jsunpack - a generic JavaScript unpacker

embed.newsinc.com/thumbnail/iframe.html?wid=11831 benign

[nothing detected] (iframe) embed.newsinc.com/thumbnail/iframe.html?wid=11831
status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)saved 3111 bytes ccba4da860cb2f144791f4d6cc4eb18df189f1c6
info: [javascript variable] URL=assets.newsinc.com/launchers/20130122_2/thumbnailLauncher5.html?wid=11831&freewheel=90108&sitesection=sec&width=300&height=250&thumbid=slider&zoneid=50894&ga=false
info: [script] edge.quantserve.com/quant.js
info: [img] pixel.quantserve.com/pixel/p-573scDfDoUH6o.gif
info: [script] assets.newsinc.com/launchers/20130122_2/scripts/require-jquery.js
file: ccba4da860cb2f144791f4d6cc4eb18df189f1c6: 3111 bytes

Decoded Files

ccba/4da860cb2f144791f4d6cc4eb18df189f1c6 from embed.newsinc.com/thumbnail/iframe.html?wid=11831 (3111 bytes, 218 hidden) download

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html> <head> <meta charset="utf-8"/> <title>HTML Thumbnail Launcher</title> <link href="http://assets.newsinc.com/launchers/20130122_2/thumbLauncher4.css" rel="stylesheet" type="text/css"> <script type="text/javascript" language="javascript">pathtobumper = 'http://assets.newsinc.com/launchers/20130122_2/';function getUrlVars() {var vars = {};var parts = 'http://assets.newsinc.com/launchers/20130122_2/thumbnailLauncher5.html?wid=11831&freewheel=90108&sitesection=gatehouse_nws_us_sec&width=300&height=250&thumbid=slider&zoneid=50894&ga=false'.replace(/[?&]+([^=&]+)=([^&]*)/gi, function (m, key, value) {if (value.charAt(value.length - 1) == "#") {value = value.substring(0, value.length - 1);}vars[key.toLowerCase()] = value;});return vars;} </script> </head> <body style="margin:0px;"> <div id="ndn_container" style="overflow:hidden;v-align:top;"><div id="ndn_placeholder" class="ndn_placeholder"></div> <div id="ndn_adbox"></div> <div id="ndn_thumbContainer" class="ndn_thumbContainer"><div id="ndn_thumbScroller" class="ndn_thumbScroller"></div> <div id="ndn_thumbScroller2" class="ndn_thumbScroller2"></div> <div id="ndn_thumbScroller3" class="ndn_thumbScroller"></div> <div id="ndn_thumbScroller4" class="ndn_thumbScroller2"></div> </div> <div id="ndn_selector" class="ndn_selector" style="visibility:hidden"><select class="ndn_playlistSelector" id="ndn_playlistSelector" onChange="getPlaylist();"> </select></div> <div id="ndn_thumbControls" class="ndn_thumbControls"></div><div id="ndn_adchoice" class="ndn_adchoice" style="visibility:hidden;left:0px;z-index:80;position:relative;"><a href="http://assets.newsinc.com/info/adchoices.html" target="_blank"><div id="admarker" border="0"></div></a></div><div id="ndn_thumb_ad" class="ndn_thumb_ad" style="visibility:hidden;z-index:80;position:relative;"></div> <div id="ndn_countdown" class="ndn_countdown">Advertisement countdown</div> </div> <iframe name="swfviewFRM" id="swfviewFRM" width="0" height="0" frameborder="0"></iframe>   <script type="text/javascript">_qoptions = {qacct: "p-573scDfDoUH6o"}; </script> <script type="text/javascript" src="http://edge.quantserve.com/quant.js"></script> <noscript><img src="http://pixel.quantserve.com/pixel/p-573scDfDoUH6o.gif" style="display: none;" border="0" height="1" width="1" alt="Quantcast" /> </noscript>  <script type="text/javascript">document.write(unescape("%3Cscript src='" +  (document.location.protocol == "https:" ? "https://sb" : "http://b") + ".scorecardresearch.com/beacon.js' %3E%3C/script%3E"));</script> <script data-main="http://assets.newsinc.com/launchers/20130122_2/scripts/main" src="http://assets.newsinc.com/launchers/20130122_2/scripts/require-jquery.js"></script>  </body> </html>

picayune-times.com/section/?template=photoads&adsize=300x250-1 benign

[nothing detected] (iframe) picayune-times.com/section/?template=photoads&adsize=300x250-1
status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)saved 4493 bytes 9ef1c10553e42b2ebe83cda0630d2c656832eb1b
info: [script] com.modev.gat.atl.publicus.com/Global/js/cb.js
file: 9ef1c10553e42b2ebe83cda0630d2c656832eb1b: 4493 bytes

Decoded Files

9ef1/c10553e42b2ebe83cda0630d2c656832eb1b from picayune-times.com/section/?template=photoads&adsize=300x250-1 (4493 bytes, 163 hidden) download

<html> <head> </head> <body style="margin:0px; padding:0px">  <script type="text/javascript" src="http://lakenewsonline_com.modev.gat.atl.publicus.com/Global/js/yume_static_cb.js"></script>  <script class="kxct" data-id="H5yMBgmK" data-version="async:1.7" type="text/javascript">   window.Krux||((Krux=function(){Krux.q.push(arguments)}).q=[]);   (function(){var k=document.createElement('script');k.type='text/javascript';k.async=true;var m,src=(m=location.href.match(/\bkxsrc=([^&]+)/))&&decodeURIComponent(m[1]);k.src = /^https?:\/\/([^\/]+\.)?krxd\.net(:\d{1,5})?\//i.test(src) ? src : src === "disable" ? "" :(location.protocol==="https:"?"https:":"http:")+"//cdn.krxd.net/controltag?confid=H5yMBgmK";var s=document.getElementsByTagName('script')[0];s.parentNode.insertBefore(k,s);   })(); </script>  <script> window.Krux||((Krux=function(){Krux.q.push(arguments);}).q=[]); (function(){   function retrieve(n){var m, k='kx'+n;if (window.localStorage) {return window.localStorage[k] || "";} else if (navigator.cookieEnabled) {m = document.cookie.match(k+'=([^;]*)');return (m && unescape(m[1])) || "";} else {return '';}   }   Krux.user = retrieve('user');   Krux.segments = retrieve('segs') && retrieve('segs').split(',') || []; })(); </script> <script type='text/javascript'> (function() { var useSSL = 'https:' == document.location.protocol; var src = (useSSL ? 'https:' : 'http:') + '//www.googletagservices.com/tag/js/gpt.js'; document.write('<scr' + 'ipt src="' + src + '"></scr' + 'ipt>'); })(); </script> <script type='text/javascript'> googletag.cmd.push(function() { googletag.pubads().setTargeting("pg type"," section"); googletag.pubads().setTargeting("ksgmnt", Krux.segments); googletag.pubads().setTargeting("u", Krux.user); var defslot_a='/11564835/picayune-times.com'; var defslot_b='/photos'; googletag.defineSlot(defslot_a+defslot_b, [728, 90], 'dfp-728x90-1').addService(googletag.pubads()).setTargeting("pos","atf"); googletag.defineSlot(defslot_a+defslot_b, [728, 90], 'dfp-728x90-2').addService(googletag.pubads()).setTargeting("pos","btf"); googletag.defineSlot(defslot_a+defslot_b, [728, 90], 'dfp-728x90-3').addService(googletag.pubads()).setTargeting("pos","stf"); googletag.defineSlot(defslot_a+defslot_b, [300, 250], 'dfp-300x250-1').addService(googletag.pubads()).setTargeting("pos","atf"); googletag.defineSlot(defslot_a+defslot_b, [300, 250], 'dfp-300x250-2').addService(googletag.pubads()).setTargeting("pos","stf"); googletag.defineSlot(defslot_a+defslot_b, [300, 250], 'dfp-300x250-3').addService(googletag.pubads()).setTargeting("pos","btf"); googletag.defineSlot(defslot_a+defslot_b, [300, 250], 'dfp-300x250-4').addService(googletag.pubads()).setTargeting("pos","btf_2"); googletag.defineSlot(defslot_a+defslot_b, [300,250], 'dfp-300x250-deals').addService(googletag.pubads()).setTargeting("pos","deals"); googletag.defineSlot(defslot_a+defslot_b, [160, 600], 'dfp-160x600-1').addService(googletag.pubads()).setTargeting("pos","atf"); googletag.defineSlot(defslot_a+defslot_b, [120, 60], 'dfp-120x60').addService(googletag.pubads()).setTargeting("pos","atf"); googletag.defineSlot(defslot_a+defslot_b, [88, 32], 'dfp-88x32').addService(googletag.pubads()).setTargeting("pos","atf"); googletag.defineSlot(defslot_a+defslot_b, [1, 1], 'dfp-sliding-billboard').addService(googletag.pubads()).setTargeting("pos","stf"); googletag.defineSlot(defslot_a+defslot_b, [1, 1], 'dfp-pop-under').addService(googletag.pubads()).setTargeting("pos","btf"); googletag.defineOutOfPageSlot(defslot_a+'/overlay'+defslot_b, 'dfp-overlay-opp').addService(googletag.pubads()); googletag.defineOutOfPageSlot(defslot_a+'/peel'+defslot_b, 'dfp-pagepeel-oop').addService(googletag.pubads()); googletag.defineOutOfPageSlot(defslot_a+'/skyslider'+defslot_b, 'dfp-skyslider-oop').addService(googletag.pubads()); googletag.defineOutOfPageSlot(defslot_a+'/interstitial'+defslot_b, 'dfp-interstitial-oop').addService(googletag.pubads()); googletag.pubads().enableSyncRendering(); googletag.enableServices(); }); </script> <div id='dfp-300x250-1'> <script type='text/javascript'>googletag.cmd.push(function() { googletag.display('dfp-300x250-1'); });</script> </div>  </body> </html>

