text:
Page 1
A Study of Malcode-Bearing Documents
Wei-Jen Li, Salvatore Stolfo, Angelos Stavrou, Elli Androulaki,
and Angelos D. Keromytis
Computer Science Department, Columbia University
Abstract. By exploiting the object-oriented dynamic composability of
modern document applications and formats, malcode hidden in otherwise
inconspicuous documents can reach third-party applications that may
harbor exploitable vulnerabilities otherwise unreachable by network-level
service attacks. Such attacks can be very selective and difficult to detect
compared to the typical network worm threat, owing to the complex-
ity of these applications and data formats, as well as the multitude of
document-exchange vectors. As a case study, this paper focuses on Mi-
crosoft Word documents as malcode carriers. We investigate the pos-
sibility of detecting embedded malcode in Word documents using two
techniques: static content analysis using statistical models of typical doc-
ument content, and run-time dynamic tests on diverse platforms. The
experiments demonstrate these approaches can not only detect known
malware, but also most zero-day attacks. We identify several problems
with both approaches, representing both challenges in addressing the
problem and opportunities for future research.
Keywords: Intrusion Detection, N-gram, Sandbox Diversity.
In this paper, we focus on stealthy and targeted attacks where malcode is deliv-
ered to a host in an otherwise normal-appearing document. Modern documents
and the corresponding applications make use of embedded code fragments. This
embedded code is capable of indirectly invoking other applications or libraries
on the host as part of document rendering or editing. For example, a pie chart
displaying the contents of a spreadsheet embedded in a Word document will
cause Excel components to be invoked when the Word document is opened. As
a result, documents offer a convenient means for attackers to penetrate systems
and reach third-party host-based applications that may harbor vulnerabilities
which are not reachable, and thus not directly exploitable, remotely over the
network. Disturbingly, attackers are simply exploiting deliberate features that
are critical to the way modern document-handling applications operate, instead
of some temporary vulnerabilities or bugs.
Several cases have been reported where malcode has been embedded in docu-
ments (e.g., PDF, Word, Excel, and PowerPoint [1,2,3]) transforming them into
a vehicle for host intrusions. These trojan-infected documents can be served up
B. M. H¨ ammerli and R. Sommer (Eds.): DIMVA 2007, LNCS 4579, pp. 231–250, 2007.
c ? Springer-Verlag Berlin Heidelberg 2007
Page 2
232 W.-J. Li et al.
by any arbitrary web site or search engine in a passive "drive by" fashion, trans-
mitted over email or instant messaging (IM), or even introduced to a system by
other media such as CD-ROMs and USB drives, bypassing all the network fire-
walls and intrusion-detection systems. Furthermore, the attacker can use such
documents as a stepping stone to reach other systems, unreachable via the regu-
lar network. Hence, any machine inside an organization with the ability to open
a document can become the spreading point for the malcode to reach any host
within that organization. Indeed, a recent attack of this nature was reported
in [4] using Wikipedia. There is nothing new about the presence of viruses in
streams, embedded as attached documents, nor is the use of malicious macros
a new threat [5,6], e.g., in Word documents. However, simply disabling macros
does not solve the problem; other forms of code may be embedded in Word
documents, for which no easy solution is available other than not using Word
The underlying problem is that modern document formats are essentially
object-containers (e.g., Object Linking and Embedding (OLE) format for Word)
of any executable object. Hence, one should expect to see any kind of code
embedded in a document. Since malcode is code, one cannot be entirely certain
that a piece of code detected in a document is legitimate or not, unless it is
discovered and embedded in an object that typically does not contain code.
Simply stated, modern document formats provide a convenient object-
container format and constitute thus a convenient and easy to use
"code-injection platform."
To better illustrate the complexity of the task of identifying malcode in doc-
uments through a concrete study, we limit our investigation to Microsoft Word
document files; Word documents serve as a "container" for complex object em-
beddings that need to be parsed and executed to render the document for display.
In addition to the well known macro viruses, two further possible scenarios are
introduced bellow:
Execution strategies of embedded malcode: From the attackers perspec-
tive, the optimal attack strategy is to architect the injected code as an embedded
object that would be executed automatically upon rendering the document. In
addition to automated techniques such as the WMF, PNG and JPEG vulnera-
bilities, an attacker can also use social engineering whereby an embedded object
in a document, appearing as an icon, is opened manually by the user, launch-
ing an attack including attacks against third-party vulnerable applications. The
left-side screen shot of Fig. 1 is an example of a Word document with embedded
malcode, in this case a copy of the Slammer worm, with a message enticing a
user to click on the icon and launch the malcode.
Dormant malcode in multi-partite attacks: Another stealth tactic is to
embed malcode in documents that does not execute automatically nor by user
intervention when the document is opened, but rather lies dormant in the file
store of the target environment awaiting a future attack that would extract the
hidden malcode. This multi-partite attack strategy could be used to successfully
Page 3
A Study of Malcode-Bearing Documents 233
embed an arbitrarily large and sophisticated collection of malcode components
across multiple documents. The right screen shot in Fig. 1 demonstrates another
simple example of embedding a known malicious code sample, in this case also
Slammer, into an otherwise normal Word document. The document opens en-
tirely normally, with Slammer sitting idly in memory. Both infected files can
open normally in a Windows environment. However, the right one appears with
no discernible differences from a normal document while a different document
could incorporate this Slammer-laden document when it is opened, and invoke
the malcode contained therein. Although real-world attacks identical to our ex-
ample have not appeared, similar scenarios that combine multiple attacks have
been studied. Bontchev [5] discussed a new macro attack that can be created by
combining two known malicious macros. (e.g., a macro virus resides on a ma-
chine, another macro virus reaches it, and "mutates" into a third virus.) Filiol et
al. [7] analyzed the complexity of another type of viruses named k-ary viruses,
which combine actions of multiple attacks.
Fig.1. Left: A screen shot of an embedded executable object to entice the user to
click and launch malcode. Right: Example of malicious code (Slammer) embedded in
a normal document.
Our aim is to study the effectiveness of two techniques that have been applied
in the context of "traditional" network worms: statistical analysis of content to
identify portions of input that deviate from expected normal content as esti-
mated from a training corpora, and detection of malicious behavior by dynamic
execution on multiple, diverse platforms. The challenge is to find a method to
inspect the binary content of any document file before it is opened to determine
whether it is suspicious and may indeed be infected with malicious code without
Page 4
234 W.-J. Li et al.
a priori knowledge of the specific code in question or where it may be embedded
in the document.
Initially, we explore the detection capabilities of statical analysis techniques.
More specifically, we investigate the application of statistical modeling tech-
niques to characterize the typical content of documents. Our goal is to deter-
mine whether we can detect embedded malcode using statistical methods on
the binary file content. Furthermore, we introduce novel dynamic run-time tests
that attempt to expose the attackers' actions through application diversity: we
open the files using a set of different implementations of document processing
application in a sandboxed environment. To quantify the detection capabili-
ties of statistical analysis, we perform a series of experiments where statistical
analysis is applied to labeled training documents to characterize both normal
and malicious document content. Our experiments show that statistical analy-
sis techniques outperform generic COTS Anti-Virus (AV) scanners. To further
improve our detection capability, we designed novel tests that harness the ap-
plication diversity to expose malicious byte-code. In these tests, documents are
opened in a diverse set of sandboxed and emulated environments exposing ma-
licious code execution. We show that in most cases, malicious code depend on
operating system or program characteristics for successful completion of its ex-
ecution. In the process of our experimentation, we discovered that attackers use
existing benign documents as vehicles for their attack. Thus, we can further im-
prove our classification if we use benign documents from the Web to train our
detectors since even small deviations from normality can expose an attack.
Our results indicate that both static statistical and dynamic detection tech-
niques can be employed to detect malicious documents. However, there are some
weaknesses that make each method incomplete if used in isolation. For statis-
tical analysis, we would like to be able to determine the "intent" and "effect"
of the malicious code. On the other hand, dynamic tests may fail to detect the
presence of stealthy malcode that is designed to hide its actions. Hence, neither
technique alone will solve the problem in its entirety. We posit that a hybrid
approach integrating dynamic and static analysis techniques will likely provide
a suitable solution.
Paper Organization: The next section discusses related work and research
reported in the literature. Section 3 describes the static statistical approach
including an overview of the byte-value n-gram algorithm, the SPARSEGui pro-
gram and the experimental results. We introduce the dynamic run-time tests
and the use of application diversity in Section 4. Section 5 concludes the paper
with suggestions that perhaps collaborative detection methods may provide a
fruitful path forward.
2 Background and Related Work
Probabilistic modeling in the area of content analysis mainly involves n-gram
approaches [8,9,10]; the file binary contents are measured and the distribution
Binary Content File Analysis
Page 5
A Study of Malcode-Bearing Documents 235
of the frequency of 1-gram, as well as each fixed size n-gram, is computed. An
early research effort in this area is the Malicious Email Filter [11], using a naive
Bayes classifier algorithm applied to the binary content of email attachments
known to be viral. The classifier was trained on both "normal" executables and
known viruses to determine whether emails likely included malicious attachments
that should be filtered.
Others have applied similar techniques including, for example, Abou-Assaleh
et al. [12,13] to detect worms and viruses. Furthermore, Karim et al. suggest that
malicious programs are frequently related to previous ones [14]. They define a
variation on n-grams called "n-perms" An n-perm represents every possible per-
mutation of an n-gram sequence, and n-perms can be used to match possibly
permuted malicious code. McDaniel and Heydari [15] introduce algorithms for
generating "fingerprints" of file types using byte-value distributions of file con-
tent. However, instead of computing a set of centroid models, they compute a
single representative fingerprint for the entire class. This strategy may be un-
wise. Mixing the statistics of different subtypes and averaging of the statistics of
an aggregation of examples may tend to loose information. A report from AFRL
proposes the Detector and Extractor of Fileprints (DEF) process for data pro-
tection and automatic file identification [16]. By applying the DEF process, they
generate visual hashes, called fileprints, to measure the integrity of a data se-
quence, compare the similarity between data sequences, and to identify the data
type of an unknown file. Goel [17] introduces a signature-matching technique
based on Kolmogorov Complexity metrics, for file type identification.
2.2 Steganalysis
There exists a substantial literature on the subject of steganography, the means
of hiding secret messages embedded in otherwise normal appearing objects or
communication channels. We do not provide an analysis of this area since it is
not exactly germane to the topic of identifying embedded malcode in documents.
However, many of the steganalysis techniques that have been under investigation
to detect steganographic communication over covert channels may bear resem-
blance to the techniques we applied during the course of this research study.
For example, Provos' work on defeating steganalysis [18] highlights the difficulty
of identifying "foreign" material embedded cleverly within media objects that
defeats statistical analysis while maintaining what otherwise appears to be a
completely normal-appearing objects, e.g., a sensible image.
The general class of steganographic embedding of secret messages may be
viewed as a "mimicry" attack, whereby the messages are embedded in such a
fashion as to mimic the statistical characteristics of the objects in which the
messages are embedded. Our task in this project was a more limited view of
the problem, to identify embedded "zero day malcode" inside documents. The
conjecture that drives our analysis is that code segments may be limited to a
specific set of statistical characterizations so that one may be able to differentiate
code from other material in which it is embedded; i.e., code embedded in an
image may appear to have a significantly different statistical distribution to
Page 6
236W.-J. Li et al.
that of the class of images used to transport it. Unfortunately, this tends not
to be true especially with a crafty adversary capable of generating obfuscation
techniques that shape the appearance of the code's binary content to have a
user-chosen statistical distribution. One presumes that the attacker knows the
particular statistical modeling and testing technique applied while shaping their
embedded code to pass the test. Such techniques are being honed by adversaries
fashioning polymorphic attack engines that change a code segment and re-shape
it to fit an arbitrary statistical distribution, to avoid inspection and detection.
2.3Polymorphic Code Generation Tools
Polymorphic viruses are nothing new; "1260" and the "Dark Avenger Mutation
Engine" were considered the first two polymorphic virus engines, written in the
early 90s. Early work focused on making detection by COTS signature scan-
ners less likely. Polymorphic worms with vulnerability-exploiting shellcode, e.g.,
ADMutate [19] and CLET [20], are primarily designed to fool signature-based
IDSes. CLET features a form of padding, called cramming, to defeat simple
anomaly detectors. However, cram bytes are derived from a static source, i.e.,
instructions in a file included with the CLET distribution; while this may be
customized to approach a general mimicry attack, it must be done by hand. An
engine crafted by Lee's team at Georgia Tech [21] had this purpose in mind; an
attack vector was morphed by padding bytes guided by a statistical distribution
learned by sniffing the environment in which the code would be injected, hence
allowing the code to have a "normal" appearing statistical characterization. This
engine targeted the 1-gram distributions computed by the PAYL anomaly de-
tector; the obfuscation and evasion technique was subsequently countered by
the Anagram sensor that implements higher-order n-gram analysis. The core
algorithm in the Anagram sensor is the basis of the zero-day malcode detec-
tion algorithm employed in SPARSEGui as described briefly later, and which we
consider to be related to the Shaner algorithm [22] devised to classify files into
their respective types. During the course of our tests using thousands of Word
documents provided, we found that performance was hard to improve without
carefully redistributing training data. In addition, Song et al. [23] also suggest
it is futile to compute a statistical model of malicious code, and hence identi-
fying malcode embedded in a document may not be the wisest strategy. Hence,
we also applied a dynamic test approach to compare against the static analysis
approaches, implemented as the VM-based test facility described in Section 4.
2.4Dynamic Sandbox Tests
Sandboxing is a common technique for creating virtual environments where it is
safe to execute possibly unsafe code. For example, Norman Sandbox [24] simu-
lates an entire machine as if it were connected to a network. By monitoring the
Windows DLLs activated by programs, it stops and quarantines programs that
exhibit abnormal behavior. Since this is a proprietary commercial system, it is
unknown exactly how abnormal behavior is determined. Willems et al. present
Page 7
A Study of Malcode-Bearing Documents237
an automated system call analysis in a simulated environment, the CWSandbox
[25]. They use API hooking: system calls to the Win32 API are re-routed to
monitoring software that gathers all the information available to the operating
system. Instead of using a virtual environment, TTAnalyze [26] runs a CPU em-
ulator, QEMU, which runs on many host operating systems. Recently, Microsoft
Research developed BrowserShield [27], a system that performs dynamic instru-
mentation of embedded scripts. Similar in spirit to our approach, BrowserShield
is designed to detect embedded malcode implemented as HTML scripts which
would otherwise be undetectable using static analysis alone.
In this paper, we employ virtual machines running Word-processing applica-
tions on diverse platforms; in one case, the native implementation on Windows,
in another, a Windows emulation environment running under Linux hosted by
a virtual machine. This architecture is easy to implement, and provides a safe
means of learning expected behavior of Word document processing under dif-
ferent implementations, using the multiple platform diversity as an additional
source of information to identify malcode.
3 Statistical Analysis
As a first effort to identify malcode-infected documents, we used static inspection
of the statistical byte sequences of binary content. Our intuition is that the binary
content of malicious Word documents contains substantial portions of contiguous
byte sequences that are significantly different (abnormal) from typical/benign
Word documents. Our approach is reminiscent of corpus-based machine learn-
ing in natural language processing of human-generated content. The goal is to
explore the detection capabilities and limitations of statistical characterization
given the available training data. We will start by introducing the tools we used
to perform the static analysis and experiments.
3.1The POI Parser and SPARSEGui
A document may contain many types of embedded objects. To achieve any rea-
sonable level of detection performance, we found it necessary to "parse" the
binary file format into its constituent embedded object structure and extract
the individual data objects, in order to model instances of the same types to-
gether, without mixing data from multiple types of objects.
We used the open-source Apache POI [28] application, a Java implementation
of the OLE 2 Compound Document, to decompose Word files into their exact,
correct constituent structures. The parsed object structures in the binary content
of the files will be referred "sections." We further modified the POI software so
that the location of each object within a Word file is revealed. These sections
include header information, summary information, word document, CompObj,
1Table, data, pictures, PowerPoint document, macros, etc. Fig, 2 displays the
histograms of byte content of four common sections whose differences are easy
to observe.
Page 8
238W.-J. Li et al.
Fig.2. Byte occurrence frequency of WordDocument, 1Table, Macros, and Data. The
byte values were parsed from 120 benign Word documents containing macros. In these
plots, the byte value 0 and FF were removed because they occurred relatively much
more frequent than the others and will mess up the display.
SPARSEGui includes a number of the modeling techniques described and
calls upon the POI parser to provide the means of displaying detailed informa-
tion about the binary content of Word files as well as presenting experimental
