PDA

View Full Version : Web site download problem.


Jiggy
12-07-2003, 10:33 AM
Im try to download some funny clips from here http://www.punchbaby.com/clip_funny.htm but when i click on the "more" to get the download page up it doesnt go anywhere.
All it does is put an # at the end of the web address (above), ive tried with firewall on/off, reset setting in IE, cleaned cache, cookies, temps but the daft thing is i can download from other parts of the site in the same way no problems.

Mite be that part of site is down.

malcore
12-07-2003, 10:45 AM
Works fine for me.

Are you using a popup blocker by any chance? Clicking on the "more" buttons opens a small window over the original, not a new page. May be that a popup blocker (if utilized) is not allowing this window to open???

Edit-hehe_nice timing Rick . I'm using Firebird with popup blocking enabled, must be a more "intelligent" Popup blocker.:p

Rick
12-07-2003, 10:45 AM
They open as POP Open windows..
POPUP blocker may be stopping them

Jiggy
12-07-2003, 11:08 AM
Ive only got Nortons Firewall running but as a said ive tried it on/off and still get the same thing.

malcore
12-07-2003, 11:17 AM
If using IE, could be a scripting problem. Check in internet properties>security>custom level and see if Active Scripting is disabled.

I get the same results (with the #) as you when using IE with active scripting disabled. With it enabled, the window opens.

Jiggy
12-07-2003, 11:39 AM
Ive just had a look see and Active Scripting is enabled, can i update the scripting?

Budfred
12-07-2003, 11:45 AM
I just started to download one of those files and noticed that it had an ***.mpg.mpg format. I have seen this double extension used to conceal viruses and other malware. Does anyone know what the story is on this??

Jiggy
12-07-2003, 11:52 AM
That (.mpg.mpg) format in Googles finds porn, i ran that format through Symantec and it found no results, other than that i dont know.

Paul Komski
12-07-2003, 03:54 PM
A file ending .mpg (single or doubly extended) will be treated by the system as an mpg file and not as an executable such as (com, bat, exe, pif, scr) so even if it is a "virus in disguise" it is unlikely to be immediately harmful unlesss "something else" renames it, etc. As it is - it cannot run or execute.

Double extensions such as .txt.pif are especially dangerous since the .pif extension is always hidden by default in windows. Thus as soon as the file has been downloaded anywhere it looks like a txt file but behaves like a pif file. This is easily demonstrated by renaming any file and adding .pif to it. DONT DO THIS WITH A FILE OF ANY IMPORTANCE BECAUSE YOU WONT BE ABLE TO RENAME (THE NOW INVISIBLE EXTENSION) BACK - with any ease that is.

For those users that hide operating system files and hide file extensions of known file types the danger of not spotting files ending .txt.exe or .txt.com and so on is increased because in these situations the .com and .exe are hidden and the file once again looks like a txt file though is actually an executable.

It is good practice to always we wary of double-extensions none-the-less.

mjc
12-07-2003, 07:54 PM
Actually....mpg can be a script....an executable.

:eek:

The way an mpg script works, is you dl a small mpg, the media player of choice opens reads the script and then connects tthe server specified in the script and streams the movie...a rather rudimentary means of "protecting" content.

The only problem....these scripts don't actually have to download media content! The media player will blindingly stream just about anything.and then after it buffers the file (or in the case of a relatively small item), cough up an error message saying that something is either corrupt, broken or otherwise wrong with the file. And if it is the right (wrong, depending on viewpoint) file type it will run anyway.

Yes...this is a technique commonly used by porn dialers. Often trying to exploit more than one Windows flaw in one fell swoop.

Paul Komski
12-07-2003, 08:47 PM
I hadn't thought of it that way and of course you are right in the same or similar way that an office doc can run a macro (eg an underlying script). Hadn't thought of that and stand corrected.