JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security researchers and computer professionals
Enter a single URL (or paste JavaScript to decode):

Upload a PDF, pcap, HTML, or JavaScript file
Private? Help: privacy | uploads
Default Referer
Description

Submission permanent link 10ab5cf3f5b06de3c9a40e7c0c5dbd58df33a0e6 (Received 2010-08-27 02:25:45, http://www.yiyi.cc/film16/9540/9540_2_9.html )

URLStatus
www.yiyi.cc/film16/9540/9540_2_9.html saved 14087 bytes fetch_e2279cb0ed14e900459bde7a0cd19311096b6d2c

player.ku6.com/refer/ status: (referer=www.yiyi.cc/js/wdplay.js)failure: HTTP Error 404: Not Found

cc.kx365.com/ status: (referer=c.91wan.com/inc_1.js)failure: HTTP Error 404: Not Found

c.chinaih.com/1/ status: (referer=c.91wan.com/300x250_1.html?aid=17898)failure: HTTP Error 403: Forbidden

c.91wan.com/ status: (referer=c.91wan.com/300x250_1.html?aid=17898)failure: HTTP Error 403: Forbidden

cb.baidu.com/ecom status: (referer=cpro.baidu.com/cpro/ui/c.js)failure: HTTP Error 400: Bad Request

www.56.com/flashApp/56.swf?host= status: (referer=www.yiyi.cc/js/wdplay.js)failure: HTTP Error 404: Not Found

g.kx365.com/mcsd/9v/u.swf status: (referer=g.kx365.com/mcsd/9v/tc.swf)failure: HTTP Error 404: Not Found

js.getgvod.com/player/ status: (referer=js.getgvod.com/player/gvod.js)failure: HTTP Error 403: Forbidden

stat.getgvod.com/fcg-bin/stat.fcg?key=1&value= status: (referer=js.getgvod.com/player/gvod.js)

cpro.baidu.com/cpro/ui/ status: (referer=cpro.baidu.com/cpro/ui/c.js)failure: HTTP Error 404: Not Found

wm.baidu.com/preview/ status: (referer=wm.baidu.com/preview/preview.js)failure: HTTP Error 404: /preview/

cpro.baidu.com/cpro/ui/uijs.php status: (referer=cpro.baidu.com/cpro/ui/c.js)failure: HTTP Error 400: Bad Request

127.0.0.1:/

Warning: reading file /storagefiles/e41b/b046a98e5f2eec1792a1ef5added400a5916 failed

All Malicious or Suspicious Elements of Submission

None
c.chinaih.com/img/300x250.gif benign
[nothing detected] (jsvar) c.chinaih.com/img/300x250.gif
     status: (referer=c.91wan.com/300x250_1.html?aid=17898)saved 420 bytes 953881d3098dcfe619250ac89713d7d6f5a72085
     info: [0] no JavaScript
     file: 953881d3098dcfe619250ac89713d7d6f5a72085: 420 bytes

Decoded Files
9538/81d3098dcfe619250ac89713d7d6f5a72085 from c.chinaih.com/img/300x250.gif (420 bytes, 289 hidden) download


g.kx365.com/mcsd/9v/mu.swf benign
[nothing detected] [SWF] (swfurl) g.kx365.com/mcsd/9v/mu.swf
     status: (referer=g.kx365.com/mcsd/9v/tc.swf)saved 8883 bytes b8e3ade8b21d9c01febdb951ea46d189c9042729
     info: [0] no JavaScript
     file: b8e3ade8b21d9c01febdb951ea46d189c9042729: 8883 bytes

Decoded Files
b8e3/ade8b21d9c01febdb951ea46d189c9042729 from g.kx365.com/mcsd/9v/mu.swf (8883 bytes, 5414 hidden) download


www.yiyi.cc/js/function.js benign
[nothing detected] (script) www.yiyi.cc/js/function.js
     status: (referer=www.yiyi.cc/film16/9540/9540_2_9.html)saved 13019 bytes e781615eae17cf47951cf11e5899fe6e36ccbaba
     info: [embed] www.yiyi.cc/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable AJAX
     error: line:13: TypeError: AJAX is not a constructor
     file: e781615eae17cf47951cf11e5899fe6e36ccbaba: 13019 bytes

Decoded Files
e781/615eae17cf47951cf11e5899fe6e36ccbaba from www.yiyi.cc/js/function.js (13019 bytes, 1573 hidden) download


g.kx365.com/mcsd/9v/main.swf benign
[nothing detected] [SWF] (embed) g.kx365.com/mcsd/9v/main.swf
     status: (referer=g.kx365.com/mcsd/9v/index.html?id=)saved 61 bytes 37c2532debecd98b55b24566e345fb7788c4cac2
     info: [0] no JavaScript
     file: 37c2532debecd98b55b24566e345fb7788c4cac2: 61 bytes

Decoded Files
37c2/532debecd98b55b24566e345fb7788c4cac2 from g.kx365.com/mcsd/9v/main.swf (61 bytes, 37 hidden) download


erreport.tudou.com/errorlog/error.php benign
[nothing detected] (jsvar) erreport.tudou.com/errorlog/error.php
     status: (referer=www.yiyi.cc/js/tudou.htm?iid=)saved 1 bytes b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
     info: [0] no JavaScript
     file: b6589fc6ab0dc82cf12099d1c2d40ab994e8410c: 1 bytes