results to the user. The experimental results in the remainder of this paper were
produced using this toolkit. This program was designed not only to implement
the methods described herein but also to provide a user-friendly interface which
can extend to analyst information for deeper inspection of a suspect Word file.
A screen shot is shown in Fig. 3 in Section 3.4.
3.2 Statistical Content-Based Detection
To evaluate whether statistical binary content detectors can effectively detect
malcode embedded in documents, we used the Anagram [8] algorithm. Although
Anagram was originally designed to identify anomalous network packet payloads,
it is essentially an efficient approximation of Shaner's algorithm [22] enabling
us to detect malicious binary content. Anagram extracts and models high-order
n-grams (an n-gram is a sequence of contiguous n byte values) exposing signif-
icant anomalous bytes sequences. All necessary n-gram information is stored to
highly compact and efficient Bloom filters [29] reducing significantly the space
complexity of the detection algorithm. Contrary to the original 1-class modeling
technique applied to the PAYL algorithm [30], we introduce the same mutual-
information strategy as suggested by Shaner. Hence, we utilize both "good" and
"bad" models that are generated using labeled benign and malicious datasets, re-
spectively. In this way, we train one benign and one malicious model and classify
the files by comparing the score computed against both models.
As a next step, we had to determine the optimal n-gram size that best cap-
tures the corpus of our documents. To that end, we evaluated the detection
performance and storage requirements of all Anagram models with gram size
Page 9
A Study of Malcode-Bearing Documents 239
from 4 to 8 bytes. Although larger sized grams can capture more fine-grained
information, they can significantly increase the space requirements of Anagram
both in terms of runtime memory and in terms of storage. Therefore, for higher
ordered grams, a larger Bloom filter is required to avoid having collision that can
lead to false positives. The detailed discussion of the size of grams and the use of
Bloom filters is beyond the scope of this paper since it depends on the memory
usage, the type of data analyzed, and the implementation of Bloom filters [31].
Based on the results of our experiments, we selected the 5-gram model, which
consumed reasonable memory and accurately detects attacks.
However, the performance of our statistical methodology was also dependent
upon the amount and quality of our training set: without a sufficient training
corpus, the detector may produce too many false positives. On the other hand,
using a very broad set of documents can produce an augmented and under-
trained normality model increasing our false negative rate. To minimize these
issues, we generated a model of what we considered as "normal" behavior us-
ing Anagram on benign documents. Our aim is to then use Anagram in testing
mode on unknown documents to ferret out documents with abnormal content,
indicative of zero-day malcode embedded within the document in question. We
posit that by generating organization or group specific benign and malicious be-
havior models, we can further facilitate the detection. The assumption is that
documents being created, opened and exchanged within a specific group should
be similar, and malicious documents' byte content should be significantly dif-
ferent from them. For the benign data corpus, we collected 4825 samples from
two anonymous organizations using wget over their public facing web sites (1775
and 3050 documents for each group). In addition, we downloaded 2918 real-world
malicious documents from VX Heavens1[32].
We used two different approaches to build the normality models. The first
method is more coarse-grained and involves scanning and storing all the n-grams
from the collected documents creating two separate training sets: one for the be-
nign and one for the malicious model. In the testing/detection phase we compare
the n-grams obtained from the documents under test with both the benign and
malicious models generating a "similarity score." This score is the ratio of the
number of testing n-grams that exist in the training models to the total number
of testing n-grams. Testing documents are classified according to the similarity
scores they receive from the two models. Documents that receive the same score
for both models are deemed malicious. The other approach involves generating
multiple normality models corresponding to different document sections instead
of using just a single model. Thus, the training documents are parsed and the
models are created using the parsed sections, one model for each section. Differ-
ent sections are text, tables, macros, and other more rare data objects. For each
of the section, a weight is assigned. During testing phase, we compare the grams
of each of the section from the unclassified document to the ones generated dur-
ing training. The final similarity scores for each testing document are computed
1These experimental datasets can be reached from our web site for interested readers:
Page 10
240W.-J. Li et al.
by summing up all of the scores for the individual sections. Thus, we categorize
the document under question based on how similar it is to the benign and the
malicious section models. The advantage of this method is that different types
of embedded objects are not mixed together, so the classification will be more
For this second method, it is essential to discover the appropriate weights for
each section. Although we can easily parse the documents into different sections,
we cannot identify which of the sections are malicious even when we know that
the whole document is malicious since a document can have section interdepen-
dencies. As a result, an appropriate weight for each section cannot be "learnt"
by repetitive training/testing. To address this problem, we use the normalized
byte size of each testing section as weight.
3.3Performance Evaluation
We evaluated our statistical content-based techniques using the data we collected
on Web. Furthermore, we compared our approach to a COTS AV scanner to both
verify and measure our detection performance. In our experiments, we used a
standard 5-fold cross-validation scenario, in which data were equally split into
five groups, and when each group was tested, the other four were used as training
data. All of the pre-mentioned 4825 benign and 2918 malicious documents were
tested. In all of our experiments we used an Intel(R) Xeon(TM) CPU 2.40GHz,
with 3.6GB memory, running Fedora 3. Depending on the file size, the overhead
varied when training/testing a document. The average time to parse or test a
file was 0.226 seconds, and the standard deviation was 0.563 seconds. Table 1
presents the experimental results of both methods. The overall performance of
Method 2, taking advantage of the parser, was highly accurate and superior
to the performance of Method 1. However, the false positive rate of Method 2
was slightly higher than that of Method 1 because Method 2 provided a more
detailed comparison. Unfortunately, Method 2 created a more sensitive classifier
leading to a slight increase in false positives.
Table 1. Detection results of 5-fold cross-validation. Method 1: Train one single model
without parsing. Method 2: Train multiple models for the parsed sections.
Method 1
92.32% / 7.68% 98.69% / 1.31%
0.02% / 99.98% 0.15% / 99.85%
Method 2
Total Accuracy 99.22%
The most recently patched AV scanners have the signatures of all of the mal-
ware collected from VX Heavens rendering our dataset inappropriate for further
comparing our approach to general COTS AV scanners. Hence, we prepared a
second malicious dataset consisting of 35 (10 benign and 25 malicious) carefully
crafted files where ground truth was unknown to us before the test. A third-party
evaluator created this set of test files for a complete "blind test" of our analysis
Page 11
A Study of Malcode-Bearing Documents241
results. For this test, we trained one model over the 2918 malicious documents
and another model using one group of the benign documents we collected (both
groups of data had the same final result). After verifying the testing results
of these 35 files when ground truth was disclosed, 28 were correctly classified,
shown in the first column of Table 2. Note that the numbers in the table are
the actual numbers instead of percentages. We achieved zero false positive, but
a significant number of false negatives appeared.
Table 2. Detection results of the 35 files. Stat.1: Statistical test, Stat.2: Statistical test
with improved strategy, AV: COTS AV scanner
Stat. 1 Stat. 2 AV
18/723/2 17/8
0/100/10 0/10
Total Correct 27
Our statistical analysis technique performed slightly better than a COTS AV
scanner, whose result is shown in the third column of Table 2. Our success can be
attributed to the fact that we were able to model enough information from the
malicious document training set to at least "emulate" the AV scanners with up-
to-date signatures. Additionally, the strategy of computing normal models over
an organization's specific set of normal documents produced a model that could
detect anomalous events, i.e., the zero-day attacks. However, in this 35-file test,
some small, well crafted malcode cleverly embedded in malicious documents were
very hard to detect mainly because of their relatively small size in comparison
to the whole documents. Statistics based detection mechanism performs poorly
in this case. Therefore, we introduce a further strategy.
3.4 File Content Differences Identify Embedded Malcode
It is possible that an adversary may carefully craft malcode and embed it within
a document chosen from a public source. In their effort to blend, attackers would
rather use existing public documents since crafting their own documents could
contain private or proprietary information that might identify them. Further-
more, an attacker may devise an attack without paying particular attention to
the viewable readable document text portion. Malicious documents may contain
what might be regarded as "gibberish" material. To generate a benign-looking
document, an attacker can mine random benign documents from the Web and
embed malcode in them. In that case, comparing the test document to the orig-
inal or even similar benign document found on the Web can narrow down the
detection region and increase the detection accuracy.
Fig. 3 presents a screen shot of SPARSEGui comparing an original benign host
document and the infected version of the same document. (The host document
was a document accessible on the Internet.) The left two charts represent the
byte values, ranging from -128 to 127, of these two documents, the original and
Page 12
242W.-J. Li et al.
infected one respectively. In addition to the byte values, the n-gram entropy
values, defined as the number of distinct byte values over an n-gram, are shown
in the right two charts. To clearly exhibit the anomalous portion, n is assigned
to 50 (i.e., 50-gram) in this figure. In this case, the infected document has a
clearly discriminable high entropy portion. Having observed several similar cases,
we also discovered that such portions bearing malcode usually contain foreign
grams, i.e., never-seen-before grams, which is displayed by using bold characters
in the bottom panel of Fig. 3. To evaluate if foreign grams or entropy of foreign
grams can provide information to locate suspicious code remains an item for
future work.
Fig.3. SPARSEGui screen-shot: parse a benign document and compare its infected
In the prior experiments, the detector produced 7 false negatives. It appears
that some of them were crafted based on random benign documents found on
the Web. Such "mimic attacks" could evade our statistical content-based de-
tector. Therefore, we developed the following detection strategy: we first parse
the inspected document (D1) by using SPARSEGui and take a portion of the
text as tokens in a Google search. In case where a document (D2) is found on
the Web to have at least 90% of its content in common with D1 (but less than
Page 13
A Study of Malcode-Bearing Documents243
100%), we extract the n-grams from D1 that do not appear in D2. Then, they
are computed against the trained Bloom filters and classified to which class it is
close, i.e., benign or malicious. Without increasing false positives, this strategy
detected 5 malicious documents that were misclassified in the previous 35-file
test. Shown in the second column of Table 2, the result was superior to the
tested COTS AV scanner.
The 35 test files were purposefully chosen and crafted to avoid detection by
statistical means. Even so, we were able to detect almost all of the malicious
documents without false positives. However, we did misclassify two malicious
documents. Given our performance under such an adverse testing set, we believe
that our results demonstrate that our approach has merit and warrants further
investigation to improve upon detection performance.
Additionally, our experiments reveal another principle: to validate whether
some portion of a document has embedded malcode, mutual collaboration across
sites could help identify hidden malcode. Sites that cooperate to detect malcode-
laden documents and that share suspect documents could validate that indeed
malcode hidden in documents has been discovered. The privacy-preserving shar-
ing of suspect documents among sites is posited as a useful next step in reducing
the threat posed by malicious documents appearing openly on the Internet.
A general observation for all the static statistical approaches is that they ex-
hibit inherent limitiations in detecting malicious documents. First, any machine
learning or statistical method for that matter, is entirely dependent upon the
amount and quality of the training corpus. In general, it is not known a priori if
the sample of data available to train and test models is truly representative of a
particular empirical distribution from which test cases will be drawn. Without
sufficient and representative training data, it is both practically and theoreti-
cally infeasible to compute a meaningfull statistical model. In addition, mali-
cious content can be crafted with extremely small portions of malcode spreading
throughout a section of a document. Compared to the entire file, which is usually
substantially larger, the embedded malcode is very hard to detect. The shorter
the sequence of code, the higher the likelihood that a static-analysis detector will
miss it. On the other hand, far too many false alarms may be generated if the
sensitivity of the detector is raised too high. Lastly, statistical tests may indeed
find portions of a document that contain code, but the binary content of the de-
tected foreign code may not identify the "intent" of embedded code. Hence, we
investigated an alternative dynamic run-time technique that can improve upon
the statistical content-based analysis.
4Dynamic Run-Time Tests Using Environment Diversity
In this section, we introduce a series of dynamic tests that exploit the diversity of
emulation environments to expose malicious documents. Our goal is to determine
whether opening a malicious document under an emulated environment can force
the malicious code to exhibit easily discernible behavior which deviates from
normal and hence identify malicious documents. We show that this behavioral
Page 14
244W.-J. Li et al.
deviation clearly indicates the existence of malicious code inside the file under
In this case, we did not implement complex instrumentation nor did we ap-
ply API hooking to monitor the execution of Word; the implementation of the
experimental test bed we built is straightforward: we open documents using the
same Microsoft Word executable on different environments both emulated and
non-emulated. To avoid damaging our system and to be consistent in applying
the same test environment to each file, we ran experiments in a virtual machine
(i.e., sandbox) with an identical setup for each test. After each file is tested,
we reload the VM image and test the next document. For our prototype, we
used VMware WorkStation software installed on the same host machine. For the
VM hosted operating system, we installed Linux (Fedora). In that hosted Linux
we installed CrossOver Office Standard 5.0.1, a Windows binary translator and
emulator. In addition, we had another VM hosting Windows XP and the same
version of Microsoft Office (Word 2003) that was used for CrossOver. Based on
the observables, we introduce a series of three tests which are referred to as Test
1 (OS crash), Test 2 (Unexpected changes), and Test 3 (Application failure).
4.1Test 1 – OS Crashes
Applications need to interact with the operating system via libraries and system
calls in order to perform even the simplest tasks such as reading or writing a
file. In Windows, this happens through the loading of Dynamic Linked Libraries
(DLLs), which are loaded both at the beginning of the application's execution
and on demand. In large programs, such as Microsoft Word or other applications
in the MS Office suite, the number of required DLLs is very large (two to three
dozen, depending on the application and the features used by the file loaded).
Some of these DLLs are necessary for the program to startup. Most of the rest of
the DLLs that the application loads at runtime are required to execute and ren-
der the embedded objects and macros after the document is opened. We use the
emulated Windows environment on Linux as a concept of changing the loading
order of DLLs from the original Windows. Then, the code exceptions depend-
ing on this exact order can be revealed. We conjecture that such exceptions,
which lead to program and system crashes, are indicative of malcode: normal,
non-attacking objects and macros should not depend on the loading order of the
DLLs but only on whether the needed DLLs are actually loaded. Based on this
hypothesis, a document is opened under the emulated environment to determine
if it crashes the application or the underlying operating system. If it does, we
declare the document as malicious.
4.2Test 2 – Unexpected Changes to the Underlying Environment
Test 1 limits our ability to identify malicious documents because most malicious
documents may succeed in executing the embedded malcode yet may not crash
the test environment.
In the second test, we expand the set of what we deem as abnormal behavior to
include all easily observable malicious changes to the hosted operating system.
Page 15
A Study of Malcode-Bearing Documents245
We run the second test after applying the first test and only to documents
that fail to be labeled malicious in the first test. Thus, if the document can
be opened without any fault or catastrophic error, we examine all the platform
files generated or modified by the Word process, i.e., we compare the system
right before and after opening a testing document. Our goal is to determine if
there are unexpected differences recorded when the malcode embedded in some
malicious documents are executed but do not terminate the Word process with
a failure or crash.
However, executing the application on multiple environments by opening be-
nign documents may also produce differences in runtime behavior. Hence, there
is a small probability that a benign Word document might exhibit different exe-
cution behavior (but not failure) under an emulated platform. To minimize such
false positive errors, we first train 1000 benign and 1000 malicious documents
and gather all of the changes observed to the underlying systems after opening
the files. We then generate a list of expected (benign) and unexpected (mali-
cious) changes based on the nature of the document examined. These changes
include temporary file creation, data file change such as index.dat, and registry
modification. All changes, or the lack of changes, can be used to identify malcode
execution. Currently, 27 registry keys are checked in our model, some of them
are shown in Table 3, and a Java program is used to automatically verify the
Table 3. The list of registry keys that may be modified after opening a Word document
[Software//Microsoft//Windows NT//CurrentVersion//Fonts]
[System//CurrentControlSet//Control//Print//Environments//Windows NT x86
//Drivers//PS Driver]
[Software//Microsoft//Office//11.0//Word//Text Converters//Import//MSWord8]
When we applied Test 2 to classify the same documents in Test 1, we observed
a substantial increase in the true positive rate. This was something we expected
since we increased the set of what we deemed as abnormal behavior. However,
some malcode may be considerably more "quiet" and "stealthy" and not produce
any observable malicious changes to the underlying system. Hence, we apply a
third and final test to determine if any easily discernible application behavior
indicates the execution of malcode.


