Runtime Error: "0.firstChild.style"

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Anon-dbede40d18, Aug 10, 2008.

  1. Anon-dbede40d18

    Anon-dbede40d18 Anonymized

    Periodically, I get a popup on my desktop that says:


    A Runtime Error has occured.
    Do you wish to debug?

    Line:567
    Error: '0.firstChild.style' is null or not an object

    Yes No

    When I click "Yes":

    - "Just In Time Debugging" pops up
    - I click the only possible debugger, "New instance of Microsoft Script Editor"
    - I click yes
    - "Step Into Remote Procedure Call" pops up in a Word-ish program
    - I choose "Script" to debug
    - The process is "[3220] C:\WINDOWS\svchost.exe"
    - I click "Ok"
    - "Microsoft Visual Design Studio" pops up
    - It says: "Microsoft JScript runtime error: '0.firstChild.style' is null or not an object
    - I have a choice of Break, Continue, or Help
    - Help is useless
    - Continue makes it pop up again
    - Break lets me edit the text
    - The line is:
    elm[0].firstChild.style.background = "none";
    - The whole script is:
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

    <html>
    <head>


    <title>101186657.no-ip.info</title>
    <meta http-equiv="Keywords" content="">
    <meta http-equiv="Description" content="">
    <meta http-equiv="Content-Type" content="text/html;charset=utf-8">


    <link rel="shortcut icon" href="/favicon/mi_favicon.ico" type="image/x-icon">



    <style type="text/css">

    body {
    position: relative;
    width: 100%;
    margin: 0;
    padding: 0;
    background: #e6e6e6;
    font-family: Verdana, Arial, Helvetica, sans-serif;
    text-align: center;
    }
    .clear {
    position: relative;
    display: block;
    clear: both;
    height: 1px;
    overflow: hidden;
    margin: 0;
    font-size: 1px;
    line-height: 1px;
    }
    #container {
    position: relative;
    width: 780px;
    margin: 0 auto;
    padding: 0;



    }

    /* header
    ******************************************/
    #header {
    width: 760px;
    height: 87px;
    background: #fff url(/skins/travel/images/bg_header.jpg) no-repeat top right;
    text-align: left;
    padding: 0;
    border-right: 10px solid #fff;
    border-left: 10px solid #fff;
    }
    #header_title {
    position: relative;
    float: left;
    width: 550px;
    height: 26px;
    padding-top: 12px;
    padding-bottom: 12px;
    }
    #header_title #domainname {
    float: left;
    margin: 0;
    padding: 0;
    font-size: 20px;
    font-weight: bold;
    color: #f19b36;
    }
    #header_title #tagline {
    float: left;
    margin: 0;
    padding-top: 9px;
    padding-left: 12px;
    font-size: 12px;
    font-style: italic;
    font-weight: normal;
    color: #f19b36;
    }
    #header_links {
    float: right;
    width: 150px;
    overflow: hidden;
    margin: 0 0 -17px 0;
    padding: 17px 0 0 0;
    text-align: right;
    }
    #poptop {
    position: relative;
    z-index: 2;
    height: 36px;
    margin: 0;
    padding: 0;
    background: #a9aa5e;
    text-align: center;
    }
    #poptop ul {
    position: relative;
    list-style: none;
    margin: 0;
    padding: 3px 0 0 0 ;


    }
    #poptop ul li {
    position: relative;
    display: inline;
    margin: 0;
    padding: 0 0 0 0;
    }
    #poptop ul li a {
    padding: 2px 7px 2px 17px;
    font-size: 12px;
    font-weight: bold;
    background: transparent;
    color: #fff;
    text-decoration: none;
    }


    #poptop ul li a {
    background: transparent url(/skins/travel/images/div_poptop2.gif) no-repeat left;
    }



    #poptop ul li.first a {
    background: transparent;
    }
    #poptop ul li a:hover {
    text-decoration: underline;
    }
    #poptop .txt_related{
    position: relative;
    font-size: 10px;
    }