Decoded Files
b658/9fc6ab0dc82cf12099d1c2d40ab994e8410c from erreport.tudou.com/errorlog/error.php (1 bytes) download


w.cnzz.com/c.php?id=30028445&l=3 benign
[nothing detected] (script) w.cnzz.com/c.php?id=30028445&l=3
     status: (referer=www.yiyi.cc/film16/9540/)saved 2346 bytes 3cb6add5338c5de14a70de4c18254b43737cda04
     info: [img] qs3.cnzz.com/stat.htm?id=30028445
     info: [decodingLevel=0] found JavaScript
     error: undefined variable document.referrer
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var document.referrer = 1;
          error: line:1: ....^
     file: 3cb6add5338c5de14a70de4c18254b43737cda04: 2346 bytes

Decoded Files
3cb6/add5338c5de14a70de4c18254b43737cda04 from w.cnzz.com/c.php?id=30028445&l=3 (2346 bytes, 15 hidden) download


js.getgvod.com/player/warn.htm benign
[nothing detected] (jsvar) js.getgvod.com/player/warn.htm
     status: (referer=js.getgvod.com/player/gvod.js)saved 1913 bytes cfc433bcd0a161260b0eb884913790a2329d0bbb
     info: [0] no JavaScript
     file: cfc433bcd0a161260b0eb884913790a2329d0bbb: 1913 bytes

Decoded Files
cfc4/33bcd0a161260b0eb884913790a2329d0bbb from js.getgvod.com/player/warn.htm (1913 bytes, 182 hidden) download


g.kx365.com/mcsd/9v/rw.swf benign
[nothing detected] [SWF] (swfurl) g.kx365.com/mcsd/9v/rw.swf
     status: (referer=g.kx365.com/mcsd/9v/bg.swf)saved 184516 bytes 05fa60a05303bdf2bfa7568d0fea94bf3e223b68
     info: [0] no JavaScript
     file: 05fa60a05303bdf2bfa7568d0fea94bf3e223b68: 184516 bytes

Decoded Files
05fa/60a05303bdf2bfa7568d0fea94bf3e223b68 from g.kx365.com/mcsd/9v/rw.swf (184516 bytes, 111568 hidden) download


static.youku.com/v1.0.0296/v/swf/qplayer.swf benign
[nothing detected] [SWF] (embed) static.youku.com/v1.0.0296/v/swf/qplayer.swf
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 114107 bytes d6ba43103afbd118c93522396854d3035e0b2143
     info: [0] no JavaScript
     file: d6ba43103afbd118c93522396854d3035e0b2143: 114107 bytes

Decoded Files
d6ba/43103afbd118c93522396854d3035e0b2143 from static.youku.com/v1.0.0296/v/swf/qplayer.swf (114107 bytes, 68614 hidden) download


you.video.sina.com.cn/swf/topic/topicPlay.swf?auto=1&vid= benign
[nothing detected] [SWF] (embed) you.video.sina.com.cn/swf/topic/topicPlay.swf?auto=1&vid=
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 54830 bytes 3fe6150e4746fed2c1151f448fcccb782d319237
     info: [0] no JavaScript
     file: 3fe6150e4746fed2c1151f448fcccb782d319237: 54830 bytes

Decoded Files
3fe6/150e4746fed2c1151f448fcccb782d319237 from you.video.sina.com.cn/swf/topic/topicPlay.swf?auto=1&vid= (54830 bytes, 33043 hidden) download


play.ppvod.cn/OpenUI.swf benign
[nothing detected] [SWF] (embed) play.ppvod.cn/OpenUI.swf
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 61770 bytes a436ecf787d0d661a7b7bcf49bc22e2bb9f8afd1
     info: [0] no JavaScript
     file: a436ecf787d0d661a7b7bcf49bc22e2bb9f8afd1: 61770 bytes

Decoded Files
a436/ecf787d0d661a7b7bcf49bc22e2bb9f8afd1 from play.ppvod.cn/OpenUI.swf (61770 bytes, 37351 hidden) download


g.kx365.com/js/jqueryMailAutoComplete.js benign
[nothing detected] (script) g.kx365.com/js/jqueryMailAutoComplete.js
     status: (referer=g.kx365.com/mcsd/9v/index.html?id=)saved 6066 bytes e41bb046a98e5f2eec1792a1ef5added400a5916
     info: [decodingLevel=0] found JavaScript
     error: undefined variable jQuery
     error: undefined variable $.fn
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var $.fn = 1;
          error: line:1: ....^
     file: e41bb046a98e5f2eec1792a1ef5added400a5916: 6066 bytes

Decoded Files
e41b/b046a98e5f2eec1792a1ef5added400a5916 from g.kx365.com/js/jqueryMailAutoComplete.js

www.lolo.cc/js/qvod.js benign
[nothing detected] (script) www.lolo.cc/js/qvod.js
     status: (referer=www.yiyi.cc/film16/9540/)saved 254 bytes af86e64b7a9010cd91ed207d766baa1b39470d21
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=1] found JavaScript
     file: af86e64b7a9010cd91ed207d766baa1b39470d21: 254 bytes
     file: 4e265b0dd579703ababf9deb4bb6e102ec04a2af: 259 bytes

