JS tracking

[lnminente]

Here is a JavaScript file (.js) to track us (downloaded from www.terra.es ).
I send it here for the people who wants to play with it to make a proper filter.

var j41 = "adserver.terra.es";rm1 = false , rm2 =false, rm3 =false;function R22(){if(document.all && s11.indexOf("win")!=-1){}else{if( navigator.mimeTypes &&navigator.mimeTypes['audio/x-pn-realaudio-plugin'] &&navigator.mimeTypes['audio/x-pn-realaudio-plugin'].enabledPlugin){if (navigator.plugins != null && navigator.plugins.length > 0){var x32 = navigator.plugins['RealPlayer'];if (typeof x32 == 'object'){rm1 = true;}}}}if(rm1 || rm2 || rm3)return "RV6";else{return "RV0";}}var mp7 = false;var mp6 = false;function S22(){if(document.all && s11.indexOf("win")!=-1){document.write('<SCR'+'IPT LANGUAGE=VBScript>
');document.write('on error resume next
');document.write('mp7 = IsObject(CreateObject("WMPlayer.OCX"))
');document.write('on error resume next
');document.write('mp6 = IsObject(CreateObject("MediaPlayer.MediaPlayer.1"))
');document.write('</SCR'+'IPT>');}else{if( navigator.mimeTypes &&navigator.mimeTypes["application/x-mplayer2"] &&navigator.mimeTypes["application/x-mplayer2"].enabledPlugin){if (navigator.plugins != null && navigator.plugins.length > 0){var U42 = navigator.plugins['Windows Media Player'];if (typeof U42 == 'object'){mp6 = true;}}}}if(mp7)return "WM7";else if(mp6)return "WM6";else{return "WM0";}}function bandGetCookie(){L41 = "cm8Band=";if (document.cookie.length > 0){I21 = document.cookie.indexOf(L41);if (I21 != -1){I21 += L41.length;k31 = document.cookie.indexOf(";", I21);if (k31 == -1)k31 = document.cookie.length;return unescape(document.cookie.substring(I21, k31));}}return "0:0";}function h61(value){document.cookie = "cm8Band=" + escape(value)+"; expires=Thu, 8 Oct 2201 15:59:28 UTC ;path=/";}function checkBand( L21, w31){J61 = new Date().getTime();B41 = J61 - L21;if ( isNaN(w31.fileSize) )return;if ( ( B41 >= (w31.fileSize / 20) ) && ( (c71 = w31.fileSize) > 10240) ){e11 = bandGetCookie();f31 = e11.split(":");if ( f31.length == 2 ){t31= parseInt(f31[0]);P21 = parseInt(f31[1]);h31 = (c71*1024*/B41;h31 = ( t31 * P21 + h31 ) / ( t31 + 1 );h61( (t31 + 1 ) + ":" +Math.round(h31));}}}function P22(){if ( F21 && S11 >= 4 && s11.indexOf("win")!=-1){return "DX6";}return "DX0";}function Y61(){var e11="OS=";if ( s11.indexOf("win")!=-1 ){if ( s11.indexOf("winnt")!=-1 || s11.indexOf("windows nt")!=-1 ){e11+="WINNT";}else{e11+="WIN9";}}else if(s11.indexOf("mac")!=-1){e11+="MAC";}else{e11+="OTHER";}return e11;}function X61(){var e11="FL";if ( f6 ){return e11+="6";}if ( f5 ){return e11+="5";}if ( f4 ){return e11+="4";}if ( f3 ){return e11+="3";}return e11+="0";}function T61(){var e11="BAND=";d41=bandGetCookie().split(":");if ( d41.length == 2 ){P21 = parseInt(d41[1]);if ( Math.round(P21/1024/8) > 10 ){return e11+="HIGH";x52(P21)}}return e11+="LOW";}function U61(){var e11="BROWSER=";if ( p31 ){if (S11 == 4) {return e11+="NN4";}if (S11 == 6) {return e11+="NN6";}}else if ( F21 ){if ( S11 == 4){return e11+="IE4";}if ( S11 == 5 ){e11+="IE5";if (N11 >= 5.5)e11+=".5";return e11;}if ( S11 == 6){return e11+="IE6";}}return e11+="OTHER";}function l51(){var e11 = "WIDTH=";if (F21){if(window.parent && window.parent.frames &&window.parent.frames.length >= 2 &&typeof(window.parent.document) != 'unknown'){return e11+window.parent.document.body.clientWidth;}return e11+document.body.clientWidth;}else if(p31)return e11+window.innerWidth;else{return e11+1024;}}function k51(){e11 = "HEIGHT=";if (F21){if(window.parent && window.parent.frames &&window.parent.frames.length >= 2 &&typeof(window.parent.document) != 'unknown'){return e11+window.parent.document.body.clientHeight;}return e11+document.body.clientHeight;}else if(p31)return e11+window.innerHeight;else{return e11+768;}}function T81(){e11 = "FONTSIZE=";if(F21 && s11.indexOf("win")!=-1){document.write('<span style="position:absolute; visibility:hidden;" id="u22">_</span>');return e11+document.all.u22.offsetWidth;}else{return e11+10;}}function n51(){var e11 = "URL=";var D21 = document.domain;if((d21 = D21.indexOf(":")) != -1)D21 = D21.substring(0 , d21);if (typeof(cm8cat) != 'undefined' )return e11+D21+"@"+cm8cat;else{return e11+window.location;}}function v41(){e11 = "PREVIEW=0";return e11;}function m51(){return "SERVICEHOST=" + j41;}var s11=navigator.userAgent.toLowerCase();e11 = '(IsObject(CreateObject("ShockwaveFlash.ShockwaveFlash.';v21 = '")))
';var f6,f5,f4,f3;f6=f5=f4=f3=false;if ( document.all && s11.indexOf("win")!=-1){document.write('<SCR'+'IPT LANGUAGE=VBScript>
');document.write('on error resume next
');document.write('f3='+e11+3+v21);document.write('f4= '+e11+4+v21);document.write('f5= '+e11+5+v21);document.write('f6= '+e11+6+v21);document.write('</SCR'+'IPT>');}else if ( navigator.mimeTypes &&navigator.mimeTypes["application/x-shockwave-flash"] &&navigator.mimeTypes["application/x-shockwave-flash"].enabledPlugin){if (navigator.plugins != null && navigator.plugins.length > 0){var r41 = navigator.plugins['Shockwave Flash'];if (typeof r41 == 'object'){f6 = r41.description.indexOf('6.') != -1;f5 = r41.description.indexOf('5.') != -1;f4 = r41.description.indexOf('4.') != -1;f3 = r41.description.indexOf('3.') != -1;}}}var w11 = "";var K11 = navigator.appVersion.toLowerCase();var N11 = parseFloat(K11);var S11 = parseInt(N11);D41 = s11.indexOf('netscape6');if (D41 !=-1){N11 = parseFloat(s11.substring(D41+10));S11 = parseInt(N11);}Z11 = K11.indexOf('msie');F21 = (Z11!=-1);if (Z11 !=-1){N11 = parseFloat(K11.substring(Z11+5,K11.indexOf(';',Z11)));S11 = parseInt(N11);}p31 = ((s11.indexOf('mozilla')!=-1) && (s11.indexOf('spoofer')==-1)&& (s11.indexOf('compatible') == -1) && (s11.indexOf('opera')==-1)&& (s11.indexOf('webtv')==-1));var checkm8InventoryStr = "";w11 = "<scr"+"ipt src='http://"+j41+"/checkm8scripts/checkm8_page.jsp?";M21 =Y61() + "&" + U61() + "&" + T61() + "&PLUGINS=" + X61() + ":" + P22() + ":" + R22() + ":" + S22() + ":";w11 += M21;checkm8InventoryStr += M21;M21 = "&" + l51() + "&" + k51() + "&" + T81() + "&" + n51() ;w11 += M21;checkm8InventoryStr += M21;w11 += "&" + m51() + "&" + "ORD=" +(new Date().getTime()) + "&" + v41();w11 += "'></scr"+"ipt>";document.write(w11);



