JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link f86bbc935ba7a4acfd3ddc608207bf7e47c5d749 (Received 2013-07-04 13:25:48, http://www.kulichki.com/ )

URLStatus
www.kulichki.com/ saved 41279 bytes 13a0f2c01631765eb14d7490a640caedb1257db2

ad.adriver.ru/cgi-bin/undefined/masterh7.adriver.ru/images/0002636/0002636408/0/script.js?0 status: (referer=ad.adriver.ru/cgi-bin/erle.cgi?sid=4107&bt=49&target=blank&tail256=)

www.business.lbn.ru/jslib/m.js status: (referer=www.business.lbn.ru/cgi-bin/iframe/)

www.business.lbn.ru/cgi-bin/iframe/old-kulichki status: (referer=www.kulichki.com/)

ad.adriver.ru/cgi-bin/erle.cgi?sid=6441&bn=2&target=top&bt=2&pz=0&rnd=890500084 status: (referer=www.kulichki.com/)

content.adriver.ru/banners/0002186/0002186173/0/0.html?6441&125026&0&1&0&1562128567&0&0&html status: (referer=ad.adriver.ru/cgi-bin/erle.cgi?sid=6441&bn=1&target=top&bt=2&pz=0&rnd=1562128567)

ad.adriver.ru/cgi-bin/ status: (referer=ad.adriver.ru/cgi-bin/erle.cgi?sid=4107?target=blank?bt=16?pz=0?rnd=)

ajax.googleapis.com/ajax/libs/jquery/1.9.0/jquery.min.js status: (referer=www.business.lbn.ru/cgi-bin/iframe/)

ad.adriver.ru/cgi-bin/undefined/edp2.adriver.ru/images/0001411/0001411982/0/script.js?0 status: (referer=ad.adriver.ru/cgi-bin/erle.cgi?sid=4107?target=blank?bt=16?pz=0?rnd=)

ad.adriver.ru/cgi-bin/click.cgi?sid=4107&ad=277531&bid=1411982&bt=16&bn=0&pz=0&nid=0&ref=http:/www.kulichki.com/&custom=&xpid=BATLYEq3sVpfiGAISsj17V5ZHajs status: (referer=ad.adriver.ru/cgi-bin/erle.cgi?sid=4107?target=blank?bt=16?pz=0?rnd=)

ad.adriver.ru/cgi-bin/click.cgi?sid=4107&ad=277531&bid=2636408&bt=49&bn=0&pz=0&nid=0&ref=http:/www.kulichki.com/&custom=&xpid=BMymQ3grZaOOeCd7KedBDgrMciy0 status: (referer=ad.adriver.ru/cgi-bin/erle.cgi?sid=4107&bt=49&target=blank&tail256=)

click.readme.ru/informer/htm/21366.htm status: (referer=www.business.lbn.ru/cgi-bin/iframe/)

content.a/ status: (referer=ad.adriver.ru/cgi-bin/erle.cgi?sid=4107?target=blank?bt=16?pz=0?rnd=)

masterh7.adriver.ru/images/0000282/0000282891/0/index.html?params=rhost=ad.adriver.ru&sid=6441&ad=125026&bid=282891&ntype=4&pass=&bt=2&pz=0&bn=1&width=100&height=100&rnd=1562128567&geozoneid=288&rleurl=http:/www.bereg.ru/games/club/club.shtml& status: (referer=ad.adriver.ru/cgi-bin/erle.cgi?sid=6441&bn=1&target=top&bt=2&pz=0&rnd=1562128567)

content.adriver.ru/banners/0002186/0002186173/0/0.html?4107&277531&0&1&0&0&1&0&javascript status: (referer=ad.adriver.ru/cgi-bin/erle.cgi?sid=4107?target=blank?bt=16?pz=0?rnd=)