Decoded Files
af86/e64b7a9010cd91ed207d766baa1b39470d21 from www.lolo.cc/js/qvod.js (254 bytes, 48 hidden) download

4e26/5b0dd579703ababf9deb4bb6e102ec04a2af from www.lolo.cc/js/qvod.js (259 bytes, 48 hidden) download


g.kx365.com/mcsd/9v/bg.swf benign
[nothing detected] [SWF] (swfurl) g.kx365.com/mcsd/9v/bg.swf
     status: (referer=g.kx365.com/mcsd/9v/main.swf)saved 110407 bytes 1781578e3a7faf39771410d1a8469df81cf29f98
     info: [0] no JavaScript
     file: 1781578e3a7faf39771410d1a8469df81cf29f98: 110407 bytes

Decoded Files
1781/578e3a7faf39771410d1a8469df81cf29f98 from g.kx365.com/mcsd/9v/bg.swf (110407 bytes, 66770 hidden) download


www.yiyi.cc/html/300-250.html benign
[nothing detected] (iframe) www.yiyi.cc/html/300-250.html
     status: (referer=www.yiyi.cc/film16/9540/9540_2_9.html)saved 509 bytes c9c8011af569612462f74ce9836b53792aceefc9
     info: [script] cpro.baidu.com/cpro/ui/c.js
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.0 Transitional/EN">
          error: line:3: ...............^
     file: c9c8011af569612462f74ce9836b53792aceefc9: 509 bytes

Decoded Files
c9c8/011af569612462f74ce9836b53792aceefc9 from www.yiyi.cc/html/300-250.html (509 bytes, 37 hidden) download


g.kx365.com/ajax/ajax.js benign
[nothing detected] (script) g.kx365.com/ajax/ajax.js
     status: (referer=g.kx365.com/mcsd/9v/index.html?id=)saved 2044 bytes 74b33b5dee2c769043b65f8858581ec86c0b22fa
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     file: 74b33b5dee2c769043b65f8858581ec86c0b22fa: 2044 bytes

Decoded Files
74b3/3b5dee2c769043b65f8858581ec86c0b22fa from g.kx365.com/ajax/ajax.js (2044 bytes, 419 hidden) download


www.yiyi.cc/js/4399.html benign
[nothing detected] (iframe) www.yiyi.cc/js/4399.html
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 898 bytes 5ca4bf52779e843e0e37fbf551643ab927de7d1a
     info: [img] www.yiyi.cc/js/img/sloading.gif
     info: [iframe] c.91wan.com/300x250_1.html?aid=17898
     info: [0] no JavaScript
     file: 5ca4bf52779e843e0e37fbf551643ab927de7d1a: 898 bytes

Decoded Files
5ca4/bf52779e843e0e37fbf551643ab927de7d1a from www.yiyi.cc/js/4399.html (898 bytes, 87 hidden) download


www.yiyi.cc/html/300-2502.html benign
[nothing detected] (iframe) www.yiyi.cc/html/300-2502.html
     status: (referer=www.yiyi.cc/film16/9540/9540_2_9.html)saved 511 bytes a596d96dfd282343f8d22ccb637c0e567abd9394
     info: [script] cpro.baidu.com/cpro/ui/c.js
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.0 Transitional/EN">
          error: line:3: ...............^
     file: a596d96dfd282343f8d22ccb637c0e567abd9394: 511 bytes

Decoded Files
a596/d96dfd282343f8d22ccb637c0e567abd9394 from www.yiyi.cc/html/300-2502.html (511 bytes, 39 hidden) download


js.tudouui.com/bin/kili/player/TudouVideoP6.swf?iid= benign
[nothing detected] [SWF] (embed) js.tudouui.com/bin/kili/player/TudouVideoP6.swf?iid=
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 72663 bytes 9680de9e7095af2c9068ab61603b92e559d09cfd
     info: [0] no JavaScript
     file: 9680de9e7095af2c9068ab61603b92e559d09cfd: 72663 bytes

Decoded Files
9680/de9e7095af2c9068ab61603b92e559d09cfd from js.tudouui.com/bin/kili/player/TudouVideoP6.swf?iid= (72663 bytes, 43797 hidden) download


www.yiyi.cc/js/js.js benign
[nothing detected] (script) www.yiyi.cc/js/js.js
     status: (referer=www.yiyi.cc/film16/9540/)saved 626 bytes 75d169cd198602a052fca0ff1a65616ed1035276
     info: [img] www.yiyi.cc/js/inpfz.gif
     info: [decodingLevel=0] found JavaScript
     file: 75d169cd198602a052fca0ff1a65616ed1035276: 626 bytes

Decoded Files
75d1/69cd198602a052fca0ff1a65616ed1035276 from www.yiyi.cc/js/js.js (626 bytes, 88 hidden) download


6.cn/player.swf?vid= benign
[nothing detected] [SWF] (embed) 6.cn/player.swf?vid=
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 61357 bytes bccd9c7c7c0db2155904fc463ac1794abbe90283
     info: [0] no JavaScript
     file: bccd9c7c7c0db2155904fc463ac1794abbe90283: 61357 bytes