www.picayune-times.com/Global/js/lib.js benign

[nothing detected] (script) www.picayune-times.com/Global/js/lib.js
status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)saved 2402 bytes e01425ecadbe918f0d6df0f592f0f611fec60ac4
info: [img] www.picayune-times.com/Global/images/spacer.gif
file: e01425ecadbe918f0d6df0f592f0f611fec60ac4: 2402 bytes

Decoded Files

e014/25ecadbe918f0d6df0f592f0f611fec60ac4 from www.picayune-times.com/Global/js/lib.js (2402 bytes, 96 hidden) download

// WebTicker by Mioplanet // www.mioplanet.com  TICKER_CONTENT = document.getElementById("TICKER").innerHTML; TICKER_RIGHTTOLEFT = false; TICKER_SPEED = 2; if(navigator.userAgent.indexOf("Firefox")!=-1 || navigator.userAgent.indexOf("Chrome")!=-1) TICKER_STYLE = "font-family:Arial; font-size:12px; padding:0 750px 0 0"; else TICKER_STYLE = "font-family:Arial; font-size:12px; padding:0 0 0 750px";  TICKER_PAUSED = false;  ticker_start();  function ticker_start() { var tickerSupported = false; TICKER_WIDTH = document.getElementById("TICKER").style.width; var img = "<img src=/Global/images/spacer.gif width="+TICKER_WIDTH+" height=0 border=0>";  // Firefox if (navigator.userAgent.indexOf("Firefox")!=-1 || navigator.userAgent.indexOf("Safari")!=-1) { document.getElementById("TICKER").innerHTML = "<TABLE  cellspacing='0' cellpadding='0' width='100%'><TR><TD nowrap='nowrap'>"+img+"<SPAN style='"+TICKER_STYLE+"' ID='TICKER_BODY' width='100%'>&nbsp;</SPAN></TD></TR></TABLE>"; tickerSupported = true; } // IE if (navigator.userAgent.indexOf("MSIE")!=-1 && navigator.userAgent.indexOf("Opera")==-1) { document.getElementById("TICKER").innerHTML = "<DIV nowrap='nowrap' style='width:100%;'><SPAN style='"+TICKER_STYLE+"' ID='TICKER_BODY' width='100%'></SPAN>"+img+"</DIV>"; tickerSupported = true; } if(!tickerSupported) document.getElementById("TICKER").outerHTML = ""; else { document.getElementById("TICKER").scrollLeft = TICKER_RIGHTTOLEFT ? document.getElementById("TICKER").scrollWidth - document.getElementById("TICKER").offsetWidth : 0; document.getElementById("TICKER_BODY").innerHTML = TICKER_CONTENT; document.getElementById("TICKER").style.display="block"; TICKER_tick(); } }  function TICKER_tick() { if(!TICKER_PAUSED) document.getElementById("TICKER").scrollLeft += TICKER_SPEED * (TICKER_RIGHTTOLEFT ? -1 : 1);if(TICKER_RIGHTTOLEFT && document.getElementById("TICKER").scrollLeft <= 0) document.getElementById("TICKER").scrollLeft = document.getElementById("TICKER").scrollWidth - document.getElementById("TICKER").offsetWidth;if(!TICKER_RIGHTTOLEFT && document.getElementById("TICKER").scrollLeft >= document.getElementById("TICKER").scrollWidth - document.getElementById("TICKER").offsetWidth) document.getElementById("TICKER").scrollLeft = 0;window.setTimeout("TICKER_tick()", 30); }

www.picayune-times.com/Global/js/jquery.jscrollpane.min.js benign

[nothing detected] (script) www.picayune-times.com/Global/js/jquery.jscrollpane.min.js
status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)saved 14629 bytes 35287b25547f8ee21c735b1c92a8d53eb4b7c0fa
file: 35287b25547f8ee21c735b1c92a8d53eb4b7c0fa: 14629 bytes

Decoded Files

3528/7b25547f8ee21c735b1c92a8d53eb4b7c0fa from www.picayune-times.com/Global/js/jquery.jscrollpane.min.js (14629 bytes, 10 hidden) download

