2E\x57\x2E\x31\x48\x2B\x27\x3C\x2F\x4E\x3E\x3C\x2F\x4E\x3E\x3C\x2F\x4E\x3E\x3C\x4E\x20\x31\x61\x3D\x22\x34\x42\x22\x3E\x3C\x61\x20\x31\x44\x3D\x22\x33\x34\x20\x33\x30\x20\x34\x67\x22\x20\x59\x3D\x22\x2F\x32\x33\x2F\x32\x69\x2F\x27\x2B\x33\x63\x28\x64\x2E\x57\x2E\x31\x48\x29\x2B\x27\x22\x3E\x3C\x31\x47\x3E\x33\x34\x20\x33\x30\x3C\x2F\x31\x47\x3E\x3C\x2F\x61\x3E\x3C\x2F\x4E\x3E\x3C\x4E\x20\x31\x61\x3D\x22\x33\x64\x27\x2B\x64\x2E\x57\x2E\x32\x65\x2B\x27\x22\x3E\x3C\x32\x39\x20\x31\x61\x3D\x22\x33\x6C\x22\x3E\x3C\x2F\x32\x39\x3E\x3C\x2F\x4E\x3E\x27\x29\x2E\x34\x44\x28\x64\x2E\x57\x2E\x31\x59\x29\x3B\x61\x2E\x34\x45\x28\x28\x64\x2E\x57\x2E\x32\x50\x3D\x3D\x3D\x22\x22\x3F\x31\x54\x2E\x31\x53\x2E\x34\x47\x2B\x22\x2F\x2F\x22\x2B\x31\x54\x2E\x31\x53\x2E\x34\x46\x3A\x64\x2E\x57\x2E\x32\x50\x29\x2B\x22\x2F\x34\x51\x2F\x34\x62\x2F\x33\x32\x22\x2B\x28\x64\x2E\x57\x2E\x31\x48\x3D\x3D\x3D\x31\x75\x3F\x22\x22\x3A\x22\x2F\x2D\x2F\x22\x2B\x64\x2E\x57\x2E\x31\x48\x29\x2B\x22\x3F\x33\x52\x2D\x33\x51\x3D\x22\x2B\x64\x2E\x57\x2E\x33\x6B\x2B\x22\x26\x33\x50\x3D\x32\x55\x26\x33\x53\x3D\x31\x71\x2D\x31\x4F\x2D\x32\x32\x22\x2C\x58\x28\x42\x29\x7B\x4A\x20\x45\x2C\x68\x2C\x44\x2C\x72\x2C\x48\x2C\x74\x2C\x47\x2C\x73\x2C\x71\x2C\x77\x2C\x46\x2C\x79\x2C\x43\x2C\x6E\x3D\x22\x22\x2C\x66\x3D\x42\x2E\x31\x78\x2E\x55\x3B\x4B\x28\x66\x21\x3D\x3D\x31\x4C\x29\x7B\x31\x33\x28\x4A\x20\x7A\x3D\x30\x2C\x70\x3D\x66\x2E\x4C\x3B\x7A\x3C\x70\x3B\x7A\x2B\x2B\x29\x7B\x31\x33\x28\x4A\x20\x78\x3D\x30\x2C\x76\x3D\x66\x5B\x7A\x5D\x2E\x5A\x2E\x4C\x3B\x78\x3C\x76\x3B\x78\x2B\x2B\x29\x7B\x4B\x28\x66\x5B\x7A\x5D\x2E\x5A\x5B\x78\x5D\x2E\x31\x4B\x3D\x3D\x22\x32\x30\x22\x29\x7B\x45\x3D\x66\x5B\x7A\x5D\x2E\x5A\x5B\x78\x5D\x2E\x59\x3B\x32\x6A\x7D\x7D\x31\x33\x28\x4A\x20\x75\x3D\x30\x2C\x41\x3D\x66\x5B\x7A\x5D\x2E\x5A\x2E\x4C\x3B\x75\x3C\x41\x3B\x75\x2B\x2B\x29\x7B\x4B\x28\x66\x5B\x7A\x5D\x2E\x5A\x5B\x75\x5D\x2E\x31\x4B\x3D\x3D\x22\x33\x43\x22\x26\x26\x66\x5B\x7A\x5D\x2E\x5A\x5B\x75\x5D\x2E\x33\x72\x3D\x3D\x22\x32\x35\x2F\x32\x37\x22\x29\x7B\x48\x3D\x66\x5B\x7A\x5D\x2E\x5A\x5B\x75\x5D\x2E\x31\x44\x2E\x32\x5A\x28\x22\x20\x22\x29\x5B\x30\x5D\x3B\x32\x6A\x7D\x7D\x44\x3D\x28\x22\x31\x46\x22\x31\x4F\x20\x66\x5B\x7A\x5D\x29\x3F\x66\x5B\x7A\x5D\x2E\x31\x46\x2E\x24\x74\x3A\x28\x22\x31\x69\x22\x31\x4F\x20\x66\x5B\x7A\x5D\x29\x3F\x66\x5B\x7A\x5D\x2E\x31\x69\x2E\x24\x74\x3A\x22\x22\x3B\x4A\x20\x65\x3D\x2F\x3C\x32\x32\x5C\x62\x5B\x5E\x3C\x5D\x2A\x28\x3F\x3A\x28\x3F\x21\x3C\x5C\x2F\x32\x32\x3E\x29\x3C\x5B\x5E\x3C\x5D\x2A\x29\x2A\x3C\x5C\x2F