[ GET ] Social Calls - WP Image Redirect - Nulled +OTO

***Vinchenz*** · (This post was last modified: 08-31-2014 03:42 PM by Vinchenz.)

First things First.
I like to give thanks to SargeRevenge for sharing the plugin and the OTO with me
and I also Like to give thanks also to Loomy69za for Nulling this plugin for me as well.
So If you see any of them post here in this thread, please thank them as well for their time and generosity!
Thank you Guys..

The Plugin, Installation Directions, Bonus Images and OTO Images are included.
This is a Word Press Plugin. You need to install and activate like any other WP Plug in
once it has installed and activated properly, you will see a congratulation message, But Your Not Done Yet!
You then need to enter any numbers for the license key and then click on validate and then you should see upper text turn from red to green.
Once inside your WP Dashboard you will see WP Image Redirect tutorials on the left hand side near the bottom.

Sales Page:

Code:

http://www.wpimageredirect.com/socialcalls

OTO Sales Page :

Code:

http://www.wpimageredirect.com/socialcalls/index-oto-1492eu.html

Down Load : removed due to possible virus

Virus Total: 0 / 58
Analysis date: 2014-08-30 21:25:13 UTC

Code:

https://www.virustotal.com/en/url/dbf1a4f7cc0029cbe68c2a4166ddc2dd8a3a411a70d5782138b7f08c7a87cf86/analysis/1409433913/

***Inabox*** · 08-31-2014, 08:29 AM

thanks for sharing rep+

***theman*** · (This post was last modified: 08-31-2014 10:16 AM by theman.)

Looks like my scan show trouble:

Code:

SHA256:    d54688bc23d9f9ff2c2fccb0d1d55ddb9f83a8b4f2b8fb68aa7db7f6d90aba78

File name:    social-calls-wp-plugin.zip

Detection ratio:     1 / 55

Analysis date:     2014-08-31 00:01:44 UTC ( 0 minutes ago )

CPRBa21.Webshell

Backdoor:PHP/WebShell.A is a backdoor trojan that allows unauthorized access and control of an affected computer by a remote attacker. The backdoor is written in PHP format and can affect both Windows and Linux operating systems.

It's in this file:

SHA256:    2f0670a6dd9b8a2522534ff472c9b5df1628551332aeaec9ff1ebd2ab9847d5a

File name:    wp-image-redirect-tutorials.php

Detection ratio:     1 / 55

Analysis date:     2014-08-31 00:12:10 UTC ( 0 minutes ago )

Looks to be in the base64 code

Careful people

***Rageless1*** · 08-31-2014, 10:38 AM

Yup, I too am showing some infection. My Vipre security detected trojan. Download at your own risk peeps...

***gage131*** · 08-31-2014, 10:55 AM

(08-31-2014 10:06 AM)theman Wrote: Looks like my scan show trouble:

Code:

SHA256: d54688bc23d9f9ff2c2fccb0d1d55ddb9f83a8b4f2b8fb68aa7db7f6d90aba78 File name: social-calls-wp-plugin.zip Detection ratio: 1 / 55 Analysis date: 2014-08-31 00:01:44 UTC ( 0 minutes ago ) CPRBa21.Webshell Backdoor:PHP/WebShell.A is a backdoor trojan that allows unauthorized access and control of an affected computer by a remote attacker. The backdoor is written in PHP format and can affect both Windows and Linux operating systems. It's in this file: SHA256: 2f0670a6dd9b8a2522534ff472c9b5df1628551332aeaec9ff1ebd2ab9847d5a File name: wp-image-redirect-tutorials.php Detection ratio: 1 / 55 Analysis date: 2014-08-31 00:12:10 UTC ( 0 minutes ago ) Looks to be in the base64 code
Careful people

Hello

I just decode wp-image-redirect-tutorials.php
---------------------------------------------------------
/*!
* fancyBox - jQuery Plugin
* version: 2.0.3 (29/11/2011)
* @requires jQuery v1.6 or later
*
* Examples at http://fancyapps.com/fancybox/
* License: http://www.fancyapps.com/fancybox/#license
*
* Copyright 2011 Janis Skarnelis - janis@fancyapps.com
*
*/
(function (window, document, $) {
var W = $(window),
D = $(document),
F = $.fancybox = function () {
F.open.apply( this, arguments );
},
didResize = false,
resizeTimer = null;