All Malicious or Suspicious Elements of Submission

suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
ad.adriver.ru/cgi-bin/erle.cgi?sid=6441&bn=1&target=top&bt=2&pz=0&rnd=1562128567 benign
[nothing detected] (iframe) ad.adriver.ru/cgi-bin/erle.cgi?sid=6441&bn=1&target=top&bt=2&pz=0&rnd=1562128567
     status: (referer=www.kulichki.com/)saved 821 bytes bb983cd4593a5228e8f229ebbd81005a763d67e6
     info: [iframe] masterh7.adriver.ru/images/0000282/0000282891/0/index.html?params=rhost%3Dad.adriver.ru%26sid%3D6441%26ad%3D125026%26bid%3D282891%26ntype%3D4%26pass%3D%26bt%3D2%26pz%3D0%26bn%3D1%26width%3D100%26height%3D100%26rnd%3D1562128567%26geozoneid%3D288%26rleurl%3Dhttp:/www.bereg.ru/games/club/club.shtml%26target%3D_blank%26sliceid%3D31690%26uid%3D0
     info: [iframe] content.adriver.ru/banners/0002186/0002186173/0/0.html?6441&125026&0&1&0&1562128567&0&0&html
     file: bb983cd4593a5228e8f229ebbd81005a763d67e6: 821 bytes

Decoded Files
bb98/3cd4593a5228e8f229ebbd81005a763d67e6 from ad.adriver.ru/cgi-bin/erle.cgi?sid=6441&bn=1&target=top&bt=2&pz=0&rnd=1562128567 (821 bytes, 13 hidden) download


rotabanner.kulichki.com/cgi-bin/iframe/ benign
[nothing detected] (iframe) rotabanner.kulichki.com/cgi-bin/iframe/
     status: (referer=www.kulichki.com/)saved 177 bytes 41d4f75127011fe9c431c135ee54c9d159e42e78
     file: 41d4f75127011fe9c431c135ee54c9d159e42e78: 177 bytes

Decoded Files
41d4/f75127011fe9c431c135ee54c9d159e42e78 from rotabanner.kulichki.com/cgi-bin/iframe/ (177 bytes) download


phonecards.kulichki.com/rate.php/i-ua,kz,ar,az,ca,ee,lt?style=1 benign
[nothing detected] (script) phonecards.kulichki.com/rate.php/i-ua,kz,ar,az,ca,ee,lt?style=1
     status: (referer=www.kulichki.com/)saved 2568 bytes 17e17ca79a3fe5d2d97aed6e8694e19d76abe850
     info: [img] www.pushline.com/cg/flags/ua.gif
     info: [img] www.pushline.com/cg/flags/kz.gif
     info: [img] www.pushline.com/cg/flags/ar.gif
     info: [img] www.pushline.com/cg/flags/az.gif
     info: [img] www.pushline.com/cg/flags/ca.gif
     info: [img] www.pushline.com/cg/flags/ee.gif
     info: [img] www.pushline.com/cg/flags/lt.gif
     file: 17e17ca79a3fe5d2d97aed6e8694e19d76abe850: 2568 bytes

Decoded Files
17e1/7ca79a3fe5d2d97aed6e8694e19d76abe850 from phonecards.kulichki.com/rate.php/i-ua,kz,ar,az,ca,ee,lt?style=1 (2568 bytes) download