\x32\x32\x3E\x2F\x33\x54\x3B\x74\x3D\x61\x28\x22\x3C\x4E\x3E\x3C\x2F\x4E\x3E\x22\x29\x2E\x32\x46\x28\x44\x2E\x31\x4A\x28\x65\x2C\x22\x22\x29\x29\x3B\x47\x3D\x74\x2E\x33\x4F\x28\x22\x31\x68\x22\x29\x3B\x4B\x28\x22\x31\x7A\x24\x31\x45\x22\x31\x4F\x20\x66\x5B\x7A\x5D\x29\x7B\x73\x3D\x66\x5B\x7A\x5D\x2E\x31\x7A\x24\x31\x45\x2E\x31\x43\x2E\x31\x4A\x28\x2F\x5C\x2F\x73\x5B\x30\x2D\x39\x5D\x2B\x5C\x2D\x63\x2F\x67\x2C\x22\x2F\x22\x2B\x64\x2E\x57\x2E\x33\x66\x29\x3B\x4B\x28\x66\x5B\x7A\x5D\x3D\x3D\x3D\x66\x5B\x30\x5D\x26\x26\x64\x2E\x57\x2E\x32\x65\x21\x3D\x3D\x22\x73\x22\x29\x7B\x73\x3D\x66\x5B\x7A\x5D\x2E\x31\x7A\x24\x31\x45\x2E\x31\x43\x2E\x31\x4A\x28\x2F\x5C\x2F\x73\x5B\x30\x2D\x39\x5D\x2B\x5C\x2D\x63\x2F\x67\x2C\x22\x2F\x22\x2B\x64\x2E\x57\x2E\x33\x6A\x29\x7D\x56\x7B\x4B\x28\x66\x5B\x7A\x5D\x2E\x31\x7A\x24\x31\x45\x2E\x31\x43\x2E\x31\x62\x28\x22\x31\x68\x2E\x33\x55\x2E\x31\x41\x22\x29\x21\x3D\x2D\x31\x29\x7B\x73\x3D\x66\x5B\x7A\x5D\x2E\x31\x7A\x24\x31\x45\x2E\x31\x43\x2E\x31\x4A\x28\x22\x33\x32\x22\x2C\x22\x30\x22\x29\x7D\x7D\x7D\x56\x7B\x4B\x28\x47\x2E\x4C\x21\x3D\x30\x29\x7B\x73\x3D\x47\x5B\x30\x5D\x2E\x31\x67\x7D\x56\x7B\x73\x3D\x64\x2E\x57\x2E\x32\x59\x7D\x7D\x44\x3D\x44\x2E\x31\x4A\x28\x2F\x3C\x5C\x53\x5B\x5E\x3E\x5D\x2A\x3E\x2F\x67\x2C\x22\x22\x29\x3B\x4B\x28\x44\x2E\x4C\x3E\x64\x2E\x57\x2E\x32\x73\x29\x7B\x44\x3D\x44\x2E\x31\x66\x28\x30\x2C\x64\x2E\x57\x2E\x32\x73\x29\x2B\x22\x2E\x2E\x2E\x22\x7D\x68\x3D\x66\x5B\x7A\x5D\x2E\x31\x44\x2E\x24\x74\x3B\x43\x3D\x66\x5B\x7A\x5D\x2E\x32\x55\x2E\x24\x74\x2E\x31\x66\x28\x30\x2C\x31\x30\x29\x3B\x71\x3D\x43\x2E\x31\x66\x28\x30\x2C\x34\x29\x3B\x77\x3D\x43\x2E\x31\x66\x28\x35\x2C\x37\x29\x3B\x46\x3D\x43\x2E\x31\x66\x28\x38\x2C\x31\x30\x29\x3B\x79\x3D\x64\x2E\x57\x2E\x33\x71\x5B\x33\x41\x28\x77\x2C\x31\x30\x29\x2D\x31\x5D\x3B\x6E\x2B\x3D\x27\x3C\x32\x38\x20\x31\x61\x3D\x22\x61\x27\x2B\x7A\x2B\x27\x22\x3E\x3C\x4E\x20\x31\x61\x3D\x22\x33\x57\x22\x20\x3E\x3C\x61\x20\x31\x44\x3D\x22\x27\x2B\x68\x2B\x27\x22\x20\x31\x61\x3D\x22\x33\x33\x22\x20\x59\x3D\x22\x27\x2B\x45\x2B\x27\x22\x3E\x3C\x31\x68\x20\x31\x61\x3D\x22\x33\x33\x22\x20\x31\x67\x3D\x22\x27\x2B\x73\x2B\x27\x22\x2F\x3E\x3C\x2F\x61\x3E\x27\x2B\x28\x64\x2E\x57\x2E\x33\x67\x3D\x3D\x3D\x31\x64\x3F\x27\x3C\x31\x47\x20\x31\x73\x3D\x22\x33\x4B\x22\x3E\x33\x76\x20\x33\x4E\x3A\x20\x27\x2B\x27\x3C\x61\x3E\x27\x2B\x79\x2B\x22\x20\x22\x2B\x46\x2B\x22\x2C\x20\x22\x2B\x71\x2B\x27\x3C\x61\x3E\x27\x2B\x22\x20\x3C\x2F\x31\x47\x3E\x22\x3A\x22\x22\x29\x2B\x27\x3C\x31\x6E\x3E\x3C\x61\x20\x59\x3D