$.extend(F, {
// The current version of fancyBox
version: '2.0.3',

defaults: {
padding: 15,
margin: 20,

width: 800,
height: 600,
minWidth: 200,
minHeight: 200,
maxWidth: 9999,
maxHeight: 9999,

autoSize: true,
fitToView: true,
aspectRatio: false,
topRatio: 0.5,

fixed: !$.browser.msie || $.browser.version > 6,
scrolling: 'auto', // 'auto', 'yes' or 'no'
wrapCSS: 'fancybox-default',

arrows: true,
closeBtn: true,
closeClick: false,
nextClick : false,
mouseWheel: true,
autoPlay: false,
playSpeed: 3000,

modal: false,
loop: true,
ajax: {},
keys: {
next: [13, 32, 34, 39, 40], // enter, space, page down, right arrow, down arrow
prev: [8, 33, 37, 38], // backspace, page up, left arrow, up arrow
close: [27] // escape key
},

// Override some properties
index: 0,
type: null,
href: null,
content: null,
title: null,

// HTML templates
tpl: {
wrap: '<div class="fancybox-wrap"><div class="fancybox-outer"><div class="fancybox-inner"></div></div></div>',
image: '<img class="fancybox-image" src="{href}" alt="" />',
iframe: '<iframe class="fancybox-iframe" name="fancybox-frame{rnd}" frameborder="0" hspace="0" ' + ($.browser.msie ? 'allowtransparency="true""' : '') + ' scrolling="{scrolling}" src="{href}"></iframe>',
swf: '<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" width="100%" height="100%"><param name="wmode" value="transparent" /><param name="allowfullscreen" value="true" /><param name="allowscriptaccess" value="always" /><param name="movie" value="{href}" /><embed src="{href}" type="application/x-shockwave-flash" allowfullscreen="true" allowscriptaccess="always" width="100%" height="100%" wmode="transparent"></embed></object>',
error: '<p class="fancybox-error">The requested content cannot be loaded.<br/>Please try again later.</p>',
closeBtn: '<div title="Close" class="fancybox-item fancybox-close"></div>',
next: '<a title="Next" class="fancybox-item fancybox-next"><span></span></a>',
prev: '<a title="Previous" class="fancybox-item fancybox-prev"><span></span></a>'
},

// Properties for each animation type
// Opening fancyBox
openEffect: 'fade', // 'elastic', 'fade' or 'none'
openSpeed: 500,
openEasing: 'swing',
openOpacity: true,
openMethod: 'zoomIn',

// Closing fancyBox
closeEffect: 'fade', // 'elastic', 'fade' or 'none'
closeSpeed: 500,
closeEasing: 'swing',
closeOpacity: true,
closeMethod: 'zoomOut',

// Changing next gallery item
nextEffect: 'fade', // 'elastic', 'fade' or 'none'
nextSpeed: 300,
nextEasing: 'swing',
nextMethod: 'changeIn',

// Changing previous gallery item
prevEffect: 'fade', // 'elastic', 'fade' or 'none'
prevSpeed: 300,
prevEasing: 'swing',
prevMethod: 'changeOut',

// Enabled helpers
helpers: {
overlay: {
speedIn: 0,
speedOut: 0,
opacity: 0.85,
css: {
cursor: 'pointer',
'background-color': 'rgba(0, 0, 0, 0.85)' //Browsers who don`t support rgba will fall back to default color value defined at CSS file
},
closeClick: true
},
title: {
type: 'float' // 'float', 'inside', 'outside' or 'over'
}
},

// Callbacks
onCancel: $.noop, // If canceling
beforeLoad: $.noop, // Before loading
afterLoad: $.noop, // After loading
beforeShow: $.noop, // Before changing in current item
afterShow: $.noop, // After opening
beforeClose: $.noop, // Before closing
afterClose: $.noop // After closing
},

//Current state
group: {}, // Selected group
opts: {}, // Group options
coming: null, // Element being loaded
current: null, // Currently loaded element
isOpen: false, // Is currently open
isOpened: false, // Have been fully opened at least once
wrap: null,
outer: null,
inner: null,

player: {
timer: null,
isActive: false
},

// Loaders
ajaxLoad: null,
imgPreload: null,

// Some collections
transitions: {},
helpers: {},

/*
* Static methods
*/

open: function (group, opts) {
// Normalize group
if (!$.isArray(group)) {
group = [group];
}

if (!group.length) {
return;
}

//Kill existing instances
F.close(true);

//extend the defaults
F.opts = $.extend(true, {}, F.defaults, opts);
F.group = group;

F._start(F.opts.index || 0);
},

cancel: function () {
if (F.coming and& false === F.trigger('onCancel')) {
return;
}