text:
Join Now
Sign in
Remember me
Forgot your password?
Contact Us
Privacy & Security
Soccer America Daily
Soccer World Daily
Special Edition
Around The Net
Soccer Business Insider
College Soccer Reporter
Youth Soccer Reporter
Soccer on TV
Soccer America Classifieds
Paul Gardner: SoccerTalk
Soccer America Confidential
Youth Soccer Insider
World Cup Watch
RSS Feeds
Manage Subscriptions
Order Current Issue
Manage My Subscription
Renew My Subscription
Gift Subscription
My Account
Join Now
Tournament Calendar
Camps & Academies
Soccer Glossary
Advanced Search
Section 2 Around the Net
> Monday, Nov. 28, 2011
Uruguay coach's wife attacked with acid
by Soccer America
Silva Martinez, the wife of Uruguay coach Oscar Tabarez, was attacked by two men with a corrosive liquid that burned her face and arms on Saturday in Montevideo.
Read the whole story
Togo club in tragic bus accident
by Soccer America
Six members of the Togo's Etoile Filante soccer club died in a bus accident on Saturday in Togo and 25 people were injured. The team was headed to Sokode, where it was scheduled to play Sunday, when a tire reportedly burst, causing the bus to flip and catch fire.
Read the whole story
Players get long ban for butt celebration
by Soccer America
Last month in Iran, Persepolis defender Mohammed Nosrati groped the backside of his teammate, Sheys Rezaei, while celebrating a goal in a nationally televised match.
Read the whole story
'Great World Cup' in 2014, predicts Brazilian sports boss
by Soccer America
Speaking at the opening ceremony of Soccerex in Rio de Janeiro, Brazil sports minister Aldo Rebelo tried to allay fears that corruption investigations and delays will tarnish the 2014 World Cup to be staged by his country.
Read the whole story
Chivas Guadalajara ousted in quarterfinals
by Soccer America
For the fourth consecutive season, the Mexican league's regular-season's top team was eliminated from the playoffs at the quarterfinal stage.
Read the whole story
Barcelona's streak ends; Real Madrid surges
by Soccer America
Barcelona's 27-game unbeaten streak ended Saturday when the three-time defending La Liga champion lost, 1-0, to Getafe, whose Juan Valera scored in the 67th minute with a header off a corner kick.
Read the whole story
Recent Most Read Stories
Soccer on TV
Why is Thierry Henry a Little Pea-ved?
Garber vs. Klinsmann, different timetables and goals
Three takeaways from USA-Mexico U-23s
Small-Sided Games: A Key to More Technical Players
Most Current News »
Previous Issues
Saturday, Jan 17, 2015
Thursday, Jan 15, 2015
Wednesday, Jan 14, 2015
Tuesday, Jan 13, 2015
Monday, Jan 12, 2015
Friday, Jan 9, 2015
Thursday, Jan 8, 2015
Wednesday, Jan 7, 2015
Tuesday, Jan 6, 2015
Monday, Jan 5, 2015
More Issues »