Decoded Files
bccd/9c7c7c0db2155904fc463ac1794abbe90283 from 6.cn/player.swf?vid= (61357 bytes, 37019 hidden) download


www.yiyi.cc/js/common.js benign
[nothing detected] (script) www.yiyi.cc/js/common.js
     status: (referer=www.yiyi.cc/film16/9540/)saved 8101 bytes 2a6d3cdddd2ec1a72710b75f03d50af92f41e616
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [img] www.yiyi.cc/
     info: [decodingLevel=0] found JavaScript
     file: 2a6d3cdddd2ec1a72710b75f03d50af92f41e616: 8101 bytes

Decoded Files
2a6d/3cdddd2ec1a72710b75f03d50af92f41e616 from www.yiyi.cc/js/common.js (8101 bytes, 388 hidden) download


g.kx365.com/mcsd/9v/index.html?id= benign
[nothing detected] (var newurl) g.kx365.com/mcsd/9v/index.html?id=
     status: (referer=c.91wan.com/1.js)saved 6624 bytes 799d9c43d3fc3da18705aafd07fadc1a8a9695d1
     info: [script] g.kx365.com/ajax/ajax.js
     info: [script] g.kx365.com/inc.js
     info: [script] g.kx365.com/mcsd/9v/images/AC_RunActiveContent.js
     info: [embed] g.kx365.com/mcsd/9v/main.swf
     info: [input] g.kx365.com/mcsd/9v/images/ban.gif
     info: [script] g.kx365.com/js/jqueryMailAutoCompleteLib.js
     info: [script] g.kx365.com/js/jqueryMailAutoComplete.js
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.01 Transitional/EN" "http:/www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd">
          error: line:3: ...............^
     file: 799d9c43d3fc3da18705aafd07fadc1a8a9695d1: 6624 bytes

Decoded Files
799d/9c43d3fc3da18705aafd07fadc1a8a9695d1 from g.kx365.com/mcsd/9v/index.html?id= (6624 bytes, 470 hidden) download


www.yiyi.cc/html/990-90.html benign
[nothing detected] (iframe) www.yiyi.cc/html/990-90.html
     status: (referer=www.yiyi.cc/film16/9540/)saved 507 bytes 8a307ef40311268e4ff59e037fa68405238c7188
     info: [script] cpro.baidu.com/cpro/ui/c.js
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.0 Transitional/EN">
          error: line:3: ...............^
     file: 8a307ef40311268e4ff59e037fa68405238c7188: 507 bytes

Decoded Files
8a30/7ef40311268e4ff59e037fa68405238c7188 from www.yiyi.cc/html/990-90.html (507 bytes, 27 hidden) download


www.yiyi.cc/html/300-280.html benign
[nothing detected] (iframe) www.yiyi.cc/html/300-280.html
     status: (referer=www.yiyi.cc/film16/9540/)saved 502 bytes f16cbdfc41574f747f3fa4a5c90edecb628e1024
     info: [script] cpro.baidu.com/cpro/ui/c.js
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.0 Transitional/EN">
          error: line:3: ...............^
     file: f16cbdfc41574f747f3fa4a5c90edecb628e1024: 502 bytes

Decoded Files
f16c/bdfc41574f747f3fa4a5c90edecb628e1024 from www.yiyi.cc/html/300-280.html (502 bytes, 31 hidden) download


www.yiyi.cc/html/728-90.html benign
[nothing detected] (iframe) www.yiyi.cc/html/728-90.html
     status: (referer=www.yiyi.cc/)saved 497 bytes 7e311983ab31a99f12815367831176d801e2a315
     info: [script] cpro.baidu.com/cpro/ui/c.js
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.0 Transitional/EN">
          error: line:3: ...............^
     file: 7e311983ab31a99f12815367831176d801e2a315: 497 bytes

Decoded Files
7e31/1983ab31a99f12815367831176d801e2a315 from www.yiyi.cc/html/728-90.html (497 bytes, 24 hidden) download


g.kx365.com/mcsd/9v/tc.swf benign
[nothing detected] [SWF] (swfurl) g.kx365.com/mcsd/9v/tc.swf
     status: (referer=g.kx365.com/mcsd/9v/bg.swf)saved 41859 bytes 0f4ba9730ac0e26b56fd3d6e4e9ba206c5c7fb2f
     info: [0] no JavaScript
     file: 0f4ba9730ac0e26b56fd3d6e4e9ba206c5c7fb2f: 41859 bytes

Decoded Files
0f4b/a9730ac0e26b56fd3d6e4e9ba206c5c7fb2f from g.kx365.com/mcsd/9v/tc.swf (41859 bytes, 25258 hidden) download


www.yiyi.cc/inc/mark.js benign
[nothing detected] (script) www.yiyi.cc/inc/mark.js
     status: (referer=www.yiyi.cc/inc/wd.asp?id=9540)saved 666 bytes 752deb1e5188a4a2a41e4f9191943246c75e56df
     info: [decodingLevel=0] found JavaScript
     error: undefined variable document.forms
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var document.forms = 1;
          error: line:1: ....^
     file: 752deb1e5188a4a2a41e4f9191943246c75e56df: 666 bytes