/*  * jScrollPane - v2.0.0beta10 - 2011-04-17  * http://jscrollpane.kelvinluck.com/  *  * Copyright (c) 2010 Kelvin Luck  * Dual licensed under the MIT and GPL licenses.  */ (function(b,a,c){b.fn.jScrollPane=function(f){function d(E,P){var aA,R=this,Z,al,w,an,U,aa,z,r,aB,aG,aw,j,J,i,k,ab,V,ar,Y,u,B,at,ag,ao,H,m,av,az,y,ax,aJ,g,M,ak=true,Q=true,aI=false,l=false,aq=E.clone(false,false).empty(),ad=b.fn.mwheelIntent?"mwheelIntent.jsp":"mousewheel.jsp";aJ=E.css("paddingTop")+" "+E.css("paddingRight")+" "+E.css("paddingBottom")+" "+E.css("paddingLeft");g=(parseInt(E.css("paddingLeft"),10)||0)+(parseInt(E.css("paddingRight"),10)||0);function au(aS){var aN,aP,aO,aL,aK,aR,aQ=false,aM=false;aA=aS;if(Z===c){aK=E.scrollTop();aR=E.scrollLeft();E.css({overflow:"hidden",padding:0});al=E.innerWidth()+g;w=E.innerHeight();E.width(al);Z=b('<div class="jspPane" />').css("padding",aJ).append(E.children());an=b('<div class="jspContainer" />').css({width:al+"px",height:w+"px"}).append(Z).appendTo(E)}else{E.css("width","");aQ=aA.stickToBottom&&L();aM=aA.stickToRight&&C();aL=E.innerWidth()+g!=al||E.outerHeight()!=w;if(aL){al=E.innerWidth()+g;w=E.innerHeight();an.css({width:al+"px",height:w+"px"})}if(!aL&&M==U&&Z.outerHeight()==aa){E.width(al);return}M=U;Z.css("width","");E.width(al);an.find(">.jspVerticalBar,>.jspHorizontalBar").remove().end()}Z.css("overflow","auto");if(aS.contentWidth){U=aS.contentWidth}else{U=Z[0].scrollWidth}aa=Z[0].scrollHeight;Z.css("overflow","");z=U/al;r=aa/w;aB=r>1;aG=z>1;if(!(aG||aB)){E.removeClass("jspScrollable");Z.css({top:0,width:an.width()-g});o();F();S();x();aj()}else{E.addClass("jspScrollable");aN=aA.maintainPosition&&(J||ab);if(aN){aP=aE();aO=aC()}aH();A();G();if(aN){O(aM?(U-al):aP,false);N(aQ?(aa-w):aO,false)}K();ah();ap();if(aA.enableKeyboardNavigation){T()}if(aA.clickOnTrack){q()}D();if(aA.hijackInternalLinks){n()}}if(aA.autoReinitialise&&!ax){ax=setInterval(function(){au(aA)},aA.autoReinitialiseDelay)}else{if(!aA.autoReinitialise&&ax){clearInterval(ax)}}aK&&E.scrollTop(0)&&N(aK,false);aR&&E.scrollLeft(0)&&O(aR,false);E.trigger("jsp-initialised",[aG||aB])}function aH(){if(aB){an.append(b('<div class="jspVerticalBar" />').append(b('<div class="jspCap jspCapTop" />'),b('<div class="jspTrack" />').append(b('<div class="jspDrag" />').append(b('<div class="jspDragTop" />'),b('<div class="jspDragBottom" />'))),b('<div class="jspCap jspCapBottom" />')));V=an.find(">.jspVerticalBar");ar=V.find(">.jspTrack");aw=ar.find(">.jspDrag");if(aA.showArrows){at=b('<a class="jspArrow jspArrowUp" />').bind("mousedown.jsp",aF(0,-1)).bind("click.jsp",aD);ag=b('<a class="jspArrow jspArrowDown" />').bind("mousedown.jsp",aF(0,1)).bind("click.jsp",aD);if(aA.arrowScrollOnHover){at.bind("mouseover.jsp",aF(0,-1,at));ag.bind("mouseover.jsp",aF(0,1,ag))}am(ar,aA.verticalArrowPositions,at,ag)}u=w;an.find(">.jspVerticalBar>.jspCap:visible,>.jspVerticalBar>.jspArrow").each(function(){u-=b(this).outerHeight()});aw.hover(function(){aw.addClass("jspHover")},function(){aw.removeClass("jspHover")}).bind("mousedown.jsp",function(aK){b("html").bind("dragstart.jsp selectstart.jsp",aD);aw.addClass("jspActive");var s=aK.pageY-aw.position().top;b("html").bind("mousemove.jsp",function(aL){W(aL.pageY-s,false)}).bind("mouseup.jsp mouseleave.jsp",ay);return false});p()}}function p(){ar.height(u+"px");J=0;Y=aA.verticalGutter+ar.outerWidth();Z.width(al-Y-g);try{if(V.position().left===0){Z.css("margin-left",Y+"px")}}catch(s){}}function A(){if(aG){an.append(b('<div class="jspHorizontalBar" />').append(b('<div class="jspCap jspCapLeft" />'),b('<div class="jspTrack" />').append(b('<div class="jspDrag" />').append(b('<div class="jspDragLeft" />'),b('<div class="jspDragRight" />'))),b('<div class="jspCap jspCapRight" />')));ao=an.find(">.jspHorizontalBar");H=ao.find(">.jspTrack");i=H.find(">.jspDrag");if(aA.showArrows){az=b('<a class="jspArrow jspArrowLeft" />').bind("mousedown.jsp",aF(-1,0)).bind("click.jsp",aD);y=b('<a class="jspArrow jspArrowRight" />').bind("mousedown.jsp",aF(1,0)).bind("click.jsp",aD); if(aA.arrowScrollOnHover){az.bind("mouseover.jsp",aF(-1,0,az));y.bind("mouseover.jsp",aF(1,0,y))}am(H,aA.horizontalArrowPositions,az,y)}i.hover(function(){i.addClass("jspHover")},function(){i.removeClass("jspHover")}).bind("mousedown.jsp",function(aK){b("html").bind("dragstart.jsp selectstart.jsp",aD);i.addClass("jspActive");var s=aK.pageX-i.position().left;b("html").bind("mousemove.jsp",function(aL){X(aL.pageX-s,false)}).bind("mouseup.jsp mouseleave.jsp",ay);return false});m=an.innerWidth();ai()}}function ai(){an.find(">.jspHorizontalBar>.jspCap:visible,>.jspHorizontalBar>.jspArrow").each(function(){m-=b(this).outerWidth()});H.width(m+"px");ab=0}function G(){if(aG&&aB){var aK=H.outerHeight(),s=ar.outerWidth();u-=aK;b(ao).find(">.jspCap:visible,>.jspArrow").each(function(){m+=b(this).outerWidth()});m-=s;w-=s;al-=aK;H.parent().append(b('<div class="jspCorner" />').css("width",aK+"px"));p();ai()}if(aG){Z.width((an.outerWidth()-g)+"px")}aa=Z.outerHei

picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 benign

[nothing detected] (iframe) picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0
status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)saved 13955 bytes 5917c7ebcae77632f215b644a69852857bc02631
info: [script] partner.googleadservices.com/gampad/service.js
info: [script] include.reinvigorate.net/.js
info: [decodingLevel=0] found JavaScript
error: undefined variable GS_googleAddAdSenseService
error: undefined function GS_googleAddAdSenseService
suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
file: 5917c7ebcae77632f215b644a69852857bc02631: 13955 bytes
file: 61fc31e2f316d5c2fda93420099bdb6b06902e64: 24380 bytes
file: 6d32918adaf73b3be42edc5380b88c0992a7c2fd: 24589 bytes
file: b3ce7610577a2223939689e806c744fe445c2d37: 24781 bytes
file: 3ffb382946327ce541b3ccaf85b4ac1354383934: 24495 bytes
file: 72fd022efde081b8e371441236a7cb710d4c5a01: 24619 bytes
file: 9fb0cc0a4fe8a58f6713163814d1afcbce8ef720: 14265 bytes
file: 8aed74110b76ec5543e419f1009a7346b0cd9afb: 14271 bytes
file: ce858e1945ce510c766ba00ebcd7f7adcd68df9d: 14480 bytes
file: 165544321f20c0756efe9e13b2c97d9dbef6f405: 14672 bytes
file: a37bee6468de0df658f5c8c0d1a4774e755a7a5d: 14386 bytes
file: f652e935ce1911a7823ef94aeb6873b459f68cef: 14510 bytes

Decoded Files

5917/c7ebcae77632f215b644a69852857bc02631 from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 (13955 bytes, 1974 hidden) download

