Can anyone tell me what this is?

Plant, Dean dean.plant at roke.co.uk
Fri Dec 1 12:01:30 GMT 2006


We have some messages from a customer that are being disarmed due to a
whole load of scripting in the message. I know I can turn disarming off
but I would like to know what this code is and what it is doing, has
anyone come across code like this before?

Sample data from the message source below. The whole source is here
http://deanplant.bulldoghome.com/pages/deanplant%5Fbulldoghome%5Fcom/mai
l.txt

Thanks

Dean

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML dir=ltr><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<SCRIPT language=javascript id=dstimeout
src="/dana-cached/js/sessiontimeout.js"></SCRIPT>

<SCRIPT language=javascript id=dsshimdata> var DanaShimData="var
DSJsFuncs =
[null,null,[{nm:\"dJ\",flg:0x37},{nm:\"go\",flg:0xf},],null,[{nm:\"eval\
",flg:0x57},{nm:\"item\"
,flg:0xf},{nm:\"send\",lcnm:\"send\",flg:0xb},{nm:\"href\",flg:0xf},{nm:
\"save\",lcnm:\"save\",flg:0xb},{nm:\"open\",lcnm:\"open\",flg:0x3b},{nm
:\"load\",lcnm:\"load\",flg:0
x3b},],[{nm:\"write\",flg:0x3f},{nm:\"close\",flg:0x3f},{nm:\"Print\",fl
g:0xf},{nm:\"Start\",lcnm:\"start\",flg:0xb},],[{nm:\"Upload\",flg:0xf},
{nm:\"assign\",flg:0xf},{nm:\
"frames\",flg:0xf},{nm:\"getURL\",lcnm:\"geturl\",flg:0x12},{nm:\"reload
\",lcnm:\"reload\",flg:0x3b},],[{nm:\"writeln\",flg:0x3f},{nm:\"GotoURL\
",flg:0xe},{nm:\"AddRoot\",lc
nm:\"addroot\",flg:0xb},{nm:\"Refresh\",lcnm:\"refresh\",flg:0xb},{nm:\"
LoadURL\",lcnm:\"loadurl\",flg:0xb},{nm:\"Install\",flg:0xf},{nm:\"postU
RL\",lcnm:\"posturl\",flg:0x1
2},{nm:\"replace\",flg:0x12f},],[{nm:\"Download\",lcnm:\"download\",flg:
0xb},{nm:\"toString\",flg:0xe},{nm:\"InitPath\",flg:0xe},{nm:\"navigate\
",lcnm:\"navigate\",flg:0x1b}
,{nm:\"addParam\",lcnm:\"addparam\",flg:0xb},{nm:\"SetParam\",flg:0xd},{
nm:\"LaunchPT\",lcnm:\"launchpt\",flg:0xb},{nm:\"showHelp\",flg:0xf},],[
{nm:\"selectrow\",flg:0x16},{
nm:\"Navigate2\",flg:0xe},{nm:\"LaunchOIS\",flg:0xd},],[{nm:\"Initialize
\",lcnm:\"initialize\",flg:0xb},{nm:\"OpenAtPage\",flg:0xf},{nm:\"SetEnv
Info\",flg:0xf},{nm:\"setTime
out\",flg:0xc1f},{nm:\"childNodes\",flg:0x2f},{nm:\"SetGSPSURL\",lcnm:\"
setgspsurl\",flg:0xb},{nm:\"SetDataURL\",lcnm:\"setdataurl\",flg:0xb},{n
m:\"DownloadEx\",flg:0xe},],[
{nm:\"setInterval\",flg:0x881f},{nm:\"appendChild\",flg:0xf},{nm:\"execC
ommand\",flg:0xe},{nm:\"createPopup\",flg:0xf},{nm:\"StartUpLoad\",flg:0
xf},{nm:\"addBehavior\",flg:0
x1f},{nm:\"OpenSession\",flg:0xf},],[{nm:\"setAttribute\",flg:0x3f},{nm:
\"InitLanguage\",flg:0xe},{nm:\"EditDocument\",flg:0xf},{nm:\"RetrieveDa
ta\",flg:0xf},{nm:\"StartUpLo
ad2\",flg:0xf},{nm:\"CreateObject\",lcnm:\"createobject\",flg:0xb},{nm:\
"startRequest\",flg:0xf},{nm:\"ViewDocument\",flg:0xf},{nm:\"addHierarch
y\",flg:0xf},{nm:\"ModifyProc
21\",flg:0xf},],[{nm:\"DispDocItemEx\",flg:0x16},{nm:\"navigateFrame\",f
lg:0xf},{nm:\"createElement\",flg:0x2f},{nm:\"startDownload\",lcnm:\"sta
rtdownload\",flg:0xb},{nm:\"V
iewDocument2\",flg:0xf},{nm:\"openNewWindow\",flg:0x17},{nm:\"replaceEnt
ity\",flg:0x16},{nm:\"SubmitChanges\",lcnm:\"submitchanges\",flg:0xb},{n
m:\"EditDocument2\",flg:0xf},
],[{nm:\"DownloadAttach\",flg:0xe},{nm:\"SetURLHeadInfo\",flg:0xf},{nm:\