Decoded Files
752d/eb1e5188a4a2a41e4f9191943246c75e56df from www.yiyi.cc/inc/mark.js (666 bytes, 104 hidden) download


www.yiyi.cc/js/wdplay.js benign
[nothing detected] (script) www.yiyi.cc/js/wdplay.js
     status: (referer=www.yiyi.cc/film16/9540/9540_2_9.html)saved 10587 bytes 7e7387058af9524733d62719e07e8fe411e8b29c
     info: [iframe] www.yiyi.cc/js/
     info: [iframe] www.yiyi.cc/js/pvod.html?a=
     info: [embed] static.youku.com/v1.0.0296/v/swf/qplayer.swf
     info: [iframe] www.yiyi.cc/js/4399.html
     info: [iframe] www.yiyi.cc/js/tudou.htm?iid=
     info: [embed] play.ppvod.cn/OpenUI.swf
     info: [embed] p.you.video.sina.com.cn/player/player.swf?auto=1&vid=
     info: [embed] www.yiyi.cc/js/
     info: [embed] js.tudouui.com/bin/kili/player/TudouVideoP6.swf?iid=
     info: [embed] union.bokecc.com/flash/pocle/player.swf?siteid=maxuser&vid=
     info: [embed] you.video.sina.com.cn/swf/topic/topicPlay.swf?auto=1&vid=
     info: [embed] www.56.com/flashApp/56.swf?host=
     info: [embed] 6.cn/player.swf?vid=
     info: [embed] cache.tv.qq.com/qqplayerout.swf?v=
     info: [embed] player.ku6.com/refer/
     info: [embed] www.yiyi.cc/js/vcastr22.swf?file=
     info: [decodingLevel=0] found JavaScript
     error: undefined variable sitePath
     file: 7e7387058af9524733d62719e07e8fe411e8b29c: 10587 bytes

Decoded Files
7e73/87058af9524733d62719e07e8fe411e8b29c from www.yiyi.cc/js/wdplay.js (10587 bytes, 683 hidden) download


www.lolo.cc/js/gvod.js benign
[nothing detected] (script) www.lolo.cc/js/gvod.js
     status: (referer=www.yiyi.cc/film16/9540/)saved 235 bytes 4d7b3a9a491a9223eacfda5df04e30d810f0f770
     info: [decodingLevel=0] found JavaScript
     info: [decodingLevel=1] found JavaScript
     file: 4d7b3a9a491a9223eacfda5df04e30d810f0f770: 235 bytes
     file: 027c9a87ed5d3c854c6bdd0ca0afe0ff542f573d: 240 bytes

Decoded Files
4d7b/3a9a491a9223eacfda5df04e30d810f0f770 from www.lolo.cc/js/gvod.js (235 bytes, 36 hidden) download

027c/9a87ed5d3c854c6bdd0ca0afe0ff542f573d from www.lolo.cc/js/gvod.js (240 bytes, 36 hidden) download


wm.baidu.com/preview/preview.js benign
[nothing detected] (script) wm.baidu.com/preview/preview.js
     status: (referer=cpro.baidu.com/cpro/ui/c.js)saved 3569 bytes 2e8c4d4e401676b676054fcdf471dd7e8cd313ee
     info: [iframe] wm.baidu.com/preview/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable top
     error: undefined variable p
     file: 2e8c4d4e401676b676054fcdf471dd7e8cd313ee: 3569 bytes

Decoded Files
2e8c/4d4e401676b676054fcdf471dd7e8cd313ee from wm.baidu.com/preview/preview.js (3569 bytes, 1 hidden) download


g.kx365.com/inc.js benign
[nothing detected] (script) g.kx365.com/inc.js
     status: (referer=g.kx365.com/mcsd/9v/index.html?id=)saved 2758 bytes 8754da05776c6dce95176cd29e4d911c02cdb0f8
     info: [decodingLevel=0] found JavaScript
     file: 8754da05776c6dce95176cd29e4d911c02cdb0f8: 2758 bytes

Decoded Files
8754/da05776c6dce95176cd29e4d911c02cdb0f8 from g.kx365.com/inc.js (2758 bytes, 241 hidden) download


www.yiyi.cc/ benign
[nothing detected] (metarefresh) www.yiyi.cc/
     status: (referer=www.yiyi.cc/js/vcastr22.swf?file=)saved 61215 bytes fc33990dac3c2c1e924b6b03fc750fa3f5e6ff84
     info: [script] www.yiyi.cc/js/common.js
     info: [script] www.yiyi.cc/js/function.js
     info: [img] tel.xiguady.com/logo.png
     info: [iframe] www.yiyi.cc/html/990-90.html
     info: [img] tupian.yiyi.cc/pic/uploadimg/20097249105130222.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/2009101120385177678.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/201081621301843606.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/20106100222482808.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/201082422363647428.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/201079934491948.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/20106241513511338.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/20108128284457459.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/201062519293669410.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/201081423464122035.jpg
     info: [iframe] www.yiyi.cc/html/728-90.html
     info: [iframe] www.yiyi.cc/
     info: [script] w.cnzz.com/c.php?id=30028445&l=3
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.01 Transitional/EN" "http:/www.w3.org/TR/html4/loose.dtd">
          error: line:3: ...............^
     file: fc33990dac3c2c1e924b6b03fc750fa3f5e6ff84: 61215 bytes