<html> <head> <script type="text/javascript">var _gaq = _gaq || [];_gaq.push(['_setAccount', 'UA-3840208-1']);_gaq.push(['_setDomainName', '.eviesays.com']);_gaq.push(['_trackPageview']); </script>  <style type="text/css"> body { background-color: transparent; margin:0; padding:0; }  .content { /*font-family: Arial, Helvetica, sans-serif;*/ font-family: Georgia, serif; overflow: hidden; padding: 0; text-align: center; width: 300px; }#search_box_container { width: 300px; height: 43px; background-color: #eeeeee; border-top-style: solid; border-top-width: 2px;border-top-color: 8B0000; } .search_label { font-family: Arial, Helvetica, sans-serif; font-size:   8pt; color:8B0000; } #search_results { width:296px; /*border-style: solid;*/ /*border-width: 2px;*/ /*border-color: #cccccc #cccccc #8B0000 #cccccc;*/ /*border-right-color: #cccccc;*/ }  #title_space { height: 36px; text-overflow: ellipsis; -o-text-overflow: ellipsis; overflow: hidden; color: #2c2c2c; font-size: 28px; font-family: Arial, Helvetica, sans-serif; } .calendar_container { margin-top:2px; width:296px; height:22px; }  .calendar_container a { text-decoration: none; }.calendar_end_cap { height:40px; width: 2px; /*background-color:#cccccc; */ float:left; } .calendar_end_cap_left { height:40px; width: 2px; /*margin-left:1px; */ /*background-color:#cccccc;*/ float:left; } .calendar_today { float:left; width:40px; height:18px; margin-left:1px;margin-right:1px; /*background-color:#e21a49;*/ background-color:#8B0000; /*font-weight: bold; */ color:white; padding-top:4px; -moz-border-radius: 3px; border-radius: 3px; -webkit-border-radius: 3px; }.calendar_day { float:left; width:40px; height:18px; margin-left:1px; margin-right:1px; background-color:#eeeeee; color:#757575; padding-top:4px; /*font-weight: bold; */ -moz-border-radius: 3px; border-radius: 3px; -webkit-border-radius: 3px; }  .day_of_week { /*text-transform:uppercase; */ font-size:12px; }  .silo_container { width: 330px; height: 25px; }.all_silo { width:73px; height:23; margin:1px; color:white; /*background-color:#e11c4a;*/ background-color: #8B0000; font-size:14px; line-height:24px; float:left; -moz-border-radius: 3px; border-radius: 3px; -webkit-border-radius: 3px; }.all_silo a { text-decoration:none; color: white; }.other_silo { width:73px; height:23; margin:1px; color:3e3e3e; background-color:#dcdcdc; font-size:14px; line-height:24px; float:left; -moz-border-radius: 3px; border-radius: 3px; -webkit-border-radius: 3px; }  .other_silo a { text-decoration:none; color: 3e3e3e; }  .powered_by { text-align:right; margin-right: 5px; color: #aaaaaa; font-size: 9px; }  .powered_by a { color: #aaaaaa; font-size: 9px; text-decoration: none; font-weight:bold; }.add_link a { color:black; }.event_row { margin-left: 3px; margin-top: 8px; width:290px; height:18px; font-family: Arial, Helvetica, sans-serif; color: #123b69; text-align:left; font-size:13px; padding-left:2px; text-overflow: ellipsis; -o-text-overflow: ellipsis; overflow: hidden; }.event_row a { text-decoration: none; color: #123b69; }  #extra_links { color: #123b69; font-family: Arial, Helvetica, sans-serif; font-size: 12px; font-weight: bold; margin-top: 5px; margin-bottom: 5px; } #extra_links a { text-decoration: none; color: #123b69; }#more_events { float: left; width: 110px; }.date { font-weight:bold; font-family:; font-family: Arial, Helvetica, sans-serif; } .visible_widget { visibility: visible; display:inline; min-height: 220px; }  .hidden_widget { visibility: hidden; display:none; min-height: 220px; }</style>  <script type='text/javascript' src='http://partner.googleadservices.com/gampad/google_service.js'></script> <script type="text/javascript">   GS_googleAddAdSenseService("ca-pub-6374692812882232");   GS_googleEnableAllServices(); </script> <script type="text/javascript">GA_googleAddSlot("ca-pub-6374692812882232", "eviesays_widget_picayune-times_300x250");   </script> <script type="text/javascript">GA_googleFetchAds(); </script><script type="text/javascript"> function getByClass(classx,tag){ var elements = document.getElementsByTagName(tag); var result = []; for(i=0;i<elements.length;i++){if(elements[i].getAttribute("class") == classx){result.push(elements[i]);} } return result; }  function showDayOfWeek (the_id) { //hide the visible builders var allBuilders = getByClass('visible_widget','div'); for (var i = 0; (element = allBuilders[i]) != null; i++) {element.className = 'hidden_widget'; }var item = document.getElementById('day'+the_id); if ( item ) {item.className = 'visible_widget'; }//now change the header var selectedDOW = getByClass('calendar_today','div'); for (var i = 0; (element = selectedDOW[i]) != null; i++) {element.className = 'calendar_day'; }var newSelected = document.getElementById('dow' + the_id); if (newSelected) {newSelected.className = 'calendar_today'; } } </script> </head> <body> <div class='content'> <div id='search_results'> <div class='calendar_container'><a href='javascript:showDayOfWeek("1");'><div class='ca

61fc/31e2f316d5c2fda93420099bdb6b06902e64 from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 6d32/918adaf73b3be42edc5380b88c0992a7c2fd from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 b3ce/7610577a2223939689e806c744fe445c2d37 from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 3ffb/382946327ce541b3ccaf85b4ac1354383934 from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 72fd/022efde081b8e371441236a7cb710d4c5a01 from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 9fb0/cc0a4fe8a58f6713163814d1afcbce8ef720 from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 8aed/74110b76ec5543e419f1009a7346b0cd9afb from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 ce85/8e1945ce510c766ba00ebcd7f7adcd68df9d from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 1655/44321f20c0756efe9e13b2c97d9dbef6f405 from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 a37b/ee6468de0df658f5c8c0d1a4774e755a7a5d from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0 f652/e935ce1911a7823ef94aeb6873b459f68cef from picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0

www.picayune-times.com/article/20121022/NEWS/121029979 benign

[nothing detected] www.picayune-times.com/article/20121022/NEWS/121029979
status: (referer=http:/www.ask.com/web?q=puppies)saved 89227 bytes c4a43f078c490f66f2c2058dd7ba47f2c5f0f024
info: [javascript variable] URL=
info: [javascript variable] URL=www.picayune-times.com/section/?template=ajaxWeather
info: [script] www.picayune-times.com/Global/js/jquery1.5.2.min.js
info: [script] www.picayune-times.com/Global/js/navigationmenu.js
info: [script] www.picayune-times.com/Global/js/jquery.mousewheel.js
info: [script] www.picayune-times.com/Global/js/jquery.jscrollpane.min.js
info: [script] www.picayune-times.com/Global/js/jquery.jcarousel.js
info: [script] www.picayune-times.com/Global/js/accordian.js
info: [script] www.picayune-times.com/Global/js/photo.js
info: [script] www.picayune-times.com/Global/js/newsticker.jquery.js
info: [script] www.picayune-times.com/Global/js/jquery.anythingslider.js
info: [script] www.picayune-times.com/Global/js/poll.js
info: [script] www.picayune-times.com/Global/js/jquery.webticker.js
info: [script] www.picayune-times.com/Global/js/jquery.fancybox-1.3.4.pack.js
info: [script] www.picayune-times.com/Global/js/handler.js
info: [script] www.picayune-times.com/Global/js/global.js
info: [script] www.picayune-times.com/Global/js/pager.js
info: [script] www.picayune-times.com/Global/js/section-pagination.js
info: [script] www.picayune-times.com/Global/js/section-Topstories.js
info: [script] www.picayune-times.com/Global/js/jquery.lightbox.js
info: [script] www.picayune-times.com/Global/js/gallery.js
info: [script] www.picayune-times.com/Global/js/validation.js
info: [script] www.picayune-times.com/Global/js/subscription.js
info: [iframe] picayune-times.com/section/?template=photoads&adsize=728x90-1
info: [iframe] picayune-times.com/section/?template=photoads&adsize=300x250-1
info: [img] www.picayune-times.com/article/20121022/NEWS/
info: [script] w.sharethis.com/button/buttons.js
info: [iframe] www.picayune-times.com/section/?template=photoads&adsize=728x90-1
info: [img] www.picayune-times.com/Global/images/logo.png
info: [img] www.picayune-times.com/Global/images/big.gif
info: [img] www.picayune-times.com/Global/images/weather/38.png
info: [img] www.picayune-times.com/Global/images/ar-logo.png
info: [iframe] www.picayune-times.com/section/?template=photoads&adsize=120x60
info: [script] www.picayune-times.com/Global/js/lib.js
info: [img] analytics.apnewsregistry.com/analytics/v2/image.svc/PICAYUNE-TIMES/RWS/picayune-times.com/CAI/121029979/E/prod/AT/A
info: [img] ARweb.GAT.atl.publicus.com/storyimage/AR/20121022/NEWS/121029979/AR/0/AR-121029979.jpg&MaxW=315&MaxH=230
info: [img] www.picayune-times.com/Global/images/Document.png
info: [iframe] web.adblade.com/impsc.php?cid=1551-4049130895&output=html
info: [script] maps-static.chitika.net/misc/gatehouse/430x370.js
info: [img] www.picayune-times.com/Global/images/icon.gif
info: [img] www.picayune-times.com/Global/images/newspaper.png
info: [script] widgets.outbrain.com/outbrain.js
info: [iframe] embed.newsinc.com/thumbnail/iframe.html?wid=11831
info: [iframe] picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0
info: [script] c5.zedo.com/jsc/c5/fhs.js
info: [script] cdn.taboolasyndication.com/libtrc/gatehouse-network/loader.js
info: [decodingLevel=0] found JavaScript
error: line:129: SyntaxError: missing ) after argument list:
   error: line:129: $('#maincontainer').html("<ul id="">"+content+"</ul>");
   error: line:129: ......................................................^
error: line:4: SyntaxError: missing = in XML attribute:
   error: line:4: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
   error: line:4: ...............^
file: c4a43f078c490f66f2c2058dd7ba47f2c5f0f024: 89227 bytes