www.business.lbn.ru/cgi-bin/iframe/ benign
[nothing detected] (iframe) www.business.lbn.ru/cgi-bin/iframe/
     status: (referer=www.kulichki.com/)saved 29379 bytes 2c020f81636dcddac0cfab63cc231ebc63a91a7b
     info: [script] ajax.googleapis.com/ajax/libs/jquery/1.9.0/jquery.min.js
     info: [script] www.business.lbn.ru/jslib/m.js
     info: [img] www.business.lbn.ru/skin/img/logo.png
     info: [iframe] click.readme.ru/informer/htm/21366.htm
     info: [img] counter.yadro.ru/hit?r
     info: [img]
     info: [img] count.rbc.ru/p567.gif
     info: [img] www.tns-counter.ru/V13a****ru/ru/UTF-8/tmsec=total/
     info: [img] img.readme.ru/news/200/60/c8/79413e6161d5cf84c62569e24426.jpg
     info: [img] img.readme.ru/news/200/31/2a/87a25dff3b668eceaa63cd2a5865.jpg
     info: [img] img.readme.ru/news/200/27/dd/9151f946e35d6e3381a59e6d15c7.jpg
     info: [img] img.readme.ru/news/200/f8/98/20cd4d15bc06839cfdc814a0d6d9.jpg
     info: [img] img.readme.ru/news/200/14/96/4bf76b2d05e76cbe6f05e2cc6149.jpg
     info: [img] img.readme.ru/news/200/d0/70/1e390243041141b5fea125511e47.jpg
     info: [img] counter.yadro.ru/logo?53.1
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
     file: 2c020f81636dcddac0cfab63cc231ebc63a91a7b: 29379 bytes
     file: a5ab1af01be5330829c636499369ab5fa4c71f46: 19991 bytes
     file: 90423742ac02071a60668d95571f66fb19226876: 19997 bytes
     file: c0832359d37e1f6b23acad5c1c7a3af2d60efe54: 20206 bytes
     file: 95425ed83b53c98f08c91ef6a2ee5bbdbec26b4a: 20398 bytes
     file: 147b44a3db371b2ef5940d785d61740a4f1d2eb7: 20112 bytes
     file: a91b9b5789b970eae31d6677ab614b8dbb3b552c: 20236 bytes
     file: f03c79bc9319fd13192dc7e814dda0505ec5bc5f: 29603 bytes
     file: 975601f4675f6dfce7493179a042571e7094beec: 29609 bytes
     file: 052f8b01a4ecca809c22f8b372c57997079eac09: 29818 bytes
     file: 2bc070e0908b36fa0bf983984f1db2e150eb6b3f: 30010 bytes
     file: 2e51849664b4dc1cde311658caf25b86b0ca2953: 29724 bytes
     file: 6de7412b68abcbd7035203ad0ec3ec61d08a26f3: 29848 bytes

Decoded Files
2c02/0f81636dcddac0cfab63cc231ebc63a91a7b from www.business.lbn.ru/cgi-bin/iframe/ (29379 bytes, 8954 hidden) download

a5ab/1af01be5330829c636499369ab5fa4c71f46 from www.business.lbn.ru/cgi-bin/iframe/ (19991 bytes, 335 hidden) download

9042/3742ac02071a60668d95571f66fb19226876 from www.business.lbn.ru/cgi-bin/iframe/ (19997 bytes, 335 hidden) download

c083/2359d37e1f6b23acad5c1c7a3af2d60efe54 from www.business.lbn.ru/cgi-bin/iframe/ (20206 bytes, 335 hidden) download

9542/5ed83b53c98f08c91ef6a2ee5bbdbec26b4a from www.business.lbn.ru/cgi-bin/iframe/ (20398 bytes, 335 hidden) download

147b/44a3db371b2ef5940d785d61740a4f1d2eb7 from www.business.lbn.ru/cgi-bin/iframe/ (20112 bytes, 335 hidden) download

a91b/9b5789b970eae31d6677ab614b8dbb3b552c from www.business.lbn.ru/cgi-bin/iframe/ (20236 bytes, 335 hidden) download

f03c/79bc9319fd13192dc7e814dda0505ec5bc5f from www.business.lbn.ru/cgi-bin/iframe/ (29603 bytes, 8954 hidden) download

9756/01f4675f6dfce7493179a042571e7094beec from www.business.lbn.ru/cgi-bin/iframe/ (29609 bytes, 8954 hidden) download

052f/8b01a4ecca809c22f8b372c57997079eac09 from www.business.lbn.ru/cgi-bin/iframe/ (29818 bytes, 8954 hidden) download

2bc0/70e0908b36fa0bf983984f1db2e150eb6b3f from www.business.lbn.ru/cgi-bin/iframe/ (30010 bytes, 8954 hidden) download

2e51/849664b4dc1cde311658caf25b86b0ca2953 from www.business.lbn.ru/cgi-bin/iframe/ (29724 bytes, 8954 hidden) download