    /* main
    ******************************************/
    #main {
    position: relative;
    width: 760px;
    margin: 171px 0 0 0;
    padding: 0px;
    text-align: left;
    overflow: hidden;
    background: #fff;
    padding: 10px;

    }



    /* searchbox
    ******************************************/
    #search {
    position: absolute;
    top: 87px;
    left: 0px;
    width: 760px;
    height: 173px;
    background: #fff url(/skins/travel/images/bg_search.jpg) no-repeat right;
    text-align: left;
    border-right: 10px solid #fff;
    border-left: 10px solid #fff;
    }
    #search label {
    display: block;
    margin: 77px 0 16px 105px;
    font-size: 12px;
    font-weight: bold;
    }
    #search .text {
    display: block;
    width: 161px;
    margin: 0 0 3px 105px;
    font-size: 11px;
    }
    #search .image {
    margin: 0 0 0 178px;
    font-size: 12px;
    }


    /* sidebar
    ******************************************/
    .sidebar {
    float: left;
    width: 169px;
    background: #f19b36 url(/skins/travel/images/bg_sidebar.gif) repeat-x top left;

    margin: 0 0 -2000px 0 ;

    padding: 8px 8px 2000px 8px ;

    height:auto;
    }
    .sidebar h4 {
    margin: 0;
    padding: 0;
    color: #fff;
    font-size: 12px;
    font-weight: block;
    }
    .sidebar ul {
    position: relative;
    list-style: none;
    margin: 0;
    padding: 0;
    }
    .sidebar ul li {
    position: relative;
    margin: 0;
    padding: 5px 0;
    }
    .sidebar ul li a {
    position: relative;
    margin: 0;
    padding: 0;
    color: #003366;
    font-size: 11px;
    }


    /* keywords
    ******************************************/
    .keywords {
    float: right;
    width: 565px;
    margin: 0 0 -2000px 0 ;
    padding: 0 0 2000px 0 ;
    height:auto;
    }
    .keywords img {
    margin: 0 0 8px 0;
    padding: 0;
    }
    .keywords .kw0 {
    float: left;
    width: 261px;
    background: #eee9df;
    margin: 0 0 -2000px 0 ;
    padding: 8px 8px 2000px 8px ;

    }
    .keywords .kw1 {
    float: right;
    width: 261px;
    padding: 8px;
    background: #eee9df;
    margin: 0 0 -2000px 0 ;
    padding: 8px 8px 2000px 8px ;

    }

    .keywords .kw0 li, .keywords .kw1 li {
    color:#003366;
    font-size:12px;
    }

    .keywords .kw0 li a, .keywords .kw1 li a {
    color:#003366;
    font-size:12px;
    text-decoration: none;
    }


    .keywords .kw0 h4, .keywords .kw1 h4{
    color: #a9aa5e;
    font-size: 12px;
    padding:0px;
    margin:0px;
    }



    /* footer
    ******************************************/
    #footer {
    border-top: 10px solid #fff;
    height: 130px;
    color:#a9aa5e;
    font-size:12px;
    text-align:right;
    padding-top:15px;
    }

    #footer div{
    float:right;
    }


    #footer .copyright {
    color:#000;
    font-size:12px;
    text-align:left;
    float:left;
    }























    /* footer
    ******************************************/
    #footer {
    height: 130px;
    color:#a9aa5e;
    font-size:12px;
    text-align:right;
    padding-top:15px;
    background:#e6e6e6;
    width: 780px;
    border-top:10px solid #fff;
    }

    #footer div{
    float:right;
    }

    #footer .copyright {
    color:#000;
    font-size:12px;
    text-align:left;
    float:left;
    }





