JSUNPACK
A Generic JavaScript Unpacker
CAUTION: jsunpack was designed for security
researchers and computer professionals
Submission permanent link ab81c39158b3b2a1288fe823a212a08892288e28 (Received 2010-08-24 18:05:14, http://motherless.com/ABF9781
)
| URL | Status |
| motherless.com/ABF9781 | saved 24694 bytes fetch_8135afebbb9a3ecf40e83f73bec292ed56faa086 |
|
| ero-advertising.com/ads/notify.php?id=15184 | status: (referer=adspaces.ero-advertising.com/adspace/15184.js) |
|
| ero-advertising.com/ads/notify.php?id=36903 | status: (referer=adspaces.ero-advertising.com/adspace/36903.js) |
|
| motherless.com/scripts/shadowbox/javascript:false;document.write( | status: (referer=motherless.com/scripts/shadowbox/shadowbox.js)failure: HTTP Error 404: Not Found |
|
| bid.openx.net/ | status: (referer=bid.openx.net/jstag)failure: HTTP Error 404: OK |
|
| www.ltassrv.com/ | status: (referer=www.ltassrv.com/serve/api5.4.asp?d=11415&s=13640&c=10704&v=1)failure: HTTP Error 403: Forbidden |
|
| motherless.com/scripts/ | status: (referer=motherless.com/scripts/swfobject.js)failure: HTTP Error 404: Not Found |
|
| adspaces.ero-advertising.com/adspace/ | status: (referer=adspaces.ero-advertising.com/adspace/15184.js)failure: HTTP Error 404: Not Found |
|
| banners.ero-advertising.com/banads/bannerview.php?pid=8030&spaceid=15184&siteid=5091&data=DMUMWUqhosfSzq4ulccysKVmiYIOeiugxktiA26P8JLr+bTXSJYaCePslH1q3Ve+FvVmvVpNXJQOaD5FPN5gjcU7XzaZbxGreNX7nDM8W2vk4xwVTOHdlIej8BCSf5Pt4CyfC+CQK0O5EU0AzzvdxQp9Ez2IDenZ6lpb7 | status: (referer=adspaces.ero-advertising.com/adspace/15184.js) |
|
| banners.ero-advertising.com/banads/bannerview.php?pid=8030&spaceid=36903&siteid=5091&data=63IYcRttFxBHiA3qDKay/qGn/vuLn7C4JteJGr3n9pL6LXa1WiiabXcNcjZl3LjL5bx4RLtjKeNnofuvbMSbiMw2B0fXAsIxXo4Gol5rgr6MBuDm2XYCkRxa5kywuEg5umMt30Q4199o86AKuhQ4VUdHnEmmfYQufUo5B | status: (referer=adspaces.ero-advertising.com/adspace/36903.js) |
|
Warning: reading file /storagefiles/c9ff/2f875aedeb7870c34e88c9799db15399c558 failed
All Malicious or Suspicious Elements of Submission
suspicious: Warning detected //warning CVE-NO-MATCH Shellcode Engine Binary Threshold
cachend.fling.com/projectm/js/jquery.cycle.all.min.js benign[nothing detected] (script) cachend.fling.com/projectm/js/jquery.cycle.all.min.js
status: (referer=br.fling.com/projectm/banner.htm?server=fe&bannerZoneid=1109&template=300x220_sixsigma4&size=300x250&thumbZoneid=456&bannerid=13315&target=_blank&prod=90&type=static&rating=r&debug=0&cmp=300x2502_300fling)saved 19107 bytes 95c638500151ecfc794fbe2736e4eacf8044210a
info: [decodingLevel=0] found JavaScript
error: undefined variable jQuery
error: undefined variable F.browser
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var F.browser = 1;
error: line:1: ....^
file: 95c638500151ecfc794fbe2736e4eacf8044210a: 19107 bytes
Decoded Files95c6/38500151ecfc794fbe2736e4eacf8044210a from cachend.fling.com/projectm/js/jquery.cycle.all.min.js (19107 bytes)
download
adspaces.ero-advertising.com/adspace/36903.js benign[nothing detected] (script) adspaces.ero-advertising.com/adspace/36903.js
status: (referer=motherless.com/)saved 2216 bytes 4f13d128cbf1c4f966806405a3a753a7e0e73e79
info: [javascript variable] URL=banners.ero-advertising.com/banads/bannerview.php?pid=8030&spaceid=36903&siteid=5091&data=63IYcRttFxBHiA3qDKay%2FqGn%2FvuLn7C4JteJGr3n9pL6LXa1WiiabXcNcjZl3LjL5bx4RLtjKeNnofuvbMSbiMw2B0fXAsIxXo4Gol5rgr6MBuDm2XYCkRxa5kywuEg5umMt30Q4199o86AKuhQ4VUdHnEmmfYQufUo5BUZh78PwxA7u3jXrttyGSCvO0Vt%2F&rnd=7054
info: [script] ero-advertising.com/ads/notify.php?id=36903
info: [iframe] adspaces.ero-advertising.com/adspace/
info: [decodingLevel=0] found JavaScript
error: undefined variable erochk.parentNode
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var erochk.parentNode = 1;
error: line:1: ....^
info: [decodingLevel=1] found JavaScript
file: 4f13d128cbf1c4f966806405a3a753a7e0e73e79: 2216 bytes
file: 8da15ae565530890a0f2893564a6869cb38e9408: 80 bytes
Decoded Files4f13/d128cbf1c4f966806405a3a753a7e0e73e79 from adspaces.ero-advertising.com/adspace/36903.js (2216 bytes, 145 hidden)
download8da1/5ae565530890a0f2893564a6869cb38e9408 from adspaces.ero-advertising.com/adspace/36903.js (80 bytes)
download
seekbang.com/cs/ads/300x250/300_rotator.php?kwd=300x2502 benign[nothing detected] (iframe) seekbang.com/cs/ads/300x250/300_rotator.php?kwd=300x2502
status: (referer=seekbang.com/cs/ads/iframe482.html)saved 729 bytes 0bf017897b3dd97df84cde699cbbad6e422ede9a
info: [iframe] www.seekbang.com/cs/mediaman/demo/tpl/300x250_7sec2.php?kwd=300x2502_7sec2
info: [iframe] seekbang.com/cs/ads/300x250/300fling.php?kwd=300x2502_300fling
info: [decodingLevel=0] found JavaScript