6de7/412b68abcbd7035203ad0ec3ec61d08a26f3 from www.business.lbn.ru/cgi-bin/iframe/ (29848 bytes, 8954 hidden) download


ad.adriver.ru/cgi-bin/erle.cgi?sid=4107&bt=49&target=blank&tail256= benign
[nothing detected] (jsvar) ad.adriver.ru/cgi-bin/erle.cgi?sid=4107&bt=49&target=blank&tail256=
     status: (referer=www.kulichki.com/)saved 1382 bytes 649864fb4bb3c52561618547c79686efaffc3a00
     info: [script] ad.adriver.ru/cgi-bin/
     info: [iframe] content.a
     info: [decodingLevel=0] found JavaScript
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      752 bytes
     info: DecodedIframe detected
     info: [var CgiHref] URL=ad.adriver.ru/cgi-bin/click.cgi?sid=4107&ad=277531&bid=2636408&bt=49&bn=0&pz=0&nid=0&ref=http:%2f%2fwww.kulichki.com%2f&custom=&xpid=BMymQ3grZaOOeCd7KedBDgrMciy0
     info: [var newurl] URL=ad.adriver.ru/cgi-bin/click.cgi?sid=4107&ad=277531&bid=2636408&bt=49&bn=0&pz=0&nid=0&ref=http:%2f%2fwww.kulichki.com%2f&custom=&xpid=BMymQ3grZaOOeCd7KedBDgrMciy0
     info: [script] ad.adriver.ru/cgi-bin/undefined/masterh7.adriver.ru/images/0002636/0002636408/0/script.js?0
     info: [iframe] content.adriver.ru/banners/0002186/0002186173/0/0.html?4107&277531&0&1&0&0&1&0&javascript
     info: [decodingLevel=1] found JavaScript
     error: line:6: SyntaxError: missing ; before statement:
          error: line:6: <script src="undefined/masterh7.adriver.ru/images/0002636/0002636408/0/script.js?0" type="text/javascript" charset="windows-1251"></script><iframe src="/content.adriver.ru/banners/0002186/0002186173/0/0.html?4107&277531&0&1&0&0&1&0&javascript" style="po
          error: line:6: .............................................................................................................................................^
     file: 649864fb4bb3c52561618547c79686efaffc3a00: 1382 bytes
     file: b0ace135828c1880f5884c89f6051c67df09445f: 752 bytes

Decoded Files
6498/64fb4bb3c52561618547c79686efaffc3a00 from ad.adriver.ru/cgi-bin/erle.cgi?sid=4107&bt=49&target=blank&tail256= (1382 bytes, 61 hidden) download

b0ac/e135828c1880f5884c89f6051c67df09445f from ad.adriver.ru/cgi-bin/erle.cgi?sid=4107&bt=49&target=blank&tail256= (752 bytes) download


ad.adriver.ru/cgi-bin/erle.cgi benign
[nothing detected] (iframe) ad.adriver.ru/cgi-bin/erle.cgi
     status: (referer=www.kulichki.com/)saved 618 bytes 8b34433d27f6df6e9070b31cea43888bb23a67e1
     info: [img] ad.adriver.ru/cgi-bin/
     info: [img] adr.adriver.ru/cgi-bin/rle.cgi?sid=1&bt=21&ad=408466&pid=1211555&bid=2664846&bn=2664846&rnd=2019309928
     info: [decodingLevel=0] found JavaScript
     info: [img] adr.adriver.ru/cgi-bin/rle.cgi?sid=1&bt=21&ad=408466&pid=1211555&bid=2664846&bn=2664846&rnd=619472571&tail256=unknown
     info: [decodingLevel=1] found JavaScript
     file: 8b34433d27f6df6e9070b31cea43888bb23a67e1: 618 bytes
     file: ac80087f07b0edba0f3157595e008ed6704a7f26: 186 bytes

Decoded Files
8b34/433d27f6df6e9070b31cea43888bb23a67e1 from ad.adriver.ru/cgi-bin/erle.cgi (618 bytes) download

ac80/087f07b0edba0f3157595e008ed6704a7f26 from ad.adriver.ru/cgi-bin/erle.cgi (186 bytes) download