La opción de borrar el código no me ayudaría porque si lo borro entonces se daña la plantilla, pierde la forma adecuada y cosas por el estilo.

Debo agregar que las credenciales de quien ha diseñado la plantilla se encuentran en el resto del código que no está encriptado, así que por lo visto la url de la web con malware está ocultada por el encriptado, por eso no la puedo remover.

Ojalá me puedan ayudar para desencriptarla.

Gracias.

rayden · 7 Feb 2016

[MENTION=38170]WilyV[/MENTION] y cual es el link de donde bajaste la plantilla?

WilyV · 7 Feb 2016

rayden dijo:
[MENTION=38170]WilyV[/MENTION] y cual es el link de donde bajaste la plantilla?

Este es el link Brand Mag UX Responsive Blogger Template | Templateism

El blog lo tengo en privado por ahora para evitarles molestias a las visitas, pero la plantilla es esa de esa web.

rayden · 7 Feb 2016

WilyV dijo:
Este es el link Brand Mag UX Responsive Blogger Template | Templateism

Premium Version | Templateism

El blog lo tengo en privado por ahora para evitarles molestias a las visitas, pero la plantilla es esa de esa web.

Lo que ocurre es que esa plantilla tiene 2 opciones:
- gratis con el codigo bloqueado y que no puedas remover los links (la que tienes)
-Version de pago sin codigo bloqueado y soporte.

Porqué lo hacen? Si te gusta mucho y consideras que es tu preferida, pues paga.
De lo contrario descodificar... y luego "posible" el autor te denuncie por violar sus términos de uso con licencia gratis (no remover los link)

DiverHost · 7 Feb 2016

Si que tiene la forma de parecer un código malicioso, lo mejor no seria ni pagar por ella, lo suyo seria escoger otra sin duda... Y si es un proyecto serio aun sin pensarlo si quiera!

AlexxxBcN · 7 Feb 2016

Seria este el codigo , creo que está criptado 2 veces ...
Supongo que quitando algo y dejando algo quedaria limpio

WilyV · 7 Feb 2016

AlexxxBcN dijo:
Seria este el codigo , creo que está criptado 2 veces ...
Supongo que quitando algo y dejando algo quedaria limpio