F.coming = null;

F.hideLoading();

if (F.ajaxLoad) {
F.ajaxLoad.abort();
}

F.ajaxLoad = null;

if (F.imgPreload) {
F.imgPreload.onload = F.imgPreload.onabort = F.imgPreload.onerror = null;
}
},

close: function (a) {
F.cancel();

if (!F.current || false === F.trigger('beforeClose')) {
return;
}

F.unbindEvents();

//If forced or is still opening then remove immediately
if (!F.isOpen || (a and& a[0] === true)) {
$(".fancybox-wrap").stop().trigger('onReset').remove();

F._afterZoomOut();

} else {
F.isOpen = F.isOpened = false;

$(".fancybox-item").remove();

F.wrap.stop(true).removeClass('fancybox-opened');
F.inner.css('overflow', 'hidden');

F.transitions[F.current.closeMethod]();
}
},

play: function (a) {
var clear = function () {
clearTimeout(F.player.timer);
},
set = function () {
clear();

if (F.current and& F.player.isActive) {
F.player.timer = setTimeout(F.next, F.current.playSpeed);
}
},
stop = function () {
clear();

$('body').unbind('.player');

F.player.isActive = false;

F.trigger('onPlayEnd');
},
start = function () {
if (F.current and& (F.current.loop || F.current.index < F.group.length - 1)) {
F.player.isActive = true;

set();

$('body').bind({
'onCancel.player afterShow.player onUpdate.player': set,
'beforeClose.player': stop,
'beforeLoad.player': clear
});

F.trigger('onPlayStart');
}
};

if (F.player.isActive || (a and& a[0] === false)) {
stop();
} else {
start();
}
},

next: function () {
if (F.current) {
F.jumpto(F.current.index + 1);
}
},

prev: function () {
if (F.current) {
F.jumpto(F.current.index - 1);
}
},

jumpto: function (index) {
if (!F.current) {
return;
}

index = parseInt(index, 10);

if (F.group.length > 1 and& F.current.loop) {
if (index >= F.group.length) {
index = 0;

} else if (index < 0) {
index = F.group.length - 1;
}
}

if (typeof F.group[index] !== 'undefined') {
F.cancel();

F._start(index);
}
},

reposition: function (a) {
if (F.isOpen) {
F.wrap.css(F._getPosition(a));
}
},

update: function () {
if (F.isOpen) {
// It's a very bad idea to attach handlers to the window scroll event, run this code after a delay
if (!didResize) {
resizeTimer = setInterval(function () {
if (didResize) {
didResize = false;

clearTimeout(resizeTimer);

if (F.current) {
if (F.current.autoSize) {
F.inner.height('auto');
F.current.height = F.inner.height();
}

F._setDimension();

if (F.current.canGrow) {
F.inner.height('auto');
}

F.reposition();

F.trigger('onUpdate');
}
}
}, 100);
}

didResize = true;
}
},

toggle: function () {
if (F.isOpen) {
F.current.fitToView = !F.current.fitToView;

F.update();
}
},

hideLoading: function () {
$("#fancybox-loading").remove();
},

showLoading: function () {
F.hideLoading();

$('<div id="fancybox-loading"></div>').click(F.cancel).appendTo('body');
},

getViewport: function () {
return {
x: W.scrollLeft(),
y: W.scrollTop(),
w: W.width(),
h: W.height()
};
},

// Unbind the keyboard / clicking actions
unbindEvents: function () {
if (F.wrap) {
F.wrap.unbind('.fb');
}

D.unbind('.fb');
W.unbind('.fb');
},

bindEvents: function () {
var current = F.current,
keys = current.keys;

if (!current) {
return;
}

W.bind('resize.fb, orientationchange.fb', F.update);

if (keys) {
D.bind('keydown.fb', function (e) {
// Ignore key events within form elements
if ($.inArray(e.target.tagName.toLowerCase(), ['input', 'textarea', 'select', 'button']) > -1) {
return;
}

if ($.inArray(e.keyCode, keys.close) > -1) {
F.close();
e.preventDefault();

} else if ($.inArray(e.keyCode, keys.next) > -1) {
F.next();
e.preventDefault();

} else if ($.inArray(e.keyCode, keys.prev) > -1) {
F.prev();
e.preventDefault();
}
});
}

if ($.fn.mousewheel and& current.mouseWheel and& F.group.length > 1) {
F.wrap.bind('mousewheel.fb', function (e, delta) {
if ($(e.target).get(0).clientHeight === 0 || $(e.target).get(0).scrollHeight === $(e.target).get(0).clientHeight) {
e.preventDefault();