phonecards.kulichki.com/rate.php/i-ru,by,md,ge,us,il,lv?style=1 benign
[nothing detected] (script) phonecards.kulichki.com/rate.php/i-ru,by,md,ge,us,il,lv?style=1
     status: (referer=www.kulichki.com/)saved 2529 bytes f3d17feff2c2ee52cafd52b5b42553edca2b4092
     info: [img] www.pushline.com/cg/flags/ru.gif
     info: [img] www.pushline.com/cg/flags/by.gif
     info: [img] www.pushline.com/cg/flags/md.gif
     info: [img] www.pushline.com/cg/flags/ge.gif
     info: [img] www.pushline.com/cg/flags/us.gif
     info: [img] www.pushline.com/cg/flags/il.gif
     info: [img] www.pushline.com/cg/flags/lv.gif
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=1] found JavaScript
     error: line:6: SyntaxError: missing } in XML expression:
          error: line:6: <style>table.tbl { border: 2px outset; border-color: red} td.nm { font-size: 14px; font-weight: bold } td.pr { font-size: 14px; font-weight: bold } </style><table class=tbl><tr class=odd><td class=nm><a title="Russia - Moscow" class=nm href=http:/phonec
          error: line:6: .........................^
     file: f3d17feff2c2ee52cafd52b5b42553edca2b4092: 2529 bytes
     file: dc97ead557230d246924e434f299b528fc6ab3d5: 2534 bytes

Decoded Files
f3d1/7feff2c2ee52cafd52b5b42553edca2b4092 from phonecards.kulichki.com/rate.php/i-ru,by,md,ge,us,il,lv?style=1 (2529 bytes) download

dc97/ead557230d246924e434f299b528fc6ab3d5 from phonecards.kulichki.com/rate.php/i-ru,by,md,ge,us,il,lv?style=1 (2534 bytes) download


www.kulichki.com/ benign
[nothing detected] www.kulichki.com/
     status: (referer=http:/www.ask.com/web?q=puppies)saved 41279 bytes 13a0f2c01631765eb14d7490a640caedb1257db2
     info: [javascript variable] URL=ad.adriver.ru/cgi-bin/erle.cgi?sid=4107&bt=49&target=blank&tail256=
     info: [script] counter.rambler.ru/top100.jcn?181960
     info: [img] counter.rambler.ru/top100.cnt?181960
     info: [iframe] rotabanner.kulichki.com/cgi-bin/iframe/
     info: [img] rotabanner.kulichki.com/cgi-bin/banner/top?1001
     info: [img] www.kulichki.com/images/frontnew4.jpg
     info: [img] www.kulichki.com/stolitsa/images/newyear2013.jpg
     info: [img] www.kulichki.com/images/10let.jpg
     info: [img] www.kulichki.com/stolitsa/knopki/88x31_black.jpg
     info: [script] phonecards.kulichki.com/rate.php/i-ru,by,md,ge,us,il,lv?style=1
     info: [script] phonecards.kulichki.com/rate.php/i-ua,kz,ar,az,ca,ee,lt?style=1
     info: [img] www.kulichki.com/stolitsa/knopki/top.jpg
     info: [img] www.kulichki.com/stolitsa/knopki/zhiteli.gif
     info: [img] www.yandex.ru/cycounter?www.kulichki.com
     info: [img]
     info: [img] u1136.39.spylog.com/cnt?p=0
     info: [img] top100-images.rambler.ru/top100/w8.gif
     info: [img] www.russianamerica.com/top/logo/index.php?id=1060
     info: [img] www.kulichki.com/stolitsa/knopki/moldova.gif
     info: [img] rotabanner.kulichki.com/cgi-bin/banner/middle?1001
     info: [img] www.kulichki.com/stolitsa/knopki/logo.gif
     info: [img] www.kulichki.com/images/rss.gif
     info: [iframe] ad.adriver.ru/cgi-bin/erle.cgi
     info: [img] ad.adriver.ru/cgi-bin/rle.cgi?
     info: [iframe] ad.adriver.ru/cgi-bin/erle.cgi?sid=6441&bn=1&target=top&bt=2&pz=0&rnd=1562128567
     info: [img] ad.adriver.ru/cgi-bin/rle.cgi?sid=6441&bn=1&bt=2&pz=0&rnd=1562128567
     info: [iframe] www.business.lbn.ru/cgi-bin/iframe/
     info: [img] www.business.lbn.ru/cgi-bin/banner/
     info: [iframe] www.business.lbn.ru/cgi-bin/iframe/old-kulichki
     info: [img] www.business.lbn.ru/cgi-bin/banner/old-kulichki
     info: [iframe] ad.adriver.ru/cgi-bin/erle.cgi?sid=6441&bn=2&target=top&bt=2&pz=0&rnd=890500084
     info: [img] ad.adriver.ru/cgi-bin/rle.cgi?sid=6441&bn=2&bt=2&pz=0&rnd=890500084
     info: [script] ad.adriver.ru/cgi-bin/erle.cgi?sid=4107?target=blank?bt=16?pz=0?rnd=
     info: [decodingLevel=0] found JavaScript
     error: line:168: SyntaxError: XML tag name mismatch (expected link):
          error: line:168: </HEAD>
          error: line:168: ..^
     file: 13a0f2c01631765eb14d7490a640caedb1257db2: 41279 bytes