Decoded Files

c4a4/3f078c490f66f2c2058dd7ba47f2c5f0f024 from www.picayune-times.com/article/20121022/NEWS/121029979 (89227 bytes, 14556 hidden) download

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://ogp.me/ns/fb#"> <head>  <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta property="fb:app_id" content="246399228711582"/> <meta name="msvalidate.01" content="7E15F9269E2CE66F2A488ABB04B5015E" />  <title>Stuttgart Kiwanis Club to kick off annual ICCM Food Bank drive - Prescott, AR - Nevada County Picayune-Times - Prescott, AR</title>  <link rel="stylesheet" href="http://www.picayune-times.com/Global/css/reset.css" /> <link rel="stylesheet" href="http://www.picayune-times.com/Global/css/style.css" /> <link rel="stylesheet" href="http://www.picayune-times.com/Global/css/color.css" /> <link rel="stylesheet" href="http://www.picayune-times.com/Global/css/font.css" />  <link rel="stylesheet" href="http://www.picayune-times.com/Global/css/article-style.css" />   <link type="text/css" href="http://www.picayune-times.com/Global/css/poll.css" rel="stylesheet" media="all" />   <link type="text/css" href="http://www.picayune-times.com/Global/css/skin.css" rel="stylesheet" media="all" /> <link type="text/css" href="http://www.picayune-times.com/Global/css/accordion.css" rel="stylesheet" media="all" />  <link rel="stylesheet" href="http://www.picayune-times.com/Global/css/ObitsLegacy.css" />  <link rel="stylesheet" type="text/css" href="http://www.picayune-times.com/Global/css/jquery.fancybox-1.3.4.css" media="screen" />   <link rel="stylesheet" type="text/css" href="http://www.picayune-times.com/Global/CSS/jobs.css" /> <script type="text/javascript" src="http://www.picayune-times.com/Global/js/jquery1.5.2.min.js"></script> <script type="text/javascript" src="http://www.picayune-times.com/Global/js/navigationmenu.js"></script>  <script type="text/javascript" src="http://www.picayune-times.com/Global/js/jquery.mousewheel.js"></script> <script type="text/javascript" src="http://www.picayune-times.com/Global/js/jquery.jscrollpane.min.js"></script> <script type="text/javascript" src="http://www.picayune-times.com/Global/js/jquery.jcarousel.js"></script> <script type="text/javascript" src="http://www.picayune-times.com/Global/js/accordian.js"></script> <script type="text/javascript" src="http://www.picayune-times.com/Global/js/photo.js"></script> <script type="text/javascript" src="http://www.picayune-times.com/Global/js/newsticker.jquery.js"></script> <script type="text/javascript" src="http://www.picayune-times.com/Global/js/jquery.anythingslider.js"></script>   <script type="text/javascript" src="http://www.picayune-times.com/Global/js/poll.js"></script>   <script src="http://www.picayune-times.com/Global/js/jquery.webticker.js" type="text/javascript"></script>   <script type="text/javascript" src="http://www.picayune-times.com/Global/js/jquery.fancybox-1.3.4.pack.js"></script> <script type="text/javascript" src="http://www.picayune-times.com/Global/js/fancybox_handler.js"></script> <script type="text/javascript">function trim(stringToTrim) {return stringToTrim.replace(/^\s+|\s+$/g,"");}function searchbox(value,keyword,id) {if(keyword==trim(value)){document.getElementById(id).value="";}} </script>  <script type="text/javascript" src="http://www.picayune-times.com/Global/js/global.js"></script>   <script type="text/javascript" src="http://www.picayune-times.com/Global/js/article_pager.js"></script>   <script type="text/javascript">$(function () {$('#slider1').anythingSlider({width : 780,// Override the default CSS widtheasing: 'easeInOutExpo'});});var pager = new wordcount.Pager();$(document).ready(function() {$(document).ready(function(){$(function(){var div = $("#tempdisplay");var tmp = div.children().clone();var parent = div.parent();div.remove();tmp.appendTo(parent);$("#maincontainer #webticker2").webTicker({travelocity: 0.05, direction: 1});$(".scroller-container .arrow-next").click(function(){$("#maincontainer #webticker2").webTicker("stop");var content = $('#maincontainer .tickercontainer .mask #webticker2').html();$('#maincontainer').html("<ul id=\"webticker2\">"+content+"</ul>");$("#maincontainer #webticker2").css("float","right");$("#maincontainer #webticker2 li").removeClass("ftlt");$("#maincontainer #webticker2 li").addClass("webticker2li");$("#maincontainer #webticker2").webTicker("init",

www.picayune-times.com/Global/js/section-pagination.js benign

[nothing detected] (script) www.picayune-times.com/Global/js/section-pagination.js
status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)saved 6754 bytes de0f466f11728ad7a384d967f64d175d5ea4c8ad
info: [decodingLevel=0] found JavaScript
error: undefined variable $
error: undefined function $
file: de0f466f11728ad7a384d967f64d175d5ea4c8ad: 6754 bytes

Decoded Files

de0f/466f11728ad7a384d967f64d175d5ea4c8ad from www.picayune-times.com/Global/js/section-pagination.js (6754 bytes, 1062 hidden) download

$(document).ready(function(){//find the page lengthno_of_onepage=10;total_news=parseInt($("#Total-count").html());if(isNaN(total_news)){$("#out_container").hide();} //hide container if there is no data.else{number_of_pages=total_news/no_of_onepage;if(total_news%no_of_onepage==0){number_of_pages=total_news/no_of_onepage;}else{number_of_pages=Math.floor(total_news/no_of_onepage)+1;}lastPage=number_of_pages-1;$("#paginat_cont .right_navi").html("<li onclick='previousPage()' class='previous'><a title='Previous Page' href='javascript:void(0)' class='is-first'>&lt;</a></li> <li onclick='displayPage(1)' class='first'><a title='First Page' href='javascript:void(0)' class='is-previous'>&lt;&lt;</a></li> <span class='number'><div class='div_number'><ul class='list_number'></ul></div></span><li class='last' onclick='displayPage("+number_of_pages+")'><a title='Last Page' href='javascript:void(0)' class='is-next'>&gt;&gt;</a></li><li onclick='nextPage()' class='next'><a href='javascript:void(0)' class='is-last' title='Next Page'>&gt;</a></li>");//entering numbers inside number spanfor(i=1;i<=number_of_pages;i++){display_string=i$("#paginat_cont .right_navi .number .list_number").append('<li onclick=displayPage('+i+')><a href=javascript:void(0)>'+display_string+'</a></li>');}//declaring global variableslist_number=$('#paginat_cont .right_navi .list_number');lists_width=$('#paginat_cont .right_navi .list_number li:last-child').width();current_element=0;page_number=0;if(number_of_pages<6){available_page=number_of_pages;}else{available_page=6;}total_lists_width=lists_width;slider=3;end_slide=number_of_pages-slider;//set total width for the display_container$("#paginat_cont .right_navi .number").css("width",available_page*total_lists_width);$("#paginat_cont .right_navi .number .div_number").css("width",available_page*total_lists_width);$("#paginat_cont .right_navi .number li:eq(0) a").removeClass("is-normal").addClass("is-active");$("#paginat_cont .right_navi .number li:eq("+number_of_pages+") a").removeClass("is-normal").addClass("is-active");try{profileid=$("#profile").val(); }catch(error){}current_element=1;fadeInOutPrevNext();} }); function displayPage(page_number){if(current_element!=page_number){if(page_number<=1){id=1;}else{id=((page_number*no_of_onepage)-no_of_onepage)+1;}$('.paginat_content').animate({opacity: .2},"fast",function(){$('.paginat_content').load("/?template=ajaxSectiongallery&id="+id+"&profileid="+parseInt(profileid),function(){$('.paginat_content').animate({opacity: 1},"slow");});});current_element=page_number;$("#paginat_cont .right_navi .number li a.is-active ").removeClass("is-active").addClass("is-normal");$("#paginat_cont .right_navi .number li:eq("+(parseInt(current_element)-1)+") a").removeClass("is-normal").addClass("is-active");$("#paginat_cont .right_navi .number li:eq("+(parseInt(number_of_pages)+parseInt(current_element)-1)+") a").removeClass("is-normal").addClass("is-active");if(current_element>slider&&current_element<=end_slide) {numberSlide();}else {slideForwardBackward()};fadeInOutPrevNext();} } function nextPage(){if(current_element!=number_of_pages){displayPage(parseInt(current_element)+1);} } function previousPage(){if(current_element!=1){displayPage(parseInt(current_element)-1);} }  function numberSlide(){//ele_pos_left=current_ele_pos.position().left;ele_pos_left=(current_element-slider)*total_lists_width;list_number.animate({"left":-(ele_pos_left)},"slow"); } function slideForwardBackward(){if(current_element<=slider){forwardPage();}else{backwardPage();} } function forwardPage(){list_number.animate({"left":0},"slow"); } function backwardPage(){total_width=number_of_pages*total_lists_width;occupaid_width=available_page*total_lists_width;slide_left=total_width-occupaid_width;list_number.animate({"left":-(slide_left)},"slow"); } function fadeInOutPrevNext(){if(current_element<=1){$("#paginat_cont .right_navi .first").animate({opacity: .2},"slow");$("#paginat_cont .right_navi .first a").css("cursor","text").hover(function(){$(this).css("color","#315680");}).css("color","#315680");$("#paginat_cont .right_navi .previous").animate({opacity: .2},"slow");$("#paginat_cont .right_navi .previous a").css("cursor","text").hover(function(){$(this).css("color","#315680");}).css("color","#315680");}else{$("#paginat_cont .right_navi .first").animate({opacity: 1},"slow");$("#paginat_cont .right_navi .first a").css("cursor","pointer").hover(function(){$(this).css("color","#B30000");}).mouseout(function(){$(this).css("color","#315680");});$("#paginat_cont .right_navi .previous").animate({opacity: 1},"slow");$("#paginat_cont .right_navi .previous a").css("cursor","pointer").hover(function(){$(this).css("color","#B30000");}).mouseout(function(){$(this).css("color","#315680");});;}if(current_element==number_of_pages){$("#paginat_cont .right_navi .last").animate({opacity: .2},"slow");$("#paginat_cont .right_navi .last a").css("cursor","text").hover(function(){$(this).css("color","#315680");}).css("color",