F[delta > 0 ? 'prev' : 'next']();
}
});
}
},

trigger: function (event) {
var ret, obj = $.inArray(event, ['onCancel', 'beforeLoad', 'afterLoad']) > -1 ? 'coming' : 'current';

if (!F[obj]) {
return;
}

if ($.isFunction(F[obj][event])) {
ret = F[obj][event].apply(F[obj], Array.prototype.slice.call(arguments, 1));
}

if (ret === false) {
return false;
}

if (F[obj].helpers) {
$.each(F[obj].helpers, function (helper, opts) {
if (opts and& typeof F.helpers[helper] !== 'undefined' and& $.isFunction(F.helpers[helper][event])) {
F.helpers[helper][event](opts);
}
});
}

$.event.trigger(event + '.fb');
},

isImage: function (str) {
return str and& str.match(/\.(jpg|gif|png|bmp|jpeg)(.*)?$/i);
},

isSWF: function (str) {
return str and& str.match(/\.(swf)(.*)?$/i);
},

_start: function (index) {
var element = F.group[index] || null,
isDom,
href,
type,
rez,
coming = $.extend(true, {}, F.opts, ($.isPlainObject(element) ? element : {}), {
index : index,
element : element
});

// Convert margin property to array - top, right, bottom, left
if (typeof coming.margin === 'number') {
coming.margin = [coming.margin, coming.margin, coming.margin, coming.margin];
}

// 'modal' propery is just a shortcut
if (coming.modal) {
$.extend(true, coming, {
closeBtn : false,
closeClick: false,
nextClick : false,
arrows : false,
mouseWheel : false,
keys : null,
helpers: {
overlay : {
css: {
cursor : 'auto'
},
closeClick : false
}
}
});
}

//Give a chance for callback or helpers to update coming item (type, title, etc)
F.coming = coming;

if (false === F.trigger('beforeLoad')) {
F.coming = null;
return;
}

if (typeof element === 'object' and& (element.nodeType || element instanceof $)) {
isDom = true;
coming.href = $(element).attr('href') || coming.href;
coming.title = $(element).attr('title') || coming.title;

if ($.metadata) {
$.extend(coming, $(element).metadata());
}
}

type = coming.type;
href = coming.href;

///Check if content type is set, if not, try to get
if (!type) {
if (isDom) {
rez = $(element).data('fancybox-type');

if (!rez and& element.className) {
rez = element.className.match(/fancybox\.(\w+)/);
rez = rez ? rez[1] : false;
}
}

if (rez) {
type = rez;

} else if (href) {
if (F.isImage(href)) {
type = 'image';

} else if (F.isSWF(href)) {
type = 'swf';

} else if (href.match(/^#/)) {
type = 'inline';
}
}

// ...if not - display element itself
if (!type) {
type = isDom ? 'inline' : 'html';
}

coming.type = type;
}

// Check before try to load; 'inline' and 'html' types need content, others - href
if (type === 'inline' || type === 'html') {
if (!coming.content) {
coming.content = type === 'inline' and& href ? $(href) : element;
}

if (!coming.content.length) {
type = null;
}

} else {
coming.href = href || element;

if (!coming.href) {
type = null;
}
}

/*
Add reference to the group, so it`s possible to access from callbacks, example:

afterLoad : function() {
this.title = 'Image ' + (this.index + 1) + ' of ' + this.group.length + (this.title ? ' - ' + this.title : '');
}

*/

coming.group = F.group;

if (type === 'image') {
F._loadImage();

} else if (type === 'ajax') {
F._loadAjax();

} else if (type) {
F._afterLoad();

} else {
F._error();
}
},

_error: function () {
F.coming.type = 'html';
F.coming.minHeight = 0;
F.coming.autoSize = true;
F.coming.content = F.coming.tpl.error;

F._afterLoad();
},

_loadImage: function () {
// Reset preload image so it is later possible to check "complete" property
F.imgPreload = new Image();

F.imgPreload.onload = function () {
this.onload = this.onerror = null;

F.coming.width = this.width;
F.coming.height = this.height;

F._afterLoad();
};

F.imgPreload.onerror = function () {
this.onload = this.onerror = null;

F._error();
};

F.imgPreload.src = F.coming.href;

if (!F.imgPreload.complete) {
F.showLoading();
}
},

_loadAjax: function () {
F.showLoading();