Decoded Files
13a0/f2c01631765eb14d7490a640caedb1257db2 from www.kulichki.com/ (41279 bytes, 11757 hidden) download


counter.rambler.ru/top100.jcn?181960 benign
[nothing detected] (script) counter.rambler.ru/top100.jcn?181960
     status: (referer=www.kulichki.com/)saved 6852 bytes 5c1231644b8baecb0ebc3c65a0ed53bbacab8270
     info: [img] counter.rambler.ru/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Image
     error: line:15: TypeError: Image is not a constructor
     file: 5c1231644b8baecb0ebc3c65a0ed53bbacab8270: 6852 bytes

Decoded Files
5c12/31644b8baecb0ebc3c65a0ed53bbacab8270 from counter.rambler.ru/top100.jcn?181960 (6852 bytes) download


ad.adriver.ru/cgi-bin/erle.cgi?sid=4107?target=blank?bt=16?pz=0?rnd= benign
[nothing detected] (script) ad.adriver.ru/cgi-bin/erle.cgi?sid=4107?target=blank?bt=16?pz=0?rnd=
     status: (referer=www.kulichki.com/)saved 1373 bytes 96b0fa350728aa51097f52de0501f8aa3f1ab12d
     info: [script] ad.adriver.ru/cgi-bin/
     info: [iframe] content.a
     info: [decodingLevel=0] found JavaScript
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      748 bytes
     info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Opera and browser=Firefox,      0 bytes
     info: DecodedIframe detected
     info: [var CgiHref] URL=ad.adriver.ru/cgi-bin/click.cgi?sid=4107&ad=277531&bid=1411982&bt=16&bn=0&pz=0&nid=0&ref=http:%2f%2fwww.kulichki.com%2f&custom=&xpid=BATLYEq3sVpfiGAISsj17V5ZHajs
     info: [var newurl] URL=ad.adriver.ru/cgi-bin/click.cgi?sid=4107&ad=277531&bid=1411982&bt=16&bn=0&pz=0&nid=0&ref=http:%2f%2fwww.kulichki.com%2f&custom=&xpid=BATLYEq3sVpfiGAISsj17V5ZHajs
     info: [script] ad.adriver.ru/cgi-bin/undefined/edp2.adriver.ru/images/0001411/0001411982/0/script.js?0
     info: [iframe] content.adriver.ru/banners/0002186/0002186173/0/0.html?4107&277531&0&1&0&0&1&0&javascript
     info: [decodingLevel=1] found JavaScript
     error: line:6: SyntaxError: missing ; before statement:
          error: line:6: <script src="undefined/edp2.adriver.ru/images/0001411/0001411982/0/script.js?0" type="text/javascript" charset="windows-1251"></script><iframe src="/content.adriver.ru/banners/0002186/0002186173/0/0.html?4107&277531&0&1&0&0&1&0&javascript" style="positi
          error: line:6: .........................................................................................................................................^
     file: 96b0fa350728aa51097f52de0501f8aa3f1ab12d: 1373 bytes
     file: ec2ea8d7f756bb30b59f7af2a0fe496050b1434e: 748 bytes

Decoded Files
96b0/fa350728aa51097f52de0501f8aa3f1ab12d from ad.adriver.ru/cgi-bin/erle.cgi?sid=4107?target=blank?bt=16?pz=0?rnd= (1373 bytes, 61 hidden) download

ec2e/a8d7f756bb30b59f7af2a0fe496050b1434e from ad.adriver.ru/cgi-bin/erle.cgi?sid=4107?target=blank?bt=16?pz=0?rnd= (748 bytes) download