info: DecodedIframe detected
info: [decodingLevel=1] found JavaScript
file: 0bf017897b3dd97df84cde699cbbad6e422ede9a: 729 bytes
file: 7db01a0b293ec52aec1aa020464cc1fe865f7648: 168 bytes
Decoded Files0bf0/17897b3dd97df84cde699cbbad6e422ede9a from seekbang.com/cs/ads/300x250/300_rotator.php?kwd=300x2502 (729 bytes, 17 hidden)
download7db0/1a0b293ec52aec1aa020464cc1fe865f7648 from seekbang.com/cs/ads/300x250/300_rotator.php?kwd=300x2502 (168 bytes)
download
edge.quantserve.com/quant.js benign[nothing detected] (script) edge.quantserve.com/quant.js
status: (referer=bid.openx.net/jstag)saved 5043 bytes 45cc0e03477de48f56c5804ceb69e7d028ec532e
info: [javascript variable] URL=pixel.quantserve.com
info: [decodingLevel=0] found JavaScript
file: 45cc0e03477de48f56c5804ceb69e7d028ec532e: 5043 bytes
Decoded Files45cc/0e03477de48f56c5804ceb69e7d028ec532e from edge.quantserve.com/quant.js (5043 bytes, 71 hidden)
download
seekbang.com/cs/ads/300x250/300_rotatorb.php?kwd=300x2502 benign[nothing detected] (iframe) seekbang.com/cs/ads/300x250/300_rotatorb.php?kwd=300x2502
status: (referer=seekbang.com/cs/ads/iframe493.html)saved 658 bytes c0f13a8c52b5a34b03b85417c2281c3e30ec392f
info: [iframe] seekbang.com/cs/ads/300x250/300syc.php?kwd=300x2502_300syc
info: [iframe] seekbang.com/cs/ads/300x250/300rt.php?kwd=300x2502_300rt
info: [decodingLevel=0] found JavaScript
info: DecodedIframe detected
info: [decodingLevel=1] found JavaScript
file: c0f13a8c52b5a34b03b85417c2281c3e30ec392f: 658 bytes
file: 5a01c4291b6cc210fc3b2bbf314e94a557c092d6: 162 bytes
Decoded Filesc0f1/3a8c52b5a34b03b85417c2281c3e30ec392f from seekbang.com/cs/ads/300x250/300_rotatorb.php?kwd=300x2502 (658 bytes, 12 hidden)
download5a01/c4291b6cc210fc3b2bbf314e94a557c092d6 from seekbang.com/cs/ads/300x250/300_rotatorb.php?kwd=300x2502 (162 bytes)
download
motherless.com/ABF9781 benign[nothing detected] motherless.com/ABF9781
status: (referer=www.google.com/trends/hottrends)saved 24694 bytes 8135afebbb9a3ecf40e83f73bec292ed56faa086
info: [javascript variable] URL=motherless.com/
info: [script] motherless.com/scripts/jquery.js
info: [script] motherless.com/scripts/jquery.hotkeys.js
info: [script] motherless.com/scripts/shadowbox/shadowbox.js
info: [script] motherless.com/scripts/base.js
info: [script] motherless.com/scripts/swfobject.js
info: [script] motherless.com/scripts/tabber.js
info: [img] motherless.com/images/menu.gif
info: [img] motherless.com/images/logo8888.gif
info: [img] s3.motherless.com/dev34/0/007/572/0007572342.gif
info: [script] www.ltassrv.com/serve/api5.4.asp?d=11415&s=13640&c=10704&v=1
info: [img] motherless.com/images/view/tt-delicious-micro4.png
info: [img] motherless.com/images/view/tt-su-micro4.png
info: [img] motherless.com/images/view/tt-twitter-micro4.png
info: [img] motherless.com/images/view/tt-reddit-micro4.png
info: [input] motherless.com/"http:/motherless.com/thumbs/ABF9781.gif"></a>
info: [iframe] seekbang.com/cs/ads/iframe482.html
info: [iframe] adyads.com/delivery/afr.php?zoneid=1&cb=INSERT_RANDOM_NUMBER_HERE
info: [img] adyads.com/delivery/avw.php?zoneid=1&cb=INSERT_RANDOM_NUMBER_HERE&n=a98fbd42
info: [script] adspaces.ero-advertising.com/adspace/36903.js
info: [iframe] seekbang.com/cs/ads/iframe493.html
info: [img] motherless.com/images/menu11.jpg
info: [img] adyads.com/delivery/avw.php?zoneid=2&cb=INSERT_RANDOM_NUMBER_HERE&n=aa972a93
info: [img] motherless.com/images/3.gif
info: [img] mmotherless.com/images/big.jpg?flattered689
info: [img] mmotherless.com/images/big.jpg?flattered250
info: [img] mmotherless.com/images/big.jpg?flattered170
info: [img] mmotherless.com/images/big.jpg?flattered919
info: [img] mmotherless.com/images/big.jpg?flattered553
info: [img] mmotherless.com/images/big.jpg?flattered219
info: [img] mmotherless.com/images/big.jpg?flattered365
info: [img] mmotherless.com/images/big.jpg?flattered878
info: [img] mmotherless.com/images/big.jpg?flattered611
info: [img] mmotherless.com/images/big.jpg?flattered378
info: [img] mmotherless.com/images/big.jpg?flattered323
info: [script] motherless.com/scripts/livejasmin.js
info: [script] cdn.nsimg.net/shared/js/im/im.js?sk=streamate.com&flip=0
info: [decodingLevel=0] found JavaScript
info: [var __url] URL=motherless.com/
info: [var newurl] URL=motherless.com/
info: [decodingLevel=1] found JavaScript
file: 8135afebbb9a3ecf40e83f73bec292ed56faa086: 24694 bytes
file: 41d6292bf91e433a5011635b038cc16b7c91cea7: 113 bytes
Decoded Files8135/afebbb9a3ecf40e83f73bec292ed56faa086 from motherless.com/ABF9781 (24694 bytes, 1505 hidden)
download41d6/292bf91e433a5011635b038cc16b7c91cea7 from motherless.com/ABF9781 (113 bytes)
download