Decoded Files
fc33/990dac3c2c1e924b6b03fc750fa3f5e6ff84 from www.yiyi.cc/ (61215 bytes, 17274 hidden) download


union.bokecc.com/flash/pocle/player.swf?siteid=maxuser&vid= benign
[nothing detected] [SWF] (embed) union.bokecc.com/flash/pocle/player.swf?siteid=maxuser&vid=
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 3812 bytes 44ae32f8e5b7e5be9e8de841c789bc6d7a1ff18d
     info: [0] no JavaScript
     file: 44ae32f8e5b7e5be9e8de841c789bc6d7a1ff18d: 3812 bytes

Decoded Files
44ae/32f8e5b7e5be9e8de841c789bc6d7a1ff18d from union.bokecc.com/flash/pocle/player.swf?siteid=maxuser&vid= (3812 bytes, 2263 hidden) download


www.yiyi.cc/js/tudou.htm?iid= benign
[nothing detected] (iframe) www.yiyi.cc/js/tudou.htm?iid=
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 8811 bytes da5e86ea2fdb1d4a6290de0bddec383cb7162b6b
     info: [javascript variable] URL=erreport.tudou.com/errorlog/error.php
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:3: ...............^
     file: da5e86ea2fdb1d4a6290de0bddec383cb7162b6b: 8811 bytes

Decoded Files
da5e/86ea2fdb1d4a6290de0bddec383cb7162b6b from www.yiyi.cc/js/tudou.htm?iid= (8811 bytes, 131 hidden) download


cache.tv.qq.com/qqplayerout.swf?v= benign
[nothing detected] [SWF] (embed) cache.tv.qq.com/qqplayerout.swf?v=
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 50617 bytes 9705f1b3335e2a1c34766de01cda11e6bc5008cc
     info: [0] no JavaScript
     file: 9705f1b3335e2a1c34766de01cda11e6bc5008cc: 50617 bytes

Decoded Files
9705/f1b3335e2a1c34766de01cda11e6bc5008cc from cache.tv.qq.com/qqplayerout.swf?v= (50617 bytes, 30536 hidden) download


www.yiyi.cc/html/990-90nr.html benign
[nothing detected] (iframe) www.yiyi.cc/html/990-90nr.html
     status: (referer=www.yiyi.cc/film16/9540/)saved 511 bytes 3aca3ed27b5ef809716ad4211d48af966ebe928a
     info: [script] cpro.baidu.com/cpro/ui/c.js
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.0 Transitional/EN">
          error: line:3: ...............^
     file: 3aca3ed27b5ef809716ad4211d48af966ebe928a: 511 bytes

Decoded Files
3aca/3ed27b5ef809716ad4211d48af966ebe928a from www.yiyi.cc/html/990-90nr.html (511 bytes, 28 hidden) download


www.yiyi.cc/film16/9540/9540_2_9.html benign
[nothing detected] www.yiyi.cc/film16/9540/9540_2_9.html
     status: (referer=www.google.com/trends/hottrends)saved 14087 bytes e2279cb0ed14e900459bde7a0cd19311096b6d2c
     info: [script] www.yiyi.cc/js/common.js
     info: [script] www.yiyi.cc/js/function.js
     info: [script] www.yiyi.cc/js/wdplay.js
     info: [script] www.yiyi.cc/js/js.js
     info: [script] js.getgvod.com/player/gvod.js
     info: [img] tel.xiguady.com/logo.png
     info: [iframe] www.yiyi.cc/html/990-90.html
     info: [script] www.yiyi.cc/film16/9540/
     info: [iframe] www.yiyi.cc/html/300-250.html
     info: [iframe] www.yiyi.cc/html/300-2502.html
     info: [script] www.yiyi.cc/film16/9540/9540.js
     info: [script] www.lolo.cc/js/qvod.js
     info: [script] www.lolo.cc/js/gvod.js
     info: [iframe] www.yiyi.cc/film16/9540/
     info: [script] w.cnzz.com/c.php?id=30028445&l=3
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:3: ...............^
     file: e2279cb0ed14e900459bde7a0cd19311096b6d2c: 14087 bytes

Decoded Files
e227/9cb0ed14e900459bde7a0cd19311096b6d2c from www.yiyi.cc/film16/9540/9540_2_9.html (14087 bytes, 3018 hidden) download


www.yiyi.cc/js/vcastr22.swf?file= benign
[nothing detected] (embed) www.yiyi.cc/js/vcastr22.swf?file=
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 91 bytes 382cfec00b3927eddcadf817e894a52721b4b126
     info: [meta refresh] URL=www.yiyi.cc
     info: [0] no JavaScript
     file: 382cfec00b3927eddcadf817e894a52721b4b126: 91 bytes

Decoded Files
382c/fec00b3927eddcadf817e894a52721b4b126 from www.yiyi.cc/js/vcastr22.swf?file= (91 bytes, 4 hidden) download


