Security

Ask something
Discussion Locked

What is this?

0 helpful
6 replies

by bleever

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

recieved a blank email this am.
c/o scource revealed an source=http://us.js1.yimg.com/us.yimg.com/lib/pim/j3/pim.js
cutting n pasting that link into netscape produced a long long script, not sure what language, suspect python.
my question is what the heck is it and what's it trying to do?

thanks.

b;)

6 replies

by dmiles

The possibility that you have a virus script,that has infected your machine or spyware,run the anti-virus software on your machine
It is trying to direct you to a page that once opened will infect the system or add spyware sites

by bleever

not much help, without more information. how does it redirect my computer to another page? which other page? implications are
pretty bad if hackers have taken over a pacbell server, which is what a ping of

by joseph moore

It's a Java script file. It is doing things for a website. Making .CSS files, making drop down menus, making buttons.
Now, the domain that this came from, YIMG.COM is owned by Yahoo!
And a portion of that URL you posted, US.YIMG.COM is a redirect page that takes you back to WWW.YAHOO.COM

So, this Javascript file you were e-mailed is probably for the Yahoo web site. Why it was spammed to you, I have no idea. But this script is not dangerous, IMO.

by bleever

hi
thank you both for answering. I have the script, and it does redirect the keyboard [thanks for the info that it is a yahoo squid server] - I'd be interested to know why Dmiles thinks it's a malicious script.

It doesn't seem to work if your using netscape 7, altho there's a note in it that says code was added to make it work in netscape.

Do you think a hacker had taken over the yahoo squid server and is using it to recruit zombies?

thanks

b;)

This discussion is closed to new replies.