F.ajaxLoad = $.ajax($.extend({}, F.coming.ajax, {
url: F.coming.href,
error: function (jqXHR, textStatus, errorThrown) {
if (textStatus !== 'abort') {
F.coming.content = errorThrown;

F._error();

} else {
F.hideLoading();
}
},
success: function (data, textStatus, jqXHR) {
if (textStatus === 'success') {
F.coming.content = data;

F._afterLoad();
}
}
}));
},

_afterLoad: function () {
F.hideLoading();

if (!F.coming || false === F.trigger('afterLoad', F.current)) {
F.coming = false;

return;
}

if (F.isOpened) {
$(".fancybox-item").remove();

F.wrap.stop(true).removeClass('fancybox-opened');
F.inner.css('overflow', 'hidden');

F.transitions[F.current.prevMethod]();

} else {
$(".fancybox-wrap").stop().trigger('onReset').remove();

F.trigger('afterClose');
}

F.unbindEvents();

F.isOpen = false;
F.current = F.coming;
F.coming = false;

//Build the neccessary markup
F.wrap = $(F.current.tpl.wrap).addClass('fancybox-tmp ' + F.current.wrapCSS).appendTo('body');
F.outer = $('.fancybox-outer', F.wrap).css('padding', F.current.padding + 'px');
F.inner = $('.fancybox-inner', F.wrap);

F._setContent();

//Give a chance for helpers or callbacks to update elements
F.trigger('beforeShow');

//Set initial dimensions and hide
F._setDimension();

F.wrap.hide().removeClass('fancybox-tmp');

F.bindEvents();

F.transitions[ F.isOpened ? F.current.nextMethod : F.current.openMethod ]();
},

_setContent: function () {
var content, loadingBay, current = F.current,
type = current.type;

switch (type) {
case 'inline':
case 'ajax':
case 'html':
if (type === 'inline') {
content = current.content.show().detach();

if (content.parent().hasClass('fancybox-inner')) {
content.parents('.fancybox-wrap').trigger('onReset').remove();
}

$(F.wrap).bind('onReset', function () {
content.appendTo('body').hide();
});

} else {
content = current.content;
}

if (current.autoSize) {
loadingBay = $('<div class="fancybox-tmp"></div>').appendTo($("body")).append(content);

current.width = loadingBay.outerWidth();
current.height = loadingBay.outerHeight(true);

content = loadingBay.contents().detach();

loadingBay.remove();
}

break;

case 'image':
content = current.tpl.image.replace('{href}', current.href);

current.aspectRatio = true;
break;

case 'swf':
content = current.tpl.swf.replace(/\{width\}/g, current.width).replace(/\{height\}/g, current.height).replace(/\{href\}/g, current.href);
break;

case 'iframe':
content = current.tpl.iframe.replace('{href}', current.href).replace('{scrolling}', current.scrolling).replace('{rnd}', new Date().getTime());
break;
}

if ($.inArray(type, ['image', 'swf', 'iframe']) > -1) {
current.autoSize = false;
current.scrolling = false;
}

F.inner.append(content);
},

_setDimension: function () {
var current = F.current,
viewport = F.getViewport(),
margin = current.margin,
padding2 = current.padding * 2,
width = current.width + padding2,
height = current.height + padding2,
ratio = current.width / current.height,

maxWidth = current.maxWidth,
maxHeight = current.maxHeight,
minWidth = current.minWidth,
minHeight = current.minHeight,
height_,
space;

viewport.w -= (margin[1] + margin[3]);
viewport.h -= (margin[0] + margin[2]);

if (width.toString().indexOf('%') > -1) {
width = ((viewport.w * parseFloat(width)) / 100);
}

if (height.toString().indexOf('%') > -1) {
height = ((viewport.h * parseFloat(height)) / 100);
}

if (current.fitToView) {
maxWidth = Math.min(viewport.w, maxWidth);
maxHeight = Math.min(viewport.h, maxHeight);
}

maxWidth = Math.max(minWidth, maxWidth);
maxHeight = Math.max(minHeight, maxHeight);

if (current.aspectRatio) {
if (width > maxWidth) {
width = maxWidth;
height = ((width - padding2) / ratio) + padding2;
}

if (height > maxHeight) {
height = maxHeight;
width = ((height - padding2) * ratio) + padding2;
}

if (width < minWidth) {
width = minWidth;
height = ((width - padding2) / ratio) + padding2;
}

if (height < minHeight) {
height = minHeight;
width = ((height - padding2) * ratio) + padding2;
}