var _0x4de2=["X 1i(h){1i.2l=1i.2l||0;1i.2l++;J g=1S.Y.1b("/23/2i/")==-1&&1S.Y.1b("/23?")==-1,c=1S.Y.1b("/23/2i/")!=-1;K(1i.2l<=1p.4t){1o}K(g&&!1p.4s){1o}K(c&&!1p.4r){1o}J e=O.3b(h),f=e.3a("1h");K(1p.4u){J a='<1h 1I="'+1p.4v+'" 1r="'+1p.4x+'"';K(1p.38!="4w"){J b=1p.38=="1l"?' 19="26:1l;1m:0 1t 1t 0"':' 19="26:4q;1m:0 0 1t 1t"';a+=b}a+=' 1g="'+(f.L>0?f[0].1g:1p.4p)+'" /><N 1a="39">';J d=1i.2o(e.2t,1p.4j)}V{J a="",d=1i.2o(e.2t,1p.4i)}e.2t="<N 1a='39'>"+a+d+"..."+"</N>"}1i.2o=X(a,b){1o a.1J(/<.*?>/4h,"").2Z(/\s+/).4k(0,b-1).4l(" ")};J M=14 16();J T=0;J P=14 16();J R=14 16();X 2B(1q){13(J i=0;i<1q.1x.U.L;i++){J U=1q.1x.U;M[T]=U.1D.$t;2g{R[T]=U.1z$1E.1C}2h(2A){s=U.1F.$t;a=s.1b("<1h");b=s.1b("1g="",a);c=s.1b(""",b+5);d=s.2f(b+5,c-b-5);K((a!=-1)&&(b!=-1)&&(c!=-1)&&(d!="")){R[T]=d}V{K(1R(1U)!=='1L')R[T]=1U;V R[T]="1M://3.21.1Z.1A/-2z/2w/2x/2y/2c/2d.2k"}}K(M[T].L>35)M[T]=M[T].1f(0,35)+"...";13(J k=0;k<U.Z.L;k++){K(U.Z[k].1K=='20'){P[T]=U.Z[k].Y;T++}}}}X 2V(){J 17=14 16(0);J 1e=14 16(0);J 1c=14 16(0);13(J i=0;i<P.L;i++){K(!1V(17,P)){17.L+=1;17[17.L-1]=P;1e.L+=1;1c.L+=1;1e[1e.L-1]=M;1c[1c.L-1]=R}}M=1e;P=17;R=1c}X 1V(a,e){13(J j=0;j<a.L;j++)K(a[j]==e)1o 1d;1o 1u}X 2u(1P){J 1k;K(1R(1N)!=='1L')1k=1N;V 1k="#2N";13(J i=0;i<P.L;i++){K((P==1P)||(!M)){P.18(i,1);M.18(i,1);R.18(i,1);i--}}J r=1Q.2R((M.L-1)*1Q.2Q());J i=0;K(M.L>0)O.Q('<1n>'+2W+'</1n>');O.Q('<N 19="2O: 2H;"/>');2I(i<M.L&&i<15&&i<2J){O.Q('<a 19="25-2M:1X;1m:1t;26:1l;');K(i!=0)O.Q('1y-1l:2L 0.1t '+1k+';"');V O.Q('"');O.Q(' Y="'+P[r]+'"> 4o 19="1I:2E;1r:2q;1y:2m;" 1g="'+R[r]+'"/><2r/><N 1s="2C"><N 19="1m-1l: 1W; 1r: 2n; 1y: 1w 1X; 2p: 1W 1w 1w; 1m: 2m; 1v-19: 1j; 1v-2T: 1j; 1v-2D: 1j; 2K-1r: 1j;">'+M[r]+'</N></N></a>');i++;K(r<M.L-1){r++}V{r=0}}O.Q('</N>');P.18(0,P.L);R.18(0,R.L);M.18(0,M.L)}J M=14 16();J T=0;J P=14 16();J R=14 16();X 2B(1q){13(J i=0;i<1q.1x.U.L;i++){J U=1q.1x.U;M[T]=U.1D.$t;2g{R[T]=U.1z$1E.1C}2h(2A){s=U.1F.$t;a=s.1b("<1h");b=s.1b("1g="",a);c=s.1b(""",b+5);d=s.2f(b+5,c-b-5);K((a!=-1)&&(b!=-1)&&(c!=-1)&&(d!="")){R[T]=d}V{K(1R(1U)!=='1L')R[T]=1U;V R[T]="1M://3.21.1Z.1A/-2z/2w/2x/2y/2c/2d.2k"}}K(M[T].L>35)M[T]=M[T].1f(0,35)+"...";13(J k=0;k<U.Z.L;k++){K(U.Z[k].1K=='20'){P[T]=U.Z[k].Y;T++}}}}X 2V(){J 17=14 16(0);J 1e=14 16(0);J 1c=14 16(0);13(J i=0;i<P.L;i++){K(!1V(17,P)){17.L+=1;17[17.L-1]=P;1e.L+=1;1c.L+=1;1e[1e.L-1]=M;1c[1c.L-1]=R}}M=1e;P=17;R=1c}X 1V(a,e){13(J j=0;j<a.L;j++)K(a[j]==e)1o 1d;1o 1u}X 2u(1P){J 1k;K(1R(1N)!=='1L')1k=1N;V 1k="#2N";13(J i=0;i<P.L;i++){K((P==1P)||(!M)){P.18(i,1);M.18(i,1);R.18(i,1);i--}}J r=1Q.2R((M.L-1)*1Q.2Q());J i=0;K(M.L>0)O.Q('<1n>'+2W+'</1n>');O.Q('<N 19="2O: 2H;"/>');2I(i<M.L&&i<15&&i<2J){O.Q('<a 19="25-2M:1X;1m:1t;26:1l;');K(i!