www.yiyi.cc/film16/9540/ benign
[nothing detected] (iframe) www.yiyi.cc/film16/9540/
     status: (referer=www.yiyi.cc/film16/9540/9540_2_9.html)saved 12195 bytes d805076946453657a840944e1a34027fed858e4c
     info: [script] www.yiyi.cc/js/common.js
     info: [script] www.yiyi.cc/js/function.js
     info: [script] www.yiyi.cc/js/js.js
     info: [img] tel.xiguady.com/logo.png
     info: [iframe] www.yiyi.cc/html/990-90.html
     info: [img] tupian.yiyi.cc/pic/uploadimg/201042314322887461.jpg
     info: [iframe] www.yiyi.cc/inc/wd.asp?id=9540
     info: [iframe] www.yiyi.cc/html/300-280.html
     info: [script] www.lolo.cc/js/qvod.js
     info: [script] www.lolo.cc/js/gvod.js
     info: [iframe] www.yiyi.cc/html/990-90nr.html
     info: [img] tupian.yiyi.cc/pic/uploadimg/20108170393920656.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/2009111522252789853.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/20102161413071757.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/201051811174297298.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/201021123141053261.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/201031817313999091.jpg
     info: [img] tupian.yiyi.cc/pic/uploadimg/201042010592064354.jpg
     info: [iframe] www.yiyi.cc/film16/9540/
     info: [script] w.cnzz.com/c.php?id=30028445&l=3
     info: [script] www.yiyi.cc/film16/9540/
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:3: ...............^
     file: d805076946453657a840944e1a34027fed858e4c: 12195 bytes

Decoded Files
d805/076946453657a840944e1a34027fed858e4c from www.yiyi.cc/film16/9540/ (12195 bytes, 3123 hidden) download


g.kx365.com/mcsd/9v/images/AC_RunActiveContent.js benign
[nothing detected] (script) g.kx365.com/mcsd/9v/images/AC_RunActiveContent.js
     status: (referer=g.kx365.com/mcsd/9v/index.html?id=)saved 8321 bytes 46c525e5b491bfd94ded94351779553c6892c3fe
     info: [decodingLevel=0] found JavaScript
     file: 46c525e5b491bfd94ded94351779553c6892c3fe: 8321 bytes

Decoded Files
46c5/25e5b491bfd94ded94351779553c6892c3fe from g.kx365.com/mcsd/9v/images/AC_RunActiveContent.js (8321 bytes, 1322 hidden) download


www.yiyi.cc/inc/wd.asp?id=9540 benign
[nothing detected] (iframe) www.yiyi.cc/inc/wd.asp?id=9540
     status: (referer=www.yiyi.cc/film16/9540/)saved 2054 bytes 1e94c577505311eb4fe62f985bdbae295561c14f
     info: [script] www.yiyi.cc/inc/mark.js
     info: [decodingLevel=0] found JavaScript
     error: line:12: SyntaxError: XML tag name mismatch (expected meta):
          error: line:12: </head>
          error: line:12: ..^
     file: 1e94c577505311eb4fe62f985bdbae295561c14f: 2054 bytes

Decoded Files
1e94/c577505311eb4fe62f985bdbae295561c14f from www.yiyi.cc/inc/wd.asp?id=9540 (2054 bytes, 245 hidden) download


p.you.video.sina.com.cn/player/player.swf?auto=1&vid= benign
[nothing detected] [SWF] (embed) p.you.video.sina.com.cn/player/player.swf?auto=1&vid=
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 73081 bytes 482bd68618a7c2d97dd2cac87502a9a43cfa3289
     info: [0] no JavaScript
     file: 482bd68618a7c2d97dd2cac87502a9a43cfa3289: 73081 bytes

Decoded Files
482b/d68618a7c2d97dd2cac87502a9a43cfa3289 from p.you.video.sina.com.cn/player/player.swf?auto=1&vid= (73081 bytes, 44068 hidden) download


c.91wan.com/300x250_1.html?aid=17898 benign
[nothing detected] (iframe) c.91wan.com/300x250_1.html?aid=17898
     status: (referer=www.yiyi.cc/js/4399.html)saved 1567 bytes 5cddce948f8dac56956f6b35f5f4ab0b05743312
     info: [javascript variable] URL=c.chinaih.com/img/300x250.gif
     info: [javascript variable] URL=c.chinaih.com/1/
     info: [script] c.91wan.com/1.js
     info: [img] c.91wan.com/
     info: [embed] c.91wan.com/
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
          error: line:3: ...............^
     file: 5cddce948f8dac56956f6b35f5f4ab0b05743312: 1567 bytes

Decoded Files
5cdd/ce948f8dac56956f6b35f5f4ab0b05743312 from c.91wan.com/300x250_1.html?aid=17898 (1567 bytes) download


g.kx365.com/js/jqueryMailAutoCompleteLib.js benign
[nothing detected] (script) g.kx365.com/js/jqueryMailAutoCompleteLib.js
     status: (referer=g.kx365.com/mcsd/9v/index.html?id=)saved 72174 bytes 65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined variable d.style
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var d.style = 1;
          error: line:1: ....^
     info: [1] no JavaScript
     file: 65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b: 72174 bytes
     file: 814a01f256613edcf3c9c3ad29c0ab5c19b41952: 127 bytes

Decoded Files
65cb/ff4e9d95d47a6f31d96ab4ea361c1f538a7b from g.kx365.com/js/jqueryMailAutoCompleteLib.js (72174 bytes) download