"ProcessRPCInfo\",flg:0xe},],[{nm:\"SetURLHeadInfo2\",flg:0xf},{nm:\"Ope
nPopupWindow\",flg:0xe},{nm:\
"addInternalItem\",flg:0xe},{nm:\"showModalDialog\",flg:0x1081f},],[{nm:
\"createStyleSheet\",flg:0xf},{nm:\"AppendToStrCache\",flg:0xe},],[{nm:\
"SetAttachFileInfo\",flg:0xf}
,{nm:\"getResponseHeader\",lcnm:\"getresponseheader\",flg:0xb},{nm:\"Cre
ateNewDocument\",flg:0xf},],[{nm:\"SetAttachFileInfo2\",flg:0xf},{nm:\"S
etAttachFileInfo3\",flg:0xf},
{nm:\"CreateNewDocument2\",flg:0xf},{nm:\"createContextualFragment\",flg
:0xe},{nm:\"SetReportDataDirect\",flg:0xf},{nm:\"insertAdjacentHTML\",fl
g:0xf},{nm:\"showModelessDial
og\",flg:0x1f},{nm:\"FlushBasicCredentials\",flg:0xf},],];var DSJsProps
=
[null,null,null,[{nm:\"SRC\",flg:0x301e},{nm:\"URL\",flg:0x301f},{nm:\"s
rc\",flg:0x301f},],[{nm:\"h
ref\",flg:0x301f},{nm:\"port\",flg:0x301f},{nm:\"host\",flg:0x201f},],nu
ll,[{nm:\"WebURL\",flg:0x300f},{nm:\"domain\",flg:0x301f},{nm:\"action\"
,flg:0x301f},{nm:\"frames\",f
lg:0x200f},{nm:\"length\",flg:0x200f},{nm:\"DSHost\",flg:0x100f},{nm:\"s
earch\",flg:0x201f},{nm:\"cookie\",flg:0x301f},{nm:\"filter\",flg:0x301f
},],[{nm:\"DataURL\",lcnm:\"d
ataurl\",flg:0x100b},{nm:\"BaseURL\",flg:0x100e},{nm:\"BaseUrl\",flg:0x1
00e},],[{nm:\"pathname\",flg:0x301f},{nm:\"referrer\",flg:0x200f},{nm:\"
DataPath\",flg:0x100f},{nm:\"
protocol\",flg:0x200f},{nm:\"codeBase\",flg:0x100e},{nm:\"location\",flg
:0x701f},{nm:\"hostname\",flg:0x200f},],[{nm:\"innerHTML\",flg:0x101f},{
nm:\"ReportURL\",flg:0x100f},
{nm:\"IsapiName\",flg:0x100f},{nm:\"outerHTML\",flg:0x101f},],[{nm:\"has
doctype\",flg:0x201f},{nm:\"childNodes\",flg:0x201f},{nm:\"background\",
flg:0x301f},{nm:\"firstChild\
",flg:0x201f},{nm:\"designMode\",flg:0x100e},],[{nm:\"AnnDataPath\",flg:
0x100f},],[{nm:\"documentHTML\",lcnm:\"documenthtml\",flg:0x100b},{nm:\"
ReportSource\",flg:0x100f},],
null,[{nm:\"BitmapDataPath\",flg:0x100f},],[{nm:\"backgroundImage\",flg:
0x300f},],null,null,null,];";
eval(DanaShimData);
var DanaActiveXParamsData="var DanaActiveXParams = [[
'5220CB21-C88D-11CF-B347-00AA00A28331',   [       ['LPKPath', 1]   ]],[
'3BFFE033-BF43-11D5-A271-00A024A51325',   [       ['General_ServerName',
2],      ['General_URL', 1]   ]],[
'5BDBA960-6534-11D3-97C7-00500422B550',   [   ['FullUrl', 1]   ]],[
'00120000-B1BA-11CE-ABC6-F5B2E79D9E3F',   [       ['BitmapDataPath', 1]
]],[ '00130000-B1BA-11CE-ABC6-F5B2E79D9E3F',   [
['BitmapDataPath', 1]   ]],[ '05D96F71-87C6-11D3-9BE4-00902742D6E0',   [
['General_Ser
verName', 2],   ['General_URL', 1]   ]],[
'D27CDB6E-AE6D-11CF-96B8-444553540000',   [   ['Movie', 1],   ['Src', 1]
]],[ '1E2941E3-8E63-11D4-9D5A-00902742D6E0',   [   ['Gen
eral_ServerName', 2],   ['General_URL', 1]   ]],[
'ADB880A6-D8FF-11CF-9377-00AA003B7A11',   [   ['Item1', 1]   ]],[
'E008A543-CEFB-4559-912F-C27C2B89F13B',   [         ['Gen
eral_ServerName', 2],   ['General_URL', 1]   ]],];var DanaJVMClassIds =
['CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA','CAFEEFAC-0014-0001-0000-ABCDEFF
EDCBA','CAFEEFAC-0012-0002-00
00-ABCDEFFEDCBA','CAFEEFAC-0012-0003-0000-ABCDEFFEDCBA','CAFEEFAC-0014-0
002-0000-ABCDEFFEDCBA','8AD9C840-044E-11D1-B3E9-00805F499D93','CAFEEFAC-
0012-0000-0000-ABCDEFFEDCBA',
'CAFEEFAC-0013-0000-0000-ABCDEFFEDCBA',];";


More information about the MailScanner mailing list