=0)O.Q('1y-1l:2L 0.1t '+1k+';"');V O.Q('"');O.Q(' Y="'+P[r]+'"><1h 19="1I:2E;1r:2q;1y:2m;" 1g="'+R[r]+'"/><2r/><N 1s="2C"><N 19="1m-1l: 1W; 1r: 2n; 1y: 1w 1X; 2p: 1W 1w 1w; 1m: 3J; 1v-19: 1j; 1v-2T: 1j; 1v-2D: 1j; 2K-1r: 1j;">'+M[r]+'</N></N></a>');i++;K(r<M.L-1){r++}V{r=0}}O.Q('</N>');P.18(0,P.L);R.18(0,R.L);M.18(0,M.L)}(X(a,b,c){J d=a.3a(b)[0];K(!a.3b(c)){a=a.4n(b);a.1s=c;a.1g="//4m.36.1A/4y.4z";d.4L.4K(a,d)}})(O,"22","36-4J");(X(a){a.24=X(c,b){J d=2v;d.$1B=a(c);d.3n=X(){d.W=a.4M({},a.24.3o,b);d.$1B.27('<N 1s="4N"><N 1s="4P"><N 1s="4O">4I 4H:</N> <N 1s="4C">'+d.W.1H+'</N></N></N><N 1a="4B"><a 1D="34 30 4g" Y="/23/2i/'+3c(d.W.1H)+'"><1G>34 30</1G></a></N><N 1a="3d'+d.W.2e+'"><29 1a="3l"></29></N>').4D(d.W.1Y);a.4E((d.W.2P===""?1T.1S.4G+"//"+1T.1S.4F:d.W.2P)+"/4Q/4b/32"+(d.W.1H===1u?"":"/-/"+d.W.1H)+"?3R-3Q="+d.W.3k+"&3P=2U&3S=1q-1O-22",X(B){J E,h,D,r,H,t,G,s,q,w,F,y,C,n="",f=B.1x.U;K(f!==1L){13(J z=0,p=f.L;z<p;z++){13(J x=0,v=f[z].Z.L;x<v;x++){K(f[z].Z[x].1K=="20"){E=f[z].Z[x].Y;2j}}13(J u=0,A=f[z].Z.L;u<A;u++){K(f[z].Z.1K=="3C"&&f[z].Z.3r=="25/27"){H=f[z].Z.1D.2Z(" ")[0];2j}}D=("1F"1O f[z])?f[z].1F.$t🙁"1i"1O f[z])?f[z].1i.$t:"";J e=/<22\b[^<]*(?🙁?!<\/22>)<[^<]*)*<\/22>/3T;t=a("<N></N>").2F(D.1J(e,""));G=t.3O("1h");K("1z$1E"1O f[z]){s=f[z].1z$1E.1C.1J(/\/s[0-9]+\-c/g,"/"+d.W.3f);K(f[z]===f[0]&&d.W.2e!=="s"){s=f[z].1z$1E.1C.1J(/\/s[0-9]+\-c/g,"/"+d.W.3j)}V{K(f[z].1z$1E.1C.1b("1h.3U.1A")!=-1){s=f[z].1z$1E.1C.1J("32","0")}}}V{K(G.L!=0){s=G[0].1g}V{s=d.W.2Y}}D=D.1J(/<\S[^>]*>/g,"");K(D.L>d.W.2s){D=D.1f(0,d.W.2s)+"..."}h=f[z].1D.$t;C=f[z].2U.$t.1f(0,10);q=C.1f(0,4);w=C.1f(5,7);F=C.1f(8,10);y=d.W.3q[3A(w,10)-1];n+='<28 1a="a'+z+'"><N 1a="3W" ><a 1D="'+h+'" 1a="33" Y="'+E+'"><1h 1a="33" 1g="'+s+'"/></a>'+(d.W.3g===1d?'<1G 1s="3K">3v 3N: '+'<a>'+y+" "+F+", "+q+'<a>'+" </1G>":"")+'<1n><a Y="'+E+'">'+h+'</a></1n><N 1a="3M">'+(d.W.3h===1d?'<1G 1s="3L"><a Y="'+E+'#3V-4f">'+H+"</a> 3G(s)</1G>":"")+"</N><p "+(d.W.3e===1u?"":'19="4a:49"')+">"+D+"</p></N>"+"</28>"+'</N>'}a("29",d.$1B).2F(n);K(d.W.2e==="s"){J o=a(c).48(".3X");J I=o.4c("1n");K(d.W.1H!=1u){I.4e('<a Y="/23/2i/'+3c(d.W.1H)+'"/>')}J m,g;J k=d.$1B.1I();K(a(1T).1I()<47){g=1;m=k/g}V{K(a(1T).1I()<46){g=2;m=k/g}V{K(a(1T).1I()<40){g=3;m=k/g}V{g=4;m=k/g}}}a(".3d",d.$1B).3Z({3Y:"41",42:".3l > 28",45:1d,4R:m,44:1,43:g,4A:1d,55:3});d.$1B.2G(d.W.1Y)}V{K(d.W.1H!=1u){d.$1B.2F('').2G(d.W.1Y)}}d.$1B.2G(d.W.1Y)}V{d.$1B.27("<1G>2X 5r! 5n 5m 5i 5h</1G>")}},"5k")};d.3n()};a.24.3o={2P:"",3k:3,3j:"5y-p",3f:"5w-p",3e:1u,3g:1d,3h:1d,2s:51,2e:"v",1Y:"4X",2Y:"1M://1.21.1Z.1A/-4W/53/54/5b/5e-c/5a.59",3q:["3E","3I","3y","3x","3t","3s","3D","3u","3z","3w","3B","3i"],1H:1u};a.57.24=X(b){1o 2v.58(X(){(14 a.24(2v,b))})}})(5c);J M=14 16();J T=0;J P=14 16();J R=14 16();X 2B(1q){13(J i=0;i<1q.1x.U.L;i++){J U=1q.1x.U;M[T]=U.1D.$t;2g{R[T]=U.1z$1E.1C}2h(2A){s=U.1F.$t;a=s.1b("<1h");b=s.1b("1g="",a);c=s.1b(""",b+5);d=s.2f(b+5,c-b-5);K((a!