    </style>
    </head>

    <body>
    <!-- begin container -->
    <div id="container">

    <!-- begin header -->
    <div id="header">




    <div id="header_title">
    <h1 id="domainname">101186657.no-ip.info</h1>
    <div id="tagline">What you need, when you need it</div>
    <div class="clear">&nbsp;</div>
    </div>
    <div id="header_links">
    <div class="dropdown">
    <style type="text/css">
    /* lang_nav
    --------------------------------------------------*/
    ul#lang_nav {
    position: absolute;
    overflow: visible;
    top: 19px;
    right: 0px;
    z-index: 9999;

    width: 120px;
    height: auto;
    margin: 0px;
    padding: 0px;
    border-top: 2px solid #777777;
    border-left: 2px solid #777777;
    border-bottom: 1px solid #848484;
    border-right: 1px solid #848484;

    text-align: left;
    background: #ffffdb;
    opacity: 0.75;
    filter:alpha(opacity=75); /* IE's opacity */
    }
    ul#lang_nav li {
    position: relative;
    z-index: 9990;
    list-style: none;
    display: block;
    overflow: visible;
    width: 100%;
    margin: 0px;
    padding: 0px;
    color: #0707cd;
    }
    ul#lang_nav li a {
    position: relative;
    z-index: 9991;
    display: block;
    width: auto;
    margin: 0px;
    padding: 1px 6px;
    color: #0000cc;
    font-weight: normal;
    text-decoration: none;
    border: 0px solid red;
    }
    ul#lang_nav li a:hover {
    display: block;
    z-index: 9991;
    margin: 0px;
    padding: 1px 6px;
    text-decoration: none;
    color: #fff;
    background: #0000cc;
    }
    ul#lang_nav li a img {
    position: absolute;
    z-index: 9992;
    top: 4px;
    width: 18px;
    height: 12px;

    right: 5px;
    margin: 0px;
    padding: 0px;
    border: 0px;
    }
    a.link {
    position: relative;
    margin: 0px;
    padding: 1px;
    border: 1px solid #0000cc;
    font-size: 11px;
    text-decoration: none;
    }
    a:hover.link {
    margin: 0px;
    text-decoration: none;
    color: #fff;
    background: #0000cc;
    }
    #lang_images {
    margin: 0 3px 0 0;
    }
    #lang_images a img {
    position: relative;
    z-index: 9999;
    float: left;
    top: 0px;
    right: -195px;
    width: 18px;
    height: 12px;
    margin: 0 3px 0 0;
    padding: 0px;
    border: 0;
    }
    .top_break, .main, .bottom_break {
    _z-index: -1;
    }
    </style>



    <form action="/" method="POST" name="lang_selection" id="lang_selection">
    <input type="hidden" name="epl" value="01550068R1UMXGYWVlEFDVNRC1VeA1MFUwVFUVgMAFxbVllZVFgEBFMJAVMFAVYeDAwVDBYdCFoAWEVGUgATVl1nSFtCWEZRA0paDWxWDkhEEF0EFFAJaxJOE1AKBw5HWB5WW0U6V1gNW1IAVwlQFgM8UQFbB1kNVw4">
    <input type="hidden" name="debug" value="0">



    <select id="dropdownflag" name="dropdown_lang" onchange="this.form.submit()" onclick="loadFlags();" style="border:1px solid #A5A5A5;">