subset: commoncrawl


text:
Released: Jan 29th, 2008
Running Time: 150 Min.
Director: Juan Cuba
Companies: Red Light District, Pulse
Sierra Snow, John Strong, Mark Wood, Lora Belle
Critical Rating: AAAA
Genre: Gonzo
South Beach in Florida has become quite popular for shoots of late, and this easily explains why.
Robyn Lee is among the girls picked up by Mark Wood and John Strong, and she chooses Strong to show off her fucking abilities. She is a beauty: new to the biz, young, busty, cute as hell, sucks a mean cock and accommodates Strong's likings. Sigh. Another newbie, Lora Belle has heartbreaker potential and, without hesitation, straddles Wood on a condo balcony for all to see.
This thickly packaged release also comes with a randomly inserted second full DVD title.
Pre-nom: Best Gonzo Release.
Retailing: Damn good intro to South Beach talent with young gals doing the nasty. Recommended.


text:
Aba Search and Replace 2.3
Sponsored Links
Aba Search and Replace 2.3 Ranking & Summary
User Review:
0 (0 times)
File size:
Date added:
Aba Software
Aba Search and Replace 2.3 description
Aba is a tool for replacing text in multiple files. With Aba, you can quickly correct errors on your web pages, replace banners and copyright notices, change method names, and perform other text-processing tasks. Features: search-as-you-type interface, multi-line search and replace, regular expression support, Unicode support (UTF-8 and UTF-16), search history and favorites, undo for any replacement.
Aba Search and Replace 2.3 Screenshot
Aba Search and Replace 2.3 Keywords
Bookmark Aba Search and Replace 2.3
Aba Search and Replace 2.3 Copyright
WareSeeker.com do not provide cracks, serial numbers etc for Aba Search and Replace 2.3. Any sharing links from rapidshare.com, yousendit.com or megaupload.com are also prohibited.
Featured Software
Want to place your software product here?
Please contact us for consideration.
Contact WareSeeker.com
Related Software
Aba is a tool for replacing text in multiple files. With Aba, you can quickly correct errors on your web pages, replace banners and copyright notices, change method names, and perform other text-processing tasks. Free Download
Aba Search & Replace is made to be a smart and proper program which assists you in replacing text in several files used to be a tedious and error-prone task. Free Download
A very fast and simple application to search for and replace text in a single... Free Download
Find and replace text in files and MSWord and HTML documents - a (multi-line) text, whole words. Special for HTML tags and attributes. Replace, delete, insert .. operations. Search in headersfooters, hyperlinks, text frames in MSWord documents. Free Download
Multiple Search and Replace is depicted as a handy, smart and efficient utility that can search and replace text in multiple files at the same time. Free Download
Actual Search & Replace is well-known as a handy as well as reliable software which is used to find files and execute search-and-replace operations across multiple files. Free Download
Global Search And Replace is developed to be an interesting as well as helpful tool which you can easily update many contacts, appointments or tasks with this handy tool. Free Download
EPiServer Search And Replace is considered as a simple to use yet beneficial program which provides the ability to search and replace content within an EPiServer site. Free Download
Latest Software
Popular Software
Favourite Software


text:
Some nice details like wheels but a little more ostentatious than my idea but looks pretty cool. If you take away the doors and middle part thats cool. Cheers bit of inspiration. The thinner wheels are a good idea making in the inside viewing area bigger.
Need to find some time and get some good sketches done, really need to move this on to the next level. nice ideas with the beetle form aggressive and futuristic, will spend some time thinking and designing rather than 5min drawing before bed.
If any one has any more criticisms or ideas or even really like it then please leave a comment.
Extreme Sports 2020!
Started by
, Jul 04 2007 03:04 AM
30 replies to this topic
#31 Guest_cholden_*
Posted 20 August 2007 - 01:34 PM
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users


text:
Thread Tools |
Hi! I didn't even know this craft forum existed here...I guess I spend most of my time over in gentle discipline!
I am going to browse around a little later today, but wanted to beg and plead for any craft ideas for my 9 y.p. dd's birthday party THIS WEEK! She is having about 7 girls over and she wants to do crafts...I thought this was going to be so easy to put together but so far, we have not found any crafts that we are crazy about. I'd like them to be somewhat meaningful, but at the same time, I'm hoping to not spend too much money.
One thing she wants to do is make magnets out of those clear pebble marbles. They should be cute.
Other than that, I've got nothing!! HELP! I'm not really the craftiest person.
Thanks mammas!!!
Sponsored Links | |||
Advertisement |
maybe buy wooden letters in the girls' (first name) initials, and let them paint them? i'd use acrylic paints.
or make paper dolls or collage art? something from magazines or paper, if you don't have supplies and need inexpensive ideas. (hth)... good luck!
Mama to 3 boys
Hi and thanks so much for your reply ms. shell!
I wanted to share what my dd has finally settled on in terms of a craft projects for her birthday:
Glass marble magnets like the ones here: http://www.notmartha.org/tomake/marblemagnets/ and
these cute clay bead necklaces from http://www.marthastewart.com/photogallery/kids-accessories#slide_16
lol...just realized one is from marthastewart.com and the other from notmartha.org!
Should be fun!! :)
Thanks again!
Thread Tools | |
Posting Rules | |


text:
Report this pic
3 Discussions
1 Tips
0 Resources
My Story:
There is no story for this user right now.
Latest Activity
Filter by:
Discussion (3)
Tip (1)
Resource (0)
pain meds
State laws are different, i am in north carolina and recieve 240 30mg Roxicodone (which is...
Posted by
State laws are different, i am in north carolina and recieve 240 30mg Roxicodone (which is just oxycodone instant release), so check with your pharmacist or Dr. about your state. Their is no federal law prohibiting the amount. I used to take 120 roxicodone and 90 80mg Oxycontin which works best. Taking a short acting for breathru pain, and a long acting for everyday use. Roxies only last 2 - 4 hours, dont let anyone tell you diff., after a few months the 12 hour relief from oxycontin will dwindle to 6-8 hours. However remember at least for me pain meds will compound so if you forget a dose you screw yourself for a couple days. Stay on a scedule that works for you! If you feel you can't talk to your doc about this you need to find a new doc. I am 31 and on narcotics for the last 8 years. I am not a dr. but a WELL informed citizens who knows and has taken most everything out there including addiction drugs i.e. subutex suboxone, methadone, and researched the new one a shot i think started with a v? just got fda approval for the treatment of opied addiction and herioin etc. has been used since 2006 for alcohol. It took me over a year and 10 doctor to find one i could talk to HONESTLY and not tell them what they want to hear. I am happy to talk to anyone with questions or problems!!
View Thread
Posted by
6 Replies
Watch This Discussion
Report This
| Share this:
pain meds
State laws are different, i am in north carolina and recieve 240 30mg Roxicodone (which is...
Thanks for your Reply!
Your reply violates WebMD's rules. The issue is
highlighted in red
Please correct the issue, then click Submit.
Your text:
Your Reply
Post my
anonymously (without my username)
Put this on my Watchlist and alert me by email to new posts


text:
Hi everybody, I was wondering if somebody could help me find a chart or a table with electron attenuation lenghts or cross-sections in matter. I've searched the Internet inside-out but even if I would find something, it would be articles that you have to pay for . Still it seems a normal and trivial information to find somewhere. So if somebody has a handbook or something with that information - please let me know. Thanks a lot. Mike.
Perhaps you need the bethe bloch equation? Not sure how useful it is for electrons. i don't know if its still used but as i recall it allows you to adjust certain constants that are typical of the soild you are using and calculate the the velocity damping. (or at least the energy loss as a function of distance) You could maybe use it to calculate something yourself. Or do you need much data or already publsihed results to compare to? Is the CRC a possibility?
I don't quite understand what it is that you're looking for. Are you looking for (1) the elastic mean free path, and/or (2) the inelastic mean free path of electrons moving in various solids? If you are, then you do know that in many cases, these values are dependent on the initial energy of the electrons, don't you? Zz.