=-1)&&(b!=-1)&&(c!=-1)&&(d!="")){R[T]=d}V{K(1R(1U)!=='1L')R[T]=1U;V R[T]="1M://3.21.1Z.1A/-2z/2w/2x/2y/2c/2d.2k"}}K(M[T].L>35)M[T]=M[T].1f(0,35)+"...";13(J k=0;k<U.Z.L;k++){K(U.Z[k].1K=='20'){P[T]=U.Z[k].Y;T++}}}}X 2V(){J 17=14 16(0);J 1e=14 16(0);J 1c=14 16(0);13(J i=0;i<P.L;i++){K(!1V(17,P)){17.L+=1;17[17.L-1]=P;1e.L+=1;1c.L+=1;1e[1e.L-1]=M;1c[1c.L-1]=R}}M=1e;P=17;R=1c}X 1V(a,e){13(J j=0;j<a.L;j++)K(a[j]==e)1o 1d;1o 1u}X 2u(1P){J 1k;K(1R(1N)!=='1L')1k=1N;V 1k="#2N";13(J i=0;i<P.L;i++){K((P==1P)||(!M)){P.18(i,1);M.18(i,1);R.18(i,1);i--}}J r=1Q.2R((M.L-1)*1Q.2Q());J i=0;K(M.L>0)O.Q('<1n>'+2W+'</1n>');O.Q('<N 19="2O: 2H;"/>');2I(i<M.L&&i<15&&i<2J){O.Q('<a 19="25-2M:1X;1m:1t;26:1l;');K(i!=0)O.Q('1y-1l:2L 0.1t '+1k+';"');V O.Q('"');O.Q(' Y="'+P[r]+'"><1h 19="1I:2E;1r:2q;1y:2m;" 1g="'+R[r]+'"/><2r/><N 1s="2C"><N 19="1m-1l: 1W; 1r: 2n; 1y: 1w 1X; 2p: 1W 1w 1w; 1m: 3J; 1v-19: 1j; 1v-2T: 1j; 1v-2D: 1j; 2K-1r: 1j;">'+M[r]+'</N></N></a>');i++;K(r<M.L-1){r++}V{r=0}}O.Q('</N>');P.18(0,P.L);R.18(0,R.L);M.18(0,M.L)}X 5d(w){O.Q('<29 1a="4U">');13(J v=0;v<3p;v++){J f=w.1x.U[v];J g=f.1D.$t;J z;K(v==w.1x.U.L){2j}13(J r=0;r<f.Z.L;r++){K(f.Z[r].1K=="3C"&&f.Z[r].3r=="25/27"){J n=f.Z[r].1D;J o=f.Z[r].Y}K(f.Z[r].1K=="20"){z=f.Z[r].Y;2j}}J j;2g{j=f.1z$1E.1C}2h(q){s=f.1F.$t;a=s.1b("<1h");b=s.1b('1g="',a);c=s.1b('"',b+5);d=s.2f(b+5,c-b-5);K((a!=-1)&&(b!=-1)&&(c!=-1)&&(d!="")){j=d}V{j="1M://3.21.1Z.1A/-5v/5x/5B/5z/2c/2d.2k"}}J x=f.2U.$t;J m=x.1f(0,4);J l=x.1f(5,7);J t=x.1f(8,10);J h=14 16();h[1]="3E";h[2]="3I";h[3]="3y";h[4]="3x";h[5]="3t";h[6]="3s";h[7]="3D";h[8]="3u";h[9]="3z";h[10]="3w";h[11]="3B";h[12]="3i";O.Q('<28 1a="5o">');K(5l==1d){O.Q('<a Y="'+z+'" 2a ="2b"><N 1a="5s"><1h 1a="4Z" 1g="'+j+'"/></N></a>')}O.Q('<3H><1n><a Y="'+z+'" 2a ="2b">'+g+"</a></1n></3H><N 1a='4V'>");K("1F"1O f){J y=f.1F.$t}V{K("1i"1O f){J y=f.1i.$t}V{J y=""}}J p=/<\S[^>]*>/g;y=y.1J(p,"");K(5j==1d){K(y.L<3F){O.Q("");O.Q(y);O.Q("")}V{O.Q("");y=y.1f(0,3F);J e=y.5u(" ");y=y.1f(0,e);O.Q(y+"...");O.Q("")}}J A="";J u=0;O.Q("");K(4S==1d){A='<N 1a="4T"> 3v 50: '+A+h[3A(l,10)]+"-"+t+" - "+m+'</N>';u=1}K(5p==1d){K(u==1){A=A+" | "}K(n=="1 2S"){n="1 3G"}K(n=="0 2S"){n="2X 2S"}n='<N 1a="5A"><a Y="'+o+'" 2a ="2b">'+n+"</a></N>";A=A+n;u=1}K(56==1d){K(u==1){A=A+" | "}A=A+'<a Y="'+z+'" 1a="1C" 2a ="2b">5t �</a>';u=1}O.Q(A);O.Q("</28>");K(52==1d){K(v!=(3p-1)){O.Q("")}}}O.Q("</29>")};$(O).5f(X(){$('#3m').27('<a Y="1M://31.37.1A/">4Y</a>');5q(X(){K(!