qwert9999
join:2001-06-27
Port Richey, FL
| website opened up notpad as the site was loading.
i was looking for info on the game team fortress 2 and clicked a link to a site. as the page loaded it opened up notepad and had redirect ....ect over and and over. i've never seen anything like that before.
how could a site do that? should i be worried about it? |
|
Blackbird
Built for Speed
Premium
join:2005-01-14
Fort Wayne, IN
 ·Verizon Online DSL
| What a site can do with your computer depends on a lot of things: on your type of browser, whether you have browser scriptings enabled (ActiveX, Javascript, or Java), whether your computer software is fully patched, and so on. Can you provide more information about the details of your system, browser used, patching status, etc.? Also, can you provide more information about the site you visited? (Be sure to obfuscate any link, if you include one. For example: change the intitial URL symbols to hxxp://... or ht tp://... or something similar, so that other readers aren't accidentally taken to a harmful site by clicking on a working link.)
--
If God wanted us to work with electrons, He'd make them big enough to see... |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
edit:
May 4th, @03:20AM
| reply to qwert9999
I am assuming when you say "looking for info" you mean you were using a search engine like google, etc. is that correct ? I think you ran into a link picked up by a search engine that you did not present as a client the proper credential to access the page or site..or else it had been moved..it might have even been a FTP server.
see this link first for possible explanation..
»www.mail-archive.com/hlds_linux@···095.html
redirect webpages
»https://answers.google.com/answers/threa···d=282772
»www.stevenhargrove.com/redirect-web-pages/
»forums.microsoft.com/TechNet/Sho···iteID=17
»support.citrix.com/article/CTX113879
team fortress 2 redirect
»www.google.com/search?hl=en&q=te···G=Search
--
Gladiator Security Forum »www.gladiator-antivirus.com/
*
A fun/friendly/informative forum for the mature elder crowd
»www.theover50goldengroup.net
|
|
qwert9999
join:2001-06-27
Port Richey, FL
| reply to qwert9999
site was hxxp://blog.wired.com/games/2008/05/play-team-fortr.html
xp clean install 4 days ago with all the updates. agv 7.5 up to date. i have ActiveX, Javascript, or Java enabled in the IE6 AKA- install settings. i installed sun java.
but i run proxomitron that blocks ActiveX, Javascript, and Java
top of notepad says button[1].css |
|
CajunTek
Insane Cajun
Premium,MVM
join:2003-08-08
Arlington, TX | Did not do that here.. I checked the link in IE 7...
--
da Cajun Darn I hate Malware |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
edit:
May 4th, @01:21PM
| reply to qwert9999
No problem here either for me.
»blog.wired.com/games/2008/05/pla···rtr.html
the only script with button is the following
ht tp://reddit.com/button.js?t=1&width=120&height=20">
obj.attachButton(el);
{button:false, onclick:myCustomCallback, offsetLeft: -el.scrollWidth}
Create a sharelet with no button and a myCustomCallback onclick handler
Locate the span element and attach the ShareThis button |
|
qwert9999
join:2001-06-27
Port Richey, FL
| reply to qwert9999
i couldn't post what was in notepad. so i took a screen shot of it. i also opened word pad and pasted it there so you could see more of it. around 60 lines of script |
|
seqrets
Premium
join:2001-05-03
Nederland, TX
clubs:
 ·RoadRunner Cable
| reply to qwert9999
Where did you get the link from? Was it from a link on another site, search engine, advert, warez, etc.?
Using Opera, I clicked on the link not long after you posted and like everyone else, nothing special happened.
I'm really curious as to whether or not IE could be used to call up notepad to launch a redirect via explorer? |
|
foxsteve
Premium
join:2001-12-28
Campbell, CA
| reply to qwert9999
May be it helps
1. That page contains 25 JavaScript scripts.
2. That page does not contain link to button.css file
3. That page contains link to button.js file
|
|
qwert9999
join:2001-06-27
Port Richey, FL
| reply to seqrets
said by seqrets  :Where did you get the link from? Was it from a link on another site, search engine, advert, warez, etc.? I'm really curious as to whether or not IE could be used to call up notepad to launch a redirect via explorer? i clicked on it from google the first time. but i also get it when i click the link in this post. also if i copy and paste the link in IE i still get the notepad pop up. it is my notepad because it shows up in windows task manager under processes.
this is the only site i've ever seen this happen. |
|
mysec
Premium
join:2005-11-29
edit:
May 8th, @05:36PM
| reply to qwert9999
Setting my firewall to alert for IE outbound, I stepped through the caching of files and found that the button.js file had the same cache name as shown in the code:
______________________________________________________________
The convoluted code in button.js (see code in foxsteve's post) caches this
with the cache name as button.css
______________________________________________________________
and indeed there they are:
______________________________________________________________
I'll leave it for someone else to explain this.