text:
How to know what ACS table/field corr to Census 2010
I have a tool (geocoding, etc) that uses Census 2010 data and it puts out a report with '% Minority" and "Total Housing Units" -- how do I know what Census table originates this data ? And : What the corresponding table/field is in ACS ?
Stage: Active
Idea Details
Vote Activity
Similar Ideas [ 4 ]
High Risk/Vulnerable Individuals
Rank 1
6 Comments
Visualizing CFPB and Census Data
Rank 22
1 Comments
New Android App Census US
Rank 28
10 Comments
ACS Choropleth Maps
Rank 9
3 Comments
- The idea was posted


text:
We're sorry, this product is currently unavailable. Don't worry, we have more Altimeters in stock.
Contact Us for future availability.
The all-in-one GPS watch for explorers and athletes
The Suunto Ambit2 Sapphire HR GPS Altimeter Watch is the GPS for explorers and athletes; it's all you need for outdoor sports – navigation, weather conditions, speed, heart rate, altitude and features for running, biking and swimming. Thousands of Suunto Apps are available to add new functionalities to your watch. Packed in a glass fiber reinforced casing with a battery life of 16/50 hours, Suunto Ambit2 Sapphire HR is ready for any adventure.


text:
Can anyone recommend a shop that I could ship my bike/case to? I have a trip for early Sept. set and just looking for a good reference from riders in the area.
Thanks in advance,
Results 1 to 11 of 11
SEA OTTER CLASSICContestsHot Deals See All Hot Deals >>Latest Mountain Bike ArticlesMTBR on Facebook |


text:
Dixon-Rogers Funeral Home in Magnolia is the second longest operating business in LaRue County. (The LaRue County Herald News is the first.)
If you currently subscribe or have subscribed in the past to the LaRue County Herald, then simply find your account number on your mailing label and enter it below.
Click the question mark below to see where your account ID appears on your mailing label.
ZIP Code: | |


text:
Thread Tools |
I've been putting off having my wisdom teeth out for ages and it is feeling like the time to just get it done already.
I would probably do it sometime this summer when I'll have lots of family help on hand.
My one big concern is my son who would be 20-23 months by then and almost certainly still nursing. (I nursed my older kids well past age 2.5, little dude shows no sign of stopping and I'm more than happy to keep on keepin' on.)
What have other mamas done in similar situations? Pump and dump? Request/avoid certain anesthetics or medications?
Any experiences, advice or thoughts would be greatly appreciated!
"...there are two ways to meet life; you may refuse to care until indifference becomes a habit, a defensive armor, and you are safe - but bored. Or you can care greatly, live greatly, until life breaks you on its wheel. " - Dorothy Canfield Fisher
Sponsored Links | |||
Kellymom.com has a section on meds and nursing, & if you google Medications and Mother's Milk it will get you to Dr. Hale's website.
Thanks for the leads. I'll do some research. And it honestly never occurred to me to ask ahead of time which meds would be used, but that makes an awful lot of sense. Hard to give "informed consent" if you haven't had any time to process the information you're being given.
"...there are two ways to meet life; you may refuse to care until indifference becomes a habit, a defensive armor, and you are safe - but bored. Or you can care greatly, live greatly, until life breaks you on its wheel. " - Dorothy Canfield Fisher
I just got mine out 3 days ago! I have a EBF 5.5 mo old. Obviously I wish I could have waited longer but I had an active infection in the one I got extracted. I elected to do it with just local numbing injections (lidocaine with epinepherine) and it was FINE. I didn't feel it at all. I took 200c arnica and hypercium alternating every 2 hrs for 24 hours afterwards, and had to take one dose of 400mg ibuprofen, but just the eve of surgery. Since then just warm salt water rinses. I shopped around for an oral suregon who was willing to do it with the least meds possible. I didn't even take antibiotics (he irrigated out the infected tissue after the removal.) Sure, I am sore, but at least I didn't have any interruption with my nursling.
call infantrisk (google them for number), they are amazingly helpful.
Babies in Heaven... 9/04 2/05 3/11 4/11 6/11 11/11 2/12 (along with my tube) 9/14 1/15
I had my tonsils out when my LO was 16 months old. I fed her in the evening about 2hrs after surgery and then as normal from the following morning when I went home. I was on antibiotics for two weeks because the surgeon found pus under one of my tonsils and it wasn't a problem for us at all (although I know everyone is different).
Mother of two spectacular girls, born mid-2010 and late 2012
Thread Tools | |
Show Printable Version Show Printable Version
Email this Page Email this Page
Posting Rules | |


text:
Get job alerts for: Pphi Mirpurkhas jobs in Pakistan
You can cancel email alerts at any time.
Sending you activation email...
PPHI Jobs Mirpurkhas jobs Medical Officers January is a post from Mobile Pakistan Government Jobs Pakistan Technology News World News update PPHI Jobs Mirpurkhas jobs Medical Officers...
Please check your email
Your job alert is active
Get notified when there are new jobs for this search.
You can cancel alerts at any time.
Click the verification link in the email to start receiving your job alerts.


text:
Find a copy in the library
Finding libraries that hold this item...
Genre/Form: | Western films Feature films Video recordings for the hearing impaired Western Drama |
Material Type: | Videorecording |
Document Type: | Visual material |
All Authors / Contributors: |
William Alland; Andrew V McLaglen; Ric Hardman; James Stewart; Maureen O'Hara; Brian Keith; Universal Pictures (Firm) |
OCLC Number: | 52252841 |
Language Note: | Closed-captioned; soundtracks in English and French, subtitles in English, French or Spanish. |
Credits: | Producer, William Alland ; director, Andrew V. McLaglen ; director of photography, William H. Clothier ; music, Johnny Williams ; written by Ric Hardman. |
Cast: | James Stewart, Maureen O'Hara, Brian Keith. |
Description: | 1 videodisc (1 hr., 37 min.) : sd., col. ; 4 3/4 in. |
Details: | DVD; NTSC; region 1; anamorphic widescreen (aspect ratio 2.35:1); Dolby Digital mono. |
Series Title: | Universal western collection. |
A cowhand must deliver a Hereford bull to a Scottish cattle baron looking to create a new breed.
User-contributed reviews
Add a review and share your thoughts with other readers.
Be the first.
Add a review and share your thoughts with other readers.
Be the first.
Add tags for "The rare breed".
Be the first.


text:
NWAR: Trench Warfare
Detective Nwar gets his hands dirty for a political campaign.
4.42 / 5.00 2,897 ViewsGo! Go! Parody Rangers: THE MOVIE - Part 1 "You Splooge You Lose"
[Episode 1-3 - Runtime: 4 Minutes 49 Seconds]
Our heroes are back in action and kick off their summer with some TOTALLY EXTREME sports in their spare time...but as usual, all is not well. Lord Zet and his sinister crew have a new secret weapon, uncovered in the midst of a chance explosion that gives the villains a huge advantage! The Rangers must face what could be their most powerful and certainly most disgusting foe yet, but this time their powers alone may not be enough.
The entirety of Parody Rangers: THE MOVIE -Part 1- is about 14 minutes in length and will be split into three seperate pieces for submission to Newgrounds. Part 1's animation process began in May of 2008 and was continued and finished in early September, all the while sharpening my overall animation skill and ability. This movie is completely traditionally animated by myself and was made for Newgrounds promotion.
This film is NOT for kids and contains plenty of innapropriate (not to mention, immature) humor. If this sort of thing isn't up your alley or if you are offended by such content in any way, please feel free to give it a pass. Otherwise, to the fans who've followed along with Parody Rangers previously, I hope you enjoy it for what it is and have some fun!
Thanks everyone who tried to help with the submission problem: Marc Levy, Dave Smith and Bryon Beaubien, as well as my incredible voice cast and special guests for the movie, Kira for mastering the audio and several friends of mine for testing and giving feedback on this project. GO!
Aww...it can't be over at this point.
Out of the three segments, this was the funniest one. You got your fight scenes, you got plenty of comedy spread throughout like icing on a cake. Voice acting is top-notch as always, and animation is as smooth as ever.
For once, I'm alright with the duration (run-time) of this segment...I need to see how this ends, I've been a fan since the first Parody Rangers.
You are getting much better at your static animations, keep up the good work!
Also, good job to all the voice actors, how you never lose your touch still baffles me!
"Wrong! Fuck you! What time it is? That's Right. It's Morphin' Time!"
lol...way better then the other parts. can't wait for the last part of part 1 lol


text:
Waleed Said
London HemmingwayModel Male Chicago, Illinois, US My MM URL: http://www.modelmayhem.com/londonhemmingway
Mayhem # 2685526
About MeThanks for visiting my port! I am seeking paid modeling/acting opportunities, however, don't hesitate to message me about a TFCD shoot if you have a unique concept. My schedule is very busy, thus, I will take on paid assignments before all others. I am willing to travel, assuming my travel expenses are paid for.Friends |


text:
Shopping Cart
Savings of $2.10 (18% off).
Where would you go when your spirit longed to know God? To His feet of course: the feet where Mary sat; the feet that were nailed to a cross; where every knee shall bow.
You can read this item using any of the following Kobo apps and devices:


text:
Sneak into Russia the visa-free way
Comment on this storyAs my ship arrived in St Petersburg, I felt excited but nervous. It was my first visit to Russia and, like anyone who grew up during the Cold War, I remember when the Soviet Union was our greatest enemy.
But there was another reason to be worried: I was taking advantage of a new loophole that allows people to visit Russia without a visa ... as long as you arrive by ship.
Even though I had been told it was perfectly legal, I couldn't help feeling the KGB were going to arrest me at any moment. I didn't fancy being sent to a gulag just because my travel documents weren't in order. Of course, I needn't have worried - everything about my journey to Russia worked smoothly.
The city-break cruise to St Petersburg is run by the Russian St Peter Line. It is making the most of this little-noticed change that allows visa-free visits of up to 72 hours for passengers arriving by ship.
Why was I so keen to avoid the official paperwork? Well, a visa usually costs up to £210 (about R2 500) - and can take weeks to sort out. Using St Peter Line, visitors can decide at the last moment to hop on a regular sailing from Stockholm, Helsinki or Tallinn, and stay in Russia for up to two nights before sailing back. All you need is your passport.
St Peter offers cruises plus stays in stylish St Petersburg hotels.
I flew to Helsinki to join the line's Princess Maria, leaving the Finnish capital at 7pm and arriving in St Petersburg at 9.30am. I noted that my ship and her sister vessel, the Anastasia, were named after the daughters of the last Russian tsar, who were murdered by the Bolshevik secret police after the Revolution. This was a sign that the new Russia has revised its views on its own history.
Princess Maria carries vehicles and up to 1,600 passengers, and has a few cruise-ship features: an entertainment lounge, casino, tax-free shop, cinema, sauna and even a small swimming pool deep in the bowels of the ship. However, cabins are basic by cruise standards but plush compared to a ferry. Fortunately the prices are more like ferries too.
Many of the passengers on board were Russians returning from shopping trips to Finland. The women all wore heavy make-up while the men were thick-set, scruffy and often seemed the worse for wear. That's one good reason not to opt for the budget-price ticket - as it puts you in a four-berth cabin alongside three strangers.
On-board entertainment included a cabaret and Amazonian blondes in satin hot pants miming traditional balalaika tunes, while the buffet was an interesting mix of fresh seafood and local specialities, although they were mostly disgusting. Being Russia, there are, of course, bureaucratic restrictions. Part of the visa-free deal is that visitors must take an official bus tour. St Peter Line bypasses this restriction by using an "official" shuttle bus to take passengers from the dockside to the city centre.
Once in St Petersburg, there was so much to see that I felt 72 hours wasn't enough. I could have spent all that time in the Hermitage, the world's largest museum containing more than three million items.
I also loved wandering around the shops, bars, restaurants and cafes. In one shoe shop I found a fabulous string quartet serenading shoppers with Tchaikovsky.
The old orthodox churches were fascinating too. One was packed with worshippers listening to atmospheric chanting. In another I saw a collection of photographs of priests who had been murdered by the KGB. And, most typical of the new Russia, I popped inside another church to find noisy teenagers watching a gymnastics display.
I was having a great time but as I walked past a group of armed soldiers in greatcoats and fur hats, I tried not to catch their eyes. I didn't want them to ask to see my visa ...
St Peter Line (stpeterline.com) offers three sailings a week from Helsinki to St Petersburg, which can be taken along with one or two-night hotel packages. An additional sailing calls at Stockholm, Tallinn in Estonia and St Petersburg.
Prices start at £20 for a one-way crossing from Helsinki to St Petersburg in a shared cabin below the car deck. At the other end of the scale, a two-berth cabin on an upper deck costs £133.
St Peter Line hotel and cruise packages cost from £220 per person for two nights in St Petersburg. - Daily Mail
Get our new, free Travel newsletter - subscribe here...
Comment Guidelines
- Please read our comment guidelines.
- Login and register, if you haven' t already.
- Write your comment in the block below and click (Post As)
- Has a comment offended you? Hover your mouse over the comment and wait until a small triangle appears on the right-hand side. Click triangle () and select "Flag as inappropriate". Our moderators will take action if need be.
- Verified email addresses: All users on Independent Media news sites are now required to have a verified email address before being allowed to comment on articles. You are only required to verify your email address once to have full access to commenting on articles. For more information please read our comment guidelines


text:
NORTH VERNON, Ind.— Milford L., "Poochie" Smith, 79, of North Vernon, IN, passed away at 6:55 p.m. on Tuesday, January 21, 2014, at Jennings Healthcare Center in North Vernon, IN.
A funeral service will be held at 11:00 a.m. on Saturday, January 25, 2014, at Sawyer – Pickett Funeral & Cremation Service in North Vernon, IN. Rev. Don Morris will officiate. Visitation will be from 4:00 p.m. until 8:00 p.m. on Friday, January 24, 2014, at the funeral home. Burial will be at Vernon Cemetery.
Born September 26, 1934, in Harlan, KY, Milford was the son of the late Olin and Jewel Graybill Smith. He married Janice Fields on September 16, 1961. She survives.
Milford graduated from Harlan High School. He earned a B.S. in business education from Eastern Kentucky University, and a M.S. in education from Indiana University. He retired from Jennings County Schools after 35 years of teaching. He had been a member of Vernon Baptist Church. He had served as superintendent of North Vernon City Park for 18 years. He enjoyed playing pool, golf, wood working, UK basketball and watching his children and grandchildren play sports.
In addition to his wife, Janice, Milford is survived by a daughter, Lisa (Todd) Hearne of North Vernon; two sons, Brad (Traci) Smith of Evansville, IN, and Chad (Annie) Smith of North Vernon; sister, Irene (Glenn) Miller of Carnesville, GA; and five granddaughters, Lucy and Ellie Hearne, and Kelsey, Samantha and Madeline Smith.
He was preceded in death by his parents; sister, Mattie Ann Cole; and three brothers, Tommy, Al and Johnny Smith.
Memorials may be made through the funeral home to Vernon Baptist Church or Our Hospice of Jennings County.
Friends and family are invited to leave a message of condolence or light a candle in Milford's memory at www.sawyerfuneralservice.com.
The My Memorials Facebook app allows you to:


text:
v.2.180 rev.6
main page
Kimikiss Trading Figure Collection: Hoshino Yuumi
Share it with
Original (anime):
Reduce all
Character name: | |
Release date: | Late July, 2006 |
Figure type: | Trading Figure |
Material: | PVC, ABS |
Height: | 110 mm |
Manufacturer: | Wafudo Ganguten |
Series: | Kimikiss Trading Figure Collection |
Manufacturer price: | 630 ¥ |
Owners: | 0 |
There are 6 figure models in the series, the box comes with 8 random pieces.
There are 6 figure models in the series, the box comes with 8 random pieces.
These pictures were taken by Wafudo Ganguten or authorized person. Please visit manufacturer's home page in order to learn more. © 2006 ENTERBRAIN. All rights reserved.
Add external links
External links: none.
0 |
add a comment
Only registered users can post comments.
Please log in with your username and password or with the help of other services:
You can also create new account by filling out the form.


text:
March 12, 2014
Clint Jackson Devils Illustrated
Luke Kennard is one of the top scorers in the country in the class of 2015. His recruitment consists of many of the best blue-blood programs from across the country. Duke had their chance to host the coveted left-hander over the weekend and Devils Illustrated caught up with his father, Mark Kennard, this week to discuss the visit. ...More... To continue reading this article you must be a member. Sign Up Now!
Already a member? Click here to sign in


text:
Results 1 to 3 of 3
- 07-26-2014, 07:09 PM Thread Author #1
pdf app
Hi all,
I am so new at this. Ok I need an app where I can read and make notes on pdf files. I am most interested in making notes in the margins but not like with a little bubble or sticky notes but actually typing beaing able to see it there. Adobe Reader has that but it only allows you to do it horizontally. I need an app that would allow me to do that both vertically and horizontally. Plz help. Thank you.
Posted via Android Central App -
Re: pdf app
I use this... https://play.google.com/store/apps/d...android.reader.
They have a free one you can try out to see if it works for you .
Sent from my T-Mobile Note 3 using AC Forums.Sent from my T-Mobile Galaxy S6 (32 GB) using AC Forums. - 07-26-2014, 07:43 PM Thread Author #3
Similar Threads
App Available to send, receive SMS/phone calls on PC via Note 3?
By mattsmusic in forum AT&T Samsung Galaxy Note 3Replies: 1Last Post: 07-28-2014, 11:54 AM -
Gmail app problem
By drewbabe in forum Ask a QuestionReplies: 6Last Post: 07-27-2014, 07:29 AM -
Samsung tablet 3 some apps do not open
By stuffy52501 in forum Ask a QuestionReplies: 1Last Post: 07-26-2014, 06:00 PM -
"New Enrolment" app?
By AC Question in forum Ask a QuestionReplies: 3Last Post: 07-26-2014, 05:59 PM -
Gallery app
By d-ttrain in forum Ask a QuestionReplies: 1Last Post: 07-26-2014, 04:33 PM


text:
Check out this fantastic Hitman: Absolution 6K resolution stereographic panorama image
231d ago -
Joanne Harper created this fantastic spherical Hitman: Absolution 6K resolution stereographic pan... | PC
OzBoxLive Radio #096 - Games With Gold
363d ago -
Join Australian Microsoft Xbox MVP Mark along with Daniel as they discuss everything about The GA... | Xbox 360
Start Making Games for the PS4
Now - Want to design the next generation of video games? Start learning game design today. Click for more info on how to get started. | Promoted post
What if video games spoke?
542d ago -
Mona from Twinfinite.net wanted to know what video games would say to each other if they spoke! | Xbox 360
Checkpoint Reached #12
608d ago -
This week we talk about Dishonored The Brigmore Witches, Smite, Hitman Absolution, Max Payne 3, O... | Xbox 360
Ridiculous Moments In Hitman: Absolution
635d ago -
Here are a bunch of reasons to laugh at Hitman: Absolution, both intended and unintended by the g... | PC
PopBucket Podcast: Muffins For Life (Episode 11)
636d ago -
The latest podcast is here and Martyn, James, Michael and Zara discuss Mario & Luigi: Dream Team,... | PC
Four Months Later the Official Hitman: Absolution Companion App Arrives
744d ago -
Kotaku - It's all about timing in the companion app business. Some people might tell you that it'... | PC
Zero1Gaming Hitman: Absolution Episode 1
750d ago -
Paul Izod & Drew Pontikis shave their heads, don their red ties, get barcodes tattooed on their... | PC
rawDLC: Episode 113 – Be-Hindes you!
788d ago -
On this week's podcast Dave and Josh are joined by PC Powerplay's Daniel Hindes as the lads take... | Culture
Hitman: Absolution - Man Hitting 101
793d ago -
Eskimo Press: While the new Hitman game was received with mixed emotions from critics and fans al... | PC
ZPlay: Unboxing the Hitman Absolution: Deluxe Professional Edition
796d ago -
ZOMGPlay's 'recent' article of them unboxing the Hitman Absolution: Deluxe Professional Edition.... | Xbox 360
The Play Vault Podcast Episode 63: Another Brummie.
797d ago -
Play Vault:
"Hello and welcome to the Play Vault Podcast Episode 63. Join Jonmau5, Andrew and... | Xbox 360
Hitman Absolution G.R.I.N.D PLAY
799d ago -
G.R.I.N.D PLAY is our original video series which is hosted by Ross Mortimer, Ian Donaghue, Noel... | PS3
Blank Your Game Episode 30 – We are not Media
804d ago -
Hey gamers how have you been. Blank Your Game is back with new episode for you. We are down a man... | PC
JJ Abrams, Star Wars, Games, Tech and More on the Latest Skewedcast
807d ago -
Talk about a loaded show. Skewed and Reviewed look at new gaming Mice and hardware and roll into... | PC
Lautering Bytes Podcast - Ep. 37: LB Returns; Ni No Kuni & Corn Chowder
808d ago -
GameDynamo - "We've been playing all sorts of great stuff: The Walking Dead, Hitman: Absolution,... | PC
Hitman Absolution: The Ending of Hitman on Purist Difficulty | FTG
810d ago -
FTG Writes: Agent 47 deals with the head of the ICA, Benjamin Travis, and issues him his terminat... | Xbox 360
Hitman Absolution: Countdown Walkthrough (Purist, All Evidence, Silent Assassin) | FTG
813d ago -
FTG Writes: This is it, guys: the last few missions of Hitman Absolution! You finally come face t... | Xbox 360
Hitman Absolution: Absolution Walkthrough (Purist, All Evidence) | FTG
813d ago -
FTG Writes: The final disappointing mission for Hitman Absolution…and, boy, what a wet fart of a... | Xbox 360
Video Game Confidential Episode #60: To Infinity
819d ago -
Anthony and Chris are doing the 1-2 thing this week (Shout out to Daym Drops!) as Barry was tempo... | Xbox 360
Toukiden Kiwami (PS4) Review
Now - Drew slays plenty of demons in his latest review. | Promoted post
Hitman: Absolution Video Feature
820d ago -
Nick gets a barcode tattoo and slices it off for this Hitman: Absolution feature, the first Press... | PC
Hitman Absolution: Blackwater Park (Purist, All Evidence, Silent Assassin) | FTG Gameguide
822d ago -
FTG Writes: Strangely enough, there doesn't seem to be a way to get a FULL "Silent Assassin" rati... | Xbox 360
Hitman Absolution: Operation Sledgehammer (Purist, All Evidence) | FTG Gameguide
822d ago -
FTG Writes: Sorry, Sheriff Skurky, but it's time for you to end your reign as sheriff of Hope! W... | Xbox 360
How To Play Hitman Like An Idiot Versus Like A Professional, Explained In Glorious Live Action
827d ago -
Kotaku - Playing Hitman: Absolution professionally requires a lot of stealth and planning. You sc... | PC
CGPodcast Jan 04, 2013
833d ago -
This week on the C&G Podcast the crew talk about Sword and Sworcery for Android, Tomb Raider Mult... | Xbox 360
Page 1
Next page »


