JS warning by firefox for sbc/yahoo pg source

**quicksandy** · 10-09-2004, 09:49 AM

I have recieved multiple warnings from my browser for a javascript threat.
I have a stand-alone notebook Model: Uniwill, Processor: Pentium 4 2666MHz, Memory: 504Mb DIMMO: 512 Mb, Disk: 38.1 Gb, OS: Windows XP Home Edition, Service Pack2.

One of the warnings was as follows:
Source of: http://dsl.sbc.yahoo.com/ - Mozilla firefox

JavaScript Console: Warnings: Non standard document.all property was used.Use w3C standard document. get eleemntbyId()instead.

This is the line (now wrapped) that the warning was about:

function yg_Browser(){var nav=navigator; this.agt=nav.userAgent.toLowerCase(); this.major = parseInt(nav.appVersion); this.ns=(d.layers); this.dom=(d.getElementById)?1:0; this.ns4up=(this.ns && this.major >=4); this.ns6=(this.agt.indexOf("Netscape6")!=-1); this.op=(window.opera? 1:0); this.ie=(d.all); this.ie4up=(this.ie && this.major >= 4); this.ie5=(d.all&&this.dom); this.gk=(typeof(nav.product)!="undefine"&&nav.product)?1:0; this.fb=(this.agt.indexOf("firebird")!=-1); this.fx=(this.agt.indexOf("firefox")!=-1); this.sf=(this.agt.indexOf("safari")!=-1); this.win=((this.agt.indexOf("win")!=-1) || (this.agt.indexOf("16bit")!=-1)); this.mac=(this.agt.indexOf("mac")!=-1); }

this was another line being warned about (line #5):

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html><head>


<style type="text/css">

This was a third warning:

Warning: Non-standard document.allproperty was used. Use W3C standard document. getElementById()instead.
Source File: http://dsl.sbc.yahoo.com/lib/csp/

Source of: http://dsl.sbc.yahoo.com/lib/csp/addevt.html-Mozilla Firefox

line 23

<html>
<head>
<title>Yahoo! Calendar</title>
<style>
html, body, td, a, input, select, p { font-family: verdana, arial, san-serif; font-size:11px }
body { background:#f5ffa5; margin:0px; }
form { margin:0px; }
a, a:hover, a:visited { color:#247cd4; text-decoration:none; }
a:hover { text-decoration:underline; }
a:active { color:#0050a1; }
#msgEmail { margin:120px auto auto 0; text-align:center; }
/* forms */
table { width:33px; }
form { margin:0px }
textarea, select, input.text, { color:#4d4d4d; font-family:courier new;}
input.text { height:18px; width:220px; }
input.button { background:#e0e1e5 url("http://us.i1.yimg.com/us.yimg.com/i/us/plus/el/btbg.gif"); border:1px solid #565656; border-bottom-width:2px; padding:0.2em 0.3em 0.1em; cursor:hand; font-weight:bold; font-size:9px;}
</style>
<script>
function ylib_Browser() {

and last but not least:

Source of: http://dsl.sbc.yahoo.com/lib/csp/email.html- Mozilla Firefox

<html>
<head>
<title>Yahoo! Mail</title>
<style>
html, body, td, a, input, select, p { font-family: verdana, arial, san-serif; font-size:11px }
body { background:#f5ffa5; margin:0px; }
.alt, .altsm { color: #7b7f80 }
a { color:#247cd4; text-decoration:none; }
a:hover { color: #247cd4; text-decoration:underline; }
a:active { color:#0050a1; }
a:visited { color:#247cd4; }
#msgEmail { margin:120px auto auto 0; text-align:center; }
#msgEvt { margin:46px auto auto 0; text-align:center; }
/* forms */
table { width:33px; }
form { margin:0px }
textarea, select, input.text, input.pop, textarea.mailBody { color:#4d4d4d; font-family:courier new;}
input.text { height:18px; width:220px; }
input.pop { height:18px; width:220px; }
.mailbody { width:270px; height:200px;}
input.button { background:#e0e1e5 url("http://us.i1.yimg.com/us.yimg.com/i/us/plus/el/btbg.gif"); border:1px solid #565656; border-bottom-width:2px; padding:0.2em 0.3em 0.1em; cursor:hand; font-weight:bold; font-size:9px;}
</style>