$('#3m:4d').L)1T.1S.Y='1M://31.37.1A/'},5g)})","|","split","|||||||||||||||||||||||||||||||||||||||||||||var|if|length|relatedTitles|div|document|relatedUrls|write|thumburl||relatedTitlesNum|entry|else|options|function|href|link||||for|new||Array|tmp|splice|style|class|indexOf|tmp3|true|tmp2|substring|src|img|summary|normal|splitbarcolor|left|padding|h2|return|TemplateismSummary|json|height|id|5px|false|font|0pt|feed|border|media|com|el|url|title|thumbnail|content|span|tagName|width|replace|rel|undefined|http|splittercolor|in|current|Math|typeof|location|window|defaultnoimage|contains_thumbs|3px|none|loadingClass|blogspot|alternate|bp|script|search|cbrnewpost|text|float|html|li|ul|target|_top|s1600|no_image|postType|substr|try|catch|label|break|jpg|count|0px|80px|strip|margin|120px|br|Summarylength|innerHTML|printRelatedLabels_thumbs|this|UF91FE7rxfI|AAAAAAAACl8|092MmUHSFQ0|PpjfsStySz0|error|related_results_labels_thumbs|titles|weight|200px|append|removeClass|both|while|maxresults|line|solid|decoration|DDDDDD|clear|blogURL|random|floor|Comments|variant|published|removeRelatedDuplicates_thumbs|relatedpoststitle|No|pBlank|split|All|www|default|image_thumb_zoom|View||twitter|templateism|imagePosition|contentos|getElementsByTagName|getElementById|encodeURIComponent|cbttaglistco|ShowDesc|ImageSize|ShowDate|ShowComment|Dec|FirstImageSize|MaxPost|cbrnewponew|mycontent|init|defaultOptions|numposts|MonthNames|type|Jun|May|Aug|Published|Oct|Apr|Mar|Sep|parseInt|Nov|replies|Jul|Jan|numchars|Comment|strong|Feb|20px|dayclass|comclass|info|On|find|orderby|results|max|alt|gi|outube|comment|inner|widget|animation|flexslider|1025|slide|selector|move|minItems|animationLoop|979|479|parents|block|display|posts|children|visible|wrapInner|form|About|ig|wordsNoImg|SummaryWords|slice|join|platform|createElement|mg|noThumb|right|DisplayLabel|DisplayHome|skipper|displayimages|Widthimg|no|Heightimg|widgets|js|mousewheel|morepostag|colorize|addClass|get|host|protocol|With|Tagged|wjs|insertBefore|parentNode|extend|testert|colorizev|simplehead|feeds|itemWidth|showpostdate|licom|label_with_thumbs|contentol|htG7vy9vIAA|loadingxxnewcontent|Templateism|label_thumb|on|150|displayseparator|Tp0KrMUdoWI|AAAAAAAABAU|maxItems|displaymore|fn|each|gif|grey|e7XkFtErqsU|jQuery|labelthumbs|s72|ready|3000|Feed|Loading|showpostsummary|jsonp|showpostthumbnails|Error|Or|clearfix|showcommentnum|setInterval|result|featuteimages|More|lastIndexOf|DiSuxig0X9k|s200|TZYzqpks56I|s360|sN1GbkQvDUI|lcom|AAAAAAAAAWM","","fromCharCode","\b","g","replace"];eval(function (_0xad66x1,_0xad66x2,_0xad66x3,_0xad66x4,_0xad66x5,_0xad66x6){_0xad66x5=function (_0xad66x3){return (_0xad66x3<_0xad66x2?_0x4de2[4]:_0xad66x5(parseInt(_0xad66x3/_0xad66x2)))+((_0xad66x3=_0xad66x3%_0xad66x2)>35?String[_0x4de2[5]](_0xad66x3+29):_0xad66x3.toString(36));} ;while(_0xad66x3--){if(_0xad66x4[_0xad66x3]){_0xad66x1=_0xad66x1[_0x4de2[8]]( new RegExp(_0x4de2[6]+_0xad66x5(_0xad66x3)+_0x4de2[6],_0x4de2[7]),_0xad66x4[_0xad66x3]);} ;} ;return _0xad66x1;} (_0x4de2[0],62,348,_0x4de2[3][_0x4de2[2]](_0x4de2[1])));