text:
M16B11 FPS-200 Spring Airsoft Assault Rifle
regular price: $25.00
Out of Stock
Ships Tomorrow!
5 Rating (6 Customer Reviews)
Similar Products
M16A3 FPS-200 Spring Airsoft Assault Rifle Package Deal (Mask and Free BBs)
Save: $45.05 (53%)M16A3 FPS-200 Spring Airsoft Assault Rifle
Save: $25.04 (63%)M16A3 FPS-200 Spring Airsoft Assault Rifle
Save: $14.04 (33%)M16A4 FPS-200 Spring Airsoft Assault Rifle
Save: $6.04 (19%)Clone Tokyo Marui VSR-10-W Super FPS-370 Spring Airsoft Sniper Rifle
Save: $15.95 (19%)AK-74 Force Gun FPS-220 Spring Airsoft Rifle
Save: $13.00 (45%)Tactical G-36A FPS-150 Spring Airsoft Rifle
Save: $32.00 (80%)AK-47 ZM93S FPS-280 Spring Airsoft Assault Rifle
Save: $25.77 (42%)M14 M160-B2 FPS-278 Spring Airsoft Sniper Rifle
Save: $55.14 (58%)Tactical G-36A FPS-150 Spring Airsoft Rifle Package Deal (Mask and Free BBs)
Save: $55.04 (61%)AK-47 721B Gold FPS-190 Spring Airsoft Rifle
Save: $19.00 (56%)Black Guard AK-47 FPS-200 Spring Airsoft Rifle
Save: $19.02 (54%)CX4 Storm FPS-235 Spring Airsoft Rifle
Save: $13.00 (45%)AK-47 YK48 FPS-200 Spring Airsoft Assault Rifle
Save: $25.04 (63%)Mini G030 FPS-275 Spring Airsoft Rifle
Save: $9.94 (36%)
Get ready for action with the Spring M16B11 Assault Rifle. This tricked out gun comes with a flashlight, silencer, gun strap, and safety glasses so you are good to join the action. You do not need to worry about running out of ammo because this gun comes with a spare magazine. And spring powered airsoft guns are perfect for beginners because of their ease of use and lack of part that can break. You don't need to worry about running out of batteries or green gas when in the heat of battle so that's one less thing you need to worry about.
This is a Spring Airsoft Rifle, which means it's powered by a spring and must be cocked for each shot. It's fast, clean, inexpensive and easily maintained; it requires no gas or batteries to operate. Also, Spring Airsoft Guns are the toughest, most durable of all Airsoft Guns, because they're made with few breakable pieces. If you're looking for a fun, reliable Airsoft Rifle that'll look great and perform even better, you've come to the right place. You must be 18 years of age or older to purchase this Airsoft gun.
- Spring Powered
- Collapsible Stock
- Black Finish
- Full Stock
- Hop Up System
- Spring M16B11 Assault Rifle Silencer, Flashlight Airsoft Gun Collapsible Stock
- Silencer
- Flashlight
- 2 Magazines
- Safety Glasses
- Strap
- Gun Length: 24 Inches
Name: BaGGz
Date: May 14, 2012
and did gun automatic or no..?
Name: BaGGz
Date: May 14, 2012
Did this gun have metal body..? answer me who know..!
Name: greg
Date: May 11, 2012
bought it it looks good get it if your a m16 lover
Name: REVOLVER_DUDE
Date: May 09, 2012
My friend got this gun and it's BO$$ it's accurate,has high fps, and takes 6mm BB'S. Buy it its worth it! I'm gonna order it soon.
Name: M16b11 ?
Date: April 30, 2012
I don't have this gun yet I'm sure I'm gonna get it but I'm wanna c if it has a hop up
Name: Andy
Date: April 22, 2012
Please Sign In or Register to leave a Product Review.
Safe & Secure online shopping guaranteed.
Call our Customer Service at 818-675-9000 if you find a lower price on any of our items we'll match it.*
© 1995-2015, All material on this site is copyrighted by HobbyTron.com or the product itself.


text:
Services in Kensington Market
Bikes on Wheels / Bike Shops
Bikes on Wheels is a good option when you're looking for a slick urban commuter bike or accessories for tooling around town. Operating out of Kensington Market for over 20...
Paradise Bound / Music Store
Paradise Bound is a Kensington Market music store that also sells Japanese art. The vinyl sits in low bins made from old wine and port crates - a truly creative...
Paul's Boutique / Musical Instruments
Paul's Boutique is the sort of place you go to equip your prog-folk math rock jam band. The ghost of Church St. pawn shop legend Richmond's Trading Post has returned...
Pearl Harbor Gift Shop / Tattoo Parlours
Pearl Harbor Gift Shop draws inspiration from Japanese and American WWII-era art and design. Officially open since May 1st, it's a light, open and inspiring space to have one of...
Pipo Tattoo Studio / Tattoo Parlours
Pipo Tattoo Studio has been inking people up from its Kensington Market location since 2011. They specialize in bio mechanical, black and grey, and colour tattoos....
Six String Garage / Musical Instruments
Six String Garage opened in Parkdale in May. The shop sells a modest selection of mostly affordable instruments up front, services and builds guitars in the back, and hosts classes...
Find Services in Other Neighbourhoods
- Annex
- Avenue and Lawrence
- Baldwin Village
- Bayview and Leaside
- Beaches
- Bloor West Village
- Bloorcourt
- Bloordale Village
- Cabbagetown
- Castlefield Design District
- Chinatown
- Church Wellesley Village
- Corktown
- Corso Italia
- Danforth
- Distillery District
- Don Mills
- Dundas West
- East Chinatown
- East York
- Eglinton West
- Etobicoke
- Financial District
- Forest Hill Village
- Harbourfront
- High Park
- Junction
- Junction Triangle
- Kensington Market
- King East
- King West
- Koreatown
- Leslieville
- Liberty Village
- Little India
- Little Italy
- Markham
- Mississauga
- Mount Pleasant
- North York
- Ossington
- Other
- Pape Village
- Parkdale
- Port Lands
- Queen West
- Richmond Hill
- Riverside
- Roncesvalles Village
- Rosedale
- Scarborough
- St. Clair West
- St. Lawrence Market
- Upper Beaches
- West Queen West
- Weston-Mount Dennis
- Woodbridge
- Yonge & Bloor
- Yonge & College
- Yonge & Dundas
- Yonge & Eglinton
- Yonge & Lawrence
- Yonge & St. Clair
- Yonge & Wellesley
- Yorkville


text: When studying a new language a student will always benefit from a knowledgeable and enthusiastic teacher. Karen Moore brings nearly fifteen years of experience in the Latin classroom to the Latin Alive! 1 DVD & CD Set, which features her careful and engaging teaching. Karen's love for Latin is unmistakable and she truly makes Latin come alive as she teaches through each chapter of the Latin Alive! Book 1 text. Each weekly lesson is an average of thirty minutes bringing the total video time to over fifteen hours. The DVD set is highly recommended for homeschoolers or students in independent study. The set also features an audio CD of the Unit Review Latin Readings, so that students can practice proper pronunciation and accent. Buying for a school? The Latin Alive! 1 DVD & CD Set is a great tool for the classroom! It can be used as: *A helpful resource for new Latin teachers both for themselves and for the class *A substitute teacher when the regular teacher is away *A library item helpful for new students or for students needing extra review Item No: 299577 Vendor: Classical Academic Press |


text:
Bottom paint recommendation...
View Single Post
Telstar 28
Join Date: Mar 2006
Location: New England
Posts: 43,290
Thanks: 0
Thanked 14 Times in 12 Posts
Rep Power:
I would be wary of putting anything over an unknown bottom paint. That can be a very expensive mistake, as if the two are not compatible, your new coating of bottom paint may just slough off.
Originally Posted by
This is all new to me. This will be my first spring prep and launch as I got the boat last summer. I have no idea what kind of paint the prior owner used. Can someone explain more about the various kinds of bottom paint. My marina is offering Aquagaurd a water based claiming it can go on right over existing paint. I went to
and did not find out much. I got the spring boat prep from west marine and see a whole bunch of different paints ranging from $109 to $250 some say ablative others do not.
Also the prior owner did this himself before he sold me the boat. (I do not know if he did it right) Is this something I can do? Do I need to sand the bottom first. The boat was power washed when put up for the winter. I only noiticed 1 barnacle Most of the paint is still on except around the bottom of the keel and near the bow at the water line where the mooring ball would hit the boat.
How much paint do I need? I have a 28 foot with a 4.5 foot draft.
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
Telstar 28
New England
You know what the first rule of sailing is? ...Love. You can learn all the math in the 'verse, but you take
a boat to the sea you don't love, she'll shake you off just as sure as the turning of the worlds. Love keeps
her going when she oughta fall down, tells you she's hurting 'fore she keens. Makes her a home.
Cpt. Mal Reynolds, Serenity
If you're new to the Sailnet Forums... please read this
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
StillDON'T READ THAT POST AGAIN.
View Public Profile
Send a private message to sailingdog
Find all posts by sailingdog


text:
I love this rug! I got it for under the kitchen table. It goes over wall-to-wall carpet of a light cream color. It draws your attention and sets a pleasant mood for the decor.
- How did the color on site compare with the actual product? The colors were just as shown/described.
- Please tell us about the quality of the product. Very nice, just the right thickness, great feel on the feet...
- How accurate was the on site description of the product? Very accurate: right down to the edge weaving
This rug brightened a very dark room in my basement studio. I absolutely love it--fresh and fun. I would buy it again in a heartbeat.
the colors are rich in tone..much nicer than picture
It is great deal, and my roommate and I loved it. It arrived quicker than we expected, and it also has great quality.
This rug looks exactly like it does online! The colors are slightly less vivid, which I was expecting, but otherwise, it's exactly as described. I bought it to put in front of the couch in the living room, and it'll be great there, bringing some great colors and a nice pattern into the room. The pile was shorter cut, but soft, so it feel great on the feet, and shouldn't be difficult to vacuum. Overall, it's exactly what I was looking for, and at such a great price too!