} else {
width = Math.max(minWidth, Math.min(width, maxWidth));
height = Math.max(minHeight, Math.min(height, maxHeight));
}

width = Math.round(width);
height = Math.round(height);

//Reset dimensions
$(F.wrap.add(F.outer).add(F.inner)).width('auto').height('auto');

F.inner.width(width - padding2).height(height - padding2);
F.wrap.width(width);

height_ = F.wrap.height(); // Real wrap height

//Fit wrapper inside
if (width > maxWidth || height_ > maxHeight) {
while ((width > maxWidth || height_ > maxHeight) and& width > minWidth and& height_ > minHeight) {
height = height - 10;

if (current.aspectRatio) {
width = Math.round(((height - padding2) * ratio) + padding2);

if (width < minWidth) {
width = minWidth;
height = ((width - padding2) / ratio) + padding2;
}

} else {
width = width - 10;
}

F.inner.width(width - padding2).height(height - padding2);
F.wrap.width(width);

height_ = F.wrap.height();
}
}

current.dim = {
width: width,
height: height_
};

current.canGrow = current.autoSize and& height > minHeight and& height < maxHeight;
current.canShrink = false;
current.canExpand = false;

if ((width - padding2) < current.width || (height - padding2) < current.height) {
current.canExpand = true;

} else if ((width > viewport.w || height_ > viewport.h) and& width > minWidth and& height > minHeight) {
current.canShrink = true;
}

space = height_ - padding2;

F.innerSpace = space - F.inner.height();
F.outerSpace = space - F.outer.height();
},

_getPosition: function (a) {
var viewport = F.getViewport(),
margin = F.current.margin,
width = F.wrap.width() + margin[1] + margin[3],
height = F.wrap.height() + margin[0] + margin[2],
rez = {
position: 'absolute',
top: margin[0] + viewport.y,
left: margin[3] + viewport.x
};

if (F.current.fixed and& (!a || a[0] === false) and& height <= viewport.h and& width <= viewport.w) {
rez = {
position: 'fixed',
top: margin[0],
left: margin[3]
};
}

rez.top = Math.ceil(Math.max(rez.top, rez.top + ((viewport.h - height) * F.current.topRatio))) + 'px';
rez.left = Math.ceil(Math.max(rez.left, rez.left + ((viewport.w - width) * 0.5))) + 'px';

return rez;
},

_afterZoomIn: function () {
var current = F.current;

F.isOpen = F.isOpened = true;

F.wrap.addClass('fancybox-opened').css('overflow', 'visible');

F.update();

F.inner.css('overflow', current.scrolling === 'auto' ? 'auto' : (current.scrolling === 'yes' ? 'scroll' : 'hidden'));

//Assign a click event
if (current.closeClick || current.nextClick) {
F.inner.bind('click.fb', current.nextClick ? F.next : F.close);
}

//Create a close button
if (current.closeBtn) {
$(F.current.tpl.closeBtn).appendTo(F.wrap).bind('click.fb', F.close);
}

//Create navigation arrows
if (current.arrows and& F.group.length > 1) {
if (current.loop || current.index > 0) {
$(current.tpl.prev).appendTo(F.wrap).bind('click.fb', F.prev);
}

if (current.loop || current.index < F.group.length - 1) {
$(current.tpl.next).appendTo(F.wrap).bind('click.fb', F.next);
}
}

F.trigger('afterShow');

if (F.opts.autoPlay and& !F.player.isActive) {
F.opts.autoPlay = false;

F.play();
}
},

_afterZoomOut: function () {
F.trigger('afterClose');

F.wrap.trigger('onReset').remove();

$.extend(F, {
group: {},
opts: {},
current: null,
isOpened: false,
isOpen: false,
wrap: null,
outer: null,
inner: null
});
}
});

/*
* Default transitions
*/

F.transitions = {
getOrigPosition: function () {
var element = F.current.element,
pos = {},
width = 50,
height = 50,
image, viewport;

if (element and& element.nodeName and& $(element).is(':visible')) {
image = $(element).find('img:first');

if (image.length) {
pos = image.offset();
width = image.outerWidth();
height = image.outerHeight();