Meanwhile, I didn't see notepad open, and if you can set your firewall to alert and step through the process, you might see at what point notepad opens and what URL loaded just preceding it.
EDIT: what application is associated with .css on your computer?
|
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
edit:
May 8th, @06:58PM
| Exactly..that is why I stopped posting in this thread after this post on the info about the button 
»Re: website opened up notpad as the site was loading.
all one really has to do is open IE to the site..then go to view..and then source..and you can see what script is there..then when it show it all in the notepad..just search for the term button. There is nothing wrong with that site.. |
|
qwert9999
join:2001-06-27
Port Richey, FL | reply to qwert9999
thanks for the info. both my computer are set to open .css with notepad. i did a google search and didn't find what program it should have open it.
anyone know what program should open it? IE? |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
edit:
May 9th, @10:39PM
| Opps..mine also opens with notepad..but I do not have any problem displaying that page in IE and no notepad opens. |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| reply to qwert9999
Proxomitron Software
Proxomitron is a very powerful and flexible program for changing the way that web pages appear on your computer. It has a number of optional preset "filters" and advanced users can program others. The original author, Scott Lemmon, has now moved on so the program is being supported by other people.
The latest version is available as freeware from the new web site:
»www.proxomitron.info
(Note. This is a "dot info" not a "dot com").
When Proxomitron is running on your PC it works by intercepting all incoming web pages and changing them before passing the changed pages on to your web browser. It can also intercept all outgoing messages from your web browser such as those which call for pop-up windows, images or adverts.
Thus Proxomitron can be programmed to intercept and change almost any aspect of the web pages, from simple colours and fonts to advanced structural features such as style sheets, frames and tables.
Usually, Proxomitron must be disabled before you view some web sites, especially on-line Banks and other e-commerce sites.
Proxomitron is very impressive and flexible. However the "user style sheet" facility in MS Internet Explorer is an alternative way of obtaining some of the benefits. Although a "user style sheet" is much less powerful than Promoxitron, it does not require you to load a new program onto the PC because a style sheet is just a text file. This is very useful for example when you are using a office computer and are not allowed to load any programs.
»www.curlewcommunications.co.uk/c-proxom.html
See: User Style Sheet Tutorial.
»www.curlewcommunications.co.uk/c-style.html
--
Gladiator Security Forum »www.gladiator-antivirus.com/
*
A fun/friendly/informative forum for the mature elder crowd
»www.theover50goldengroup.net
|
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
edit:
May 9th, @11:09PM
| reply to qwert9999
Maybe you have script debugger turned on in IE under advanced.
»www.thetechherald.com/article.ph···Websites
The IE Developer Toolbar provides many useful features, however, it does not have JavaScript debugging capabilities. This can be somewhat overcome using an external debugger (e.g. Microsoft Script Editor), which needs to be enabled from IE’s Advanced Options (uncheck ‘Disable Script Debugging (Other)’). Of course, it isn’t really a toolbar either – although it does add a button to your toolbar – but that is just semantics.
»www.thetechherald.com/article.ph···s?page=2 |
|
mysec
Premium
join:2005-11-29
| reply to qwert9999
said by qwert9999 :thanks for the info. both my computer are set to open .css with notepad. i did a google search and didn't find what program it should have open it. anyone know what program should open it? IE?
Both .css and .js files are interpreted by the browser as they cache. That is, the browser runs the Style Sheet script (.css) and Javascript commands (.js) unless the user configures the browser otherwise.
But the Windows File Association tells which program to open the file from within Windows -- double-clicking on the file, for example, or perhaps the debug command that Name Game refers to. In other words, something has to give a command to Windows: Open that .css file, at which time the default application will open it.
On my WinXP the default Windows application for .css is Notepad. Of course, the user can assign any application. On my Win2k system I use a Wordpad substitute for opening/analyzing such files.
|
|