seekbang.com/cs/ads/300x250/300fling.php?kwd=300x2502_300fling benign[nothing detected] (iframe) seekbang.com/cs/ads/300x250/300fling.php?kwd=300x2502_300fling
status: (referer=seekbang.com/cs/ads/300x250/300_rotator.php?kwd=300x2502)saved 1072 bytes a7497c13c2e59f6085261a8d5fe80f9af126b128
info: [img] cdn.seekbang.com/cs/ads/300x250/top5.jpg
info: [iframe] fe.brandreachsys.com/www/delivery/afr.php?zoneid=1109&cmp=300x2502_300fling
info: [0] no JavaScript
file: a7497c13c2e59f6085261a8d5fe80f9af126b128: 1072 bytes
Decoded Filesa749/7c13c2e59f6085261a8d5fe80f9af126b128 from seekbang.com/cs/ads/300x250/300fling.php?kwd=300x2502_300fling (1072 bytes, 22 hidden)
download
www.seekbang.com/cs/mediaman/demo/tpl/js/easing.js benign[nothing detected] (script) www.seekbang.com/cs/mediaman/demo/tpl/js/easing.js
status: (referer=www.seekbang.com/cs/mediaman/demo/tpl/300x250_7sec2.php?kwd=300x2502_7sec2)saved 3507 bytes 463062c4ef124a5b2f1f16f1b1db0dc7d964657a
info: [decodingLevel=0] found JavaScript
error: undefined variable jQuery
error: undefined function jQuery.extend
file: 463062c4ef124a5b2f1f16f1b1db0dc7d964657a: 3507 bytes
Decoded Files4630/62c4ef124a5b2f1f16f1b1db0dc7d964657a from www.seekbang.com/cs/mediaman/demo/tpl/js/easing.js (3507 bytes, 376 hidden)
download
www.seekbang.com/cs/mediaman/demo/tpl/js/cycle.all.js benign[nothing detected] (script) www.seekbang.com/cs/mediaman/demo/tpl/js/cycle.all.js
status: (referer=www.seekbang.com/cs/mediaman/demo/tpl/300x250_7sec2.php?kwd=300x2502_7sec2)saved 44173 bytes 1df6abc5657a445f1afd37f4c259fbb5a4afb7f7
info: [decodingLevel=0] found JavaScript
error: undefined variable jQuery
error: undefined variable $.browser
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var $.browser = 1;
error: line:1: ....^
file: 1df6abc5657a445f1afd37f4c259fbb5a4afb7f7: 44173 bytes
Decoded Files1df6/abc5657a445f1afd37f4c259fbb5a4afb7f7 from www.seekbang.com/cs/mediaman/demo/tpl/js/cycle.all.js (44173 bytes, 3239 hidden)
download
www.seekbang.com/cs/mediaman/demo/tpl/300x250_7sec2.php?kwd=300x2502_7sec2 benign[nothing detected] (iframe) www.seekbang.com/cs/mediaman/demo/tpl/300x250_7sec2.php?kwd=300x2502_7sec2
status: (referer=seekbang.com/cs/ads/300x250/300_rotator.php?kwd=300x2502)saved 7363 bytes 5dc06b5c6e997a7f4429da2b3336cd155cfc2ca6
info: [script] www.seekbang.com/cs/mediaman/demo/tpl/js/jquery.min.js
info: [script] www.seekbang.com/cs/mediaman/demo/tpl/js/chili.js
info: [script] www.seekbang.com/cs/mediaman/demo/tpl/js/cycle.all.js
info: [script] www.seekbang.com/cs/mediaman/demo/tpl/js/easing.js
info: [script] www.seekbang.com/cs/mediaman/demo/tpl/js/jquery.easing.1.3.js
info: [img] cdn.seekbang.com/cs/mediaman/demo/tpl/images/top5.jpg
info: [img] cdn.seekbang.com/cs/mediaman/demo/tpl/images/300x250_4/3.jpg
info: [img] cdn.seekbang.com/cs/mediaman/demo/tpl/images/300x250_4/5.jpg
info: [img] cdn.seekbang.com/cs/mediaman/demo/tpl/images/300x250_4/1.jpg
info: [img] cdn.seekbang.com/cs/mediaman/demo/tpl/images/300x250_4/4.jpg
info: [img] cdn.seekbang.com/cs/mediaman/demo/tpl/images/300x250_4/2.jpg
info: [decodingLevel=0] found JavaScript
error: line:3: SyntaxError: missing = in XML attribute:
error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
error: line:3: ...............^
file: 5dc06b5c6e997a7f4429da2b3336cd155cfc2ca6: 7363 bytes
Decoded Files5dc0/6b5c6e997a7f4429da2b3336cd155cfc2ca6 from www.seekbang.com/cs/mediaman/demo/tpl/300x250_7sec2.php?kwd=300x2502_7sec2 (7363 bytes, 1133 hidden)
download
motherless.com/ benign[nothing detected] (var newurl) motherless.com/
status: (referer=motherless.com/ABF9781)saved 31723 bytes 9372ae41df263cc5e734982630c624379b2a0fbd
info: [javascript variable] URL=motherless.com/
info: [script] motherless.com/scripts/jquery.js
info: [script] motherless.com/scripts/jquery.hotkeys.js
info: [script] motherless.com/scripts/shadowbox/shadowbox.js
info: [script] motherless.com/scripts/base.js
info: [img] motherless.com/images/menu.gif
info: [img] motherless.com/images/logo8888.gif
info: [img] s3.motherless.com/dev34/0/007/572/0007572342.gif
info: [embed] motherless.com/images/banners/bear2.swf
info: [img] motherless.com/images/motherless.jpg
info: [script] adspaces.ero-advertising.com/adspace/36903.js
info: [script] adspaces.ero-advertising.com/adspace/15184.js
info: [img] s4.motherless.com/dev51/0/009/151/0009151817.jpg
info: [img] s4.motherless.com/dev50/0/009/339/0009339281.jpg
info: [img] s6.motherless.com/dev9/0/350/754/0350754260.jpg
info: [img] s5.motherless.com/dev20/0/008/067/0008067089.jpg
info: [img] s5.motherless.com/dev23/0/295/235/0295235513.jpg
info: [img] s6.motherless.com/dev7/0/298/812/0298812420.jpg