Edited by - lnminente on 07 Aug 2002  01:07:20

[lnminente]

One early filter:

Name = "JS Nuker - JS"
Active = TRUE
URL = "$TYPE(js)"
Limit = 8000
Match = "*($LST(JSTriggers))1*"
Replace = "[JS Nuked: 1]"



 

[Arne]

Here this is taken care of by the filter DOM Banner Blaster v0.006.

And it would be killed in the next step anyway because of the server name adserver.terra.es

Best wishes
Arne
Imici username= Arne

[lnminente]

Another filter. This is for javascripts banners and trackers.
I hope this filter works well.

Name = "Kill - OffSite and Adlist Scripts (Verbose)"
Active = TRUE
URL = "$TYPE(htm)"
Bounds = "$NEST(<script,</script>)"
Limit = 2048
Match = "("
        "*document.write(*(href|src)=$AV(http://(^h)*))*$SET(1=OffSite)"
        ")|("
        "*(href|src)=$AV(*$LST(AdList)*.js)*$SET(1=Adlist Unloaded)"
        ")"
Replace = "<font size=1 color=red>[JS 1]</font>"

Note: I modified the bounds

Edited by - lnminente on 15 Aug 2002  01:46:41

[altosax]

i think there are too wildcards in this filter.
you could try to simplify the match field this way:

Match = "*("
        "document.write(*(href|src)=$AV(http://(^h)*))$SET(1=OffSite)"
        "|"
        "(href|src)=$AV(*$LST(AdList)*.js)$SET(1=Adlist Unloaded)"
        ")*"

but still they are a lot.

altosax.

 

[lnminente]

Hi Altosax.
You are right, but think that are two filters in one.
I changed the match code.

Many thanks.





Edited by - lnminente on 11 Aug 2002  20:11:18