Tired Of Virus & Trojans Being Embeded

[ChiTown]

How about some feedback on a subject..
What does everyone think about putting an end to all the asses
laying Trojans and Virus programs on both the surfers and Webmasters.
Sites like h**p://w*w.sex4it.com where Shemp
won't even list a Gallery with their recip on it..
They're spreading xpl.wmf, look it up in Google Search..
This WMF will download the file cj.exe from
h--p://69.50.183.34 Which is also where
the exploit itself is..

Before I forget block all URL's that end with (adult.wmf, default.wmf,
digital.wmf, foto.wmf, menu.mwf, test1.wmf, x1.wmf, v1.wmf, z1.mwf, xpl.wmf

69.50.183.34 is that that fuckin Russian PAVEL
from InterCage which is also ATRIVO.COM.. Actually it's Atrivo Technologies
Look up ATRIVO or Atrivo Technologies in Google search

Most of the links and content on sex4it.com are HGs for Wegcash,
they aren't the ones behind it like Gammacash was with the XXXtoolbar
BUT if they want to let an Affil of theirs use Trojans we should
boycott or BL anything with their links on it..
They should be notified an affil of theirs is using Trojans and if they
don't dump them they're a part of it and we should BLed also.

Also when I get time later tonight I'm going to go back to sex4it.com
and copy the TGP Trades on the page as they probably are using the
exploit also, if they're not they should be notified they're linking a
Trojan spreading TGP. If they continue to keep them as a TGP Trade
they also should be BLed..

If we got together and Blacklisted all these sites that ruin surfers puters
and our Bizzzz besides infect our servers and puters we could put a major
kink in all of it..
I'm going to post this on other boards also............
Anyone having a site that you think is embedding something post a link
for me but DON'T go there yourself.
I know how to find what's on the page without getting it, and if I do
get it I know how to get rid of it..

Anyway what's your view on this??

[cd34]

Unless you know that they put it there maliciously, the iframe code that they are running is code that we have typically seen from compromised FTP accounts. In fact, it contains the same counter as the code that we removed from two client sites this weekend.

[ChiTown]

Originally Posted by cd34

Unless you know that they put it there maliciously, the iframe code that they are running is code that we have typically seen from compromised FTP accounts. In fact, it contains the same counter as the code that we removed from two client sites this weekend.

It's been there for quite awhile, email him and ask him..Besides it's a Russian register and the embeded link is from the biggest Russian Trojan site on the net ATRIVO.COM, like I mentioned check it in Google Search..

[DJilla]

Hmm, interesting. I agree with the idea that there should be some kind of broad based "suspicious" list or something that people could check out for themselves.

[Jollyperv]

I was looking around for linktrades the other day, browsing linklists and clicking through to their trades to check out who people were linking to....I don't think I even clicked 10 links before some fucker's hub page or something tryed to install a virus. I have to restart every time this shit happens. Seems it's not confined to tgps, this shit is all over the place, even mainstream oriented sites are doing this bullshit.

[Papa]

Thos fucking assholes are ruining the internet.

[j3sUS183]

Originally Posted by Papa

Thos fucking assholes are ruining the internet.

Sad but true

[xcitecash]

Apparantly it happens.....we just got hit but all ok now