info: [img] s2.motherless.com/dev43/0/009/073/0009073858.jpg
info: [img] motherless.com/images/link.jpg
info: [img] s3.motherless.com/dev34/0/369/739/0369739775.jpg
info: [img] s5.motherless.com/dev24/0/369/739/0369739665.jpg
info: [img] motherless.com/images/menu11.jpg
info: [img] adyads.com/delivery/avw.php?zoneid=2&cb=INSERT_RANDOM_NUMBER_HERE&n=aa972a93
info: [img] motherless.com/images/3.gif
info: [img] mmotherless.com/images/big.jpg?flattered624
info: [img] mmotherless.com/images/big.jpg?flattered414
info: [img] mmotherless.com/images/big.jpg?flattered416
info: [img] mmotherless.com/images/big.jpg?flattered201
info: [img] mmotherless.com/images/big.jpg?flattered150
info: [img] mmotherless.com/images/big.jpg?flattered712
info: [img] mmotherless.com/images/big.jpg?flattered517
info: [img] mmotherless.com/images/big.jpg?flattered949
info: [img] mmotherless.com/images/big.jpg?flattered104
info: [img] mmotherless.com/images/big.jpg?flattered540
info: [img] mmotherless.com/images/big.jpg?flattered552
info: [img] mmotherless.com/images/big.jpg?flattered139
info: [script] motherless.com/scripts/livejasmin.js
info: [script] cdn.nsimg.net/shared/js/im/im.js?sk=streamate.com&flip=0
info: [decodingLevel=0] found JavaScript
info: [var __url] URL=motherless.com/
info: [var newurl] URL=motherless.com/
info: [decodingLevel=1] found JavaScript
file: 9372ae41df263cc5e734982630c624379b2a0fbd: 31723 bytes
file: 41d6292bf91e433a5011635b038cc16b7c91cea7: 113 bytes
Decoded Files9372/ae41df263cc5e734982630c624379b2a0fbd from motherless.com/ (31723 bytes, 3104 hidden)
download41d6/292bf91e433a5011635b038cc16b7c91cea7 from motherless.com/ (113 bytes)
download
www.seekbang.com/cs/mediaman/demo/tpl/js/jquery.easing.1.3.js benign[nothing detected] (script) www.seekbang.com/cs/mediaman/demo/tpl/js/jquery.easing.1.3.js
status: (referer=www.seekbang.com/cs/mediaman/demo/tpl/300x250_7sec2.php?kwd=300x2502_7sec2)saved 8097 bytes 82e40d060bc269a6dde20c3990ca5a4fea6ca754
info: [decodingLevel=0] found JavaScript
error: undefined variable jQuery
error: undefined variable jQuery.easing
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var jQuery.easing = 1;
error: line:1: ....^
file: 82e40d060bc269a6dde20c3990ca5a4fea6ca754: 8097 bytes
Decoded Files82e4/0d060bc269a6dde20c3990ca5a4fea6ca754 from www.seekbang.com/cs/mediaman/demo/tpl/js/jquery.easing.1.3.js (8097 bytes, 203 hidden)
download
www.ltassrv.com/Adsrv/js/ benign[nothing detected] (var newurl) www.ltassrv.com/Adsrv/js/
status: (referer=www.ltassrv.com/serve/api5.4.asp?d=11415&s=13640&c=10704&v=1)saved 45 bytes cfc6deda1bd0a6988230673b80688552af040aa3
info: [0] no JavaScript
file: cfc6deda1bd0a6988230673b80688552af040aa3: 45 bytes
Decoded Filescfc6/deda1bd0a6988230673b80688552af040aa3 from www.ltassrv.com/Adsrv/js/ (45 bytes)
download
adyads.com/delivery/afr.php?zoneid=1&cb=INSERT_RANDOM_NUMBER_HERE suspicious[suspicious:5] (ipaddr:74.82.53.76) (iframe) adyads.com/delivery/afr.php?zoneid=1&cb=INSERT_RANDOM_NUMBER_HERE
status: (referer=motherless.com/ABF9781)saved 5892 bytes c9ff2f875aedeb7870c34e88c9799db15399c558
info: [img] adyads.com/delivery/lg.php?bannerid=4&campaignid=3&zoneid=1&loc=1&referer=http%3A%2F%2Fmotherless.com%2FABF9781&cb=bfcacd3223
info: [decodingLevel=0] found JavaScript
info: Decoding option navigator.systemLanguage=en and navigator.systemLanguage=zh-cn and browser=IE7/XP and browser=IE8/Vista and browser=Firefox, 882 bytes
info: Decoding option browser=Opera, 2997 bytes
suspicious: Warning detected /warning CVE-NO-MATCH Shellcode Engine Binary Threshold
info: DecodedIframe detected
info: [iframe] skgamers.com/ads.html
info: [decodingLevel=1] found JavaScript
info: file: saved adyads.com/delivery/afr.php?zoneid=1&cb=INSERT_RANDOM_NUMBER_HERE to (c9ff2f875aedeb7870c34e88c9799db15399c558)
file: c9ff2f875aedeb7870c34e88c9799db15399c558: 5892 bytes
file: 334ffa8f9e21623911fba06795905d8585804484: 2997 bytes
Decoded Filesc9ff/2f875aedeb7870c34e88c9799db15399c558 from adyads.com/delivery/afr.php?zoneid=1&cb=INSERT_RANDOM_NUMBER_HERE
334f/fa8f9e21623911fba06795905d8585804484 from adyads.com/delivery/afr.php?zoneid=1&cb=INSERT_RANDOM_NUMBER_HERE (2997 bytes)
download
www.ltassrv.com/serve/api5.4.asp?d=11415&s=13640&c=10704&v=1 benign[nothing detected] (script) www.ltassrv.com/serve/api5.4.asp?d=11415&s=13640&c=10704&v=1
status: (referer=motherless.com/ABF9781)saved 2087 bytes 49372d0efc1d86bd12a8c7d47e4f5777c6a8bc2a
info: [javascript variable] URL=www.ltassrv.com/
info: [javascript variable] URL=www.ltassrv.com/Adsrv/js/
info: [decodingLevel=0] found JavaScript
error: undefined variable head
info: [var BaseUrl] URL=www.ltassrv.com/
info: [var Url] URL=www.ltassrv.com/Adsrv/js/