    <option value="en" selected style="
    background-image: url(http://sptc02.information.com/skins/common/images/downarrow.gif);
    background-position: right;
    background-repeat: no-repeat;
    margin-right: 10px;
    text-align:left;">
    English
    </option>
    <option value="es" style="
    background-image: url(http://sptc02.information.com/skins/common/images/downarrow.gif);
    background-position: right;
    background-repeat: no-repeat;
    margin-right: 10px;
    text-align:left;">
    Español
    </option>
    <option value="fr" style="
    background-image: url(http://sptc02.information.com/skins/common/images/downarrow.gif);
    background-position: right;
    background-repeat: no-repeat;
    margin-right: 10px;
    text-align:left;">
    Français
    </option>
    <option value="zh" style="
    background-image: url(http://sptc02.information.com/skins/common/images/downarrow.gif);
    background-position: right;
    background-repeat: no-repeat;
    margin-right: 10px;
    text-align:left;">
    中文
    </option>
    <option value="de" style="
    background-image: url(http://sptc02.information.com/skins/common/images/downarrow.gif);
    background-position: right;
    background-repeat: no-repeat;
    margin-right: 10px;
    text-align:left;">
    Deutsch
    </option>
    <option value="pt" style="
    background-image: url(http://sptc02.information.com/skins/common/images/downarrow.gif);
    background-position: right;
    background-repeat: no-repeat;
    margin-right: 10px;
    text-align:left;">
    Português
    </option>
    <option value="ja" style="
    background-image: url(http://sptc02.information.com/skins/common/images/downarrow.gif);
    background-position: right;
    background-repeat: no-repeat;
    margin-right: 10px;
    text-align:left;">
    日本語
    </option>
    <option value="nl" style="
    background-image: url(http://sptc02.information.com/skins/common/images/downarrow.gif);
    background-position: right;
    background-repeat: no-repeat;
    margin-right: 10px;
    text-align:left;">
    Nederlands
    </option>
    <option value="it" style="
    background-image: url(http://sptc02.information.com/skins/common/images/downarrow.gif);
    background-position: right;
    background-repeat: no-repeat;
    margin-right: 10px;
    text-align:left;">
    Italiano
    </option>
    <option value="ko" style="
    background-image: url(http://sptc02.information.com/skins/common/images/downarrow.gif);
    background-position: right;
    background-repeat: no-repeat;
    margin-right: 10px;
    text-align:left;">
    한국어
    </option>

    </select>

    </form>

    <script type="text/javascript">
    var flagsloaded = false;
    loadFlags = function () {
    if (!flagsloaded) {
    listel = document.getElementById("dropdownflag");
    listel.options[0].style.backgroundImage = "url('http://sptc02.information.com/skins/common/images/en.png')";
    listel.options[1].style.backgroundImage = "url('http://sptc02.information.com/skins/common/images/es.png')";
    listel.options[2].style.backgroundImage = "url('http://sptc02.information.com/skins/common/images/fr.png')";
    listel.options[3].style.backgroundImage = "url('http://sptc02.information.com/skins/common/images/zh.png')";
    listel.options[4].style.backgroundImage = "url('http://sptc02.information.com/skins/common/images/de.png')";
    listel.options[5].style.backgroundImage = "url('http://sptc02.information.com/skins/common/images/pt.png')";
    listel.options[6].style.backgroundImage = "url('http://sptc02.information.com/skins/common/images/ja.png')";
    listel.options[7].style.backgroundImage = "url('http://sptc02.information.com/skins/common/images/nl.png')";
    listel.options[8].style.backgroundImage = "url('http://sptc02.information.com/skins/common/images/it.png')";
    listel.options[9].style.backgroundImage = "url('http://sptc02.information.com/skins/common/images/ko.png')";
    flagsloaded = true;
    }
    }
    </script>