www.picayune-times.com/Global/js/jquery.lightbox.js benign

[nothing detected] (script) www.picayune-times.com/Global/js/jquery.lightbox.js
status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)saved 20956 bytes a3c460e7829e3b85a7454253b6a791b71369000d
info: [img] www.picayune-times.com/Global/js/../fotos/XX.jpg
info: [img] www.picayune-times.com/Global/js/../images/lightbox-ico-loading.gif
info: [img] www.picayune-times.com/Global/js/../images/lightbox-btn-close.gif
info: [img] www.picayune-times.com/Global/js/
info: [decodingLevel=0] found JavaScript
error: undefined variable jQuery
error: undefined variable $.fn
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var $.fn = 1;
error: line:1: ....^
file: a3c460e7829e3b85a7454253b6a791b71369000d: 20956 bytes

Decoded Files

a3c4/60e7829e3b85a7454253b6a791b71369000d from www.picayune-times.com/Global/js/jquery.lightbox.js (20956 bytes, 2405 hidden) download

/**  * jQuery lightBox plugin  * This jQuery plugin was inspired and based on Lightbox 2 by Lokesh Dhakar (http://www.huddletogether.com/projects/lightbox2/)  * and adapted to me for use like a plugin from jQuery.  * @name jquery-lightbox-0.5.js  * @author Leandro Vieira Pinho - http://leandrovieira.com  * @version 0.5  * @date April 11, 2008  * @category jQuery plugin  * @copyright (c) 2008 Leandro Vieira Pinho (leandrovieira.com)  * @license CCAttribution-ShareAlike 2.5 Brazil - http://creativecommons.org/licenses/by-sa/2.5/br/deed.en_US  * @example Visit http://leandrovieira.com/projects/jquery/lightbox/ for more informations about this jQuery plugin  */  // Offering a Custom Alias suport - More info: http://docs.jquery.com/Plugins/Authoring#Custom_Alias (function($) { /**  * $ is an alias to jQuery object  *  */ $.fn.lightBox = function(settings) { // Settings to configure the jQuery lightBox plugin how you like settings = jQuery.extend({ // Configuration related to overlay overlayBgColor: '#000',// (string) Background color to overlay; inform a hexadecimal value like: #RRGGBB. Where RR, GG, and BB are the hexadecimal values for the red, green, and blue values of the color. overlayOpacity:0.8,// (integer) Opacity value to overlay; inform: 0.X. Where X are number from 0 to 9 // Configuration related to navigation fixedNavigation:true,// (boolean) Boolean that informs if the navigation (next and prev button) will be fixed or not in the interface. // Configuration related to images imageLoading:'images/lightbox-ico-loading.gif',// (string) Path and the name of the loading icon imageBtnPrev:'/Global/images/arl-on.png',// (string) Path and the name of the prev button image imageBtnNext:'/Global/images/arr-on.png',// (string) Path and the name of the next button image imageBtnClose:'/Global/images/newspop_closeBtn.png',// (string) Path and the name of the close btn imageBlank:'images/lightbox-blank.gif',// (string) Path and the name of a blank image (one pixel) imageleftBlank:'/Global/images/arl-off.png',// (string) Path and the name of a left disabled image imagerightBlank:'/Global/images/arr-off.png',// (string) Path and the name of a right disabled image // Configuration related to container image box containerBorderSize:10,// (integer) If you adjust the padding in the CSS for the container, #lightbox-container-image-box, you will need to update this value containerResizeSpeed:400,// (integer) Specify the resize duration of container image. These number are miliseconds. 400 is default. // Configuration related to texts in caption. For example: Image 2 of 8. You can alter either "Image" and "of" texts. txtImage:'Image',// (string) Specify text "Image" txtOf:'of',// (string) Specify text "of" // Configuration related to keyboard navigation keyToClose:'c',// (string) (c = close) Letter to close the jQuery lightBox interface. Beyond this letter, the letter X and the SCAPE key is used to. keyToPrev:'p',// (string) (p = previous) Letter to show the previous image keyToNext:'n',// (string) (n = next) Letter to show the next image. // Dont alter these variables in any way imageArray:[], activeImage:0 },settings); // Caching the jQuery object with all elements matched var jQueryMatchedObj = this; // This, in this context, refer to jQuery object /**  * Initializing the plugin calling the start function  *  * @return boolean false  */ function _initialize() { _start(this,jQueryMatchedObj); // This, in this context, refer to object (link) which the user have clicked return false; // Avoid the browser following the link } /**  * Start the jQuery lightBox plugin  *  * @param object objClicked The object (link) whick the user have clicked  * @param object jQueryMatchedObj The jQuery object with all elements matched  */ function _start(objClicked,jQueryMatchedObj) { // Hime some elements to avoid conflict with overlay in IE. These elements appear above the overlay. $('embed, object, select').css({ 'visibility' : 'hidden' }); // Call the function to create the markup structure; style some elements; assign events in some elements. _set_interface(); // Unset total images in imageArray settings.imageArray.length = 0; // Unset image active information settings.activeImage = 0;// We have an image set? Or just an image? Lets see it. if ( $(".ad-thumb-list li").length == 1 ) {settings.imageArray.push(new Array(objClicked.getAttribute('href'),objClicked.getAttribute('title'))); } else {// Add an Array (as many as we have), with href and title atributes, inside the Array that storage the images referencesfor ( var i = 0; i < $(".ad-thumb-list li").length; i++ ) {var modifySrc=$('.ad-thumb-list li a.ad-thumb'+i).attr('href').split("&");settings.imageArray.push(new Array(modifySrc[0],$('.ad-thumb-list li a.ad-thumb'+i).attr('alt')));} } while ( settings.imageArray[settings.activeImage][0].toLowerCase() != objClicked.getAttribute('href').toLowerCase() ) {settings.activeImage++; } // Call the function that prepares image exibition trac

www.picayune-times.com/section/?template=photoads&adsize=120x60 benign

[nothing detected] (iframe) www.picayune-times.com/section/?template=photoads&adsize=120x60
status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)saved 4487 bytes 61dbd9b8b3fa21b86491c1ea11639ebd7fc5359d
info: [script] com.modev.gat.atl.publicus.com/Global/js/cb.js
info: [decodingLevel=0] found JavaScript
error: undefined variable s
info: [element] URL=cdn.krxd.net/controltag?confid=H5yMBgmK
info: [1] no JavaScript
file: 61dbd9b8b3fa21b86491c1ea11639ebd7fc5359d: 4487 bytes
file: db1c23f4378db53b8b4ce0b06b84d35f52c3525e: 112 bytes