info: [var newurl] URL=www.ltassrv.com/Adsrv/js/
info: [decodingLevel=1] found JavaScript
file: 49372d0efc1d86bd12a8c7d47e4f5777c6a8bc2a: 2087 bytes
file: 76976a6b22c35223eb689fbd42dd6843698e7b34: 283 bytes
Decoded Files4937/2d0efc1d86bd12a8c7d47e4f5777c6a8bc2a from www.ltassrv.com/serve/api5.4.asp?d=11415&s=13640&c=10704&v=1 (2087 bytes)
download7697/6a6b22c35223eb689fbd42dd6843698e7b34 from www.ltassrv.com/serve/api5.4.asp?d=11415&s=13640&c=10704&v=1 (283 bytes)
download
www.seekbang.com/cs/mediaman/demo/tpl/js/chili.js benign[nothing detected] (script) www.seekbang.com/cs/mediaman/demo/tpl/js/chili.js
status: (referer=www.seekbang.com/cs/mediaman/demo/tpl/300x250_7sec2.php?kwd=300x2502_7sec2)saved 7009 bytes 0f2371385a54879dfaad0ad977a3c7ff5aeea22f
info: [decodingLevel=0] found JavaScript
error: undefined variable jQuery
error: undefined function $
info: [decodingLevel=1] found JavaScript
file: 0f2371385a54879dfaad0ad977a3c7ff5aeea22f: 7009 bytes
file: 580b14ca006685e8f0b8dc0d251bbb18a72e150d: 7186 bytes
Decoded Files0f23/71385a54879dfaad0ad977a3c7ff5aeea22f from www.seekbang.com/cs/mediaman/demo/tpl/js/chili.js (7009 bytes, 1 hidden)
download580b/14ca006685e8f0b8dc0d251bbb18a72e150d from www.seekbang.com/cs/mediaman/demo/tpl/js/chili.js (7186 bytes)
download
motherless.com/scripts/shadowbox/shadowbox.js benign[nothing detected] (script) motherless.com/scripts/shadowbox/shadowbox.js
status: (referer=motherless.com/)saved 62037 bytes 1d883cde2964b6c9157e0b7693baa9c88b654100
info: [script] :
info: [iframe] motherless.com/scripts/shadowbox/javascript:false;document.write(
info: [decodingLevel=0] found JavaScript
error: undefined variable jQuery
error: undefined variable jQuery.fn
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var jQuery.fn = 1;
error: line:1: ....^
file: 1d883cde2964b6c9157e0b7693baa9c88b654100: 62037 bytes
Decoded Files1d88/3cde2964b6c9157e0b7693baa9c88b654100 from motherless.com/scripts/shadowbox/shadowbox.js (62037 bytes, 25 hidden)
download
motherless.com/scripts/base.js benign[nothing detected] (script) motherless.com/scripts/base.js
status: (referer=motherless.com/)saved 8918 bytes 55b914f462888b3066cb2efdf0b2676d936ce8ff
info: [decodingLevel=0] found JavaScript
error: undefined variable $
error: undefined function $
file: 55b914f462888b3066cb2efdf0b2676d936ce8ff: 8918 bytes
Decoded Files55b9/14f462888b3066cb2efdf0b2676d936ce8ff from motherless.com/scripts/base.js (8918 bytes, 939 hidden)
download
motherless.com/scripts/tabber.js benign[nothing detected] (script) motherless.com/scripts/tabber.js
status: (referer=motherless.com/ABF9781)saved 4605 bytes 8ea87513bb716105a706e8cc96c6c420b4f34831
info: [decodingLevel=0] found JavaScript
file: 8ea87513bb716105a706e8cc96c6c420b4f34831: 4605 bytes
Decoded Files8ea8/7513bb716105a706e8cc96c6c420b4f34831 from motherless.com/scripts/tabber.js (4605 bytes)
download
adspaces.ero-advertising.com/adspace/15184.js benign[nothing detected] (script) adspaces.ero-advertising.com/adspace/15184.js
status: (referer=motherless.com/)saved 2216 bytes 4d2597c1fab5557df46b2368d3b74629e636d143
info: [javascript variable] URL=banners.ero-advertising.com/banads/bannerview.php?pid=8030&spaceid=15184&siteid=5091&data=DMUMWUqhosfSzq4ulccysKVmiYIOeiugxktiA26P8JLr%2BbTXSJYaCePslH1q3Ve%2BFvVmvVpNXJQOaD5FPN5gjcU7XzaZbxGreNX7nDM8W2vk4xwVTOHdlIej8BCSf5Pt4CyfC%2BCQK0O5EU0AzzvdxQp9Ez2IDenZ6lpb707IIAnwktU9lkvciSN1dTZtKRcN&rnd=6220
info: [script] ero-advertising.com/ads/notify.php?id=15184
info: [iframe] adspaces.ero-advertising.com/adspace/
info: [decodingLevel=0] found JavaScript
error: undefined variable erochk.parentNode
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var erochk.parentNode = 1;
error: line:1: ....^
info: [decodingLevel=1] found JavaScript
file: 4d2597c1fab5557df46b2368d3b74629e636d143: 2216 bytes
file: 8da15ae565530890a0f2893564a6869cb38e9408: 80 bytes
Decoded Files4d25/97c1fab5557df46b2368d3b74629e636d143 from adspaces.ero-advertising.com/adspace/15184.js (2216 bytes, 145 hidden)
download8da1/5ae565530890a0f2893564a6869cb38e9408 from adspaces.ero-advertising.com/adspace/15184.js (80 bytes)
download
cdn.nsimg.net/shared/js/im/im.js?sk=streamate.com&flip=0 benign[nothing detected] (script) cdn.nsimg.net/shared/js/im/im.js?sk=streamate.com&flip=0
status: (referer=motherless.com/ABF9781)saved 7666 bytes 6bd7ba81b1091123578c76c39c011b732f90d855
info: [decodingLevel=0] found JavaScript
error: undefined variable G
file: 6bd7ba81b1091123578c76c39c011b732f90d855: 7666 bytes
Decoded Files6bd7/ba81b1091123578c76c39c011b732f90d855 from cdn.nsimg.net/shared/js/im/im.js?sk=streamate.com&flip=0 (7666 bytes)
download