<script>
function ylib_Browser() {
d=document;
this.agt=navigator.userAgent.toLowerCase();
this.ie=(d.all); -----------------------------------this is the line
this.mac=(this.agt.indexOf("mac")!=-1);

There were warnings for addevt, email and sbc /yahoo. I did not make use of the java console before, because I did not understand the importance or use of it. I now have a vague clue, however, I don't know what to do with the information, or if I need to correct something. I had been online to print out something as a favor, when it was completed, I had a large amount of information transferred from Edge4you.com (pretty sure- but might be Edge4U. I don't find any documentation to say where( or if) the information went to. Please inform me of any other information you may need. Thank you in advance.
Quicksandy

**redwench** · 10-09-2004, 02:17 PM

close the java console and never open it again.

if you need to find where a download went, and its not your normal location, look for files that were created/modified on that day. although firefox usually drops stuff on your desktop.

**quicksandy** · 10-09-2004, 07:16 PM

Thank you for the quick response, Redwench. The download was just an addition as to the circumstances at that point in time. It was not being downloaded by Foxfire by my request, it came unsolicited. Anything that starts transferring information unsolicited is suspect. It had just stopped everything midstream and transferred a large amount of information. If Foxfire did it I would have found it and scrutinized it. The question was : are the warnings something to take notice of, or are they just "babble"? I know that java script can be used to hack a browser or computer. That is my concern. I do not mean to be disrespectful, but if I just closed up anything that I a question about, I would never learn a thing. I would still be totally computer illiterate. I feel the only way to have contact with the Internet is to be well informed and well equipped. If any program that is supposed to be watching for problems on my behalf sends me a warning, I take heed. If I don't know what the procedure is, I go and learn. I really would appreciate any insight into why that particular script was questioned. I have had far too many attempts and achievals to hijack and steal from me in the computing world to make me adament and persistant. I have learned much in the four years that I have been tracking down (and managing to find and have thrown off the air), one of the porn sites they had with my name and business name on. So please excuse my exhuberance on the subject.

Respectfully,

Quicksandy

**redwench** · 10-10-2004, 07:20 AM

ok, let me rephrase. until you learn java, close the console. its meaningless otherwise. the java console does not provide security warnings.

Quote:

It had just stopped everything midstream and transferred a large amount of information. If Foxfire did it I would have found it and scrutinized it.

see, since it wasnt firefox [as far as you know], you should have engaged the lock on your firewall and found it then and there. as it is, you now get to search for files created/modified on that date and see what it exactly was. it most likely was firefox, and as dsl providers dont have malicious code on their sites, you probably have nothing to get excited about. but since you didnt check it out at the time, now you have to spend quite a lot of time finding out just what it is.

**quicksandy** · 10-10-2004, 08:04 AM

Thank you! You have no idea how much I appreciate an informative answer. In hopefully a short explanation on my behalf, I was introduced to computing in 1991 when the net as we know it was still in infancy, mostly bulletin boards and institutes and of course the government. I then had a long time in between before I had access to a computer. Then someone put one together for me and I became hooked. The problem was that apparently this person didn't want me to be in control of my machine since it was being shared by that peson, so I didn't learn any of the important features because they were never available to me. Since I bought this laptop, I have found a world of programs, etc. that have made thingss so much easier. However, I have had to learn them all the hard way. So, here I am. Trying to avert another ficticious disaster. I'm still trying to learn what is and is not a problem.
I do not know what you mean by locking the browser. How could I do it that quickly? The transmission had locked everything.....I couldn't get anything to respond until after it was done.

quicksandy

**redwench** · 10-10-2004, 10:55 AM

well, if its locked up, its locked up. but your firewall should be able to stop all data flow with a couple clicks, if you can access it of course.

» Forum Navigation

» Advertisement

Similar Threads