} else {
pos = $(element).offset();
}

} else {
viewport = F.getViewport();
pos.top = viewport.y + (viewport.h - height) * 0.5;
pos.left = viewport.x + (viewport.w - width) * 0.5;
}

pos = {
top: Math.ceil(pos.top) + 'px',
left: Math.ceil(pos.left) + 'px',
width: Math.ceil(width) + 'px',
height: Math.ceil(height) + 'px'
};

return pos;
},

step: function (now, fx) {
var ratio, innerValue, outerValue;

if (fx.prop === 'width' || fx.prop === 'height') {
innerValue = outerValue = Math.ceil(now - (F.current.padding * 2));

if (fx.prop === 'height') {
ratio = (now - fx.start) / (fx.end - fx.start);

if (fx.start > fx.end) {
ratio = 1 - ratio;
}

innerValue -= F.innerSpace * ratio;
outerValue -= F.outerSpace * ratio;
}

F.inner[fx.prop](innerValue);
F.outer[fx.prop](outerValue);
}
},

zoomIn: function () {
var current = F.current,
startPos,
endPos,
dim = current.dim;

if (current.openEffect === 'elastic') {
endPos = $.extend({}, dim, F._getPosition(true));

//Remove "position" property
delete endPos.position;

startPos = this.getOrigPosition();

if (current.openOpacity) {
startPos.opacity = 0;
endPos.opacity = 1;
}

F.wrap.css(startPos).show().animate(endPos, {
duration: current.openSpeed,
easing: current.openEasing,
step: this.step,
complete: F._afterZoomIn
});

} else {
F.wrap.css($.extend({}, dim, F._getPosition()));

if (current.openEffect === 'fade') {
F.wrap.fadeIn(current.openSpeed, F._afterZoomIn);

} else {
F.wrap.show();
F._afterZoomIn();
}
}
},

zoomOut: function () {
var current = F.current,
endPos;

if (current.closeEffect === 'elastic') {
if (F.wrap.css('position') === 'fixed') {
F.wrap.css(F._getPosition(true));
}

endPos = this.getOrigPosition();

if (current.closeOpacity) {
endPos.opacity = 0;
}

F.wrap.animate(endPos, {
duration: current.closeSpeed,
easing: current.closeEasing,
step: this.step,
complete: F._afterZoomOut
});

} else {
F.wrap.fadeOut(current.closeEffect === 'fade' ? current.closeSpeed : 0, F._afterZoomOut);
}
},

changeIn: function () {
var current = F.current,
startPos;

if (F.current.nextEffect === 'elastic') {
startPos = F._getPosition(true);
startPos.opacity = 0;
startPos.top = (parseInt(startPos.top, 10) - 200) + 'px';

F.wrap.css(startPos).show().animate({
opacity: 1,
top: '+=200px'
}, {
duration: current.nextSpeed,
complete: F._afterZoomIn
});

} else {
F.wrap.css(F._getPosition());

if (current.nextEffect === 'fade') {
F.wrap.hide().fadeIn(current.nextSpeed, F._afterZoomIn);

} else {
F.wrap.show();
F._afterZoomIn();
}
}
},

changeOut: function () {
function cleanUp() {
$(this).trigger('onReset').remove();
}

F.wrap.removeClass('fancybox-opened');

if (F.current.prevEffect === 'elastic') {
F.wrap.animate({
'opacity': 0,
top: '+=200px'
}, {
duration: F.current.prevSpeed,
complete: cleanUp
});

} else {
F.wrap.fadeOut(F.current.prevEffect === 'fade' ? F.current.prevSpeed : 0, cleanUp);
}
}
};

/*
* Overlay helper
*/

F.helpers.overlay = {
overlay: null,

update: function () {
var width, scrollWidth, offsetWidth;

//Reset width/height so it will not mess
this.overlay.width(0).height(0);

if ($.browser.msie) {
scrollWidth = Math.max(document.documentElement.scrollWidth, document.body.scrollWidth);
offsetWidth = Math.max(document.documentElement.offsetWidth, document.body.offsetWidth);

width = scrollWidth < offsetWidth ? W.width() : scrollWidth;

} else {
width = D.width();
}

this.overlay.width(width).height(D.height());
},

beforeShow: function (opts) {
if (this.overlay) {
return;
}

this.overlay = $('<div id="fancybox-overlay"></div>').css(opts.css || {
background: 'black'
}).appendTo('body');

this.update();

if (opts.closeClick) {
this.overlay.bind('click.fb', F.close);
}

W.bind("resize.fb", $.proxy(this.update, this));

this.overlay.fadeTo(opts.speedIn || "fast", opts.opacity || 1);
},

onUpdate: function () {
//Update as content may change document dimensions
this.update();
},

afterClose: function (opts) {
if (this.overlay) {
this.overlay.fadeOut(opts.speedOut || "fast", function () {
$(this).remove();
});
}

this.overlay = null;
}
};