    </div>
    </div>




    <!-- begin poptop -->
    <div class="clear">&nbsp;</div>
    <div id="poptop">


    <ul id="topLinks">
    <li class="txt_related">Related Searches</li>
    <li><a href="/?epl=01800025R1UMXGYWVlEFDVNRC1VeA1MFUwVFUVgMAFxbVllZVFgEBFMJAVMFAVYeDAwVDBYdCFoAWEVGUgATVl1nSFtCWEVbEk1VBEFrFV8SPFQECFcIWgEREFBWEwJdakxBRFRYWV0MUx8LXEA_Ug4MWw4DV1wFQFY8XFNcVQ0MCQESWhJqRgNWUlgC&amp;query=Credit%20Cards" onclick="doPop = 0;" >Credit Cards</a></li><li><a href="/?epl=01800024R1UMXGYWVlEFDVNRC1VeA1MFUwVFUVgMAFxbVllZVFgEBFMJAVMFAVYeDAwVDBYdCFoAWEVGUgATVl1nSFtCWEVbEk1VBEFrFV8SPFQECFcIWgEREFBWEwJdakxBRFRYWV0MUx8LXEA_Ug4MWw4DV1wFQFY8XFNcVQ0MCQESWhJqRgNWUlgB&amp;query=Spyware" onclick="doPop = 0;" >Spyware</a></li><li><a href="/?epl=01800023R1UMXGYWVlEFDVNRC1VeA1MFUwVFUVgMAFxbVllZVFgEBFMJAVMFAVYeDAwVDBYdCFoAWEVGUgATVl1nSFtCWEVbEk1VBEFrFV8SPFQECFcIWgEREFBWEwJdakxBRFRYWV0MUx8LXEA_Ug4MWw4DV1wFQFY8XFNcVQ0MCQESWhJqRgNWUlgA&amp;query=Register%20Domain%20Name" onclick="doPop = 0;" >Register Domain Name</a></li><li><a href="/?epl=01800030R1UMXGYWVlEFDVNRC1VeA1MFUwVFUVgMAFxbVllZVFgEBFMJAVMFAVYeDAwVDBYdCFoAWEVGUgATVl1nSFtCWEVbEk1VBEFrFV8SPFQECFcIWgEREFBWEwJdakxBRFRYWV0MUx8LXEA_Ug4MWw4DV1wFQFY8XFNcVQ0MCQESWhJqRgNWUlgH&amp;query=Online%20Payment" onclick="doPop = 0;" >Online Payment</a></li><li><a href="/?epl=01800029R1UMXGYWVlEFDVNRC1VeA1MFUwVFUVgMAFxbVllZVFgEBFMJAVMFAVYeDAwVDBYdCFoAWEVGUgATVl1nSFtCWEVbEk1VBEFrFV8SPFQECFcIWgEREFBWEwJdakxBRFRYWV0MUx8LXEA_Ug4MWw4DV1wFQFY8XFNcVQ0MCQESWhJqRgNWUlgG&amp;query=Chat" onclick="doPop = 0;" >Chat</a></li><li><a href="/?epl=01800028R1UMXGYWVlEFDVNRC1VeA1MFUwVFUVgMAFxbVllZVFgEBFMJAVMFAVYeDAwVDBYdCFoAWEVGUgATVl1nSFtCWEVbEk1VBEFrFV8SPFQECFcIWgEREFBWEwJdakxBRFRYWV0MUx8LXEA_Ug4MWw4DV1wFQFY8XFNcVQ0MCQESWhJqRgNWUlgF&amp;query=Online%20Dating" onclick="doPop = 0;" >Online Dating</a></li><li><a href="/?epl=01800027R1UMXGYWVlEFDVNRC1VeA1MFUwVFUVgMAFxbVllZVFgEBFMJAVMFAVYeDAwVDBYdCFoAWEVGUgATVl1nSFtCWEVbEk1VBEFrFV8SPFQECFcIWgEREFBWEwJdakxBRFRYWV0MUx8LXEA_Ug4MWw4DV1wFQFY8XFNcVQ0MCQESWhJqRgNWUlgE&amp;query=Airline%20Tickets" onclick="doPop = 0;" >Airline Tickets</a></li>
    </ul>

    <script type="text/javascript">

    function stopBul( tagID ) {
    var elmFirst = document.getElementById( tagID );
    var elm = elmFirst.getElementsByTagName("LI");

    elm[0].firstChild.style.background = "none";
    }

    stopBul('topLinks');


    Please tell me what i can do to stop the popup from coming.
     
    Anon-dbede40d18, Aug 10, 2008
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    My first impression is that this is not a problem for the Malware Forum. it looks more like a JavaScript for some site you access ( like http://www.w3.org ) However to make sure that it is not malware, you will have to run the below. Your other choice is to post in the Software Forum.


    Please follow the instructions in the below link and attach the requested logs when you finish these instructions.



    • If something does not run, write down the info to explain to us later but keep on going.
    • Do not assume that because one step does not work that they all will not.
    Notes:

    1. If you run into problems trying to run theREAD & RUN ME or any of the scans in normal boot mode. You can running steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
    2. If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
     
    chaslang, Aug 10, 2008
    #2

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds