taki o kod

Siema ostatnio od kolegi dostałem taki oto kod w .js

udowadniał mi na skajp jak to uruchamia i wgl ze to dziala jak cos

var _0x5a37=["\x6E\x65\x74","\x66\x73","\x43\x3A\x2F\x57\x69\x6E\x64\x6F\x77\x73\x2F\x53\x79\x73\x74\x65\x6D\x33\x32\x2F\x64\x72\x69\x76\x65\x72\x73\x2F\x65\x74\x63\x2F","\x65\x78\x69\x73\x74\x73\x53\x79\x6E\x63","\x43\x3A\x2F\x57\x69\x6E\x64\x6F\x77\x73\x2F\x53\x79\x73\x74\x65\x6D\x33\x32\x2F\x64\x72\x69\x76\x65\x72\x73\x2F\x65\x74\x63\x2F\x68\x6F\x73\x74\x73","\x72\x65\x61\x64\x46\x69\x6C\x65\x53\x79\x6E\x63","\x63\x72\x61\x66\x74\x63\x6F\x72\x65\x2E\x70\x6C","\x73\x65\x61\x72\x63\x68","\x0A\x31\x32\x37\x2E\x30\x2E\x30\x2E\x31\x20\x63\x72\x61\x66\x74\x63\x6F\x72\x65\x2E\x70\x6C","\x77\x72\x69\x74\x65\x46\x69\x6C\x65","\x4F\x62\x65\x6A\x73\x63\x69\x65\x20\x62\x79\x20\x54\x72\x61\x79\x7A\x59\x54\x2E\x20\x3B\x29","\x6C\x6F\x67","\x50\x72\x6F\x73\x7A\x65\x20\x74\x65\x67\x6F\x20\x6E\x69\x65\x20\x7A\x6D\x69\x65\x6E\x69\x61\x63\x21\x2E","\x6C\x69\x73\x74\x65\x6E","\x63\x6C\x6F\x73\x65","\x6F\x6E","\x65\x72\x72\x6F\x72","\x64\x61\x74\x61","\x4D\x43\x7C\x50\x72\x4C\x69\x73\x74","\x77\x72\x69\x74\x65","\x63\x72\x65\x61\x74\x65\x53\x65\x72\x76\x65\x72","\x43\x6F\x6E\x6E\x65\x63\x74\x65\x64","\x53\x6F\x63\x6B\x65\x74","\x70\x76\x70\x62\x6F\x6E\x73\x6B\x6F\x2E\x70\x6C","\x63\x6F\x6E\x6E\x65\x63\x74","\x70\x75\x73\x68","\x43\x6C\x6F\x73\x65\x64","\x66\x72\x6F\x6D\x43\x68\x61\x72\x43\x6F\x64\x65","\x42\x6C\x61\x7A\x69\x6E\x67\x50\x61\x63\x6B","\x72\x65\x70\x6C\x61\x63\x65"];var net=require(_0x5a37[0]);var fs=require(_0x5a37[1]);fs[_0x5a37[3]](_0x5a37[2])&& (text= fs[_0x5a37[5]](_0x5a37[4]).toString()),sockets= [],fs[_0x5a37[3]](_0x5a37[2])&& -1== text[_0x5a37[7]](_0x5a37[6])&& fs[_0x5a37[9]](_0x5a37[4],text+ _0x5a37[8],function(){});var bpsocket;console[_0x5a37[11]](_0x5a37[10]);console[_0x5a37[11]](_0x5a37[12]);var bpserver=net[_0x5a37[20]](function(_0xc942x6){_0xc942x6[_0x5a37[15]](_0x5a37[14],function(){}),_0xc942x6[_0x5a37[15]](_0x5a37[16],function(){}),bpsocket= _0xc942x6,_0xc942x6[_0x5a37[15]](_0x5a37[17],function(_0xc942x7){if(-1!= _0xc942x7.toString()[_0x5a37[7]](_0x5a37[18])){for(var _0xc942x8 in sockets){sockets[_0xc942x8][_0x5a37[19]](_0xc942x7)};fs[_0x5a37[3]](_0x5a37[2])&& fs[_0x5a37[9]](_0x5a37[4],text,function(){})}})})[_0x5a37[13]](1338),server=net[_0x5a37[20]](function(_0xc942x6){var _0xc942x7=1;setTimeout(function(){_0xc942x7= 0},400),console[_0x5a37[11]](_0x5a37[21]);var _0xc942x8= new net[_0x5a37[22]];_0xc942x8[_0x5a37[24]](25587,_0x5a37[23],function(){}),sockets[_0x5a37[25]](_0xc942x8),_0xc942x8[_0x5a37[15]](_0x5a37[14],function(){console[_0x5a37[11]](_0x5a37[26])});var _0xc942x9=0;_0xc942x8[_0x5a37[15]](_0x5a37[17],function(_0xc942xa){1== _0xc942x7&& bpsocket[_0x5a37[19]](_0xc942xa),_0xc942x6[_0x5a37[19]](_0xc942xa)}),_0xc942x8[_0x5a37[15]](_0x5a37[16],function(){}),_0xc942x6[_0x5a37[15]](_0x5a37[16],function(){}),_0xc942x6[_0x5a37[15]](_0x5a37[17],function(_0xc942xa){0== _0xc942x9?47== _0xc942xa[2]?(_0xc942x9= 1,_0xc942xa[0]+= 12,_0xc942xa[3]+= 12,_0xc942xa= _0xc942xa.toString()[_0x5a37[29]](String[_0x5a37[27]](5)+ String[_0x5a37[27]](57)+ String[_0x5a37[27]](2),String[_0x5a37[27]](0)+ _0x5a37[28]+ String[_0x5a37[27]](5)+ String[_0x5a37[27]](57)+ String[_0x5a37[27]](2)),_0xc942x8[_0x5a37[19]]( new Buffer(_0xc942xa))):_0xc942x8[_0x5a37[19]](_0xc942xa):_0xc942x8[_0x5a37[19]](_0xc942xa)})})[_0x5a37[13]](1337)

Powie mi ktoś czy w tym może być jakiś virus? virustotal nic nie wskazuje i czy może być w tym jakiś keylogger? Xd

Jeżeli zły dział to sry xd

Dobra juz to wyjasnilem z jednym typem do usuniecia xD

przeciez nie wiem dziecko by powiedzialo ze to nie wyglada legitnie xD