text:
Artichoke Basille's Pizza on 14th St
Mar 27, 2008 by keith in Manhattan
Niko's Trapezi A Greek Taverna Long Branch NJ
Apr 17, 2009 by shabbystorm in New Jersey
Jaded new yorker..
Jan 23, 2011 by mindy in Quebec (inc. Montreal)
Crazies Ice Cream Rumson NJ
Sep 01, 2009 by shabbystorm in New Jersey
Favorite Cheese?
Jan 07, 2007 by soypower in Cheese
Help! Why isn't there a single good chinese delivery restaurant in the East Village?
Mar 27, 2010 by filmbomb in Manhattan
Feb 06, 2009 by devra in Manhattan
Best Black & Whites
Mar 19, 2010 by rifkind81 in Manhattan
Best coffee in New York City?
Jul 05, 2008 by skpow in Manhattan
The best homemade ice cream
Aug 02, 2006 by ahoward in New Jersey
Caputo's Bakery in Long Branch
Dec 04, 2007 by radiogrl1 in New Jersey
Anything new in Monmouth County?
Apr 02, 2009 by Angelina in New Jersey
Royal thai???
Apr 17, 2009 by mindy in Mid-Atlantic
Chowhoundish places around Long Branch?
Mar 21, 2009 by MercerChow in New Jersey
Favorite Luncheonette in Monmouth County
Dec 28, 2008 by equal_Mark in Mid-Atlantic
Help..im not in ny, now what?
Dec 20, 2008 by mindy in General South Archive
Egg Cream
Aug 18, 2008 by drbelfer in Manhattan
Tuma persa.."lost tuma" cheese
May 03, 2007 by mindy in Manhattan
Croissants in nyc.
Aug 16, 2008 by chambolle59 in Manhattan
Waffles or bust...
Jul 13, 2008 by mindy in Manhattan
West coast style frozen yogurt
Apr 23, 2008 by papabravas in Manhattan
Flurt Frozen Yogurt
Jul 30, 2007 by jackieparis in Manhattan
Shanghai next week???
Mar 29, 2008 by mindy in China & Southeast Asia
Joey k's????
Mar 22, 2008 by mindy in New Orleans
Best tuna fish salad in nyc?
Jul 14, 2007 by peppermintpatty in Manhattan


text:
WOW! Jamie Grace Shares Her Testimony of Overcoming Tourette Syndrome! from djbeats on GodTube.
Simply confirm your registered email address below and click "Reset Password." We will immediately email you a link back to the site where you can enter a new password for this account.
Information sent through this form is never retained or shared.


text:
A double room in a Completely Refurbished Property in West Kensington
A professional person is needed to share with 2 females this newly completely refurbished well presented 3 bed property spread over 2 floors. It has a exceptional internal space, with ample storage, airy, new carpet and flooring. You would only pay


text:
With the long-awaited season five premier of FX's vulgarity-soaked laugh-fest, Archer, upon us (January 13th), what better way to whet the anticipation of both fan and neophyte alike than with some of the best quotes from the show's superbly voiced characters. Now that you're done with H.R., it's time to meet the boss.
Malory Archer. It's fitting that the least maternal matriarch since Arrested Development's Lucille Bluth share the scrumptiously noxious deliveries of Jessica Walters. As head of ISIS, she bears the heavy burden of leadership. And she's not afraid to spread around the occupational misery through unreasonable demands, searing barbs and some light racism. And the list of damning evidence for how her super-spy son turned out the way he has continues to mount in increasingly horrible ways. Perhaps that's why she's one of the best characters on TV.
10. "If I wanted to sit around all day going nowhere, I'd be a teacher!" One of Malory's defining traits is her classist elitism, which she wields like a cudgel when she's even mildly inconvenienced. 9. "Immigrants! That's how they do, you know—just drive around listening to raps and shooting all the jobs." Classist and xenophobic. 8. "Oh, like you'd recognize a vegetable that wasn't wrapped in a Monte Cristo sandwich." At least she never misses an opportunity to comment on an employee's appearance. 7. "You're not fit to be Queen of name a place." She's not wrong about the unreliable, glue-eating Cheryl, but she'd happily step on anyone's dreams. 6. "My third biggest fear: He brings home a whore and says, 'We're married!' Oh, and the whore has bangs." The only thing Malory is worse at than being a supportive, encouraging mother to her son is Uh, I'll have to get back to you on that one.


text:
Travelling to Buenos Aires
Trip Start
Jan 04, 2014
Trip End
Feb 04, 2015
I arrived in São Paulo, Brazil at 06:00 and waited for my connecting flight which left at 8:35.
Landed in buenos aires at 11:30am!!
Got a taxi pick up with an Argentinian called roman.
Arrived at Art Factory hostel 1pm.


text:
Selling all my focus performance goodies!
I no longer own my SVT Focus so all the goodies i had for it must go. All prices are plus paypal fees and plus shipping. All prices are also negotiable. If the negotiated price is right then Ill ignore shipping cost. Im trying to buy coilovers for my new car so everything must go! If more detailed images are requested i can send them via email or text message. Also if anyone has any questions i can be contacted easiest via email or text message.
Seller: Ryan Brown (sbsvt) location: Newnan, GA payment method: paypal only contact: email@example.com cell-404-754-6815 or pm Clutch is a old style clutchmasters fx100 for an svt. disc is about half life and the flywheel is aluminum. the slave cylinder is a brand new.never used LUK brand. $375obo plus shipping and paypal fees. ORP-sold plug wires are Taylor performance thundervolt 8.2mm-sold focus central throttle body-sold resonated front section for a trubendz catback. $60obo plus shipping and paypal fees. AEM uego wideband-sold authentic ford/Hella mach hid headlamps-sold ford edge rear wiper blade, arm, and nut cap.-sold focus central short antenna-sold http://i774.photobucket.com/albums/y...0-08102934.jpg http://i774.photobucket.com/albums/y...0-08103747.jpg http://i774.photobucket.com/albums/y...0-08110818.jpg http://i774.photobucket.com/albums/y...0-08103130.jpg http://i774.photobucket.com/albums/y...0-08103331.jpg |
dibs on spark plug wires and antenna.
already a pending sale on them so you are next in line if the sale falls through.
Wish I had the cash for that orp!
How hard are these headlights to crack open, and paint?
Also how much is your time worth to do that? hehe, im terrified to open those guys open. |
is the ORP stainless or Aluminized?
hardtech-its a very time consuming task that i definitely don't want to tackle again which is why only one is done lol
aliasjack-i believe it is aluminized but it has high temp paint on it |
orp and wipe!
I so hope you will still have the orp and rear wiper in a week or two.
pm me when you get your funds up to ssee if i still have them
Guess i'm a noob, but it that ORP perhaps the thing that replaces the CAT?
All times are GMT -5. The time now is 07:31 PM. |


text:
Forgot Password? | Not a User? Sign up
Your browser does not support iframes.
The K-9 enforcement team answers calls, conducts driver's license checkpoints and assists with other agencies when K-9s are needed.
From April 12-18, K-9 deputies answered 27 calls, wrote six citations and made six drug arrests. K-9 deputies patrolled the following communities: Carolina Shores, Croft Pointe, Magnolia Greens, Waterford, Brunswick Forest, The Farm and Seashore Hills.
The following suspects were charged:
•Kevin Ronette Stanley, 28, of 301 Marlowtown Road, Calabash; charged with flee to elude arrest.
Brunswick County Sheriff's deputies investigated the following incidents last week, which are taken directly from sheriff's office incident reports:
•Larceny of gas on Hickman Road in Calabash; suspect stole fuel from victim's vehicle.
•Larceny on Flagship Avenue in Southport; suspect stole victim's vehicle from residence.
•Larceny on Ocean Highway in Winnabow; suspect stole watch from a display case at an antique store.
Troopers and EMTs responded to the scene of a wreck on N.C. 130 near the Ash community Tuesday afternoon. According to Shallotte Fire Chief Paul Dunwell, one female driver was transported to the hospital. Dunwell said the driver stopped her car for a braking school bus, but the driver of the vehicle behind her did not stop and hit her car, sending it sailing into the nearby ditch. No one in the school bus was injured.
The Ocean Isle Beach Police Department investigated the following incidents last week. All information is taken directly from police incident reports.
•Jose C. Martinez, 28, of Ocean Isle Beach; charged with disorderly conduct on East Second Street.
•Forging/uttering at First Bank on Causeway Drive; unknown subject tried to pass a stolen check.
•Breaking and entering, larceny and property damage on Monroe Street; suspect damaged door casing, locks and locket and took a flat screen TV.
SUNSET BEACH—Charges are pending against three South Carolina residents in connection with two break-ins and thefts reported in March in Sea Trail.
Sunset Beach Deputy Chief Steve Smith said Tuesday detective Woody Dunn is going to charge the suspects with felony breaking and entering and felony larceny related to the incidents reported March 7 and March 8 at a Sea Trail restaurant and real estate office.
Shallotte police charged the following people and investigated following incidents last week. All information is taken directly from police reports.
•Police charged James Joseph Winter, 37, of 2914 Bay Village Road, Shallotte, with breaking and entering and larceny. He was taken to the Brunswick County Detention Center.
•Police charged Billy Vester Jones Jr., 35, of 269 Union School Road, Shallotte, with driving while impaired and driving while license revoked. He was taken to the Brunswick County Detention Center on a $500 secured bond.
The Aggressive Criminal Enforcement (ACE) Team is a support unit, whose primary functions are traffic enforcement and assisting in the apprehension of drug traffickers in the county. The ACE team conducts driving while impaired and driver's license checkpoints, as well as street-level investigations on controlled substances.
Brunswick County Sheriff's detectives are searching for the suspect or suspects involved in a breaking and entering to a Supply business.
According to Brunswick County Sheriff's Office Spokesperson Sgt. April Stanley, R&R Seafood, 3 Fisherman Road, Supply, was broken into between 3 p.m. March 25 and 10 a.m. March 26. A significant amount of cash was stolen from the business.
On Wednesday, April 14, agents with the Brunswick County Sheriff's Office Drug Enforcement Unit arrested a brother and sister for allegedly operating a prescription pill trafficking operation.
After a one-day investigation brought on by community complaints, drug agents secured a search warrant for a home at 7013 Pine Cliff Drive in Leland, Sgt. Steve Lanier said.
Three volunteer firefighters—two who volunteered with Supply Fire Department and one who volunteered with Civietown Fire Department—have been charged with setting woods fires.
According to Brunswick County Sheriff's Office Sgt. Steve Mason, Danny Lee Russell and Bobby Lee Harris were arrested for allegedly setting two woods fires Monday morning.
A third suspect, Miranda Garland, was arrested Monday afternoon, Mason said.