/*
* Title helper
*/

F.helpers.title = {
beforeShow: function (opts) {
var title, text = F.current.title;

if (text) {
title = $('<div class="fancybox-title fancybox-title-' + opts.type + '-wrap">' + text + '</div>').appendTo('body');

if (opts.type === 'float') {
//This helps for some browsers
title.width(title.width());

title.wrapInner('<span class="child"></span>');

//Increase bottom margin so this title will also fit into viewport
F.current.margin[2] += Math.abs(parseInt(title.css('margin-bottom'), 10));
}

title.appendTo(opts.type === 'over' ? F.inner : (opts.type === 'outside' ? F.wrap : F.outer));
}
}
};

// jQuery plugin initialization
$.fn.fancybox = function (options) {
var opts = options || {},
selector = this.selector || '';

function run(e) {
var group = [], relType = false, relVal = $(this).data('fancybox-group');

e.preventDefault();

// Check if element has 'data-fancybox-group' attribute, if not - use 'rel'
if (typeof relVal !== 'undefined') {
relType = relVal ? 'data-fancybox-group' : false;

} else if (this.rel and& this.rel !== '' and& this.rel !== 'nofollow') {
relVal = this.rel;
relType = 'rel';
}

if (relType) {
group = selector.length ? $(selector).filter('[' + relType + '="' + relVal + '"]') : $('[' + relType + '="' + relVal + '"]');
}

if (group.length) {
opts.index = group.index(this);

F.open(group.get(), opts);

} else {
F.open(this, opts);
}

return false;
}

if (selector) {
D.undelegate(selector, 'click.fb-start').delegate(selector, 'click.fb-start', run);

} else {
$(this).unbind('click.fb-start').bind('click.fb-start', run);
}

return this;
};

}(window, document, jQuery));

***wdouzel*** · 08-31-2014, 11:30 AM

Thanks - Great share - Rep

Rep

for you

***Vinchenz*** · (This post was last modified: 08-31-2014 03:35 PM by Vinchenz.)

Hey The Man, I checked with Virus Total just to be safe as well, came up with zero and no alarms with my Malewarebytes either.
But trust what you are saying as well, you being a good friend.. where and how did u check it?

(08-31-2014 10:06 AM)theman Wrote: Looks like my scan show trouble:

Code:

SHA256: d54688bc23d9f9ff2c2fccb0d1d55ddb9f83a8b4f2b8fb68aa7db7f6d90aba78 File name: social-calls-wp-plugin.zip Detection ratio: 1 / 55 Analysis date: 2014-08-31 00:01:44 UTC ( 0 minutes ago ) CPRBa21.Webshell Backdoor:PHP/WebShell.A is a backdoor trojan that allows unauthorized access and control of an affected computer by a remote attacker. The backdoor is written in PHP format and can affect both Windows and Linux operating systems. It's in this file: SHA256: 2f0670a6dd9b8a2522534ff472c9b5df1628551332aeaec9ff1ebd2ab9847d5a File name: wp-image-redirect-tutorials.php Detection ratio: 1 / 55 Analysis date: 2014-08-31 00:12:10 UTC ( 0 minutes ago ) Looks to be in the base64 code
Careful people

***lovu123*** · 08-31-2014, 04:07 PM

Just quick checked the code @gage131 posted, didn't see anything wrong with it, it's from fancybox plugin, if anyone wanna try, go ahead replace the whole thing with the official file http://fancyapps.com/fancybox/

***CpaNinja*** · 08-31-2014, 04:23 PM

Did someone made mirrors for this one? Thanks

***theman*** · 09-01-2014, 12:04 AM

The original virus scan looks to be on :

Code:

URL:     http://mir.cr/ZE9ORXQA

Detection ratio:     0 / 58

Analysis date:     2014-08-30 21:25:13 UTC ( 16 hours, 32 minutes ago ) Latest

But the scan I did was on the plugin zip:

SHA256:    d54688bc23d9f9ff2c2fccb0d1d55ddb9f83a8b4f2b8fb68aa7db7f6d90aba78

File name:    social-calls-wp-plugin.zip

Detection ratio:     1 / 55

Analysis date:     2014-08-31 00:01:44 UTC ( 0 minutes ago )

then unzipped the file and inside the infected file was:

wp-image-redirect-tutorials.php

Took a look and saw a lot of coded base64 code and just said it may be in there but will need to take a look at the whole file.

Just wanted everyone to be careful with this one and always do your own scans of all the plugins and themes.