cachend.fling.com/projectmimages/jquery-1.3.1.min.js benign[nothing detected] (script) cachend.fling.com/projectmimages/jquery-1.3.1.min.js
status: (referer=br.fling.com/projectm/banner.htm?server=fe&bannerZoneid=1109&template=300x220_sixsigma4&size=300x250&thumbZoneid=456&bannerid=13315&target=_blank&prod=90&type=static&rating=r&debug=0&cmp=300x2502_300fling)saved 55272 bytes fed603a4db640b82de54b246de4be7a1cffa8780
info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
info: [decodingLevel=0] found JavaScript
error: undefined function S.insertBefore
error: undefined variable S
info: [1] no JavaScript
file: fed603a4db640b82de54b246de4be7a1cffa8780: 55272 bytes
file: cd94dfeccbadf0ad8852122817b2c802b8472294: 63 bytes
Decoded Filesfed6/03a4db640b82de54b246de4be7a1cffa8780 from cachend.fling.com/projectmimages/jquery-1.3.1.min.js (55272 bytes)
downloadcd94/dfeccbadf0ad8852122817b2c802b8472294 from cachend.fling.com/projectmimages/jquery-1.3.1.min.js (63 bytes)
download
cachend.fling.com/projectmimages/jquery.easing.1.3.js benign[nothing detected] (script) cachend.fling.com/projectmimages/jquery.easing.1.3.js
status: (referer=br.fling.com/projectm/banner.htm?server=fe&bannerZoneid=1109&template=300x220_sixsigma4&size=300x250&thumbZoneid=456&bannerid=13315&target=_blank&prod=90&type=static&rating=r&debug=0&cmp=300x2502_300fling)saved 8097 bytes 82e40d060bc269a6dde20c3990ca5a4fea6ca754
info: [decodingLevel=0] found JavaScript
error: undefined variable jQuery
error: undefined variable jQuery.easing
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var jQuery.easing = 1;
error: line:1: ....^
file: 82e40d060bc269a6dde20c3990ca5a4fea6ca754: 8097 bytes
Decoded Files82e4/0d060bc269a6dde20c3990ca5a4fea6ca754 from cachend.fling.com/projectmimages/jquery.easing.1.3.js (8097 bytes, 203 hidden)
download
seekbang.com/cs/ads/iframe493.html benign[nothing detected] (iframe) seekbang.com/cs/ads/iframe493.html
status: (referer=motherless.com/ABF9781)saved 236 bytes 77af9f1af7c9bef1b512cb01286e642ed8a103ba
info: [iframe] seekbang.com/cs/ads/300x250/300_rotatorb.php?kwd=300x2502
info: [0] no JavaScript
file: 77af9f1af7c9bef1b512cb01286e642ed8a103ba: 236 bytes
Decoded Files77af/9f1af7c9bef1b512cb01286e642ed8a103ba from seekbang.com/cs/ads/iframe493.html (236 bytes)
download
motherless.com/scripts/jquery.js benign[nothing detected] (script) motherless.com/scripts/jquery.js
status: (referer=motherless.com/ABF9781)saved 72174 bytes 65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b
info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
info: [decodingLevel=0] found JavaScript
error: undefined variable d.style
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var d.style = 1;
error: line:1: ....^
info: [1] no JavaScript
file: 65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b: 72174 bytes
file: 814a01f256613edcf3c9c3ad29c0ab5c19b41952: 127 bytes
Decoded Files65cb/ff4e9d95d47a6f31d96ab4ea361c1f538a7b from motherless.com/scripts/jquery.js (72174 bytes)
download814a/01f256613edcf3c9c3ad29c0ab5c19b41952 from motherless.com/scripts/jquery.js (127 bytes)
download
bid.openx.net/jstag benign[nothing detected] (script) bid.openx.net/jstag
status: (referer=skgamers.com/ads.html)saved 1418 bytes c958196b4f3791a29f65f54e923347ad1d75abe2
info: [script] bid.openx.net/
info: [script] http
info: [img] aperture.displaymarketplace.com/audmeasure.gif?liveconclientID=3440269445697&CreativeID=0&PlacementID=0&EventType=Impression&rand=
info: [decodingLevel=0] found JavaScript
error: undefined variable OXM_ad
info: [script] edge.quantserve.com/quant.js
info: [decodingLevel=1] found JavaScript
file: c958196b4f3791a29f65f54e923347ad1d75abe2: 1418 bytes
file: 171a4b9cb0e5e36acbc869b53f9f64f72f8d3932: 106 bytes
Decoded Filesc958/196b4f3791a29f65f54e923347ad1d75abe2 from bid.openx.net/jstag (1418 bytes)
download171a/4b9cb0e5e36acbc869b53f9f64f72f8d3932 from bid.openx.net/jstag (106 bytes)
download
seekbang.com/cs/ads/300x250/300rt.php?kwd=300x2502_300rt benign[nothing detected] (iframe) seekbang.com/cs/ads/300x250/300rt.php?kwd=300x2502_300rt
status: (referer=seekbang.com/cs/ads/300x250/300_rotatorb.php?kwd=300x2502)saved 382 bytes 3272dcf1e05f4f598d6279760c549c930329a421
info: [img] cdn.seekbang.com/cs/ads/300rt.jpg
info: [0] no JavaScript
file: 3272dcf1e05f4f598d6279760c549c930329a421: 382 bytes
Decoded Files3272/dcf1e05f4f598d6279760c549c930329a421 from seekbang.com/cs/ads/300x250/300rt.php?kwd=300x2502_300rt (382 bytes, 24 hidden)
download
motherless.com/scripts/livejasmin.js benign[nothing detected] (script) motherless.com/scripts/livejasmin.js
status: (referer=motherless.com/)saved 1823 bytes f1b301be5fd4b9f174b9de30bb10e60699c9557f