Decoded Files

61db/d9b8b3fa21b86491c1ea11639ebd7fc5359d from www.picayune-times.com/section/?template=photoads&adsize=120x60 (4487 bytes, 163 hidden) download

<html> <head> </head> <body style="margin:0px; padding:0px">  <script type="text/javascript" src="http://lakenewsonline_com.modev.gat.atl.publicus.com/Global/js/yume_static_cb.js"></script>  <script class="kxct" data-id="H5yMBgmK" data-version="async:1.7" type="text/javascript">   window.Krux||((Krux=function(){Krux.q.push(arguments)}).q=[]);   (function(){var k=document.createElement('script');k.type='text/javascript';k.async=true;var m,src=(m=location.href.match(/\bkxsrc=([^&]+)/))&&decodeURIComponent(m[1]);k.src = /^https?:\/\/([^\/]+\.)?krxd\.net(:\d{1,5})?\//i.test(src) ? src : src === "disable" ? "" :(location.protocol==="https:"?"https:":"http:")+"//cdn.krxd.net/controltag?confid=H5yMBgmK";var s=document.getElementsByTagName('script')[0];s.parentNode.insertBefore(k,s);   })(); </script>  <script> window.Krux||((Krux=function(){Krux.q.push(arguments);}).q=[]); (function(){   function retrieve(n){var m, k='kx'+n;if (window.localStorage) {return window.localStorage[k] || "";} else if (navigator.cookieEnabled) {m = document.cookie.match(k+'=([^;]*)');return (m && unescape(m[1])) || "";} else {return '';}   }   Krux.user = retrieve('user');   Krux.segments = retrieve('segs') && retrieve('segs').split(',') || []; })(); </script> <script type='text/javascript'> (function() { var useSSL = 'https:' == document.location.protocol; var src = (useSSL ? 'https:' : 'http:') + '//www.googletagservices.com/tag/js/gpt.js'; document.write('<scr' + 'ipt src="' + src + '"></scr' + 'ipt>'); })(); </script> <script type='text/javascript'> googletag.cmd.push(function() { googletag.pubads().setTargeting("pg type"," section"); googletag.pubads().setTargeting("ksgmnt", Krux.segments); googletag.pubads().setTargeting("u", Krux.user); var defslot_a='/11564835/picayune-times.com'; var defslot_b='/photos'; googletag.defineSlot(defslot_a+defslot_b, [728, 90], 'dfp-728x90-1').addService(googletag.pubads()).setTargeting("pos","atf"); googletag.defineSlot(defslot_a+defslot_b, [728, 90], 'dfp-728x90-2').addService(googletag.pubads()).setTargeting("pos","btf"); googletag.defineSlot(defslot_a+defslot_b, [728, 90], 'dfp-728x90-3').addService(googletag.pubads()).setTargeting("pos","stf"); googletag.defineSlot(defslot_a+defslot_b, [300, 250], 'dfp-300x250-1').addService(googletag.pubads()).setTargeting("pos","atf"); googletag.defineSlot(defslot_a+defslot_b, [300, 250], 'dfp-300x250-2').addService(googletag.pubads()).setTargeting("pos","stf"); googletag.defineSlot(defslot_a+defslot_b, [300, 250], 'dfp-300x250-3').addService(googletag.pubads()).setTargeting("pos","btf"); googletag.defineSlot(defslot_a+defslot_b, [300, 250], 'dfp-300x250-4').addService(googletag.pubads()).setTargeting("pos","btf_2"); googletag.defineSlot(defslot_a+defslot_b, [300,250], 'dfp-300x250-deals').addService(googletag.pubads()).setTargeting("pos","deals"); googletag.defineSlot(defslot_a+defslot_b, [160, 600], 'dfp-160x600-1').addService(googletag.pubads()).setTargeting("pos","atf"); googletag.defineSlot(defslot_a+defslot_b, [120, 60], 'dfp-120x60').addService(googletag.pubads()).setTargeting("pos","atf"); googletag.defineSlot(defslot_a+defslot_b, [88, 32], 'dfp-88x32').addService(googletag.pubads()).setTargeting("pos","atf"); googletag.defineSlot(defslot_a+defslot_b, [1, 1], 'dfp-sliding-billboard').addService(googletag.pubads()).setTargeting("pos","stf"); googletag.defineSlot(defslot_a+defslot_b, [1, 1], 'dfp-pop-under').addService(googletag.pubads()).setTargeting("pos","btf"); googletag.defineOutOfPageSlot(defslot_a+'/overlay'+defslot_b, 'dfp-overlay-opp').addService(googletag.pubads()); googletag.defineOutOfPageSlot(defslot_a+'/peel'+defslot_b, 'dfp-pagepeel-oop').addService(googletag.pubads()); googletag.defineOutOfPageSlot(defslot_a+'/skyslider'+defslot_b, 'dfp-skyslider-oop').addService(googletag.pubads()); googletag.defineOutOfPageSlot(defslot_a+'/interstitial'+defslot_b, 'dfp-interstitial-oop').addService(googletag.pubads()); googletag.pubads().enableSyncRendering(); googletag.enableServices(); }); </script> <div id='dfp-120x60'> <script type='text/javascript'>googletag.cmd.push(function() { googletag.display('dfp-120x60'); });</script> </div>  </body> </html>

db1c/23f4378db53b8b4ce0b06b84d35f52c3525e from www.picayune-times.com/section/?template=photoads&adsize=120x60 (112 bytes) download

web.adblade.com/impsc.php?cid=1551-4049130895&output=html benign

[nothing detected] (iframe) web.adblade.com/impsc.php?cid=1551-4049130895&output=html
status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)saved 7113 bytes 01985af8c2bf9e9b82c2d1c75930cd708f77f5bc
info: [img] pixel.adblade.com/imps.php?sgms=63&r=1359507732
info: [img] static.cdn.adblade.com/banners/images/100x75/8032_50b8f1eecc0bb.jpg
info: [img] static.cdn.adblade.com/banners/images/100x75/491_50bcfb7c00201.jpg
info: [img] static.cdn.adblade.com/banners/images/100x75/4415_5075c00adbfbc.jpg
info: [img] static.cdn.adblade.com/banners/images/100x75/8032_504113f27fe38.jpg
info: [img] static.cdn.adblade.com/banners/images/100x75/11287_5016c1a69505d.jpg
info: [img] static.cdn.adblade.com/banners/images/100x75/12792_5087f3229554b.jpg
info: [img] b.scorecardresearch.com/p?c1=8&c2=6864322&c3=&c4=&c5=&c6=&c10=&c15=&cj=1
info: [script] edge.quantserve.com/quant.js
info: [img] pixel.quantserve.com/pixel/p-b8GPCpJxfqYm2.gif
info: [decodingLevel=0] found JavaScript
info: [script] b.scorecardresearch.com/beacon.js?c1=8&c2=6864322&c3=&c4=&c5=&c6=&c10=&c15=
info: [decodingLevel=1] found JavaScript
file: 01985af8c2bf9e9b82c2d1c75930cd708f77f5bc: 7113 bytes
file: faeb0ff6ef75d44cdb83fa6ed10352ce210bee63: 130 bytes

Decoded Files

0198/5af8c2bf9e9b82c2d1c75930cd708f77f5bc from web.adblade.com/impsc.php?cid=1551-4049130895&output=html (7113 bytes, 339 hidden) download