814a/01f256613edcf3c9c3ad29c0ab5c19b41952 from g.kx365.com/js/jqueryMailAutoCompleteLib.js (127 bytes) download


c.91wan.com/1.js benign
[nothing detected] (script) c.91wan.com/1.js
     status: (referer=c.91wan.com/300x250_1.html?aid=17898)saved 1310 bytes 45bc1576c0de4b7312a945b97dfce957865104d6
     info: [javascript variable] URL=cc.kx365.com
     info: [javascript variable] URL=g.kx365.com/mcsd/9v/index.html?id=
     info: [decodingLevel=0] found JavaScript
     info: [var url] URL=cc.kx365.com
     info: [var url] URL=g.kx365.com/mcsd/9v/index.html?id=
     info: [var newurl] URL=g.kx365.com/mcsd/9v/index.html?id=
     info: [decodingLevel=1] found JavaScript
     file: 45bc1576c0de4b7312a945b97dfce957865104d6: 1310 bytes
     file: 67ef89a28e96050e2ebcf470f0bba0e06d3bcbf0: 205 bytes

Decoded Files
45bc/1576c0de4b7312a945b97dfce957865104d6 from c.91wan.com/1.js (1310 bytes, 210 hidden) download

67ef/89a28e96050e2ebcf470f0bba0e06d3bcbf0 from c.91wan.com/1.js (205 bytes) download


js.getgvod.com/player/gvod.js benign
[nothing detected] (script) js.getgvod.com/player/gvod.js
     status: (referer=www.yiyi.cc/film16/9540/9540_2_9.html)saved 25641 bytes 5ff8be3048d3f3c6271c41699c1c8753dedb2e3b
     info: [javascript variable] URL=stat.getgvod.com/fcg-bin/stat.fcg?key=1&value=
     info: [javascript variable] URL=js.getgvod.com/player/warn.htm
     info: [javascript variable] URL=127.0.0.1:
     info: [iframe] js.getgvod.com/player/
     info: [decodingLevel=0] found JavaScript
     file: 5ff8be3048d3f3c6271c41699c1c8753dedb2e3b: 25641 bytes

Decoded Files
5ff8/be3048d3f3c6271c41699c1c8753dedb2e3b from js.getgvod.com/player/gvod.js (25641 bytes, 3078 hidden) download


cpro.baidu.com/cpro/ui/c.js benign
[nothing detected] (script) cpro.baidu.com/cpro/ui/c.js
     status: (referer=www.yiyi.cc/html/300-250.html)saved 5156 bytes a52002a030d085c778cbb1d5ef5a63f1c044d6ea
     info: [javascript variable] URL=cb.baidu.com/ecom
     info: [javascript variable] URL=cpro.baidu.com/cpro/ui/uijs.php
     info: [iframe] cpro.baidu.com/cpro/ui/
     info: [script] wm.baidu.com/preview/preview.js
     info: [script] cpro.baidu.com/cpro/ui/
     info: [decodingLevel=0] found JavaScript
     error: undefined variable R
     file: a52002a030d085c778cbb1d5ef5a63f1c044d6ea: 5156 bytes

Decoded Files
a520/02a030d085c778cbb1d5ef5a63f1c044d6ea from cpro.baidu.com/cpro/ui/c.js (5156 bytes) download


www.yiyi.cc/film16/9540/9540.js benign
[nothing detected] (script) www.yiyi.cc/film16/9540/9540.js
     status: (referer=www.yiyi.cc/film16/9540/9540_2_9.html)saved 3198 bytes eaf93644a0894c4ec61e5ea7b0729361881aaa04
     info: [decodingLevel=0] found JavaScript
     error: undefined variable stringReplaceAll
     error: undefined function stringReplaceAll
     file: eaf93644a0894c4ec61e5ea7b0729361881aaa04: 3198 bytes

Decoded Files
eaf9/3644a0894c4ec61e5ea7b0729361881aaa04 from www.yiyi.cc/film16/9540/9540.js (3198 bytes, 30 hidden) download


www.yiyi.cc/js/ benign
[nothing detected] (embed) www.yiyi.cc/js/
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 1449 bytes 7c826c619c28ada290b94d5117af50dfd6d57413
     info: [decodingLevel=0] found JavaScript
     error: line:3: SyntaxError: missing = in XML attribute:
          error: line:3: <!DOCTYPE HTML PUBLIC "-/W3C/DTD HTML 4.01/EN" "http:/www.w3.org/TR/html4/strict.dtd">
          error: line:3: ...............^
     file: 7c826c619c28ada290b94d5117af50dfd6d57413: 1449 bytes

Decoded Files
7c82/6c619c28ada290b94d5117af50dfd6d57413 from www.yiyi.cc/js/ (1449 bytes, 515 hidden) download


www.yiyi.cc/js/pvod.html?a= benign
[nothing detected] (iframe) www.yiyi.cc/js/pvod.html?a=
     status: (referer=www.yiyi.cc/js/wdplay.js)saved 516 bytes c5ea168c392e9bb2356cffa32e71f452ac46da49
     info: [decodingLevel=0] found JavaScript
     error: undefined variable allargs[1]
     error: line:1: SyntaxError: missing ; before statement:
          error: line:1: var allargs[1] = 1;
          error: line:1: ....^
     error: line:3: SyntaxError: missing ; before statement:
          error: line:3: <HEAD></HEAD><BODY topmargin=0 leftmargin=0>
          error: line:3: ..............^
     file: c5ea168c392e9bb2356cffa32e71f452ac46da49: 516 bytes

Decoded Files
c5ea/168c392e9bb2356cffa32e71f452ac46da49 from www.yiyi.cc/js/pvod.html?a= (516 bytes, 36 hidden) download