info: [decodingLevel=0] found JavaScript
file: f1b301be5fd4b9f174b9de30bb10e60699c9557f: 1823 bytes
Decoded Filesf1b3/01be5fd4b9f174b9de30bb10e60699c9557f from motherless.com/scripts/livejasmin.js (1823 bytes, 338 hidden)
download
br.fling.com/projectm/banner.htm?server=fe&bannerZoneid=1109&template=300x220_sixsigma4&size=300x250&thumbZoneid=456&bannerid=13315&target=_blank&prod=90&type=static&rating=r&debug=0&cmp=300x2502_300fling benign[nothing detected] (iframe) br.fling.com/projectm/banner.htm?server=fe&bannerZoneid=1109&template=300x220_sixsigma4&size=300x250&thumbZoneid=456&bannerid=13315&target=_blank&prod=90&type=static&rating=r&debug=0&cmp=300x2502_300fling
status: (referer=fe.brandreachsys.com/www/delivery/afr.php?zoneid=1109&cmp=300x2502_300fling)saved 16566 bytes c19c0185911bce076e11e90c87fb73a3b6492d49
info: [script] cachend.fling.com/projectmimages/jquery-1.3.1.min.js
info: [script] cachend.fling.com/projectmimages/jquery.easing.1.3.js
info: [script] cachend.fling.com/projectm/js/jquery.cycle.all.min.js
info: [script] cachend.fling.com/projectm/js/DD_belatedPNG_0.0.7a-min.js
info: [img] cachend.fling.com/thumbs/fling/r/static/300x250_072710_57.jpg
info: [img] cachend.fling.com/thumbs/fling/r/static/may28_300x250_08.jpg
info: [img] cachend.fling.com/thumbs/fling/r/static/300x250_feb162010_13.jpg
info: [img] cachend.fling.com/thumbs/fling/r/static/300x250_072710_19.jpg
info: [img] cachend.fling.com/thumbs/fling/r/static/300x250_072710_1.jpg
info: [img] cachend.fling.com/thumbs/fling/r/static/300x250_feb162010_10.jpg
info: [img] cachend.fling.com/thumbs/fling/r/static/aug2010_300x250_3.jpg
info: [img] cachend.fling.com/thumbs/fling/r/static/300x250_may1310_9.jpg
info: [img] thumb.brandreachsys.com/www/delivery/lg.php?bannerid=51755&campaignid=1139&zoneid=456&cb=8d25f6b384
info: [img] thumb.brandreachsys.com/www/delivery/lg.php?bannerid=57937&campaignid=1139&zoneid=456&cb=8d25f6b384
info: [decodingLevel=0] found JavaScript
error: undefined variable $
error: undefined function $
error: line:3: SyntaxError: missing = in XML attribute:
error: line:3: <!DOCTYPE html PUBLIC "-/W3C/DTD XHTML 1.0 Transitional/EN" "http:/www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
error: line:3: ...............^
file: c19c0185911bce076e11e90c87fb73a3b6492d49: 16566 bytes
Decoded Filesc19c/0185911bce076e11e90c87fb73a3b6492d49 from br.fling.com/projectm/banner.htm?server=fe&bannerZoneid=1109&template=300x220_sixsigma4&size=300x250&thumbZoneid=456&bannerid=13315&target=_blank&prod=90&type=static&rating=r&debug=0&cmp=300x2502_300fling (16566 bytes, 1572 hidden)
download
cachend.fling.com/projectm/js/DD_belatedPNG_0.0.7a-min.js benign[nothing detected] (script) cachend.fling.com/projectm/js/DD_belatedPNG_0.0.7a-min.js
status: (referer=br.fling.com/projectm/banner.htm?server=fe&bannerZoneid=1109&template=300x220_sixsigma4&size=300x250&thumbZoneid=456&bannerid=13315&target=_blank&prod=90&type=static&rating=r&debug=0&cmp=300x2502_300fling)saved 5549 bytes 18474ac433af6fd19d3205071998feaf330b6151
info: [decodingLevel=0] found JavaScript
error: undefined variable document.documentElement.firstChild
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var document.documentElement.firstChild = 1;
error: line:1: ....^
info: [decodingLevel=1] found JavaScript
info: [2] no JavaScript
file: 18474ac433af6fd19d3205071998feaf330b6151: 5549 bytes
file: 4e3e2bc283f888d4b310ce435a636645f86b9384: 5987 bytes
file: 2baf909482e034b2cf82d28e001d2971e0ef41a1: 64 bytes
Decoded Files1847/4ac433af6fd19d3205071998feaf330b6151 from cachend.fling.com/projectm/js/DD_belatedPNG_0.0.7a-min.js (5549 bytes, 13 hidden)
download4e3e/2bc283f888d4b310ce435a636645f86b9384 from cachend.fling.com/projectm/js/DD_belatedPNG_0.0.7a-min.js (5987 bytes)
download2baf/909482e034b2cf82d28e001d2971e0ef41a1 from cachend.fling.com/projectm/js/DD_belatedPNG_0.0.7a-min.js (64 bytes)
download
seekbang.com/cs/ads/iframe482.html benign[nothing detected] (iframe) seekbang.com/cs/ads/iframe482.html
status: (referer=motherless.com/ABF9781)saved 235 bytes 17ddb3d289161f238503147e91fe8d9f4e0defdc
info: [iframe] seekbang.com/cs/ads/300x250/300_rotator.php?kwd=300x2502
info: [0] no JavaScript
file: 17ddb3d289161f238503147e91fe8d9f4e0defdc: 235 bytes
Decoded Files17dd/b3d289161f238503147e91fe8d9f4e0defdc from seekbang.com/cs/ads/iframe482.html (235 bytes)
download
motherless.com/images/banners/bear2.swf benign[nothing detected] [SWF] (embed) motherless.com/images/banners/bear2.swf
status: (referer=motherless.com/)saved 117687 bytes a649afb6121beaad33d22046241ccc163a9d79c1
info: [0] no JavaScript
file: a649afb6121beaad33d22046241ccc163a9d79c1: 117687 bytes