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8" /> <link rel="stylesheet" href="http://static.cdn.adblade.com/css/zones/zone373.css" type="text/css" /> <style type="text/css"></style></head> <body> <div class="zone"><div class="advlabel">Advertisement</div><div style="display: none;">  <img src="//pixel.adblade.com/imps.php?sgms=63&r=1359507732" width="0" height="0" /> </div><ul><li class="pos_1"><table class="ad"><tr> <td class="image"><a href="http://web.adblade.com/clicks.php?appId=6868&zid=50b8f18322409&adId=49422&pos=1&impt=1359507732.890778445031&zoneId=373&url=http%3A%2F%2Fwww.picayune-times.com%2Farticle%2F20121022%2FNEWS%2F121029979" target="_blank"><img src="http://static.cdn.adblade.com/banners/images/100x75/8032_50b8f1eecc0bb.jpg" border="0" /></a></td> <td class="text"> <a href="http://web.adblade.com/clicks.php?appId=6868&zid=50b8f18322409&adId=49422&pos=1&impt=1359507732.890778445031&zoneId=373&url=http%3A%2F%2Fwww.picayune-times.com%2Farticle%2F20121022%2FNEWS%2F121029979" target="_blank" class="description">Celebrity doctor reveals the #1 pill for men to lose weight fast....</a><br/> </td> </tr></table>  </li><li class="pos_2"><table class="ad"><tr> <td class="image"><a href="http://www.smarterlifestyles.com/2009/10/30/book-a-cruise-up-to-75-off/?fc_id=49550&fc_app_id=6868&url=http%3A%2F%2Fwww.picayune-times.com%2Farticle%2F20121022%2FNEWS%2F121029979" target="_blank"><img src="http://static.cdn.adblade.com/banners/images/100x75/491_50bcfb7c00201.jpg" border="0" /></a></td> <td class="text"> <a href="http://www.smarterlifestyles.com/2009/10/30/book-a-cruise-up-to-75-off/?fc_id=49550&fc_app_id=6868&url=http%3A%2F%2Fwww.picayune-times.com%2Farticle%2F20121022%2FNEWS%2F121029979" target="_blank" class="description">Join our exclusive membership now -- at no charge -- and have instant access to your dream cruise...</a><br/> </td> </tr></table>  </li><li class="pos_3"><table class="ad"><tr> <td class="image"><a href="http://web.adblade.com/clicks.php?appId=6868&zid=5075c00b6e04a&adId=46501&pos=3&impt=1359507732.890778445031&zoneId=373&url=http%3A%2F%2Fwww.picayune-times.com%2Farticle%2F20121022%2FNEWS%2F121029979" target="_blank"><img src="http://static.cdn.adblade.com/banners/images/100x75/4415_5075c00adbfbc.jpg" border="0" /></a></td> <td class="text"> <a href="http://web.adblade.com/clicks.php?appId=6868&zid=5075c00b6e04a&adId=46501&pos=3&impt=1359507732.890778445031&zoneId=373&url=http%3A%2F%2Fwww.picayune-times.com%2Farticle%2F20121022%2FNEWS%2F121029979" target="_blank" class="description">Ashburn 's best kept joint secret is now available to you!</a><br/> </td> </tr></table>  </li><li class="pos_4"><table class="ad"><tr> <td class="image"><a href="http://web.adblade.com/clicks.php?appId=6868&zid=504113f31b577&adId=43719&pos=4&impt=1359507732.890778445031&zoneId=373&url=http%3A%2F%2Fwww.picayune-times.com%2Farticle%2F20121022%2FNEWS%2F121029979" target="_blank"><img src="http://static.cdn.adblade.com/banners/images/100x75/8032_504113f27fe38.jpg" border="0" /></a></td> <td class="text"> <a href="http://web.adblade.com/clicks.php?appId=6868&zid=504113f31b577&adId=43719&pos=4&impt=1359507732.890778445031&zoneId=373&url=http%3A%2F%2Fwww.picayune-times.com%2Farticle%2F20121022%2FNEWS%2F121029979" target="_blank" class="description">Celebrity doctor reveals the #1 pill to lose weight fast....</a><br/> </td> </tr></table>  </li><li class="pos_5"><table class="ad"><tr> <td class="image"><a href="http://web.adblade.com/clicks.php?appId=6868&zid=5016c1a7184c5&adId=41219&pos=5&impt=1359507732.890778445031&zoneId=373&url=http%3A%2F%2Fwww.picayune-times.com%2Farticle%2F20121022%2FNEWS%2F121029979" target="_blank"><img src="http://static.cdn.adblade.com/banners/images/100x75/11287_5016c1a69505d.jpg" border="0" /></a></td> <td class="text"> <a href="http://web.adblade.com/clicks.php?appId=6868&zid=5016c1a7184c5&adId=41219&pos=5&impt=1359507732.890778445031&zoneId=373&url=http%3A%2F%2Fwww.picayune-times.com%2Farticle%2F20121022%2FNEWS%2F121029979" target="_blank" class="description">( Virginia): This 1 weird "loophole" has become the car insurance companies worst nightmare!</a><br/> </td> </tr></table>  </li><li class="pos_6"><table class="ad"><tr> <td class="image"><a href="http://web.adblade.com/clicks.php?appId=6868&zid=5087f25c59f10&adId=47454&pos=6&impt=1359507732.890778445031&zoneId=373&url=http%3A%2F%2Fwww.picayune-times.com%2Farticle%2F20121022%2FNEWS%2F121029979" target="_blank"><img src="http://static.cdn.adblade.com/banners/images/100x75/12792_50

faeb/0ff6ef75d44cdb83fa6ed10352ce210bee63 from web.adblade.com/impsc.php?cid=1551-4049130895&output=html (130 bytes) download

Submission permanent link d21c7fa9f8f6cb4e8d8366cf82ad4f40299ce811 (Received 2013-01-29 20:02:08, http://www.picayune-times.com/article/20121022/NEWS/121029979 )

All Malicious or Suspicious Elements of Submission

URL	Status
www.picayune-times.com/article/20121022/NEWS/121029979	saved 89227 bytes c4a43f078c490f66f2c2058dd7ba47f2c5f0f024

www.picayune-times.com/Global/js/newsticker.jquery.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/section-Topstories.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

widgets.outbrain.com/outbrain.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/gallery.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/jquery.fancybox-1.3.4.pack.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/global.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/subscription.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

maps-static.chitika.net/misc/gatehouse/430x370.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/pager.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

picayune-times.com/section/?template=photoads&adsize=728x90-1	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/section/?template=ajaxWeather	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/jquery.webticker.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

com.modev.gat.atl.publicus.com/Global/js/cb.js	status: (referer=www.picayune-times.com/section/?template=photoads&adsize=120x60)

www.picayune-times.com/Global/js/handler.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/jquery1.5.2.min.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/jquery.anythingslider.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

edge.quantserve.com/quant.js	status: (referer=web.adblade.com/impsc.php?cid=1551-4049130895&output=html)

partner.googleadservices.com/gampad/service.js	status: (referer=picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0)

www.picayune-times.com/Global/js/jquery.jcarousel.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/section/?template=photoads&adsize=728x90-1	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/accordian.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

cdn.taboolasyndication.com/libtrc/gatehouse-network/loader.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

w.sharethis.com/button/buttons.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/validation.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

c5.zedo.com/jsc/c5/fhs.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/navigationmenu.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

www.picayune-times.com/Global/js/poll.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

cdn.krxd.net/controltag?confid=H5yMBgmK	status: (referer=www.picayune-times.com/section/?template=photoads&adsize=120x60)

www.picayune-times.com/Global/js/photo.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

include.reinvigorate.net/.js	status: (referer=picayune-times.eviesays.com/widget/gatehouse2/ea3ee5648db5a655be285b94d8a76ae0)

www.picayune-times.com/Global/js/jquery.mousewheel.js	status: (referer=www.picayune-times.com/article/20121022/NEWS/121029979)

assets.newsinc.com/launchers/20130122_2/scripts/require-jquery.js	status: (referer=embed.newsinc.com/thumbnail/iframe.html?wid=11831)

b.scorecardresearch.com/beacon.js?c1=8&c2=6864322&c3=&c4=&c5=&c6=&c10=&c15=	status: (referer=web.adblade.com/impsc.php?cid=1551-4049130895&output=html)

assets.newsinc.com/launchers/20130122_2/thumbnailLauncher5.html?wid=11831&freewheel=90108&sitesection=sec&width=300&height=250&thumbid=slider&zoneid=50894&ga=false	status: (referer=embed.newsinc.com/thumbnail/iframe.html?wid=11831)