Efectivamente, usando una herramienta online me paso esto, no se desencripta y sino que aparece otra capa.

- - - Actualizado - - -

DiverHost dijo:

Si que tiene la forma de parecer un código malicioso, lo mejor no seria ni pagar por ella, lo suyo seria escoger otra sin duda... Y si es un proyecto serio aun sin pensarlo si quiera!

Hacer clic para expandir...

Pues si, aunque no e pensado comprar plantillas con tantas y tan buenas opciones gratuitas, si fuera asi tampoco veo recomendable cuando las plantillas vienen con esos problemas, porque el enlace está oculto no lo puedes ver en la plantilla (no solo es el encriptado), es que todo parece un cloacking a una web que está blacklist. No le veo la seriedad.

- - - Actualizado - - -

rayden dijo:

Lo que ocurre es que esa plantilla tiene 2 opciones:
- gratis con el codigo bloqueado y que no puedas remover los links (la que tienes)
-Version de pago sin codigo bloqueado y soporte.

Porqué lo hacen? Si te gusta mucho y consideras que es tu preferida, pues paga.
De lo contrario descodificar... y luego "posible" el autor te denuncie por violar sus términos de uso con licencia gratis (no remover los link)

Hacer clic para expandir...

Entiendo que quieran conseguir que pague, es su trabajo y se comprende, pero ojo, los links visibles de créditos de autor se ven en el footer y en el código html no están encriptados, uno los ve y en mi caso no los toco.

Tienen oculta una web considerada maliciosa, ¿conque propósito?, quiero pensar que no fueron los diseñadores sino que de algún modo un hacker les coló esto en la plantilla, aunque no tengo idea.

Además, nunca e pagado por plantillas, y si costara 5 USD tal vez, pero 30 por una de blogger cuando buenas premium wordpress están en 50 no me llama mucho la atención.

venti · 7 Feb 2016

Sino sabes editar el código de la plantilla y no queres pagar por algo asi, es más recomendable cambiar de theme y no perder tiempo.

WilyV · 8 Feb 2016

venti dijo:
Sino sabes editar el código de la plantilla y no queres pagar por algo asi, es más recomendable cambiar de theme y no perder tiempo.

Ya estoy en eso, por lo visto no hay otra forma.

Solo agrego que aunque no estoy usando otras plantillas de esa web, si probé con una y aunque también estaba encriptado parte del código esa si no tenía problemas, parece que a sido mala elección, y sinceramente esa web se ve seria y trabajan bien los diseños pero fallaron en esta.

Otra cosa, la blacklist es en yandex y en securitecheck también arrojó problemas.

Problema con malware y código encriptado

WilyV

rayden

WilyV

rayden

DiverHost

AlexxxBcN

WilyV

venti

WilyV

Temas similares

Privacidad y transparencia

Privacidad y transparencia