Decoded Filesa649/afb6121beaad33d22046241ccc163a9d79c1 from motherless.com/images/banners/bear2.swf (117687 bytes, 71253 hidden)
download
skgamers.com/ads.html benign[nothing detected] (iframe) skgamers.com/ads.html
status: (referer=adyads.com/delivery/afr.php?zoneid=1&cb=INSERT_RANDOM_NUMBER_HERE)saved 1114 bytes 5e2f365cfe166b3ec4dcf1cabeada13292b787b4
info: [script] bid.openx.net/jstag
info: [decodingLevel=0] found JavaScript
error: line:6: SyntaxError: missing ; before statement:
error: line:6: <script type="text/javascript" src="http:/bid.openx.net/jstag"></script>
error: line:6: .^
file: 5e2f365cfe166b3ec4dcf1cabeada13292b787b4: 1114 bytes
Decoded Files5e2f/365cfe166b3ec4dcf1cabeada13292b787b4 from skgamers.com/ads.html (1114 bytes, 17 hidden)
download
pixel.quantserve.com/ benign[nothing detected] (jsvar) pixel.quantserve.com/
status: (referer=edge.quantserve.com/quant.js)saved 295 bytes 2dc5061058227cb9aa376b9bfb0d137c2b0d5d7f
info: [img] pixel.quantserve.com/logo.png
info: [0] no JavaScript
file: 2dc5061058227cb9aa376b9bfb0d137c2b0d5d7f: 295 bytes
Decoded Files2dc5/061058227cb9aa376b9bfb0d137c2b0d5d7f from pixel.quantserve.com/ (295 bytes)
download
seekbang.com/cs/ads/300x250/300syc.php?kwd=300x2502_300syc benign[nothing detected] (iframe) seekbang.com/cs/ads/300x250/300syc.php?kwd=300x2502_300syc
status: (referer=seekbang.com/cs/ads/300x250/300_rotatorb.php?kwd=300x2502)saved 384 bytes 240ced7fca704df112e1d751ca5a2e91da0e68dd
info: [img] cdn.seekbang.com/cs/ads/300syc.gif
info: [0] no JavaScript
file: 240ced7fca704df112e1d751ca5a2e91da0e68dd: 384 bytes
Decoded Files240c/ed7fca704df112e1d751ca5a2e91da0e68dd from seekbang.com/cs/ads/300x250/300syc.php?kwd=300x2502_300syc (384 bytes, 24 hidden)
download
fe.brandreachsys.com/www/delivery/afr.php?zoneid=1109&cmp=300x2502_300fling benign[nothing detected] (iframe) fe.brandreachsys.com/www/delivery/afr.php?zoneid=1109&cmp=300x2502_300fling
status: (referer=seekbang.com/cs/ads/300x250/300fling.php?kwd=300x2502_300fling)saved 997 bytes a9567f1978518bb8f5919cbea59e2328a76880d3
info: [iframe] br.fling.com/projectm/banner.htm?server=fe&bannerZoneid=1109&template=300x220_sixsigma4&size=300x250&thumbZoneid=456&bannerid=13315&target=_blank&prod=90&type=static&rating=r&debug=0&cmp=300x2502_300fling
info: [img] fe.brandreachsys.com/www/delivery/lg.php?bannerid=13315&campaignid=2469&zoneid=1109&loc=http%3A%2F%2Fseekbang.com%2Fcs%2Fads%2F300x250%2F300fling.php%3Fkwd%3D300x2502_300fling&cb=429f056d2d
info: [0] no JavaScript
file: a9567f1978518bb8f5919cbea59e2328a76880d3: 997 bytes
Decoded Filesa956/7f1978518bb8f5919cbea59e2328a76880d3 from fe.brandreachsys.com/www/delivery/afr.php?zoneid=1109&cmp=300x2502_300fling (997 bytes)
download
motherless.com/scripts/swfobject.js benign[nothing detected] (script) motherless.com/scripts/swfobject.js
status: (referer=motherless.com/ABF9781)saved 6880 bytes 46188f21bc027c8ac04354ec2685bc5b9fb5e725
info: [embed] motherless.com/scripts/
info: [decodingLevel=0] found JavaScript
file: 46188f21bc027c8ac04354ec2685bc5b9fb5e725: 6880 bytes
Decoded Files4618/8f21bc027c8ac04354ec2685bc5b9fb5e725 from motherless.com/scripts/swfobject.js (6880 bytes)
download
motherless.com/scripts/jquery.hotkeys.js benign[nothing detected] (script) motherless.com/scripts/jquery.hotkeys.js
status: (referer=motherless.com/)saved 2326 bytes 731037e94458be9698570c73e0dc5a43c93c0a6a
info: [decodingLevel=0] found JavaScript
error: undefined variable jQuery
error: undefined variable jQuery.fn
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var jQuery.fn = 1;
error: line:1: ....^
file: 731037e94458be9698570c73e0dc5a43c93c0a6a: 2326 bytes
Decoded Files7310/37e94458be9698570c73e0dc5a43c93c0a6a from motherless.com/scripts/jquery.hotkeys.js (2326 bytes, 222 hidden)
download
www.seekbang.com/cs/mediaman/demo/tpl/js/jquery.min.js benign[nothing detected] (script) www.seekbang.com/cs/mediaman/demo/tpl/js/jquery.min.js
status: (referer=www.seekbang.com/cs/mediaman/demo/tpl/300x250_7sec2.php?kwd=300x2502_7sec2)saved 57272 bytes fd09a826a62fc6f5809d0a67bf0f80b3b76ca894
info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
info: [decodingLevel=0] found JavaScript
error: undefined function T.insertBefore
error: undefined variable T
info: [1] no JavaScript
file: fd09a826a62fc6f5809d0a67bf0f80b3b76ca894: 57272 bytes
file: cd94dfeccbadf0ad8852122817b2c802b8472294: 63 bytes
Decoded Filesfd09/a826a62fc6f5809d0a67bf0f80b3b76ca894 from www.seekbang.com/cs/mediaman/demo/tpl/js/jquery.min.js (57272 bytes, 18 hidden)
downloadcd94/dfeccbadf0ad8852122817b2c802b8472294 from www.seekbang.com/cs/mediaman/demo/tpl/js/jquery.min.js (63 bytes)
download